last executing test programs:

14.073537788s ago: executing program 3 (id=647):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x400e, &(0x7f0000000640), 0x1, 0x451, &(0x7f00000001c0)="$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")
socket$kcm(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
syz_open_dev$admmidi(0x0, 0x2, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000)
r1 = socket$netlink(0x10, 0x3, 0x4)
writev(r1, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400191809004beafd0d3602028447000b4e230f02000500a2bc5603ca00000f", 0x24}], 0x1)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffa83)
socket$alg(0x26, 0x5, 0x0)
r2 = syz_io_uring_setup(0xbda, 0x0, &(0x7f0000000dc0)=<r3=>0x0, &(0x7f00000001c0))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000)
io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0)

13.623941565s ago: executing program 4 (id=649):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240))
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0x6, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080)
syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000140)='./bus\x00', 0x1008040, &(0x7f00000000c0)=ANY=[@ANYRES8=0x0, @ANYRESOCT=0x0, @ANYRESDEC], 0xd3, 0x599, &(0x7f0000000b80)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)
socket$igmp6(0xa, 0x3, 0x2)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000300)=0x3341, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r2)
syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000200)={0x20, r3, 0x329, 0xfffffffc, 0x0, {0x16}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x10000860}, 0x8004)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000b40), r5)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000040)={'wpan0\x00', <r7=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r5, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x20, r6, 0x786b6295d7f1977, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_DEVKEY={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x18001}, 0x40040)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, 0x0)

13.616889575s ago: executing program 2 (id=650):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000100000085000000c0000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000340)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

13.132663503s ago: executing program 2 (id=652):
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$tipc(r1, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$tipc(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008000}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
syz_clone(0xe00c1100, 0x0, 0x0, 0x0, 0x0, 0x0)
close(r0)

12.834930687s ago: executing program 1 (id=654):
socket$nl_route(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240))
pipe2(0x0, 0x800)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000001440)=ANY=[], 0xffffff6a)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004000}, 0x24044880)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/protocols\x00')
read$FUSE(r1, &(0x7f00000030c0)={0x2020}, 0x2020)
bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r1}, 0x8)

12.284141496s ago: executing program 3 (id=655):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff0000001100a200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$tipc(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
close(r1)

12.198124428s ago: executing program 1 (id=656):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
socket$inet6(0xa, 0x800000000000002, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10)
ppoll(&(0x7f0000000500)=[{}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
socketpair(0x9, 0x4, 0xff, &(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2})
r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
write$UHID_CREATE2(r3, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042)
read$char_usb(r4, 0x0, 0x0)
truncate(&(0x7f0000000240)='./file0\x00', 0x206b12)
close_range(r0, 0xffffffffffffffff, 0x0)

11.929493932s ago: executing program 3 (id=658):
r0 = syz_open_dev$vcsa(0x0, 0x1, 0x40102)
ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x40e)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000600)}}], 0x1, 0x4000000)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x5c}}, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x3)
ioctl$KDGKBDIACR(r2, 0x4bfa, &(0x7f0000000100)=""/222)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
pread64(r4, &(0x7f0000002180)=""/4105, 0x137, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0)
close(0x3)
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r6}, 0x10)
setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x6, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x8000, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}})
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x5c}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = dup3(r0, r7, 0x80000)
write$sndseq(r8, &(0x7f0000000980)=[{0x3, 0x5, 0x7, 0x1e, @tick=0x80000000, {0xff, 0x1}, {0x5, 0x21}, @time}], 0x1c)

10.401093206s ago: executing program 0 (id=659):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000180)=ANY=[@ANYBLOB='X\x00\x00', @ANYRES16=r0, @ANYBLOB="010800000000000000000c00000008000300", @ANYRES32=r2, @ANYBLOB="0a00060008021100000100003000508011000a004abee339084eeef16f162471f40000000800070000000000050002"], 0x58}}, 0x800)

10.399974656s ago: executing program 2 (id=660):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000700)={r0, 0xffffffffffffffff, 0x10, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x3}}, 0x1e)
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x4000, &(0x7f00000000c0)=ANY=[], 0xff, 0x5fc4, &(0x7f0000006400)="$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")
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = fsopen(0x0, 0x0)
fsmount(r2, 0x0, 0x88)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x2)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r4 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f)
write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x2, 0x5, 0x7, 0x3, 0x1, {0x400000080001, 0xff, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x2000001}}, {0x0, 0x13}}}, 0xa0)
sendfile(r4, r4, &(0x7f0000000080), 0x7f03)

9.929063304s ago: executing program 4 (id=661):
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x5a20}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0)

9.874834794s ago: executing program 3 (id=662):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/diskstats\x00', 0x0, 0x0)
read$FUSE(r4, &(0x7f0000000a80)={0x2020}, 0x2020)

9.683938357s ago: executing program 0 (id=663):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x1ff, 0x5c, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = epoll_create1(0x0)
r2 = epoll_create1(0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet6_udplite(0xa, 0x2, 0x88)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0xa000000d})
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000400)={0xa})
epoll_pwait(r1, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket(0xa, 0x1, 0x0)
socket$inet(0x2, 0x802, 0x1)

8.794836471s ago: executing program 4 (id=664):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1000000000000002)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0)
pipe2(&(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80000)
ioctl$VHOST_VDPA_SET_VRING_ENABLE(r3, 0x4008af75, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0b000000080000000c0000000400000001000000", @ANYRES32=0x0], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
close(r5)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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")
quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000180)={0x4, 0x0, 0xffff, 0x1, 0x1, 0x9, 0x0, 0x36a, 0x5})
setxattr$security_ima(0x0, &(0x7f0000000140), &(0x7f0000000340)=ANY=[], 0x700, 0x0)

8.604133164s ago: executing program 0 (id=665):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="180300000000000000000000001000008510000006000000180000000000000000000000000000006500000000000000180000000000000000000000000000009500000000000000540300000000000095000000000000006ddc6e56dbddca554b71aba2ac03bdf11516b2"], &(0x7f0000000000)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[], 0x48)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="050002000000000000002e00000008000300", @ANYRES32, @ANYBLOB="0a00340002020202020200000a00060008021100000000000400440028000d01"], 0x68}}, 0x0)

8.461588227s ago: executing program 1 (id=666):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x400e, &(0x7f0000000640), 0x1, 0x451, &(0x7f00000001c0)="$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")
socket$kcm(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
syz_open_dev$admmidi(0x0, 0x2, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000)
r1 = socket$netlink(0x10, 0x3, 0x4)
writev(r1, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400191809004beafd0d3602028447000b4e230f02000500a2bc5603ca00000f", 0x24}], 0x1)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffa83)
socket$alg(0x26, 0x5, 0x0)
r2 = syz_io_uring_setup(0xbda, 0x0, &(0x7f0000000dc0)=<r3=>0x0, &(0x7f00000001c0))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000)
io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0)

6.651306015s ago: executing program 4 (id=667):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket(0x10, 0x803, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r5 = dup(r4)
sendmsg$inet(r5, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x40}, 0x0)

6.3280915s ago: executing program 0 (id=668):
r0 = userfaultfd(0x80001)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[], 0x8c}}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, 0x0, 0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749})
madvise(&(0x7f00008d7000/0x1000)=nil, 0x1000, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
readv(r0, &(0x7f0000000040)=[{&(0x7f0000000180)=""/102, 0x66}], 0x1)

5.193091118s ago: executing program 0 (id=669):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
socket$inet6(0xa, 0x800000000000002, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10)
ppoll(&(0x7f0000000500)=[{}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
socketpair(0x9, 0x4, 0xff, &(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2})
mkdir(0x0, 0x0)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042)
read$char_usb(r3, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

4.601374188s ago: executing program 2 (id=670):
prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000950000000000000057c9fbee"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x190, 0x168, 0x10, 0x388, 0xb, 0x388, 0x250, 0x250, 0x388, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [0xff6a], [0xff], 'ip6gretap0\x00', 'veth1_to_hsr\x00', {}, {0xff}, 0x3a, 0xb6, 0x0, 0x20}, 0x6000000, 0x128, 0x190, 0x0, {0x0, 0x28e}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@inet=@hashlimit1={{0x58}, {'netdevsim0\x00', {0x0, 0x0, 0x3ff, 0x1, 0xfffffffc, 0x10000, 0x80000001}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x10000, '\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x1f8, 0x0, {}, [@common=@eui64={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:usb_device_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8)
timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000100)={{0x77359400}, {0x0, 0x3938700}}, 0x0)

4.43213689s ago: executing program 1 (id=671):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x4, 0xc0, &(0x7f0000002380)=""/192}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

4.065021956s ago: executing program 1 (id=672):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240))
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0x6, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080)
syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000140)='./bus\x00', 0x1008040, &(0x7f00000000c0)=ANY=[@ANYRES8=0x0, @ANYRESOCT=0x0, @ANYRESDEC], 0xd3, 0x599, &(0x7f0000000b80)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)
socket$igmp6(0xa, 0x3, 0x2)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000300)=0x3341, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r2)
syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000200)={0x20, r3, 0x329, 0xfffffffc, 0x0, {0x16}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x10000860}, 0x8004)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000b40), r5)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000040)={'wpan0\x00', <r7=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r5, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x20, r6, 0x786b6295d7f1977, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_DEVKEY={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x18001}, 0x40040)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, 0x0)

3.711888321s ago: executing program 4 (id=673):
r0 = syz_open_dev$vcsa(0x0, 0x1, 0x40102)
ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x40e)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000600)}}], 0x1, 0x4000000)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x5c}}, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x3)
ioctl$KDGKBDIACR(r2, 0x4bfa, &(0x7f0000000100)=""/222)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
pread64(r4, &(0x7f0000002180)=""/4105, 0x137, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0)
close(0x3)
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r6}, 0x10)
setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x6, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x8000, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}})
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x5c}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = dup3(r0, r7, 0x80000)
write$sndseq(r8, &(0x7f0000000980)=[{0x3, 0x5, 0x7, 0x1e, @tick=0x80000000, {0xff, 0x1}, {0x5, 0x21}, @time}], 0x1c)

3.688911122s ago: executing program 3 (id=674):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x4000, &(0x7f00000000c0)=ANY=[], 0xff, 0x5fc4, &(0x7f0000006400)="$eJzs3U9vHGcdB/Df/vHacds0qlAVIg5uyp+W0vxPoPxryoEDHEBCPZPIdauUFFASEK0i4soHxAV4CXDphUPfAi+grwHxAoiU9NQDZdDYz+OMN+usTeKZXT+fj7SZ+c2z430m3x3PrGdmJwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA+NEPf3a2FxFXfpsmHIt4OgYR/Ygjdb0S9cjl/PxhRByPzeZ4PiIGixH1/Jv/PBtxISI+ORpx7/7t1XryuT324+KZWzc+//EP/vmHP28cf/etn3803v7TL5z/+I93Io795LWPP7/zZJYdAAAASlFVVdVLH/NPpM/3/a47BQC0Im//qyRPV6vVavUTrf/U38/zn36q6/6qD2ndVE12p1lExHpznnqfweF4AJgz6/FZ112gQ/Iv2jAinuq6E8BM63XdAQ7Evfu3V3sp315ze7Cy1Z7/Trkj//Xe9vUduw2nGT/HpK3310YM4rld+nOkpT7Mkpx/fzz/K1vto/S8g86/LbvlP9q69Kk4Of/BeP5jduT/l4iY2/z7E/MvVc5/uJ/81wdzvP7LHwAAAACAwy///f9Yx8d/Fx9/UfbkUcd/V1rqAwAAAAAAAAA8aY97/79t7v8HAAAAM6v+rF7769EH03b7LrZ6+pu9iGfGng8UZqXx5YAAAAAAAAAAAAAAQDuGEcvpvP6FiHhmebmqqvrRNF7v1+POP+9KX34oWde/5AEAYMsnR8eu5e9FLEXEm+m7/haWl5eraiEilqsji3l/drS4VB1pfK7Nw3ra4mgPO8TDUVX/sKXGfE3TPi9Pax//efVrjarBHjrWjg4DB4CI2Noa3bNFOmSq6tnoei+H+WD9P3ys/+xF1+9TAAAA4OBVVVX10td5n0jH/PtddwoAaEXe/o8fF1Cr1epi6k+3Js5Mf9TqA6ybqsnuNIuIWG/OU+8zuB0/AMyZ9fis6y7QIfkXbRgRx7vuBDDTel13gANx7/7t1V7Kt9fcHqxstedzQXbkv97bnC/PP2k4zfg5Jm29vzZiEM/t0p/nW+rDLMn598fzv7LVnm/xv53P0sHk35bd8q+X81gH/elazn8wnv+Yg17/27IR/Yn5lyrnP9xX/gP5AwAAAADADMt//z/m+G9eZAAAAAAAAACYO/fu317N173m4/9fmvC8XnPM9Z+HRs6/t+f8Xf97mOT8++P5j52QM2iM333jQf6f3r+9+tGtf38xD2c+/4XBqH7thV5/MEzn/FQLb8e1uB5rceah5w93tJ99qH1hR/u5Ke3nH2of1e1HcvupWI1fxfV4a7t9ccqJUUtT2qsp7Tn/gfW/SDn/YeNR57+c2ntjw9rdD/sPrffN4aTXufz3/3z14bWrDcMd1UYMtpet4Wj9z8nW+vTA5v/JU6P4zc21G6d+d/XWrRtnIw12TD0XafCE5fwX0iPn/9KLW+35935zfb374Wjf+c+KjRhOyn/z/f1iY7xe3pdb7lsXcv6j9Mj55y3Q5PV/nvOfuP5vLt8rHfQHAAAAAAAAAAAAAAAAHqWqqs1LRC9HxKV0/U9X12YCAO3K2/8qydPVarVarVYfvrqpmuz1ZhER/2jOU+8z/H7SDwMAZtl/I+JfXXeCzsi/YPn7/urhl7vuDNCqm+9/8Iur16+v3bjZdU8AAAAAAAAAgP9Xvv/nSuP+z5vnAY3dN3rH/V/fiJW5vf9nfzTYvNd5WqAX4tH3/z4Zj77/93DK6y1MaR9NaV+c0r40pX3ihR4NOf8XUsY5/xNpwUq6/+tLHfSnazn/k+lezzn/r409r5l/9bd5zr+/I//Tt9779emb73/w6rX3rr6z9s7aL8+euXTh/MUL5y9ePP32tetrZ7b+7bDHByvnn+997TzQsuT8c+byL0vO/yupln9ZUv7bu6HyL0te//P+nvzLkvPPn33kX5ac/8upln9Zcv5fT7X8y5LzfyXV8i9Lzv8bqZZ/WXL+r6Za/mXJ+Z9KtfzLkvM/nWr5lyXnn49wyb8sOf98ZoP8y5LzP5dq+Zcl538+1fIvS87/QqrlX5ac/8VUy78sOf9LqZZ/WXL+30y1/MuS8/9WquVflpz/a6mWf1ly/t9OtfzLkvP/TqrlX5ac/3dT/aj8322xX7Qj5/+9VFv/y5Lz/36q5V+WnP/rqZZ/WR58/7+RfY8sz0Y3jBh58iNd/2YCAAAAAAAAAAAAAMa1cTpx18sIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwP3bgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhb17jZGrvO8HfvZmrw0B/8OdOGCbm4GF3fUNHGIwScifkl4oCWnTkhrHXhsnvtW7TgChsim0JQpSkdoX9EXTJEqiSG0FqiI1lWiE1Ejtm6p51QhVilopUl0JKgcllVIFtjpznufZmdnZmbW9a5855/OJ8M/eOWfmmTNnZve70XcGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg2cYPT/3RQJZl+X+NP9Zl2cX539dku/N/zu640CsEAAAAztU7jT//6tL0hd1L2Klpm3+87l++Mzc3N5d95u1T7/7J3Fy6YEOWDa3OssZl0T/9/GdzzdsEz2WjA4NN/x7scfNDPS4f7nH5SI/LV/W4fHWPy0d7XL7gACywpvh9TOPKbmz8dV1xSLPLs5HGZTd22Ou5gdWDg/F3OQ0DjX3mRg5kh7LD2VQ2sWCfgcb/suy1jfltPZjF2xpsuq31WZad/skz++IaBsIxvjFrubGG5sfurfuzDW//5Jl935p585pOs+dhWLDSLNu8KV/n81k2/+uqbCBbnY5JXOdg0zrXd1jnUMs6Bxr75X9vX+fpJa4z3u/RsM4fdFnn+vC1J2/Ismw2W3Sbds9lg9natltNx3u0OCPy68gfyvdmw2d0nmxcwnmS7/PjG1rPk/ZzMh7/jeGYDC+yhuaH460vrlpw3M/2PMnvdRnO1fy6H85vdHS0+VerLedqvs0zNy1+DnR87DqcA+lcbjoHNvU6BwZXDTXOgcH5NW9qOQcmF+wzmA00buvUTd3PgfGZI8fHp596+o5DR/YenDo4dXRyYse2rdu3bd2+ffzAocNTE8WfZ3ZI+8jabDCdg5vCa008B29p27b5lJz72vI9D0ZL8jzI7/snbs4XdPFgtsg5nm/z/OZzfx6k7/tNz4PhpudBx9fUDs+D4SU8D/JtTm9e2vfM4ab/Oq1hpV4L1zWdAxfy+2F+m4/duvhr4fqwrhduO9Pvh0MLzoF4twbCcy//Svp5b/TucFwWnhfX5hdctCo7OT114s4n987MnJjMwjgvLmt6rNrPl7VN9ylbcL4MnvH5svsvf3HztR2+vi4cq9Hb5x+rVR0eh3ybbWPdH6vGq3vn49ny1S1ZGMvsfB/PTt/N8uOZskSXcz/f5vk7zv1nwZRLml7/Rnq9/g2NDBevf0PpaIy0vP4tfGiGGivLstN3LO31byT8d75f/y4vyetffqweu7P7OZBv88L4mZ4Dw11f/24IcyCs59aQGEabcv+7jctni9O06bHsed4MD4+E82Y43mLrebN1wT75teW3vXni7M6bzTe0PlYtP7dU8LzJj9WfTnQ/b/JtXp8899eONfGvTa8dq3qdAyNDq/L1jqSToHi9m1sTz4E7s33Zsexwtj/tkz/K+W2NbVnaObAq/He+XzuuLsk5kB+rl7d0Pwfybb6/dXl/dtocvpK2afrZqf33C4tl/muH56+v/bAtd+bP1/mRbd1/N5Rv8+a2M80Z3Y/T7eErF3U4Tu3Pn8XO6f3Z+TlOV4d1Ht7e/XdT+TaX71ji+bQ7y7I3Jt9o/L4r/H73b07+63dafu/b6XfKb0y+8dD4Iz88k/UDAHD23m38Obuq+Fmz6f+xXsr//w8AAAD0hZj7B8NM5H8AAACojJj7h8JM5H8AAACojJj7h8NMapL/n7h75yvvPJuldwOcC+Ll8TA8fG+xXex4z4Z/b5ibl3/9Q98YeeVLzy7ttgezLPvFQ+/ruP0T98Z1FY7HdX6g9esLXH39km7/8Ufnt2t+/4TTO4vrj/dnqadB7Cq/Nr6lcb0bnppszNcfyhrzkdkXniuuv/h33P7U1mL7Pw9vWrL7wEDL/pvDem4Mc0N4T5mHd88fh3zG/V5Zf90/XPbJ+duL+w1suqRxN1/+veJ643tEvXRZsX2834ut/++//O1X8u2fvKnz+p8d7Lz+U+F6fxzmz3cV2zcf8y81rf8Pwvrj7cX97vz69zqu/9Wriu1fDefFV8NsX//9f/z+dzo9XvF2dt9T7Bdvf+J/tjX2i9cXr799/aPPTrYcj/brf/3t4np2ff6nQ83bx6/H24kev6f1/B4Ij29LjzzLsm//YdZynLMPFvv9Xdv64/Udv6fz+m9vW+fxgesb+8/fn3Ut9+sr39zS8f7G9ez+63Ut9+elB8Lxe3v8+/n1nnoknI/h8v/9QXF97e9l+uoDra83cfuvriuet/H6xtvW/1Lb+mevz49d7/U/+Hax/lfvW92y/t0fDefTg8Xstf6Df3Fpy/5f+1bxeJz4wtjRY9MnD+0Pd2Zd2/N49eiatRdd/J5LLg2vpe3/3nNs5ompExsmNkxk2YY+fMvAlV7/18P872LMLv8tFH740+K8e/FjxfetW35W/Pul8PXHw+MZvz9+5c9GWs7X9sd99r5inuv6bwvrWKqrvvwf13f48n8ueM/fU59+7eTf/v6b7T8XxPtz/IrRxv17eeOVjcsGXi8ub3+96uXfr2h9Xv9oeKIxvxuO61x4Z+ZNVxa313798b1JXvx48fyNP8nF/bO29xNZN9R6P851/T8KP8d87+rW1794fnz32bZ3c16XDeRLmA2vD9lscXncKh7vF09f2fH24vvwZLPXnMkyFzX91PT44UNHTz45PjM1PTM+/dTTe44cO3l0Zk/jvUv3fLbX/vPP77WN5/f+qR3bssaz/VgxVtiFXv/xR/ftv2vi5v1TB/aePDDz6PGpEwf3TU/vm9o/ffPeAwemvtBr/0P7d01u2bn1ri1jBw/t33X3zp1bd44dOnosX0axqB52THxu7OiJPY1dpndt2zm5ffu2ibEjx/ZP7bprYmLsZK/9G9+bxvK9Pz92Yurw3plDR6bGpg89PbVrcueOHVt6vvvjkeMHpjeMnzh5dPzk9NSJ8eK+bJhpfDn/3tdrf+ph+lh4vWszEH46/9TtO9L74+a+8cVFr6rYpPXH0+yt8F5Q8ftbr3/H3D8SZlKT/A8AAAB1EHN/eOP/+QvkfwAAAKiMmPtXh5nI/wAAAFAZMfePhpnUJP/r/+v/6//r/+v/n8f+f6b/v9z0/5el/7+Q/v+S6P/r/+v/6//TXdn6/zH3r8myWuZ/AAAAqIOY+9eGmcj/AAAAUBkx918UZiL/AwAAQGXE3H9xmEk98v9I+1/1//X/9f+b+/9xW/3/TP9f//8s6f/r/3ej/6//38/rL2H/f43+P2VTtv5/zP3vCTOpR/4HAACAWoi5/5IwE/kfAAAAKiPm/kvDTOR/AAAAqIyY+9eFmdQk//v8f/1//X+f/6//r/+/kvT/9f+70f/X/+/n9Zew/+/z/ymdsvX/Y+7/f2EmNcn/AAAAUAcx9783zET+BwAAgMqIuf+yMBP5HwAAACoj5v7Lw0xqkv/1//X/9f/1//X/9f9Xkv6//n83+v/6//28fv1//X96K1v/P+b+K8JMapL/AQAAoA5i7r8yzET+BwAAgMqIuf+qMBP5HwAAACoj5v6rw0xqkv/1//X/9f/1//X/9f9Xkv6//n83+v/6//28fv1//X96K1v/P+b+a8JMapL/AQAAoA5i7r82zET+BwAAgMqIuf99YSbyPwAAAFRGzP3rw0xqkv/1//X/S9//H9T/1/8v6P/r/3eyvP3/wUUv0f8v6P+30v/X/9f/1/+nu7L1/2Puf3+YSU3yPwAAANRBzP3XhZnI/wAAAFAZMfdfH2Yi/wMAAEBlxNy/IcykJvlf/1//v/T9f5//r/8fZu36/zMD+v9L4PP/9f8z/f+zdqH78/2+fv1//X96K1v/P+b+jWEmNcn/AAAAUAcx928KM5H/AQAAoDJi7r8hzET+BwAAgMqIuf/GMJOa5H/9/7Ps/69p/af+f+f16//r/+v/+/x//X/9/270//X/+3n9+v9L6/+v6nVFVFrZ+v8x998UZlKT/A8AAAB1EHP/zWEm8j8AAABURsz9t4SZyP8AAABQGTH3bw4zqUn+1//3+f/6//r/+v/6/ytJ/3/J/f81Z7Mu/f+C/v/ZudD9+X5ffz/1/0c77O/z/zkfytb/j7n/1jCTmuR/AAAAqIOY+28LM5H/AQAAoDJi7r89zET+BwAAgMqIuX8szKQm+V//X/9f/1//X/9f/38lVbX/n15Hff6//r/+v/7/Cvf/v7nI/v3y+f/UW9n6/zH33xFmUpP8DwAAAHUQc/+dYSbyPwAAAFRGzP3jYSbyPwAAAFRGzP0TYSY1yf/6//r/+v/6//r/+v8rqar9//bP/8+yTP9f/z/R/9f/L9vn/3ei/8/5ULb+f8z9k2EmNcn/AAAAUAcx928JM5H/AQAAoDJi7t8aZiL/AwAAQGXE3L8tzKQm+V//X/9f/1//X/9f/38l1aX/7/P/i8v1/wv6//r/+v/6/3U02OFrZev/x9y/PcykJvkfAAAA6iDm/h1hJvI/AAAAVEbM/XeFmcj/AAAAUBkx998dZlKT/K//r/+v/6//X97+f+vtr1z//7/0/1eQ/r/+fzf6//r//bx+/X/9f3pb3v7/pefc/4+5f2eYSU3yPwAAANRBzP0fCDOR/wEAAKAyYu6/J8xE/gcAAIC+0ulzCKOY+z8YZlKT/K//X/X+/9xq/X/9//7t/7ceT5//r//fSXj51P9fonr1/9csuD39/1YXuj/f7+vX/9f/p7fl7f8v+PH0jPv/MffvCjOpSf4HAACAOoi5/94wE/kfAAAAKiPm/vvCTOR/AAAAqIyY+3eHmdQk/+v/V73/X77P/x/I9P/1/wv6//r/y8Hn/+v/Zz7//6ydbX8+vu+G/n95+v/5OaT/TxmVrf8fc//9YSY1yf8AAABQBzH3fyjMRP4HAACAyoi5/8NhJvI/AAAAVEbM/R8JM6lJ/tf/1//3+f/6//r/+v8rSf9f/78b/f/+7P9H+v/l6f/7/H/Kqmz9/5j7HwgzqUn+BwAAgDqIuf+jYSbyPwAAAFRGzP3/P8xE/gcAAIDKiLn/wTCTmuR//X/9f/1//X/9f/3/laT/r//fjf6//n8/r1//X/+f3srW/4+5/5fCTGqS/wEAAKAOYu5/KMxE/gcAAIDKiLn/Y2Em8j8AAABURsz9vxxmUpP8r/9/fvr/g+n69f/1//X/9f/1/5dTn/b/R/X/C/r/+v/9vH79f/1/eitb/z/m/l8JM6lJ/gcAAIA6iLn/V8NM5H8AAACojJj7fy3MRP4HAACAyoi5/+Ewk5rkf/1/n/+v/6//X9r+/3Dr8dT/1//vpE/7/z7/P9D/1//v5/Xr/+v/01vZ+v8x9/96mElN8j8AAADUQcz9j4SZyP8AAABQGTH3fzzMRP4HAACAyoi5/xNhJjXJ//r/+v/6//r/pe3/tx1P/f+y9v//reul+v/6/93o/+v/9/P69f/1/+mtbP3/mPsfDTOpSf4HAACAOoi5/5NhJvI/AAAAVEbM/b8RZiL/AwAAQGXE3P+bYSb9mf8Hz3QH/X/9f/1//X/9f/3/laT/v7D/n7+GXcj+/6qlbKj/vyT6//r/+v/6/3RXtv5/zP2fCjPpz/wPAAAAdBBz/2+Fmcj/AAAAUBkx9/92mIn8DwAAAJURc/9jYSY1yf/6//r/+v/6//r/+v8rSf/f5/93o/+v/9/P69f/1/+nt7L1/2Pu/3SYSU3yPwAAANRBzP2/E2Yi/wMAAEBlxNy/J8xE/gcAAIDKiLn/8TCTmuR//X/9f/1//f/l6f/P6f/r/3ek/6//343+v/5/P69f/1//n97K1v+PuX9vmElN8j8AAADUQcz9nwkzkf8BAACgMmLu3xdmIv8DAABAZcTcvz/MpCb5X/9f/1//X//f5//r/68k/X/9/270//X/+3n9+v/6//RWtv5/zP1TYSY1yf8AAABQBzH3Hwgzkf8BAACgMmLuPxhmIv8DAABAZcTc/0SYSU3yv/6//r/+v/6//r/+/0rS/9f/70b/X/+/n9ev/6//T2/L1///52Xp/8fcfyjMpCb5HwAAAOog5v7PhpnI/wAAAFAZMfd/LsxE/gcAAIDKiLn/cJhJTfK//r/+v/5/Bfv/w/r/mf5/aej/6/93o/+v/9/P69f/1/+nt+Xr/2fL0v+Puf9ImElN8j8AAADUQcz9R8NM5H8AAACojJj7j4WZyP8AAABQGTH3Hw8zqUn+1//X/9f/r2D/3+f/N+j/l4P+v/5/N/r/+v/9vH79f/1/eitb/z/m/t8NM6lJ/gcAAIA6iLn/RJiJ/A8AAACVEXP/dJiJ/A8AAACVEXP/TJhJTfK//r/+v/6//r/+v/7/StL/1//vRv+/f/r/Ix321//X//8/9u6jyY676uP41WPLksr1FCv2vAV27OAd+DWwYUuxIOeMAZNzzjnnaHLOOZick0FkMFSZsu45x5Y16h6N5+p2/8/ns/DxyGOpramS61dT32r9P3OW1v/n7r9v3NJk/wMAAEAHufvvF7fY/wAAADCM3P33j1vsfwAAABhG7v4HxC1N9r/+X/+v/19M/7/t/PT/+n/9/yXR/+v/N/vu/8/EB4P3/wfR/+v/9f/MWVr/n7v/gXFLk/0PAAAAHeTuf1DcYv8DAADAMHL3Pzhusf8BAABgGLn7HxK3NNn/+n/9/7j9/6m19f/e/59f1xH7/xO3/rL6/+Ol/9f/b/bd/zd5//9B9P/6f/0/c5bW/+fuf2jc0mT/AwAAQAe5+x8Wt9j/AAAAMIzc/Q+PW+x/AAAAGEbu/kfELU32v/5f/z9u/7+69//r//PrOkT/f6Z+Hu//1//r/y9O/6//X/Pz6//1/8xbWv+fu/+RcUuT/Q8AAAAd5O5/VNxi/wMAAMAwcvc/Om6x/wEAAGAYufsfE7c02f/6f/2//l//r/+/DO//1//r//X/B9L/6//X/Pz6f/0/85bW/+fuf2zc0mT/AwAAQAe5+x8Xt9j/AAAAMIzc/Y+PW+x/AAAAGEbu/ifELU32v/5f/6//1//r//X/u6T/1/9P0f/r/9f8/Pp//T/zdt7/X3PtuXvY/j93/7VxS5P9DwAAAB3k7n9i3GL/AwAAwDBy9z8pbrH/AQAAYBi5+58ctzTZ/wf0/1ds9P9N+/+bT+j/9f/L7P9vij9l9P/6/wutu/8/rf/X/5/74eX1/4f7ndD/6//1/8zZef8/0/vf/uPc/dfFLU32PwAAAHSQu/8pcYv9DwAAAMPI3f/UuMX+BwAAgGHk7n9a3NJk/3v/v/7/ON//nz+v/n9L/+/9//p//b/3/0/bYf9/r/zN1P9f3L77+bU//1T/f/dDPL/+nw6W1v/n7n963NJk/wMAAEAHufufEbfY/wAAADCM3P3PjFvsfwAAABhG7v5nxS0N9v+V+v96jqT/9/7/Q/X/Z7b/vv7//OfR/+v/D6L/1/9P8f5//f+an9/7/+f7/6vnfhKGt7T+P3f/s+OWBvsfAAAAusjd/5y4xf4HAACAYeTuf27cYv8DAADAMHL3Py9uabL/9f/6f/2/9//fof7/Cv2//n+a/l//P0X/r/9f8/Pr/73/n3lL6/9z9z8/bqnhd+UR/isBAACAJcnd/4K4pcn3/wEAAKCD3P0vjFvsfwAAABhG7v4XxS1N9r/+X/+v/9f/e/+//n+X9P/D9f8n9P+30v/r//X/+n+mLa3/z93/4rilyf4HAACADnL3vyRusf8BAABgGLn7Xxq32P8AAAAwjNz9L4tbmux//b/+X/+v/9f/6/93Sf8/XP/v/f+3of/X/+v/9f9MW1r/n7v/5XFLk/0PAAAAHeTuf0XcYv8DAADAMHL3vzJusf8BAABgGLn7XxW3NNn/+n/9v/5f/6//1//v0vL7/5OH+iz9/5b+/3y76v9PX+TX0/8v6/mPp//Pr77+nzEtoP+/x20/zt3/6rilyf4HAACADnL3vyZusf8BAABgGLn7Xxu32P8AAAAwjNz9r4tbmuz/i/X/Z6/e/vOZ/j9/w/T/cfX/+v+N/r/o//X/m1X0/4ej/9/S/5/P+//1/97/r/9n2gL6//M+zt3/+rilyf4HAACADnL3vyFusf8BAABgGLn73xi32P8AAAAwjNz9b4pbmux/7//X/+v/9f/6f/3/Lun/9f9TVtT/nzroB/X/+n/9v/6faUvr/3P3vzluabL/AQAAoIPc/W+JW+x/AAAAGEbu/rfGLfY/AAAADCN3/9vilib7X/+v/997//9/+v+k/4+vq/5f/38J9P/6/433/x/Zvvv5tT+//l//z7yl9f+5+98etzTZ/wAAANBB7v53xC32PwAAAAwjd/874xb7HwAAAIaRu/9dcUuT/a//1//vvf/3/v+i/4+vq/5f/38J9P/6/43+/8j23c+v/fn1//p/5i2t/8/d/+64pcn+BwAAgA5y978nbrH/AQAAYBi5+98bt9j/AAAAMIzc/e+LW5rsf/2//l//r//X/+v/d0n/r/+fcnn7/+vO6v/Pt+9+fu3Pr//X/zNvaf1/7v73xy1N9j8AAAB0kLv/A3GL/Q8AAADDyN3/wbjF/gcAAIBh5O7/UNzSZP/r/9fe/9/zxniCpfX/+Sn6f/2//l//r//X/1/Uct//f/s/KQ6m/9f/6//1/0y7bP3/va+5z91u+ZuZ/j93/4fjlib7HwAAADrI3X993GL/AwAAwDBy938kbrH/AQAAYBi5+z8atzTZ/z36/5MXfNo4/b/3/+v/F93/5x+q+n/9v/5f/3+g5fb/h6P/1//r//X/TFva+/9z938sbmmy/wEAAKCD3P0fj1vsfwAAABhG7v5PxC32PwAAAAwjd/8n45Ym+79H/38h/f/Wsff/N99J/6//L97/r//f6P/1/zP0//r/NT//0P3/iY3+n2OxtP4/d/+n4pYm+x8AAAA6yN3/6bjF/gcAAIBh5O7/TNxi/wMAAMAwcvd/Nm646//v75EuK/2//t/7//X/+n/9/y7p/4/Q/5+48tDPpf/f0v8fzb77+bU//9D9v/f/c0yW1v/n7v9c3OL7/wAAADCM3P2fj1vsfwAAABhG7v4vxC32PwAAAAxg27vn7v9i3NJk/+v/9f/6f/2//l//v0v6f+//n6L/1/+v+fn1//p/5i2t/8/d/6W4pcn+BwAAgA5y9385brH/AQAAYBi5+78St9j/AAAAMIzc/V+NW5rsf/2//l//r//X/+v/d0n/r/+fov/X/6/5+fX/+n/mLa3/z93/tbilyf4HAACADnL3fz1usf8BAABgGLn7vxG32P8AAAAwjNz934xbmux//b/+X/+v/9f/773/P7nR/x+Z/l//v9H/H9m++/m1P7/+X//PvKX1/7n7vxW3NNn/AAAA0EHu/m/HLfY/AAAADCN3/3fiFvsfAAAAhpG7/7txS5P9P3L/P/Vp+v8t/b/+f6P/X0L/7/3/d4D+X/+/0f8f2b77+bU/v/5f/8+8pfX/ufu/F7c02f8AAADQQe7+78ct9j8AAAAMI3f/DZvN9fY/AAAAjOmGc389vflB3NJk/4/c/0/R/2/p//X/G/2//n/H9P/6/yn6f/3/mp9f/6//Z97S+v/c/T+MW5rsfwAAAOggd/+P4hb7HwAAAIaRu//HcYv9DwAAAMPI3f+TuKXJ/tf/6//1//p//b/+f5f0//r/Kfp//f+an1//r/9n3tL6/9z9P41bmux/AAAA6CB3/8/iFvsfAAAAhpG7/+dxi/0PAAAAw8jd/4u4pcn+1//r//X/+n/9v/5/l/T/+v8p+n/9/5qfX/+v/2fe0vr/3P2/jFua7H8AAADoIHf/r+IW+x8AAACGkbv/13GL/Q8AAADDyN3/m7ilyf7X/+v/9f/6f/2//n+X2vb/t/xvVf8/S/+v/1/z8+v/9f/MW1r/n7v/t3FLk/0PAAAAHeTu/13cYv8DAADAMHL3/z5usf8BAABgGLn7/xC3NNn/+n/9v/5f/7+O/v8q/b/+/0CL7f+9//9Q9P/6/zU/v/5f/8+8pfX/uftvjFua7H8AAADoIHf/H+MW+x8AAACGkbv/T3GL/Q8AAADDyN1/Nm5psv/1//r/Ifv/U/r/8fp/7/9fZf9/F/2//n+a/l//v+bn1//r/5m3tP4/d/+f45Ym+x8AAAA6yN3/l7jF/gcAAIBh5O7/a9xi/wMAAMAwcvf/LW5psv/1//r/Ift/7//X/+v/F0P/r/+fov/X/6/5+fX/+n/mLa3/z93/97ilyf4HAACADnL3/yNusf8BAABgGLn7/xm32P8AAAAwjNz9/4pbmux//b/+X/+v/9f/6/93Sf+/3v7/qo3+f47+X/+v/9f/M21p/X/u/n/HLU32PwAAAHSQu/+muOXA/X/ny/RUAAAAwHHK3f+fuMX3/wEAAGAYufv/G7c02f/6f/2//l//r//X/++S/n+9/b/3/8/T/+v/9f/6f6Ytrf/P3f+/AAAA///XHBWv")
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x87}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, 0x0, 0x0)
fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000a006)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000000100)={{0x0, 0xdddd1000, 0x0, 0x2, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0xd000, 0xc, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xff}, {0x3000, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfe, 0x0, 0x4}, {0xdddd0000, 0x3000, 0x9, 0x0, 0xff, 0x4, 0x6, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x80}, {0xdddd1000, 0x0, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x3000, 0x0, 0x0, 0x1, 0x1, 0x83, 0xa, 0x26, 0x5}, {0x80a0000}, {0xdddd1000, 0xff}, 0xddf8ffdb, 0x0, 0x0, 0x70, 0xfffffffffffffffe, 0xd801, 0x0, [0x0, 0x0, 0x1]})
ioctl$KVM_RUN(r1, 0xae80, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0)
sendfile(r2, r3, 0x0, 0x20fffe82)

2.934742924s ago: executing program 2 (id=675):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0xa0002, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
ioctl$KVM_GET_MP_STATE(r4, 0x8004ae98, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000040)=@gcm_128={{0x304}, "e1cacdf40bcf5620", "6b05ca9767ffd4cbdb0ad962f824fdf9", "82586325", "90f8478e11467cf3"}, 0x28)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
syz_open_dev$MSR(0x0, 0x1, 0x0)

2.089127587s ago: executing program 1 (id=676):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x1ff, 0x5c, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = epoll_create1(0x0)
r2 = epoll_create1(0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet6_udplite(0xa, 0x2, 0x88)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0xa000000d})
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000400)={0xa})
epoll_pwait(r1, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket(0xa, 0x1, 0x0)
socket$inet(0x2, 0x802, 0x1)

1.975556509s ago: executing program 4 (id=677):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
socket$inet6(0xa, 0x800000000000002, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10)
ppoll(&(0x7f0000000500)=[{}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
socketpair(0x9, 0x4, 0xff, &(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2})
r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
write$UHID_CREATE2(r3, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042)
read$char_usb(r4, 0x0, 0x0)
truncate(&(0x7f0000000240)='./file0\x00', 0x206b12)
close_range(r0, 0xffffffffffffffff, 0x0)

1.886435561s ago: executing program 0 (id=678):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1000000000000002)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0)
pipe2(&(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80000)
ioctl$VHOST_VDPA_SET_VRING_ENABLE(r3, 0x4008af75, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0b000000080000000c0000000400000001000000", @ANYRES32=0x0], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
close(r5)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$eJzs3c9vVFsdAPDvnXZoKQMFZaFGBRFFQ5j+ABqCC2GjMYTESFy5gNoOTdMZpum0SCuLsnRvIokr/RPcuTBh5cKdO925wYUJKnkv9CVvMS/3zqUd2g7te7Qd6Hw+ye2955xhvufMcM6Ze2B6AuhZZyNiNSKORMS9iBjO85P8iButI33cq5ePp9ZePp5Kotm8878kK0/zou3PpI7lzzkYET/7ccQvk61xG8src5PVamUhT48s1uZHGssrl2YLec74xNjE6LXLV8f3rK1nan968aPZWz//y5+/8fzvq9//dVqt0m+OZ2Xt7dhLraYXo9SW1x8Rt/YjWJf0539/+PCkve1LEXEu6//D0Ze9mwDAYdZsDkdzuD0NABx26f1/KZJCOV8LKEWhUC631vBOx1ChWm8sXhyuLz2YjmwN62QUC/dnq5XRfK3wZBSTND2WXW+kxzelL0fEqYj47cDRLF2eqlenu/nBBwB62LFN8//HA635HwA45Aa7XQEA4MCZ/wGg95j/AaD3fI7537cDAeCQcP8PAL3H/A8AvWfH+f/JwdQDADgQP719Oz2aa/nvv55+uLz0g9LDS9OVxly5tjRVnqovzJdn6vWZaqU81Wzu9HzVen1+7Mp6srG8crdWX3qweHe2NjlTuVsp7nN7AICdnTrz7J9JRKxeP5od0baXg7kaDrdCtysAdE1ftysAdI3v80Dv2sU9vmUAOOS22aL3DR3/i9BTm7/Ch+rCV63/Q6+y/g+964ut//9wz+sBHDzr/9C7ms3Env8A0GOs8QPv9O//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KNK2ZEUytle4Kvpz0K5HHE8Ik5GMbk/W62MRsSJiPjHQHEgTY91u9IAwDsq/CfJ9/+6MHy+tLn0SPLJQHaOiF/9/s7vHk0uLi6Mpfn/X89ffJrnjx/pRgMAgHY3tma15un83HYj/+rl46nXx0FW8cXN1uaiady1/GiV9Ed/dh6MYkQMfZTk6Zb080rfHsRffRIRX9lo/6O2CKVsDaS18+nm+Gns4/sQf+P13xy/8Eb8QlaWnovZa/HlPagL9JpnN1vjZN730i6W979CnM3O2/f/wWyEenevx7+1LeNfYX3869sSP8n6/Nn19Ntr8uLKX3+yJbM53Cp7EvG1/u3iJ+vxkw7j7/ldtvFfX//muU5lzT9EXIjt47fUsmF2ZLE2P9JYXrk0W5ucqcxUHoyPT4xNjF67fHV8JFujbv3823Yx/nv94olO8dP2D3WIP7hD+7+zy/b/8dN7v/jWW+J/79vbv/+n3xI/nRO/u8v4k0M3Om7fncaf7tD+nd7/i7uM//zfK9O7fCgAcAAayytzk9VqZWGHi/Sz5k6PcfFhXsRqxHtQDRfv1UW3RyZgv210+m7XBAAAAAAAAAAAAAAA6KSxvDI3EPv7daJutxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDD67MAAAD//w/PzvM=")
quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000180)={0x4, 0x0, 0xffff, 0x1, 0x1, 0x9, 0x0, 0x36a, 0x5})
setxattr$security_ima(0x0, &(0x7f0000000140), &(0x7f0000000340)=ANY=[], 0x700, 0x0)

1.732139403s ago: executing program 2 (id=679):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="180300000000000000000000001000008510000006000000180000000000000000000000000000006500000000000000180000000000000000000000000000009500000000000000540300000000000095000000000000006ddc6e56dbddca554b71aba2ac03bdf11516b2"], &(0x7f0000000000)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[], 0x48)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="050002000000000000002e00000008000300", @ANYRES32, @ANYBLOB="0a00340002020202020200000a00060008021100000000000400440028000d01"], 0x68}}, 0x0)

0s ago: executing program 3 (id=680):
socket$unix(0x1, 0x1, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x5, 0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5, 0xa}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
read(r3, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x12, 0x10, &(0x7f00000007c0)=ANY=[@ANYRESDEC=r1, @ANYBLOB="0000000000000000b704000001000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
preadv(0xffffffffffffffff, 0x0, 0x0, 0xa3, 0x7400)
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)
syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
socket$xdp(0x2c, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x12, 0x2, 0x8, 0xd0eb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50)
r6 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0)
r7 = userfaultfd(0x1)
ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1})
syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f0000000000)="1eb3bf65654102f4af4d221c8bd458d1e7cbdaf3657d0f34e790c85bdba7931791f6d15c3e681411f7a496c0dace6a3c242f5b016f64b4ef8a9cedaf6bec340dee49474360b24cb8", 0x0, 0x48)
readv(r7, &(0x7f00000001c0)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1)
ioctl$UFFDIO_WAKE(r7, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, 0x3000})

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.247' (ED25519) to the list of known hosts.
[   53.034943][ T4255] cgroup: Unknown subsys name 'net'
[   53.168664][ T4255] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   54.383047][ T4255] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k FS
[   55.871316][ T4271] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   55.880030][ T4271] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   55.894112][ T4279] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   55.902363][ T4279] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   55.910029][ T4279] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   55.918017][ T4279] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   55.921625][ T4281] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   55.926237][ T4279] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   55.933218][ T4281] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   55.939895][ T4279] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   55.946775][ T4281] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   55.955246][ T4279] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   55.961000][ T4281] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   55.968624][ T4279] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   55.982458][ T4279] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   55.982526][ T4281] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   55.989553][ T4279] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   56.004612][ T4282] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   56.005207][ T4279] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   56.012807][ T4283] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   56.025905][ T4281] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   56.026359][ T4283] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   56.033590][ T4281] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   56.040396][ T4283] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   56.047319][ T4281] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   56.055223][ T4283] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   56.061943][ T4281] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   56.068622][ T4283] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   56.084184][ T4283] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   56.091660][ T4283] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   56.488701][ T4277] chnl_net:caif_netlink_parms(): no params data found
[   56.651200][ T4266] chnl_net:caif_netlink_parms(): no params data found
[   56.665137][ T4275] chnl_net:caif_netlink_parms(): no params data found
[   56.674966][ T4277] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.682084][ T4277] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.690656][ T4277] device bridge_slave_0 entered promiscuous mode
[   56.702863][ T4277] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.710449][ T4277] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.718830][ T4277] device bridge_slave_1 entered promiscuous mode
[   56.739976][ T4265] chnl_net:caif_netlink_parms(): no params data found
[   56.787253][ T4273] chnl_net:caif_netlink_parms(): no params data found
[   56.809221][ T4277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.823279][ T4277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.874265][ T4277] team0: Port device team_slave_0 added
[   56.903048][ T4277] team0: Port device team_slave_1 added
[   56.935488][ T4275] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.942652][ T4275] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.950448][ T4275] device bridge_slave_0 entered promiscuous mode
[   56.967199][ T4266] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.974673][ T4266] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.982247][ T4266] device bridge_slave_0 entered promiscuous mode
[   56.995717][ T4275] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.002781][ T4275] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.010670][ T4275] device bridge_slave_1 entered promiscuous mode
[   57.018148][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.025440][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.051391][ T4277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.064346][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.071290][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.097319][ T4277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.116453][ T4266] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.123714][ T4266] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.131657][ T4266] device bridge_slave_1 entered promiscuous mode
[   57.203029][ T4275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.212774][ T4265] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.220647][ T4265] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.228524][ T4265] device bridge_slave_0 entered promiscuous mode
[   57.237951][ T4266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.247710][ T4273] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.255063][ T4273] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.262713][ T4273] device bridge_slave_0 entered promiscuous mode
[   57.272008][ T4275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.298667][ T4265] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.305950][ T4265] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.313955][ T4265] device bridge_slave_1 entered promiscuous mode
[   57.321995][ T4266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.331636][ T4273] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.339434][ T4273] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.347232][ T4273] device bridge_slave_1 entered promiscuous mode
[   57.363913][ T4275] team0: Port device team_slave_0 added
[   57.399932][ T4275] team0: Port device team_slave_1 added
[   57.429512][ T4277] device hsr_slave_0 entered promiscuous mode
[   57.437392][ T4277] device hsr_slave_1 entered promiscuous mode
[   57.455958][ T4265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.468956][ T4266] team0: Port device team_slave_0 added
[   57.476720][ T4273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.493230][ T4265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.511122][ T4266] team0: Port device team_slave_1 added
[   57.517784][ T4273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.534606][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.541573][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.572423][ T4275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.614673][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.621641][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.647736][ T4275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.660813][ T4265] team0: Port device team_slave_0 added
[   57.687734][ T4265] team0: Port device team_slave_1 added
[   57.696027][ T4273] team0: Port device team_slave_0 added
[   57.702395][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.709746][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.736057][ T4266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.749297][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.756433][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.782411][ T4266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.807916][ T4273] team0: Port device team_slave_1 added
[   57.838098][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.845503][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.871643][ T4265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.905897][ T4275] device hsr_slave_0 entered promiscuous mode
[   57.912565][ T4275] device hsr_slave_1 entered promiscuous mode
[   57.919365][ T4275] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   57.927417][ T4275] Cannot create hsr debugfs directory
[   57.942161][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.949179][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.975109][ T4265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   58.013078][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_0
[   58.020237][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   58.046582][ T4273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   58.072625][ T4266] device hsr_slave_0 entered promiscuous mode
[   58.079322][ T4266] device hsr_slave_1 entered promiscuous mode
[   58.086497][ T4266] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   58.094231][ T4266] Cannot create hsr debugfs directory
[   58.103863][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_1
[   58.110816][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   58.124612][ T4283] Bluetooth: hci0: command 0x0409 tx timeout
[   58.136996][ T4273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   58.203666][ T4283] Bluetooth: hci3: command 0x0409 tx timeout
[   58.209924][ T4283] Bluetooth: hci4: command 0x0409 tx timeout
[   58.216544][ T4278] Bluetooth: hci2: command 0x0409 tx timeout
[   58.222835][ T4279] Bluetooth: hci1: command 0x0409 tx timeout
[   58.231857][ T4265] device hsr_slave_0 entered promiscuous mode
[   58.238556][ T4265] device hsr_slave_1 entered promiscuous mode
[   58.246723][ T4265] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   58.254386][ T4265] Cannot create hsr debugfs directory
[   58.279067][ T4273] device hsr_slave_0 entered promiscuous mode
[   58.286626][ T4273] device hsr_slave_1 entered promiscuous mode
[   58.293062][ T4273] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   58.300737][ T4273] Cannot create hsr debugfs directory
[   58.486181][ T4277] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   58.496053][ T4277] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   58.529429][ T4277] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   58.541552][ T4277] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   58.642554][ T4275] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   58.665187][ T4275] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   58.680088][ T4275] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   58.690407][ T4275] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   58.714231][ T4266] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   58.724102][ T4266] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   58.748975][ T4266] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   58.772859][ T4266] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   58.799725][ T4277] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.819975][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   58.829387][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   58.850638][ T4277] 8021q: adding VLAN 0 to HW filter on device team0
[   58.875837][ T4273] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   58.889256][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   58.898074][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   58.907658][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.914942][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.925930][ T4273] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   58.936377][ T4273] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   58.958284][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   58.978718][ T4273] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   58.996327][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   59.009946][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   59.018523][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.025629][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.050622][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   59.100872][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   59.111126][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   59.123290][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   59.132152][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   59.151810][ T4265] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   59.163378][ T4265] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   59.173272][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   59.184354][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   59.192799][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   59.202017][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   59.217892][ T4266] 8021q: adding VLAN 0 to HW filter on device bond0
[   59.231154][ T4265] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   59.241088][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   59.250105][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   59.261588][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   59.272505][ T4275] 8021q: adding VLAN 0 to HW filter on device bond0
[   59.285081][ T4265] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   59.302328][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   59.310821][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   59.346052][ T4266] 8021q: adding VLAN 0 to HW filter on device team0
[   59.361425][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   59.369608][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   59.379449][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   59.389784][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   59.405215][ T4296] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.412325][ T4296] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.426886][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   59.462748][ T4275] 8021q: adding VLAN 0 to HW filter on device team0
[   59.492214][ T4273] 8021q: adding VLAN 0 to HW filter on device bond0
[   59.510988][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   59.521617][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   59.538549][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.545711][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.559808][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   59.569144][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   59.582944][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.590098][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.604030][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   59.612797][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   59.621680][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.628812][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.637586][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   59.646906][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   59.661340][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   59.670189][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   59.678727][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   59.715703][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   59.728969][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   59.739465][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   59.748318][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   59.758168][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   59.767394][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   59.776124][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   59.785357][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   59.793913][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   59.802245][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   59.811181][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   59.819368][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   59.848617][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   59.857382][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   59.866905][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   59.875760][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   59.883199][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   59.892406][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   59.900904][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   59.909851][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   59.918622][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   59.927464][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   59.939851][ T4277] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.950747][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   59.960222][ T4273] 8021q: adding VLAN 0 to HW filter on device team0
[   59.969636][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   60.006899][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   60.022111][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   60.031515][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.038683][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   60.095833][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   60.111454][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   60.120956][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   60.136973][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   60.148282][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   60.160625][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.167781][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   60.182438][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   60.192144][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   60.203577][ T4279] Bluetooth: hci0: command 0x041b tx timeout
[   60.206186][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   60.222651][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   60.231587][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   60.239698][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   60.251295][ T4277] device veth0_vlan entered promiscuous mode
[   60.271628][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   60.284644][ T4283] Bluetooth: hci1: command 0x041b tx timeout
[   60.285548][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   60.290671][ T4283] Bluetooth: hci4: command 0x041b tx timeout
[   60.303809][ T4279] Bluetooth: hci2: command 0x041b tx timeout
[   60.305141][ T4283] Bluetooth: hci3: command 0x041b tx timeout
[   60.333727][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   60.342558][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   60.351895][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   60.375100][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   60.394020][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   60.402473][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   60.430350][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   60.446874][ T4277] device veth1_vlan entered promiscuous mode
[   60.474090][ T4265] 8021q: adding VLAN 0 to HW filter on device bond0
[   60.482684][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   60.516384][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   60.532855][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   60.546699][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   60.578941][ T4265] 8021q: adding VLAN 0 to HW filter on device team0
[   60.592654][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   60.603113][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   60.616886][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   60.649100][ T4275] 8021q: adding VLAN 0 to HW filter on device batadv0
[   60.670580][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   60.678759][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   60.692679][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   60.702357][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   60.711275][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.718381][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   60.726787][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   60.735900][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   60.744487][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.751558][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   60.759423][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   60.774187][ T4266] 8021q: adding VLAN 0 to HW filter on device batadv0
[   60.807802][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   60.839865][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   60.859580][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   60.875256][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   60.900414][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   60.912503][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   60.921611][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   60.940968][ T4265] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   60.957808][ T4265] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   60.982876][ T4277] device veth0_macvtap entered promiscuous mode
[   60.998711][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   61.008381][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   61.018037][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   61.027106][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   61.041425][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   61.050762][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   61.062720][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   61.072492][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   61.086881][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   61.096944][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   61.126648][ T4277] device veth1_macvtap entered promiscuous mode
[   61.154382][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   61.175235][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   61.194924][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   61.203225][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   61.230929][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   61.262968][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   61.279854][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   61.290647][ T4275] device veth0_vlan entered promiscuous mode
[   61.322483][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0
[   61.342879][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0
[   61.352434][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   61.362051][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   61.377547][ T4275] device veth1_vlan entered promiscuous mode
[   61.399468][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1
[   61.411587][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   61.423274][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   61.433241][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   61.442681][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   61.452286][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   61.481076][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   61.504983][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   61.515235][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   61.529616][ T4277] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   61.539133][ T4277] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.549374][ T4277] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.559834][ T4277] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   61.578977][ T4266] device veth0_vlan entered promiscuous mode
[   61.611763][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   61.620414][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   61.629686][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   61.639406][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   61.656817][ T4266] device veth1_vlan entered promiscuous mode
[   61.675464][ T4273] device veth0_vlan entered promiscuous mode
[   61.688148][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   61.696372][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   61.705423][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   61.714029][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   61.721484][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   61.735058][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   61.742870][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   61.762081][ T4275] device veth0_macvtap entered promiscuous mode
[   61.785138][ T4265] 8021q: adding VLAN 0 to HW filter on device batadv0
[   61.792275][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   61.804777][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   61.821144][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   61.833161][ T4275] device veth1_macvtap entered promiscuous mode
[   61.848045][ T4273] device veth1_vlan entered promiscuous mode
[   61.878015][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   61.888540][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   61.897944][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   61.916448][ T4266] device veth0_macvtap entered promiscuous mode
[   61.940875][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   61.950700][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   61.959562][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   61.986628][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   61.997914][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   62.013119][ T4273] device veth0_macvtap entered promiscuous mode
[   62.021763][   T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.031969][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   62.044222][   T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.047790][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.063955][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0
[   62.071953][ T4266] device veth1_macvtap entered promiscuous mode
[   62.092918][ T4265] device veth0_vlan entered promiscuous mode
[   62.102226][ T4273] device veth1_macvtap entered promiscuous mode
[   62.113126][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   62.122062][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   62.130772][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   62.139160][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   62.147244][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   62.156406][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   62.165675][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   62.174044][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   62.182297][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   62.190326][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   62.201109][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   62.215362][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.226929][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1
[   62.265972][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   62.277551][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.288487][ T4283] Bluetooth: hci0: command 0x040f tx timeout
[   62.290572][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   62.308055][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.319571][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_0
[   62.328521][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   62.337157][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   62.347160][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   62.355917][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   62.364185][ T4278] Bluetooth: hci2: command 0x040f tx timeout
[   62.364218][ T4278] Bluetooth: hci4: command 0x040f tx timeout
[   62.364244][ T4278] Bluetooth: hci1: command 0x040f tx timeout
[   62.373976][ T4283] Bluetooth: hci3: command 0x040f tx timeout
[   62.386499][ T4275] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.397069][ T4275] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.406541][ T4275] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.415322][ T4275] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.425985][ T4265] device veth1_vlan entered promiscuous mode
[   62.434305][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   62.445805][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.455867][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   62.466602][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.477381][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   62.488042][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.499866][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0
[   62.512432][ T4296] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.513834][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   62.532537][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.542808][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   62.554186][ T4296] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.556839][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.573004][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_1
[   62.588041][ T4266] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.597168][ T4266] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.606957][ T4266] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.615842][ T4266] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.631767][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   62.640335][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   62.648774][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   62.657856][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   62.669234][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   62.681537][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   62.691404][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   62.723285][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   62.736082][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.747074][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   62.757553][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.769099][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   62.780246][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.792055][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1
[   62.802971][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   62.812828][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   62.826515][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   62.836138][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   62.857921][ T4265] device veth0_macvtap entered promiscuous mode
[   62.877617][ T4273] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.895664][ T4273] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.940222][ T4273] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.949313][ T4273] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.952123][ T4375] loop3: detected capacity change from 0 to 1024
[   62.996159][ T4265] device veth1_macvtap entered promiscuous mode
[   63.057290][ T4375] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   63.118154][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   63.144943][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.155782][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   63.167245][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.177480][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   63.190198][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.202578][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   63.216481][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.228699][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.234894][ T4277] EXT4-fs (loop3): unmounting filesystem.
[   63.261027][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.275863][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   63.301242][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   63.312479][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.338480][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   63.353374][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   63.368754][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   63.372122][ T4380] loop3: detected capacity change from 0 to 256
[   63.380431][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   63.388075][ T4380] exfat: Deprecated parameter 'namecase'
[   63.397992][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.409419][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   63.419388][ T4380] exfat: Bad value for 'allow_utime'
[   63.420164][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.440410][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   63.451123][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.461287][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   63.472950][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.506699][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.521754][   T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.530756][   T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.593052][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.607409][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.667102][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   63.679543][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   63.691235][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   63.701900][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   64.317489][ T4265] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.329647][ T4265] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.339622][ T4265] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.350059][ T4265] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.384009][ T4283] Bluetooth: hci0: command 0x0419 tx timeout
[   64.418002][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.426897][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.449705][ T4278] Bluetooth: hci3: command 0x0419 tx timeout
[   64.456943][ T4278] Bluetooth: hci1: command 0x0419 tx timeout
[   64.463317][ T4278] Bluetooth: hci4: command 0x0419 tx timeout
[   64.469424][ T4283] Bluetooth: hci2: command 0x0419 tx timeout
[   64.482946][ T4384] loop3: detected capacity change from 0 to 512
[   64.500701][ T4384] EXT4-fs: inline encryption not supported
[   64.501169][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.530703][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.564493][ T4384] EXT4-fs: Ignoring removed mblk_io_submit option
[   64.605995][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   64.634302][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   64.648710][   T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.698644][   T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.910343][ T4392] loop0: detected capacity change from 0 to 256
[   65.229554][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   65.266719][ T4384] EXT4-fs (loop3): Test dummy encryption mode enabled
[   65.811396][ T4396] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.831546][ T4384] EXT4-fs (loop3): orphan cleanup on readonly fs
[   65.923939][ T4396] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.933277][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   65.943682][ T4384] EXT4-fs error (device loop3): ext4_orphan_get:1400: comm syz.3.7: inode #13: comm syz.3.7: iget: illegal inode #
[   66.055377][ T4384] EXT4-fs (loop3): Remounting filesystem read-only
[   66.097240][ T4296] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.137500][ T4296] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.172416][ T4384] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.7: couldn't read orphan inode 13 (err -117)
[   66.230096][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   66.277225][ T4384] EXT4-fs (loop3): Remounting filesystem read-only
[   66.310447][ T4384] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   66.453441][    C1] sched: RT throttling activated
[   68.111937][ T4418] EXT4-fs error (device loop3): ext4_resize_begin:62: comm syz.3.7: resize_inode disabled but reserved GDT blocks non-zero
[   68.748606][ T4423] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8'.
[   68.814434][ T4423] block device autoloading is deprecated and will be removed.
[   69.278578][ T4277] EXT4-fs (loop3): unmounting filesystem.
[   74.113262][ T4446] loop3: detected capacity change from 0 to 512
[   74.150650][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[   74.166174][ T1276] ieee802154 phy1 wpan1: encryption failed: -22
[   75.473071][ T4446] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   75.487165][ T4446] EXT4-fs warning (device loop3): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop3.
[   76.087983][ T4462] input: syz1 as /devices/virtual/input/input6
[   76.594798][   T32] cfg80211: failed to load regulatory.db
[   77.297655][ T4473] loop1: detected capacity change from 0 to 512
[   77.468905][ T4476] loop2: detected capacity change from 0 to 256
[   77.482438][ T4476] =======================================================
[   77.482438][ T4476] WARNING: The mand mount option has been deprecated and
[   77.482438][ T4476]          and is ignored by this kernel. Remove the mand
[   77.482438][ T4476]          option from the mount to silence this warning.
[   77.482438][ T4476] =======================================================
[   77.570743][ T4476] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   77.581679][ T4476] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[   77.697010][ T4476] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[   78.649816][ T4473] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   78.703795][ T4473] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   79.911008][ T4265] EXT4-fs (loop1): unmounting filesystem.
[   80.855153][ T4495] loop0: detected capacity change from 0 to 512
[   81.564443][ T4495] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   82.251400][ T4510] netlink: 8 bytes leftover after parsing attributes in process `syz.4.28'.
[   82.465356][ T4514] overlayfs: failed to resolve './bus': -2
[   83.083143][ T4275] EXT4-fs (loop0): unmounting filesystem.
[   83.808396][ T4524] loop2: detected capacity change from 0 to 512
[   83.832058][ T4524] EXT4-fs: Ignoring removed nobh option
[   84.225193][ T4526] loop0: detected capacity change from 0 to 256
[   84.314603][ T4524] EXT4-fs (loop2): Test dummy encryption mode enabled
[   84.400716][ T4526] FAT-fs (loop0): Directory bread(block 64) failed
[   84.407782][ T4526] FAT-fs (loop0): Directory bread(block 65) failed
[   84.414923][ T4526] FAT-fs (loop0): Directory bread(block 66) failed
[   84.421568][ T4526] FAT-fs (loop0): Directory bread(block 67) failed
[   84.428671][ T4526] FAT-fs (loop0): Directory bread(block 68) failed
[   84.435460][ T4526] FAT-fs (loop0): Directory bread(block 69) failed
[   84.442510][ T4526] FAT-fs (loop0): Directory bread(block 70) failed
[   84.449232][ T4526] FAT-fs (loop0): Directory bread(block 71) failed
[   84.456386][ T4526] FAT-fs (loop0): Directory bread(block 72) failed
[   84.463032][ T4526] FAT-fs (loop0): Directory bread(block 73) failed
[   84.596150][ T4526] syz.0.31: attempt to access beyond end of device
[   84.596150][ T4526] loop0: rw=524288, sector=1160, nr_sectors = 4 limit=256
[   84.611500][ T4526] syz.0.31: attempt to access beyond end of device
[   84.611500][ T4526] loop0: rw=0, sector=1160, nr_sectors = 4 limit=256
[   84.639382][   T26] audit: type=1800 audit(1753284089.693:2): pid=4526 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.31" name="file1" dev="loop0" ino=1048596 res=0 errno=0
[   84.851536][ T4524] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[   84.860537][ T4524] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.29: invalid indirect mapped block 2683928664 (level 1)
[   84.878247][ T4524] EXT4-fs (loop2): 1 truncate cleaned up
[   84.884757][ T4524] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   85.829114][ T4505] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:477: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0
[   85.882972][ T4273] EXT4-fs (loop2): unmounting filesystem.
[   86.309122][ T4544] loop2: detected capacity change from 0 to 2048
[   86.388425][ T4544] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   86.509458][ T4552] vivid-002: =================  START STATUS  =================
[   86.517683][ T4552] vivid-002: Radio HW Seek Mode: Bounded
[   86.524549][ T4552] vivid-002: Radio Programmable HW Seek: false
[   86.531065][ T4552] vivid-002: RDS Rx I/O Mode: Block I/O
[   86.537346][ T4552] vivid-002: Generate RBDS Instead of RDS: false
[   86.544113][ T4552] vivid-002: RDS Reception: true
[   86.549333][ T4552] vivid-002: RDS Program Type: 0 inactive
[   86.555355][ T4552] vivid-002: RDS PS Name:  inactive
[   86.581349][ T4552] vivid-002: RDS Radio Text:  inactive
[   86.587212][ T4552] vivid-002: RDS Traffic Announcement: false inactive
[   86.594298][ T4552] vivid-002: RDS Traffic Program: false inactive
[   86.600978][ T4552] vivid-002: RDS Music: false inactive
[   86.607176][ T4552] vivid-002: ==================  END STATUS  ==================
[   87.033786][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[   87.069795][ T4273] EXT4-fs (loop2): unmounting filesystem.
[   87.076446][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   87.084990][    T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!!
[   87.093528][    T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!!
[   87.102022][    T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!!
[   87.110945][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   87.119432][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   87.127881][    T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!!
[   87.137119][    T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!!
[   87.145574][    T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!!
[   87.725865][ T4543] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   88.585024][ T4572] loop1: detected capacity change from 0 to 512
[   88.692025][ T4573] binder: 4542:4573 ioctl 4018620d 0 returned -22
[   88.717958][ T4573] binder: 4542:4573 ioctl c018620c 200000000380 returned -1
[   88.736275][ T4572] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   88.815633][ T4572] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   88.924489][ T4572] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0
[   88.953600][ T4572] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0
[   88.980608][ T4572] EXT4-fs error (device loop1): ext4_acquire_dquot:6814: comm syz.1.42: Failed to acquire dquot type 1
[   88.988161][ T4580] loop4: detected capacity change from 0 to 512
[   89.017246][ T4580] EXT4-fs: Ignoring removed mblk_io_submit option
[   89.033010][ T4580] EXT4-fs: Ignoring removed bh option
[   89.063717][ T4580] EXT4-fs: quotafile must be on filesystem root
[   89.115540][ T4265] EXT4-fs (loop1): unmounting filesystem.
[   89.373063][ T4585] loop4: detected capacity change from 0 to 512
[   89.456707][ T4585] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   89.466095][ T4585] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   89.673935][ T4278] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260
[   89.881831][ T4599] loop0: detected capacity change from 0 to 512
[   89.939437][ T4599] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   90.162807][ T4599] EXT4-fs (loop0): orphan cleanup on readonly fs
[   90.195275][ T4599] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.48: bg 0: block 248: padding at end of block bitmap is not set
[   90.225111][ T4599] Quota error (device loop0): write_blk: dquota write failed
[   90.233303][ T4599] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[   90.243662][ T4599] EXT4-fs error (device loop0): ext4_acquire_dquot:6814: comm syz.0.48: Failed to acquire dquot type 1
[   90.283120][ T4599] EXT4-fs (loop0): 1 truncate cleaned up
[   90.299310][ T4599] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   90.802960][ T4597] x_tables: duplicate underflow at hook 4
[   91.306193][ T4266] EXT4-fs (loop4): unmounting filesystem.
[   93.474240][ T4609] syz.4.51[4609] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   93.474341][ T4609] syz.4.51[4609] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   93.792173][ T4609] loop4: detected capacity change from 0 to 1024
[   93.810517][ T4609] EXT4-fs: Ignoring removed orlov option
[   94.545200][ T4275] EXT4-fs (loop0): unmounting filesystem.
[   94.647882][ T4609] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   95.830784][ T4615] loop3: detected capacity change from 0 to 512
[   95.857502][ T4266] EXT4-fs (loop4): unmounting filesystem.
[   95.884818][ T4615] EXT4-fs: Ignoring removed mblk_io_submit option
[   95.897094][ T4620] loop1: detected capacity change from 0 to 256
[   95.914658][ T4620] exfat: Deprecated parameter 'namecase'
[   95.927775][ T4615] EXT4-fs: Ignoring removed bh option
[   95.939792][ T4620] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d)
[   95.957918][ T4615] EXT4-fs (loop3): Test dummy encryption mode enabled
[   96.084084][ T4615] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   96.550519][ T4615] EXT4-fs (loop3): 1 truncate cleaned up
[   96.620190][ T4627] KVM: debugfs: duplicate directory 4627-5
[   96.627340][ T4615] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   96.846977][ T4277] EXT4-fs (loop3): unmounting filesystem.
[   96.987393][ T4639] fuse: Invalid rootmode
[   96.995420][ T4639] Process accounting resumed
[   97.064448][ T4642] loop4: detected capacity change from 0 to 512
[   97.116348][ T4642] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   97.188764][ T4647] netlink: 8 bytes leftover after parsing attributes in process `syz.2.62'.
[   98.303768][ T4665] loop1: detected capacity change from 0 to 512
[   98.509578][ T4665] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   98.671671][ T4665] EXT4-fs (loop1): 1 truncate cleaned up
[   98.688853][ T4665] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   98.831967][ T4266] EXT4-fs (loop4): unmounting filesystem.
[   99.955219][ T4688] fuse: Bad value for 'rootmode'
[   99.965295][ T4688] Process accounting resumed
[  100.401370][ T4701] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  100.410235][ T4701] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  101.329788][ T4278] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260
[  101.362124][ T4385] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  101.458739][ T4385] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  101.899703][ T4714] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  101.908258][ T4714] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  101.955881][ T4714] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  102.794208][ T4703] loop3: detected capacity change from 0 to 32768
[  105.631031][ T4265] EXT4-fs (loop1): unmounting filesystem.
[  105.783826][   T26] audit: type=1326 audit(1753284110.843:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4728 comm="syz.1.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dfe78e9a9 code=0x7ffc0000
[  105.842649][ T4318] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  105.850658][   T26] audit: type=1326 audit(1753284110.873:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4728 comm="syz.1.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dfe78e9a9 code=0x7ffc0000
[  105.850691][   T26] audit: type=1326 audit(1753284110.873:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4728 comm="syz.1.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f4dfe78e9a9 code=0x7ffc0000
[  105.850718][   T26] audit: type=1326 audit(1753284110.873:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4728 comm="syz.1.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dfe78e9a9 code=0x7ffc0000
[  105.850745][   T26] audit: type=1326 audit(1753284110.873:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4728 comm="syz.1.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dfe78e9a9 code=0x7ffc0000
[  106.001192][ T4736] loop3: detected capacity change from 0 to 128
[  106.056077][ T4736] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  106.095194][ T4736] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  106.163548][ T4318] usb 1-1: Using ep0 maxpacket: 16
[  106.176060][ T4736] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00000400)
[  106.207149][ T4318] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  106.233967][ T4318] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  106.323852][ T4736] FAT-fs (loop3): Filesystem has been set read-only
[  106.689536][ T4318] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  106.769187][ T4318] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  106.780356][ T4318] usb 1-1: Product: syz
[  106.790243][ T4318] usb 1-1: Manufacturer: syz
[  106.795374][ T4318] usb 1-1: SerialNumber: syz
[  106.943177][ T4554] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  106.966158][ T4554] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  107.033857][ T4318] usb 1-1: 0:2 : does not exist
[  107.141184][ T4318] usb 1-1: USB disconnect, device number 2
[  107.409110][ T4259] udevd[4259]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  108.168744][ T4765] loop3: detected capacity change from 0 to 512
[  108.208679][ T4765] EXT4-fs: Ignoring removed mblk_io_submit option
[  108.254735][ T4765] EXT4-fs: Ignoring removed bh option
[  108.260197][ T4765] EXT4-fs: quotafile must be on filesystem root
[  108.272087][ T4762] loop0: detected capacity change from 0 to 32768
[  108.358457][ T4767] loop4: detected capacity change from 0 to 40427
[  108.398371][ T4767] F2FS-fs (loop4): invalid crc value
[  108.646995][ T4767] F2FS-fs (loop4): Found nat_bits in checkpoint
[  108.690445][ T4767] F2FS-fs (loop4): Start checkpoint disabled!
[  108.796527][ T4767] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  109.624707][ T4455] kworker/u4:13: attempt to access beyond end of device
[  109.624707][ T4455] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  111.591506][ T4797] loop1: detected capacity change from 0 to 2048
[  111.731986][ T4796] xt_CT: No such helper "netbios-ns"
[  113.590641][ T4797] EXT4-fs warning (device loop1): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop1.
[  114.231640][ T4807] loop0: detected capacity change from 0 to 512
[  114.241517][ T4807] EXT4-fs: Ignoring removed mblk_io_submit option
[  114.307787][ T4818] netlink: 4 bytes leftover after parsing attributes in process `syz.3.113'.
[  114.319780][ T4818] netlink: 4 bytes leftover after parsing attributes in process `syz.3.113'.
[  114.329088][ T4818] Zero length message leads to an empty skb
[  114.363356][ T4818] loop3: detected capacity change from 0 to 512
[  114.394266][ T4818] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  114.437444][ T4807] EXT4-fs: Ignoring removed bh option
[  114.476824][ T4818] EXT4-fs (loop3): orphan cleanup on readonly fs
[  114.503289][ T4818] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.113: bg 0: block 248: padding at end of block bitmap is not set
[  114.519501][ T4818] Quota error (device loop3): write_blk: dquota write failed
[  114.527698][ T4818] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  114.537821][ T4818] EXT4-fs error (device loop3): ext4_acquire_dquot:6814: comm syz.3.113: Failed to acquire dquot type 1
[  114.557047][ T4818] EXT4-fs (loop3): 1 truncate cleaned up
[  114.577646][ T4807] EXT4-fs: quotafile must be on filesystem root
[  114.680502][ T4818] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  116.980830][ T4833] loop2: detected capacity change from 0 to 128
[  117.030191][ T4833] EXT4-fs: Ignoring removed nobh option
[  117.091961][ T4814] loop1: detected capacity change from 0 to 32768
[  117.107245][ T4833] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  117.155342][ T4833] ext4 filesystem being mounted at /20/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  117.156730][ T4277] EXT4-fs (loop3): unmounting filesystem.
[  117.192949][ T4833] EXT4-fs error (device loop2): __ext4_find_entry:1696: inode #2: comm syz.2.120: checksumming directory block 0
[  117.311138][ T4273] EXT4-fs (loop2): unmounting filesystem.
[  117.449578][ T4841] loop4: detected capacity change from 0 to 512
[  117.474656][ T4841] EXT4-fs: Ignoring removed mblk_io_submit option
[  117.596015][ T4841] EXT4-fs: Ignoring removed bh option
[  117.601556][ T4841] EXT4-fs: quotafile must be on filesystem root
[  117.703917][ T4849] loop3: detected capacity change from 0 to 256
[  120.442749][ T4849] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  120.516230][ T4855] loop0: detected capacity change from 0 to 256
[  120.594740][ T4856] loop2: detected capacity change from 0 to 512
[  120.601895][ T4856] EXT4-fs: Ignoring removed mblk_io_submit option
[  120.608990][ T4855] exfat: Deprecated parameter 'namecase'
[  120.616383][ T4856] EXT4-fs: Ignoring removed bh option
[  120.636041][ T4855] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36bd6320, utbl_chksum : 0xe619d30d)
[  120.692091][ T4856] EXT4-fs: quotafile must be on filesystem root
[  122.523723][ T4875] loop4: detected capacity change from 0 to 32768
[  123.240337][ T4884] read_mapping_page failed!
[  123.321717][ T4884] ialloc: diAlloc returned -5!
[  123.595647][   T26] audit: type=1800 audit(1753284128.573:8): pid=4883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.134" name="bus" dev="loop4" ino=7 res=0 errno=0
[  123.735670][ T4887] loop2: detected capacity change from 0 to 512
[  123.778759][ T4893] loop4: detected capacity change from 0 to 512
[  123.811978][ T4893] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  123.862990][ T4887] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  123.884227][ T4887] EXT4-fs (loop2): orphan cleanup on readonly fs
[  123.923360][ T4887] EXT4-fs (loop2): 1 orphan inode deleted
[  123.943911][ T4452] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  123.955399][ T4452] EXT4-fs error (device loop2): ext4_release_dquot:6850: comm kworker/u4:10: Failed to release dquot type 1
[  123.977081][ T4887] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  124.651499][ T4899] overlayfs: failed to resolve './bus': -2
[  125.284644][ T4266] EXT4-fs (loop4): unmounting filesystem.
[  125.408781][ T4273] EXT4-fs (loop2): unmounting filesystem.
[  125.936530][ T4912] loop4: detected capacity change from 0 to 512
[  126.029378][ T4913] tipc: Started in network mode
[  126.043863][ T4913] tipc: Node identity faaacd3b6a24, cluster identity 4711
[  126.061143][ T4913] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  126.063075][ T4912] kernel profiling enabled (shift: 9)
[  126.086227][ T4913] device syzkaller0 entered promiscuous mode
[  126.242168][ T4913] tipc: Resetting bearer <eth:syzkaller0>
[  126.426304][ T4907] tipc: Resetting bearer <eth:syzkaller0>
[  126.497940][ T4932] loop2: detected capacity change from 0 to 1024
[  126.505231][ T4932] EXT4-fs: Ignoring removed nomblk_io_submit option
[  126.531476][ T4932] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  126.775937][ T4907] tipc: Disabling bearer <eth:syzkaller0>
[  127.323250][ T4273] EXT4-fs (loop2): unmounting filesystem.
[  127.495174][ T4943] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  127.511339][ T4941] loop2: detected capacity change from 0 to 16
[  127.555575][ T4945] loop0: detected capacity change from 0 to 512
[  127.556238][ T4941] erofs: (device loop2): mounted with root inode @ nid 36.
[  127.655399][ T4945] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  127.721910][ T4943] UDF-fs: error (device loop0): udf_read_inode: (ino 19) failed ident=264
[  128.040500][ T4931] loop1: detected capacity change from 0 to 32768
[  128.671898][ T4958] overlayfs: filesystem on './file1' not supported
[  128.997212][ T4962] loop0: detected capacity change from 0 to 256
[  129.050267][ T4962] FAT-fs (loop0): Unrecognized mount option "nnonumtail=1" or missing value
[  129.585842][ T4972] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  129.671771][ T4972] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  131.442690][   T46] Bluetooth: hci5: Frame reassembly failed (-84)
[  131.921157][ T4987] loop2: detected capacity change from 0 to 512
[  131.928236][ T4987] EXT4-fs: Ignoring removed bh option
[  133.324162][ T4278] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  134.484056][ T4987] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  134.494752][ T4987] EXT4-fs: failed to create workqueue
[  134.500158][ T4987] EXT4-fs (loop2): mount failed
[  136.540113][ T5005] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  136.609822][ T5007] loop3: detected capacity change from 0 to 512
[  136.669926][ T5007] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  136.757174][ T5005] UDF-fs: error (device loop3): udf_read_inode: (ino 19) failed ident=264
[  137.382689][ T5016] loop0: detected capacity change from 0 to 512
[  137.511190][ T5016] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  137.583689][ T5016] ext4 filesystem being mounted at /42/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  137.742189][ T5010] loop1: detected capacity change from 0 to 32768
[  137.806266][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[  137.812699][ T1276] ieee802154 phy1 wpan1: encryption failed: -22
[  138.347126][ T5026] overlayfs: filesystem on './file1' not supported
[  138.401283][   T26] audit: type=1800 audit(1753284143.463:9): pid=5027 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.167" name="bus" dev="loop1" ino=65 res=0 errno=0
[  139.595442][ T4275] EXT4-fs (loop0): unmounting filesystem.
[  139.801705][ T5040] loop7: detected capacity change from 0 to 7
[  139.829183][ T4259] Dev loop7: unable to read RDB block 7
[  139.835441][ T4259]  loop7: unable to read partition table
[  139.852886][ T4259] loop7: partition table beyond EOD, truncated
[  139.934243][ T5040] Dev loop7: unable to read RDB block 7
[  139.940011][ T5040]  loop7: unable to read partition table
[  139.960857][ T5040] loop7: partition table beyond EOD, truncated
[  140.083318][ T5043] loop0: detected capacity change from 0 to 512
[  140.098636][ T5040] loop_reread_partitions: partition scan of loop7 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[  140.512580][ T5043] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  140.522381][ T5043] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  141.283242][ T5055] binder: 5049:5055 ioctl 4018620d 0 returned -22
[  141.291239][ T5055] binder: 5049:5055 ioctl c018620c 200000000380 returned -1
[  141.885016][ T5057] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  142.221502][ T5060] loop3: detected capacity change from 0 to 512
[  142.228400][ T5060] EXT4-fs: Ignoring removed nomblk_io_submit option
[  143.037567][ T5060] EXT4-fs (loop3): Test dummy encryption mode enabled
[  143.037673][ T5060] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  143.146338][ T5060] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  143.148211][ T5060] EXT4-fs (loop3): 1 truncate cleaned up
[  143.148297][ T5060] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  143.441915][ T5059] loop4: detected capacity change from 0 to 512
[  143.544883][ T5060] fscrypt (loop3): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))")
[  143.545944][ T4275] EXT4-fs (loop0): unmounting filesystem.
[  143.651797][ T5059] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  143.722096][ T5059] UDF-fs: error (device loop4): udf_read_inode: (ino 19) failed ident=264
[  143.737136][ T5071] loop1: detected capacity change from 0 to 256
[  144.357354][ T4277] EXT4-fs (loop3): unmounting filesystem.
[  144.591171][ T5081] loop0: detected capacity change from 0 to 128
[  144.598267][ T5081] EXT4-fs: Ignoring removed nomblk_io_submit option
[  144.604958][ T5081] EXT4-fs: Ignoring removed nomblk_io_submit option
[  144.684752][ T5081] EXT4-fs (loop0): Test dummy encryption mode enabled
[  146.409351][ T5081] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  146.418545][ T5081] ext4 filesystem being mounted at /44/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  147.138645][ T4275] EXT4-fs (loop0): unmounting filesystem.
[  147.262066][ T5091] loop4: detected capacity change from 0 to 512
[  147.441258][ T5091] EXT4-fs error (device loop4): ext4_do_update_inode:5254: inode #3: comm syz.4.184: corrupted inode contents
[  147.459899][ T5091] EXT4-fs error (device loop4): ext4_dirty_inode:6119: inode #3: comm syz.4.184: mark_inode_dirty error
[  147.485144][ T5091] EXT4-fs error (device loop4): ext4_do_update_inode:5254: inode #3: comm syz.4.184: corrupted inode contents
[  147.584747][ T5091] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #3: comm syz.4.184: mark_inode_dirty error
[  147.610241][ T5091] Quota error (device loop4): write_blk: dquota write failed
[  147.630635][ T5091] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  147.658685][ T5091] EXT4-fs error (device loop4): ext4_acquire_dquot:6814: comm syz.4.184: Failed to acquire dquot type 0
[  147.707234][ T5091] EXT4-fs (loop4): 1 orphan inode deleted
[  147.736593][ T4452] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  147.756798][ T5091] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  147.769692][ T4452] EXT4-fs error (device loop4): ext4_release_dquot:6850: comm kworker/u4:10: Failed to release dquot type 1
[  147.812849][ T5091] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  148.464112][ T4266] EXT4-fs (loop4): unmounting filesystem.
[  148.807878][ T5107] device pim6reg1 entered promiscuous mode
[  149.583678][ T5116] input: syz1 as /devices/virtual/input/input7
[  150.571376][ T5120] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  150.605313][ T5120] loop4: detected capacity change from 0 to 512
[  150.645349][ T5120] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  150.729602][ T5124] loop2: detected capacity change from 0 to 512
[  150.755128][ T5124] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  150.827580][ T5124] EXT4-fs (loop2): orphan cleanup on readonly fs
[  150.842726][ T5124] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.193: bg 0: block 248: padding at end of block bitmap is not set
[  150.864554][ T5124] Quota error (device loop2): write_blk: dquota write failed
[  150.872214][ T5124] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  150.882369][ T5124] EXT4-fs error (device loop2): ext4_acquire_dquot:6814: comm syz.2.193: Failed to acquire dquot type 1
[  150.907494][ T5124] EXT4-fs (loop2): 1 truncate cleaned up
[  150.917615][ T5124] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  151.102167][ T5120] UDF-fs: error (device loop4): udf_read_inode: (ino 19) failed ident=264
[  152.334849][ T4273] EXT4-fs (loop2): unmounting filesystem.
[  152.714175][ T4554] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  152.755022][ T4554] hid-generic 0000:0000:0000.0003: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  153.023833][ T5141] loop4: detected capacity change from 0 to 512
[  153.144808][ T5141] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  153.316557][ T5118] loop3: detected capacity change from 0 to 40427
[  153.323473][ T5141] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  153.562409][ T5141] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2195: inode #15: comm syz.4.199: corrupted in-inode xattr
[  153.579736][ T5141] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.199: couldn't read orphan inode 15 (err -117)
[  153.623905][ T5141] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  153.741695][ T5150] overlayfs: missing 'lowerdir'
[  154.002963][ T5154] device syzkaller0 entered promiscuous mode
[  155.511889][ T5170] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  156.296380][ T5172] loop1: detected capacity change from 0 to 512
[  156.335402][ T5172] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  156.396422][ T5170] UDF-fs: error (device loop1): udf_read_inode: (ino 19) failed ident=264
[  157.649939][ T4266] EXT4-fs (loop4): unmounting filesystem.
[  158.098784][ T5190] input: syz1 as /devices/virtual/input/input8
[  158.793256][ T5192] fuse: Unknown parameter 'user_id00000000000000000000'
[  158.822480][ T5192] Process accounting resumed
[  159.121960][  T125] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  159.172755][  T125] hid-generic 0000:0000:0000.0004: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  159.274190][ T5203] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  160.973925][ T4554] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  161.073776][ T4554] hid-generic 0000:0000:0000.0005: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  162.115747][ T5239] fuse: Bad value for 'fd'
[  162.121643][ T5239] Process accounting resumed
[  162.331958][ T5245] input: syz1 as /devices/virtual/input/input9
[  162.499928][ T4278] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260
[  167.342037][ T5278] fuse: Bad value for 'fd'
[  167.392199][ T5278] Process accounting resumed
[  167.499593][  T125] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  167.687212][ T5291] input: syz1 as /devices/virtual/input/input10
[  168.606581][ T4278] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260
[  169.077074][  T125] hid-generic 0000:0000:0000.0006: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  170.702793][ T5313] vivid-002: =================  START STATUS  =================
[  170.818603][ T5313] vivid-002: Radio HW Seek Mode: Bounded
[  170.824643][ T5313] vivid-002: Radio Programmable HW Seek: false
[  170.830968][ T5313] vivid-002: RDS Rx I/O Mode: Block I/O
[  170.836747][ T5313] vivid-002: Generate RBDS Instead of RDS: false
[  170.843242][ T5313] vivid-002: RDS Reception: true
[  170.848457][ T5313] vivid-002: RDS Program Type: 0 inactive
[  170.854358][ T5313] vivid-002: RDS PS Name:  inactive
[  170.859723][ T5313] vivid-002: RDS Radio Text:  inactive
[  170.865414][ T5313] vivid-002: RDS Traffic Announcement: false inactive
[  170.886406][ T5313] vivid-002: RDS Traffic Program: false inactive
[  170.893019][ T5313] vivid-002: RDS Music: false inactive
[  170.898908][ T5313] vivid-002: ==================  END STATUS  ==================
[  172.031623][ T5315] fido_id[5315]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  172.370021][ T5332] loop2: detected capacity change from 0 to 512
[  172.379468][ T5332] EXT4-fs: Ignoring removed bh option
[  172.388760][ T5332] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  172.498832][ T5332] EXT4-fs (loop2): orphan cleanup on readonly fs
[  172.510779][ T5332] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.252: bg 0: block 248: padding at end of block bitmap is not set
[  172.528471][ T5332] Quota error (device loop2): write_blk: dquota write failed
[  172.536261][ T5332] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  172.547073][ T5332] EXT4-fs error (device loop2): ext4_acquire_dquot:6814: comm syz.2.252: Failed to acquire dquot type 1
[  172.575440][ T5332] EXT4-fs (loop2): 1 truncate cleaned up
[  172.590492][ T5332] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  174.331143][ T5347] device pim6reg1 entered promiscuous mode
[  174.620657][ T4273] EXT4-fs (loop2): unmounting filesystem.
[  174.885311][ T5345] loop3: detected capacity change from 0 to 32768
[  176.338871][ T5357] overlayfs: filesystem on './file1' not supported
[  176.353125][   T26] audit: type=1800 audit(1753284181.413:10): pid=5357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.254" name="bus" dev="loop3" ino=65 res=0 errno=0
[  177.478196][    T7] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  177.643831][    T7] hid-generic 0000:0000:0000.0007: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  178.751700][ T5379] xt_hashlimit: max too large, truncated to 1048576
[  178.760146][ T5379] No such timeout policy "syz1"
[  180.681967][ T5381] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  180.723346][ T5381] tipc: Resetting bearer <eth:syzkaller0>
[  180.794284][ T5380] tipc: Disabling bearer <eth:syzkaller0>
[  180.843495][ T4279] Bluetooth: hci1: command 0x0406 tx timeout
[  180.843764][ T4278] Bluetooth: hci0: command 0x0406 tx timeout
[  180.849560][ T4279] Bluetooth: hci2: command 0x0406 tx timeout
[  180.855654][ T4283] Bluetooth: hci4: command 0x0406 tx timeout
[  180.861534][ T4279] Bluetooth: hci3: command 0x0406 tx timeout
[  182.456139][   T32] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  182.577060][   T32] hid-generic 0000:0000:0000.0008: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  182.846711][ T5460] loop0: detected capacity change from 0 to 512
[  183.173244][ T5460] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  183.361734][ T5460] EXT4-fs (loop0): 1 truncate cleaned up
[  183.414509][ T5460] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  183.835257][ T4275] EXT4-fs (loop0): unmounting filesystem.
[  186.503353][ T5487] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  186.515011][ T5487] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  187.149414][ T5496] tipc: Started in network mode
[  187.177742][ T5495] loop4: detected capacity change from 0 to 512
[  187.183862][ T5496] tipc: Node identity 563c18c26d6b, cluster identity 4711
[  187.246552][ T5496] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  187.358181][ T5496] tipc: Resetting bearer <eth:syzkaller0>
[  187.368340][ T5495] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  187.384657][ T5495] ext4 filesystem being mounted at /52/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  187.666353][ T5489] tipc: Disabling bearer <eth:syzkaller0>
[  187.940414][ T5504] device veth1_macvtap left promiscuous mode
[  187.957261][ T5504] device macsec0 entered promiscuous mode
[  188.010257][   T26] audit: type=1800 audit(1753284193.073:11): pid=5495 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.278" name="file1" dev="loop4" ino=15 res=0 errno=0
[  188.436136][ T5516] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  189.143193][ T5522] loop2: detected capacity change from 0 to 512
[  189.499248][ T5522] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  189.534352][ T4266] EXT4-fs (loop4): unmounting filesystem.
[  189.607013][ T5516] UDF-fs: error (device loop2): udf_read_inode: (ino 19) failed ident=264
[  189.837335][ T4333] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  189.953162][ T4333] hid-generic 0000:0000:0000.0009: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  190.042562][ T5537] binder: 5513:5537 ioctl 4018620d 0 returned -22
[  190.133003][ T5537] binder: 5513:5537 ioctl c018620c 200000000380 returned -1
[  191.611236][ T5557] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[  193.903015][ T5572] loop0: detected capacity change from 0 to 512
[  194.037917][ T5572] EXT4-fs: Ignoring removed i_version option
[  194.164575][ T5572] EXT4-fs (loop0): orphan cleanup on readonly fs
[  194.316231][ T5572] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.297: bg 0: block 131: padding at end of block bitmap is not set
[  194.389759][ T5580] loop1: detected capacity change from 0 to 512
[  195.495240][ T5572] EXT4-fs (loop0): Remounting filesystem read-only
[  195.701833][ T5580] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  195.751898][ T5580] EXT4-fs (loop1): orphan cleanup on readonly fs
[  195.771395][ T5580] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.300: bg 0: block 248: padding at end of block bitmap is not set
[  195.801304][ T5580] Quota error (device loop1): write_blk: dquota write failed
[  195.809129][ T5580] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  195.819239][ T5580] EXT4-fs error (device loop1): ext4_acquire_dquot:6814: comm syz.1.300: Failed to acquire dquot type 1
[  195.845093][ T5580] EXT4-fs (loop1): 1 truncate cleaned up
[  195.857412][ T5580] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  196.002942][ T5572] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6170: Corrupt filesystem
[  196.382467][ T5580] syz.1.300 (5580) used greatest stack depth: 20864 bytes left
[  196.420627][ T5572] EXT4-fs (loop0): Remounting filesystem read-only
[  196.493705][ T5572] EXT4-fs (loop0): 1 truncate cleaned up
[  196.589343][ T5572] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  197.486027][ T5572] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2195: inode #15: comm syz.0.297: corrupted in-inode xattr
[  197.822942][ T4265] EXT4-fs (loop1): unmounting filesystem.
[  197.834046][ T4275] EXT4-fs (loop0): unmounting filesystem.
[  199.319410][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[  199.329675][ T1276] ieee802154 phy1 wpan1: encryption failed: -22
[  199.565847][ T4319] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  199.584881][ T4319] hid-generic 0000:0000:0000.000A: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  199.955862][ T5614] fido_id[5614]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  201.188974][ T5633] loop2: detected capacity change from 0 to 512
[  203.810118][ T5633] EXT4-fs warning (device loop2): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop2.
[  204.068836][ T5638] netlink: 68 bytes leftover after parsing attributes in process `syz.3.312'.
[  204.211307][ T5642] loop2: detected capacity change from 0 to 256
[  205.209920][ T5640] loop0: detected capacity change from 0 to 2048
[  205.439834][ T5640] EXT4-fs: inline encryption not supported
[  205.459148][ T5640] EXT4-fs: Ignoring removed mblk_io_submit option
[  205.479389][ T5640] ext4: Unknown parameter 'audit'
[  205.700153][ T5647] loop4: detected capacity change from 0 to 512
[  208.476442][ T4257] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  208.477812][ T5647] EXT4-fs warning (device loop4): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop4.
[  208.693617][ T4259] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  209.586023][ T5661] loop0: detected capacity change from 0 to 512
[  209.642786][ T5661] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  209.896362][ T5661] EXT4-fs (loop0): orphan cleanup on readonly fs
[  209.910358][ T5661] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.319: bg 0: block 248: padding at end of block bitmap is not set
[  209.931494][ T5661] Quota error (device loop0): write_blk: dquota write failed
[  209.939247][ T5661] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  209.949369][ T5661] EXT4-fs error (device loop0): ext4_acquire_dquot:6814: comm syz.0.319: Failed to acquire dquot type 1
[  209.975688][ T5661] EXT4-fs (loop0): 1 truncate cleaned up
[  210.046549][ T5661] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  210.655686][    T7] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  210.723779][    T7] hid-generic 0000:0000:0000.000B: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  210.989353][ T5652] loop2: detected capacity change from 0 to 8192
[  211.697307][ T4275] EXT4-fs (loop0): unmounting filesystem.
[  213.175884][ T5693] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  213.219853][ T5693] loop2: detected capacity change from 0 to 512
[  213.219861][ T5694] loop3: detected capacity change from 0 to 128
[  213.363040][ T5693] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  213.459897][ T5693] UDF-fs: error (device loop2): udf_read_inode: (ino 19) failed ident=264
[  213.623217][ T5702] binder: 5678:5702 ioctl 4018620d 0 returned -22
[  213.697600][ T5694] syz.3.327: attempt to access beyond end of device
[  213.697600][ T5694] loop3: rw=2049, sector=145, nr_sectors = 672 limit=128
[  213.772175][ T5706] loop1: detected capacity change from 0 to 512
[  213.787032][ T5706] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  213.885934][ T5706] EXT4-fs (loop1): orphan cleanup on readonly fs
[  213.899209][ T5706] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.328: bg 0: block 248: padding at end of block bitmap is not set
[  213.923284][ T5706] Quota error (device loop1): write_blk: dquota write failed
[  213.931023][ T5706] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  213.941237][ T5706] EXT4-fs error (device loop1): ext4_acquire_dquot:6814: comm syz.1.328: Failed to acquire dquot type 1
[  213.958533][ T5706] EXT4-fs (loop1): 1 truncate cleaned up
[  215.507614][ T5706] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  216.493813][ T5694] syz.3.327: attempt to access beyond end of device
[  216.493813][ T5694] loop3: rw=2049, sector=825, nr_sectors = 1 limit=128
[  216.646604][ T5699] syz.3.327: attempt to access beyond end of device
[  216.646604][ T5699] loop3: rw=524288, sector=145, nr_sectors = 224 limit=128
[  216.714841][ T5699] syz.3.327: attempt to access beyond end of device
[  216.714841][ T5699] loop3: rw=0, sector=145, nr_sectors = 8 limit=128
[  216.791027][ T5699] syz.3.327: attempt to access beyond end of device
[  216.791027][ T5699] loop3: rw=0, sector=145, nr_sectors = 8 limit=128
[  216.940652][ T4265] EXT4-fs (loop1): unmounting filesystem.
[  218.016444][ T5719] loop3: detected capacity change from 0 to 512
[  218.028730][ T5719] EXT4-fs: inline encryption not supported
[  218.034912][ T5719] EXT4-fs: Ignoring removed mblk_io_submit option
[  218.046889][ T5719] EXT4-fs (loop3): Test dummy encryption mode enabled
[  218.154118][ T5719] EXT4-fs (loop3): orphan cleanup on readonly fs
[  218.162976][ T5719] EXT4-fs error (device loop3): ext4_orphan_get:1400: comm syz.3.333: inode #13: comm syz.3.333: iget: illegal inode #
[  218.203882][ T5719] EXT4-fs (loop3): Remounting filesystem read-only
[  218.231443][ T5719] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.333: couldn't read orphan inode 13 (err -117)
[  218.251851][ T5725] loop1: detected capacity change from 0 to 8192
[  218.288876][ T5719] EXT4-fs (loop3): Remounting filesystem read-only
[  218.305169][ T5719] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  218.665800][ T5736] netlink: 'syz.3.333': attribute type 32 has an invalid length.
[  218.721444][ T4267] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  219.167588][ T4267] hid-generic 0000:0000:0000.000C: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  219.178311][ T4277] EXT4-fs (loop3): unmounting filesystem.
[  220.121988][ T5749] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  220.161044][ T5749] loop1: detected capacity change from 0 to 512
[  220.207881][ T4385] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  220.241312][ T5749] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  220.291026][ T5749] UDF-fs: error (device loop1): udf_read_inode: (ino 19) failed ident=264
[  220.403477][ T4385] usb 4-1: Using ep0 maxpacket: 16
[  220.953978][ T4385] usb 4-1: config 1 has an invalid interface number: 220 but max is 0
[  220.963310][ T4385] usb 4-1: config 1 has no interface number 0
[  220.970063][ T4385] usb 4-1: config 1 interface 220 has no altsetting 0
[  220.990543][ T4385] usb 4-1: New USB device found, idVendor=1bc7, idProduct=0023, bcdDevice=b2.a4
[  221.005221][ T4385] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  221.018987][ T4385] usb 4-1: Product: syz
[  221.023592][ T4385] usb 4-1: Manufacturer: syz
[  221.028260][ T4385] usb 4-1: SerialNumber: syz
[  221.040489][ T5754] loop4: detected capacity change from 0 to 512
[  221.077403][ T5756] loop1: detected capacity change from 0 to 512
[  221.089814][ T5754] EXT4-fs: Ignoring removed mblk_io_submit option
[  221.121640][ T5754] EXT4-fs: Ignoring removed bh option
[  221.150814][ T5754] EXT4-fs: quotafile must be on filesystem root
[  221.263079][ T4385] usb 4-1: USB disconnect, device number 2
[  221.631555][ T5763] loop1: detected capacity change from 0 to 256
[  223.500498][ T4318] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  224.476159][ T5778] syz.3.347[5778] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  224.476255][ T5778] syz.3.347[5778] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  224.500654][ T4318] hid-generic 0000:0000:0000.000D: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  224.527101][ T5778] loop3: detected capacity change from 0 to 128
[  226.538529][ T5788] loop4: detected capacity change from 0 to 256
[  226.628303][ T5788] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  228.131968][ T5800] xt_hashlimit: max too large, truncated to 1048576
[  228.140603][ T5800] No such timeout policy "syz1"
[  228.784374][ T5789] fido_id[5789]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  228.974511][ T5806] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  229.050459][ T5809] loop4: detected capacity change from 0 to 512
[  229.162827][ T4333] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  229.222260][ T5809] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  229.301338][ T4333] hid-generic 0000:0000:0000.000E: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  229.356701][ T5806] UDF-fs: error (device loop4): udf_read_inode: (ino 19) failed ident=264
[  230.140444][ T5821] loop4: detected capacity change from 0 to 512
[  230.156332][ T5819] binder: 5797:5819 ioctl 4018620d 0 returned -22
[  230.163170][ T5819] binder: 5797:5819 ioctl c018620c 200000000380 returned -1
[  230.177441][ T5821] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  230.228095][ T5821] EXT4-fs (loop4): 1 truncate cleaned up
[  230.244644][ T5821] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  230.266006][ T5814] loop1: detected capacity change from 0 to 32768
[  230.442028][   T26] audit: type=1800 audit(1753284235.503:12): pid=5827 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.356" name="file1" dev="loop1" ino=4 res=0 errno=0
[  230.769562][ T4266] EXT4-fs (loop4): unmounting filesystem.
[  231.231950][ T4278] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260
[  231.890656][ T5836] loop1: detected capacity change from 0 to 512
[  231.914369][ T5836] EXT4-fs: Ignoring removed mblk_io_submit option
[  231.920856][ T5836] EXT4-fs: Ignoring removed bh option
[  232.003706][ T5836] EXT4-fs: quotafile must be on filesystem root
[  232.107544][ T5840] loop4: detected capacity change from 0 to 1024
[  232.138913][ T4385] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  232.158083][ T5840] EXT4-fs: Ignoring removed orlov option
[  232.202438][ T4385] hid-generic 0000:0000:0000.000F: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  232.919499][ T5840] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  233.101817][   T26] audit: type=1804 audit(1753284238.163:13): pid=5840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.365" name="/newroot/72/bus/bus" dev="loop4" ino=18 res=1 errno=0
[  233.444783][ T5856] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  233.455494][ T5856] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  234.626110][ T5856] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  234.760216][ T5863] loop3: detected capacity change from 0 to 512
[  234.800062][ T5863] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  234.951918][ T5866] xt_hashlimit: max too large, truncated to 1048576
[  234.961283][ T5866] No such timeout policy "syz1"
[  235.024319][ T5860] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  235.634462][ T4266] EXT4-fs (loop4): unmounting filesystem.
[  236.248387][ T5863] UDF-fs: error (device loop3): udf_read_inode: (ino 19) failed ident=264
[  236.502576][ T5873] loop4: detected capacity change from 0 to 512
[  236.591227][ T5877] loop0: detected capacity change from 0 to 128
[  236.789527][ T5873] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  237.959928][ T5883] overlayfs: missing 'lowerdir'
[  238.945053][ T4554] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  238.960834][ T4266] EXT4-fs (loop4): unmounting filesystem.
[  239.034577][ T4554] hid-generic 0000:0000:0000.0010: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  240.547545][ T5910] xt_bpf: check failed: parse error
[  240.879232][ T5923] binder: 5900:5923 ioctl 4018620d 0 returned -22
[  240.886037][ T5923] binder: 5900:5923 ioctl c018620c 200000000380 returned -1
[  241.389750][ T4333] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[  241.407834][ T4333] hid-generic 0000:0000:0000.0011: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  241.648033][ T5937] fido_id[5937]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  242.044354][ T5944] loop4: detected capacity change from 0 to 32768
[  242.850607][ T5950] overlayfs: filesystem on './file1' not supported
[  242.898120][   T26] audit: type=1800 audit(1753284247.963:14): pid=5950 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.386" name="bus" dev="loop4" ino=65 res=0 errno=0
[  244.138349][ T5962] loop0: detected capacity change from 0 to 512
[  244.218296][ T5962] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  244.505512][ T4278] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260
[  245.495635][ T4275] EXT4-fs (loop0): unmounting filesystem.
[  245.629969][ T4554] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0
[  245.678312][ T4554] hid-generic 0000:0000:0000.0012: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  246.616663][ T4318] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0
[  246.663903][ T4318] hid-generic 0000:0000:0000.0013: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  246.807744][ T5992] fido_id[5992]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  247.712415][ T6002] binder: 5982:6002 ioctl 4018620d 0 returned -22
[  247.719238][ T6002] binder: 5982:6002 ioctl c018620c 200000000380 returned -1
[  248.012697][ T6009] loop1: detected capacity change from 0 to 256
[  248.615605][ T6011] loop2: detected capacity change from 0 to 512
[  253.245068][ T6011] EXT4-fs warning (device loop2): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop2.
[  254.408638][ T4278] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260
[  254.652727][ T6028] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  255.105287][ T6039] loop4: detected capacity change from 0 to 512
[  255.194689][ T6039] EXT4-fs: Ignoring removed nomblk_io_submit option
[  256.199055][ T6039] EXT4-fs (loop4): Test dummy encryption mode enabled
[  256.206184][ T6039] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  256.507454][ T6039] EXT4-fs (loop4): 1 truncate cleaned up
[  256.513263][ T6039] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  257.315746][ T4266] EXT4-fs (loop4): unmounting filesystem.
[  259.537179][ T6073] binder: 6072:6073 ioctl 4018620d 0 returned -22
[  259.547783][ T6073] binder: 6072:6073 ioctl c018620c 200000000380 returned -1
[  260.245458][ T6090] netlink: 'syz.2.424': attribute type 3 has an invalid length.
[  260.263441][ T6090] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.424'.
[  260.390145][ T6094] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  260.404877][ T6093] netlink: 'syz.0.426': attribute type 29 has an invalid length.
[  260.439161][ T6093] netlink: 'syz.0.426': attribute type 29 has an invalid length.
[  260.514058][ T6097] netlink: 'syz.0.426': attribute type 29 has an invalid length.
[  260.685984][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[  260.692371][ T1276] ieee802154 phy1 wpan1: encryption failed: -22
[  261.196186][ T6119] netlink: 132 bytes leftover after parsing attributes in process `syz.2.433'.
[  261.403788][ T6123] netlink: 8 bytes leftover after parsing attributes in process `syz.4.431'.
[  261.955431][ T4333] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0
[  261.964188][ T4333] hid-generic 0000:0000:0000.0014: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  262.396864][ T4318] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0
[  262.443776][ T4318] hid-generic 0000:0000:0000.0015: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  262.576474][ T6143] binder: 6129:6143 ioctl 4018620d 0 returned -22
[  262.583332][ T6143] binder: 6129:6143 ioctl c018620c 200000000380 returned -1
[  264.454887][ T6164] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  265.316001][ T6189] loop3: detected capacity change from 0 to 512
[  265.499465][ T6191] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  265.511704][ T6191] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  266.411272][ T6189] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  266.421240][ T6189] ext4 filesystem being mounted at /91/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  266.483323][ T6189] netlink: 28 bytes leftover after parsing attributes in process `syz.3.452'.
[  268.539119][ T4277] EXT4-fs (loop3): unmounting filesystem.
[  268.750587][ T6217] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  268.900317][ T6228] binder: 6208:6228 ioctl 4018620d 0 returned -22
[  268.907566][ T6228] binder: 6208:6228 ioctl c018620c 200000000380 returned -1
[  269.986086][ T6248] xt_hashlimit: max too large, truncated to 1048576
[  269.994584][ T6248] No such timeout policy "syz1"
[  270.782579][ T6252] netlink: 'syz.4.473': attribute type 10 has an invalid length.
[  270.892465][ T6252] team0: Device ipvlan1 failed to register rx_handler
[  271.536261][ T6261] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  271.732038][ T6250] loop2: detected capacity change from 0 to 32768
[  272.062246][   T26] audit: type=1800 audit(1753284277.093:15): pid=6274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.472" name="file1" dev="loop2" ino=4 res=0 errno=0
[  273.041752][ T4333] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0
[  273.084485][ T4333] hid-generic 0000:0000:0000.0016: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  274.022868][ T6300] netlink: 'syz.4.485': attribute type 25 has an invalid length.
[  274.263669][ T4333] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  274.473865][ T6311] binder: 6305:6311 ioctl 4018620d 0 returned -22
[  274.481731][ T6311] binder: 6305:6311 ioctl c018620c 200000000380 returned -1
[  274.811437][ T6313] xt_hashlimit: max too large, truncated to 1048576
[  274.818332][ T6313] No such timeout policy "syz1"
[  275.283580][ T4333] usb 3-1: Using ep0 maxpacket: 16
[  275.305072][ T4333] usb 3-1: config 1 has an invalid interface number: 220 but max is 1
[  275.354988][ T6316] sctp: [Deprecated]: syz.1.491 (pid 6316) Use of struct sctp_assoc_value in delayed_ack socket option.
[  275.354988][ T6316] Use struct sctp_sack_info instead
[  275.386660][ T4333] usb 3-1: config 1 has an invalid interface number: 76 but max is 1
[  275.421192][ T4333] usb 3-1: config 1 has no interface number 0
[  275.444475][ T4333] usb 3-1: config 1 has no interface number 1
[  275.488871][ T6320] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  275.498167][ T4333] usb 3-1: config 1 interface 220 has no altsetting 0
[  275.526019][ T4333] usb 3-1: config 1 interface 76 has no altsetting 0
[  275.568846][ T4333] usb 3-1: New USB device found, idVendor=1bc7, idProduct=0023, bcdDevice=b2.a4
[  275.626218][ T4333] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  275.693816][ T4333] usb 3-1: Product: syz
[  275.735277][ T4333] usb 3-1: Manufacturer: syz
[  275.766769][ T4333] usb 3-1: SerialNumber: syz
[  276.462535][ T4333] usb 3-1: USB disconnect, device number 2
[  277.361127][ T6342] loop1: detected capacity change from 0 to 512
[  277.447234][ T6342] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  277.463733][ T6342] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  277.523519][ T6342] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2195: inode #15: comm syz.1.498: corrupted in-inode xattr
[  277.550114][ T6342] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.498: couldn't read orphan inode 15 (err -117)
[  277.664756][ T6342] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  278.686286][ T6354] device syzkaller0 entered promiscuous mode
[  278.923635][ T4554] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  278.962128][ T6363] binder: 6360:6363 ioctl 4018620d 0 returned -22
[  278.969354][ T6363] binder: 6360:6363 ioctl c018620c 200000000380 returned -1
[  279.203607][ T4554] usb 5-1: Using ep0 maxpacket: 32
[  279.216179][ T4554] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  279.354495][ T4554] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  279.489522][ T4554] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  279.533160][ T4554] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  279.618190][ T4554] usb 5-1: config 0 descriptor??
[  279.639243][ T4554] hub 5-1:0.0: USB hub found
[  279.763119][ T4318] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0
[  279.773324][ T4318] hid-generic 0000:0000:0000.0017: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  279.845472][ T4554] hub 5-1:0.0: 1 port detected
[  280.004328][ T6375] fido_id[6375]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  280.480595][ T4554] hub 5-1:0.0: activate --> -90
[  280.827944][ T4265] EXT4-fs (loop1): unmounting filesystem.
[  280.886709][ T4318] usb 5-1: USB disconnect, device number 2
[  281.105727][ T6381] loop3: detected capacity change from 0 to 32768
[  281.280497][ T6386] overlayfs: filesystem on './file1' not supported
[  281.298026][   T26] audit: type=1800 audit(1753284286.363:16): pid=6386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.506" name="bus" dev="loop3" ino=65 res=0 errno=0
[  283.789097][ T4318] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[  283.800211][ T4318] hid-generic 0000:0000:0000.0018: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  283.891673][ T6414] fido_id[6414]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  284.248282][ T6419] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.518'.
[  284.867794][ T6420] loop2: detected capacity change from 0 to 32768
[  285.731186][ T6420] overlayfs: filesystem on './file1' not supported
[  285.765349][   T26] audit: type=1800 audit(1753284290.833:17): pid=6420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.519" name="bus" dev="loop2" ino=65 res=0 errno=0
[  286.648540][ T4278] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260
[  286.655822][ T4319] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0
[  287.302601][ T4319] hid-generic 0000:0000:0000.0019: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  288.372283][ T6478] fido_id[6478]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  290.673550][ T6513] loop1: detected capacity change from 0 to 512
[  290.889676][ T6513] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  290.899168][ T6513] ext4 filesystem being mounted at /104/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  291.960279][ T4319] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0
[  292.003811][ T4319] hid-generic 0000:0000:0000.001A: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  292.364156][ T4265] EXT4-fs (loop1): unmounting filesystem.
[  295.140101][ T6564] loop2: detected capacity change from 0 to 128
[  296.183527][ T6568] xt_hashlimit: max too large, truncated to 1048576
[  296.190334][ T6568] No such timeout policy "syz1"
[  298.333865][ T6609] xt_hashlimit: max too large, truncated to 1048576
[  298.340678][ T6609] No such timeout policy "syz1"
[  300.914628][ T6656] xt_hashlimit: max too large, truncated to 1048576
[  300.921436][ T6656] No such timeout policy "syz1"
[  300.946113][ T4333] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0
[  300.980272][ T4333] hid-generic 0000:0000:0000.001B: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  302.955483][ T6685] loop1: detected capacity change from 0 to 512
[  304.335797][ T6685] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  304.345276][ T6685] ext4 filesystem being mounted at /117/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  305.077007][ T4265] EXT4-fs (loop1): unmounting filesystem.
[  306.042534][ T6689] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  306.300523][ T6715] loop4: detected capacity change from 0 to 512
[  306.373119][ T6715] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  306.950763][ T6715] EXT4-fs (loop4): 1 truncate cleaned up
[  307.066813][ T6715] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  307.809447][ T4266] EXT4-fs (loop4): unmounting filesystem.
[  307.884068][ T6708] loop0: detected capacity change from 0 to 32768
[  309.002206][ T6742] read_mapping_page failed!
[  309.058997][ T6742] diRead: read_metapage failed
[  309.073554][ T6742] jfs_lookup: iget failed on inum 32
[  309.149671][ T6744] overlayfs: failed to resolve './file1': -2
[  309.751264][ T6761] ������: renamed from vlan0
[  311.379074][ T6786] loop1: detected capacity change from 0 to 512
[  311.424200][ T6786] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  311.464844][ T6786] EXT4-fs (loop1): 1 truncate cleaned up
[  311.470529][ T6786] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  312.197963][ T6766] loop4: detected capacity change from 0 to 32768
[  312.254709][ T4265] EXT4-fs (loop1): unmounting filesystem.
[  312.328421][ T6768] overlayfs: filesystem on './file1' not supported
[  312.342084][   T26] audit: type=1800 audit(1753284317.403:18): pid=6768 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.630" name="bus" dev="loop4" ino=65 res=0 errno=0
[  312.760778][ T6802] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  313.510622][ T6817] loop1: detected capacity change from 0 to 512
[  313.777985][ T6817] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  313.787397][ T6817] ext4 filesystem being mounted at /128/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  314.902187][ T4265] EXT4-fs (loop1): unmounting filesystem.
[  314.918745][ T6804] loop4: detected capacity change from 0 to 32768
[  316.817255][ T6840] loop3: detected capacity change from 0 to 512
[  316.911480][ T6840] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  316.974429][ T6840] EXT4-fs (loop3): 1 truncate cleaned up
[  316.980112][ T6840] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  318.274761][ T4277] EXT4-fs (loop3): unmounting filesystem.
[  318.290932][ T6860] Illegal XDP return value 8 on prog  (id 304) dev N/A, expect packet loss!
[  318.342018][ T6862] loop4: detected capacity change from 0 to 512
[  318.372005][ T6862] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  318.459848][ T6862] UDF-fs: error (device loop4): udf_read_inode: (ino 19) failed ident=264
[  318.708621][ T4554] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0
[  318.861987][ T4554] hid-generic 0000:0000:0000.001C: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  319.346849][ T6876] xt_hashlimit: max too large, truncated to 1048576
[  319.353784][ T6876] No such timeout policy "syz1"
[  322.180517][ T6899] loop4: detected capacity change from 0 to 512
[  322.244581][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[  322.263737][ T1276] ieee802154 phy1 wpan1: encryption failed: -22
[  322.573839][ T6899] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  322.583215][ T6899] ext4 filesystem being mounted at /137/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  322.833081][ T6880] loop2: detected capacity change from 0 to 32768
[  322.866504][ T6906] loop1: detected capacity change from 0 to 512
[  322.971388][ T6906] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  324.068517][ T4266] EXT4-fs (loop4): unmounting filesystem.
[  324.271414][ T6909] overlayfs: filesystem on './file1' not supported
[  324.413378][   T26] audit: type=1800 audit(1753284329.453:19): pid=6911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.660" name="bus" dev="loop2" ino=65 res=0 errno=0
[  325.346082][ T6906] EXT4-fs (loop1): 1 truncate cleaned up
[  325.352042][ T6906] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  326.201828][ T4265] EXT4-fs (loop1): unmounting filesystem.
[  326.613701][ T6933] loop1: detected capacity change from 0 to 512
[  326.692246][ T6933] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  326.734241][ T6935] xt_hashlimit: max too large, truncated to 1048576
[  326.741025][ T6935] No such timeout policy "syz1"
[  326.783498][ T6933] UDF-fs: error (device loop1): udf_read_inode: (ino 19) failed ident=264
[  328.842006][ T4333] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  328.883916][ T4333] hid-generic 0000:0000:0000.001D: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  329.069319][ T6958] loop0: detected capacity change from 0 to 512
[  329.385064][ T6958] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  329.395138][ T6958] ext4 filesystem being mounted at /136/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  329.967287][ T6941] loop3: detected capacity change from 0 to 32768
[  330.304938][   T26] audit: type=1800 audit(1753284335.373:20): pid=6941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.674" name="file1" dev="loop3" ino=4 res=0 errno=0
[  330.602380][  T107] ==================================================================
[  330.610482][  T107] BUG: KASAN: use-after-free in jfs_lazycommit+0x74f/0xa50
[  330.617703][  T107] Read of size 4 at addr ffff88801d249c94 by task jfsCommit/107
[  330.625342][  T107] 
[  330.627675][  T107] CPU: 1 PID: 107 Comm: jfsCommit Not tainted 6.1.146-syzkaller #0
[  330.635574][  T107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  330.645639][  T107] Call Trace:
[  330.648918][  T107]  <TASK>
[  330.651850][  T107]  dump_stack_lvl+0x168/0x22e
[  330.656544][  T107]  ? __lock_acquire+0x7c50/0x7c50
[  330.661580][  T107]  ? show_regs_print_info+0x12/0x12
[  330.666785][  T107]  ? load_image+0x3b0/0x3b0
[  330.671307][  T107]  ? _raw_spin_lock_irqsave+0xb0/0xf0
[  330.676707][  T107]  ? __virt_addr_valid+0x188/0x540
[  330.681842][  T107]  ? __virt_addr_valid+0x465/0x540
[  330.686966][  T107]  ? jfs_lazycommit+0x74f/0xa50
[  330.691815][  T107]  print_report+0xa8/0x200
[  330.696225][  T107]  kasan_report+0x10b/0x140
[  330.700716][  T107]  ? jfs_lazycommit+0x74f/0xa50
[  330.705555][  T107]  jfs_lazycommit+0x74f/0xa50
[  330.710222][  T107]  ? txFreelock+0x5a0/0x5a0
[  330.714714][  T107]  ? _raw_spin_unlock_irqrestore+0x82/0x100
[  330.720600][  T107]  ? do_task_dead+0xd0/0xd0
[  330.725104][  T107]  ? _raw_spin_unlock_irqrestore+0xaa/0x100
[  330.730984][  T107]  ? __kthread_parkme+0x162/0x1c0
[  330.735997][  T107]  kthread+0x29d/0x330
[  330.740053][  T107]  ? txFreelock+0x5a0/0x5a0
[  330.744544][  T107]  ? kthread_blkcg+0xd0/0xd0
[  330.749124][  T107]  ret_from_fork+0x1f/0x30
[  330.753534][  T107]  </TASK>
[  330.756548][  T107] 
[  330.758849][  T107] Allocated by task 6941:
[  330.763161][  T107]  kasan_set_track+0x4b/0x70
[  330.767740][  T107]  __kasan_kmalloc+0x8e/0xa0
[  330.772320][  T107]  jfs_fill_super+0xd2/0xac0
[  330.776901][  T107]  mount_bdev+0x287/0x3c0
[  330.781218][  T107]  legacy_get_tree+0xe6/0x180
[  330.785880][  T107]  vfs_get_tree+0x88/0x270
[  330.790280][  T107]  do_new_mount+0x24a/0xa40
[  330.794761][  T107]  __se_sys_mount+0x2d6/0x3c0
[  330.799417][  T107]  do_syscall_64+0x4c/0xa0
[  330.803813][  T107]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  330.809691][  T107] 
[  330.811994][  T107] Freed by task 4277:
[  330.815952][  T107]  kasan_set_track+0x4b/0x70
[  330.820524][  T107]  kasan_save_free_info+0x2d/0x50
[  330.825534][  T107]  ____kasan_slab_free+0x126/0x1e0
[  330.830630][  T107]  slab_free_freelist_hook+0x131/0x1a0
[  330.836068][  T107]  __kmem_cache_free+0xb6/0x1f0
[  330.840899][  T107]  generic_shutdown_super+0x130/0x340
[  330.846261][  T107]  kill_block_super+0x7c/0xe0
[  330.850927][  T107]  deactivate_locked_super+0x93/0xf0
[  330.856192][  T107]  cleanup_mnt+0x463/0x4f0
[  330.860589][  T107]  task_work_run+0x1ca/0x250
[  330.865162][  T107]  exit_to_user_mode_loop+0xe6/0x110
[  330.870433][  T107]  exit_to_user_mode_prepare+0xb1/0x140
[  330.875968][  T107]  syscall_exit_to_user_mode+0x16/0x40
[  330.881408][  T107]  do_syscall_64+0x58/0xa0
[  330.885804][  T107]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  330.891683][  T107] 
[  330.893989][  T107] Last potentially related work creation:
[  330.899679][  T107]  kasan_save_stack+0x3a/0x60
[  330.904339][  T107]  __kasan_record_aux_stack+0xb2/0xc0
[  330.909698][  T107]  kvfree_call_rcu+0x108/0x870
[  330.914449][  T107]  drop_sysctl_table+0x2fa/0x430
[  330.919376][  T107]  drop_sysctl_table+0x2e9/0x430
[  330.924297][  T107]  unregister_sysctl_table+0x85/0x130
[  330.929651][  T107]  ip_vs_control_net_cleanup+0x207/0x350
[  330.935269][  T107]  __ip_vs_cleanup_batch+0x87/0xf0
[  330.940363][  T107]  cleanup_net+0x77b/0xb80
[  330.944759][  T107]  process_one_work+0x898/0x1160
[  330.949678][  T107]  worker_thread+0xaa2/0x1250
[  330.954337][  T107]  kthread+0x29d/0x330
[  330.958391][  T107]  ret_from_fork+0x1f/0x30
[  330.962790][  T107] 
[  330.965095][  T107] Second to last potentially related work creation:
[  330.971663][  T107]  kasan_save_stack+0x3a/0x60
[  330.976334][  T107]  __kasan_record_aux_stack+0xb2/0xc0
[  330.981689][  T107]  call_rcu+0x154/0x980
[  330.985833][  T107]  fib_create_info+0x1871/0x2490
[  330.990752][  T107]  fib_table_insert+0xc3/0x1b50
[  330.995585][  T107]  fib_magic+0x2c1/0x390
[  330.999812][  T107]  fib_add_ifaddr+0x140/0x5e0
[  331.004475][  T107]  fib_netdev_event+0x361/0x470
[  331.009313][  T107]  raw_notifier_call_chain+0xcb/0x160
[  331.014666][  T107]  __dev_notify_flags+0x178/0x2d0
[  331.019671][  T107]  dev_change_flags+0xe3/0x1a0
[  331.024415][  T107]  do_setlink+0xc31/0x3c40
[  331.028819][  T107]  rtnl_newlink+0x17d6/0x1ff0
[  331.033476][  T107]  rtnetlink_rcv_msg+0x79b/0xed0
[  331.038397][  T107]  netlink_rcv_skb+0x1de/0x420
[  331.043143][  T107]  netlink_unicast+0x74d/0x8d0
[  331.047889][  T107]  netlink_sendmsg+0x89e/0xbc0
[  331.052641][  T107]  __sys_sendto+0x44f/0x5c0
[  331.057126][  T107]  __x64_sys_sendto+0xda/0xf0
[  331.061787][  T107]  do_syscall_64+0x4c/0xa0
[  331.066183][  T107]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  331.072061][  T107] 
[  331.074364][  T107] The buggy address belongs to the object at ffff88801d249c00
[  331.074364][  T107]  which belongs to the cache kmalloc-256 of size 256
[  331.088397][  T107] The buggy address is located 148 bytes inside of
[  331.088397][  T107]  256-byte region [ffff88801d249c00, ffff88801d249d00)
[  331.101738][  T107] 
[  331.104045][  T107] The buggy address belongs to the physical page:
[  331.110445][  T107] page:ffffea0000749200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1d248
[  331.120581][  T107] head:ffffea0000749200 order:1 compound_mapcount:0 compound_pincount:0
[  331.128884][  T107] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  331.136853][  T107] raw: 00fff00000010200 0000000000000000 dead000000000001 ffff888017441b40
[  331.145414][  T107] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000
[  331.153977][  T107] page dumped because: kasan: bad access detected
[  331.160371][  T107] page_owner tracks the page as allocated
[  331.166062][  T107] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4265, tgid 4265 (syz-executor), ts 60269594835, free_ts 59845490726
[  331.187402][  T107]  post_alloc_hook+0x173/0x1a0
[  331.192155][  T107]  get_page_from_freelist+0x1a26/0x1ac0
[  331.197685][  T107]  __alloc_pages+0x1df/0x4e0
[  331.202260][  T107]  alloc_slab_page+0x5d/0x160
[  331.206916][  T107]  new_slab+0x87/0x2c0
[  331.210979][  T107]  ___slab_alloc+0xbc6/0x1220
[  331.215652][  T107]  __kmem_cache_alloc_node+0x1a0/0x260
[  331.221102][  T107]  kmalloc_trace+0x26/0xe0
[  331.225511][  T107]  ____ip_mc_inc_group+0x2ad/0xac0
[  331.230611][  T107]  ip_mc_up+0x121/0x2f0
[  331.234756][  T107]  inetdev_event+0xe68/0x1410
[  331.239419][  T107]  raw_notifier_call_chain+0xcb/0x160
[  331.244776][  T107]  __dev_notify_flags+0x178/0x2d0
[  331.249787][  T107]  dev_change_flags+0xe3/0x1a0
[  331.254556][  T107]  do_setlink+0xc31/0x3c40
[  331.258958][  T107]  rtnl_newlink+0x17d6/0x1ff0
[  331.263619][  T107] page last free stack trace:
[  331.268279][  T107]  free_unref_page_prepare+0x8b4/0x9a0
[  331.273723][  T107]  free_unref_page+0x2e/0x3f0
[  331.278381][  T107]  __unfreeze_partials+0x1a5/0x200
[  331.283478][  T107]  put_cpu_partial+0x17c/0x250
[  331.288224][  T107]  qlist_free_all+0x76/0xe0
[  331.292708][  T107]  kasan_quarantine_reduce+0x144/0x160
[  331.298146][  T107]  __kasan_slab_alloc+0x1e/0x80
[  331.302980][  T107]  slab_post_alloc_hook+0x4b/0x480
[  331.308076][  T107]  kmem_cache_alloc_lru+0x11a/0x2e0
[  331.313255][  T107]  __d_alloc+0x31/0x700
[  331.317395][  T107]  d_alloc_pseudo+0x19/0x70
[  331.321882][  T107]  alloc_file_pseudo+0xc8/0x1f0
[  331.326720][  T107]  sock_alloc_file+0xb3/0x240
[  331.331378][  T107]  __sys_socket+0x12a/0x190
[  331.335864][  T107]  __x64_sys_socket+0x76/0x80
[  331.340525][  T107]  do_syscall_64+0x4c/0xa0
[  331.344923][  T107] 
[  331.347232][  T107] Memory state around the buggy address:
[  331.352841][  T107]  ffff88801d249b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  331.360880][  T107]  ffff88801d249c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  331.368919][  T107] >ffff88801d249c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  331.376958][  T107]                          ^
[  331.381526][  T107]  ffff88801d249d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  331.389564][  T107]  ffff88801d249d80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  331.397601][  T107] ==================================================================
[  331.405655][  T107] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  331.412824][  T107] CPU: 1 PID: 107 Comm: jfsCommit Not tainted 6.1.146-syzkaller #0
[  331.420693][  T107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  331.430817][  T107] Call Trace:
[  331.434080][  T107]  <TASK>
[  331.436994][  T107]  dump_stack_lvl+0x168/0x22e
[  331.441653][  T107]  ? memcpy+0x3c/0x60
[  331.445622][  T107]  ? show_regs_print_info+0x12/0x12
[  331.450802][  T107]  ? load_image+0x3b0/0x3b0
[  331.455307][  T107]  panic+0x2c9/0x710
[  331.459199][  T107]  ? __lock_acquire+0x7c50/0x7c50
[  331.464233][  T107]  ? bpf_jit_dump+0xd0/0xd0
[  331.468742][  T107]  ? _raw_spin_unlock_irqrestore+0xaa/0x100
[  331.474641][  T107]  ? _raw_spin_unlock+0x40/0x40
[  331.479484][  T107]  check_panic_on_warn+0x80/0xa0
[  331.484415][  T107]  ? jfs_lazycommit+0x74f/0xa50
[  331.489251][  T107]  end_report+0x66/0x110
[  331.493485][  T107]  kasan_report+0x118/0x140
[  331.497974][  T107]  ? jfs_lazycommit+0x74f/0xa50
[  331.502809][  T107]  jfs_lazycommit+0x74f/0xa50
[  331.507469][  T107]  ? txFreelock+0x5a0/0x5a0
[  331.511955][  T107]  ? _raw_spin_unlock_irqrestore+0x82/0x100
[  331.517924][  T107]  ? do_task_dead+0xd0/0xd0
[  331.522411][  T107]  ? _raw_spin_unlock_irqrestore+0xaa/0x100
[  331.528291][  T107]  ? __kthread_parkme+0x162/0x1c0
[  331.533301][  T107]  kthread+0x29d/0x330
[  331.537362][  T107]  ? txFreelock+0x5a0/0x5a0
[  331.541851][  T107]  ? kthread_blkcg+0xd0/0xd0
[  331.546432][  T107]  ret_from_fork+0x1f/0x30
[  331.550836][  T107]  </TASK>
[  331.554057][  T107] Kernel Offset: disabled
[  331.558364][  T107] Rebooting in 86400 seconds..