last executing test programs:

25.217896957s ago: executing program 4 (id=1179):
r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8)
mkdir(&(0x7f0000000140)='./control\x00', 0x0)
close(r0)
r1 = inotify_init1(0x0)
fcntl$setstatus(r0, 0x4, 0x2c00)
r2 = gettid()
fcntl$setown(r0, 0x8, r2)
fcntl$setsig(r1, 0xa, 0xe)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8)
inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xf974a457bb636ff6}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10)
rmdir(&(0x7f0000000100)='./control\x00')

24.994229455s ago: executing program 4 (id=1180):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x10)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001d40)=""/4090, 0xffa}], 0x1}, 0xfffffffe}], 0x1, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
pipe(&(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
close(r3)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r4, &(0x7f00000001c0)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='p'], 0x70}}], 0x1, 0x2000c044)
write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r1, 0x0, r3, 0x0, 0x7151, 0x0)

23.922943833s ago: executing program 4 (id=1183):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0xffe7}], 0x1, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @dev}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@rr={0x7, 0x3, 0x8b}, @noop]}}}], 0x38}, 0x0)

23.683449283s ago: executing program 4 (id=1186):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10)
setpriority(0x2, 0x0, 0xffffffff00000001)

23.576084502s ago: executing program 4 (id=1188):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000b50901000000001826000000f9ffffff180100002020702500000000802020207b9a00fe00000000bda9f9ff0000000037010000f8ffffffb702000008000000b70300000000000004000000060000002da0000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

23.342317531s ago: executing program 2 (id=1191):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0x40047451, 0x2000000c)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

23.341329981s ago: executing program 4 (id=1192):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10)
r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802)
write$evdev(r2, &(0x7f0000000000), 0x100000008)
ioctl$FAT_IOCTL_SET_ATTRIBUTES(r2, 0x40047211, 0x0)

23.050438645s ago: executing program 2 (id=1193):
sched_setscheduler(0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xf, 0x4, 0x8, 0x63b2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x20000}, 0x48)

22.86803728s ago: executing program 2 (id=1196):
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180))
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x8, 0x4, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000063019b000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

22.570319734s ago: executing program 2 (id=1200):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000069c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5511, &(0x7f0000006b80)="$eJzs3E1rY9UfB/CTPs7Tf/5FXLibC4PQwiQ0fRh0V3UGH7BD8WHhStMkDZlJckuTprUrFy7Fhe9EFFy59DW4cO1OXCjuhJHccypTH0Bp2tjp5wO333tPTn73nEtpOfeGBODSWsh++akUboarIYTpEMKNEIr9UtoKGzGeCyHcCiFMPbGVUvvvDXMhhGshhJuj4rFmKb302Z3h7fUf3/j562/nZ65//tV3k5s1MGnPhxC6u3H/oBszb8V8mNprw3aR3bVhyvhC91E6zmMeNLeLCge14361IldbsX++u98f5U6nVh9lq71TtO/24gn7w9ZxneIND2t7xXGjuV1ku58X2TqK4zo8in/bjvqDWKeR6n1YlA+DwXHG9uZhM85n91GR9d4gtce6eaN5OMphynS6UM87jWIc26e50v9tb7Z7+4fZsLnXb+e9bL1SfaFSvVuu7uWN5qC5Vq51G3fXssVWZ9StPGjWuhutPG91mpV63l3KFlv1erlazRbvNbfbtV5WrVZWK8vl9aW0dyd79cG7WaeRLY7y5XZvf9Du9LOdfC+L71jKViqrLy5lt6vZ25tb2dZb9+9vbr3z/r33Hry0+forqdOfhpUtriyvrJSry+WV6tLFnf/of/2/mv/HadBjnD+cSmnSAwC4eKz/gUm46Ov/YP0/Ftb/l3b+j5PTXUAuN+t/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBL6/vZL14rdhbi8fXU/r/U9Ew6LoUQpkIIj//CdJg7UXM61Zn9m/6zfxjDN6VQVBidYz5t10IIG2n79f9nfRUAAADg6fXlR7c+jav1+GNh0gPiPMWbNlM3PhhTvVIIYXbhhzFUCelmU3j29KOKRr/fM+FwTNWKG1hXxlQs3nKbGVe1f2T6RFx5Ikoxpo57zp3ruAAAgLN0ciVwvqsQAAAAztMnkx4Ak1E8aU2fxU+P+eZjpAeCV08cAQAAABdQadIDAAAAAM5csf73/X8AAADwdIvf/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAbO3eTkzoUBQD4tND3eD9GYpy7FWewDJfg0KFhKywBt+AGWAPOXIIBQ3tRMRhM+hfJ9yXt5TbN4ZTQwTm3KQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG16KhbTh/urUd046009zVwNAAAAcMiqWEzLD+Nq/i8dP0uHLtI8i4g8Ig7V7oP4tRdzkOIUX5xffMrhMaKMsP2O32n7GxHXaXs5b/tXAAAAgNO1nM0nVbVe7cZ9J0SXqqZN/v+moXhZRBTj54ai5dvd5bdO3RzvD23/38O4q59WqWxg1X5kZqdsuQ2binbcIN3ub8Pow5BVQ95dOgAAQFf2K4EOqxAAAAA6dtt3AvQji91S5m4tuHzy/n1B8M/eDAAAAPiBsr4TAAAAAFpX1v/e/wcAAACnrXr/HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG1aFYvpcjaf1I2z3tTTzNUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvLI/7ygMw2AQBjeJ8uqELuD739Is2K1bNzMg+Pi3EgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAlcfx8jzj1ZjJNnqdSd49rySfTo1vp8avc+OfZKy7fwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwsz8vKRACQRAFc8b/Tvr+h5UEPYMIEdDwqKIWDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfNHvfvk/MTXOJHOnjaXjkWTtqrF11dh70Dh6MN7+DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwsXP/vnFTcQDAv2efr7SACAFlCEJUYoCFptfS0pUBFDHwJyBF6bUErvxoM9CqQsrChjJ3QTAihAQKW/+Hzq3UpWwdMhSJiQFkn528HpU4WtW+Np+P9Py+thy/73OiKF8/5wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABo7L67H+flZmESZ/Wxm/eurpf9ram+dH379nLZyrjXZtJPhlfTnd5Sd4kAAABwcORNfR8xiGJntQyyhar+L5pzypr/++cncVPPT9f9Td/U/mX77de7L+8NtDAZp7zouY3x6Pi/U+k/xmnOtRf+84x+deerZy959Q3JPth6abeo7mfv2xs33htU4aE2sgUAHsaxpq+D5u+hsh92mRgAB0Y/Kbzv1PV/vtBtTgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABtGGzFs03ci4jl/n5cunXv6nrVT+1f37693LTT165tp9csL1FExLmN8eh4WxN5Aly6fOXTtfF4dLH94LWI6G70OvhohnMiusxQ8KhBVv+sz/ZVRyOi+5y7Dzr+xQQAwFOnqFtZ198pdlbLY73FiL9/uL/+fyOJI63/p/q0/r/78emb6Vhp/T9sbYbzb2Xzwhcrly5feWvjwtr50fnRZ2+fGL4zPHnm1KkzK9WzkhVPTAAAAHg0g7ql9X+2GLE7tf5/JIljxvr/y++GX6dj5er/B9pf9Os6EwAAgIPtxaN//tF7wPHeYBBfrW1uXhxOtnv7JybbDlL93w7VLa3/88WuswIAAADasLvVu2/9/2wSx4zr/8/9+MrP6TXziDhcr/8fW/98fLa96XTkr5nOauPfiR/7VAEAAJhrh+uWrv8X1fv/2d4rD1lEvPn6JK4/BnCm+j9//5uf0rHS9/9PtjfFuZQtTe5H1S9F9Je6zggAAICn2TN1K4v934ud1U9+OfLhwPv/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG37JwAA//9VakSc")
r0 = openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f00000002c0)='y', 0x1}], 0x1, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x7}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
r6 = getuid()
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000004c0)={{{@in=@remote, @in=@rand_addr=0x64010100, 0x4e24, 0xbe, 0x4e24, 0x8, 0x2, 0xe0, 0x20, 0x8, 0x0, r6}, {0x10, 0x800, 0x4, 0x80000000, 0x4, 0x7, 0x200, 0xfffffffffffffff8}, {0x8, 0x8, 0xdf62, 0x1}, 0x0, 0x6e6bb4, 0x0, 0x1, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x1c}, 0x4d6, 0x6c}, 0xa, @in6=@private0, 0x3500, 0x1, 0x2, 0x1, 0xc33, 0x5, 0x2}}, 0xe8)

16.582015877s ago: executing program 2 (id=1220):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0))
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x25, 0x5586, &(0x7f00000079c0)="$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")
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1], 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x14, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffff3}, 0x90)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})

15.241464727s ago: executing program 2 (id=1224):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000500)='fdb_delete\x00', r3}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r4}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"})

14.332227952s ago: executing program 3 (id=1231):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x17, 0x3, &(0x7f0000000080)=@framed, 0x0}, 0x90)
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, 0x0, &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = inotify_init1(0x0)
fcntl$setown(r0, 0x8, 0xffffffffffffffff)
fcntl$getownex(r0, 0x10, &(0x7f0000000380))
unshare(0x68040200)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, 0x0, 0x0)
r1 = socket$phonet(0x23, 0x2, 0x1)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
close(r1)

13.356124822s ago: executing program 3 (id=1232):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000002, &(0x7f0000000080), 0x1, 0x53c, &(0x7f00000025c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0)
getitimer(0x0, &(0x7f0000000180))
inotify_init1(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58)
r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x500, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000200)={@local})
r4 = accept$alg(r2, 0x0, 0x0)
r5 = dup(r4)
r6 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0)
process_vm_readv(0x0, &(0x7f0000008400)=[{0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f00000005c0)={@mcast1, @mcast2, @private0, 0x8, 0x6})
ptrace$ARCH_GET_UNTAG_MASK(0x1e, 0x0, &(0x7f0000000140), 0x4001)
ftruncate(r6, 0x200004)
sendfile(r5, r6, 0x0, 0x80001d00c0d1)
setsockopt(r5, 0x1, 0x20, &(0x7f0000000040)="c04bfa0a", 0x4)
r7 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f00000001c0)={r5, 0x0, 0x0, 0xfffffffff0000000})
read(r7, &(0x7f00000003c0)=""/124, 0x7c)

12.349743854s ago: executing program 3 (id=1233):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2810000, &(0x7f0000000440)={[{@errors_continue}, {@noquota}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@jqfmt_vfsv1}, {@block_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@noquota}, {@nouser_xattr}, {@delalloc}, {@user_xattr}, {@quota}]}, 0x1, 0x562, &(0x7f0000001080)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
open(0x0, 0x4100, 0x0)
rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8)
r0 = gettid()
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000340)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000280)="6e2e80cf70f09b40739bafdab1d4b1e0b0f143efd7ebd10cc3071b4e5588b020b2acc5f9aaf14921f8280ae12e4cf6cddbed04fc25dfd1ac291ce3e246e1dd042c220fa8c7fe56d50a9b0622b7f55aaeac3b0db60650667ec5f6faeda2a142d3fd1637425d3025b150cc253d3b21912a91e728cb2ab800a20cc5d3187a5f52bcf565d2bb935ca0e4dcd050dd12cdb3d21801ba1ac509afe77bfb984f3dfc929da4e1d3f6d7197856036d6aa22c7c7642", &(0x7f00000000c0)=""/167}, 0x6a)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ptrace$getenv(0x4201, r0, 0x0, 0x0)
socket$packet(0x11, 0x0, 0x300)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000180)=0x1, 0x4)
getsockopt$inet_int(r1, 0x0, 0x12, 0x0, &(0x7f00000000c0))

10.776140214s ago: executing program 3 (id=1236):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x3e, 0x51b, &(0x7f0000000100)="$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")
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@ipv6_newrule={0x30, 0x20, 0x1, 0x0, 0x0, {0xa, 0x80}, [@FRA_DST={0x14, 0x1, @loopback}]}, 0x30}}, 0x0)
r1 = socket$igmp6(0xa, 0x3, 0x2)
sendmmsg$inet6(r1, &(0x7f0000005180)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c, 0x0}}], 0x2, 0x0)
prlimit64(0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
fsopen(0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0)
sched_getaffinity(r2, 0x8, &(0x7f0000000000))
r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="18060000000000e3355024996497d3000000000000000000add1fe8741218626def40bf06e07760201b449aa1be33ff045bbeb47602122cf54e222e0f17351d20e83e5725a2ad36c564717f8e7e1c59aa449f46054bc0e4971bedf92b959431a6546624079538939fbf439d5a3512b0d18311d33f9ba54662f14afdedb5335d0e89402a9da0ae004f6727b27e329c0494586a8cd53629da1500ecd74ca138883b9b1954112f52835280ce9a397bad84449d29d11c671e02a79376c29ae1b635bebf5cd087d07ea6c257afc8edd0eebc915a8964c6d59ca57d06695fbac4b70811d8bcb54d173a4793fac6822c535432dcae2642e854407cbc6d21f5b9bf07c6a3dc1a6706f2b396572c2e337ae550c54e869bb5e5b98adc2b8a9ea982748d78cdc482602fe8d01300cc847bc5e30b5270d3d810448d086e9b2d9796d936243b2f1c270ecc816de375a65f90269d7849499d9ef83e61e2ca801385a64cec9fd8461ed8161f9d5713bdf93987bef93579ca3bd52e68201719e186a67fb192c3fcc031dbde4ab9acbbb8677bfcd8c2c12a2fb66e6c824944514417bdef7500b4277dd60d70f300039df"], &(0x7f0000000340)='syzkaller\x00', 0x1, 0xbb, &(0x7f0000000180)=""/187, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x267e}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x3, &(0x7f0000000400)=@framed, &(0x7f0000000340)='syzkaller\x00', 0x1, 0xbb, &(0x7f0000000180)=""/187, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x267e}, 0x80)
lseek(r5, 0x101, 0x0)
getdents(r5, &(0x7f0000000640)=""/103, 0x67)
timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000000)={{0x77359400}, {0x0, 0x989680}}, 0x0)
open(&(0x7f0000000040)='./bus\x00', 0x1ed37e, 0x0)

8.771134419s ago: executing program 3 (id=1239):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010003b15000000000000000000004888", @ANYRES32=0x0, @ANYBLOB="d530d995212cf95a2000128008000100687372001400028008000200", @ANYRES32=r1, @ANYBLOB='\b\x00'], 0x40}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="662700000000000024001280090001007866726d0000000014000280040003"], 0x44}}, 0x0)

8.39842206s ago: executing program 3 (id=1241):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil)
syz_clone(0x88200, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)

4.531441718s ago: executing program 1 (id=1246):
socket$kcm(0x10, 0x3, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x400c132, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0xb)
socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, &(0x7f0000000240))
sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)={0x3})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000001240)=[<r4=>0x0, 0x0], 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={r4, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
readv(r3, &(0x7f0000000480)=[{&(0x7f0000000180)=""/19, 0x13}], 0x1)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[<r6=>0x0], &(0x7f0000000280), 0x1, r5})
ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000380)={0x401, 0x1, &(0x7f00000000c0)=[r5], &(0x7f0000000200), &(0x7f0000000300)=[r6], &(0x7f0000000580)})
openat$procfs(0xffffff9c, &(0x7f0000002000)='/proc/stat\x00', 0x0, 0x0)

3.327405397s ago: executing program 1 (id=1247):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000001240)=[<r1=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
readv(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/19, 0x13}], 0x1)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[<r3=>0x0], &(0x7f0000000280), 0x1, r2})
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x401, 0x1, &(0x7f00000000c0)=[r2], &(0x7f0000000200), &(0x7f0000000300)=[r3], &(0x7f0000000580)})

3.069924388s ago: executing program 1 (id=1249):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10)
setpriority(0x2, 0x0, 0xffffffff00000001)

2.933553009s ago: executing program 1 (id=1251):
syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000001f80)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x553b, &(0x7f000000ac00)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x6, 0x8, 0xb}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', &(0x7f0000000380), &(0x7f0000000100), 0x30, 0x0)
mount$overlay(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000400), 0x0, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@index_on}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}]})

1.325137871s ago: executing program 0 (id=1258):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10)
setpriority(0x2, 0x0, 0xffffffff00000001)

1.2190969s ago: executing program 1 (id=1259):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x24, 0x0, &(0x7f0000000240)="f6ea092001000000009bb5606c1e483573add3c965225275148a9e3c18f1ce9726ae90be", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f00000005c0), 0x10)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
getsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4)

1.130378438s ago: executing program 0 (id=1260):
socket$inet_smc(0x2b, 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14)
fanotify_init(0x200, 0x0)
r0 = socket(0x10, 0x3, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001000ffff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000002000001800128008000100707070000c00028008000100", @ANYRES32=r1], 0x38}}, 0x0)

918.133035ms ago: executing program 0 (id=1261):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0)
close(r0)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00'})
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
syz_emit_ethernet(0xeff, &(0x7f0000000040)=ANY=[], 0x0)

833.354952ms ago: executing program 0 (id=1262):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x1c800)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000040))
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x6, 0x100)
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000000c0)={0x55, 0x2, 0x504, {0x2, 0xc91}, {0x3, 0x35a}, @const={0x2, {0x1, 0x7, 0x40, 0x7}}})
r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x101003, 0x0)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20002}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r3, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4000)
fsetxattr$security_capability(r2, &(0x7f0000000280), &(0x7f00000002c0)=@v2={0x2000000, [{0x101}, {0x3ff, 0x7}]}, 0x14, 0x1)

598.845361ms ago: executing program 0 (id=1263):
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002cc0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000002d00)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_MPATH(r2, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000002d40)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001600000008000300", @ANYRES32=r4], 0x28}}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x9)
r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r5, &(0x7f0000000240)=[{&(0x7f0000003d80)=""/102384, 0x18ff0}], 0x1, 0x0, 0x0)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00')
lseek(r6, 0xae7e, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@mcast2}, {@in=@loopback, 0x0, 0x32}, @in=@remote, {}, {0x0, 0xd9e3}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x138}}, 0x0)

102.404112ms ago: executing program 1 (id=1264):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010003b15000000000000000000004888", @ANYRES32=0x0, @ANYBLOB="d530d995212cf95a2000128008000100687372001400028008000200", @ANYBLOB="080001"], 0x40}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="662700000000000024001280090001007866726d0000000014000280040003"], 0x44}}, 0x0)

0s ago: executing program 0 (id=1265):
syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000580)='./file2\x00', 0x2000000, &(0x7f00000004c0)=ANY=[], 0x1, 0x218, &(0x7f0000000b40)="$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")
pipe2$9p(&(0x7f0000000240), 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000000000010c41090ea40000000000109022400010000000009040000010301000009210000000122050009"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000080007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r2}, 0x10)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

d(directio) comm="syz.2.644" name="bus" dev="loop2" ino=18 res=0 errno=0
[  211.196081][ T5939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  211.283299][ T5939] device hsr_slave_0 entered promiscuous mode
[  211.297691][ T5939] device hsr_slave_1 entered promiscuous mode
[  211.311671][ T5939] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  211.330009][ T5939] Cannot create hsr debugfs directory
[  211.487937][ T3660] Bluetooth: hci2: command tx timeout
[  211.825802][ T5939] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.024269][ T5939] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.210514][ T5939] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.464326][ T5939] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.595892][ T3861] EXT4-fs (loop2): unmounting filesystem.
[  212.953734][ T5174] EXT4-fs (loop1): unmounting filesystem.
[  212.986543][ T5939] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  213.027626][    T7] usb 4-1: new full-speed USB device number 9 using dummy_hcd
[  213.038523][ T5939] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  213.063760][ T5939] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  213.104439][ T5939] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  213.305053][ T5939] 8021q: adding VLAN 0 to HW filter on device bond0
[  213.364662][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  213.376170][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  213.396729][ T5939] 8021q: adding VLAN 0 to HW filter on device team0
[  213.408007][    T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  213.421032][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  213.436637][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  213.439407][    T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  213.474855][   T22] bridge0: port 1(bridge_slave_0) entered blocking state
[  213.482083][   T22] bridge0: port 1(bridge_slave_0) entered forwarding state
[  213.482427][    T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10
[  213.536680][    T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  213.566994][    T7] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  213.580403][ T3660] Bluetooth: hci2: command tx timeout
[  213.587294][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  213.604427][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  213.612908][    T7] usb 4-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00
[  213.612941][    T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  213.632309][    T7] usb 4-1: config 0 descriptor??
[  213.715409][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  213.765059][   T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  213.775033][  T152] bridge0: port 2(bridge_slave_1) entered blocking state
[  213.782300][  T152] bridge0: port 2(bridge_slave_1) entered forwarding state
[  213.790124][   T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  213.799318][   T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  213.807193][   T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  213.816473][   T48] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  213.834318][   T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  213.878319][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  213.908557][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  213.909606][ T3660] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  213.927162][ T3660] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  213.936025][ T3660] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  213.942751][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  213.952260][ T3659] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  213.960078][ T3659] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  213.967412][ T3659] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  213.983328][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  214.054607][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  214.075470][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  214.096732][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  214.106370][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  214.121961][    T7] ntrig 0003:1B96:000A.0013: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.3-1/input0
[  214.130279][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  214.145294][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  214.154798][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  214.171766][ T5939] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  214.336695][ T6012] loop0: detected capacity change from 0 to 512
[  214.352527][    T7] ntrig 0003:1B96:000A.0013: Firmware version: 7.15.22.15.1 (3e5f f1c1)
[  214.436748][ T6012] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  214.480792][ T6012] ext4 filesystem being mounted at /128/bus supports timestamps until 2038 (0x7fffffff)
[  214.560142][    T7] usb 4-1: USB disconnect, device number 9
[  214.608022][   T26] audit: type=1800 audit(1723118378.774:40): pid=6012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.665" name="file1" dev="loop0" ino=15 res=0 errno=0
[  214.649718][   T26] audit: type=1800 audit(1723118378.774:41): pid=6012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.665" name="file2" dev="loop0" ino=16 res=0 errno=0
[  214.711436][ T3854] EXT4-fs (loop0): unmounting filesystem.
[  214.835598][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  214.860091][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  214.886239][ T5939] 8021q: adding VLAN 0 to HW filter on device batadv0
[  214.930147][ T6005] chnl_net:caif_netlink_parms(): no params data found
[  214.953024][ T5999] chnl_net:caif_netlink_parms(): no params data found
[  215.150778][ T5999] bridge0: port 1(bridge_slave_0) entered blocking state
[  215.158285][ T5999] bridge0: port 1(bridge_slave_0) entered disabled state
[  215.167054][ T5999] device bridge_slave_0 entered promiscuous mode
[  215.189543][ T6005] bridge0: port 1(bridge_slave_0) entered blocking state
[  215.196684][ T6005] bridge0: port 1(bridge_slave_0) entered disabled state
[  215.244336][ T6005] device bridge_slave_0 entered promiscuous mode
[  215.297749][ T5999] bridge0: port 2(bridge_slave_1) entered blocking state
[  215.304908][ T5999] bridge0: port 2(bridge_slave_1) entered disabled state
[  215.305367][ T6038] loop3: detected capacity change from 0 to 2048
[  215.332211][ T6038] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  215.344556][ T5999] device bridge_slave_1 entered promiscuous mode
[  215.363054][ T6005] bridge0: port 2(bridge_slave_1) entered blocking state
[  215.389836][ T6038] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  215.397870][ T6005] bridge0: port 2(bridge_slave_1) entered disabled state
[  215.408294][ T6038] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  215.415975][ T6038] UDF-fs: Scanning with blocksize 512 failed
[  215.420090][ T6005] device bridge_slave_1 entered promiscuous mode
[  215.438759][ T6038] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  215.539261][   T26] audit: type=1800 audit(1723118379.704:42): pid=6038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.667" name="file2" dev="loop3" ino=839 res=0 errno=0
[  215.609143][ T5999] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  215.647762][ T3659] Bluetooth: hci2: command tx timeout
[  215.672294][ T5999] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  215.693037][ T6043] netlink: 'syz.0.670': attribute type 4 has an invalid length.
[  215.741535][ T6005] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  215.761771][ T6045] netlink: 'syz.0.670': attribute type 4 has an invalid length.
[  215.845193][ T5999] team0: Port device team_slave_0 added
[  215.887794][ T3659] Bluetooth: hci0: command tx timeout
[  215.914157][ T5999] team0: Port device team_slave_1 added
[  215.946125][ T6005] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  216.047773][   T48] Bluetooth: hci3: command tx timeout
[  216.070139][ T5999] batman_adv: batadv0: Adding interface: batadv_slave_0
[  216.091440][ T5999] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  216.117811][ T5999] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  216.137336][ T6054] loop0: detected capacity change from 0 to 512
[  216.172406][   T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  216.185218][ T6054] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  216.196424][ T6054] ext4 filesystem being mounted at /135/bus supports timestamps until 2038 (0x7fffffff)
[  216.232777][ T5999] batman_adv: batadv0: Adding interface: batadv_slave_1
[  216.241400][ T5999] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  216.268878][ T5999] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  216.281682][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  216.291085][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  216.307161][   T26] audit: type=1800 audit(1723118380.464:43): pid=6054 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.674" name="file1" dev="loop0" ino=15 res=0 errno=0
[  216.329248][ T6005] team0: Port device team_slave_0 added
[  216.329262][   T26] audit: type=1800 audit(1723118380.474:44): pid=6054 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.674" name="file2" dev="loop0" ino=16 res=0 errno=0
[  216.376386][ T3854] EXT4-fs (loop0): unmounting filesystem.
[  216.389768][   T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  216.461630][ T6005] team0: Port device team_slave_1 added
[  216.475761][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  216.488185][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  216.496751][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  216.505047][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  216.544817][ T5939] device veth0_vlan entered promiscuous mode
[  216.559640][ T5939] device veth1_vlan entered promiscuous mode
[  216.590987][ T5939] device veth0_macvtap entered promiscuous mode
[  216.601548][ T5939] device veth1_macvtap entered promiscuous mode
[  216.631705][ T5939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  216.664957][ T5939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  216.675012][ T5939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  216.686350][ T5939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  216.696321][ T5939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  216.706950][ T5939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  216.716902][ T5939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  216.727822][ T5939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  216.728198][   T14] usb 1-1: new full-speed USB device number 8 using dummy_hcd
[  216.738050][ T5939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  216.755799][ T5939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  216.777012][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_0
[  216.793414][ T5999] device hsr_slave_0 entered promiscuous mode
[  216.804623][ T5999] device hsr_slave_1 entered promiscuous mode
[  216.811886][ T5999] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  216.819901][ T5999] Cannot create hsr debugfs directory
[  216.826085][ T6005] batman_adv: batadv0: Adding interface: batadv_slave_0
[  216.833965][ T6005] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  216.869985][ T6005] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  216.884577][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  216.894584][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  216.903571][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  216.923319][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  216.937761][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  216.946147][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  216.958092][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  216.969946][ T5939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  216.986062][ T5939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.002458][ T5939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  217.023363][ T5939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.033942][ T5939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  217.045471][ T5939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.056453][ T5939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  217.077827][ T5939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.089887][ T5939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  217.101863][ T5939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.122750][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_1
[  217.130781][   T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  217.152017][   T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  217.163175][   T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10
[  217.174876][   T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  217.185054][   T14] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  217.199975][   T14] usb 1-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00
[  217.209409][   T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  217.224716][   T14] usb 1-1: config 0 descriptor??
[  217.241508][   T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  217.266610][ T6005] batman_adv: batadv0: Adding interface: batadv_slave_1
[  217.274221][ T6005] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  217.301104][ T6005] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  217.322019][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  217.339122][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  217.355317][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  217.368979][ T5939] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  217.384331][ T5939] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  217.393587][ T5939] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  217.403646][ T5939] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  217.448323][   T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  217.515495][ T6005] device hsr_slave_0 entered promiscuous mode
[  217.529648][ T6005] device hsr_slave_1 entered promiscuous mode
[  217.542601][ T6005] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  217.551091][ T6005] Cannot create hsr debugfs directory
[  217.716978][ T5999] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  217.727605][ T3659] Bluetooth: hci2: command tx timeout
[  217.755056][ T5259] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  217.767792][   T14] ntrig 0003:1B96:000A.0014: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.0-1/input0
[  217.773712][ T5259] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  217.836041][ T5999] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  217.878337][ T3736] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  217.961352][ T5999] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  217.971849][   T48] Bluetooth: hci0: command tx timeout
[  217.978112][   T14] ntrig 0003:1B96:000A.0014: Firmware version: 7.15.22.15.1 (3e5f f1c1)
[  218.003468][ T3851] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  218.051218][ T3851] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  218.096379][ T5999] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  218.127658][ T3659] Bluetooth: hci3: command tx timeout
[  218.186785][ T3688] usb 1-1: USB disconnect, device number 8
[  218.245192][ T3736] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  218.441824][ T6079] process 'syz.4.636' launched './file0' with NULL argv: empty string added
[  218.550026][ T6083] device gretap0 entered promiscuous mode
[  218.555873][ T6083] device vlan2 entered promiscuous mode
[  218.580584][ T6083] device gretap0 left promiscuous mode
[  218.804749][ T5999] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  218.932097][ T6093] loop0: detected capacity change from 0 to 512
[  218.987930][ T5999] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  219.079009][ T6093] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  219.094769][ T6093] ext4 filesystem being mounted at /137/bus supports timestamps until 2038 (0x7fffffff)
[  219.366898][   T26] audit: type=1800 audit(1723118383.504:45): pid=6101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.684" name="file2" dev="loop0" ino=16 res=0 errno=0
[  219.390642][ T5999] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  219.487235][ T3854] EXT4-fs (loop0): unmounting filesystem.
[  219.529402][ T5999] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  220.047599][ T3659] Bluetooth: hci0: command tx timeout
[  220.213745][   T48] Bluetooth: hci3: command tx timeout
[  220.688542][ T6005] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  220.721816][ T5999] 8021q: adding VLAN 0 to HW filter on device bond0
[  220.740363][ T6118] netlink: 24 bytes leftover after parsing attributes in process `syz.3.690'.
[  220.769088][ T6005] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  220.826799][ T5999] 8021q: adding VLAN 0 to HW filter on device team0
[  220.858739][ T6005] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  220.879304][ T6122] CIFS: Unable to determine destination address
[  220.898271][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  220.910258][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  221.028905][ T6005] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  221.053520][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  221.075794][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  221.107349][ T3690] bridge0: port 1(bridge_slave_0) entered blocking state
[  221.114590][ T3690] bridge0: port 1(bridge_slave_0) entered forwarding state
[  221.189666][   T11] device hsr_slave_0 left promiscuous mode
[  221.207661][   T11] device hsr_slave_1 left promiscuous mode
[  221.228120][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  221.267544][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  221.289888][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  221.315579][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  221.366414][   T11] device bridge_slave_1 left promiscuous mode
[  221.377699][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  221.418418][   T11] device bridge_slave_0 left promiscuous mode
[  221.424685][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  221.487691][   T14] usb 4-1: new full-speed USB device number 10 using dummy_hcd
[  221.507290][   T11] device hsr_slave_0 left promiscuous mode
[  221.537872][   T11] device hsr_slave_1 left promiscuous mode
[  221.552746][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  221.563993][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  221.588514][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  221.606247][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  221.627288][   T11] device bridge_slave_1 left promiscuous mode
[  221.630164][ T6141] loop0: detected capacity change from 0 to 512
[  221.665473][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  221.688510][   T11] device bridge_slave_0 left promiscuous mode
[  221.694937][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  221.708057][ T6141] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  221.717068][ T6141] ext4 filesystem being mounted at /142/bus supports timestamps until 2038 (0x7fffffff)
[  221.738922][   T26] audit: type=1800 audit(1723118385.904:46): pid=6141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.695" name="file1" dev="loop0" ino=15 res=0 errno=0
[  221.812381][   T26] audit: type=1800 audit(1723118385.934:47): pid=6141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.695" name="file2" dev="loop0" ino=16 res=0 errno=0
[  221.836807][ T3854] EXT4-fs (loop0): unmounting filesystem.
[  221.843462][   T11] device veth1_macvtap left promiscuous mode
[  221.849728][   T11] device veth0_macvtap left promiscuous mode
[  221.856081][   T11] device veth1_vlan left promiscuous mode
[  221.862031][   T11] device veth0_vlan left promiscuous mode
[  221.868181][   T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  221.879750][   T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  221.889827][   T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10
[  221.900981][   T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  221.936770][   T14] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  221.950106][   T14] usb 4-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00
[  221.959764][   T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  221.976876][   T14] usb 4-1: config 0 descriptor??
[  221.993442][   T11] device veth1_macvtap left promiscuous mode
[  222.012805][   T11] device veth0_macvtap left promiscuous mode
[  222.024164][   T11] device veth1_vlan left promiscuous mode
[  222.030096][   T11] device veth0_vlan left promiscuous mode
[  222.181558][   T48] Bluetooth: hci0: command tx timeout
[  222.287739][   T48] Bluetooth: hci3: command tx timeout
[  222.348902][ T6150] input: syz0 as /devices/virtual/input/input5
[  222.536691][   T14] ntrig 0003:1B96:000A.0015: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.3-1/input0
[  222.759396][   T14] ntrig 0003:1B96:000A.0015: Firmware version: 7.15.22.15.1 (3e5f f1c1)
[  222.947002][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  222.967075][ T3688] usb 4-1: USB disconnect, device number 10
[  223.006295][   T11] team0 (unregistering): Port device team_slave_1 removed
[  223.089879][   T11] team0 (unregistering): Port device team_slave_0 removed
[  223.145453][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  223.184562][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  223.616223][   T11] bond0 (unregistering): Released all slaves
[  223.862109][ T6162] CIFS: Unable to determine destination address
[  224.061478][   T11] team0 (unregistering): Port device team_slave_1 removed
[  224.098132][   T11] team0 (unregistering): Port device team_slave_0 removed
[  224.135455][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  224.175918][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  224.542891][   T11] bond0 (unregistering): Released all slaves
[  224.640239][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  224.648624][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  224.657250][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  224.666881][    T7] bridge0: port 2(bridge_slave_1) entered blocking state
[  224.674070][    T7] bridge0: port 2(bridge_slave_1) entered forwarding state
[  224.683157][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  224.700240][ T6155] device gretap0 entered promiscuous mode
[  224.707912][ T6155] device vlan1 entered promiscuous mode
[  224.730554][ T6155] device gretap0 left promiscuous mode
[  224.759993][ T6159] netlink: 24 bytes leftover after parsing attributes in process `syz.3.700'.
[  224.825797][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  224.855644][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  224.907571][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  224.930707][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  224.955762][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  224.994001][ T5999] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  225.004875][ T5999] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  225.097025][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  225.113064][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  225.127931][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  225.146740][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  225.161298][ T6176] kvm: emulating exchange as write
[  225.167172][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  225.199735][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  225.351749][ T6005] 8021q: adding VLAN 0 to HW filter on device bond0
[  225.487019][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  225.513558][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  225.586783][ T6005] 8021q: adding VLAN 0 to HW filter on device team0
[  225.622812][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  225.639530][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  225.653816][ T3690] bridge0: port 1(bridge_slave_0) entered blocking state
[  225.661073][ T3690] bridge0: port 1(bridge_slave_0) entered forwarding state
[  225.762455][ T3736] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  225.798443][ T3736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  225.878681][ T3736] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  225.911215][ T3736] bridge0: port 2(bridge_slave_1) entered blocking state
[  225.918378][ T3736] bridge0: port 2(bridge_slave_1) entered forwarding state
[  225.952868][ T6189] loop0: detected capacity change from 0 to 512
[  225.991281][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  226.010546][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  226.083015][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  226.110174][ T6189] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  226.143812][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  226.152873][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  226.163313][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  226.176022][ T3736] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  226.184536][ T3736] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  226.184610][ T6189] ext4 filesystem being mounted at /148/bus supports timestamps until 2038 (0x7fffffff)
[  226.192714][ T3736] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  226.269319][ T5999] 8021q: adding VLAN 0 to HW filter on device batadv0
[  226.279136][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  226.297935][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  226.308021][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  226.348891][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  226.396823][   T26] audit: type=1800 audit(1723118390.554:48): pid=6189 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.704" name="file1" dev="loop0" ino=15 res=0 errno=0
[  226.431436][ T6005] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  226.528464][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  226.537007][   T26] audit: type=1800 audit(1723118390.564:49): pid=6198 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.704" name="file2" dev="loop0" ino=16 res=0 errno=0
[  226.558149][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  226.701598][ T3854] EXT4-fs (loop0): unmounting filesystem.
[  226.725053][ T5999] device veth0_vlan entered promiscuous mode
[  226.863777][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  226.921340][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  226.967304][ T5999] device veth1_vlan entered promiscuous mode
[  227.018265][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  227.033064][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  227.140223][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  227.166788][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  227.212076][ T5999] device veth0_macvtap entered promiscuous mode
[  227.252763][ T5999] device veth1_macvtap entered promiscuous mode
[  227.364155][ T5999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  227.415489][ T5999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  227.467185][ T5999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  227.530605][ T5999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  227.556466][ T5999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  227.583075][ T5999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  227.619805][ T5999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  227.661677][ T5999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  227.683120][ T6214] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0
[  227.693947][ T6214] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0
[  227.702610][ T5999] batman_adv: batadv0: Interface activated: batadv_slave_0
[  227.703114][ T6214] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0
[  227.723106][ T6214] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0
[  227.743098][ T6214] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0
[  227.753116][ T6214] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0
[  227.760195][ T5999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  227.783089][ T6214] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0
[  227.795919][ T6214] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0
[  227.814947][ T6214] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0
[  227.833077][ T6214] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0
[  227.883277][ T5999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  227.933250][ T6214] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0
[  227.943242][ T6214] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0
[  227.973451][ T6214] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0
[  227.977635][ T5999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  227.983094][ T6214] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0
[  228.023792][ T6214] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0
[  228.062548][ T5999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  228.062718][ T6214] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0
[  228.083904][ T6214] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0
[  228.084928][ T5999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  228.151764][ T6214] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0
[  228.154798][ T5999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  228.163117][ T6214] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0
[  228.173099][ T5999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  228.183111][ T6214] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0
[  228.237473][ T6214] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0
[  228.237767][ T5999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  228.264001][ T6214] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0
[  228.269970][ T5999] batman_adv: batadv0: Interface activated: batadv_slave_1
[  228.277577][ T6214] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0
[  228.297009][ T6214] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0
[  228.298794][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  228.333529][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  228.337563][ T6214] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0
[  228.341285][   T22] usb 1-1: new full-speed USB device number 9 using dummy_hcd
[  228.363079][ T6214] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0
[  228.373090][ T6214] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0
[  228.381746][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  228.409833][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  228.425364][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  228.436710][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  228.464845][ T5999] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  228.483269][ T6214] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0
[  228.487018][ T6214] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0
[  228.505113][ T5999] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  228.532137][ T5999] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  228.551428][ T5999] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  228.621700][ T6005] 8021q: adding VLAN 0 to HW filter on device batadv0
[  228.653111][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  228.687553][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  228.770327][   T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  228.802338][   T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  228.847835][   T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10
[  228.900551][   T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  228.920312][   T22] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  228.938563][   T22] usb 1-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00
[  228.948329][   T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  228.966796][   T22] usb 1-1: config 0 descriptor??
[  228.978719][ T3647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  229.007039][ T3647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  229.179275][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  229.198713][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  229.252660][ T6005] device veth0_vlan entered promiscuous mode
[  229.281152][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  229.292402][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  229.348971][ T3785] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  229.358019][ T3785] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  229.394150][ T6005] device veth1_vlan entered promiscuous mode
[  229.411602][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  229.461050][ T3785] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  229.473079][   T22] ntrig 0003:1B96:000A.0016: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.0-1/input0
[  229.507916][ T3785] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  229.555307][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  229.575427][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  229.603119][ T6005] device veth0_macvtap entered promiscuous mode
[  229.608238][ T6218] netlink: 40 bytes leftover after parsing attributes in process `syz.4.709'.
[  229.638896][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  229.656782][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  229.677656][   T22] ntrig 0003:1B96:000A.0016: Firmware version: 7.15.22.15.1 (3e5f f1c1)
[  229.701092][ T6005] device veth1_macvtap entered promiscuous mode
[  229.776397][ T6005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  229.846216][ T6005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  229.895813][   T22] usb 1-1: USB disconnect, device number 9
[  229.907813][ T6005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  229.947668][ T6005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  229.990438][ T6005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  230.031822][ T6005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  230.069477][ T6005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  230.105913][ T6005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  230.144556][ T6005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  230.163981][ T6005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  230.197071][ T6005] batman_adv: batadv0: Interface activated: batadv_slave_0
[  230.776167][ T6225] netlink: 24 bytes leftover after parsing attributes in process `syz.4.710'.
[  230.780239][ T6223] CIFS: Unable to determine destination address
[  230.842503][ T3647] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  230.855389][ T3647] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  230.910760][ T3647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  230.996828][ T6005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  231.017976][ T6005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  231.057586][ T6005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  231.075712][ T6005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  231.101181][ T6005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  231.122031][ T6005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  231.132363][ T6005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  231.143089][ T6005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  231.153015][ T6005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  231.163594][ T6005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  231.176999][ T6005] batman_adv: batadv0: Interface activated: batadv_slave_1
[  231.192994][ T6230] netlink: 'syz.3.713': attribute type 2 has an invalid length.
[  231.244896][ T6230] netlink: 24 bytes leftover after parsing attributes in process `syz.3.713'.
[  231.308641][ T6230] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check.
[  231.409226][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  231.429154][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  231.464986][ T6005] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  231.544839][ T6005] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  231.582262][ T6005] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  231.604397][ T6005] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  231.943202][ T3796] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  231.975177][ T3796] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  232.075825][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  232.101935][ T3848] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  232.161954][ T3848] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  232.207784][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  232.417877][ T6258] netlink: 'syz.4.720': attribute type 12 has an invalid length.
[  232.515435][ T6258] netlink: 132 bytes leftover after parsing attributes in process `syz.4.720'.
[  233.006736][ T6272] netlink: 24 bytes leftover after parsing attributes in process `syz.2.723'.
[  233.083135][ T6272] CIFS: Unable to determine destination address
[  233.744855][ T6281] loop3: detected capacity change from 0 to 512
[  234.063541][ T6281] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  234.100623][ T6281] ext4 filesystem being mounted at /190/bus supports timestamps until 2038 (0x7fffffff)
[  234.249253][   T26] audit: type=1800 audit(1723118398.414:50): pid=6281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.725" name="file1" dev="loop3" ino=15 res=0 errno=0
[  234.277707][   T26] audit: type=1800 audit(1723118398.434:51): pid=6281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.725" name="file2" dev="loop3" ino=16 res=0 errno=0
[  234.510373][ T6300] netlink: 'syz.4.727': attribute type 4 has an invalid length.
[  234.659057][ T3649] EXT4-fs (loop3): unmounting filesystem.
[  234.870795][ T6305] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  236.061123][ T6340] loop2: detected capacity change from 0 to 512
[  236.207207][ T6340] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  236.271114][ T6340] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038 (0x7fffffff)
[  236.493481][ T6340] netlink: 4 bytes leftover after parsing attributes in process `syz.2.741'.
[  236.706123][ T5999] EXT4-fs (loop2): unmounting filesystem.
[  237.041892][ T6365] 9pnet_virtio: no channels available for device syz
[  237.686696][ T6382] loop2: detected capacity change from 0 to 128
[  239.424266][ T6382] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  239.434815][ T6382] ext4 filesystem being mounted at /11/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff)
[  239.680380][ T5999] EXT4-fs (loop2): unmounting filesystem.
[  239.752515][ T6390] device gretap0 entered promiscuous mode
[  239.817763][ T6390] device vlan2 entered promiscuous mode
[  239.863811][ T6390] device gretap0 left promiscuous mode
[  241.177652][ T3692] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  241.427546][ T3692] usb 1-1: Using ep0 maxpacket: 32
[  241.547798][ T3692] usb 1-1: config 7 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  241.595614][ T3692] usb 1-1: config 7 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  241.661578][ T3692] usb 1-1: config 7 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  241.722829][ T3692] usb 1-1: config 7 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  241.748119][ T3692] usb 1-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00
[  241.790008][ T3692] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  242.044797][ T6446] 9pnet_virtio: no channels available for device syz
[  242.627616][ T3688] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  242.927949][   T22] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  243.008501][ T3688] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  243.026016][ T3688] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  243.060243][ T3688] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  243.080593][ T3688] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  243.217808][ T3688] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  243.237022][ T3688] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  243.260295][ T6476] bridge_slave_0: default FDB implementation only supports local addresses
[  243.265793][ T3688] usb 3-1: Product: syz
[  243.287702][   T22] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  243.305795][ T3688] usb 3-1: Manufacturer: syz
[  243.314619][   T22] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  243.350965][   T22] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  243.383148][ T3688] cdc_wdm 3-1:1.0: skipping garbage
[  243.389851][ T3688] cdc_wdm 3-1:1.0: skipping garbage
[  243.413048][   T22] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d
[  243.449005][ T3688] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  243.461980][   T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  243.488274][ T3688] cdc_wdm 3-1:1.0: Unknown control protocol
[  243.508644][   T22] usb 5-1: config 0 descriptor??
[  243.560053][   T22] usb 5-1: Found UVC 0.00 device <unnamed> (046d:08c1)
[  243.567004][   T22] usb 5-1: No valid video chain found.
[  243.617192][   T22] usb 3-1: USB disconnect, device number 7
[  243.762629][  T152] usb 5-1: USB disconnect, device number 5
[  244.027717][ T3692] usbhid 1-1:7.0: can't add hid device: -71
[  244.033860][ T3692] usbhid: probe of 1-1:7.0 failed with error -71
[  244.064375][ T3692] usb 1-1: USB disconnect, device number 10
[  244.197673][   T22] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  244.557631][   T22] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  244.575504][   T22] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  244.610325][ T6507] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  244.616696][   T22] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  244.685873][ T6510] 9pnet_virtio: no channels available for device syz
[  244.728785][ T6511] device erspan0 entered promiscuous mode
[  244.734718][   T22] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  244.765844][ T6511] device vlan1 entered promiscuous mode
[  244.805671][ T6511] device erspan0 left promiscuous mode
[  244.907969][   T22] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  244.936317][   T22] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  244.974713][   T22] usb 3-1: Product: syz
[  244.997928][   T22] usb 3-1: Manufacturer: syz
[  245.078745][   T22] cdc_wdm 3-1:1.0: skipping garbage
[  245.092719][   T22] cdc_wdm 3-1:1.0: skipping garbage
[  245.166147][   T22] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  245.197498][    T7] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  245.198798][   T22] cdc_wdm 3-1:1.0: Unknown control protocol
[  245.317515][    C1] cdc_wdm 3-1:1.0: unknown notification 66 received: index 4709 len 13010
[  245.337497][    C1] cdc_wdm 3-1:1.0: unknown notification 166 received: index 48734 len 57114
[  245.597673][    T7] usb 2-1: config 0 has an invalid interface descriptor of length 4, skipping
[  245.627877][    T7] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  245.667945][    T7] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  245.717573][    C1] cdc_wdm 3-1:1.0: unknown notification 7 received: index 0 len 0
[  245.870328][    T7] usb 2-1: New USB device found, idVendor=22b8, idProduct=4234, bcdDevice=32.84
[  245.894968][    T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  245.934242][    T7] usb 2-1: Product: syz
[  245.944365][    T7] usb 2-1: Manufacturer: syz
[  245.947564][    C1] cdc_wdm 3-1:1.0: unknown notification 118 received: index 7808 len 19652
[  245.953492][    T7] usb 2-1: SerialNumber: syz
[  245.987954][    T7] usb 2-1: config 0 descriptor??
[  246.246092][    T7] usb 2-1: USB disconnect, device number 10
[  247.517057][    T7] usb 3-1: USB disconnect, device number 8
[  247.568419][    C0] eth0: bad gso: type: 1, size: 1408
[  247.954972][ T6585] 9pnet_virtio: no channels available for device syz
[  248.760719][  T152] usb 5-1: new full-speed USB device number 6 using dummy_hcd
[  249.151333][  T152] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  249.180743][  T152] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  249.205911][  T152] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10
[  249.231440][  T152] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  249.273470][  T152] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  249.311734][  T152] usb 5-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00
[  249.336983][  T152] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  249.438003][  T152] usb 5-1: config 0 descriptor??
[  249.924369][  T152] ntrig 0003:1B96:000A.0017: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.4-1/input0
[  250.137818][  T152] ntrig 0003:1B96:000A.0017: Firmware version: 7.15.22.15.1 (3e5f f1c1)
[  250.176099][ T6647] 9pnet_virtio: no channels available for device syz
[  250.342138][  T152] usb 5-1: USB disconnect, device number 6
[  251.187651][ T3689] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  251.282031][ T6668] netlink: 8 bytes leftover after parsing attributes in process `syz.2.836'.
[  251.307076][ T6670] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  251.458481][ T6676] program syz.4.837 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  251.577897][ T3689] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  251.620041][ T3689] usb 1-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d
[  251.822549][ T3689] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  251.884980][ T3689] usb 1-1: config 0 descriptor??
[  252.180806][ T6688] loop3: detected capacity change from 0 to 128
[  252.197691][ T3689] usb 1-1: string descriptor 0 read error: -71
[  252.205220][ T3689] usb 1-1: Found UVC 0.00 device <unnamed> (046d:08c1)
[  252.239515][ T3689] usb 1-1: No valid video chain found.
[  252.253224][ T6688] FAT-fs (loop3): bogus sectors per cluster 0
[  252.283717][ T3689] usb 1-1: USB disconnect, device number 11
[  252.297778][ T6688] FAT-fs (loop3): Can't find a valid FAT filesystem
[  252.634807][ T6696] device erspan0 entered promiscuous mode
[  252.645093][ T6696] device vlan2 entered promiscuous mode
[  252.709467][ T6696] device erspan0 left promiscuous mode
[  252.976178][ T6705] 9pnet_virtio: no channels available for device syz
[  253.561707][ T3647] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  253.977851][ T3647] usb 5-1: config index 0 descriptor too short (expected 23569, got 27)
[  253.993150][ T3647] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  254.107659][ T3647] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  254.141469][ T3647] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  254.167773][ T3647] usb 5-1: Manufacturer: syz
[  254.181832][ T6727] loop2: detected capacity change from 0 to 512
[  254.200191][ T3647] usb 5-1: config 0 descriptor??
[  254.295123][ T6727] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  254.313312][ T6727] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038 (0x7fffffff)
[  254.383929][ T6727] netlink: 4 bytes leftover after parsing attributes in process `syz.2.857'.
[  254.407564][ T3647] rc_core: IR keymap rc-hauppauge not found
[  254.428947][ T3647] Registered IR keymap rc-empty
[  254.446218][ T5999] EXT4-fs (loop2): unmounting filesystem.
[  254.482882][ T3647] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  254.519523][ T3647] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input6
[  254.532822][ T3689] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  254.569095][ T3647] usb 5-1: USB disconnect, device number 7
[  254.706741][ T6742] trusted_key: encrypted_key: insufficient parameters specified
[  254.927806][ T3689] usb 2-1: config index 0 descriptor too short (expected 23569, got 27)
[  254.939549][ T3689] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  255.057973][ T3689] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  255.074424][ T3689] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  255.104474][ T3689] usb 2-1: Manufacturer: syz
[  255.139322][ T3689] usb 2-1: config 0 descriptor??
[  255.210608][ T6751] fuse: Bad value for 'fd'
[  255.527585][ T3689] rc_core: IR keymap rc-hauppauge not found
[  255.533548][ T3689] Registered IR keymap rc-empty
[  255.558566][ T3689] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  255.578931][ T3689] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input7
[  255.641533][   T22] usb 2-1: USB disconnect, device number 11
[  255.649176][ T1271] ieee802154 phy0 wpan0: encryption failed: -22
[  255.649229][ T1271] ieee802154 phy1 wpan1: encryption failed: -22
[  255.725662][ T6765] 9pnet_virtio: no channels available for device syz
[  255.917322][ T6767] loop3: detected capacity change from 0 to 512
[  256.013624][ T6767] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  256.030431][ T6767] ext4 filesystem being mounted at /220/file1 supports timestamps until 2038 (0x7fffffff)
[  256.085791][ T6767] netlink: 4 bytes leftover after parsing attributes in process `syz.3.871'.
[  256.178002][ T3649] EXT4-fs (loop3): unmounting filesystem.
[  256.510863][ T6780] device erspan0 entered promiscuous mode
[  256.587658][ T6780] device vlan2 entered promiscuous mode
[  256.614339][ T6780] device erspan0 left promiscuous mode
[  256.643547][ T6783] 9pnet_fd: Insufficient options for proto=fd
[  257.947274][    C0] eth0: bad gso: type: 1, size: 1408
[  258.029935][ T6803] loop3: detected capacity change from 0 to 512
[  258.127541][ T6803] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  258.136854][ T6803] ext4 filesystem being mounted at /224/file1 supports timestamps until 2038 (0x7fffffff)
[  258.170630][ T6803] netlink: 4 bytes leftover after parsing attributes in process `syz.3.884'.
[  258.354366][ T3649] EXT4-fs (loop3): unmounting filesystem.
[  260.087008][    C0] eth0: bad gso: type: 1, size: 1408
[  260.667740][ T3647] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  261.157868][ T3647] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  261.186435][ T3647] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  261.217522][ T3647] usb 1-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00
[  261.257157][ T3647] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  261.328147][ T3647] usb 1-1: config 0 descriptor??
[  261.906981][ T6852] loop3: detected capacity change from 0 to 40427
[  261.922362][ T6852] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  261.930390][ T6852] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  261.941313][ T6852] F2FS-fs (loop3): invalid crc value
[  262.008396][ T6852] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669)
[  262.197143][ T6852] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  262.218383][ T6852] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  263.454673][ T6871] cgroup: none used incorrectly
[  263.487951][ T3647] usbhid 1-1:0.0: can't add hid device: -71
[  263.493993][ T3647] usbhid: probe of 1-1:0.0 failed with error -71
[  263.581324][ T3647] usb 1-1: USB disconnect, device number 12
[  263.673754][ T6875] 9pnet_virtio: no channels available for device syz
[  265.448800][ T6903] loop3: detected capacity change from 0 to 256
[  266.645790][ T6908] loop1: detected capacity change from 0 to 256
[  268.487614][ T3692] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  268.744566][ T6948] autofs4:pid:6948:autofs_fill_super: called with bogus options
[  268.867933][ T3692] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  268.876682][ T3692] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  268.957501][ T3692] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  268.968601][ T3692] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  268.988296][ T6952] netlink: 'syz.0.938': attribute type 4 has an invalid length.
[  269.107822][ T3692] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  269.149724][ T3692] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  269.162785][ T3692] usb 2-1: Product: syz
[  269.167078][ T3692] usb 2-1: Manufacturer: syz
[  269.218726][ T3692] cdc_wdm 2-1:1.0: skipping garbage
[  269.225498][ T3692] cdc_wdm 2-1:1.0: skipping garbage
[  269.243130][ T3692] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  269.249405][ T3692] cdc_wdm 2-1:1.0: Unknown control protocol
[  269.485984][   T14] usb 2-1: USB disconnect, device number 12
[  269.997636][ T3692] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  270.067719][   T14] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  270.126419][ T6970] netlink: 24 bytes leftover after parsing attributes in process `syz.3.945'.
[  270.234936][ T6972] CIFS: Unable to determine destination address
[  270.377654][ T3692] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  270.410359][ T3692] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  270.522418][   T14] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  270.537668][ T3692] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00
[  270.559549][ T3692] usb 3-1: New USB device strings: Mfr=0, Product=9, SerialNumber=0
[  270.571696][   T14] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  270.591481][ T3692] usb 3-1: Product: syz
[  270.614950][ T3692] usb 3-1: config 0 descriptor??
[  270.624539][   T14] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  270.659027][   T14] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  270.790757][   T26] audit: type=1326 audit(1723118434.954:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6980 comm="syz.0.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b22b779f9 code=0x7ffc0000
[  270.849274][   T14] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  270.901112][   T14] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  270.909390][   T26] audit: type=1326 audit(1723118434.954:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6980 comm="syz.0.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b22b779f9 code=0x7ffc0000
[  270.943792][   T14] usb 2-1: Product: syz
[  270.984798][   T14] usb 2-1: Manufacturer: syz
[  271.040557][   T26] audit: type=1326 audit(1723118434.974:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6980 comm="syz.0.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f6b22b779f9 code=0x7ffc0000
[  271.060064][ T6985] autofs4:pid:6985:autofs_fill_super: called with bogus options
[  271.064835][   T14] cdc_wdm 2-1:1.0: skipping garbage
[  271.096306][   T14] cdc_wdm 2-1:1.0: skipping garbage
[  271.124320][   T14] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  271.137452][   T14] cdc_wdm 2-1:1.0: Unknown control protocol
[  271.167826][   T26] audit: type=1326 audit(1723118434.974:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6980 comm="syz.0.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b22b779f9 code=0x7ffc0000
[  271.284353][   T14] usb 2-1: USB disconnect, device number 13
[  272.077207][   T26] audit: type=1326 audit(1723118434.974:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6980 comm="syz.0.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b22b779f9 code=0x7ffc0000
[  272.994709][    C0] eth0: bad gso: type: 1, size: 1408
[  273.186396][ T7005] loop0: detected capacity change from 0 to 512
[  273.217677][ T3692] usbhid 3-1:0.0: can't add hid device: -71
[  273.229297][ T3692] usbhid: probe of 3-1:0.0 failed with error -71
[  273.249783][ T3692] usb 3-1: USB disconnect, device number 9
[  273.270095][ T7005] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  273.331087][ T7005] ext4 filesystem being mounted at /197/file1 supports timestamps until 2038 (0x7fffffff)
[  273.496450][ T3854] EXT4-fs (loop0): unmounting filesystem.
[  274.179613][ T7020] overlayfs: workdir and upperdir must be separate subtrees
[  274.318269][ T7028] netlink: 24 bytes leftover after parsing attributes in process `syz.2.964'.
[  274.520296][ T7032] autofs4:pid:7032:autofs_fill_super: called with bogus options
[  274.568724][ T7029] CIFS: Unable to determine destination address
[  274.879840][ T7043] overlayfs: conflicting options: nfs_export=on,metacopy=on
[  275.394901][ T7047] loop0: detected capacity change from 0 to 512
[  275.556178][ T7047] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  275.586308][ T7047] ext4 filesystem being mounted at /200/file1 supports timestamps until 2038 (0x7fffffff)
[  275.621228][ T7047] netlink: 4 bytes leftover after parsing attributes in process `syz.0.971'.
[  275.836325][ T3854] EXT4-fs (loop0): unmounting filesystem.
[  277.421859][   T26] audit: type=1107 audit(1723118441.584:57): pid=7068 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  278.348235][ T7074] autofs4:pid:7074:autofs_fill_super: called with bogus options
[  278.375887][   T26] audit: type=1326 audit(1723118442.534:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7075 comm="syz.0.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b22b779f9 code=0x7ffc0000
[  278.466530][   T26] audit: type=1326 audit(1723118442.534:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7075 comm="syz.0.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b22b779f9 code=0x7ffc0000
[  278.603203][   T26] audit: type=1326 audit(1723118442.574:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7075 comm="syz.0.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6b22b779f9 code=0x7ffc0000
[  278.797634][   T26] audit: type=1326 audit(1723118442.574:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7075 comm="syz.0.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b22b779f9 code=0x7ffc0000
[  278.883436][   T26] audit: type=1326 audit(1723118442.574:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7075 comm="syz.0.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b22b779f9 code=0x7ffc0000
[  278.991157][   T26] audit: type=1326 audit(1723118442.584:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7075 comm="syz.0.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f6b22b779f9 code=0x7ffc0000
[  279.101184][   T26] audit: type=1326 audit(1723118442.584:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7075 comm="syz.0.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b22b779f9 code=0x7ffc0000
[  279.255343][   T26] audit: type=1326 audit(1723118442.584:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7075 comm="syz.0.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b22b779f9 code=0x7ffc0000
[  279.570037][ T7095] sch_tbf: peakrate 8 is lower than or equals to rate 12 !
[  280.350495][ T7099] loop3: detected capacity change from 0 to 256
[  280.375855][ T7099] FAT-fs (loop3): Unrecognized mount option "0x00000000000002a1" or missing value
[  280.729247][ T7101] loop2: detected capacity change from 0 to 256
[  280.748709][ T7101] FAT-fs (loop2): Unrecognized mount option "0x000000000000007d" or missing value
[  280.965637][ T7098] sch_tbf: burst 1 is lower than device lo mtu (65550) !
[  282.159672][ T7126] netlink: 24 bytes leftover after parsing attributes in process `syz.4.994'.
[  282.211838][ T7125] autofs4:pid:7125:autofs_fill_super: called with bogus options
[  282.321098][ T7129] CIFS: Unable to determine destination address
[  287.049151][ T7169] autofs4:pid:7169:autofs_fill_super: called with bogus options
[  287.405280][ T7176] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[  287.760742][ T7183] netlink: 'syz.3.1015': attribute type 2 has an invalid length.
[  287.783759][ T7186] loop0: detected capacity change from 0 to 512
[  287.820416][ T7183] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1015'.
[  287.855699][ T7183] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check.
[  287.893075][ T7186] EXT4-fs: Ignoring removed mblk_io_submit option
[  287.909418][ T7186] EXT4-fs: Ignoring removed i_version option
[  287.968623][ T7186] EXT4-fs error (device loop0): __ext4_iget:5044: inode #11: block 1: comm syz.0.1014: invalid block
[  287.996509][ T7159] loop1: detected capacity change from 0 to 40427
[  288.003458][ T7186] EXT4-fs (loop0): Remounting filesystem read-only
[  288.010146][ T7186] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.1014: couldn't read orphan inode 11 (err -117)
[  288.033183][ T7186] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  288.047446][ T7159] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  288.107586][ T3689] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  288.116756][ T7159] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  288.190339][ T7159] F2FS-fs (loop1): invalid crc value
[  288.318415][ T7159] F2FS-fs (loop1): Found nat_bits in checkpoint
[  288.973368][ T7159] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  288.986718][ T7159] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  289.012294][ T3854] EXT4-fs (loop0): unmounting filesystem.
[  289.077091][ T3689] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11
[  289.119305][ T3689] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024
[  289.144299][ T3689] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  289.188385][ T3689] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  289.247961][ T7188] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  289.872752][ T7226] loop0: detected capacity change from 0 to 256
[  290.146017][ T7230] autofs4:pid:7230:autofs_fill_super: called with bogus options
[  290.167841][ T3689] aiptek 5-1:17.0: Aiptek using 400 ms programming speed
[  290.195799][ T3689] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input8
[  290.425476][ T3691] usb 5-1: USB disconnect, device number 8
[  290.447461][    C0] aiptek 5-1:17.0: aiptek_irq - usb_submit_urb failed with result -19
[  290.482324][ T7240] 9pnet_virtio: no channels available for device syz
[  290.654596][ T7245] loop2: detected capacity change from 0 to 256
[  290.851564][ T7247] loop0: detected capacity change from 0 to 2048
[  290.971318][ T7247] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  291.236818][ T7263] loop2: detected capacity change from 0 to 136
[  291.881957][ T3854] EXT4-fs (loop0): unmounting filesystem.
[  292.037509][   T14] usb 2-1: new full-speed USB device number 14 using dummy_hcd
[  292.192036][ T7273] 9pnet_virtio: no channels available for device syz
[  292.312927][ T7277] autofs4:pid:7277:autofs_fill_super: called with bogus options
[  292.447947][   T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  292.490888][   T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  292.521787][   T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10
[  292.568008][   T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  292.608514][   T14] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  292.662408][   T14] usb 2-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00
[  292.693915][   T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  292.731443][   T14] usb 2-1: config 0 descriptor??
[  293.937324][   T14] ntrig 0003:1B96:000A.0018: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.1-1/input0
[  293.970787][   T14] usb 2-1: USB disconnect, device number 14
[  294.118808][ T7312] 9pnet_virtio: no channels available for device syz
[  294.514763][ T7324] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1057'.
[  294.542766][ T7329] autofs4:pid:7329:autofs_fill_super: called with bogus options
[  296.179339][ T7356] 9pnet_virtio: no channels available for device syz
[  296.491487][ T7370] autofs4:pid:7370:autofs_fill_super: called with bogus options
[  296.774310][ T7375] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1076'.
[  297.240584][ T7383] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1075'.
[  297.651763][ T7392] loop3: detected capacity change from 0 to 256
[  297.714164][ T7392] FAT-fs (loop3): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[  297.762306][ T7399] 9pnet_virtio: no channels available for device syz
[  297.904901][   T57] FAT-fs (loop3): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[  298.308540][ T7417] loop1: detected capacity change from 0 to 512
[  298.352401][ T7417] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  298.413236][ T7417] EXT4-fs (loop1): 1 truncate cleaned up
[  298.437645][ T7417] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  298.578047][ T7423] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1091'.
[  298.645718][ T6005] EXT4-fs (loop1): unmounting filesystem.
[  298.687752][ T3659] Bluetooth: hci5: command 0x0406 tx timeout
[  298.703132][ T7426] autofs4:pid:7426:autofs_fill_super: called with bogus options
[  298.825632][ T7434] 9pnet_virtio: no channels available for device syz
[  298.942667][ T7436] netlink: 'syz.1.1096': attribute type 12 has an invalid length.
[  298.957694][ T7436] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1096'.
[  299.451802][ T7450] loop0: detected capacity change from 0 to 512
[  299.508624][ T7453] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1105'.
[  299.538202][ T7450] EXT4-fs error (device loop0): __ext4_fill_super:5399: inode #2: comm syz.0.1104: casefold flag without casefold feature
[  299.593057][ T7450] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended
[  299.624390][ T7450] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  299.829661][ T7464] 9pnet_virtio: no channels available for device syz
[  299.873761][ T3854] EXT4-fs error (device loop0): __ext4_iget:5044: inode #13: block 837120: comm syz-executor: invalid block
[  299.921077][ T3854] EXT4-fs error (device loop0): __ext4_iget:5044: inode #13: block 837120: comm syz-executor: invalid block
[  300.025968][ T7468] autofs4:pid:7468:autofs_fill_super: called with bogus options
[  300.293801][ T3854] EXT4-fs (loop0): unmounting filesystem.
[  300.304764][ T7477] loop2: detected capacity change from 0 to 1024
[  300.382016][ T7477] EXT4-fs: Ignoring removed i_version option
[  300.691531][ T7477] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  301.197002][ T7477] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1114'.
[  301.301236][ T7477] fuse: Bad value for 'fd'
[  301.439072][ T5999] EXT4-fs (loop2): unmounting filesystem.
[  301.607331][ T7496] loop1: detected capacity change from 0 to 512
[  301.712038][ T7503] loop3: detected capacity change from 0 to 256
[  301.719131][ T7503] exfat: Unknown parameter 'error '
[  301.984479][ T7504] 9pnet_virtio: no channels available for device syz
[  302.039409][ T7496] EXT4-fs (loop1): 1 orphan inode deleted
[  302.073920][ T7496] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  302.107763][ T7496] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038 (0x7fffffff)
[  302.241333][ T3660] Bluetooth: hci3: SCO packet for unknown connection handle 346
[  303.135368][ T6005] EXT4-fs (loop1): unmounting filesystem.
[  303.393099][   T48] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  303.396285][   T48] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  303.397158][   T48] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  303.398374][   T48] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  303.398895][   T48] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  303.399213][   T48] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  303.624942][ T7532] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1128'.
[  303.687592][   T41] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  303.729564][ T7535] netlink: 'syz.2.1127': attribute type 12 has an invalid length.
[  303.757612][ T7535] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1127'.
[  303.967130][ T7526] chnl_net:caif_netlink_parms(): no params data found
[  304.075757][ T7546] loop2: detected capacity change from 0 to 512
[  304.095898][ T7546] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  304.127763][   T41] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  304.140667][   T41] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  304.150920][ T7549] autofs4:pid:7549:autofs_fill_super: called with bogus options
[  304.179629][ T7546] EXT4-fs (loop2): 1 orphan inode deleted
[  304.217570][ T7546] EXT4-fs (loop2): 1 truncate cleaned up
[  304.223277][ T7546] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  304.257755][   T41] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  304.266859][   T41] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  304.281109][   T41] usb 2-1: SerialNumber: syz
[  304.348562][ T7526] bridge0: port 1(bridge_slave_0) entered blocking state
[  304.366557][ T7526] bridge0: port 1(bridge_slave_0) entered disabled state
[  304.379371][ T5999] EXT4-fs (loop2): unmounting filesystem.
[  304.396217][ T7526] device bridge_slave_0 entered promiscuous mode
[  304.479209][ T7526] bridge0: port 2(bridge_slave_1) entered blocking state
[  304.491976][ T7526] bridge0: port 2(bridge_slave_1) entered disabled state
[  304.518077][ T7526] device bridge_slave_1 entered promiscuous mode
[  304.555375][ T7524] loop1: detected capacity change from 0 to 512
[  304.630771][ T7524] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  304.651514][ T7561] netlink: 'syz.2.1132': attribute type 4 has an invalid length.
[  304.670617][ T7524] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038 (0x7fffffff)
[  304.772951][ T7526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  304.830648][ T7526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  304.865950][ T7524] EXT4-fs error (device loop1): ext4_add_entry:2484: inode #2: comm syz.1.1125: Directory hole found for htree leaf block 0
[  304.931018][ T7524] EXT4-fs error (device loop1): ext4_add_entry:2484: inode #2: comm syz.1.1125: Directory hole found for htree leaf block 0
[  305.408998][   T48] Bluetooth: hci1: command tx timeout
[  306.087452][ T7526] team0: Port device team_slave_0 added
[  306.107628][ T7526] team0: Port device team_slave_1 added
[  306.150752][   T41] usb 2-1: 0:2 : does not exist
[  306.155776][   T41] usb 2-1: unit 49 not found!
[  306.186069][   T41] usb 2-1: unit 55 not found!
[  306.238928][ T7526] batman_adv: batadv0: Adding interface: batadv_slave_0
[  306.265020][   T41] usb 2-1: USB disconnect, device number 15
[  306.302790][ T7526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  306.382722][ T7526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  306.426716][ T7526] batman_adv: batadv0: Adding interface: batadv_slave_1
[  306.461205][ T7526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  306.487110][    C0] vkms_vblank_simulate: vblank timer overrun
[  306.511651][ T7526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  306.559850][ T3645] udevd[3645]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  306.616518][ T7526] device hsr_slave_0 entered promiscuous mode
[  306.638032][ T7526] device hsr_slave_1 entered promiscuous mode
[  306.654807][ T7526] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  306.705446][ T7526] Cannot create hsr debugfs directory
[  306.761575][ T6005] EXT4-fs (loop1): unmounting filesystem.
[  306.785088][ T7587] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1138'.
[  306.977480][ T7591] netlink: 'syz.1.1139': attribute type 12 has an invalid length.
[  307.078987][ T7591] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1139'.
[  307.497555][ T3660] Bluetooth: hci1: command tx timeout
[  307.886732][ T7526] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  307.998048][ T7604] autofs4:pid:7604:autofs_fill_super: called with bogus options
[  308.114465][ T7526] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  308.326904][ T7526] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  308.622486][ T7526] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  312.291804][ T7526] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  312.324314][ T7526] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  312.410753][ T7526] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  312.448787][ T7526] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  312.790145][ T7526] 8021q: adding VLAN 0 to HW filter on device bond0
[  312.868711][ T3736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  312.876765][ T3736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  312.922202][ T7526] 8021q: adding VLAN 0 to HW filter on device team0
[  312.962892][ T3736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  312.980675][ T3736] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  313.022229][ T3660] Bluetooth: hci1: command tx timeout
[  313.039437][ T3736] bridge0: port 1(bridge_slave_0) entered blocking state
[  313.046541][ T3736] bridge0: port 1(bridge_slave_0) entered forwarding state
[  313.082845][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  313.102043][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  313.145452][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  313.188813][ T3690] bridge0: port 2(bridge_slave_1) entered blocking state
[  313.195948][ T3690] bridge0: port 2(bridge_slave_1) entered forwarding state
[  313.257221][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  313.307961][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  313.328986][ T7617] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1150'.
[  313.525514][ T7619] loop2: detected capacity change from 0 to 512
[  313.545229][ T7526] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  313.557142][   T26] audit: type=1326 audit(1723118477.704:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7623 comm="syz.3.1152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faffef779f9 code=0x7ffc0000
[  313.579033][ T7526] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  313.619268][   T26] audit: type=1326 audit(1723118477.704:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7623 comm="syz.3.1152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faffef779f9 code=0x7ffc0000
[  313.630093][ T6723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  313.642224][   T26] audit: type=1326 audit(1723118477.704:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7623 comm="syz.3.1152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7faffef779f9 code=0x7ffc0000
[  313.673038][   T26] audit: type=1326 audit(1723118477.704:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7623 comm="syz.3.1152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faffef779f9 code=0x7ffc0000
[  313.705443][ T7619] EXT4-fs error (device loop2): __ext4_iget:5044: inode #11: block 1: comm syz.2.1151: invalid block
[  313.742238][ T6723] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  313.778467][   T26] audit: type=1326 audit(1723118477.704:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7623 comm="syz.3.1152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faffef779f9 code=0x7ffc0000
[  313.785512][ T7619] EXT4-fs (loop2): Remounting filesystem read-only
[  313.814234][ T6723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  313.827575][ T6723] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  313.836561][ T6723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  313.853769][ T7619] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.1151: couldn't read orphan inode 11 (err -117)
[  313.867923][ T6723] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  313.876999][ T6723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  313.885500][ T7619] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  313.895625][ T6723] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  313.935134][ T7619] EXT4-fs error (device loop2): ext4_add_entry:2484: inode #2: comm syz.2.1151: Directory hole found for htree leaf block 0
[  313.976676][ T7619] EXT4-fs (loop2): Remounting filesystem read-only
[  314.287553][ T7627] netlink: 'syz.1.1154': attribute type 12 has an invalid length.
[  314.300628][ T7627] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1154'.
[  314.643647][ T3736] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  314.662299][ T3736] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  314.721169][ T7638] loop3: detected capacity change from 0 to 512
[  314.736884][ T7640] autofs4:pid:7640:autofs_fill_super: called with bogus options
[  314.794265][ T7638] EXT4-fs (loop3): 1 orphan inode deleted
[  314.815683][ T7638] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  314.827328][ T7638] ext4 filesystem being mounted at /284/file1 supports timestamps until 2038 (0x7fffffff)
[  314.943266][ T3660] Bluetooth: hci4: SCO packet for unknown connection handle 346
[  315.040360][ T7526] 8021q: adding VLAN 0 to HW filter on device batadv0
[  315.131334][ T7526] device veth0_vlan entered promiscuous mode
[  315.135284][ T3660] Bluetooth: hci1: command tx timeout
[  315.175882][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  315.185644][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  315.193844][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  315.203308][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  316.063650][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  316.075559][ T3649] EXT4-fs (loop3): unmounting filesystem.
[  316.079740][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  316.314133][ T6723] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  316.326098][ T6723] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  316.346705][ T7526] device veth1_vlan entered promiscuous mode
[  317.027973][ T7526] device veth0_macvtap entered promiscuous mode
[  317.075489][ T7526] device veth1_macvtap entered promiscuous mode
[  317.117928][ T1271] ieee802154 phy0 wpan0: encryption failed: -22
[  317.124364][ T1271] ieee802154 phy1 wpan1: encryption failed: -22
[  317.145109][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  317.163984][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  317.192818][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  317.212204][ T7662] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1162'.
[  317.345937][ T5999] EXT4-fs (loop2): unmounting filesystem.
[  317.417559][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  317.477233][ T7526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  317.496292][ T7526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  317.539063][ T7526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  317.559629][ T7526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  317.582960][ T7526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  317.598063][ T7526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  317.617301][ T7526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  317.646228][ T7526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  317.667339][ T7526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  318.181522][ T7526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  318.326007][ T7526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  318.368137][ T3688] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  318.481935][ T7526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  318.637749][ T3688] usb 3-1: Using ep0 maxpacket: 32
[  318.646245][ T7526] batman_adv: batadv0: Interface activated: batadv_slave_0
[  318.757907][ T3688] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  318.795007][ T3688] usb 3-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00
[  318.825453][ T3688] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  318.852866][ T3688] usb 3-1: config 0 descriptor??
[  318.896886][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  318.906030][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  318.916424][ T7526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  318.934510][ T7526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  318.945536][ T7526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  318.965117][ T7526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  318.975704][ T7526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  319.000934][ T7526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  319.012641][ T7526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  319.023482][ T7526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  319.034073][ T7526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  319.045174][ T7526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  319.055539][ T7526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  319.066417][ T7526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  319.078350][ T7526] batman_adv: batadv0: Interface activated: batadv_slave_1
[  319.116201][ T7675] netlink: 'syz.4.1166': attribute type 12 has an invalid length.
[  319.133325][ T7675] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1166'.
[  319.145537][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  319.156311][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  319.176039][ T3785] device hsr_slave_0 left promiscuous mode
[  319.193867][ T3785] device hsr_slave_1 left promiscuous mode
[  319.204323][ T3785] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  319.222471][ T3785] batman_adv: batadv0: Removing interface: batadv_slave_0
[  319.236083][ T3785] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  319.262942][ T3785] batman_adv: batadv0: Removing interface: batadv_slave_1
[  319.274817][ T3785] device bridge_slave_1 left promiscuous mode
[  319.286125][ T3785] bridge0: port 2(bridge_slave_1) entered disabled state
[  319.306440][ T3785] device bridge_slave_0 left promiscuous mode
[  319.314050][ T3785] bridge0: port 1(bridge_slave_0) entered disabled state
[  319.375322][ T3785] device veth1_macvtap left promiscuous mode
[  319.386197][ T3785] device veth0_macvtap left promiscuous mode
[  319.396320][ T3785] device veth1_vlan left promiscuous mode
[  319.406865][ T3785] device veth0_vlan left promiscuous mode
[  320.042570][ T7680] xt_CT: You must specify a L4 protocol and not use inversions on it
[  320.517683][ T3688] usbhid 3-1:0.0: can't add hid device: -71
[  320.523699][ T3688] usbhid: probe of 3-1:0.0 failed with error -71
[  320.680484][ T3688] usb 3-1: USB disconnect, device number 10
[  321.061157][ T3785] team0 (unregistering): Port device team_slave_1 removed
[  321.104974][ T3785] team0 (unregistering): Port device team_slave_0 removed
[  321.150587][ T3785] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  321.194376][ T3785] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  321.685345][ T7705] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1177'.
[  322.119138][ T3785] bond0 (unregistering): Released all slaves
[  322.420769][ T7526] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  322.429929][ T7526] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  322.443515][ T7526] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  322.460978][ T7526] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  323.606379][ T3796] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  323.621844][ T3796] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  323.680685][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  323.722730][ T3796] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  323.739933][ T3796] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  323.829721][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  324.411525][ T7753] capability: warning: `syz.2.1196' uses 32-bit capabilities (legacy support in use)
[  325.215186][ T7769] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1204'.
[  325.257856][ T7769] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1204'.
[  325.777744][ T3660] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  325.797477][ T3660] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  325.806911][ T3660] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  325.825419][ T3660] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  325.833445][ T3660] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  325.842183][ T3660] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  325.937661][ T4089] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  326.091331][ T7762] loop2: detected capacity change from 0 to 40427
[  326.127554][ T7762] F2FS-fs (loop2): Invalid SB checksum offset: 0
[  326.154135][ T7762] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[  326.187558][ T4089] usb 4-1: Using ep0 maxpacket: 8
[  326.281930][ T7762] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  326.307714][ T4089] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  326.316025][ T4089] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  326.412251][ T4089] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  326.446196][ T7762] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0
[  326.446213][ T4089] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  326.465920][ T7762] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  326.516847][ T7786] netlink: 'syz.0.1207': attribute type 4 has an invalid length.
[  326.547547][ T4089] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  326.609846][ T4089] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  326.635279][ T7777] chnl_net:caif_netlink_parms(): no params data found
[  326.830483][ T4089] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  327.097573][ T4089] usb 4-1: usb_control_msg returned -32
[  327.104582][ T4089] usbtmc 4-1:16.0: can't read capabilities
[  327.135312][ T7777] bridge0: port 1(bridge_slave_0) entered blocking state
[  327.146000][ T7777] bridge0: port 1(bridge_slave_0) entered disabled state
[  327.162756][ T7777] device bridge_slave_0 entered promiscuous mode
[  327.193544][ T7777] bridge0: port 2(bridge_slave_1) entered blocking state
[  327.268349][ T7777] bridge0: port 2(bridge_slave_1) entered disabled state
[  327.317350][ T7777] device bridge_slave_1 entered promiscuous mode
[  327.577847][   T48] Bluetooth: hci1: command tx timeout
[  327.604650][ T7777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  327.689165][ T7777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  327.835690][ T7777] team0: Port device team_slave_0 added
[  327.897582][ T3660] Bluetooth: hci6: command tx timeout
[  327.927203][ T7777] team0: Port device team_slave_1 added
[  328.045083][ T7777] batman_adv: batadv0: Adding interface: batadv_slave_0
[  328.077510][ T7777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  328.189057][ T7777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  328.276801][ T7777] batman_adv: batadv0: Adding interface: batadv_slave_1
[  328.308940][ T7777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  328.425502][ T7777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  328.553209][ T4089] usb 4-1: USB disconnect, device number 11
[  329.071263][ T7777] device hsr_slave_0 entered promiscuous mode
[  329.932567][ T7777] device hsr_slave_1 entered promiscuous mode
[  329.967478][ T3660] Bluetooth: hci6: command tx timeout
[  330.027582][ T7777] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  330.035209][ T7777] Cannot create hsr debugfs directory
[  330.079443][ T7816] netlink: 'syz.0.1217': attribute type 4 has an invalid length.
[  330.552590][ T5999] bio_check_eod: 34 callbacks suppressed
[  330.552610][ T5999] syz-executor: attempt to access beyond end of device
[  330.552610][ T5999] loop2: rw=524288, sector=45064, nr_sectors = 8 limit=40427
[  330.599862][ T5999] syz-executor: attempt to access beyond end of device
[  330.599862][ T5999] loop2: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  330.719419][ T3701] kworker/u4:5: attempt to access beyond end of device
[  330.719419][ T3701] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  330.802648][ T7777] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  331.020982][ T7777] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  331.211977][ T7777] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  331.393407][ T7777] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  331.737799][ T7827] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1222'.
[  331.859350][ T7777] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  331.892854][ T7777] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  331.977181][ T7777] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  332.011436][ T7777] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  332.047873][ T3660] Bluetooth: hci6: command tx timeout
[  332.345230][ T7777] 8021q: adding VLAN 0 to HW filter on device bond0
[  332.387708][ T7835] netlink: 'syz.0.1227': attribute type 4 has an invalid length.
[  332.484623][ T7777] 8021q: adding VLAN 0 to HW filter on device team0
[  332.530030][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  332.556394][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  332.618766][ T3416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  332.651998][ T3416] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  332.678172][ T3416] bridge0: port 1(bridge_slave_0) entered blocking state
[  332.685616][ T3416] bridge0: port 1(bridge_slave_0) entered forwarding state
[  332.727937][ T3416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  332.748289][ T3416] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  332.787936][ T3416] bridge0: port 2(bridge_slave_1) entered blocking state
[  332.795162][ T3416] bridge0: port 2(bridge_slave_1) entered forwarding state
[  332.858687][ T3416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  332.918470][ T3416] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  332.926817][ T3416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  332.970746][ T3416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  333.002655][ T3416] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  333.031437][ T3416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  333.074160][ T3416] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  333.120117][ T3416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  333.152691][ T3416] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  333.183581][ T3416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  333.230296][ T3416] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  333.239424][ T3659] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  333.252381][ T3659] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  333.262626][ T3659] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  333.273204][ T3659] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  333.281838][ T3659] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  333.291479][ T3659] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  333.333657][ T7777] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  333.401888][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  333.842073][ T7853] loop3: detected capacity change from 0 to 512
[  333.949141][ T7853] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  333.990307][ T7853] ext4 filesystem being mounted at /309/file0 supports timestamps until 2038 (0x7fffffff)
[  334.118222][ T7853] EXT4-fs error (device loop3): ext4_add_entry:2484: inode #2: comm syz.3.1232: Directory hole found for htree leaf block 0
[  334.132266][ T3659] Bluetooth: hci6: command tx timeout
[  334.236000][ T7847] chnl_net:caif_netlink_parms(): no params data found
[  334.317882][ T7860] EXT4-fs error (device loop3): ext4_add_entry:2484: inode #2: comm syz.3.1232: Directory hole found for htree leaf block 0
[  334.387968][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  334.395735][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  334.478448][ T7777] 8021q: adding VLAN 0 to HW filter on device batadv0
[  334.527506][ T3659] Bluetooth: hci2: command 0x0406 tx timeout
[  334.787860][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  334.796839][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  334.850280][ T3649] EXT4-fs (loop3): unmounting filesystem.
[  335.005478][ T7847] bridge0: port 1(bridge_slave_0) entered blocking state
[  335.034935][ T7847] bridge0: port 1(bridge_slave_0) entered disabled state
[  335.078100][ T7847] device bridge_slave_0 entered promiscuous mode
[  335.094254][ T7866] loop3: detected capacity change from 0 to 1024
[  335.112816][ T7847] bridge0: port 2(bridge_slave_1) entered blocking state
[  335.139202][ T7866] ext4: Unknown parameter 'nouser_xattr'
[  335.145489][ T7847] bridge0: port 2(bridge_slave_1) entered disabled state
[  335.162355][ T7847] device bridge_slave_1 entered promiscuous mode
[  335.172107][ T7868] loop0: detected capacity change from 0 to 128
[  335.188808][ T3645] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  335.204631][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  335.248778][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  335.291322][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  335.318267][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  335.337556][ T3659] Bluetooth: hci0: command tx timeout
[  335.349912][ T7868] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)
[  335.402958][ T7777] device veth0_vlan entered promiscuous mode
[  336.306508][ T3659] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  336.356386][ T3659] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  336.368001][ T3659] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  336.375994][ T3659] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  336.384834][ T3659] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  336.393000][ T3659] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  336.404180][ T3851] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)
[  336.447013][ T7877] loop3: detected capacity change from 0 to 512
[  336.511488][ T7847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  336.546865][ T7777] device veth1_vlan entered promiscuous mode
[  336.581942][ T7877] EXT4-fs error (device loop3): ext4_do_update_inode:5210: inode #16: comm syz.3.1236: corrupted inode contents
[  336.598181][ T7877] EXT4-fs error (device loop3): ext4_dirty_inode:6072: inode #16: comm syz.3.1236: mark_inode_dirty error
[  336.610533][ T7847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  336.682826][ T7877] EXT4-fs error (device loop3): ext4_do_update_inode:5210: inode #16: comm syz.3.1236: corrupted inode contents
[  336.705044][ T7877] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #16: comm syz.3.1236: mark_inode_dirty error
[  336.742616][ T7877] EXT4-fs error (device loop3): ext4_do_update_inode:5210: inode #16: comm syz.3.1236: corrupted inode contents
[  336.815364][ T7877] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem
[  336.834345][ T7877] EXT4-fs error (device loop3): ext4_do_update_inode:5210: inode #16: comm syz.3.1236: corrupted inode contents
[  336.861639][ T7877] EXT4-fs error (device loop3): ext4_truncate:4300: inode #16: comm syz.3.1236: mark_inode_dirty error
[  336.880154][ T7877] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem
[  336.910381][ T7877] EXT4-fs (loop3): 1 truncate cleaned up
[  336.916110][ T7877] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  336.952991][ T7877] ext4 filesystem being mounted at /311/file1 supports timestamps until 2038 (0x7fffffff)
[  337.012707][ T7847] team0: Port device team_slave_0 added
[  337.470862][ T3660] Bluetooth: hci0: command tx timeout
[  337.581678][ T7777] device veth0_macvtap entered promiscuous mode
[  337.937638][   T26] audit: type=1800 audit(1723118502.064:71): pid=7888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1236" name="bus" dev="loop3" ino=18 res=0 errno=0
[  338.363733][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  338.390827][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  338.402990][ T7847] team0: Port device team_slave_1 added
[  338.422985][ T7777] device veth1_macvtap entered promiscuous mode
[  338.446819][ T7890] netlink: 'syz.0.1238': attribute type 4 has an invalid length.
[  338.455361][ T3660] Bluetooth: hci3: command tx timeout
[  338.464090][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  338.609795][ T3649] EXT4-fs (loop3): unmounting filesystem.
[  338.629323][ T7847] batman_adv: batadv0: Adding interface: batadv_slave_0
[  338.636661][ T7847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  338.736593][ T7847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  338.763532][ T7847] batman_adv: batadv0: Adding interface: batadv_slave_1
[  338.771976][ T7847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  338.802209][ T7847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  338.960766][ T7777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  338.973507][ T7777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  338.986421][ T7777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  338.999866][ T7777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  339.010658][ T7777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  339.021789][ T7777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  339.033723][ T7777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  339.045197][ T7777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  339.059083][ T7777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  339.072671][ T7777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  339.085138][ T7777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  339.097788][ T7777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  339.110192][ T7777] batman_adv: batadv0: Interface activated: batadv_slave_0
[  339.141694][ T7847] device hsr_slave_0 entered promiscuous mode
[  339.169449][ T7847] device hsr_slave_1 entered promiscuous mode
[  339.187977][ T7847] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  339.200249][ T7847] Cannot create hsr debugfs directory
[  339.217268][ T4089] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  339.232202][ T4089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  339.249705][ T7777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  339.267349][ T7777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  339.280755][ T7777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  339.292201][ T7777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  339.303230][ T7777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  339.317327][ T7777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  339.336455][ T7777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  339.347188][ T7777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  339.371046][ T7777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  339.392944][ T7777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  339.404579][ T3659] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  339.406299][ T7777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  339.415858][ T3659] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  339.436379][ T7777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  339.440529][ T3659] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  339.450074][ T7777] batman_adv: batadv0: Interface activated: batadv_slave_1
[  339.462568][ T3659] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  339.473590][ T3659] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  339.486157][ T3659] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  339.527532][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  339.536945][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  339.560317][ T7874] chnl_net:caif_netlink_parms(): no params data found
[  339.567714][ T3660] Bluetooth: hci0: command tx timeout
[  339.600292][ T7777] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  339.610664][ T7777] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  339.619885][ T7777] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  339.629381][ T7777] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  339.741277][ T3785] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  339.846666][ T3785] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  339.940669][ T3785] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  339.981931][ T7874] bridge0: port 1(bridge_slave_0) entered blocking state
[  339.989712][ T7874] bridge0: port 1(bridge_slave_0) entered disabled state
[  340.003596][ T7874] device bridge_slave_0 entered promiscuous mode
[  340.040074][ T3785] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  340.056283][ T7874] bridge0: port 2(bridge_slave_1) entered blocking state
[  340.069829][ T7874] bridge0: port 2(bridge_slave_1) entered disabled state
[  340.080473][ T7874] device bridge_slave_1 entered promiscuous mode
[  340.109484][ T3851] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  340.119325][ T3851] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  340.185487][ T6723] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  340.274889][ T3737] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  340.295874][ T7874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  340.306887][ T3737] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  340.414673][ T7847] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  340.510015][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  340.527511][ T3659] Bluetooth: hci3: command tx timeout
[  340.539681][ T7874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  340.598525][ T7847] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  340.773224][ T7847] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  340.824829][ T7874] team0: Port device team_slave_0 added
[  340.858667][ T7899] chnl_net:caif_netlink_parms(): no params data found
[  340.895807][ T7874] team0: Port device team_slave_1 added
[  341.241610][ T7847] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  341.452275][ T7874] batman_adv: batadv0: Adding interface: batadv_slave_0
[  341.496657][ T7874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  341.567720][ T3659] Bluetooth: hci2: command tx timeout
[  341.622063][ T7874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  341.647498][ T3659] Bluetooth: hci0: command tx timeout
[  341.656575][ T7874] batman_adv: batadv0: Adding interface: batadv_slave_1
[  341.677522][ T7874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  341.704867][ T7874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  342.408836][ T7899] bridge0: port 1(bridge_slave_0) entered blocking state
[  342.422483][ T7899] bridge0: port 1(bridge_slave_0) entered disabled state
[  342.444890][ T7899] device bridge_slave_0 entered promiscuous mode
[  342.454859][ T7899] bridge0: port 2(bridge_slave_1) entered blocking state
[  342.464238][ T7899] bridge0: port 2(bridge_slave_1) entered disabled state
[  342.472815][ T7899] device bridge_slave_1 entered promiscuous mode
[  342.523477][ T7874] device hsr_slave_0 entered promiscuous mode
[  342.541840][ T7874] device hsr_slave_1 entered promiscuous mode
[  342.558629][ T7874] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  342.566257][ T7874] Cannot create hsr debugfs directory
[  342.617472][ T3659] Bluetooth: hci3: command tx timeout
[  342.915289][ T7899] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  343.137645][ T7899] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  343.373973][ T7847] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  343.411765][ T7847] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  343.543945][ T7899] team0: Port device team_slave_0 added
[  343.651085][ T3659] Bluetooth: hci2: command tx timeout
[  343.678189][ T7847] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  343.711684][ T7899] team0: Port device team_slave_1 added
[  343.763088][ T7847] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  344.000584][ T7899] batman_adv: batadv0: Adding interface: batadv_slave_0
[  344.005660][ T7961] program syz.0.1248 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  344.017454][ T7899] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  344.062003][ T7899] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  344.304755][ T7899] batman_adv: batadv0: Adding interface: batadv_slave_1
[  344.327741][ T7899] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  344.397586][ T7899] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  344.673312][ T7874] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  344.687649][ T3659] Bluetooth: hci3: command tx timeout
[  344.914059][ T7969] loop1: detected capacity change from 0 to 40427
[  344.975755][ T7969] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  344.986798][ T7969] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  345.081633][ T7969] F2FS-fs (loop1): Found nat_bits in checkpoint
[  345.109148][ T7874] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  345.139576][ T7899] device hsr_slave_0 entered promiscuous mode
[  345.148358][ T7899] device hsr_slave_1 entered promiscuous mode
[  345.157133][ T7899] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  345.165924][ T7899] Cannot create hsr debugfs directory
[  345.175562][ T7988] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1256'.
[  345.208714][ T7969] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  345.215957][ T7969] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  345.223409][ T7988] device xfrm1 entered promiscuous mode
[  345.341277][ T7874] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  345.614368][ T7996] device vlan2 entered promiscuous mode
[  345.672636][ T7969] overlayfs: invalid origin (0000007900000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000)
[  345.711910][ T7874] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  345.727826][ T3659] Bluetooth: hci2: command tx timeout
[  345.923364][ T7777] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix.
[  345.923400][ T7777] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix.
[  345.943346][ T7777] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix.
[  345.951752][ T7777] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix.
[  345.964458][ T7777] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix.
[  345.975093][ T7777] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix.
[  345.983567][ T7777] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix.
[  346.306171][ T7847] 8021q: adding VLAN 0 to HW filter on device bond0
[  346.414539][ T7847] 8021q: adding VLAN 0 to HW filter on device team0
[  346.611585][ T8012] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1263'.
[  346.635442][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  346.658948][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  346.732218][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  346.764751][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  346.788360][  T154] bridge0: port 1(bridge_slave_0) entered blocking state
[  346.797058][  T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[  346.806777][ T8012] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1263'.
[  346.815995][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  346.830961][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  346.848364][  T154] bridge0: port 2(bridge_slave_1) entered blocking state
[  346.858228][  T154] bridge0: port 2(bridge_slave_1) entered forwarding state
[  346.890701][ T7874] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  346.956472][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  346.971996][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  347.171933][   T27] INFO: task syz-executor:5455 blocked for more than 143 seconds.
[  347.181423][   T27]       Not tainted 6.1.103-syzkaller #0
[  347.194037][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  347.223779][   T27] task:syz-executor    state:D stack:20056 pid:5455  ppid:1      flags:0x00004004
[  347.235642][ T8024] loop0: detected capacity change from 0 to 16
[  347.245253][   T27] Call Trace:
[  347.261943][   T27]  <TASK>
[  347.264988][   T27]  __schedule+0x143f/0x4570
[  347.279249][   T27]  ? release_firmware_map_entry+0x186/0x186
[  347.286020][   T27]  schedule+0xbf/0x180
[  347.291254][   T27]  schedule_timeout+0xac/0x300
[  347.297832][   T27]  ? console_conditional_schedule+0x40/0x40
[  347.310717][   T27]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  347.317029][   T27]  ? do_raw_spin_unlock+0x137/0x8a0
[  347.324773][ T8024] erofs: (device loop0): mounted with root inode @ nid 36.
[  347.330023][   T27]  ? wait_for_completion+0x2f9/0x610
[  347.339833][   T27]  ? _raw_spin_unlock_irq+0x1f/0x40
[  347.347005][   T27]  ? lockdep_hardirqs_on+0x94/0x130
[  347.379893][   T27]  ? wait_for_completion+0x2f9/0x610
[  347.386960][   T27]  wait_for_completion+0x350/0x610
[  347.393706][   T27]  ? io_schedule+0x100/0x100
[  347.400201][   T27]  ? kasan_quarantine_put+0xd4/0x220
[  347.406444][   T27]  ? kthread_unpark+0x175/0x200
[  347.415636][   T27]  kthread_stop+0x1ab/0x690
[  347.421894][   T27]  ext4_stop_mmpd+0x43/0xb0
[  347.427305][   T27]  ext4_put_super+0xb49/0x10e0
[  347.433241][   T27]  ? ext4_put_super+0x3cc/0x10e0
[  347.440875][   T27]  ? ext4_drop_inode+0x2e0/0x2e0
[  347.449101][   T27]  generic_shutdown_super+0x130/0x340
[  347.454833][   T27]  kill_block_super+0x7a/0xe0
[  347.461060][   T27]  deactivate_locked_super+0xa0/0x110
[  347.473976][   T27]  cleanup_mnt+0x490/0x520
[  347.482004][   T27]  ? lockdep_hardirqs_on+0x94/0x130
[  347.487280][   T27]  task_work_run+0x246/0x300
[  347.492124][   T27]  ? task_work_cancel+0x2e0/0x2e0
[  347.497230][   T27]  ? exit_to_user_mode_loop+0x39/0x100
[  347.503043][   T27]  exit_to_user_mode_loop+0xde/0x100
[  347.508959][   T27]  exit_to_user_mode_prepare+0xb1/0x140
[  347.514678][   T27]  syscall_exit_to_user_mode+0x60/0x270
[  347.520464][   T27]  do_syscall_64+0x47/0xb0
[  347.525054][   T27]  ? clear_bhb_loop+0x45/0xa0
[  347.530019][   T27]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  347.536317][   T27] RIP: 0033:0x7fd9b9778d27
[  347.541176][   T27] RSP: 002b:00007ffd521748e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  347.554699][   T27] RAX: 0000000000000000 RBX: 00007fd9b97e578c RCX: 00007fd9b9778d27
[  347.563016][   T27] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd521749a0
[  347.571675][   T27] RBP: 00007ffd521749a0 R08: 0000000000000000 R09: 0000000000000000
[  347.581421][   T27] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd52175a20
[  347.603721][   T27] R13: 00007fd9b97e578c R14: 0000000000030532 R15: 00007ffd52175a60
[  347.612513][   T27]  </TASK>
[  347.616174][   T27] INFO: task kmmpd-loop4:5790 blocked for more than 143 seconds.
[  347.625922][   T27]       Not tainted 6.1.103-syzkaller #0
[  347.632358][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  347.642110][   T27] task:kmmpd-loop4     state:D stack:27032 pid:5790  ppid:2      flags:0x00024000
[  347.654490][   T27] Call Trace:
[  347.663401][   T27]  <TASK>
[  347.669925][   T27]  __schedule+0x143f/0x4570
[  347.677691][ T4089] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  347.680370][   T27]  ? rcuwait_wake_up+0x18/0x220
[  347.702414][   T27]  ? release_firmware_map_entry+0x186/0x186
[  347.718118][   T27]  ? print_irqtrace_events+0x210/0x210
[  347.723915][   T27]  ? do_raw_spin_unlock+0x137/0x8a0
[  347.730081][   T27]  schedule+0xbf/0x180
[  347.734381][   T27]  ? percpu_rwsem_wait+0x343/0x450
[  347.740335][   T27]  percpu_rwsem_wait+0x3b9/0x450
[  347.745672][   T27]  ? trace_contention_begin+0x1a0/0x1a0
[  347.752458][   T27]  ? percpu_up_write+0x90/0x90
[  347.759140][   T27]  ? rcu_is_watching+0x11/0xb0
[  347.764190][   T27]  __percpu_down_read+0xe6/0x130
[  347.770036][   T27]  ? kmmpd+0x263/0xa70
[  347.774419][   T27]  write_mmp_block+0x2ee/0x390
[  347.779833][   T27]  kmmpd+0x263/0xa70
[  347.784052][   T27]  ? write_mmp_block_thawed+0x5a0/0x5a0
[  347.790406][   T27]  ? __kthread_parkme+0x168/0x1c0
[  347.795667][   T27]  kthread+0x28d/0x320
[  347.800446][   T27]  ? write_mmp_block_thawed+0x5a0/0x5a0
[  347.806171][   T27]  ? kthread_blkcg+0xd0/0xd0
[  347.810642][ T3659] Bluetooth: hci2: command tx timeout
[  347.817224][   T27]  ret_from_fork+0x1f/0x30
[  347.825087][   T27]  </TASK>
[  347.832902][   T27] 
[  347.832902][   T27] Showing all locks held in the system:
[  347.843121][   T27] 1 lock held by rcu_tasks_kthre/12:
[  347.852563][   T27]  #0: ffffffff8d32b190 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30
[  347.863869][   T27] 1 lock held by rcu_tasks_trace/13:
[  347.869281][   T27]  #0: ffffffff8d32b990 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30
[  347.880935][   T27] 1 lock held by khungtaskd/27:
[  347.885911][   T27]  #0: ffffffff8d32afc0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290
[  347.897236][   T27] 3 locks held by kworker/u4:3/46:
[  347.902481][   T27]  #0: ffff8880196a5138 ((wq_completion)cfg80211){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  347.913333][   T27]  #1: ffffc90000b77d20 ((work_completion)(&(&rdev->dfs_update_channels_wk)->work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  347.926961][   T27]  #2: ffffffff8e4f7c28 (rtnl_mutex){+.+.}-{3:3}, at: cfg80211_dfs_channels_update_work+0xbb/0x610
[  347.937879][ T4089] usb 1-1: Using ep0 maxpacket: 16
[  347.943598][   T27] 3 locks held by kworker/0:2/154:
[  347.949081][   T27]  #0: ffff888012870938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  347.961425][   T27]  #1: ffffc90002dbfd20 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  347.972641][   T27]  #2: ffffffff8e4f7c28 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xa/0x50
[  347.983101][   T27] 1 lock held by dhcpcd/3305:
[  347.988149][   T27]  #0: ffffffff8e4f7c28 (rtnl_mutex){+.+.}-{3:3}, at: devinet_ioctl+0x2a5/0x1b20
[  347.998368][   T27] 2 locks held by getty/3394:
[  348.003084][   T27]  #0: ffff888028b32098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70
[  348.012939][   T27]  #1: ffffc900031262f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a7/0x1db0
[  348.023763][   T27] 3 locks held by kworker/0:5/3690:
[  348.029099][   T27]  #0: ffff888012870938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  348.039764][   T27]  #1: ffffc9000409fd20 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  348.050352][   T27]  #2: ffffffff8e4f7c28 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xa/0x20
[  348.061161][ T4089] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  348.075362][   T27] 3 locks held by kworker/1:6/3691:
[  348.081046][   T27]  #0: ffff888028086d38 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  348.092445][ T4089] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40
[  348.101832][   T27]  #1: ffffc900040afd20 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  348.114159][ T4089] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  348.123148][   T27]  #2: ffffffff8e4f7c28 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xcc/0x16b0
[  348.134707][ T4089] usb 1-1: config 0 descriptor??
[  348.139932][   T27] 3 locks held by kworker/0:6/3693:
[  348.145337][   T27]  #0: ffff888028086d38 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  348.156865][   T27]  #1: ffffc900040dfd20 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  348.170170][   T27]  #2: ffffffff8e4f7c28 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xcc/0x16b0
[  348.181305][   T27] 2 locks held by kworker/0:7/3711:
[  348.186883][   T27]  #0: ffff888012872138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  348.199605][ T4089] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  348.207671][   T27]  #1: ffffc9000446fd20 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  348.227985][   T27] 4 locks held by kworker/u4:7/3785:
[  348.237353][   T27]  #0: ffff888012a1e938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  348.248080][   T27]  #1: ffffc900044cfd20 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  348.258241][   T27]  #2: ffffffff8e4eb8d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xf1/0xb60
[  348.268134][   T27]  #3: ffffffff8d330480 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x48/0x5f0
[  348.278224][   T27] 3 locks held by kworker/u4:8/3796:
[  348.283633][   T27] 1 lock held by syz-executor/5455:
[  348.288945][   T27]  #0: ffff88807893c0e0 (&type->s_umount_key#31){++++}-{3:3}, at: deactivate_super+0xa9/0xe0
[  348.299462][   T27] 1 lock held by kmmpd-loop4/5790:
[  348.304596][   T27]  #0: ffff88807893c460 (sb_writers#4){++++}-{0:0}, at: kmmpd+0x263/0xa70
[  348.313429][   T27] 1 lock held by syz-executor/7847:
[  348.318814][   T27]  #0: ffffffff8e4f7c28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7c1/0xff0
[  348.328557][   T27] 1 lock held by syz-executor/7874:
[  348.334582][   T27]  #0: ffffffff8e4f7c28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7c1/0xff0
[  348.344811][   T27] 8 locks held by syz-executor/7899:
[  348.350240][   T27]  #0: ffff88807ea3a460 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x269/0xbc0
[  348.359298][   T27]  #1: ffff8880768fb488 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1e7/0x4f0
[  348.369793][   T27]  #2: ffff888021f96bd0 (kn->active#50){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20b/0x4f0
[  348.379974][   T27]  #3: ffffffff8de21548 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xf8/0x480
[  348.390414][   T27]  #4: ffff88805996f0e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xb6/0x880
[  348.401565][   T27]  #5: ffff88807eba72f8 (&devlink->lock_key){+.+.}-{3:3}, at: nsim_drv_remove+0x54/0x160
[  348.411536][   T27]  #6: ffffffff8e4f7c28 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x3a/0x140
[  348.420594][   T27]  #7: ffffffff8d3305b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x4f0/0x930
[  348.431771][   T27] 1 lock held by syz.1.1264/8022:
[  348.436813][   T27]  #0: ffffffff8e4f7c28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7c1/0xff0
[  348.446463][   T27] 
[  348.452270][   T27] =============================================
[  348.452270][   T27] 
[  348.461380][   T27] NMI backtrace for cpu 1
[  348.465757][   T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 6.1.103-syzkaller #0
[  348.473938][   T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  348.484013][   T27] Call Trace:
[  348.487305][   T27]  <TASK>
[  348.490249][   T27]  dump_stack_lvl+0x1e3/0x2cb
[  348.494958][   T27]  ? nf_tcp_handle_invalid+0x642/0x642
[  348.500433][   T27]  ? panic+0x764/0x764
[  348.504507][   T27]  ? vprintk_emit+0x622/0x740
[  348.509373][   T27]  ? printk_sprint+0x490/0x490
[  348.514153][   T27]  ? nmi_cpu_backtrace+0x252/0x560
[  348.519369][   T27]  nmi_cpu_backtrace+0x4e1/0x560
[  348.524441][   T27]  ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0
[  348.530631][   T27]  ? _printk+0xd1/0x111
[  348.535671][   T27]  ? panic+0x764/0x764
[  348.540295][   T27]  ? __wake_up_klogd+0xcc/0x100
[  348.545249][   T27]  ? panic+0x764/0x764
[  348.549765][   T27]  ? nmi_trigger_cpumask_backtrace+0xe2/0x3f0
[  348.555937][   T27]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[  348.562329][   T27]  nmi_trigger_cpumask_backtrace+0x1b0/0x3f0
[  348.568327][   T27]  watchdog+0xf88/0xfd0
[  348.572499][   T27]  ? watchdog+0x1f8/0xfd0
[  348.576866][   T27]  kthread+0x28d/0x320
[  348.580950][   T27]  ? hungtask_pm_notify+0x50/0x50
[  348.585985][   T27]  ? kthread_blkcg+0xd0/0xd0
[  348.590584][   T27]  ret_from_fork+0x1f/0x30
[  348.595125][   T27]  </TASK>
[  348.598800][   T27] Sending NMI from CPU 1 to CPUs 0:
[  348.604061][    C0] NMI backtrace for cpu 0
[  348.604073][    C0] CPU: 0 PID: 7886 Comm: kworker/u4:16 Not tainted 6.1.103-syzkaller #0
[  348.604091][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  348.604101][    C0] Workqueue: phy37 ieee80211_iface_work
[  348.604125][    C0] RIP: 0010:validate_chain+0x1bb5/0x5950
[  348.604144][    C0] Code: 4d 8b 3e 49 8d 9f ba 00 00 00 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 84 c0 0f 85 81 02 00 00 80 3b 01 <0f> 85 98 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b 4c 24 60 0f
[  348.604158][    C0] RSP: 0018:ffffc9000353ea20 EFLAGS: 00000097
[  348.604171][    C0] RAX: 0000000000000000 RBX: ffffffff9043ae1a RCX: dffffc0000000000
[  348.604184][    C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffc9000353eb40
[  348.604194][    C0] RBP: ffffc9000353ecd0 R08: dffffc0000000000 R09: fffffbfff20e7249
[  348.604207][    C0] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffffff91829d58
[  348.604219][    C0] R13: 000000000002c99c R14: ffffffff91829d68 R15: ffffffff9043ad60
[  348.604231][    C0] FS:  0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
[  348.604246][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  348.604258][    C0] CR2: 0000001b30510ff8 CR3: 000000007ed95000 CR4: 00000000003506f0
[  348.604279][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  348.604288][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  348.604298][    C0] Call Trace:
[  348.604304][    C0]  <NMI>
[  348.604309][    C0]  ? nmi_cpu_backtrace+0x3de/0x560
[  348.604334][    C0]  ? read_lock_is_recursive+0x10/0x10
[  348.604361][    C0]  ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0
[  348.604394][    C0]  ? nmi_cpu_backtrace_handler+0x8/0x10
[  348.604421][    C0]  ? nmi_handle+0x12e/0x440
[  348.604447][    C0]  ? nmi_handle+0x25/0x440
[  348.604472][    C0]  ? validate_chain+0x1bb5/0x5950
[  348.604487][    C0]  ? default_do_nmi+0x62/0x150
[  348.604513][    C0]  ? exc_nmi+0xa8/0x100
[  348.604537][    C0]  ? end_repeat_nmi+0x16/0x31
[  348.604564][    C0]  ? validate_chain+0x1bb5/0x5950
[  348.604580][    C0]  ? validate_chain+0x1bb5/0x5950
[  348.604596][    C0]  ? validate_chain+0x1bb5/0x5950
[  348.604611][    C0]  </NMI>
[  348.604616][    C0]  <TASK>
[  348.604633][    C0]  ? reacquire_held_locks+0x660/0x660
[  348.604666][    C0]  ? mark_lock+0x9a/0x340
[  348.604692][    C0]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  348.604719][    C0]  ? mark_lock+0x9a/0x340
[  348.604742][    C0]  ? deref_stack_reg+0x17c/0x210
[  348.604760][    C0]  __lock_acquire+0x125b/0x1f80
[  348.604792][    C0]  lock_acquire+0x1f8/0x5a0
[  348.604815][    C0]  ? lock_timer_base+0x120/0x260
[  348.604836][    C0]  ? read_lock_is_recursive+0x10/0x10
[  348.604859][    C0]  ? stack_trace_save+0x1c0/0x1c0
[  348.604882][    C0]  ? arch_stack_walk+0x10d/0x140
[  348.604903][    C0]  ? ret_from_fork+0x1f/0x30
[  348.604928][    C0]  ? stack_trace_save+0x113/0x1c0
[  348.604952][    C0]  _raw_spin_lock_irqsave+0xd1/0x120
[  348.604970][    C0]  ? lock_timer_base+0x120/0x260
[  348.604987][    C0]  ? _raw_spin_lock+0x40/0x40
[  348.605006][    C0]  ? mark_lock+0x9a/0x340
[  348.605032][    C0]  lock_timer_base+0x120/0x260
[  348.605051][    C0]  __mod_timer+0x1cb/0xee0
[  348.605072][    C0]  ? mod_timer_pending+0x20/0x20
[  348.605092][    C0]  ? read_lock_is_recursive+0x10/0x10
[  348.605116][    C0]  ? __queue_delayed_work+0x16b/0x210
[  348.605134][    C0]  queue_delayed_work_on+0x156/0x250
[  348.605151][    C0]  ? delayed_work_timer_fn+0x80/0x80
[  348.605167][    C0]  ? llist_add_batch+0x1d0/0x1d0
[  348.605194][    C0]  kvfree_call_rcu+0x520/0x8c0
[  348.605214][    C0]  ? rcu_leak_callback+0x10/0x10
[  348.605228][    C0]  ? do_raw_spin_lock+0x14a/0x370
[  348.605250][    C0]  cfg80211_update_known_bss+0x16b/0x9e0
[  348.605284][    C0]  cfg80211_bss_update+0x187/0x21e0
[  348.605312][    C0]  ? cfg80211_inform_bss_frame_data+0x5e3/0x1680
[  348.605339][    C0]  ? cfg80211_inform_bss_frame_data+0x5e3/0x1680
[  348.605364][    C0]  ? rcu_is_watching+0x11/0xb0
[  348.605378][    C0]  ? cfg80211_inform_bss_frame_data+0x5e3/0x1680
[  348.605403][    C0]  ? cfg80211_inform_bss_frame_data+0x7c8/0x1680
[  348.605431][    C0]  cfg80211_inform_bss_frame_data+0xae4/0x1680
[  348.605463][    C0]  ? cfg80211_parse_mbssid_data+0x3410/0x3410
[  348.605498][    C0]  ? __lock_acquire+0x1f80/0x1f80
[  348.605528][    C0]  ieee80211_bss_info_update+0x847/0xf00
[  348.605556][    C0]  ? __lock_acquire+0x1f80/0x1f80
[  348.605580][    C0]  ? ieee80211_rx_bss_put+0x60/0x60
[  348.605607][    C0]  ? ieee80211_ibss_rx_queued_mgmt+0xeba/0x2dd0
[  348.605624][    C0]  ? ieee80211_vif_get_shift+0x225/0x280
[  348.605648][    C0]  ? __lock_acquire+0x1f80/0x1f80
[  348.605670][    C0]  ? ieee80211_sta_get_rates+0x65c/0x720
[  348.605703][    C0]  ieee80211_ibss_rx_queued_mgmt+0x1962/0x2dd0
[  348.605728][    C0]  ? ieee80211_ibss_rx_queued_mgmt+0xeba/0x2dd0
[  348.605747][    C0]  ? ieee80211_ibss_rx_no_sta+0x740/0x740
[  348.605769][    C0]  ? mark_lock+0x9a/0x340
[  348.605794][    C0]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  348.605820][    C0]  ? print_irqtrace_events+0x210/0x210
[  348.605844][    C0]  ? do_raw_spin_unlock+0x137/0x8a0
[  348.605863][    C0]  ? lockdep_hardirqs_on+0x94/0x130
[  348.605880][    C0]  ? skb_dequeue+0x10f/0x140
[  348.605897][    C0]  ieee80211_iface_work+0x7aa/0xce0
[  348.605918][    C0]  ? process_one_work+0x7a9/0x11d0
[  348.605937][    C0]  process_one_work+0x8a9/0x11d0
[  348.605963][    C0]  ? worker_detach_from_pool+0x260/0x260
[  348.605985][    C0]  ? _raw_spin_lock_irqsave+0x120/0x120
[  348.606002][    C0]  ? kthread_data+0x4e/0xc0
[  348.606030][    C0]  ? wq_worker_running+0x97/0x190
[  348.606058][    C0]  worker_thread+0xa47/0x1200
[  348.606077][    C0]  ? _raw_spin_unlock+0x40/0x40
[  348.606094][    C0]  ? release_firmware_map_entry+0x186/0x186
[  348.606121][    C0]  ? _raw_spin_unlock+0x40/0x40
[  348.606143][    C0]  kthread+0x28d/0x320
[  348.606157][    C0]  ? worker_clr_flags+0x190/0x190
[  348.606175][    C0]  ? kthread_blkcg+0xd0/0xd0
[  348.606190][    C0]  ret_from_fork+0x1f/0x30
[  348.606218][    C0]  </TASK>
[  349.219138][   T27] Kernel panic - not syncing: hung_task: blocked tasks
[  349.221760][ T7874] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  349.233493][   T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 6.1.103-syzkaller #0
[  349.241585][   T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  349.252004][   T27] Call Trace:
[  349.255666][   T27]  <TASK>
[  349.258965][   T27]  dump_stack_lvl+0x1e3/0x2cb
[  349.263929][   T27]  ? nf_tcp_handle_invalid+0x642/0x642
[  349.269497][   T27]  ? panic+0x764/0x764
[  349.273831][   T27]  ? llist_add_batch+0x160/0x1d0
[  349.278800][   T27]  ? vscnprintf+0x59/0x80
[  349.283136][   T27]  panic+0x318/0x764
[  349.287038][   T27]  ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0
[  349.293324][   T27]  ? memcpy_page_flushcache+0xfc/0xfc
[  349.298901][   T27]  ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0
[  349.305356][   T27]  ? nmi_trigger_cpumask_backtrace+0x33a/0x3f0
[  349.311646][   T27]  ? nmi_trigger_cpumask_backtrace+0x33f/0x3f0
[  349.317948][   T27]  watchdog+0xfc7/0xfd0
[  349.322144][   T27]  ? watchdog+0x1f8/0xfd0
[  349.326492][   T27]  kthread+0x28d/0x320
[  349.331352][   T27]  ? hungtask_pm_notify+0x50/0x50
[  349.336425][   T27]  ? kthread_blkcg+0xd0/0xd0
[  349.341194][   T27]  ret_from_fork+0x1f/0x30
[  349.345883][   T27]  </TASK>
[  349.349548][   T27] Kernel Offset: disabled
[  349.354931][   T27] Rebooting in 86400 seconds..