last executing test programs:

7.009472441s ago: executing program 4 (id=56):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140))
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000001740)=""/192, 0x0})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, 0x0, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000100)=0xfffffffc)

6.052847265s ago: executing program 4 (id=60):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="0408e200c8"], 0x7)

5.948077526s ago: executing program 4 (id=61):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x101, 0x80, 0x0, 0xffffffff}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x404}, 0x0)
r3 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
listen(r3, 0x101)
r4 = socket$inet_dccp(0x2, 0x6, 0x0)
setsockopt(r4, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1)
sendto$inet(r4, &(0x7f0000000780)='+', 0x1, 0x0, 0x0, 0x0)

5.706327167s ago: executing program 4 (id=65):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="020100020a00000000000000000000000300f68790dbc9a6b4b400000000000000000000000000000200100000000000ffffffff00000000030006000000000002000000e00000010000000000000000"], 0x50}}, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(0xffffffffffffffff, 0x4)
socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000002c0)='rxrpc_client\x00', r1}, 0x10)
rt_sigprocmask(0x0, &(0x7f0000000080)={[0xfffffffffffffffd]}, 0x0, 0x8)
r2 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0)

5.604418097s ago: executing program 1 (id=66):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x2000010, &(0x7f0000000100)=ANY=[], 0x1, 0x6ae, &(0x7f0000001780)="$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")
creat(&(0x7f0000000100)='./file0\x00', 0x0)
creat(0x0, 0xd931d3864d39dcca)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)

5.513419838s ago: executing program 4 (id=68):
socket$netlink(0x10, 0x3, 0x0)
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000100)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00000000000000000003,resv_level=000000006,coherency=full,localflocks,coherency=full,noacl,\x00'/136], 0x1, 0x4421, &(0x7f0000004500)="$eJzs3c9PHGUfAPBnBt63UNsKtYeamLiJTTRqCPSk0kRKaSm0WFNtY7xsF9i26MI2sBgPPeCtiScTD8ZDo4k3Tg0Hr/VP8OKxnpvowYuJSSNmd2eBGXbDSliwzeeTlNl5fu9+d5595jB94kTl9txSbm4pV1jIlWduLp3OfVYuLc8XQ7xPDrp/2tOJOIn9wbly7sIH10+H8NPsL4/X19fXQ1V3aGpoy+s//7g7s/XYEGfqVNtt3tpe+TiEcGLbuKq6Qggf/RhCFEI4m6SNJsfeEMKxUM+7fvfLG7k9Gs2DR8Uz+SdT99aGT02u3l9r/d6jEL4tvfjmrfnfXuka/vX1PeoeAAAAAAAAAAAAAAAAAICn3PjVK9feHxwKD6PQvRptf153PDm2ej52fc+83Pk3CwAAAAAAAAAAAAAAAAAAAP9Rm8//56LjTZ7/H0uOIy3qr7/b+THSORPvXRk7PziU7P8ebct/K0n6/WxX6G+y73t2//ezmfrN93/f3s9uNcbX6LcvRPFA6jyOBwZC+D7Z+P1kdDgulZcqb9wsLy/M7tkwnlrp+Nd3709FJ9nQv934j2ba7/z+/y9s+zZVz2/s3VfsmZaOf1fLcj98EbUV/3OZevsRf3YvHf/uWlrv1gIj9QmgGv+vuneO/1im/U7F/1gIIRdVx5pLzQDVNUw1vdV6hbR0/P9XS0tNnckH2er6/ysT//OZ9g9q/l/J/hDRVDr+/6+l9aRKbF7//fHO1/+FTPsHEf/q+Ff8/rclHf9D9cTuVJHaJ9nu/D+eab9T8b8WJ+M8FqW+AatRPb3V/1dHWjr+PdvyN+//4rbWfxcz9ffr/q/Rb+P+rzH9vxbV7/9oLh3/3pbl2r3+JzL1Oj3/j9TWf+xWOv6Ha2nptXNf7W+78Z/MtN+p+NdWJT2N+G/OJ38fqqd/Z/3XlnT8n6snxltLrNT+1tZ/0c7r/0uZ9g9i/Vcd/0rc2V6fFen4H2lZrhr/n9v4/b+cqdf5+IcwaK2/a+n4H21Zrnb99+wc/6lMvU7H/9VONg4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwFBhNjn0higdS53E8MBDCueT8ZDgcTRdm89Ol8synSyGMJem5cDy6VSpPF0r5uYXybDFfKJXKMyGcT/JPhJ5oqVSu5OcLdy5stNUb3S4WFivTxUIlhDCepL8Ujjbamp6rzBfuhBAubuQ9H5cX79wuLORn5xbfGRwcHAwTG2Poj4qfV4oLlXrv9dwQJjfq9kVbBlfLvrQxliPRJ+XlxYVCqZZ+eUudUnmmUNpSZyrJ+zr0R5XF5YWZQqWYL5VvNfo7SCPJcWzi6odXLw9ty78R1Y+j+zssAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP6lh8NvfxNC6K6fxSGEXJS8iJJ/KQ8eFc/kn0zdWxs+Nbl6f+1xszIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/7ADBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFXfpHaSCI4gD8Ziy09BhWy25nu6KIFq4InkCP4WH0KF7CO1ikSJsiBJJZCPsHtkmq72sezI+Z92AeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyz2+de+vdROR4mp7GfH7+fd/nD+X+n03ff/iDDNyOk8v3f1D3ZR/T6P8thyt2rxPN+uvj5iovZ/Bngz36WDcZ2hu3+bm6/teR8pVRLQlv0k5V9WytwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAHTtwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYgWMBAAAAAGH+1lH0bQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPArAAD//z8QH1I=")
r0 = open(&(0x7f0000000000)='./file1\x00', 0x64042, 0xeb)
r1 = creat(&(0x7f0000000200)='./bus\x00', 0x1)
pwrite64(r1, &(0x7f0000000280)='+', 0x1, 0x0)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
copy_file_range(r2, 0x0, r0, &(0x7f00000000c0)=0x10000, 0x6, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')
r3 = syz_open_dev$loop(&(0x7f0000000640), 0x0, 0x22400)
ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000580)={0x0, {}, 0x0, {}, 0x40010001, 0x5, 0xc, 0x0, "9e959f1600007b08aa26e66c4056eae795280154c382ecff090f00000cfcebd8a6078ed93fd5f0643902dd8f6fac274de9d940bba5e51e92bbd4ce85450d00", "f625c1076eef48cb1b0000010000000000eaffb34b8db9340800", [0xfffffffffff7ffff, 0xb9]})
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffc9)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000640), 0x0, 0x22400)
ioctl$LOOP_SET_STATUS(r5, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x6, 0x2, 0xa, 0x1d, "9e959f16b6787b08aa26e66c4056ec6bcfeef4fb0efcc1d8a6078ed98e203fd5f0643902dd8f6fac274de9d940bba5e51e92bbd4ce85450d00", "f625c1076e4c36c800def96015e0fb7e904d865c2fdc458ec58d347f41be5a08", [0x4, 0xa]})

5.400424588s ago: executing program 1 (id=70):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140))
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000001740)=""/192, 0x0})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, 0x0, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000100)=0xfffffffc)

3.916430134s ago: executing program 1 (id=76):
syz_emit_vhci(0x0, 0x0)

3.824388235s ago: executing program 1 (id=78):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="020100020a00000000000000000000000300f68790dbc9a6b4b400000000000000000000000000000200100000000000ffffffff00000000030006000000000002000000e00000010000000000000000"], 0x50}}, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(0xffffffffffffffff, 0x4)
socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000002c0)='rxrpc_client\x00', r1}, 0x10)
rt_sigprocmask(0x0, &(0x7f0000000080)={[0xfffffffffffffffd]}, 0x0, 0x8)
r2 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0)

3.762477765s ago: executing program 1 (id=79):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0xfffffffffffffcc1, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000004)
ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00')
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @remote, 0xb}, 0x1c)
syz_emit_ethernet(0x4e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaece65fbcee5586dd6001010000181100fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e200e22"], 0x0)

3.632236825s ago: executing program 2 (id=80):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x2000010, &(0x7f0000000100)=ANY=[], 0x1, 0x6ae, &(0x7f0000001780)="$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")
creat(&(0x7f0000000100)='./file0\x00', 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca)
execve(0x0, 0x0, 0x0)

3.470428266s ago: executing program 2 (id=81):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000140)={0x14, 0xb, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x44080}, 0x4000002)

3.309353877s ago: executing program 2 (id=82):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x101, 0x80, 0x0, 0xffffffff}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x404}, 0x0)
r3 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
listen(r3, 0x101)
r4 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)

3.254272847s ago: executing program 4 (id=83):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000c00)="632a1eb3f0c0d7e1f3e8d83e8279b7", 0xf}], 0x1}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000040010000000000000101410000001c001700060000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
writev(r0, &(0x7f0000001400)=[{&(0x7f0000000c00)="89e7ee2c7cdad9b4b47380c988ca", 0xfdef}], 0x1)

2.38024268s ago: executing program 0 (id=85):
r0 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x20}}, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)=@newtfilter={0x34, 0x2c, 0xe27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x4}, {}, {0x1c, 0xc}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x48891)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

2.313145521s ago: executing program 0 (id=86):
syz_read_part_table(0x5fd, &(0x7f0000000d00)="$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")
r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000005c0)={'\x00', 0x0, 0x7fff, 0x20469, 0x80000000000000})

1.912309132s ago: executing program 0 (id=87):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140))
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000001740)=""/192, 0x0})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, 0x0, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000100)=0xfffffffc)

1.787086823s ago: executing program 0 (id=88):
syz_emit_vhci(0x0, 0x0)

1.723693903s ago: executing program 0 (id=89):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r1, 0x21eae}}, 0x20}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$unix(0x1, 0x2, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x44, r4, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x2, 0x1f}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r6)
socket$inet_sctp(0x2, 0x1, 0x84)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)

1.256470275s ago: executing program 2 (id=90):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000680)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x10a084a, &(0x7f0000000840)=ANY=[@ANYRES32=r2, @ANYRESHEX=r0, @ANYBLOB="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", @ANYRES32=r1, @ANYRES64=r2], 0xe, 0x2b3, &(0x7f0000000200)="$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")
write$binfmt_script(r2, &(0x7f0000000340), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0)
r3 = dup(r1)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000})
ioctl$KVM_NMI(r4, 0xae9a)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2004840, &(0x7f0000000740)={[{@i_version}, {@resuid}, {@journal_path={'journal_path', 0x3d, './file0'}}, {@resuid}], [{@obj_type={'obj_type', 0x3d, '\x00\x00\x00\xe3^\x1b\xbc\x9a\xe6>\xaeYtK\xc0\xde\x04j\xe8\x00'}}, {@audit}, {@context={'context', 0x3d, 'staff_u'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@euid_eq}, {@euid_gt}]}, 0x1, 0x503, &(0x7f0000000a40)="$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")
rt_sigaction(0x1, &(0x7f0000000080)={0x0, 0x1, 0x0, {[0x808]}}, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

1.177445536s ago: executing program 3 (id=91):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x2000010, &(0x7f0000000100)=ANY=[], 0x1, 0x6ae, &(0x7f0000001780)="$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")
creat(&(0x7f0000000100)='./file0\x00', 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca)
execve(0x0, 0x0, 0x0)

916.339766ms ago: executing program 3 (id=92):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000140)={0x14, 0xb, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x44080}, 0x4000002)

842.278087ms ago: executing program 1 (id=93):
r0 = socket$netlink(0x10, 0x3, 0x0)
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000100)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00000000000000000003,resv_level=000000006,coherency=full,localflocks,coherency=full,noacl,\x00'/136], 0x1, 0x4421, &(0x7f0000004500)="$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")
r1 = open(&(0x7f0000000000)='./file1\x00', 0x64042, 0xeb)
r2 = creat(&(0x7f0000000200)='./bus\x00', 0x1)
pwrite64(r2, &(0x7f0000000280)='+', 0x1, 0x0)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
copy_file_range(r3, 0x0, r1, &(0x7f00000000c0)=0x10000, 0x6, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')
r4 = syz_open_dev$loop(&(0x7f0000000640), 0x0, 0x22400)
ioctl$LOOP_SET_STATUS(r4, 0x4c02, &(0x7f0000000580)={0x0, {}, 0x0, {}, 0x40010001, 0x5, 0xc, 0x0, "9e959f1600007b08aa26e66c4056eae795280154c382ecff090f00000cfcebd8a6078ed93fd5f0643902dd8f6fac274de9d940bba5e51e92bbd4ce85450d00", "f625c1076eef48cb1b0000010000000000eaffb34b8db9340800", [0xfffffffffff7ffff, 0xb9]})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffc9)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0)
syz_open_dev$loop(&(0x7f0000000640), 0x0, 0x22400)
close_range(r0, 0xffffffffffffffff, 0x0)

780.700447ms ago: executing program 0 (id=94):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000001900)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000006340)={0x2020, 0x0, <r1=>0x0}, 0x2058)
write$FUSE_LSEEK(r0, &(0x7f00000021c0)={0x18, 0x0, r1, {0x7}}, 0x18)
read$FUSE(r0, &(0x7f0000002200)={0x2020}, 0x2055)
timer_create(0x0, &(0x7f0000000280)={0x0, 0x12}, 0x0)
memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = gettid()
tkill(r2, 0x13)
pselect6(0x40, &(0x7f0000000000)={0x3a}, 0x0, 0x0, 0x0, 0x0)

726.589227ms ago: executing program 3 (id=95):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000500)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x48}}, 0x0)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="400000000b06030000000000000000000200000605000100070000000900020073797a3200000000180007800900120073797a3100000000080008400000329310"], 0x40}, 0x1, 0x0, 0x0, 0x44080}, 0x4000002)

568.797398ms ago: executing program 3 (id=96):
r0 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x20}}, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)=@newtfilter={0x34, 0x2c, 0xe27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x4}, {}, {0x1c, 0xc}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x48891)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

396.417258ms ago: executing program 3 (id=97):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f0000000600)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x6, 0xa, 0x1, 0x9b5, 0x0, "b81af436cd0471587fdfb6733a7bd36f2562cbacb1804403be396c70c6d4fd7a3c580cfb59f696fe6595865dbd499d23158dd64f4d5ee4945043a4ce0ff4802d66a7752630daa299e625db14f08cfc11456fca95e920d876a37aeb6453a99f7404723f3bced127dcc4c45a928d3e629ce828afe41df4fcf193ad147131275f5b"})

328.378929ms ago: executing program 3 (id=98):
socket$nl_route(0x10, 0x3, 0x0)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x15)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
creat(&(0x7f0000000300)='./file0\x00', 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macvlan0\x00'})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000020ac050f02220001828301090224000101000000090400000203010200092100050001220000090581"], 0x0)
openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000300)={{0x0, 0x1, 0x7ff, 0x0, 0x6}})
r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0)
ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af00, 0x0)

191.781059ms ago: executing program 2 (id=99):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140))
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000001740)=""/192, 0x0})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, 0x0, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000100)=0xfffffffc)

0s ago: executing program 2 (id=100):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x101, 0x80, 0x0, 0xffffffff}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x404}, 0x0)
r3 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
listen(r3, 0x101)
r4 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.76' (ED25519) to the list of known hosts.
[   68.898493][ T4238] cgroup: Unknown subsys name 'net'
[   69.059777][ T4238] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   70.540596][ T4238] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k FS
[   71.366095][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[   71.372549][ T1276] ieee802154 phy1 wpan1: encryption failed: -22
[   71.925716][ T4256] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   71.934345][ T4256] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   71.950067][ T4266] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   71.958246][ T4266] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   71.966302][ T4266] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   71.968693][ T4259] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   71.974524][ T4266] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   71.982243][ T4259] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   71.995552][ T4259] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   71.997457][ T4266] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   72.003342][ T4259] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   72.010982][ T4266] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   72.018398][ T4259] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   72.025040][ T4266] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   72.033203][ T4259] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   72.039245][ T4266] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   72.045988][ T4259] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   72.052961][ T4266] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   72.060824][ T4259] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   72.067313][ T4266] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   72.082858][ T4251] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   72.091413][ T4251] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   72.099833][ T4251] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   72.124649][ T4251] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   72.139028][ T4259] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   72.146975][ T4259] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   72.155145][ T4259] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   72.163289][ T4251] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   72.188858][ T4251] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   72.197141][ T4251] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   72.539939][ T4250] chnl_net:caif_netlink_parms(): no params data found
[   72.596707][ T4249] chnl_net:caif_netlink_parms(): no params data found
[   72.657667][ T4260] chnl_net:caif_netlink_parms(): no params data found
[   72.757799][ T4250] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.765777][ T4250] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.775050][ T4250] device bridge_slave_0 entered promiscuous mode
[   72.795861][ T4257] chnl_net:caif_netlink_parms(): no params data found
[   72.809792][ T4250] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.817553][ T4250] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.826305][ T4250] device bridge_slave_1 entered promiscuous mode
[   72.891723][ T4262] chnl_net:caif_netlink_parms(): no params data found
[   72.905994][ T4250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.930871][ T4249] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.938062][ T4249] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.948972][ T4249] device bridge_slave_0 entered promiscuous mode
[   72.962750][ T4250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.994808][ T4249] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.001944][ T4249] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.013737][ T4249] device bridge_slave_1 entered promiscuous mode
[   73.030027][ T4260] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.037336][ T4260] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.045466][ T4260] device bridge_slave_0 entered promiscuous mode
[   73.078005][ T4260] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.085297][ T4260] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.093450][ T4260] device bridge_slave_1 entered promiscuous mode
[   73.141379][ T4250] team0: Port device team_slave_0 added
[   73.158864][ T4249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   73.172923][ T4249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   73.199456][ T4250] team0: Port device team_slave_1 added
[   73.205640][ T4257] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.213889][ T4257] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.221749][ T4257] device bridge_slave_0 entered promiscuous mode
[   73.255603][ T4260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   73.272381][ T4257] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.279793][ T4257] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.287805][ T4257] device bridge_slave_1 entered promiscuous mode
[   73.298404][ T4249] team0: Port device team_slave_0 added
[   73.304919][ T4262] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.312028][ T4262] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.320691][ T4262] device bridge_slave_0 entered promiscuous mode
[   73.329896][ T4260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   73.357355][ T4249] team0: Port device team_slave_1 added
[   73.363557][ T4262] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.370651][ T4262] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.378965][ T4262] device bridge_slave_1 entered promiscuous mode
[   73.394506][ T4250] batman_adv: batadv0: Adding interface: batadv_slave_0
[   73.401733][ T4250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.428360][ T4250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   73.453414][ T4257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   73.488608][ T4250] batman_adv: batadv0: Adding interface: batadv_slave_1
[   73.496370][ T4250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.522437][ T4250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   73.541342][ T4257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   73.568446][ T4260] team0: Port device team_slave_0 added
[   73.587866][ T4249] batman_adv: batadv0: Adding interface: batadv_slave_0
[   73.595125][ T4249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.621885][ T4249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   73.636431][ T4262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   73.657127][ T4260] team0: Port device team_slave_1 added
[   73.670664][ T4249] batman_adv: batadv0: Adding interface: batadv_slave_1
[   73.678660][ T4249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.705390][ T4249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   73.719038][ T4262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   73.750258][ T4257] team0: Port device team_slave_0 added
[   73.778333][ T4250] device hsr_slave_0 entered promiscuous mode
[   73.785215][ T4250] device hsr_slave_1 entered promiscuous mode
[   73.805102][ T4257] team0: Port device team_slave_1 added
[   73.814075][ T4262] team0: Port device team_slave_0 added
[   73.822127][ T4262] team0: Port device team_slave_1 added
[   73.832783][ T4260] batman_adv: batadv0: Adding interface: batadv_slave_0
[   73.839743][ T4260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.866325][ T4260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   73.913525][ T4260] batman_adv: batadv0: Adding interface: batadv_slave_1
[   73.920509][ T4260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.946755][ T4260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   73.975431][ T4249] device hsr_slave_0 entered promiscuous mode
[   73.982288][ T4249] device hsr_slave_1 entered promiscuous mode
[   73.990098][ T4249] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   73.999591][ T4249] Cannot create hsr debugfs directory
[   74.019775][ T4257] batman_adv: batadv0: Adding interface: batadv_slave_0
[   74.026902][ T4257] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.053108][ T4257] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   74.069908][ T4257] batman_adv: batadv0: Adding interface: batadv_slave_1
[   74.077373][ T4257] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.104504][ T4257] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   74.116478][ T4262] batman_adv: batadv0: Adding interface: batadv_slave_0
[   74.123650][ T4262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.150044][ T4262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   74.163531][ T4264] Bluetooth: hci2: command tx timeout
[   74.163714][ T4251] Bluetooth: hci0: command tx timeout
[   74.169226][ T4264] Bluetooth: hci1: command tx timeout
[   74.202855][ T4262] batman_adv: batadv0: Adding interface: batadv_slave_1
[   74.209831][ T4262] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.236022][ T4262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   74.246699][ T4251] Bluetooth: hci3: command tx timeout
[   74.252941][ T4251] Bluetooth: hci4: command tx timeout
[   74.314369][ T4260] device hsr_slave_0 entered promiscuous mode
[   74.321259][ T4260] device hsr_slave_1 entered promiscuous mode
[   74.330604][ T4260] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   74.338745][ T4260] Cannot create hsr debugfs directory
[   74.375006][ T4257] device hsr_slave_0 entered promiscuous mode
[   74.382245][ T4257] device hsr_slave_1 entered promiscuous mode
[   74.404119][ T4257] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   74.411735][ T4257] Cannot create hsr debugfs directory
[   74.479514][ T4262] device hsr_slave_0 entered promiscuous mode
[   74.493560][ T4262] device hsr_slave_1 entered promiscuous mode
[   74.500433][ T4262] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   74.513870][ T4262] Cannot create hsr debugfs directory
[   74.817743][ T4250] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   74.837592][ T4250] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   74.854597][ T4250] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   74.869382][ T4250] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   74.930782][ T4260] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   74.967307][ T4260] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   74.977887][ T4260] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   75.006161][ T4250] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.017815][ T4260] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   75.041776][ T4250] 8021q: adding VLAN 0 to HW filter on device team0
[   75.060346][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   75.069726][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   75.084499][ T4249] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   75.103110][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   75.113913][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   75.123205][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.130524][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.142515][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   75.152681][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   75.161611][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.168786][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.177952][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   75.186874][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   75.203260][ T4249] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   75.216809][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   75.238128][ T4249] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   75.249319][ T4249] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   75.281706][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   75.290927][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   75.301341][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   75.335836][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   75.348463][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   75.367663][ T4262] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   75.380316][ T4262] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   75.391246][ T4262] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   75.414486][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   75.424109][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   75.449354][ T4262] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   75.463592][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   75.474437][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   75.486267][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   75.597134][ T4249] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.620537][ T4257] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   75.636278][ T4257] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   75.660271][ T4260] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.683881][ T4257] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   75.701474][   T70] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   75.716709][   T70] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   75.728850][ T4257] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   75.761360][ T4249] 8021q: adding VLAN 0 to HW filter on device team0
[   75.775587][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   75.791839][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   75.826902][ T4260] 8021q: adding VLAN 0 to HW filter on device team0
[   75.855494][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   75.867785][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   75.876766][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.883925][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.891806][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   75.901093][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   75.909852][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.916996][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.926201][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   75.935352][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   75.944442][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   75.953514][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   75.962056][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   75.971062][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   75.980048][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   75.988342][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   76.028844][ T4262] 8021q: adding VLAN 0 to HW filter on device bond0
[   76.045741][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   76.056516][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   76.065841][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.073048][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[   76.081655][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   76.090738][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   76.099906][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   76.135349][   T70] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   76.143995][   T70] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   76.152034][   T70] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   76.160306][   T70] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   76.169349][   T70] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   76.178385][   T70] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   76.196443][ T4262] 8021q: adding VLAN 0 to HW filter on device team0
[   76.206279][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   76.226155][   T70] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   76.236206][   T70] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   76.243747][ T4251] Bluetooth: hci0: command tx timeout
[   76.244677][ T4264] Bluetooth: hci2: command tx timeout
[   76.249604][ T4251] Bluetooth: hci1: command tx timeout
[   76.260047][   T70] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.267571][   T70] bridge0: port 2(bridge_slave_1) entered forwarding state
[   76.279860][   T70] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   76.289528][   T70] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   76.306472][ T4250] 8021q: adding VLAN 0 to HW filter on device batadv0
[   76.322818][ T4255] Bluetooth: hci4: command tx timeout
[   76.332866][ T4251] Bluetooth: hci3: command tx timeout
[   76.341371][   T70] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   76.352367][   T70] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   76.361286][   T70] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.368422][   T70] bridge0: port 1(bridge_slave_0) entered forwarding state
[   76.376557][   T70] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   76.386317][   T70] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   76.395477][   T70] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   76.405486][   T70] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   76.414207][   T70] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.421394][   T70] bridge0: port 2(bridge_slave_1) entered forwarding state
[   76.429351][   T70] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   76.492861][   T70] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   76.501045][   T70] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   76.512225][   T70] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   76.522936][   T70] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   76.531747][   T70] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   76.542364][   T70] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   76.552004][   T70] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   76.561082][   T70] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   76.577633][   T70] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   76.587076][   T70] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   76.596129][   T70] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   76.616414][   T70] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   76.626258][   T70] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   76.638151][   T70] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   76.676356][ T4257] 8021q: adding VLAN 0 to HW filter on device bond0
[   76.692623][ T4250] device veth0_vlan entered promiscuous mode
[   76.721192][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   76.737927][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   76.747769][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   76.760497][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   76.789269][ T4250] device veth1_vlan entered promiscuous mode
[   76.816460][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   76.833619][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   76.854922][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   76.874604][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   76.884731][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   76.900571][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   76.909862][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   76.922376][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   76.930962][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   76.941905][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   76.953904][ T4257] 8021q: adding VLAN 0 to HW filter on device team0
[   76.983626][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   76.992482][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   77.015112][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.022265][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[   77.053393][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   77.071808][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   77.081846][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.089038][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[   77.098691][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   77.107329][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   77.115642][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   77.168634][ T4249] 8021q: adding VLAN 0 to HW filter on device batadv0
[   77.176586][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   77.193647][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   77.203307][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   77.251702][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   77.262266][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   77.280548][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   77.290873][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   77.307188][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   77.317063][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   77.330596][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   77.339574][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   77.347710][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   77.361935][ T4257] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   77.378906][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   77.392984][ T4250] device veth0_macvtap entered promiscuous mode
[   77.416488][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   77.425096][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   77.435126][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   77.445342][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   77.454899][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   77.463884][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   77.478743][ T4260] 8021q: adding VLAN 0 to HW filter on device batadv0
[   77.495522][ T4250] device veth1_macvtap entered promiscuous mode
[   77.517432][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   77.533837][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   77.542247][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   77.550569][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   77.568759][ T4262] 8021q: adding VLAN 0 to HW filter on device batadv0
[   77.639262][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   77.650524][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   77.665257][ T4249] device veth0_vlan entered promiscuous mode
[   77.678827][ T4250] batman_adv: batadv0: Interface activated: batadv_slave_0
[   77.695253][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   77.713276][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   77.721295][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   77.731982][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   77.756489][ T4250] batman_adv: batadv0: Interface activated: batadv_slave_1
[   77.769953][ T4250] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   77.793355][ T4250] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   77.802098][ T4250] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   77.811278][ T4250] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   77.829072][ T4249] device veth1_vlan entered promiscuous mode
[   77.839677][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   77.858217][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   77.869216][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   77.884779][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   77.977443][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   77.994346][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   78.001883][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   78.012349][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   78.028930][ T4249] device veth0_macvtap entered promiscuous mode
[   78.040856][ T4260] device veth0_vlan entered promiscuous mode
[   78.056486][ T4257] 8021q: adding VLAN 0 to HW filter on device batadv0
[   78.075227][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   78.091140][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   78.100154][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   78.109518][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   78.120042][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   78.134638][ T4260] device veth1_vlan entered promiscuous mode
[   78.170231][ T4249] device veth1_macvtap entered promiscuous mode
[   78.226437][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.245716][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   78.262324][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.271694][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   78.286390][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   78.303170][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   78.312193][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   78.322943][ T4251] Bluetooth: hci1: command tx timeout
[   78.327622][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   78.335764][ T4251] Bluetooth: hci2: command tx timeout
[   78.335803][ T4251] Bluetooth: hci0: command tx timeout
[   78.351993][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   78.363549][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.375783][ T4249] batman_adv: batadv0: Interface activated: batadv_slave_0
[   78.390197][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   78.401112][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.411861][ T4255] Bluetooth: hci3: command tx timeout
[   78.411929][ T4251] Bluetooth: hci4: command tx timeout
[   78.420020][ T4249] batman_adv: batadv0: Interface activated: batadv_slave_1
[   78.444508][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   78.453489][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   78.462468][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   78.471955][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   78.485411][ T4249] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   78.498813][ T4249] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   78.508328][ T4249] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   78.517207][ T4249] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   78.539619][ T4260] device veth0_macvtap entered promiscuous mode
[   78.554895][   T70] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   78.564416][   T70] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   78.574592][   T70] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   78.583678][   T70] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   78.592115][   T70] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   78.601329][   T70] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   78.617277][ T4257] device veth0_vlan entered promiscuous mode
[   78.636116][ T4260] device veth1_macvtap entered promiscuous mode
[   78.660229][   T70] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   78.669700][   T70] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   78.678321][   T70] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   78.686936][   T70] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   78.697299][ T4303] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.712418][ T4257] device veth1_vlan entered promiscuous mode
[   78.718630][ T4303] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.743386][   T70] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   78.762338][ T4262] device veth0_vlan entered promiscuous mode
[   78.797739][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   78.814368][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   78.847607][ T4260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   78.858191][ T4260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.869216][ T4260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   78.880225][ T4260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.894211][ T4260] batman_adv: batadv0: Interface activated: batadv_slave_0
[   78.922042][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   78.936591][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   78.950470][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   78.960883][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   78.997006][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   79.007810][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   79.019631][ T4260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   79.030174][ T4328] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   79.052466][ T4260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.064158][ T4260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   79.075028][ T4260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.090204][ T4260] batman_adv: batadv0: Interface activated: batadv_slave_1
[   79.104322][ T4330] loop0: detected capacity change from 0 to 256
[   79.113144][ T4257] device veth0_macvtap entered promiscuous mode
[   79.139702][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   79.150642][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   79.168071][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   79.179702][ T4241] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   79.205212][ T4262] device veth1_vlan entered promiscuous mode
[   79.213351][ T4260] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   79.222094][ T4260] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   79.261011][ T4260] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   79.275588][ T4260] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   79.289777][ T4257] device veth1_macvtap entered promiscuous mode
[   79.379686][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.412278][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   79.429839][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   79.440582][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.458888][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   79.462843][ T4328] loop0: detected capacity change from 0 to 512
[   79.471582][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   79.480112][ T4328] =======================================================
[   79.480112][ T4328] WARNING: The mand mount option has been deprecated and
[   79.480112][ T4328]          and is ignored by this kernel. Remove the mand
[   79.480112][ T4328]          option from the mount to silence this warning.
[   79.480112][ T4328] =======================================================
[   79.533079][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   79.542239][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   79.552304][ T4257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   79.553042][ T4328] EXT4-fs: Ignoring removed i_version option
[   79.563979][ T4257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.576279][ T4328] journal_path: Lookup failure for './file0'
[   79.579969][ T4257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   79.586340][ T4328] EXT4-fs: error: could not find journal device path
[   79.595979][ T4257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.612832][ T4257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   79.623656][ T4257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.635791][ T4257] batman_adv: batadv0: Interface activated: batadv_slave_0
[   79.645982][ T4262] device veth0_macvtap entered promiscuous mode
[   79.673662][ T4262] device veth1_macvtap entered promiscuous mode
[   79.702834][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   79.711516][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   79.725507][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   79.750301][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   79.763789][ T4257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   79.780758][ T4257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.792050][ T4257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   79.806390][ T4257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.816563][ T4257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   79.827469][ T4257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.839380][ T4257] batman_adv: batadv0: Interface activated: batadv_slave_1
[   79.868723][ T4257] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   79.878945][ T4257] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   79.889452][ T4257] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   79.898940][ T4257] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   79.936038][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   79.951214][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   79.976728][ T4262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   80.010324][ T4262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.020682][ T4262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   80.031670][ T4262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.041994][ T4262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   80.070689][ T4262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.084374][ T4262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   80.099377][ T4262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.111347][ T4262] batman_adv: batadv0: Interface activated: batadv_slave_0
[   80.131695][   T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.146048][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   80.161845][   T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.171159][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   80.182441][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   80.208590][ T4262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   80.219713][ T4262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.230253][ T4262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   80.243124][ T4262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.253683][ T4262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   80.264347][ T4262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.275171][ T4262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   80.285774][ T4262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.298248][ T4262] batman_adv: batadv0: Interface activated: batadv_slave_1
[   80.322254][ T4262] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   80.337926][ T4262] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   80.350620][ T4262] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   80.361729][ T4262] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   80.382477][   T70] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   80.392438][   T70] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   80.403286][ T4255] Bluetooth: hci0: command tx timeout
[   80.403307][ T4251] Bluetooth: hci2: command tx timeout
[   80.408693][ T4255] Bluetooth: hci1: command tx timeout
[   80.447468][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.467654][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.482964][ T4264] Bluetooth: hci4: command tx timeout
[   80.483888][ T4255] Bluetooth: hci3: command tx timeout
[   80.526474][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   80.635199][ T4303] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.645409][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.674463][ T4303] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.680103][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.701975][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   80.725539][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   80.766157][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.780316][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.802751][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   80.858625][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.891117][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.892069][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.955069][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.971122][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   81.001216][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   81.113350][ T4294] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   81.221025][ T4350] loop3: detected capacity change from 0 to 2048
[   81.313075][ T4294] usb 3-1: Using ep0 maxpacket: 32
[   81.330752][ T4294] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[   81.361805][ T4350] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   81.400047][ T4294] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[   81.416362][ T4294] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   81.470382][ T4350] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.4: bg 0: block 234: padding at end of block bitmap is not set
[   81.492036][ T4350] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 14 with error 28
[   81.506688][ T4294] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[   81.529972][ T4350] EXT4-fs (loop3): This should not happen!! Data will be lost
[   81.529972][ T4350] 
[   81.537547][ T4294] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131
[   81.554789][ T4350] EXT4-fs (loop3): Total free blocks count 0
[   81.571291][ T4350] EXT4-fs (loop3): Free/Dirty block details
[   81.580278][ T4350] EXT4-fs (loop3): free_blocks=0
[   81.580958][ T4294] usb 3-1: Product: syz
[   81.593109][ T4350] EXT4-fs (loop3): dirty_blocks=16
[   81.606073][ T4294] usb 3-1: Manufacturer: syz
[   81.610728][ T4294] usb 3-1: SerialNumber: syz
[   81.613323][ T4350] EXT4-fs (loop3): Block reservation details
[   81.637142][ T4350] EXT4-fs (loop3): i_reserved_data_blocks=1
[   81.676865][ T4342] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   81.720830][ T4294] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input5
[   81.802839][ T4331] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   81.842074][ T4257] EXT4-fs (loop3): unmounting filesystem.
[   81.922295][    C0] appletouch 3-1:1.0: atp_complete: usb_submit_urb failed with result -1
[   82.008493][ T4331] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[   82.052919][ T4331] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[   82.081493][ T4331] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[   82.109534][ T4331] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[   82.137231][ T4331] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[   82.155934][  T951] usb 3-1: USB disconnect, device number 2
[   82.176571][ T4331] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[   82.214992][ T4331] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[   82.228121][  T951] appletouch 3-1:1.0: input: appletouch disconnected
[   82.232651][ T4331] usb 2-1: Product: syz
[   82.245738][ T4331] usb 2-1: Manufacturer: syz
[   82.275240][ T4331] cdc_wdm 2-1:1.0: skipping garbage
[   82.280510][ T4331] cdc_wdm 2-1:1.0: skipping garbage
[   82.326363][ T4331] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[   82.332351][ T4331] cdc_wdm 2-1:1.0: Unknown control protocol
[   82.366166][ T4354] loop0: detected capacity change from 0 to 32768
[   82.388961][ T4354] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.10 (4354)
[   82.503067][   T14] usb 2-1: USB disconnect, device number 2
[   82.529895][ T4354] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[   82.589748][ T4354] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm
[   82.619882][ T4354] BTRFS info (device loop0): force zlib compression, level 3
[   82.641225][ T4354] BTRFS info (device loop0): force clearing of disk cache
[   82.709615][ T4354] BTRFS info (device loop0): setting nodatasum
[   82.727891][ T4354] BTRFS info (device loop0): allowing degraded mounts
[   82.773137][ T4354] BTRFS info (device loop0): enabling disk space caching
[   82.806179][ T4354] BTRFS info (device loop0): disk space caching is enabled
[   82.938547][ T4354] BTRFS info (device loop0): rebuilding free space tree
[   82.945762][ T4331] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   82.978163][ T4354] BTRFS info (device loop0): disabling free space tree
[   82.985254][ T4354] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   82.995670][ T4354] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   83.150835][ T4331] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   83.168832][ T4331] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   83.199429][ T4331] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   83.221890][ T4296] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   83.235304][ T4331] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   83.250868][ T4354] BTRFS info (device loop0): balance: start -d -m
[   83.252405][ T4331] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   83.261871][ T4354] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata
[   83.294695][ T4331] usb 4-1: config 0 descriptor??
[   83.325597][ T4354] BTRFS info (device loop0): balance: canceled
[   83.449535][ T4250] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[   83.456269][ T4296] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[   83.485503][ T4296] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[   83.507872][ T4296] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[   83.537077][ T4296] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[   83.548998][ T4296] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[   83.606880][ T4296] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[   83.616595][ T4296] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[   83.625109][ T4296] usb 2-1: Product: syz
[   83.630166][ T4296] usb 2-1: Manufacturer: syz
[   83.651076][ T4296] cdc_wdm 2-1:1.0: skipping garbage
[   83.656509][ T4296] cdc_wdm 2-1:1.0: skipping garbage
[   83.670392][ T4296] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[   83.676519][ T4296] cdc_wdm 2-1:1.0: Unknown control protocol
[   83.736723][ T4331] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving
[   83.758556][ T4331] plantronics 0003:047F:FFFF.0001: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[   83.950972][ T4410] loop2: detected capacity change from 0 to 1024
[   83.962539][  T951] usb 4-1: USB disconnect, device number 2
[   84.061547][ T4410] process 'syz.2.17' launched './file0' with NULL argv: empty string added
[   84.209658][    C1] cdc_wdm 2-1:1.0: Stall on int endpoint
[   84.215424][    C1] cdc_wdm 2-1:1.0: Cannot schedule work
[   84.222812][    C1] cdc_wdm 2-1:1.0: Stall on int endpoint
[   84.228525][    C1] cdc_wdm 2-1:1.0: Cannot schedule work
[   84.243856][    C1] cdc_wdm 2-1:1.0: nonzero urb status received: -EPIPE
[   84.251204][    C1] cdc_wdm 2-1:1.0: Stall on int endpoint
[   84.256689][ T4361] loop1: detected capacity change from 0 to 512
[   84.256886][    C1] cdc_wdm 2-1:1.0: Cannot schedule work
[   84.273048][    C1] cdc_wdm 2-1:1.0: Stall on int endpoint
[   84.282668][    C1] cdc_wdm 2-1:1.0: Stall on int endpoint
[   84.294695][ T4361] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities
[   84.304568][    C1] cdc_wdm 2-1:1.0: Stall on int endpoint
[   84.310312][    C1] cdc_wdm 2-1:1.0: Cannot schedule work
[   84.316668][    C1] cdc_wdm 2-1:1.0: Stall on int endpoint
[   84.322386][    C1] cdc_wdm 2-1:1.0: Cannot schedule work
[   84.331031][    C1] cdc_wdm 2-1:1.0: Stall on int endpoint
[   84.336738][    C1] cdc_wdm 2-1:1.0: Cannot schedule work
[   84.347800][    C1] cdc_wdm 2-1:1.0: Stall on int endpoint
[   84.353595][    C1] cdc_wdm 2-1:1.0: Cannot schedule work
[   84.359597][    C1] cdc_wdm 2-1:1.0: Stall on int endpoint
[   84.365700][    C1] cdc_wdm 2-1:1.0: Stall on int endpoint
[   84.371417][    C1] cdc_wdm 2-1:1.0: Cannot schedule work
[   84.389097][ T4361] loop1: detected capacity change from 0 to 8
[   84.406897][    C1] cdc_wdm 2-1:1.0: Stall on int endpoint
[   84.412616][    C1] cdc_wdm 2-1:1.0: Cannot schedule work
[   84.447495][    C1] cdc_wdm 2-1:1.0: Stall on int endpoint
[   84.453219][    C1] cdc_wdm 2-1:1.0: Cannot schedule work
[   84.459713][    C1] cdc_wdm 2-1:1.0: Stall on int endpoint
[   84.483108][    C1] cdc_wdm 2-1:1.0: Stall on int endpoint
[   84.489010][    C1] cdc_wdm 2-1:1.0: Cannot schedule work
[   84.497330][ T4361] SQUASHFS error: xz decompression failed, data probably corrupt
[   84.522672][ T4361] SQUASHFS error: Failed to read block 0x108: -5
[   84.529130][ T4361] SQUASHFS error: Unable to read metadata cache entry [106]
[   84.537317][    C1] cdc_wdm 2-1:1.0: Stall on int endpoint
[   84.543028][    C1] cdc_wdm 2-1:1.0: Cannot schedule work
[   84.571621][    C1] cdc_wdm 2-1:1.0: Stall on int endpoint
[   84.577345][    C1] cdc_wdm 2-1:1.0: Cannot schedule work
[   84.583618][ T4361] SQUASHFS error: Unable to read inode 0x11f
[   84.590544][    C1] cdc_wdm 2-1:1.0: Stall on int endpoint
[   84.590595][    C1] cdc_wdm 2-1:1.0: Cannot schedule work
[   84.597137][    C1] cdc_wdm 2-1:1.0: Stall on int endpoint
[   84.624209][    C1] cdc_wdm 2-1:1.0: Stall on int endpoint
[   84.629936][    C1] cdc_wdm 2-1:1.0: Cannot schedule work
[   84.648011][    C1] cdc_wdm 2-1:1.0: Stall on int endpoint
[   84.653741][    C1] cdc_wdm 2-1:1.0: Cannot schedule work
[   84.673285][ T4411] loop0: detected capacity change from 0 to 32768
[   84.681973][    C1] cdc_wdm 2-1:1.0: Stall on int endpoint
[   84.687700][    C1] cdc_wdm 2-1:1.0: Cannot schedule work
[   84.695287][    C1] cdc_wdm 2-1:1.0: Stall on int endpoint
[   84.701034][    C1] cdc_wdm 2-1:1.0: Cannot schedule work
[   84.707485][    C1] cdc_wdm 2-1:1.0: Stall on int endpoint
[   84.713197][    C1] cdc_wdm 2-1:1.0: Cannot schedule work
[   84.719367][    C1] cdc_wdm 2-1:1.0: Stall on int endpoint
[   84.725080][    C1] cdc_wdm 2-1:1.0: Cannot schedule work
[   84.731349][    C1] cdc_wdm 2-1:1.0: Stall on int endpoint
[   84.737058][    C1] cdc_wdm 2-1:1.0: Cannot schedule work
[   84.743419][    C1] cdc_wdm 2-1:1.0: Stall on int endpoint
[   84.749210][    C1] cdc_wdm 2-1:1.0: Cannot schedule work
[   84.756565][    C1] cdc_wdm 2-1:1.0: Stall on int endpoint
[   84.762289][    C1] cdc_wdm 2-1:1.0: Cannot schedule work
[   84.768270][    C1] cdc_wdm 2-1:1.0: Stall on int endpoint
[   84.775232][    C1] cdc_wdm 2-1:1.0: Stall on int endpoint
[   84.780960][    C1] cdc_wdm 2-1:1.0: Cannot schedule work
[   84.795068][    C1] cdc_wdm 2-1:1.0: Stall on int endpoint
[   84.800786][    C1] cdc_wdm 2-1:1.0: Cannot schedule work
[   84.803058][ T4418] netlink: 'syz.3.20': attribute type 10 has an invalid length.
[   84.807509][    C1] cdc_wdm 2-1:1.0: Stall on int endpoint
[   84.819682][    C1] cdc_wdm 2-1:1.0: Cannot schedule work
[   84.821525][ T4361] overlayfs: invalid origin (0000007900000000000000000000000000000000000000000000000000000000000000000000000000000000)
[   84.826462][    C1] cdc_wdm 2-1:1.0: Stall on int endpoint
[   84.843851][    C1] cdc_wdm 2-1:1.0: Cannot schedule work
[   84.857990][    C1] cdc_wdm 2-1:1.0: Stall on int endpoint
[   84.863720][    C1] cdc_wdm 2-1:1.0: Cannot schedule work
[   84.870574][    C1] cdc_wdm 2-1:1.0: Stall on int endpoint
[   84.881022][ T4418] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.890051][ T4418] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.916538][ T4411] JBD2: Ignoring recovery information on journal
[   84.922299][ T4253] usb 2-1: USB disconnect, device number 3
[   85.014211][ T4411] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[   85.042499][ T4418] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.049730][ T4418] bridge0: port 2(bridge_slave_1) entered forwarding state
[   85.058000][ T4418] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.065189][ T4418] bridge0: port 1(bridge_slave_0) entered forwarding state
[   85.141563][   T26] audit: type=1804 audit(1731219646.021:2): pid=4423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.16" name="/newroot/4/file1/bus" dev="loop0" ino=17059 res=1 errno=0
[   85.158938][ T4418] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   85.210654][   T26] audit: type=1800 audit(1731219646.061:3): pid=4411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.16" name="file1" dev="loop0" ino=17058 res=0 errno=0
[   85.220739][ T4411] (syz.0.16,4411,0):ocfs2_get_clusters:606 ERROR: status = -34
[   85.368914][ T4411] (syz.0.16,4411,0):ocfs2_reflink_remap_extent:4534 ERROR: status = -34
[   85.422636][ T4411] (syz.0.16,4411,0):ocfs2_reflink_remap_blocks:4693 ERROR: status = -34
[   85.449027][ T4411] (syz.0.16,4411,0):ocfs2_remap_file_range:2703 ERROR: status = -34
[   85.616561][ T4250] ocfs2: Unmounting device (7,0) on (node local)
[   85.672717][ T4297] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   85.872832][ T4297] usb 4-1: Using ep0 maxpacket: 16
[   85.883117][ T4297] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   85.917844][ T4297] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   85.947587][ T4297] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   86.015635][ T4297] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   86.035044][ T4297] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   86.061010][ T4297] usb 4-1: config 0 descriptor??
[   86.122878][  T125] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   86.323603][  T125] usb 2-1: Using ep0 maxpacket: 32
[   86.344981][  T125] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[   86.362649][  T125] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[   86.392636][  T125] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   86.415248][  T125] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[   86.430594][  T125] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131
[   86.439452][  T125] usb 2-1: Product: syz
[   86.449737][  T125] usb 2-1: Manufacturer: syz
[   86.455453][  T125] usb 2-1: SerialNumber: syz
[   86.481142][ T4442] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[   86.493030][ T4331] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   86.495114][ T4297] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0
[   86.517541][  T125] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input6
[   86.518165][ T4297] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0
[   86.541634][ T4297] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0
[   86.550533][ T4297] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0
[   86.570853][ T4297] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0
[   86.610147][ T4297] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0
[   86.631620][ T4297] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0
[   86.649023][ T4297] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0
[   86.658657][ T4297] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0
[   86.666659][ T4297] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0
[   86.675263][ T4297] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0
[   86.689012][ T4297] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0002/input/input7
[   86.705547][ T4331] usb 5-1: Using ep0 maxpacket: 16
[   86.725372][   T22] cfg80211: failed to load regulatory.db
[   86.727177][ T4331] usb 5-1: unable to get BOS descriptor or descriptor too short
[   86.740691][ T4297] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0
[   86.778753][ T4297] usb 4-1: USB disconnect, device number 3
[   86.812120][ T4331] usb 5-1: config 244 has an invalid interface number: 247 but max is 0
[   86.840172][   T22] usb 2-1: USB disconnect, device number 4
[   86.845586][ T4331] usb 5-1: config 244 has no interface number 0
[   86.846223][    C1] appletouch 2-1:1.0: atp_complete: usb_submit_urb failed with result -19
[   86.889762][ T4331] usb 5-1: config 244 interface 247 has no altsetting 0
[   86.927839][ T4331] usb 5-1: New USB device found, idVendor=174f, idProduct=8a12, bcdDevice=b0.16
[   86.944180][ T4331] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   86.952229][ T4331] usb 5-1: Product: syz
[   86.972755][ T4331] usb 5-1: Manufacturer: syz
[   86.977411][ T4331] usb 5-1: SerialNumber: syz
[   86.999132][   T22] appletouch 2-1:1.0: input: appletouch disconnected
[   87.228226][ T4331] usb 5-1: Found UVC 0.00 device syz (174f:8a12)
[   87.272696][ T4331] usb 5-1: No valid video chain found.
[   87.280084][ T4331] usb 5-1: USB disconnect, device number 2
[   87.306407][ T4460] loop0: detected capacity change from 0 to 1024
[   87.683663][ T4467] Zero length message leads to an empty skb
[   87.792799][   T22] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   87.994729][   T22] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   88.031450][   T22] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   88.050653][   T22] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   88.079684][   T22] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   88.099743][   T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   88.119295][   T22] usb 2-1: config 0 descriptor??
[   88.221888][ T4485] loop3: detected capacity change from 0 to 1024
[   88.432985][ T4475] loop4: detected capacity change from 0 to 32768
[   88.478648][ T4475] JBD2: Ignoring recovery information on journal
[   88.531511][ T4475] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[   88.564191][   T22] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving
[   88.581866][   T22] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[   88.584773][   T26] audit: type=1800 audit(1731219649.461:4): pid=4475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.39" name="file1" dev="loop4" ino=17058 res=0 errno=0
[   88.623704][   T26] audit: type=1804 audit(1731219649.511:5): pid=4475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.39" name="/newroot/6/file1/bus" dev="loop4" ino=17059 res=1 errno=0
[   88.647806][ T4475] (syz.4.39,4475,1):ocfs2_get_clusters:606 ERROR: status = -34
[   88.647843][ T4475] (syz.4.39,4475,1):ocfs2_reflink_remap_extent:4534 ERROR: status = -34
[   88.647868][ T4475] (syz.4.39,4475,1):ocfs2_reflink_remap_blocks:4693 ERROR: status = -34
[   88.647895][ T4475] (syz.4.39,4475,1):ocfs2_remap_file_range:2703 ERROR: status = -34
[   88.761060][ T4262] ocfs2: Unmounting device (7,4) on (node local)
[   88.764476][ T4489] loop3: detected capacity change from 0 to 1024
[   88.887130][  T125] usb 2-1: USB disconnect, device number 5
[   89.302719][ T4407] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   89.355882][ T4331] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   89.496788][ T4407] usb 4-1: Using ep0 maxpacket: 32
[   89.521194][ T4407] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[   89.542907][ T4331] usb 5-1: Using ep0 maxpacket: 16
[   89.549438][ T4407] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[   89.562740][ T4407] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   89.581306][ T4331] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   89.594179][ T4331] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   89.605338][ T4331] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   89.618988][ T4331] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   89.628351][ T4331] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   89.636867][ T4407] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[   89.646942][ T4407] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131
[   89.657091][ T4331] usb 5-1: config 0 descriptor??
[   89.662220][ T4407] usb 4-1: Product: syz
[   89.671150][ T4407] usb 4-1: Manufacturer: syz
[   89.675896][ T4407] usb 4-1: SerialNumber: syz
[   89.691331][ T4491] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   89.710632][ T4407] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input8
[   89.919632][ T4302] usb 4-1: USB disconnect, device number 4
[   89.953852][ T4302] appletouch 4-1:1.0: input: appletouch disconnected
[   90.109759][ T4331] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0
[   90.117577][ T4331] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0
[   90.125032][ T4331] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0
[   90.140379][ T4331] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0
[   90.148431][ T4331] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0
[   90.155802][ T4331] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0
[   90.163154][ T4331] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0
[   90.170431][ T4331] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0
[   90.177727][ T4331] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0
[   90.186157][ T4331] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0
[   90.193556][ T4331] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0
[   90.202286][ T4331] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0004/input/input9
[   90.232289][ T4331] microsoft 0003:045E:07DA.0004: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[   90.341106][ T4331] usb 5-1: USB disconnect, device number 3
[   91.020437][ T4514] loop4: detected capacity change from 0 to 1024
[   91.294976][ T4512] loop3: detected capacity change from 0 to 32768
[   91.380260][ T4512] JBD2: Ignoring recovery information on journal
[   91.457845][ T4512] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[   91.520120][   T26] audit: type=1800 audit(1731219652.401:6): pid=4512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.54" name="file1" dev="loop3" ino=17058 res=0 errno=0
[   91.532875][ T4512] (syz.3.54,4512,0):ocfs2_get_clusters:606 ERROR: status = -34
[   91.541048][   T26] audit: type=1804 audit(1731219652.401:7): pid=4512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.54" name="/newroot/14/file1/bus" dev="loop3" ino=17059 res=1 errno=0
[   91.563211][ T4512] (syz.3.54,4512,0):ocfs2_reflink_remap_extent:4534 ERROR: status = -34
[   91.604814][ T4512] (syz.3.54,4512,0):ocfs2_reflink_remap_blocks:4693 ERROR: status = -34
[   91.615271][ T4512] (syz.3.54,4512,0):ocfs2_remap_file_range:2703 ERROR: status = -34
[   91.719014][ T4257] ocfs2: Unmounting device (7,3) on (node local)
[   92.552484][ T4543] loop1: detected capacity change from 0 to 1024
[   94.301999][ T4548] loop4: detected capacity change from 0 to 32768
[   94.366901][ T4548] JBD2: Ignoring recovery information on journal
[   94.530950][ T4577] loop2: detected capacity change from 0 to 1024
[   94.566157][ T4548] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[   94.608580][   T46] hfsplus: b-tree write err: -5, ino 3
[   94.617802][   T26] audit: type=1800 audit(1731219655.501:8): pid=4548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.68" name="file1" dev="loop4" ino=17058 res=0 errno=0
[   94.625426][ T4548] (syz.4.68,4548,0):ocfs2_get_clusters:606 ERROR: status = -34
[   94.638199][    C1] vkms_vblank_simulate: vblank timer overrun
[   94.654086][ T4548] (syz.4.68,4548,0):ocfs2_reflink_remap_extent:4534 ERROR: status = -34
[   94.663263][   T26] audit: type=1804 audit(1731219655.501:9): pid=4548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.68" name="/newroot/13/file1/bus" dev="loop4" ino=17059 res=1 errno=0
[   94.706492][ T4548] (syz.4.68,4548,0):ocfs2_reflink_remap_blocks:4693 ERROR: status = -34
[   94.731556][ T4548] (syz.4.68,4548,0):ocfs2_remap_file_range:2703 ERROR: status = -34
[   94.950457][ T4262] ocfs2: Unmounting device (7,4) on (node local)
[   95.694648][    C1] dccp_check_seqno: Step 6 failed for CLOSE packet, (LSWL(149683791273236) <= P.seqno(149683791273235) <= S.SWH(149683791273310)) and (P.ackno exists or LAWL(10178750977887) <= P.ackno(10178750977887) <= S.AWH(10178750977887), sending SYNC...
[   95.885695][ T4600] loop0: detected capacity change from 0 to 2048
[   95.950285][ T4600]  loop0: p1 < > p4
[   96.001057][ T4600] loop0: p4 size 8388608 extends beyond EOD, truncated
[   96.828552][ T4578] bridge0: port 3(syz_tun) entered blocking state
[   96.844370][ T4578] bridge0: port 3(syz_tun) entered disabled state
[   96.861698][ T4578] device syz_tun entered promiscuous mode
[   96.869470][ T4578] bridge0: port 3(syz_tun) entered blocking state
[   96.876503][ T4578] bridge0: port 3(syz_tun) entered forwarding state
[   96.899706][ T4590] tipc: Started in network mode
[   96.907334][ T4590] tipc: Node identity 4ab50a1abe7a, cluster identity 4711
[   96.923580][ T4590] tipc: Enabled bearer <eth:syzkaller0>, priority 10
[   96.969095][ T4615] loop2: detected capacity change from 0 to 256
[   96.999732][ T4618] loop3: detected capacity change from 0 to 1024
[   97.029099][ T4591] tipc: Resetting bearer <eth:syzkaller0>
[   97.082715][ T4343] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   97.113063][ T4612] netlink: 'syz.0.89': attribute type 10 has an invalid length.
[   97.155040][ T4612] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   97.170244][   T46] hfsplus: b-tree write err: -5, ino 3
[   97.199124][ T4588] tipc: Resetting bearer <eth:syzkaller0>
[   97.246269][ T4619] loop2: detected capacity change from 0 to 512
[   97.303526][ T4619] EXT4-fs: Ignoring removed i_version option
[   97.341541][ T4619] journal_path: Lookup failure for './file0'
[   97.382667][ T4619] EXT4-fs: error: could not find journal device path
[   97.439706][ T4615] kvm: emulating exchange as write
[   98.054020][ T4331] tipc: Node number set to 4107209242
[   98.154236][  T951] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   98.155189][ T4623] loop1: detected capacity change from 0 to 32768
[   98.230557][ T4623] JBD2: Ignoring recovery information on journal
[   98.281456][ T4623] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[   98.306494][   T26] audit: type=1800 audit(1731219659.191:10): pid=4623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.93" name="file1" dev="loop1" ino=17058 res=0 errno=0
[   98.343672][   T26] audit: type=1804 audit(1731219659.231:11): pid=4623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.93" name="/newroot/13/file1/bus" dev="loop1" ino=17059 res=1 errno=0
[   98.343860][ T4623] 
[   98.367410][ T4623] ======================================================
[   98.374459][ T4623] WARNING: possible circular locking dependency detected
[   98.381483][ T4623] 6.1.116-syzkaller #0 Not tainted
[   98.386612][ T4623] ------------------------------------------------------
[   98.393628][ T4623] syz.1.93/4623 is trying to acquire lock:
[   98.399431][ T4623] ffff888073e1a2e0 (&oi->ip_alloc_sem/1){+.+.}-{3:3}, at: ocfs2_remap_file_range+0x488/0x8d0
[   98.409648][ T4623] 
[   98.409648][ T4623] but task is already holding lock:
[   98.417013][ T4623] ffff888073e0dbe0 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_remap_file_range+0x45c/0x8d0
[   98.427993][ T4623] 
[   98.427993][ T4623] which lock already depends on the new lock.
[   98.427993][ T4623] 
[   98.438395][ T4623] 
[   98.438395][ T4623] the existing dependency chain (in reverse order) is:
[   98.447410][ T4623] 
[   98.447410][ T4623] -> #2 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}:
[   98.456190][ T4623]        lock_acquire+0x1f8/0x5a0
[   98.461230][ T4623]        down_read+0xad/0xa30
[   98.465917][ T4623]        ocfs2_read_virt_blocks+0x2dc/0xab0
[   98.471815][ T4623]        ocfs2_find_entry+0x436/0x28c0
[   98.477288][ T4623]        ocfs2_find_files_on_disk+0x10d/0x3a0
[   98.483374][ T4623]        ocfs2_lookup_ino_from_name+0xad/0x1e0
[   98.489546][ T4623]        ocfs2_get_system_file_inode+0x314/0x7b0
[   98.495912][ T4623]        ocfs2_init_global_system_inodes+0x328/0x720
[   98.502620][ T4623]        ocfs2_fill_super+0x2f82/0x5730
[   98.508184][ T4623]        mount_bdev+0x2c9/0x3f0
[   98.513041][ T4623]        legacy_get_tree+0xeb/0x180
[   98.518249][ T4623]        vfs_get_tree+0x88/0x270
[   98.523197][ T4623]        do_new_mount+0x2ba/0xb40
[   98.528232][ T4623]        __se_sys_mount+0x2d5/0x3c0
[   98.533434][ T4623]        do_syscall_64+0x3b/0xb0
[   98.538372][ T4623]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   98.544798][ T4623] 
[   98.544798][ T4623] -> #1 (&osb->system_file_mutex){+.+.}-{3:3}:
[   98.553145][ T4623]        lock_acquire+0x1f8/0x5a0
[   98.558179][ T4623]        __mutex_lock+0x132/0xd80
[   98.563204][ T4623]        ocfs2_get_system_file_inode+0x1a1/0x7b0
[   98.569539][ T4623]        ocfs2_reserve_suballoc_bits+0x167/0x5190
[   98.575963][ T4623]        ocfs2_reserve_new_metadata_blocks+0x418/0x9b0
[   98.582818][ T4623]        ocfs2_create_refcount_tree+0x33c/0x15b0
[   98.589149][ T4623]        ocfs2_reflink_remap_blocks+0x2f2/0x1f20
[   98.595480][ T4623]        ocfs2_remap_file_range+0x5f2/0x8d0
[   98.601377][ T4623]        vfs_copy_file_range+0x10d6/0x1640
[   98.607188][ T4623]        __se_sys_copy_file_range+0x3ea/0x5d0
[   98.613261][ T4623]        do_syscall_64+0x3b/0xb0
[   98.618207][ T4623]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   98.624636][ T4623] 
[   98.624636][ T4623] -> #0 (&oi->ip_alloc_sem/1){+.+.}-{3:3}:
[   98.632727][ T4623]        validate_chain+0x1661/0x5950
[   98.638097][ T4623]        __lock_acquire+0x125b/0x1f80
[   98.643479][ T4623]        lock_acquire+0x1f8/0x5a0
[   98.648511][ T4623]        down_write_nested+0x39/0x60
[   98.653826][ T4623]        ocfs2_remap_file_range+0x488/0x8d0
[   98.659725][ T4623]        vfs_copy_file_range+0x10d6/0x1640
[   98.665538][ T4623]        __se_sys_copy_file_range+0x3ea/0x5d0
[   98.671608][ T4623]        do_syscall_64+0x3b/0xb0
[   98.676719][ T4623]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   98.683159][ T4623] 
[   98.683159][ T4623] other info that might help us debug this:
[   98.683159][ T4623] 
[   98.693385][ T4623] Chain exists of:
[   98.693385][ T4623]   &oi->ip_alloc_sem/1 --> &osb->system_file_mutex --> &ocfs2_file_ip_alloc_sem_key
[   98.693385][ T4623] 
[   98.708604][ T4623]  Possible unsafe locking scenario:
[   98.708604][ T4623] 
[   98.716061][ T4623]        CPU0                    CPU1
[   98.721443][ T4623]        ----                    ----
[   98.726804][ T4623]   lock(&ocfs2_file_ip_alloc_sem_key);
[   98.732360][ T4623]                                lock(&osb->system_file_mutex);
[   98.739991][ T4623]                                lock(&ocfs2_file_ip_alloc_sem_key);
[   98.748058][ T4623]   lock(&oi->ip_alloc_sem/1);
[   98.752837][ T4623] 
[   98.752837][ T4623]  *** DEADLOCK ***
[   98.752837][ T4623] 
[   98.760976][ T4623] 4 locks held by syz.1.93/4623:
[   98.765909][ T4623]  #0: ffff88802e7e4460 (sb_writers#16){.+.+}-{0:0}, at: vfs_copy_file_range+0x981/0x1640
[   98.775962][ T4623]  #1: ffff888073e0df48 (&sb->s_type->i_mutex_key#21){+.+.}-{3:3}, at: lock_two_nondirectories+0xde/0x130
[   98.787300][ T4623]  #2: ffff888073e1a648 (&sb->s_type->i_mutex_key#21/4){+.+.}-{3:3}, at: ocfs2_reflink_inodes_lock+0x164/0xec0
[   98.799069][ T4623]  #3: ffff888073e0dbe0 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_remap_file_range+0x45c/0x8d0
[   98.810502][ T4623] 
[   98.810502][ T4623] stack backtrace:
[   98.816402][ T4623] CPU: 1 PID: 4623 Comm: syz.1.93 Not tainted 6.1.116-syzkaller #0
[   98.824293][ T4623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   98.834353][ T4623] Call Trace:
[   98.837647][ T4623]  <TASK>
[   98.840576][ T4623]  dump_stack_lvl+0x1e3/0x2cb
[   98.845273][ T4623]  ? nf_tcp_handle_invalid+0x642/0x642
[   98.850758][ T4623]  ? print_circular_bug+0x12b/0x1a0
[   98.856332][ T4623]  check_noncircular+0x2fa/0x3b0
[   98.861286][ T4623]  ? add_chain_block+0x850/0x850
[   98.866230][ T4623]  ? lockdep_lock+0x11f/0x2a0
[   98.870922][ T4623]  ? _find_first_zero_bit+0xd0/0x100
[   98.876220][ T4623]  validate_chain+0x1661/0x5950
[   98.881107][ T4623]  ? reacquire_held_locks+0x660/0x660
[   98.886510][ T4623]  ? __lock_acquire+0x1f80/0x1f80
[   98.891636][ T4623]  ? look_up_lock_class+0x77/0x140
[   98.896808][ T4623]  ? register_lock_class+0x100/0x990
[   98.902107][ T4623]  ? is_dynamic_key+0x260/0x260
[   98.906984][ T4623]  ? mark_lock+0x9a/0x340
[   98.911343][ T4623]  __lock_acquire+0x125b/0x1f80
[   98.916314][ T4623]  lock_acquire+0x1f8/0x5a0
[   98.920845][ T4623]  ? ocfs2_remap_file_range+0x488/0x8d0
[   98.926413][ T4623]  ? read_lock_is_recursive+0x10/0x10
[   98.931800][ T4623]  ? __might_sleep+0xb0/0xb0
[   98.936393][ T4623]  ? rwsem_write_trylock+0x166/0x210
[   98.941742][ T4623]  ? clear_nonspinnable+0x60/0x60
[   98.946865][ T4623]  down_write_nested+0x39/0x60
[   98.951639][ T4623]  ? ocfs2_remap_file_range+0x488/0x8d0
[   98.957192][ T4623]  ocfs2_remap_file_range+0x488/0x8d0
[   98.962576][ T4623]  ? ocfs2_fallocate+0x350/0x350
[   98.967525][ T4623]  ? rcu_read_lock_any_held+0xb3/0x160
[   98.973089][ T4623]  ? rcu_read_lock_bh_held+0x110/0x110
[   98.978594][ T4623]  ? end_current_label_crit_section+0x147/0x170
[   98.984851][ T4623]  ? ocfs2_fallocate+0x350/0x350
[   98.989810][ T4623]  vfs_copy_file_range+0x10d6/0x1640
[   98.995110][ T4623]  ? generic_copy_file_range+0x210/0x210
[   99.000748][ T4623]  ? __fget_files+0x28/0x4a0
[   99.005342][ T4623]  ? __might_fault+0xbd/0x110
[   99.010042][ T4623]  __se_sys_copy_file_range+0x3ea/0x5d0
[   99.015609][ T4623]  ? __x64_sys_copy_file_range+0xf0/0xf0
[   99.021262][ T4623]  ? syscall_enter_from_user_mode+0x2e/0x230
[   99.027255][ T4623]  ? lockdep_hardirqs_on+0x94/0x130
[   99.032461][ T4623]  ? __x64_sys_copy_file_range+0x1d/0xf0
[   99.038105][ T4623]  do_syscall_64+0x3b/0xb0
[   99.042628][ T4623]  ? clear_bhb_loop+0x45/0xa0
[   99.047315][ T4623]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   99.053221][ T4623] RIP: 0033:0x7f4ea4d7e719
[   99.057748][ T4623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   99.077359][ T4623] RSP: 002b:00007f4ea5ab9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000146
[   99.085794][ T4623] RAX: ffffffffffffffda RBX: 00007f4ea4f35f80 RCX: 00007f4ea4d7e719
[   99.093770][ T4623] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000007
[   99.101763][ T4623] RBP: 00007f4ea4df139e R08: 0000000000000006 R09: 0000000000000000
[   99.109738][ T4623] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000000
[   99.117720][ T4623] R13: 0000000000000000 R14: 00007f4ea4f35f80 R15: 00007ffed11962c8
[   99.125702][ T4623]  </TASK>
[   99.128779][    C1] vkms_vblank_simulate: vblank timer overrun
[   99.138092][  T951] usb 4-1: Using ep0 maxpacket: 32
[   99.159271][  T951] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[   99.171350][  T951] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[   99.189922][ T4623] (syz.1.93,4623,1):ocfs2_get_clusters:606 ERROR: status = -34
[   99.198507][  T951] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   99.211613][ T4623] (syz.1.93,4623,1):ocfs2_reflink_remap_extent:4534 ERROR: status = -34
[   99.220181][ T4623] (syz.1.93,4623,1):ocfs2_reflink_remap_blocks:4693 ERROR: status = -34
[   99.228682][ T4623] (syz.1.93,4623,1):ocfs2_remap_file_range:2703 ERROR: status = -34
[   99.239086][  T951] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[   99.250044][  T951] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131
[   99.258765][  T951] usb 4-1: Product: syz
[   99.269178][  T951] usb 4-1: Manufacturer: syz
[   99.274073][  T951] usb 4-1: SerialNumber: syz
[   99.280492][ T4634] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   99.295928][  T951] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input10
[   99.327969][ T4260] ocfs2: Unmounting device (7,1) on (node local)
[   99.549718][  T951] usb 4-1: USB disconnect, device number 5
[   99.569052][  T951] appletouch 4-1:1.0: input: appletouch disconnected
[  100.458072][ T4588] tipc: Disabling bearer <eth:syzkaller0>