last executing test programs:

2m13.46033222s ago: executing program 3 (id=2825):
socket$inet_smc(0x2b, 0x1, 0x0)
syz_open_dev$vim2m(0x0, 0xff, 0x2)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$poke(0x1, r0, &(0x7f0000000080), 0x4000000000004)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x20801, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x80222, 0x0)
add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000240)="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", 0x104, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
msgsnd(0x0, &(0x7f0000000000)={0x2}, 0x4, 0x0)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x40040, 0x0)
syz_open_dev$video(0x0, 0x7ff, 0x0)

2m10.407090588s ago: executing program 3 (id=2829):
socket(0x11, 0x2, 0x0)
r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @auto=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x65]}, &(0x7f0000000080)={0x0, "7fa83dab0d3366512d5be841797d7df93815e60c650932d7ec32e239af37da22bb8a299a5f539d3c7f18a266d61654fead1f5509316491a77a08835ac6cae26a"}, 0x48, 0xfffffffffffffffd)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x38e, 0x20800)
ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x8000000c96c0)
r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x145040, 0x0)
ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000180)={'adq12b\x00', [0x4f27, 0x5, 0x2, 0x4, 0x5, 0xcc5, 0xf, 0x1000, 0xa, 0xe8aa, 0x2, 0x1, 0xfffffffd, 0x6, 0x7fffffff, 0xff, 0x80000000, 0x1a447, 0x3, 0x42000003, 0x99, 0xcaa7, 0xfffffffe, 0x20001e58, 0x8, 0xe69, 0x3c, 0x8, 0xfffffffe, 0x0, 0xfffffff8]})
sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x10001)
keyctl$chown(0x4, r0, 0xffffffffffffffff, 0xee00)
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0x8100, 0x0)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
ioctl$TIOCMIWAIT(r3, 0x545c, 0x200000000000000)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2)
r5 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8)

2m6.5492351s ago: executing program 3 (id=2833):
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x24)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
ptrace$setregset(0x4205, 0x0, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c", 0x54})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

2m5.764224574s ago: executing program 3 (id=2839):
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x22000b0, 0x0, 0x0, 0x0, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0)
r1 = open_tree(r0, &(0x7f0000000080)='./file0/file0\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0/../file0\x00', 0x162)

2m5.647326183s ago: executing program 3 (id=2840):
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_open_dev$MSR(0x0, 0x0, 0x0)
ioprio_get$pid(0x3, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)
sched_setscheduler(0x0, 0x5, &(0x7f0000000000)=0x7)
rseq(&(0x7f0000001780)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x104)
clock_settime(0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x31, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, 0x0, 0x0)
read(r0, &(0x7f00000003c0)=""/4096, 0x1000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x1a9d42, 0x0)
mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
syz_80211_join_ibss(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000380)={0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="fd946c8a0940fd7f59203003000000030c"], &(0x7f00000013c0)={0x0, 0x3, 0xbf, @string={0xbf, 0x3, "f1c213c12843555d89e741c2f0338928bc87d80294e6b70ba08dbded1da994403415b35627d86c325e3651a69050d9a4342b2d51daf330b46c852d3ae3da6cf831ab2f11301783395f48fdc8cf5989d98ac189f837ec5e3bd7ffde6bdaa023c626ca6491ac1a953a5c2eb5573df536a62b3ae6d8804b2dbaaf338388f4bff5cb7dec12e60714f52a5919ce6deea4201d188aadef2267db9546013b1ed8d4220a0624429d314aa35f7c8387bf29fce183027428250cb3dfe721e5714a7a"}}, &(0x7f0000000280)={0x0, 0x22, 0x9, {[@global=@item_4={0x3, 0x1, 0x20fe8b7473fccccf}, @global=@item_012={0x0, 0x1, 0x3}, @global=@item_012={0x0, 0x1, 0x7}, @local=@item_012={0x1, 0x2, 0x3, "bc"}]}}, &(0x7f0000000300)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x40, 0x1, {0x22, 0x103}}}}, &(0x7f0000001740)={0x2c, &(0x7f00000014c0)={0x0, 0x1, 0xac, "e309f5632bb41ab2c2b1a777bf3dbc0a22e531941cbbdac734ef4b7d632debc20d853405f24bc140cd101aece17fc3970c024530143557ce3f46859aa7f46d159bfa6763bd7c011e8cc2ef4bd4b34fb15e50329546a684bc2661a5bede19cf3e5ccbd4bc11531ce9d21fc398ef122730de7087bc9d5e5381b89cc29841b3e99b1be2f40b2eba31de4886ecf544b585ededa455f2f829c354bec3b9b15d2acbc25bb2bc9625ea42121657230e"}, &(0x7f0000001580)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000015c0)={0x0, 0x8, 0x1, 0x8b}, &(0x7f0000001600)={0x20, 0x1, 0xfa, "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"}, &(0x7f0000001700)={0x20, 0x3, 0x1, 0x40}})

2m5.293702411s ago: executing program 3 (id=2841):
socket(0x11, 0x2, 0x0)
r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @auto=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x65]}, &(0x7f0000000080)={0x0, "7fa83dab0d3366512d5be841797d7df93815e60c650932d7ec32e239af37da22bb8a299a5f539d3c7f18a266d61654fead1f5509316491a77a08835ac6cae26a"}, 0x48, 0xfffffffffffffffd)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x38e, 0x20800)
ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x8000000c96c0)
r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x145040, 0x0)
ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000180)={'adq12b\x00', [0x4f27, 0x5, 0x2, 0x4, 0x5, 0xcc5, 0xf, 0x1000, 0xa, 0xe8aa, 0x2, 0x1, 0xfffffffd, 0x6, 0x7fffffff, 0xff, 0x80000000, 0x1a447, 0x3, 0x42000003, 0x99, 0xcaa7, 0xfffffffe, 0x20001e58, 0x8, 0xe69, 0x3c, 0x8, 0xfffffffe, 0x0, 0xfffffff8]})
sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x10001)
keyctl$chown(0x4, r0, 0xffffffffffffffff, 0xee00)
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0x8100, 0x0)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
ioctl$TIOCMIWAIT(r3, 0x545c, 0x200000000000000)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, 0x0, 0x0)

2m5.006266295s ago: executing program 32 (id=2841):
socket(0x11, 0x2, 0x0)
r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @auto=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x65]}, &(0x7f0000000080)={0x0, "7fa83dab0d3366512d5be841797d7df93815e60c650932d7ec32e239af37da22bb8a299a5f539d3c7f18a266d61654fead1f5509316491a77a08835ac6cae26a"}, 0x48, 0xfffffffffffffffd)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x38e, 0x20800)
ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x8000000c96c0)
r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x145040, 0x0)
ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000180)={'adq12b\x00', [0x4f27, 0x5, 0x2, 0x4, 0x5, 0xcc5, 0xf, 0x1000, 0xa, 0xe8aa, 0x2, 0x1, 0xfffffffd, 0x6, 0x7fffffff, 0xff, 0x80000000, 0x1a447, 0x3, 0x42000003, 0x99, 0xcaa7, 0xfffffffe, 0x20001e58, 0x8, 0xe69, 0x3c, 0x8, 0xfffffffe, 0x0, 0xfffffff8]})
sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x10001)
keyctl$chown(0x4, r0, 0xffffffffffffffff, 0xee00)
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0x8100, 0x0)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
ioctl$TIOCMIWAIT(r3, 0x545c, 0x200000000000000)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, 0x0, 0x0)

1m52.544588404s ago: executing program 1 (id=2877):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x800, 0x70bd25, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0x1, 0xfff3}, {0xfff3, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_OVERHEAD={0x8, 0x6, 0x5}, @TCA_CAKE_FLOW_MODE={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44845}, 0x4090)
sendmsg$nl_route(r0, 0x0, 0x4000084)

1m52.35181517s ago: executing program 1 (id=2878):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00')
read$FUSE(r2, &(0x7f0000000200)={0x2020}, 0x2020)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x8, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000"], 0x14}, 0x1, 0x0, 0x0, 0x24040040}, 0x20004050)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000240)=ANY=[])
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x8, @empty, 0x3}, 0x1c)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0xd, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

1m51.579495972s ago: executing program 1 (id=2881):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000140)=0x13)
ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000000)={0xffffffc0, 0xce30, 0xfffff801, 0x4, 0x1, "6e29efcae4ed690034357541de3350304205d2", 0x800, 0x9})
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000006c0)=0xd)

1m51.337208702s ago: executing program 1 (id=2883):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x10)
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5515, &(0x7f00000079c0)="$eJzs3EtvG9UXAPDjPNr08W+jv1iw60gVUiLVVpxHBbsArXiIVFGBBStwbMdya3ui2HFCVixYIhZ8EwQSK5Z8Bhas2SEWIHZIIM9MoOEhIcWJm+b3k8Zn7vX1mXOtqtKZiRzAhTWf/PJTKW7ElYiYjojrEdl5qTgy63l4PiJuRcTUE0epmP9j4lJEXI2IG6Pkec5S8dZnd4a313588+evv708c+3zr76b3K6BSXshIro7+fl+N49pK4+PivnasJ3F7uqwiPkb3cfFOM3jfnMry7BfO1pXy+JKK1+f7uz1R3G7U6uPYqu9nc3v9PIL9oetozzZBx7VdrNxo7mVxXY/zWLrMK/r4DD/v+2wP8jzNIp8H2bpYzA4ivl886CZ72fncRbrvUExn+dNG82DURwWsbhc1NNOI6tj6yTf9NPtrXZv7yAZNnf77bSXrFWqL1aqd8vV3bTRHDRXy7Vu4+5qstDqjJaVB81ad72Vpq1Os1JPu4vJQqteL1erycK95la71kuq1cpKZam8tlic3Ulee/Bu0mkkC6P4Sru3N2h3+sl2upvkn1hMlisrLy0mt6vJ2xubyebD+/c3Nt95/957D17eeOPVYtHfykoWlpeWl8vVpfJydfEC7f/jougx7h9OpDTpAgDOH/0/MAmn1//vPow4/f4/9P9jca7633PX/08XV3l69w8nov8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALiwvp/94vXsZD4fXyvm/1dM/b8YlyJiKiJ++wfTcelYzukiz+y/rJ/9Sw3flCLLMLrG5eK4GhHrxfHrzdP+FgAAAODZ9eVHtz7Nu/X8ZX7SBXGW8ps2U9c/GFO+uYiYnf9hTNmmRi/PjSlZ9u97Jg7GlC27gTU3llQ3i1tuM2PJ9l9NHwtzT4RSHqbOtBwAAOBMHO8EzrYLAQAA4Cx9MukCmIxSHD3KPHoWnP3l/Z8PBK8cGwEAAADnUGnSBQAAAACnLuv//f4fAAAAPNvy3/8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB+Z+duchOHATCAOoEMMD8aNJr9XGV2cIw5wiy7rDhAL8EBuqBX6AW4QumuR6hIReJSqIpEFSdRq/ekYByZDxvBwrYwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtOm+WM1vLv9cNc3ZlmVZjmKlfL/mIwEAAABO2RSrefVkWte/xfs/4q1fsZ6FEPITU/tB+HKUOYg5xUv768P2xas+3IZQJezeYxSvryGEv/F6/Nn2pwAAAACf13qxnNWz9fph2neH6FK9aJN//5coLwshFNOHRGn5Lu93orDq+z0MF4nSqgWscaKwesltmCrtLNXPfb9qNz4osrrI33zZvpPJxg4AAHRocFR0OwsBAACgS//77gDp3E3Ob5uF563M/VZg/AN/3N6bHNUAAACADyjruwMAAABA66r5f0fn/5XO/wMAAIB+1Of/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KZNsZqvF8tZ05xt2Uya0QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAE/vzjgIhEAZhsHd9ZzL3P6w0aGpqUgXCx98YDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC8+d1f/k9MjTPJ3Gtj6XkkWTs1tk6NvXPj6A/j69cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABc7M9LCoRAEETBnPG/k77/YSVBzyBCBDQ8qqhFAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF/0u1/+T0yNM8ncaWPpeCRZu2psXTX2HjSOHoy3fwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABc7NzPaxxVHADwNzM7W1sV1yh7iIiCB73Y7ba29iYelODBP0EI6bbGbv3R5mBLEXPxJjn3InoUEZR46/+QcwK5xFsOe4jgWZnZmezkB7j+mtkknw+8ed8dhnnfNwsh33kvAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgNHp7EifZoTOO4+Lc5t7DpazfOtRnHq9tz2cti6M6kz4ZXqx+iLrNJQIAAMDZkZT1fQhhJ11fyPq4k9f/aXlNVvN/+/Q4Luv5w3V/2Ze1f9Z++Xn3+f2BOuNxspveXB4OLh1NpfX/zXK2PfOXV7TyJ5+/e0nyLyR+b/W5UZo/z+jrjY132nl4ro5sAYB/4mLZF0H5+1DW95tMDIAzo1UpvMv6P+k0mxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAHUar4ckyjkII861JnNnae7h0XP94bXu+bNcePVoLX07umd0iDSHcXB4OLtU6m9l27/6D24vD4eBu/cFLIYSmRn+rmP7tD6a4OIRGno/gPwri4suelXxORtDgDyUAAE6ltGhZXb+Tri9k56K5EP747mD9/2olDlPW/7sfXtusjlWt//u1zXD29VbufNq7d//B68t3Fm8Nbg0+fuNy/83+letXr17v5e9Ket6YAAAA8O+0i1at/+O5o+v/FypxmLL+/+yb/hfVsRL1/7Emi35NZwIAAHC2Pfvy779Fx5yP2u3w+eLKyt3++Lj/+fL42ECqf9u5olXr/2Su6awAAACAOoxWowPr/zcqcZhy/f+p71/4sXrPJIRwvlj/v7j0yfBGfdOZaXX8OXHTcwQAAKBZ54tWXf9P8/3/8f6WhziE8Nor47j4N4BT1f/Ju1/9UB2ruv//Sn1TnElxd/w88r4bQqvbdEYAAACcZk8ULSv2f03XFz766cL7bfv/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOr2ZwAAAP//eHA1gA==")
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

1m48.060419067s ago: executing program 1 (id=2891):
syz_open_dev$vivid(0x0, 0x3, 0x2)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
ioctl$UI_ABS_SETUP(r1, 0x401c5504, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x406, r0)
close_range(r0, 0xffffffffffffffff, 0x0)

1m45.163362262s ago: executing program 1 (id=2900):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]})
r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0xc9)
fcntl$notify(r1, 0x402, 0x80000025)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x0, 0xc9)
fcntl$notify(r2, 0x402, 0x80000025)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
close_range(r0, 0xffffffffffffffff, 0x0)

1m43.117062318s ago: executing program 33 (id=2900):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]})
r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0xc9)
fcntl$notify(r1, 0x402, 0x80000025)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x0, 0xc9)
fcntl$notify(r2, 0x402, 0x80000025)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
close_range(r0, 0xffffffffffffffff, 0x0)

17.757994972s ago: executing program 4 (id=3137):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)
r3 = eventfd(0x7)
ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, 0x0)
ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3})
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
shutdown(r4, 0x0)
recvmmsg(r4, &(0x7f00000004c0), 0xf02, 0xf0, 0x0)

16.291208011s ago: executing program 5 (id=3141):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000d80)={[], [{@fsmagic={'fsmagic', 0x3d, 0xe4a3}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_role={'subj_role', 0x3d, '@\\!/./.\xc5:'}}, {@fsname={'fsname', 0x3d, 'nogrpid'}}, {@subj_type={'subj_type', 0x3d, 'discard'}}, {@fsmagic={'fsmagic', 0x3d, 0x7}}, {@euid_gt={'euid>', 0xffffffffffffffff}}, {@uid_lt}, {@dont_appraise}, {@smackfsdef={'smackfsdef', 0x3d, 'iso8859-1'}}, {@obj_role={'obj_role', 0x3d, '$!\xf4'}}, {@dont_hash}]}, 0x0, 0x14f5, &(0x7f0000001580)="$eJzs3AuYjlXXOPC99t43Y5r0NMlh2GuvmycNtkmSHBJySJIkSXJKSJokSUgMOSUNSchxkhyGkBymMWmcz4eckyavNEkSklPY/0vv+33e9+v9vr7v//b/u65v1u+69jV7zf2s9ax71lzz3PdzXfP80HNUvRb1azcjIvEvgb9+SRFCxAghhgkhbhBCBEKISvGV4q8cL6Ag5V97EvbnejT9WnfAriWef97G88/beP55G88/b+P55208/7yN55+38fwZy8u2zyl2I6+8u/j9/7yMX///F8ktP/mbjeVv7vU/SOH55208/7yN55+38fzzNp5/3sbz/9+v1n9xjOeft/H8GcvLrvX7z7yu7brWv3+MMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxvKGc/4qLYT4t/217osxxhhjjDHGGGN/Hp//WnfAGGOMMcYYY4yx//dASKGEFoHIJ/KLGFFAxIrrRJy4XhQUN4iIuFHEi5tEIXGzKCyKiKKimEgQxUUJYQQKK0iEoqQoJaLiFlFa3CoSRRlRVpQTTpQXSeI2UUHcLiqKO0QlcaeoLO4SVURVUU1UF3eLGuIeUVPUErXFvaKOqCvqifriPtFA3C8aigdEI/GgaCweEk3Ew6KpeEQ0E4+K5uIx0UI8LlqKJ0Qr0Vq0EW1Fu/+r/FdEX/Gq6Cf6ixQxQAwUr4lBYrAYIoaKYeJ1MVy8IUaIN0WqGClGibfEaPG2GCPeEWPFODFevCsmiIlikpgspoipIk28J6aJ98V08YGYIWaKWWK2SBdzxFzxoZgn5osF4iOxUHwsFonFYolYKjLEJyJTLBNZ4lOxXHwmssUKsVKsEqvFGrFWrBPrxQaxUWwSm8UWsVVsE9vF52KH2Cl2id1ij9gr9okvxH7xpTggvhI54uv/Yf7Z/5DfCwQIkCBBg4Z8kA9iIAZiIRbiIA4KQkGIQATiIR4KQSEoDIWhKBSFBEiAElACEBAICEpCSYhCFEpDaUiERCgLZcGBgyRIggpwO1SEilAJKkFlqAxVoCpUhepQHWpADagJNaE21IY6UAfqQT24D+6D+6EhNIRG0AgaQ2NoAk2gKTSFZtAMmkNzaAEtoCW0hFbQCtpAG2gH7aA9tIcO0AE6QSfoDJ2hC3SBZEiGrtAVukE36A7doQf0gJ7QE3pBb+gNr8Ar8Cq8Cv2hjhwAA2EgDIJBMASGwlB4HYbDG/AGvAmpMBJGwVvwFrwNY+AMjIVxMB7GQw05ESbBZCA5FdIgDabBNJgO02EGzISZMBvSYQ7MhbkwD+bDfPgIFsLH8DEshsWwFDIgAzJhGWRBFiyHs5ANK2AlrILVsAZWwzpYD+tgI2yCjbAFtsA22Aafw+ewE3bCbtgNe2EvfAFfwJfwJaRCDuTAQTgIh+AQHIbDkAu5cASOwFE4CsfgGByH43ACTsIpOAmn4TScgbNwDs7BBbgAF+GlhO+a7y2zIVXIK7TUMp/MJ2NkjIyVsTJOxsmCsqCMyIiMl/GykCwkC8vCsqgsKhNkgiwhS0iUKEmGsqQsKaMyKkvL0jJRJsqysqx00skkmSQryAqyoqwoK8k7ZWV5l6wiq8qOrrqsLmvITq6mrCVry9qyjqwr68n6sr5sIBvIhrKhbCQbycaysWwiH5ZN5QAYAo/KK5NpIUdCSzkKWsnWso1sK9+GJ2V7OQY6yI6yk3xajoOx0EW2d8nyOdlVToJu8gU5GV6UPeRU6Clflr1kb9lHviL7yg6un+wvZ8AAOVDOhkFysBwih8p5UFdemVg9+aZMlSPlKPmWXApvyzHyHTlWjpPj5btygpwoJ8nJcoqcKtPke3KafF9Olx/IGXKmnCVny3Q5R86VH8p5cr5cID+SC+XHcpFcLJfIpTJDfiIz5TKZJT+Vy+VnMluukCvlKrlarpFr5Tq5Xm6QG+UmuVlukVvlNrldfi53yJ1yl9wt98i9cp/8Qu6XX8oD8iuZI7+WB+Vf5CH5jTwsv5W58jt5RH4vj8of5DH5ozwuf5In5El5Sv4sT8tf5Bl5Vp6T5+UF+au8KC/Jy9JLoUBJpZRWgcqn8qsYVUDFqutUnLpeFVQ3qIi6UcWrm1QhdbMqrIqooqqYSlDFVQllFCqrSIWqpCqlouoWVVrdqhJVGVVWlVNOlVdJ6jZVQd2uKqo7VCV1p6qs7lJVVFVVTVVXd6sa6h5VU9VStdW9qo6qq+qp+uo+1UDdrxqqB1Qj9aBqrB5STdTDqql6RDVTj6rm6jHVQj2uWqonVCvVWrVRbVU79aRqr55SHVRH1Uk9rTqrZ1QX9axKVs+prup51U29oLqrF1UP9ZLqqV5WvVRv1UddUpeVV/1Uf5WiBqiB6jU1SA1WQ9RQNUy9roarN9QI9aZKVSPVKPWWGq3eVmPUO2qsGqfGq3fVBDVRTVKT1RQ1VaWp99Q09b6arj5QM9RMNUvNVulqjhryt0oL/hv57/+T/BG/Pfs2tV19rnaonWqX2q32qL1qn9qn9qv96oA6oHJUjjqoDqpD6pA6rA6rXJWrjqgj6qg6qo6pY+q4Oq5OqJPqvPpZnVa/qDPqrDqrzqsL6oK6+LefgdCgpVZa60Dn0/l1jC6gY/V1Ok5frwvqG3RE36jj9U26kL5ZF9ZFdFFdTCfo4rqENhq11aRDXVKX0lF9iy6tb9WJuowuq8tpp8vrJH3bv5z/R/210+10e91ed9AddCfdSXfWnXUX3UUn62TdVXfV3XQ33V131z10D91T99S9dC/dR/fRfXVf3U/30yk6RQ/Ur+lBerAeoofqYfp1PVwP1yP0CJ2qU/UoPUqP1qP1GD1Gj9Vj9Xg9Xk/QE/QkPUlP0VN0mk7T0/Q0PV1P1zP0DD1Lz9LpOl3P1XP1PD1PL9AL9EK9UC/Si/QSvURn6AydqTN1ls7Sy/Vyna1X6BV6lV6l1+g1ep1epzfoDXqT3qS36C06W2/X2/UOvUPv0rv0Hr1H79P79H69Xx/QB3SOztEH9UF9SB/Sh/Vhnatz9RF9RB/VR/UxfUwf18f1CX1Cn9Kn9Gl9Wp/RZ/Q5fU5f0Bf0RX1RX9aXr1z2BTKQgQ50kC/IF8QEMUFsEBvEBXFBwaBgEAkiQXwQHxQKbg4KB0WCokGxICEoHpQITICBDSgIg5JBqSAa3BKUDm4NEoMyQdmgXOCC8kFScFtQIbg9qBjcEVQK7gwqB3cFVYKqQbWgenB3UCO4J6gZ1ApqB/cGdYK6Qb2gfnBf0CC4P2gYPBA0Ch4MGgcPBU2Ch4OmwSNBs+DRoHnwWNAieDxoGTwRtApaB22CtkG7P7W+92eKPOX6mf4mxQwwA81rZpAZbIaYoWaYed0MN2+YEeZNk2pGmlHmLTPavG3GmHfMWDPOjDfvmglmoplkJpspZqpJM++ZaeZ9M918YGaYmWaWmW3SzRwz13xo5pn5ZoH5yCw0H5tFZrFZYpaaDPOJyTTLTJb51Cw3n5lss8KsNKvMarPGrDXrzHqzwWw0m8xms8VsNdvMdvO52WF2ml1mt9lj9pp95guz33xpDpivTI752hw0fzGHzDfmsPnW5JrvzBHzvTlqfjDHzI/muPnJnDAnzSnzszltfjFnzFlzzpw3F8yv5qK5ZC4bf+Xi/srLO2rUmA/zYQzGYCzGYhzGYUEsiBGMYDzGYyEshIWxMBbFopiACVgCS+AVhIQlsSRGMYqlsTQmYiKWxbLo0GESJmEFrIAVsSJWwkpYGStjFayC1bAa3o134z14D9bCWngv3ot1sS7Wx/rYABtgQ2yIjbARNsbG2ASbYFNsis2wGTbH5tgCW2BLbImtsBW2wTbYDtthe2yPHbADdsJO2Bk7YxfsgsmYjF2xK3bDbtgdu2MP7IE9sSf2wl7YB/tgX+yL/bAfpmAKDsSBOAgH4RAcgsNwGA7H4TgCR2AqpuIoHIWjcTSOwTE4FsfheHwXJ+BEnISTcQpOxTRMw2k4DafjdJyBM3AWzsJ0TMe5OBfn4TxcgAtwIS7ERbgIl+ASzMAMzMRMzMIsXI7LMRuzcSWuxNW4GtfiWlyP63EjbsTNuBm34lbcjttxB+7AXbgL9+Ae3If7cD/uxwN4AHMwBw/iQTyEh/AwHsZczMUjeASP4lE8hsfwOB7HE3gCT+EpPI2n8QyewXN4Di/gr3gRL+Fl9BhjpYi119k4e70taG+wMbaA/fu4qC1mE2xxW8IaW9gW+YcYrbWJtowta8tZZ8vbJHvb7+IqtqqtZqvbu20Ne4+t+bu4gb3fNrQP2Eb2QVvf3vcPcWP7kG1iH7dN7RO2mW1tm9u2toV93La0T9hWtrVtY9vazvYZ28U+a5Ptc7arff53caZdZtfbDXaj3WT32y/tOXveHrU/2Av2V9vP9rfD7Ot2uH3DjrBv2lQ78nfxePuunWAn2kl2sp1ip/4unmVn23Q7x861H9p5dv7v4gz7iV1os+wiu9gusUt/i6/0lGU/tcvtZzbbrrAr7Sq72q6xa+26f+91ld1it9ptdp/9wu6wO+0uu9vusXt/i6+cxwH7lc2xX9sj9nt7yH5jD9tjNtd+91t85fyO2R/tcfuTPWFP2lP2Z3va/mLP2LO/nf+Vc//ZXrKXrbeCgCQp0hRQPspPMVSAYuk6iqPrqSDdQBG6keLpJipEN1NhKkJFqRglUHEqQYaQLBGFVJJKUZRuodJ0KyVSGSpL5chReUqi26gC3U4V6Q6qRHdSZbqLqlBVqkbV6W6qQfdQTapFteleqkN1qR7Vp/uoAd1PDekBakQPUmN6iJrQw9SUHqFm9Cg1p8eoBT1OLekJakWtqQ21pXb0JLWnp6gDdaRO9DR1pmeoCz1LyfQcdaXnqRu9QN3pRepBL1FPepl6UW/qQ69QX3qV+lF/SqEBNJBeo0E0mIbQUBpGr9NweoNG0JuUSiNpFL1Fo+ltGkPv0FgaR+PpXZpAE2kSTaYpNJXS6D2aRu/TdPqAZtBMmkWzKZ3m0Fz6kObRfFpAH9FC+pgW0WJaQkspgz6hTFpGWfQpLafPKJtW0EpaRatpDa2ldbSeNtBG2kSbaQttpW20nT6nHbSTdtFu2kN7aR99QfvpSzpAX1EOfU0H6S90iL6hw/Qt5dJ3dIS+p6P0Ax2jH+k4/UQn6CSdop/pNP1CZ+gsnaPzdIF+pYt0iS6TJxFCKEMV6jAI84X5w5iwQBgbXhfGhdeHBcMbwkh4Yxgf3hQWCm8OC4dFwqJhsTAhLB6WCE2IoQ0pDMOSYakwGt4Slg5vDRPDMmHZsFzowvJhUnhbWCG8PawY3hFWCu8MK4d3hVXCquHjD1YP7w5rhPeENcNaYe3w3rBOWDesF9YP7wsbhPeHDcMHwkbhg2HF8KGwSfhw2DR8JGwWPho2Dx8LW4SPhy3DJ8JWYeuwTdg2bBc+GbYPnwo7hB3DTuHTYefwmbBL+GyYHD4Xdg2f/8PjKeGAcGD4Wvha6P0Dakl0aTQj+kk0M7osmhX9NLo8+lk0O7oiujK6Kro6uia6Nrouuj66Iboxuim6ObolujW6Lep9/fzCgZNOOe0Cl8/ldzGugIt117k4d70r6G5wEXeji3c3uULuZlfYFXFFXTGX4Iq7Es44dNaRC11JV8pF3S2utLvVJboyrqwr55wr75JcW9fOtXPt3VOug+voOrmn3dPuGfeMe9Y9655zXd3zrpt7wXV3L7oe7iX3knvZ9XK9XR/3iuvrXnX9XH+X4lLcQDfQDXKD3BA3xA1zw9xwN9yNcCNcqkt1o9woN9qNdmPcGDfWjXXj3Xg3wU1wk9wkN8VNcWkuzU1z09x0N93NcDPcLDfLpbt0N9fNdfPcPLfALXALExe6RW6RW+KWuAyX4TJdpstyWW65W+6yXbZb6Va61W61W+vWuvVuvdvoNrrNbrPb6ra67W672+F2uF1ul9vj9rh9bp/b7/a7A+6Ay3E57qA76A65Q+6w+9bluu/cEfe9O+p+cMfcj+64+8mdcCfdKfezO+1+cWfcWXfOnXcX3K/uorvkLjvv0iLvRaZF3o9Mj3wQmRGZGZkVmR1Jj8yJzI18GJkXmR9ZEPkosjDycWRRZHFkSWRpJCPySSQzsiySFfk0sjzyWSQ7siKyMrIqsjqyJuJ98R2hL+lL+ai/xZf2t/pEX8aX9eW88+V9kr/NV/C3+4r+Dl/J3+kr+7t8FV/VV/NP+Fa+tW/j2/p2/knf3j/lO/iOvpN/2nf2z/gu/lmf7J/zXf3zvpt/wXf3L/oe/iXf07/se/nevo9/xff1r/p+vr9P8QP8QP+aH+QH+yF+qB/mX/fD/Rt+hH/Tp/qRfpR/y4/2b/sx/h0/1o/z4/27foKf6Cf5yX6Kn+rT/Ht+mn/fT/cf+Bl+pp/lZ/t0P8fP9R/6eX6+X+A/8gv9x36RX+yX+KU+w3/iM/0yn+U/9cv9Zz7br/Ar/Sq/2q/xa/06v95v8Bv9Jr/Zb/Fb/Ta/3X/ud/idfpff7ff4vX6f/8Lv91/6A/4rn+O/9gf9X/wh/40/7L/1uf47f8R/74/6H/wx/6M/7n/yJ/xJf8r/7E/7X/wZf9af8+f9Bf+rv+gv+cv8P2uMMcYYY/8t6g+OD/gn35N/W1cMFEJcv7NY7n+subnwX/eDZULniBDiuf49H/23VadOSkrK3x6brURQarEQInI1P5+4Gq8QncQzIll0FBX+aX+DZe8L9Af1o3cKEft3OTHiany1/u3/Sf0nnx6fWTk8F/9f1F8sRGKpqzkFxNX4av2K/0n9Iu3/oP8C36QJ0eHvcuLE1fhq/STxlHheJP/DIxljjDHGGGOMsb8aLKt1/6P75yv35wn6ak5+cTX+o/tzxhhjjDHGGGOMXXsv9u7z7JPJyR2784Y3vOHNv2+u9V8mxhhjjDHG2J/t6kX/te6EMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhjLu/5/fJzYtT5HxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhj7Fr7PwEAAP//SOc8Mw==")
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x40001, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf)

16.270507182s ago: executing program 4 (id=3142):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, 0x0, &(0x7f0000000140)}, 0x1c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = dup(r3)
write$UHID_INPUT(r4, &(0x7f0000002080)={0x2, {"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", 0x1000}}, 0x1006)

14.542049922s ago: executing program 5 (id=3145):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10)
syz_emit_ethernet(0x3a, &(0x7f0000000440)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data}}}}}, 0x0)

14.155408353s ago: executing program 5 (id=3148):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34}]}}]}, 0x68}}, 0x0)

14.069757031s ago: executing program 5 (id=3149):
mkdir(0x0, 0x0)
mkdir(&(0x7f0000000100)='./file1\x00', 0x13b)
syz_io_uring_setup(0x6d8a, &(0x7f0000000300)={0x0, 0x37b2, 0x10100}, &(0x7f0000000180), &(0x7f00000001c0))
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_open_dev$vcsn(&(0x7f0000000180), 0x0, 0x26642)
fsetxattr$security_capability(r0, &(0x7f0000000280), &(0x7f0000000380)=@v2={0x2000000, [{0x6, 0x10}, {0xffffff89, 0x100004}]}, 0x14, 0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbfb, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x8, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_ife={0x48, 0x3, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x0, @empty, 0xd}, 0x1c)
getsockopt$inet6_tcp_buf(r5, 0x6, 0x1a, 0x0, &(0x7f00000001c0)=0xd)
ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect)

11.796074275s ago: executing program 4 (id=3151):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x200000, @empty, 0x1}, 0x1c)
listen(r1, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r3 = accept(r1, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r3, 0x0, 0x1)
r4 = dup(r2)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)

10.291441227s ago: executing program 2 (id=3152):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000780)='./bus\x00', 0x41, &(0x7f0000000c00)={[{@bsdgroups}, {@resgid}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@resuid}, {@auto_da_alloc}, {@noload}, {@jqfmt_vfsv1}]}, 0x64, 0x50a, &(0x7f0000000200)="$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")
syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000080)='./file2\x00', 0x402, &(0x7f0000001280)=ANY=[@ANYRES64=0x0, @ANYRESOCT, @ANYRESOCT, @ANYBLOB="ec1a3881369fae6987d7a6922db874bcb0563edbf212875f142a04bbe14fd11ed31543677ddfbd12a760f13dd2fd476b0d7e088b2ac5eaebe64ab225975b882e26ccc04ae1e56422927a5de974cf1bc2873d781e837bdea83a1a8ff1fc5670132de294b6b2ae993b2d8674257a4a6b3980928a506f800befa5037ecc4c128dc83d62f85d595ab96a009e378894d776a0e83d4c1bbd9cfe6dbf29c3c500000000", @ANYRESOCT, @ANYBLOB="650dff969a08ff9e724d5d7c4ef89e23d56dda29c31665f63ec8a6f772a525c5b7212d46fcdce41a1775bdc7ae8d824d46ff9c67feac09d995afa0aed98ce5381701ee97a11793808dbb0a95927953efd647f04a4d25be7c929451bd4f6a217f6976fe903f0542222969f6d90184c98b67298ed804d7b1b0e667a2c734bec13f27287182ddd1e4f5ecf7"], 0x1, 0x242, &(0x7f0000000e40)="$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")
chdir(&(0x7f0000000380)='./file0\x00')
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
readv(0xffffffffffffffff, &(0x7f00000012c0)=[{&(0x7f0000000040)=""/4096, 0x1000}, {&(0x7f0000001140)=""/107, 0x6b}], 0x2)
getdents64(r5, 0x0, 0x0)

7.78087271s ago: executing program 4 (id=3154):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b23000005"], 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x2, 0x4, 0x4, 0x9, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x50)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d0000000a000000040000000100000000000000"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r5, <r6=>0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r4}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000e80)={r6, &(0x7f0000000d40), 0x0}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r3}, 0x10)
r7 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r8, &(0x7f0000000480), 0x400034f, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000001c0)={[{@noblock_validity}, {@jqfmt_vfsv0}]}, 0x1, 0x445, &(0x7f0000000b00)="$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")
r10 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40)
pwritev2(r10, &(0x7f0000000100)=[{0x0}], 0x1, 0x5405, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r10, 0x0, 0x800000000000000}, 0x18)
mount_setattr(0xffffffffffffffff, 0x0, 0x100, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000180)=0x1, 0x0, 0x4)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="03000000000000007b01"])

6.213138727s ago: executing program 0 (id=3155):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x80000000}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10)
set_robust_list(&(0x7f0000000280)={0x0, 0x401}, 0x18)

6.144353852s ago: executing program 2 (id=3156):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
syz_clone(0xd024100, 0x0, 0x0, 0x0, 0x0, 0x0)
mlock2(&(0x7f0000549000/0x1000)=nil, 0x1000, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
munlockall()
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)

4.547509492s ago: executing program 0 (id=3157):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34}]}}]}, 0x68}}, 0x0)

3.317363091s ago: executing program 4 (id=3158):
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x24)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
ptrace$setregset(0x4205, 0x0, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139ce", 0x4f})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

3.148006175s ago: executing program 0 (id=3159):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, 0x0, &(0x7f0000000040)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
capget(&(0x7f0000000040)={0x20080522}, 0x0)

2.903703105s ago: executing program 5 (id=3160):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000000, &(0x7f0000000440)={[{@nolazytime}, {@orlov}, {@usrjquota}, {@usrjquota}, {@nojournal_checksum}, {@journal_dev={'journal_dev', 0x3d, 0x5}}]}, 0x1, 0x513, &(0x7f0000000c40)="$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")

2.890669046s ago: executing program 0 (id=3161):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000007bd973c00004000000ff000000", @ANYRES32=0x1, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e80)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
clock_nanosleep(0xa, 0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001400)={{r0}, 0x0, &(0x7f00000013c0)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8f0, &(0x7f0000002400)=<r4=>0x0)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x2b, 0x81}]}, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r6 = gettid()
r7 = socket$tipc(0x1e, 0x5, 0x0)
listen(r7, 0x0)
accept4$tipc(r7, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)=<r8=>0x0)
timer_settime(r8, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r9 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'})
io_uring_enter(0xffffffffffffffff, 0x79f4, 0xa913, 0x8, &(0x7f0000000400)={[0x5]}, 0x8)
r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b00"/14], 0x50)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000100000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000800008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r11}, 0x10)
io_submit(r4, 0x3, &(0x7f0000000580)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r3, &(0x7f0000000040)="0000000010cb", 0x6, 0x0, 0x0, 0x2}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3, 0x101, r2, &(0x7f0000002440)="7af9efacdc874467ff9849cad7c580ca34a203f1e06d1f26f73f8eec2281689049b191712f970ebb0854698cd167ad7d33c410984fc2a00a8f1a71527673c895aec7bf031e3e046257d2576d8031e2f23dd8998099898186ecd05bb5fdd237203d906d29440872cd054e39ac1b954d5822ae08d8e0abb20f430fb5903bc307ed879f931a895c7e564e5a0cd21863b56af44a004f39ac7a864938b0c146684d4a1d2534b17201d18465a5876d03f18b2f5abbd126fe3c2fc8fecb53252f14c8e5449d3bb3304beac0fd45e250c799c66666c7df6ca70dae26d8e7e67ed30394d134e62b1aa1f0c1e9a5ac5162b41b906b0bf7aa578697c2f070af607a3ee5e121ad1ffeea141a29b12d1a495fed9944ee56333807a1e37df9786ed4a054ffbae363a7a32faaf1d06d6088b559e28981c7275248f576ba99a86f98214536926962aa431b0ecb604c91ee0db89988a5470ca4513ebe24458fa8397ba3a72ef1a83162cd2a59b2b09828c374ac132fb08eae90780a911146b72ba8fb70c30bf7045ef5b612012c3d4aa53b01d750e11c944c5550cd83e34f17e8d9e4a424c7446e7721f38053c6b515b66db834dc8bd7589662faacdce3b1610896edf917d62c434879b923bb6f3d7e45eeafba04c5db40cd116d7a52f074a8516315c885e2602ff498ab4ec93c042a3bfb963019873c6f151d7aec70b4f8510a577a6816ff8b1a14cce5f12994e7ef539483241f761d849c6e1c5e70939a5a27a3d7a281de20d2b9ce388a175df617851c9b99a73fe14031f970b77388b8def4b25ae23a31b80b36d8f3590226c08dbf544bcf1ae0d94d641dc22894fd8a5ce52702d691bd7d4bc20694fe1b4669ad8f4082457b6dafbcdcd466bf0bc7d2d790675160cf959741d85f21ea39291f01c07f1187422bb8743823064e61c3cc48d9c0ad534dc4aab242131554ebc1e7b16eba30522456aa37ac4fba731add483c0286c96e32aec2f79527d024f0e4567f6756cf9915ad248565f681920466214cc255a43ff5c8cdc8c86ca58704ae6ecbf6ac6fe8e1e898ca243f99fb8776b78b7374ac587681d4868d3a512c5e72857cb7afdfe76b078bba74d09d0cf066c4afed1fe8a854343f02c939a9d08fbb7d5b586c8527691aa4863881ada531240b1def6c031a6daad4b27418248b586449a284a104bd9755c124172e834be099e8b1fd6eb5c50e00c1fafa831cac3cae273b8a007162c42b016ba1f63e9b9ffec36226fd15239a7b27921f84779569fc973f38181dab4259175f682aa81660f4c2c87158a156bed4951b1e7b3e1519c1105e36e67847dbf30bb6569452d37931518febe95ed88116ffdb9a7a7a1426cb7570ff7633dc9de23d70880e326135379c822762c793a50cb2827b1b0982be41b0c688c32cf420125d191e193a286a53c556a4db5094af26570feb17c0edc23c8b6df82ca888e34ed96be887e72d1010d38d13a4a9f6be984ad3332ef4587c2de50a9d9cd9ed6e2f740c1436b3fbc00464cfbe6d340a0aca4a991fe4cf77e2364f4719869d1ca1a91ae9d0ef04943f50b654f9fe091abd226fd6f0fc20acdfc7893c468193d53c2b845d6916e28c3fd7094edf61a2f240e4febb39d98055f99615497fc296bc637bbb598b903beb1e22db8cf293fb58dcfb644d385c84aa3d2182821dbc28bb379722f939e1a4d213a41ef68539bc0a05593ecebcea926d1ae2dee0d06e2fda4530d2dcb0003985dbf8a205d850d60271352315d0a9f86c8b55385c0239ea0abe5e80eaa5816a6b468a8a898636177ab9cbc49f2d336d25ea52053311d42d75eb595e035fa68bdaca0a788ef4c19adb37a6466f93b8abd712668f3ae4e33ebea4e31eb0cab5c0f8be9d7aa75f42dbcfb53bf83d79b9beb8aa2ecf5b7b2e5616f3a2946ed9b9e057ee99c1c2bbc5de139e762fa724211b6306c5cd6e03d8e6752249dce4a78e091013a377765b2e29e8097c2e4d9612e77148bd3261ba64890c0de56b373ce77fb27a04b305b682dc0366372e3071b01b935068c45f2df65092ae9e207b7cbba7644426d27ff1d28237bbf8921c7c558de1813ae0a8f6f79c803606c5dfc4fb86316bde4505dde591c9556cc3f2602895a2827338da1ef6fc195b88948c4079c058604e1eaab5a390a8de53799f66e397842d57e8c170ff7df26ec5821b347f07e7573be2f01d6fadae8bea35f87dd9bbb1a5407a7804279d38bd7417ce7dc61ae10eaee8b79cab76e3ca566599ccd4387e3a6f64026b8c37fce113551657b4e1290c6f847337ccc3053c4ab2808599a6a2947907baef644ec26178e2182f0b4e2b73da53e113accfa50e6d1d10129be7853ef8ae1413351b98187d8942844a0ea775ad8df1cfef6e94d6577f8b1b0c5e61e8c94ccc8c539f7eac8121fe1f75455ae406bcbe5d37100db41d7510789c68872cce62180085a7bf624055fb335fe2cdb88b89bf0a98e9dc6534c2ffb944517fc78127c5c774a2f44510c54f829b13b4c55dff2a6d194ed815c0d6cce8c524fd7ae2d03c66dd5fc740014db3800ab5aa284b4d6efb2d0a834bac933f05c6ec21c9361cb25e4d4af2df5ec6e5f8b65f97a9484553c8db290f6de18ae7777632a637470beaf186b535414b400a1a363f7f09c4f8eb398207f0c8a6b2824ac5d9cc7b11a396486441ae5e9a4e1227117371ac0d08fb7b8a3f8568a7e776d1dae36092031437c4516b73882c1de7c6d293a623b89f0d57ef05d1d310bb03fb4203b9d54409081f250562376bc65844fb644cfbaa8c07926b663df5dc28461f3bd94c20b275bf9644ad335791021c9e81ad7b2ba344be472a6db03b918eec0e1ad02b8bebec432394a4f7c2d06bfee638f6cc847b87dd47a377082c734036ff9e2f631c89bd2d20beabfc77353c52888f2a69234d62c10ee9141bbfd21dca090eeb37e408f3436597ad4089108b573a8cf858ff0f3bfa98ef179f5fa350270d8e59e10ae2236349c4f58597016dcb6138cf92f456f1c18e812f9489bbeaa6eeb1bb6cd6f28669ebb77575b64ac1e60252ac31085d01c105f513cd999392cbebe2c219b127850c2219c2fdfa7f75653cecbcf20f7bbbb1e33b3535caedc5eabcfe51ce1588bb0b9a8eebe7e4292713b7dd6b0f295ab840d5e22b41aceaeb4cf1eb9df8c602647c6ce12dc7b5d8f457516e674c267393886c66e9bca074a214b88607eb74d9b858f462c2852ec4d312371dc146d918ddbc3392287b4f415b870b4599df96d1481330e72224894d7160ac45f9146ad8471b6531cc601aec46b4eff117563786656346b6a8775b15ce5129ecdba4c26dc8fedc4f7413754c0f449c8c0bc0da27d4026e3ae45caf25f2d3c320421e3e0a0c917d979d0a466ece559085354975c492589eed496f96d66e6bb1a45be3b724618196f53ac1214989c6adef7476672410600e4fe8f32b60798b824a796c61f77a4ee84c282fde8567eddc6e92f33a1b66ac38997077810af8e021fb7d5a920e73f48ea17fb48d97ac72d890a9e720cdf000a416918adcfbfc125d655d4a06cffde006ab66966f9d4ec53235cff9503bab57dad8da71e8be5b68e74c2c2aa413e60f47fa339696eac7cf553ad6978be221fce239f560e6159aa0836f92948922d8da7e96251700b294919b859119c6e098de5f126423f11c09e5369c6d42f97c45ad8db467e408e902dc6bfa186690afb1eb92814736e3e14af67d9258903b61041ca6e54211cff05cf271f3845ea7fc382c4f2894144082c156e5baef5996d886a142b3080841b3a078799ddb40ecab68c6184336c4d2ada1c452a5477485a21ea85026ef48967c87861adb2b844e845bc313ddd2c0314b51c925ab01864a2bdcf42e672efa326cb1e792dc67544d18775fac031635fe4e7eaec584c1b245228ef6f6b8e42a1e6fc6e7f5207e0e718bdb1ff9c8a96115e5038bb2ee27df740bed8f93100ea45faea91767381a41b35f1f819e33e118bfbefd7eacc14a00f24322f6df0d7aa14ad1628b8b21685997ee9e45bbac5edbeff409e5ff02d2b88d5a68054448cf05979331c26b3d88e11bb1d4390f4f3996a9dcfc39fa2d40f17f6d6be57ebafc96783f68553c1672ee6183753403c80acc5e415008376a07ef37ef179d5e1c89af018636b047fc1126e0fc3bcc58eb2b641e1004ca6455429eaeb4a945168d57ac10e2f13d505e65229b59a58ce234829e6d884f4aa75cfa6a8f5b16d85bb0e8182effa1e14e5bf4774adc847be177d7c4d1a1d7638beec01f78ae9a0d54e6c5387e88152b9d39fa29d655829d46deab108a97fa48326f8ce006ecd9c46c22f787e77dd2e0fa44e261fadbb8252903878fae588eca13e493ad4f2654ad221de76eaf6b30d50f56a86bcde244c70d7097579d46e4bff1e86b6e2894cfa4f12242cd783dba3c1bcffc23f438b243dd1ebab7c4f3fc180e97682cf502c11b3343e6d08071ab5274d1c4ccd3a06a4e1e731ae3ac12dfebc5ceabfc113a5ef4cb28e00a7ff3d2ec8ec984cecfcfcd76b0c23f7acb0b6b6c4db53f0aa225a9c980bfcf344d20ec70c47cbbd24d60a03bc65dc33a8d5bd86ed0a9efa1849f754c722545528fc97ac13d2bbba166c7886501f0c5289aef56879c3db58b50d07ec62fea801978711a5100672eadcbe174b2518bab97e5204d68d0e5ae80cbf5fdd2c33527428c111d14245ef3db6561b0eda13ee229d33846f78bfbca2c8dd7cfe68d57febafb603f20a77b39e0c6c68500b13952e6bd2d1af55ad108ed8d5bd93a7ff19bb6c6632edadf6ff7ddf904b4c96d9a8458b27cc96c2a42ae712ee1c74553ebc319656d0b635029d91b8c14835f4e155ca58e7df05713bed1b710f696495c991565b50e9e6b0c2d2742eab07f19a12903cfff89d8d2ef6181112938d512bf7fc8d60efccdd6aad6965abc775fb919ba5579104a59e79d056d3a40b9451ef6c3f43c7af6b1158542985024f9d479157cf2a494e0d2b22c451bf3917e65e6818a9fc7afd1a09e84ad6495878b9dd6b25b4e9e297d3c7ea64305dd6174268b40a838bb79d75d9dc736074ad97082df0746d494cadc5cc4711ec982367b390b9e8a571128751a9553807314091153b15d641ccf5bd3c4cb0f679ab28e60d4dae77671d16ed358b82f55fadf4310f920192b02254dc1ac61496c4ffdc9d3c820eb65216bd6855cc3b00da3a94ce606f049db7b7272f4381e48e3d72842e0c2a57c35840b11bf53ffaebc299e9a54bda4baf4f0b2ac99ce8f54789b50d7ba55703ce3f77c0dbac5f3a1eb847649db7cb23079378cca0b14dc6e12028b5c7e9293fdff8bd6eabc9cceb862d241dbab07639211a6a04e5ae176e3313ea98b82ee9fa2f587719766cc617bb014eac25ef416a9c1056bd21a3ded53c3b807bb31541e95828f9cbf16ed00fb6216533d02b0ece803e3c51652462e47b6d78ce94fbcf5054c98635e459e9af02dc0304abee13afc63b3f1017efcb7d3080cc3e588d8839bde7e94417624c4323d14659303132566920d56f1bb3b299eded5c6d440e2bc55406e8e376ad6d0bf3c47b45f79c16a5fce8ef4a41c7de8bf7b3a31811ccd9448479576d2b115df9981c39defc8e073decf1b41392cb5aed1b7aab7f9738f3d9655aab715da73adfe4c5595548b83c20ac03caaf9d626ef36505db3571121cf9ef3939dfad56e6506472d8fa0e0dde1a859a41a54da13b08c8919e23772f564fca7765bafecc5eea30b74295a0a9c8fc9a6c486fa7039bbc3fdc13d239870b49571981368a0f1e7c4", 0x1000, 0x100, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x8, 0xa, r5, &(0x7f00000004c0)="2a62c2a21c8164379e934f825e8bdee97da7117df5cb08381b76daba8e53cd9e4d872d4f59025fa628af375620e9032ad5396b942f47ef89bf7e2f98855ff4b6dfb669beb2d06932904343d4cd2bf96417f14a967d2447343452fdc3a3c8e950a08a1592e4e503cc96edc7f294a869987bf778c23bbc1a4e4a1e691dab6e272c2c1230569ad7fddaf9a99a5e016aab1966059132f4b648dd70706f62", 0x9c, 0x4, 0x0, 0x2}])
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r12=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r12, &(0x7f0000000200)=ANY=[@ANYRES32=r3], 0x15)

2.887141537s ago: executing program 2 (id=3162):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x200000, @empty, 0x1}, 0x1c)
listen(r1, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r3 = accept(r1, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x1)
r4 = dup(r2)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)

2.656929186s ago: executing program 5 (id=3163):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000d80)={[], [{@fsmagic={'fsmagic', 0x3d, 0xe4a3}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_role={'subj_role', 0x3d, '@\\!/./.\xc5:'}}, {@fsname={'fsname', 0x3d, 'nogrpid'}}, {@subj_type={'subj_type', 0x3d, 'discard'}}, {@fsmagic={'fsmagic', 0x3d, 0x7}}, {@euid_gt={'euid>', 0xffffffffffffffff}}, {@uid_lt}, {@dont_appraise}, {@smackfsdef={'smackfsdef', 0x3d, 'iso8859-1'}}, {@obj_role={'obj_role', 0x3d, '$!\xf4'}}, {@dont_hash}]}, 0x0, 0x14f5, &(0x7f0000001580)="$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")
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x40001, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf)

2.626011588s ago: executing program 4 (id=3164):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="000005"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10)
syz_usb_control_io(r0, &(0x7f00000004c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="00000205"], 0x0, 0x0, 0x0, 0x0}, 0x0)

1.571363823s ago: executing program 2 (id=3165):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffc01, 0x0)

1.510277508s ago: executing program 0 (id=3166):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket(0xa, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r3, 0x8918, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x208, 0x1}, 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18)
socket(0x10, 0x803, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
userfaultfd(0x1)
socket$tipc(0x1e, 0x5, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_io_uring_setup(0x4f0e, &(0x7f0000000480)={0x0, 0x0, 0x1}, &(0x7f0000000080), &(0x7f0000000040))

1.412093506s ago: executing program 2 (id=3167):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34}]}}]}, 0x68}}, 0x0)

138.715509ms ago: executing program 0 (id=3168):
mkdir(0x0, 0x0)
mkdir(&(0x7f0000000100)='./file1\x00', 0x13b)
syz_io_uring_setup(0x6d8a, &(0x7f0000000300)={0x0, 0x37b2, 0x10100}, &(0x7f0000000180), &(0x7f00000001c0))
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_open_dev$vcsn(&(0x7f0000000180), 0x0, 0x26642)
fsetxattr$security_capability(r0, &(0x7f0000000280), &(0x7f0000000380)=@v2={0x2000000, [{0x6, 0x10}, {0xffffff89, 0x100004}]}, 0x14, 0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbfb, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x8, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_ife={0x48, 0x3, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x0, @empty, 0xd}, 0x1c)
getsockopt$inet6_tcp_buf(r5, 0x6, 0x1a, 0x0, &(0x7f00000001c0)=0xd)
ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect)

0s ago: executing program 2 (id=3169):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

kernel console output (not intermixed with test programs):

47][ T5790] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  625.227454][ T5790] usb 3-1: config 0 descriptor??
[  625.458484][   T55] usb 3-1: USB disconnect, device number 14
[  626.169778][   T28] audit: type=1326 audit(1755213504.489:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11580 comm="syz.2.1568" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0d2258ebe9 code=0x0
[  629.157802][ T5781] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  629.390636][ T5781] usb 2-1: config 0 has no interfaces?
[  629.467487][ T5781] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  629.478198][ T5781] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  629.490274][ T5781] usb 2-1: config 0 descriptor??
[  629.738704][ T5781] usb 2-1: USB disconnect, device number 15
[  630.576635][   T28] audit: type=1326 audit(1755213508.889:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11629 comm="syz.1.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f964b58ebe9 code=0x7ffc0000
[  630.935859][   T28] audit: type=1326 audit(1755213508.899:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11629 comm="syz.1.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f964b58ebe9 code=0x7ffc0000
[  631.268001][   T28] audit: type=1326 audit(1755213508.929:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11629 comm="syz.1.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f964b58ebe9 code=0x7ffc0000
[  631.454890][   T28] audit: type=1326 audit(1755213508.939:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11629 comm="syz.1.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f964b58ebe9 code=0x7ffc0000
[  631.506377][   T28] audit: type=1326 audit(1755213508.969:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11629 comm="syz.1.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7f964b58ebe9 code=0x7ffc0000
[  631.556079][   T28] audit: type=1326 audit(1755213508.969:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11629 comm="syz.1.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f964b58ebe9 code=0x7ffc0000
[  631.674078][   T28] audit: type=1326 audit(1755213508.989:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11629 comm="syz.1.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f964b58ebe9 code=0x7ffc0000
[  631.760414][   T28] audit: type=1326 audit(1755213508.989:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11629 comm="syz.1.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f964b58ebe9 code=0x7ffc0000
[  631.837390][   T28] audit: type=1326 audit(1755213508.969:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11629 comm="syz.1.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f964b58ebe9 code=0x7ffc0000
[  639.397524][T11712] 9pnet_virtio: no channels available for device syz
[  640.775041][T11723] overlayfs: failed to resolve './file1': -2
[  643.595896][T11752] overlayfs: failed to resolve './file1': -2
[  646.494318][T11789] overlayfs: failed to resolve './file0': -2
[  649.937206][T11824] overlayfs: failed to resolve './file0': -2
[  653.079566][T11859] overlayfs: failed to resolve './file0': -2
[  655.509704][T11888] fuse: Unknown parameter 'group_id00000000000000000000'
[  658.452676][T11930] fuse: Unknown parameter 'group_id00000000000000000000'
[  658.557506][ T5781] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  658.759203][ T5781] usb 4-1: config 0 has no interfaces?
[  658.770367][ T5781] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  658.827442][ T5781] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  658.920306][ T5781] usb 4-1: config 0 descriptor??
[  659.253200][ T5781] usb 4-1: USB disconnect, device number 10
[  661.664843][T11978] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1687'.
[  662.101629][ T5790] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  662.174265][T11989] gre0: entered allmulticast mode
[  662.186725][T11989] gre0: left allmulticast mode
[  662.360918][ T5790] usb 3-1: config 0 has no interfaces?
[  662.459830][ T5790] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  662.821957][ T5790] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  662.898471][ T5790] usb 3-1: config 0 descriptor??
[  663.149416][ T5790] usb 3-1: USB disconnect, device number 15
[  668.053071][T12048] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1708'.
[  673.691343][T12104] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1722'.
[  673.855386][T12104] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  683.322676][T12229] hub 2-0:1.0: USB hub found
[  683.363734][T12229] hub 2-0:1.0: 1 port detected
[  686.004109][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  686.010803][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  693.784175][T12349] 9pnet_virtio: no channels available for device syz
[  698.051267][T12392] 9pnet_virtio: no channels available for device syz
[  709.500230][T12515] 9pnet_virtio: no channels available for device syz
[  718.697784][T12573] 9pnet_virtio: no channels available for device syz
[  718.802473][T12574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1850'.
[  718.834604][T12574] 8021q: adding VLAN 0 to HW filter on device bond0
[  718.844928][T12574] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  719.308763][T12574] syz.0.1850 (12574) used greatest stack depth: 20328 bytes left
[  719.790766][T12583] overlayfs: missing 'lowerdir'
[  723.394782][T12624] 9pnet_virtio: no channels available for device syz
[  724.306466][T12629] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1866'.
[  724.419285][T12629] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  728.090074][T12668] 9pnet_virtio: no channels available for device syz
[  730.544087][T12688] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1881'.
[  732.305865][T12711] 9pnet_virtio: no channels available for device syz
[  733.636050][T12720] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1892'.
[  736.709291][T12749] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1902'.
[  736.793648][T12754] binder: 12753:12754 ioctl 4018620d 0 returned -22
[  738.692651][T12780] 9pnet_virtio: no channels available for device syz
[  739.835827][T12787] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1915'.
[  740.210771][T12794] binder: 12792:12794 ioctl 4018620d 0 returned -22
[  742.841943][T12831] binder: 12830:12831 ioctl 4018620d 0 returned -22
[  743.025381][T12835] 9pnet_virtio: no channels available for device syz
[  744.407738][T12853] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1936'.
[  744.663473][T12860] binder: BINDER_SET_CONTEXT_MGR already set
[  744.675578][T12860] binder: 12859:12860 ioctl 4018620d 200000000040 returned -16
[  746.983442][T12896] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1948'.
[  747.441366][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  747.447866][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  747.574018][T12900] binder: BINDER_SET_CONTEXT_MGR already set
[  747.582169][T12900] binder: 12899:12900 ioctl 4018620d 200000000040 returned -16
[  752.337544][T12947] binder: BINDER_SET_CONTEXT_MGR already set
[  752.347818][T12947] binder: 12945:12947 ioctl 4018620d 200000000040 returned -16
[  756.493323][T12979] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1969'.
[  757.828645][T12989] hub 2-0:1.0: USB hub found
[  757.838242][T12989] hub 2-0:1.0: 1 port detected
[  761.294205][T13045] hub 2-0:1.0: USB hub found
[  761.301982][T13045] hub 2-0:1.0: 1 port detected
[  765.436303][T13087] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1999'.
[  765.604738][T13087] lo: entered promiscuous mode
[  765.639098][T13087] lo: entered allmulticast mode
[  766.054517][T13087] tunl0: entered promiscuous mode
[  766.060465][T13087] tunl0: entered allmulticast mode
[  766.069615][T13087] gre0: entered promiscuous mode
[  766.115489][T13087] gre0: entered allmulticast mode
[  766.285351][T13087] gretap0: entered promiscuous mode
[  766.317976][T13087] gretap0: entered allmulticast mode
[  766.327074][T13096] hub 2-0:1.0: USB hub found
[  766.333365][T13087] erspan0: entered promiscuous mode
[  766.339854][T13096] hub 2-0:1.0: 1 port detected
[  766.347083][T13087] erspan0: entered allmulticast mode
[  766.620628][T13087] ip_vti0: entered promiscuous mode
[  766.625984][T13087] ip_vti0: entered allmulticast mode
[  767.020685][T13087] ip6_vti0: entered promiscuous mode
[  767.054878][T13087] ip6_vti0: entered allmulticast mode
[  767.156710][T13087] sit0: entered promiscuous mode
[  767.164209][T13087] sit0: entered allmulticast mode
[  767.180681][T13087] ip6tnl0: entered promiscuous mode
[  767.186545][T13087] ip6tnl0: entered allmulticast mode
[  767.200310][T13087] ip6gre0: entered promiscuous mode
[  767.206375][T13087] ip6gre0: entered allmulticast mode
[  767.217012][T13087] syz_tun: entered promiscuous mode
[  767.223503][T13087] syz_tun: entered allmulticast mode
[  767.233358][T13087] ip6gretap0: entered promiscuous mode
[  767.239561][T13087] ip6gretap0: entered allmulticast mode
[  767.249051][T13087] bridge0: entered promiscuous mode
[  767.298587][T13087] bridge0: entered allmulticast mode
[  767.312413][T13087] vcan0: entered promiscuous mode
[  767.336217][T13087] vcan0: entered allmulticast mode
[  767.365061][T13087] bond0: entered promiscuous mode
[  767.386991][T13087] bond_slave_0: entered promiscuous mode
[  767.423511][T13087] bond_slave_1: entered promiscuous mode
[  767.449288][T13087] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode
[  767.489774][T13087] bond0: entered allmulticast mode
[  767.535650][T13087] bond_slave_0: entered allmulticast mode
[  767.555194][T13087] bond_slave_1: entered allmulticast mode
[  767.590512][T13087] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  767.628440][T13087] team0: entered promiscuous mode
[  767.693334][T13087] team_slave_0: entered promiscuous mode
[  767.745598][T13087] team_slave_1: entered promiscuous mode
[  767.796149][T13087] team0: entered allmulticast mode
[  767.863881][T13087] team_slave_0: entered allmulticast mode
[  767.874671][T13087] team_slave_1: entered allmulticast mode
[  767.898475][T13087] dummy0: entered promiscuous mode
[  767.904724][T13087] dummy0: entered allmulticast mode
[  767.948571][T13087] nlmon0: entered promiscuous mode
[  767.959867][T13087] nlmon0: entered allmulticast mode
[  767.980882][T13087] caif0: entered promiscuous mode
[  767.987100][T13087] caif0: entered allmulticast mode
[  767.995923][T13087] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  769.909590][T13130] TCP: TCP_TX_DELAY enabled
[  770.421291][T13145] kvm: kvm [13144]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc1) = 0x1
[  770.430361][T13145] kvm: kvm [13144]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc2) = 0x1
[  770.442869][T13145] kvm: kvm [13144]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0xbe702112
[  770.455237][T13145] kvm: kvm [13144]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x186) = 0x1
[  770.464855][T13145] kvm: kvm [13144]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x187) = 0x1
[  770.476172][T13145] kvm_intel: kvm [13144]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x1d9) = 0x1
[  786.209587][   T28] audit: type=1326 audit(1755213664.529:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13391 comm="syz.0.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4dbb8ebe9 code=0x7ffc0000
[  786.312336][T13395] hub 2-0:1.0: USB hub found
[  786.319267][T13395] hub 2-0:1.0: 1 port detected
[  786.352761][   T28] audit: type=1326 audit(1755213664.529:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13391 comm="syz.0.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4dbb8ebe9 code=0x7ffc0000
[  786.376043][   T28] audit: type=1326 audit(1755213664.539:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13391 comm="syz.0.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4dbb8ebe9 code=0x7ffc0000
[  786.402528][   T28] audit: type=1326 audit(1755213664.539:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13391 comm="syz.0.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4dbb8ebe9 code=0x7ffc0000
[  786.869979][   T28] audit: type=1326 audit(1755213664.539:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13391 comm="syz.0.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4dbb8ebe9 code=0x7ffc0000
[  786.942038][   T28] audit: type=1326 audit(1755213664.559:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13391 comm="syz.0.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7ff4dbb8ebe9 code=0x7ffc0000
[  786.981664][   T28] audit: type=1326 audit(1755213664.559:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13391 comm="syz.0.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4dbb8ebe9 code=0x7ffc0000
[  787.006702][   T28] audit: type=1326 audit(1755213664.569:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13391 comm="syz.0.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4dbb8ebe9 code=0x7ffc0000
[  787.038077][   T28] audit: type=1326 audit(1755213664.579:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13391 comm="syz.0.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4dbb8ebe9 code=0x7ffc0000
[  787.065322][   T28] audit: type=1326 audit(1755213664.579:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13391 comm="syz.0.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4dbb8ebe9 code=0x7ffc0000
[  788.195960][T13412] binder: BINDER_SET_CONTEXT_MGR already set
[  788.227276][T13412] binder: 13409:13412 ioctl 4018620d 200000004a80 returned -16
[  792.916995][T13482] binder: 13481:13482 ioctl 4018620d 0 returned -22
[  794.793930][T13490] hub 2-0:1.0: USB hub found
[  794.812718][T13490] hub 2-0:1.0: 1 port detected
[  795.488420][T13513] binder: 13510:13513 ioctl c0306201 0 returned -14
[  795.713457][T13519] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2120'.
[  800.297105][T13550] binder: 13549:13550 ioctl c0306201 0 returned -14
[  800.595811][T13560] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2133'.
[  800.632192][T13561] fuse: Bad value for 'fd'
[  801.800017][T13559] binder: BINDER_SET_CONTEXT_MGR already set
[  802.453505][T13559] binder: 13558:13559 ioctl 4018620d 200000004a80 returned -16
[  808.891122][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  809.008523][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  810.946837][T13665] hub 2-0:1.0: USB hub found
[  810.953581][T13665] hub 2-0:1.0: 1 port detected
[  824.894789][T13850] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2208'.
[  825.112449][T13850] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  827.673276][T13889] hub 2-0:1.0: USB hub found
[  827.708137][T13889] hub 2-0:1.0: 1 port detected
[  828.858393][T13895] binder: BINDER_SET_CONTEXT_MGR already set
[  828.864835][T13895] binder: 13892:13895 ioctl 4018620d 200000000040 returned -16
[  828.881639][T13895] binder: 13892:13895 ioctl c0306201 0 returned -14
[  831.062363][T13915] 9pnet_virtio: no channels available for device syz
[  834.950072][T13983] 9pnet_virtio: no channels available for device syz
[  835.718979][ T5781] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  835.939974][ T5781] usb 1-1: unable to read config index 0 descriptor/start: -61
[  835.956638][ T5781] usb 1-1: can't read configurations, error -61
[  836.147456][ T5781] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  836.381317][ T5781] usb 1-1: unable to read config index 0 descriptor/start: -61
[  836.465000][ T5781] usb 1-1: can't read configurations, error -61
[  836.565283][ T5781] usb usb1-port1: attempt power cycle
[  837.059142][ T5781] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  837.227894][T14020] mmap: syz.3.2263 (14020) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  837.306385][ T5781] usb 1-1: unable to read config index 0 descriptor/start: -61
[  837.330320][ T5781] usb 1-1: can't read configurations, error -61
[  837.577702][ T5781] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  837.630364][ T5781] usb 1-1: unable to read config index 0 descriptor/start: -61
[  837.698940][ T5781] usb 1-1: can't read configurations, error -61
[  838.192784][ T5781] usb usb1-port1: unable to enumerate USB device
[  841.442977][T14062] hub 2-0:1.0: USB hub found
[  841.457838][T14062] hub 2-0:1.0: 1 port detected
[  843.864788][T14095] hub 2-0:1.0: USB hub found
[  843.870716][T14095] hub 2-0:1.0: 1 port detected
[  845.058177][T14114] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2289'.
[  846.638649][T14139] hub 2-0:1.0: USB hub found
[  846.657884][T14139] hub 2-0:1.0: 1 port detected
[  847.472524][T14149] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2298'.
[  848.263625][T14171] hub 2-0:1.0: USB hub found
[  848.270965][T14171] hub 2-0:1.0: 1 port detected
[  849.952113][T14187] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2308'.
[  851.669093][T14216] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  851.699677][T14216] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  851.710937][T14216] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  851.727093][T14216] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  851.736387][T14216] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  851.743952][T14216] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  851.770949][ T5792] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  851.780145][ T5792] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  851.787912][ T5792] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  851.799402][ T5792] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  851.807212][ T5792] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  851.814740][ T5792] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  851.894887][T14218] hub 2-0:1.0: USB hub found
[  851.901576][T14218] hub 2-0:1.0: 1 port detected
[  852.410345][T14225] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2317'.
[  852.502744][ T7326] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  853.091514][ T7326] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  853.150865][T14212] chnl_net:caif_netlink_parms(): no params data found
[  853.178079][ T7326] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  853.325575][ T7326] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  853.924474][T14212] bridge0: port 1(bridge_slave_0) entered blocking state
[  853.933436][T14212] bridge0: port 1(bridge_slave_0) entered disabled state
[  853.953606][T14212] bridge_slave_0: entered allmulticast mode
[  853.961769][T14212] bridge_slave_0: entered promiscuous mode
[  853.993371][T14212] bridge0: port 2(bridge_slave_1) entered blocking state
[  854.417447][T14212] bridge0: port 2(bridge_slave_1) entered disabled state
[  854.448627][T14212] bridge_slave_1: entered allmulticast mode
[  854.459504][T14212] bridge_slave_1: entered promiscuous mode
[  854.644822][T14212] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  854.709894][T14212] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  854.955488][T14265] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2326'.
[  855.039530][T14212] team0: Port device team_slave_0 added
[  855.068195][ T7326] tipc: Left network mode
[  855.075107][T14212] team0: Port device team_slave_1 added
[  855.250016][T14212] batman_adv: batadv0: Adding interface: batadv_slave_0
[  855.282565][T14212] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  855.308907][T14212] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  855.805629][T14212] batman_adv: batadv0: Adding interface: batadv_slave_1
[  855.833589][T14212] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  855.877123][T14212] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  856.094416][T14275] hub 2-0:1.0: USB hub found
[  856.118434][T14275] hub 2-0:1.0: 1 port detected
[  856.283233][T14212] hsr_slave_0: entered promiscuous mode
[  856.355558][T14212] hsr_slave_1: entered promiscuous mode
[  856.364287][T14212] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  856.379981][T14212] Cannot create hsr debugfs directory
[  858.142180][T14301] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2335'.
[  858.405000][ T7326] bond0: (slave wlan1): Releasing backup interface
[  858.785217][T14212] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  858.826197][T14212] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  859.452060][ T7326] hsr_slave_0: left promiscuous mode
[  860.095237][ T7326] hsr_slave_1: left promiscuous mode
[  860.159862][ T7326] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  860.186236][ T7326] batman_adv: batadv0: Removing interface: batadv_slave_0
[  860.208208][ T7326] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  860.225815][ T7326] batman_adv: batadv0: Removing interface: batadv_slave_1
[  860.237211][ T7326] bridge_slave_1: left allmulticast mode
[  860.559735][ T7326] bridge_slave_1: left promiscuous mode
[  860.590778][ T7326] bridge0: port 2(bridge_slave_1) entered disabled state
[  860.653948][ T7326] bridge_slave_0: left allmulticast mode
[  860.670522][ T7326] bridge_slave_0: left promiscuous mode
[  860.688346][ T7326] bridge0: port 1(bridge_slave_0) entered disabled state
[  860.820336][ T7326] veth1_macvtap: left promiscuous mode
[  860.832480][ T7326] veth0_macvtap: left promiscuous mode
[  860.850238][ T7326] veth1_vlan: left promiscuous mode
[  860.861161][ T7326] veth0_vlan: left promiscuous mode
[  861.076460][T14330] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2343'.
[  862.629385][ T7326] bond4 (unregistering): Released all slaves
[  862.897493][ T7326] bond3 (unregistering): Released all slaves
[  863.276870][ T7326] bond2 (unregistering): Released all slaves
[  863.793341][ T7326] bond1 (unregistering): Released all slaves
[  865.367083][ T7326] team0 (unregistering): Port device team_slave_1 removed
[  865.448378][ T7326] team0 (unregistering): Port device team_slave_0 removed
[  865.505229][ T7326] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  865.575487][ T7326] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  866.516400][ T7326] bond0 (unregistering): Released all slaves
[  866.756150][T14212] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  866.784121][T14212] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  868.001640][T14212] 8021q: adding VLAN 0 to HW filter on device bond0
[  868.021901][T14212] 8021q: adding VLAN 0 to HW filter on device team0
[  868.043595][ T7324] bridge0: port 1(bridge_slave_0) entered blocking state
[  868.050780][ T7324] bridge0: port 1(bridge_slave_0) entered forwarding state
[  868.096496][ T7324] bridge0: port 2(bridge_slave_1) entered blocking state
[  868.103746][ T7324] bridge0: port 2(bridge_slave_1) entered forwarding state
[  870.188374][T14212] 8021q: adding VLAN 0 to HW filter on device batadv0
[  870.319890][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  870.326509][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  870.511435][T14212] veth0_vlan: entered promiscuous mode
[  870.549093][T14212] veth1_vlan: entered promiscuous mode
[  870.606462][T14212] veth0_macvtap: entered promiscuous mode
[  870.652436][T14212] veth1_macvtap: entered promiscuous mode
[  870.680813][T14212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  870.694344][T14212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  870.709382][T14212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  870.725265][T14212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  870.744362][T14212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  870.757969][T14212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  870.774730][T14212] batman_adv: batadv0: Interface activated: batadv_slave_0
[  870.835815][T14212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  870.853391][T14212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  870.864922][T14212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  870.879477][T14212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  870.893995][T14212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  870.925144][T14212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  870.993662][T14212] batman_adv: batadv0: Interface activated: batadv_slave_1
[  871.015538][T14212] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  871.026196][T14212] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  871.047000][T14212] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  871.114465][T14212] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  871.262546][ T7326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  871.301347][ T7326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  871.410199][ T1098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  871.430113][ T1098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  873.215144][T14216] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  873.242516][T14216] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  873.263903][T14216] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  873.311878][T14216] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  873.323595][T14216] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  873.336142][T14216] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  874.788326][ T6795] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  875.164693][ T6795] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  875.350609][ T6795] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  875.457651][T14216] Bluetooth: hci0: command tx timeout
[  875.654019][ T6795] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  875.756382][T14470] chnl_net:caif_netlink_parms(): no params data found
[  876.680619][T14470] bridge0: port 1(bridge_slave_0) entered blocking state
[  876.739112][T14470] bridge0: port 1(bridge_slave_0) entered disabled state
[  876.784978][T14470] bridge_slave_0: entered allmulticast mode
[  877.117610][T14470] bridge_slave_0: entered promiscuous mode
[  877.287885][T14470] bridge0: port 2(bridge_slave_1) entered blocking state
[  877.321894][T14470] bridge0: port 2(bridge_slave_1) entered disabled state
[  877.329889][T14470] bridge_slave_1: entered allmulticast mode
[  877.337160][T14470] bridge_slave_1: entered promiscuous mode
[  877.517812][T14216] Bluetooth: hci0: command tx timeout
[  878.257688][ T6795] tipc: Left network mode
[  878.292398][T14470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  878.315106][T14470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  878.484215][T14470] team0: Port device team_slave_0 added
[  878.495262][T14470] team0: Port device team_slave_1 added
[  878.639709][T14470] batman_adv: batadv0: Adding interface: batadv_slave_0
[  878.651103][T14470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  878.679122][T14470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  878.732645][T14470] batman_adv: batadv0: Adding interface: batadv_slave_1
[  878.743052][T14470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  878.775097][T14470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  879.034428][T14470] hsr_slave_0: entered promiscuous mode
[  879.056024][T14470] hsr_slave_1: entered promiscuous mode
[  879.082693][T14470] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  879.094850][T14470] Cannot create hsr debugfs directory
[  879.598604][T14216] Bluetooth: hci0: command tx timeout
[  881.396496][ T6795] bond0: (slave wlan1): Releasing backup interface
[  881.687455][T14216] Bluetooth: hci0: command tx timeout
[  881.713173][ T6795] hsr_slave_0: left promiscuous mode
[  881.731997][ T6795] hsr_slave_1: left promiscuous mode
[  881.740868][ T6795] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  881.748732][ T6795] batman_adv: batadv0: Removing interface: batadv_slave_0
[  881.758635][ T6795] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  881.766172][ T6795] batman_adv: batadv0: Removing interface: batadv_slave_1
[  881.820211][ T6795] bridge_slave_1: left allmulticast mode
[  881.843598][ T6795] bridge_slave_1: left promiscuous mode
[  881.859437][ T6795] bridge0: port 2(bridge_slave_1) entered disabled state
[  881.926373][ T6795] bridge_slave_0: left allmulticast mode
[  881.964525][ T6795] bridge_slave_0: left promiscuous mode
[  882.005715][ T6795] bridge0: port 1(bridge_slave_0) entered disabled state
[  882.193656][ T6795] veth1_macvtap: left promiscuous mode
[  882.208204][ T6795] veth0_macvtap: left promiscuous mode
[  882.222606][ T6795] veth1_vlan: left promiscuous mode
[  882.229488][ T6795] veth0_vlan: left promiscuous mode
[  884.579371][ T6795] bond1 (unregistering): Released all slaves
[  886.210748][ T6795] team0 (unregistering): Port device team_slave_1 removed
[  886.530985][ T6795] team0 (unregistering): Port device team_slave_0 removed
[  887.723272][ T6795] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  887.811972][ T6795] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  888.462416][ T6795] team0 (unregistering): Port device dummy0 removed
[  889.166933][ T6795] bond0 (unregistering): Released all slaves
[  890.340444][T14470] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  890.391466][T14470] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  890.428773][T14470] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  890.463653][T14470] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  891.540943][T14470] 8021q: adding VLAN 0 to HW filter on device bond0
[  891.635817][T14470] 8021q: adding VLAN 0 to HW filter on device team0
[  891.651854][T13763] bridge0: port 1(bridge_slave_0) entered blocking state
[  891.660000][T13763] bridge0: port 1(bridge_slave_0) entered forwarding state
[  891.731119][T14675] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2430'.
[  892.989009][T13763] bridge0: port 2(bridge_slave_1) entered blocking state
[  892.996473][T13763] bridge0: port 2(bridge_slave_1) entered forwarding state
[  893.033501][T14470] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  893.045607][T14470] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  894.424680][T14470] 8021q: adding VLAN 0 to HW filter on device batadv0
[  894.472413][T14470] veth0_vlan: entered promiscuous mode
[  894.526573][T14470] veth1_vlan: entered promiscuous mode
[  895.594452][T14470] veth0_macvtap: entered promiscuous mode
[  895.641923][T14470] veth1_macvtap: entered promiscuous mode
[  895.692016][T14470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  895.818800][T14470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  896.201506][T14470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  896.238329][T14470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  896.276513][T14470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  896.329949][T14470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  896.357738][T14470] batman_adv: batadv0: Interface activated: batadv_slave_0
[  896.412601][T14470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  896.427634][T14470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  896.437720][T14470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  896.448439][T14470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  896.461252][T14470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  896.487552][T14470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  896.500294][T14470] batman_adv: batadv0: Interface activated: batadv_slave_1
[  896.603077][T14470] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  896.614924][T14470] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  896.666925][T14470] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  896.696609][T14470] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  896.920517][ T7326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  896.941775][ T7326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  897.146636][ T7326] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  897.155375][ T7326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  898.627677][T14751] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2450'.
[  898.797947][T14751] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  899.239756][ T5792] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  899.365241][ T5792] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  899.387133][ T5792] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  899.445117][ T5792] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  899.459221][ T5792] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  899.467181][ T5792] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  899.489975][T14216] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  899.499503][T14216] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  899.507259][T14216] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  899.518949][T14216] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  899.527166][T14216] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  899.540287][T14216] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  899.952320][T14620] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  900.533481][T14620] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  900.618727][T14620] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  900.635205][T14756] chnl_net:caif_netlink_parms(): no params data found
[  900.694889][T14620] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  900.750138][T14756] bridge0: port 1(bridge_slave_0) entered blocking state
[  900.758056][T14756] bridge0: port 1(bridge_slave_0) entered disabled state
[  900.765844][T14774] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  900.766249][T14756] bridge_slave_0: entered allmulticast mode
[  900.779555][T14756] bridge_slave_0: entered promiscuous mode
[  900.784254][T14774] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  900.795331][T14756] bridge0: port 2(bridge_slave_1) entered blocking state
[  900.804120][T14756] bridge0: port 2(bridge_slave_1) entered disabled state
[  900.812373][T14756] bridge_slave_1: entered allmulticast mode
[  900.819547][T14756] bridge_slave_1: entered promiscuous mode
[  900.833231][T14774] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  900.956384][T14756] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  901.478908][T14756] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  901.675882][T14756] team0: Port device team_slave_0 added
[  901.703197][T14756] team0: Port device team_slave_1 added
[  901.772246][T14756] batman_adv: batadv0: Adding interface: batadv_slave_0
[  901.800524][T14756] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  901.840614][T14756] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  901.871996][T14756] batman_adv: batadv0: Adding interface: batadv_slave_1
[  901.881099][T14756] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  901.921765][T14756] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  901.946390][T14620] tipc: Left network mode
[  902.091013][T14756] hsr_slave_0: entered promiscuous mode
[  902.133144][T14756] hsr_slave_1: entered promiscuous mode
[  902.849353][T14812] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2466'.
[  902.977198][T14812] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  904.235096][T14620] bond0: (slave wlan1): Releasing backup interface
[  904.251423][T14620] mac80211_hwsim hwsim5 wlan1 (unregistering): left promiscuous mode
[  904.263932][T14620] mac80211_hwsim hwsim5 wlan1 (unregistering): left allmulticast mode
[  904.391446][T14756] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  904.414339][T14756] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  904.431549][T14756] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  904.456196][T14756] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  904.501437][T14620] hsr_slave_0: left promiscuous mode
[  904.625658][T14620] hsr_slave_1: left promiscuous mode
[  904.645759][T14620] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  904.664666][T14620] batman_adv: batadv0: Removing interface: batadv_slave_0
[  904.678728][T14620] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  905.537655][T14620] batman_adv: batadv0: Removing interface: batadv_slave_1
[  905.588083][T14620] bridge_slave_1: left allmulticast mode
[  905.611114][T14620] bridge_slave_1: left promiscuous mode
[  905.617899][T14620] bridge0: port 2(bridge_slave_1) entered disabled state
[  905.633298][T14620] bridge_slave_0: left allmulticast mode
[  905.641199][T14620] bridge_slave_0: left promiscuous mode
[  905.704061][T14620] bridge0: port 1(bridge_slave_0) entered disabled state
[  905.901589][T14620] veth1_macvtap: left promiscuous mode
[  905.927465][T14620] veth0_macvtap: left promiscuous mode
[  905.934903][T14620] veth1_vlan: left promiscuous mode
[  905.983107][T14620] veth0_vlan: left promiscuous mode
[  907.293621][T14620] bond2 (unregistering): Released all slaves
[  907.450735][T14620] bond1 (unregistering): Released all slaves
[  907.999640][T14620] team_slave_1 (unregistering): left promiscuous mode
[  908.008717][T14620] team_slave_1 (unregistering): left allmulticast mode
[  908.019431][T14620] team0 (unregistering): Port device team_slave_1 removed
[  908.066471][T14620] team_slave_0 (unregistering): left promiscuous mode
[  908.074478][T14620] team_slave_0 (unregistering): left allmulticast mode
[  908.084708][T14620] team0 (unregistering): Port device team_slave_0 removed
[  908.135248][T14620] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  908.144901][T14620] bond_slave_1 (unregistering): left promiscuous mode
[  908.152330][T14620] bond_slave_1 (unregistering): left allmulticast mode
[  908.194588][T14620] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  908.204377][T14620] bond_slave_0 (unregistering): left promiscuous mode
[  908.211689][T14620] bond_slave_0 (unregistering): left allmulticast mode
[  908.717528][T14620] bond0 (unregistering): Released all slaves
[  908.978520][T14756] 8021q: adding VLAN 0 to HW filter on device bond0
[  909.190676][T14756] 8021q: adding VLAN 0 to HW filter on device team0
[  909.213332][T13562] bridge0: port 1(bridge_slave_0) entered blocking state
[  909.220539][T13562] bridge0: port 1(bridge_slave_0) entered forwarding state
[  909.333562][T14872] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2478'.
[  909.477948][T14872] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  909.506404][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  909.513743][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  911.092410][T14756] 8021q: adding VLAN 0 to HW filter on device batadv0
[  911.310017][T14756] veth0_vlan: entered promiscuous mode
[  911.370221][T14756] veth1_vlan: entered promiscuous mode
[  911.578770][T14756] veth0_macvtap: entered promiscuous mode
[  911.596777][T14756] veth1_macvtap: entered promiscuous mode
[  911.633011][T14756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  911.650403][T14756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  911.663211][T14756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  911.678656][T14756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  911.691556][T14756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  911.737539][T14756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  911.764940][T14756] batman_adv: batadv0: Interface activated: batadv_slave_0
[  911.794206][T14756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  911.805171][T14756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  911.816530][T14756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  911.827860][T14756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  911.839327][T14756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  911.850563][T14756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  911.880188][T14756] batman_adv: batadv0: Interface activated: batadv_slave_1
[  911.901215][T14756] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  911.910597][T14756] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  911.935764][T14756] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  911.945262][T14756] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  912.089926][T13763] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  912.106212][T13763] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  912.220424][T13763] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  912.251499][T13763] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  913.740905][ T5792] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  913.751363][ T5792] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  913.760818][ T5792] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  913.787264][ T5792] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  913.796440][ T5792] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  913.805094][ T5792] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  913.825714][T14216] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  913.833179][T14216] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  913.840897][T14216] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  913.848817][T14216] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  913.856436][T14216] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  913.863880][T14216] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  914.170201][T14620] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  914.328204][T14620] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  915.159121][T14620] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  915.211163][T14953] chnl_net:caif_netlink_parms(): no params data found
[  915.301000][T14620] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  915.425464][T14984] usb usb7: usbfs: process 14984 (syz.3.2509) did not claim interface 0 before use
[  915.498195][T14953] bridge0: port 1(bridge_slave_0) entered blocking state
[  915.505370][T14953] bridge0: port 1(bridge_slave_0) entered disabled state
[  915.515931][T14953] bridge_slave_0: entered allmulticast mode
[  915.523679][T14953] bridge_slave_0: entered promiscuous mode
[  915.562789][T14953] bridge0: port 2(bridge_slave_1) entered blocking state
[  915.572421][T14953] bridge0: port 2(bridge_slave_1) entered disabled state
[  915.585372][T14953] bridge_slave_1: entered allmulticast mode
[  915.598652][T14953] bridge_slave_1: entered promiscuous mode
[  915.664457][T14620] tipc: Left network mode
[  915.681038][T14953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  915.708330][T14953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  915.993823][T14953] team0: Port device team_slave_0 added
[  916.140001][T14953] team0: Port device team_slave_1 added
[  916.310645][T14953] batman_adv: batadv0: Adding interface: batadv_slave_0
[  916.334707][T14953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  916.403951][T14953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  916.469870][T14953] batman_adv: batadv0: Adding interface: batadv_slave_1
[  916.491016][T14953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  916.619860][T14953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  917.612011][T14953] hsr_slave_0: entered promiscuous mode
[  917.623745][T14953] hsr_slave_1: entered promiscuous mode
[  917.638329][T14953] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  917.647053][T14953] Cannot create hsr debugfs directory
[  917.780174][T14620] bond0: (slave wlan1): Releasing backup interface
[  919.665414][T14620] hsr_slave_0: left promiscuous mode
[  919.812598][T14620] hsr_slave_1: left promiscuous mode
[  919.846873][T14620] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  920.484244][T14620] batman_adv: batadv0: Removing interface: batadv_slave_0
[  920.518179][T14620] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  920.525676][T14620] batman_adv: batadv0: Removing interface: batadv_slave_1
[  920.791517][T14620] veth1_macvtap: left promiscuous mode
[  920.799721][T14620] veth0_macvtap: left promiscuous mode
[  920.805398][T14620] veth1_vlan: left promiscuous mode
[  920.811964][T14620] veth0_vlan: left promiscuous mode
[  921.098392][T15046] hub 2-0:1.0: USB hub found
[  921.104380][T15046] hub 2-0:1.0: 1 port detected
[  923.921425][T14620] bond2 (unregistering): Released all slaves
[  925.224522][T14620] bond1 (unregistering): Released all slaves
[  929.722521][T14620] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  929.827552][T14620] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  929.945245][T15127] 9pnet_virtio: no channels available for device syz
[  930.454563][T15129] loop1: detected capacity change from 0 to 32768
[  930.529807][T15129] syz.1.2553: attempt to access beyond end of device
[  930.529807][T15129] loop1: rw=1, sector=4701696, nr_sectors = 8 limit=32768
[  930.544050][T15129] metapage_write_end_io: I/O error
[  930.550653][T15129] ERROR: (device loop1): diWrite: ixpxd invalid
[  930.550653][T15129] 
[  930.562240][T15129] ERROR: (device loop1): remounting filesystem as read-only
[  930.570442][T15129] ERROR: (device loop1): txCommit: 
[  930.570442][T15129] 
[  930.588272][T15129] blkno = 8f7c0, nblocks = 1
[  930.597170][T15129] ERROR: (device loop1): dbUpdatePMap: blocks are outside the map
[  930.597170][T15129] 
[  930.610519][T15129] ERROR: (device loop1): dbAllocNext: Corrupt dmap page
[  930.610519][T15129] 
[  930.620412][T15129] ialloc: diAlloc returned -5!
[  930.708822][T14212] syz-executor: attempt to access beyond end of device
[  930.708822][T14212] loop1: rw=1, sector=4701696, nr_sectors = 8 limit=32768
[  930.725951][T14212] metapage_write_end_io: I/O error
[  931.846382][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  931.855967][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  932.032202][T14620] bond0 (unregistering): Released all slaves
[  933.808210][T14953] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  933.843242][T14953] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  933.987214][T14953] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  934.013736][T14953] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  934.249400][T15155] hub 2-0:1.0: USB hub found
[  934.256388][T15155] hub 2-0:1.0: 1 port detected
[  934.390513][T14953] 8021q: adding VLAN 0 to HW filter on device bond0
[  934.455564][T15145] loop2: detected capacity change from 0 to 32768
[  934.546938][T14953] 8021q: adding VLAN 0 to HW filter on device team0
[  934.615442][T15145] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  934.651915][T14620] bridge0: port 1(bridge_slave_0) entered blocking state
[  934.659103][T14620] bridge0: port 1(bridge_slave_0) entered forwarding state
[  934.709216][T14620] bridge0: port 2(bridge_slave_1) entered blocking state
[  934.716325][T14620] bridge0: port 2(bridge_slave_1) entered forwarding state
[  934.973810][T15145] XFS (loop2): Ending clean mount
[  935.576171][T14953] 8021q: adding VLAN 0 to HW filter on device batadv0
[  935.609104][ T5878] XFS (loop2): Metadata CRC error detected at xfs_rmapbt_read_verify+0x42/0xd0, xfs_rmapbt block 0x14 
[  935.628295][ T5878] XFS (loop2): Unmount and run xfs_repair
[  935.634182][ T5878] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[  935.642301][ T5878] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff  RMB3............
[  935.652674][ T5878] 00000010: 00 a7 50 00 00 00 00 14 00 00 00 01 00 00 00 80  ..P.............
[  935.663056][ T5878] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91  ..G...N..b..1...
[  935.674849][ T5878] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01  ....[.;.........
[  935.685017][ T5878] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00  ................
[  935.697009][ T5878] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb  ................
[  935.698103][T14470] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  935.706515][ T5878] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02  ................
[  935.724218][ T5878] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00  ................
[  935.734109][T14953] veth0_vlan: entered promiscuous mode
[  935.735703][ T5878] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x1d7/0x2d0" at daddr 0x14 len 4 error 74
[  935.774308][T14953] veth1_vlan: entered promiscuous mode
[  935.778127][ T5878] XFS (loop2): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x182e/0x1e00 (fs/xfs/libxfs/xfs_defer.c:598).  Shutting down filesystem.
[  935.796243][ T5878] XFS (loop2): Please unmount the filesystem and rectify the problem(s)
[  935.842865][T14953] veth0_macvtap: entered promiscuous mode
[  935.904746][T14953] veth1_macvtap: entered promiscuous mode
[  935.997218][T14953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  936.036363][T14953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  936.071713][T14953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  936.091666][T14953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  936.102843][T14953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  936.126199][T14953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  936.158676][T14953] batman_adv: batadv0: Interface activated: batadv_slave_0
[  936.171194][T14953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  936.182209][T14953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  936.192557][T14953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  936.204415][T14953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  936.214603][T14953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  936.233665][T14953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  936.263473][T14953] batman_adv: batadv0: Interface activated: batadv_slave_1
[  936.316552][T14953] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  936.325822][T14953] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  936.334936][T14953] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  936.344314][T14953] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  936.618647][T14620] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  936.629682][ T1067] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  936.640308][T14620] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  936.653720][ T1067] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  939.032233][T15197] 9pnet_virtio: no channels available for device syz
[  940.098665][T15203] hub 2-0:1.0: USB hub found
[  940.120673][T15203] hub 2-0:1.0: 1 port detected
[  940.170892][T15199] loop2: detected capacity change from 0 to 32768
[  940.393939][T15199] ocfs2: Slot 0 on device (7,2) was already allocated to this node!
[  940.563392][T15199] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  941.031276][T14470] ocfs2: Unmounting device (7,2) on (node local)
[  944.685836][T15250] loop2: detected capacity change from 0 to 2048
[  944.903099][T15250] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  944.925566][T15250] UDF-fs: Scanning with blocksize 512 failed
[  944.943182][T15250] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  947.660857][T15271] loop2: detected capacity change from 0 to 32768
[  947.710522][T15271] syz.2.2586: attempt to access beyond end of device
[  947.710522][T15271] loop2: rw=1, sector=4701696, nr_sectors = 8 limit=32768
[  947.724271][T15271] metapage_write_end_io: I/O error
[  947.729672][T15271] ERROR: (device loop2): diWrite: ixpxd invalid
[  947.729672][T15271] 
[  947.740151][T15271] ERROR: (device loop2): remounting filesystem as read-only
[  947.747624][T15271] ERROR: (device loop2): txCommit: 
[  947.747624][T15271] 
[  947.756028][T15271] blkno = 8f7c0, nblocks = 1
[  947.761502][T15271] ERROR: (device loop2): dbUpdatePMap: blocks are outside the map
[  947.761502][T15271] 
[  947.772078][T15271] ERROR: (device loop2): dbAllocNext: Corrupt dmap page
[  947.772078][T15271] 
[  947.781445][T15271] ialloc: diAlloc returned -5!
[  947.848714][T14470] syz-executor: attempt to access beyond end of device
[  947.848714][T14470] loop2: rw=1, sector=4701696, nr_sectors = 8 limit=32768
[  947.873161][T14470] metapage_write_end_io: I/O error
[  948.461379][T15285] loop2: detected capacity change from 0 to 2048
[  948.546646][T15285] NILFS (loop2): invalid segment: Magic number mismatch
[  948.571296][T15285] NILFS (loop2): trying rollback from an earlier position
[  948.627099][T15285] NILFS (loop2): recovery complete
[  948.663722][T15287] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  949.689988][T15295] loop2: detected capacity change from 0 to 128
[  949.771194][T15283] loop1: detected capacity change from 0 to 40427
[  949.831440][T15283] F2FS-fs (loop1): Wrong secs_per_zone / total_sections (4285726721, 24)
[  949.976386][T15283] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  950.009771][T15283] F2FS-fs (loop1): heap/no_heap options were deprecated
[  950.042985][T15283] F2FS-fs (loop1): invalid crc value
[  950.093993][T15283] F2FS-fs (loop1): Found nat_bits in checkpoint
[  950.410505][T15304] loop2: detected capacity change from 0 to 40427
[  950.420615][T15304] F2FS-fs (loop2): heap/no_heap options were deprecated
[  950.428271][T15304] F2FS-fs (loop2): build fault injection attr: rate: 19, type: 0x7ffff
[  950.556462][T15283] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  950.601208][T15283] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  950.879870][T15315] F2FS-fs (loop1): Corrupted max_depth of 3: 127
[  951.840499][T15322] hub 2-0:1.0: USB hub found
[  951.873893][T15322] hub 2-0:1.0: 1 port detected
[  955.024865][T15348] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2611'.
[  955.067418][T15348] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2611'.
[  955.105617][T15335] loop0: detected capacity change from 0 to 32768
[  955.123397][T15335] XFS: ikeep mount option is deprecated.
[  955.182954][T15335] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  955.528283][T15335] XFS (loop0): Ending clean mount
[  955.590366][T15335] XFS (loop0): Quotacheck needed: Please wait.
[  955.836807][T15335] XFS (loop0): Quotacheck: Done.
[  955.943256][T15362] loop3: detected capacity change from 0 to 32768
[  956.672861][T15362] JBD2: Ignoring recovery information on journal
[  956.927806][T15362] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  957.032005][T14953] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  957.174157][T15362] OCFS2: ERROR (device loop3): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #32 has bit count of 1024
[  957.256018][T15362] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  957.297611][T15362] OCFS2: File system is now read-only.
[  957.317805][T15362] (syz.3.2614,15362,1):ocfs2_trim_mainbm:7611 ERROR: status = -30
[  957.395365][T15380] netlink: 'syz.2.2620': attribute type 5 has an invalid length.
[  957.469232][T14756] ocfs2: Unmounting device (7,3) on (node local)
[  958.021899][T15393] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2621'.
[  958.737634][T15393] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2621'.
[  960.399951][T15417] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2631'.
[  961.673153][T15423] loop3: detected capacity change from 0 to 1024
[  962.885130][   T28] kauditd_printk_skb: 10 callbacks suppressed
[  962.885141][   T28] audit: type=1326 audit(1755213841.209:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15437 comm="syz.3.2639" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f621838ebe9 code=0x0
[  964.140295][T15454] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  965.649538][T15463] loop0: detected capacity change from 0 to 4096
[  965.665065][T15463] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512).
[  968.156360][T15477] loop2: detected capacity change from 0 to 32768
[  968.252577][T15477] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.2650 (15477)
[  969.117790][T15477] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  969.254431][T15477] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  969.303622][T15477] BTRFS info (device loop2): metadata ratio 2
[  969.345571][T15477] BTRFS info (device loop2): allowing degraded mounts
[  969.376182][T15477] BTRFS info (device loop2): force zlib compression, level 3
[  969.385156][T15477] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  969.397384][T15477] BTRFS info (device loop2): use zstd compression, level 3
[  969.404649][T15477] BTRFS info (device loop2): force clearing of disk cache
[  969.413951][T15477] BTRFS info (device loop2): max_inline at 0
[  969.422033][T15477] BTRFS info (device loop2): using free space tree
[  969.447556][T15477] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR
[  969.468239][T15477] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR
[  970.232138][T15477] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR
[  970.261509][T15477] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR
[  970.272803][T15477] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR
[  970.283827][T15477] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR
[  970.298000][T15477] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR
[  970.345465][T15477] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR
[  970.414062][T15477] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR
[  970.492230][T15477] BTRFS error (device loop2): open_ctree failed: -12
[  973.637679][    C0] Illegal XDP return value 16128 on prog  (id 248) dev lo, expect packet loss!
[  973.656306][T15554] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  973.881370][T15558] loop1: detected capacity change from 0 to 4096
[  973.967618][T15558] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  974.924915][T15572] loop1: detected capacity change from 0 to 512
[  974.934995][T15572] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  974.949712][T15572] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  974.964843][T15572] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002]
[  974.974962][T15572] System zones: 1-12
[  974.989525][T15572] EXT4-fs (loop1): 1 truncate cleaned up
[  974.996923][T15572] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  975.221696][T15578] hub 2-0:1.0: USB hub found
[  975.234711][T15578] hub 2-0:1.0: 1 port detected
[  976.193048][T14212] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  976.585311][T15583] loop0: detected capacity change from 0 to 65536
[  977.164793][T15583] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  977.352867][T15583] XFS (loop0): Ending clean mount
[  978.294041][T14460] XFS (loop0): Metadata CRC error detected at xfs_agf_read_verify+0x191/0x250, xfs_agf block 0x1 
[  978.294117][T14460] XFS (loop0): Unmount and run xfs_repair
[  978.294125][T14460] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  978.294134][T14460] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  978.294142][T14460] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  978.294150][T14460] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  978.294157][T14460] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  978.294164][T14460] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  978.294171][T14460] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00  ................
[  978.294178][T14460] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  978.294185][T14460] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  978.294253][T15608] XFS (loop0): metadata I/O error in "xfs_read_agf+0x27e/0x590" at daddr 0x1 len 1 error 74
[  978.546953][T14953] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  979.867404][T15624] loop2: detected capacity change from 0 to 32768
[  981.429984][T15637] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  982.075234][T15652] loop0: detected capacity change from 0 to 256
[  982.087276][T15652] exfat: Deprecated parameter 'utf8'
[  982.128948][T15652] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  982.578042][T15660] hub 2-0:1.0: USB hub found
[  982.596071][T15660] hub 2-0:1.0: 1 port detected
[  983.630209][T15666] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2695'.
[  983.953061][T15674] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  984.801276][T15676] loop3: detected capacity change from 0 to 2048
[  984.847283][T15676] NILFS (loop3): invalid segment: Magic number mismatch
[  984.862050][T15676] NILFS (loop3): trying rollback from an earlier position
[  985.027455][T15676] NILFS (loop3): recovery complete
[  985.038289][T15683] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  985.142080][T15684] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2700'.
[  985.372571][T15684] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  987.719269][T15710] loop3: detected capacity change from 0 to 2048
[  987.817672][T15710] NILFS (loop3): invalid segment: Magic number mismatch
[  987.856628][T15710] NILFS (loop3): trying rollback from an earlier position
[  987.919510][T15710] NILFS (loop3): recovery complete
[  987.943372][T15716] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  988.854930][T15722] loop3: detected capacity change from 0 to 32768
[  988.871831][T15722] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  988.961038][T15722] XFS (loop3): Ending clean mount
[  989.551052][T15722] syz.3.2711 (15722): drop_caches: 2
[  989.616976][T14756] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  991.224932][T15761] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2718'.
[  991.249977][T15760] loop0: detected capacity change from 0 to 2048
[  991.273710][T15760] NILFS (loop0): invalid segment: Magic number mismatch
[  991.282910][T15760] NILFS (loop0): trying rollback from an earlier position
[  991.309088][T15760] NILFS (loop0): recovery complete
[  991.314980][T15762] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  991.569629][T15761] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  993.204173][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  993.210885][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  994.868303][T15790] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.2725'.
[  994.908528][T15791] loop0: detected capacity change from 0 to 512
[  994.928545][T15791] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  994.964272][T15791] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002]
[  995.008093][T15791] System zones: 1-12
[  995.040360][T15791] EXT4-fs (loop0): 1 truncate cleaned up
[  995.105340][T15791] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  995.393199][T15797] loop3: detected capacity change from 0 to 32768
[  995.536353][T15797] syz.3.2728: attempt to access beyond end of device
[  995.536353][T15797] loop3: rw=1, sector=4701696, nr_sectors = 8 limit=32768
[  995.550160][T15797] metapage_write_end_io: I/O error
[  995.555301][T15797] ERROR: (device loop3): diWrite: ixpxd invalid
[  995.555301][T15797] 
[  995.572061][T15797] ERROR: (device loop3): remounting filesystem as read-only
[  995.579580][T15797] ERROR: (device loop3): txCommit: 
[  995.579580][T15797] 
[  995.601091][T15797] blkno = 8f7c0, nblocks = 1
[  995.605769][T15797] ERROR: (device loop3): dbUpdatePMap: blocks are outside the map
[  995.605769][T15797] 
[  995.616696][T15797] ERROR: (device loop3): dbAllocNext: Corrupt dmap page
[  995.616696][T15797] 
[  995.626270][T15797] ialloc: diAlloc returned -5!
[  996.177407][T14756] syz-executor: attempt to access beyond end of device
[  996.177407][T14756] loop3: rw=1, sector=4701696, nr_sectors = 8 limit=32768
[  996.197599][T14756] metapage_write_end_io: I/O error
[  996.363555][T14953] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  996.708715][T15814] loop0: detected capacity change from 0 to 128
[  996.709507][T15814] EXT4-fs: Ignoring removed nobh option
[  997.093420][T15814] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  997.108129][T15814] ext4 filesystem being mounted at /40/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  997.398109][T14953] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  997.549436][T15820] loop3: detected capacity change from 0 to 4096
[  997.605159][T15820] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  999.432635][T15831] loop3: detected capacity change from 0 to 2048
[  999.521393][T15831] NILFS (loop3): invalid segment: Magic number mismatch
[  999.547598][T15831] NILFS (loop3): trying rollback from an earlier position
[  999.647995][T15831] NILFS (loop3): recovery complete
[  999.667215][T15834] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1005.734101][T15895] loop1: detected capacity change from 0 to 1024
[ 1006.050468][   T11] hfsplus: b-tree write err: -5, ino 4
[ 1009.248112][T15938] hub 2-0:1.0: USB hub found
[ 1009.254584][T15938] hub 2-0:1.0: 1 port detected
[ 1012.091919][T15972] loop1: detected capacity change from 0 to 2048
[ 1012.106604][T15972] NILFS (loop1): invalid segment: Magic number mismatch
[ 1012.161636][T15972] NILFS (loop1): trying rollback from an earlier position
[ 1012.243055][T15972] NILFS (loop1): recovery complete
[ 1012.284862][T15973] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1012.329693][T15975] 9pnet_fd: Insufficient options for proto=fd
[ 1012.810340][T15979] loop1: detected capacity change from 0 to 32768
[ 1012.830574][T15979] syz.1.2777: attempt to access beyond end of device
[ 1012.830574][T15979] loop1: rw=1, sector=4701696, nr_sectors = 8 limit=32768
[ 1012.845392][T15979] metapage_write_end_io: I/O error
[ 1012.850692][T15979] ERROR: (device loop1): diWrite: ixpxd invalid
[ 1012.850692][T15979] 
[ 1012.859532][T15979] ERROR: (device loop1): remounting filesystem as read-only
[ 1012.866854][T15979] ERROR: (device loop1): txCommit: 
[ 1012.866854][T15979] 
[ 1012.902193][T15979] blkno = 8f7c0, nblocks = 1
[ 1012.906836][T15979] ERROR: (device loop1): dbUpdatePMap: blocks are outside the map
[ 1012.906836][T15979] 
[ 1012.918051][T15979] ERROR: (device loop1): dbAllocNext: Corrupt dmap page
[ 1012.918051][T15979] 
[ 1012.927429][T15979] ialloc: diAlloc returned -5!
[ 1013.114394][T14212] syz-executor: attempt to access beyond end of device
[ 1013.114394][T14212] loop1: rw=1, sector=4701696, nr_sectors = 8 limit=32768
[ 1013.128643][T14212] metapage_write_end_io: I/O error
[ 1013.359801][T15994] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2783'.
[ 1015.090001][T15989] hub 2-0:1.0: USB hub found
[ 1015.919765][T15989] hub 2-0:1.0: 1 port detected
[ 1016.219275][T16002] loop1: detected capacity change from 0 to 2048
[ 1016.260242][T16002] NILFS (loop1): invalid segment: Magic number mismatch
[ 1016.277371][T16002] NILFS (loop1): trying rollback from an earlier position
[ 1016.289397][T16007] 9pnet_fd: Insufficient options for proto=fd
[ 1016.531855][T16002] NILFS (loop1): recovery complete
[ 1016.567108][T16009] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1018.343045][T16030] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2793'.
[ 1018.635283][T16033] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2795'.
[ 1018.700864][T16033] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2795'.
[ 1019.844238][T16043] loop2: detected capacity change from 0 to 2048
[ 1019.878098][T16043] NILFS (loop2): invalid segment: Magic number mismatch
[ 1019.889568][T16043] NILFS (loop2): trying rollback from an earlier position
[ 1019.919916][T16043] NILFS (loop2): recovery complete
[ 1019.929256][T16047] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1020.298110][T16061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2805'.
[ 1020.325419][T16061] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2805'.
[ 1020.345658][T16061] netlink: 'syz.2.2805': attribute type 6 has an invalid length.
[ 1021.133990][T16076] loop3: detected capacity change from 0 to 1024
[ 1021.234655][T13562] hfsplus: b-tree write err: -5, ino 4
[ 1023.045775][T16127] loop2: detected capacity change from 0 to 512
[ 1023.056715][T16127] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1023.069312][T16127] EXT4-fs (loop2): orphan cleanup on readonly fs
[ 1023.086070][T16127] Quota error (device loop2): do_check_range: Getting block 196613 out of range 1-5
[ 1023.096186][T16127] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0
[ 1023.105794][T16127] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.2824: Failed to acquire dquot type 1
[ 1023.149107][T16127] EXT4-fs (loop2): 1 truncate cleaned up
[ 1024.888204][T16127] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 1024.907843][T16127] bridge0: port 3(gretap0) entered blocking state
[ 1024.914409][T16127] bridge0: port 3(gretap0) entered disabled state
[ 1024.921573][T16127] gretap0: entered allmulticast mode
[ 1024.928811][T16127] gretap0: entered promiscuous mode
[ 1024.934865][T16127] bridge0: port 3(gretap0) entered blocking state
[ 1024.941432][T16127] bridge0: port 3(gretap0) entered forwarding state
[ 1025.729232][T14470] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1026.198289][T16147] netlink: 'syz.1.2828': attribute type 4 has an invalid length.
[ 1026.206122][T16147] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2828'.
[ 1026.252111][T16147] loop1: detected capacity change from 0 to 2048
[ 1028.911802][T16147] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1029.763215][T14212] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1030.983685][T16178] loop1: detected capacity change from 0 to 32768
[ 1030.994414][T16178] 
[ 1030.994414][T16178]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1030.994414][T16178] 
[ 1031.533647][T16178] 
[ 1031.533647][T16178]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1031.533647][T16178] 
[ 1031.561103][T16178] 
[ 1031.561103][T16178]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1031.561103][T16178] 
[ 1031.582320][T16178] 
[ 1031.582320][T16178]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1031.582320][T16178] 
[ 1031.635065][  T113] 
[ 1031.635065][  T113]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1031.635065][  T113] 
[ 1031.773742][T14212] 
[ 1031.773742][T14212]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1031.773742][T14212] 
[ 1031.833709][T14212] 
[ 1031.833709][T14212]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1031.833709][T14212] 
[ 1031.847467][T14216] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1031.859661][T14216] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1031.869638][T14216] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1031.884505][T14216] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1031.896361][T14216] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 1031.904485][T14216] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1031.932567][ T5792] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1031.945856][ T5792] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1031.958786][ T5792] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1031.966938][ T5792] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1031.975499][ T5792] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 1031.983407][ T5792] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1032.785795][T16192] chnl_net:caif_netlink_parms(): no params data found
[ 1032.862074][T16207] loop1: detected capacity change from 0 to 512
[ 1032.896598][T16192] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1032.899065][T16207] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1032.904176][T16192] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1032.924096][T16207] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1032.930739][T16192] bridge_slave_0: entered allmulticast mode
[ 1032.942312][T16192] bridge_slave_0: entered promiscuous mode
[ 1032.953986][T16192] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1032.961943][T16192] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1032.969498][T16192] bridge_slave_1: entered allmulticast mode
[ 1032.977273][T16192] bridge_slave_1: entered promiscuous mode
[ 1032.997901][T16207] EXT4-fs error (device loop1): ext4_get_first_dir_block:3584: inode #12: comm syz.1.2847: Attempting to read directory block (0) that is past i_size (3)
[ 1033.020077][T16207] EXT4-fs (loop1): Remounting filesystem read-only
[ 1033.022776][T16192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1033.040203][T16192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1033.070844][T14212] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1033.103366][T16192] team0: Port device team_slave_0 added
[ 1033.119887][T16192] team0: Port device team_slave_1 added
[ 1033.202296][T16192] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1033.226843][T16192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1033.334473][T16192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1033.389780][T16192] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1033.396785][T16192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1033.583391][T16192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1034.064805][T16192] hsr_slave_0: entered promiscuous mode
[ 1034.073244][T16192] hsr_slave_1: entered promiscuous mode
[ 1034.077908][T16197] Bluetooth: hci1: command tx timeout
[ 1034.086671][T16192] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1034.099788][T16192] Cannot create hsr debugfs directory
[ 1034.238077][T14216] Bluetooth: hci3: Opcode 0x1003 failed: -110
[ 1034.238159][T16197] Bluetooth: hci3: command 0x1003 tx timeout
[ 1034.305641][T13562] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1034.356984][T16222] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2851'.
[ 1034.372875][T16222] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2851'.
[ 1034.386276][T16222] netlink: 'syz.1.2851': attribute type 5 has an invalid length.
[ 1034.554722][T16228] loop1: detected capacity change from 0 to 256
[ 1034.559209][T13562] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1034.562531][T16228] exfat: Deprecated parameter 'namecase'
[ 1034.596784][T16228] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[ 1034.695651][T13562] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1034.793783][T13562] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1034.848398][T16192] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1035.016179][T16192] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1035.188835][T16192] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1035.350456][T16192] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1036.157542][T14216] Bluetooth: hci1: command tx timeout
[ 1036.660980][T16192] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1036.725443][T16192] 8021q: adding VLAN 0 to HW filter on device team0
[ 1036.773620][ T7326] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1036.780831][ T7326] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1036.792201][T16260] veth1_macvtap: left promiscuous mode
[ 1036.798864][T16260] macsec0: entered promiscuous mode
[ 1036.832442][T13763] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1036.839965][T13763] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1036.965904][T16192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1038.239318][T14216] Bluetooth: hci1: command tx timeout
[ 1038.256021][T16192] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1038.820360][T13562] hsr_slave_0: left promiscuous mode
[ 1038.848168][T13562] hsr_slave_1: left promiscuous mode
[ 1038.867133][T13562] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1038.886872][T13562] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1038.919492][T13562] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1038.927097][T13562] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1038.968572][T13562] bridge_slave_1: left allmulticast mode
[ 1038.978603][T13562] bridge_slave_1: left promiscuous mode
[ 1038.986013][T13562] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1039.004127][T13562] bridge_slave_0: left allmulticast mode
[ 1039.011516][T13562] bridge_slave_0: left promiscuous mode
[ 1039.017246][T13562] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1039.238100][T13562] veth1_macvtap: left promiscuous mode
[ 1039.252981][T13562] veth0_macvtap: left promiscuous mode
[ 1039.268461][T13562] veth1_vlan: left promiscuous mode
[ 1039.387667][T13562] veth0_vlan: left promiscuous mode
[ 1040.317500][T14216] Bluetooth: hci1: command tx timeout
[ 1041.579614][T13562] team0 (unregistering): Port device team_slave_1 removed
[ 1041.636851][T13562] team0 (unregistering): Port device team_slave_0 removed
[ 1041.706095][T13562] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1041.778825][T13562] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1043.117928][T13562] bond0 (unregistering): Released all slaves
[ 1043.618887][T16318] loop1: detected capacity change from 0 to 1024
[ 1043.857066][   T11] hfsplus: b-tree write err: -5, ino 4
[ 1043.915616][T16326] loop2: detected capacity change from 0 to 1024
[ 1043.923505][T16326] EXT4-fs: Ignoring removed oldalloc option
[ 1043.943269][T16326] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled
[ 1044.032998][T16326] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1044.257507][   T28] audit: type=1804 audit(1755213922.579:70): pid=16340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2876" name="/newroot/122/file1/file1" dev="loop2" ino=15 res=1 errno=0
[ 1044.281354][T16192] veth0_vlan: entered promiscuous mode
[ 1044.709011][T16192] veth1_vlan: entered promiscuous mode
[ 1044.854393][T16192] veth0_macvtap: entered promiscuous mode
[ 1044.883656][T16192] veth1_macvtap: entered promiscuous mode
[ 1044.933616][T16192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1044.946983][T16192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1044.964079][T16192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1044.985134][T16192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1045.013735][T16192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1045.039486][T16192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1045.071485][T14470] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1045.102128][T16192] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1045.261051][T16192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1045.421675][T16192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1045.554071][T16192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1045.678124][T16192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1045.722171][T16192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1045.763469][T16192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1045.809067][T16192] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1045.840665][T16192] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1045.893168][T16192] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1045.965831][T16192] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1046.036257][T16192] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1046.884508][T13562] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1046.885910][T16360] loop0: detected capacity change from 0 to 1024
[ 1046.909516][T13562] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1046.948276][T13562] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1046.976486][T13562] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1047.011259][T14620] hfsplus: b-tree write err: -5, ino 4
[ 1047.084459][T16349] loop1: detected capacity change from 0 to 40427
[ 1047.210594][T14915] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[ 1047.518546][T16349] F2FS-fs (loop1): invalid crc value
[ 1047.665657][T16349] F2FS-fs (loop1): Found nat_bits in checkpoint
[ 1047.729172][T14915] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1047.827069][T14915] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1047.841614][T14915] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 1047.978250][T14915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1047.997932][T16349] F2FS-fs (loop1): Start checkpoint disabled!
[ 1048.220095][T14915] usb 3-1: config 0 descriptor??
[ 1048.232494][T16349] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[ 1048.278946][T16376] hub 2-0:1.0: USB hub found
[ 1048.284021][T16376] hub 2-0:1.0: 1 port detected
[ 1048.346166][T14212] syz-executor: attempt to access beyond end of device
[ 1048.346166][T14212] loop1: rw=524288, sector=45064, nr_sectors = 8 limit=40427
[ 1048.364745][T14212] syz-executor: attempt to access beyond end of device
[ 1048.364745][T14212] loop1: rw=0, sector=45064, nr_sectors = 8 limit=40427
[ 1048.650984][T13763] kworker/u4:9: attempt to access beyond end of device
[ 1048.650984][T13763] loop1: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[ 1048.681786][T13763] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[ 1048.689139][T13763] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[ 1048.697478][T13763] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[ 1048.897219][T14915] usb 3-1: language id specifier not provided by device, defaulting to English
[ 1049.011049][T16384] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2894'.
[ 1049.707875][T14915] uclogic 0003:256C:006D.0009: failed retrieving Huion firmware version: -71
[ 1049.803970][T14915] uclogic 0003:256C:006D.0009: failed probing parameters: -71
[ 1050.019726][   T28] audit: type=1326 audit(1755213928.309:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16381 comm="syz.0.2893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f651cd8ebe9 code=0x7fc00000
[ 1050.057756][T14915] uclogic: probe of 0003:256C:006D.0009 failed with error -71
[ 1050.145034][T14915] usb 3-1: USB disconnect, device number 16
[ 1050.161911][T16389] loop0: detected capacity change from 0 to 1024
[ 1050.218888][T14620] hfsplus: b-tree write err: -5, ino 4
[ 1051.066196][ T1067] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1052.730969][ T1067] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1053.179070][ T1067] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1053.232702][T16406] hub 2-0:1.0: USB hub found
[ 1053.251004][T16406] hub 2-0:1.0: 1 port detected
[ 1053.280050][ T1067] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1053.563914][T16412] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2904'.
[ 1054.656775][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[ 1054.663562][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[ 1054.947642][T16197] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1054.974022][T16197] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1054.985471][T16197] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1054.994499][T16197] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1055.002671][T16197] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 1055.015027][T16197] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1056.450469][T16418] chnl_net:caif_netlink_parms(): no params data found
[ 1057.048085][T16197] Bluetooth: hci3: command tx timeout
[ 1057.092667][T16441] loop2: detected capacity change from 0 to 40427
[ 1057.140628][T16418] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1057.142572][T16441] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[ 1057.155758][T16418] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1057.163107][T16418] bridge_slave_0: entered allmulticast mode
[ 1057.176418][T16418] bridge_slave_0: entered promiscuous mode
[ 1057.187498][T16441] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[ 1057.201474][T16418] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1057.220147][T16418] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1057.221270][T16441] F2FS-fs (loop2): invalid crc value
[ 1057.227573][T16418] bridge_slave_1: entered allmulticast mode
[ 1057.254983][T16418] bridge_slave_1: entered promiscuous mode
[ 1057.302154][T16441] F2FS-fs (loop2): Found nat_bits in checkpoint
[ 1057.484941][T16441] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[ 1057.496073][ T1067] hsr_slave_0: left promiscuous mode
[ 1057.511836][T16441] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[ 1057.522694][ T1067] hsr_slave_1: left promiscuous mode
[ 1057.543082][ T1067] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1057.557697][ T1067] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1057.577904][ T1067] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1057.591839][ T1067] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1057.600810][ T1067] bridge_slave_1: left allmulticast mode
[ 1057.606512][ T1067] bridge_slave_1: left promiscuous mode
[ 1057.624350][ T1067] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1057.649326][ T1067] bridge_slave_0: left allmulticast mode
[ 1057.766857][ T1067] bridge_slave_0: left promiscuous mode
[ 1057.971203][ T1067] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1058.013283][ T1067] veth1_macvtap: left promiscuous mode
[ 1058.019663][ T1067] veth0_macvtap: left promiscuous mode
[ 1058.025359][ T1067] veth1_vlan: left promiscuous mode
[ 1058.037877][T16458] hub 2-0:1.0: USB hub found
[ 1058.043373][ T1067] veth0_vlan: left promiscuous mode
[ 1058.045985][T16458] hub 2-0:1.0: 1 port detected
[ 1059.176527][T16197] Bluetooth: hci3: command tx timeout
[ 1060.176699][ T1067] team0 (unregistering): Port device team_slave_1 removed
[ 1060.265611][ T1067] team0 (unregistering): Port device team_slave_0 removed
[ 1060.322035][ T1067] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1060.376451][ T1067] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1060.960023][ T1067] bond0 (unregistering): Released all slaves
[ 1061.070216][T16418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1061.082693][T16418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1061.169184][T16418] team0: Port device team_slave_0 added
[ 1061.227894][T16197] Bluetooth: hci3: command tx timeout
[ 1061.244904][T16418] team0: Port device team_slave_1 added
[ 1061.290079][T16418] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1061.303052][T16418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1061.335424][T16418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1061.361682][T16418] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1061.371475][T16418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1061.420197][T16418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1061.569998][T16418] hsr_slave_0: entered promiscuous mode
[ 1061.588144][T16418] hsr_slave_1: entered promiscuous mode
[ 1062.949059][T16418] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1062.969008][T16418] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1063.023597][T16418] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1063.075927][T16418] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1063.277776][T16197] Bluetooth: hci3: command tx timeout
[ 1063.462686][T16418] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1063.533643][T16418] 8021q: adding VLAN 0 to HW filter on device team0
[ 1063.572887][   T78] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1063.580508][   T78] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1063.622776][T13763] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1063.629982][T13763] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1063.748558][T16418] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1064.201813][T16418] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1065.119964][T16418] veth0_vlan: entered promiscuous mode
[ 1065.151972][T16418] veth1_vlan: entered promiscuous mode
[ 1065.204160][T16418] veth0_macvtap: entered promiscuous mode
[ 1065.215830][T16418] veth1_macvtap: entered promiscuous mode
[ 1065.720546][T16534] netlink: 'syz.0.2933': attribute type 4 has an invalid length.
[ 1065.728508][T16534] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2933'.
[ 1066.691335][T16418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1066.718539][T16418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1066.746744][T16418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1066.763697][T16418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1066.778973][T16418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1066.798058][T16418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1066.834533][T16418] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1066.855221][T16418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1066.866059][T16418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1066.900672][T16418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1066.929277][T16418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1066.960233][T16418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1066.987101][T16418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1067.015353][T16418] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1067.045914][T16418] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1067.076000][T16418] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1067.101630][T16418] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1067.137891][T16418] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1067.293160][T13763] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1067.327563][T13763] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1067.410195][   T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1067.438947][   T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1069.129126][ T9935] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[ 1069.341689][ T9935] usb 5-1: New USB device found, idVendor=093a, idProduct=050f, bcdDevice=c2.b7
[ 1069.373736][ T9935] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1069.393427][ T9935] usb 5-1: config 0 descriptor??
[ 1069.410968][ T9935] gspca_main: mars-2.14.0 probing 093a:050f
[ 1069.671124][ T5781] usb 5-1: USB disconnect, device number 2
[ 1070.107471][ T9935] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[ 1070.301062][ T9935] usb 6-1: config 0 has an invalid interface number: 28 but max is 0
[ 1070.309312][ T9935] usb 6-1: config 0 has no interface number 0
[ 1070.316346][ T9935] usb 6-1: config 0 interface 28 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1070.328987][ T9935] usb 6-1: config 0 interface 28 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1070.347562][ T9935] usb 6-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00
[ 1070.357136][ T9935] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1070.383114][ T9935] usb 6-1: config 0 descriptor??
[ 1070.907755][ T9935] logitech-djreceiver 0003:046D:C534.000A: hidraw0: USB HID v0.00 Device [HID 046d:c534] on usb-dummy_hcd.5-1/input28
[ 1071.075204][T14915] usb 6-1: USB disconnect, device number 2
[ 1074.789198][T16666] hub 8-0:1.0: USB hub found
[ 1074.794389][T16666] hub 8-0:1.0: 1 port detected
[ 1076.643439][T16678] 9pnet_fd: Insufficient options for proto=fd
[ 1078.561293][T16704] veth0_vlan: entered allmulticast mode
[ 1078.680041][T16704] ������: renamed from vlan1
[ 1079.291977][T16711] loop5: detected capacity change from 0 to 512
[ 1079.532913][T16711] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1079.593795][T16711] EXT4-fs (loop5): orphan cleanup on readonly fs
[ 1079.646468][T16711] EXT4-fs error (device loop5): ext4_validate_block_bitmap:439: comm syz.5.2981: bg 0: block 248: padding at end of block bitmap is not set
[ 1079.704274][T16711] Quota error (device loop5): write_blk: dquota write failed
[ 1079.713665][T16711] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[ 1079.723921][T16711] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.2981: Failed to acquire dquot type 1
[ 1079.809110][T16711] EXT4-fs (loop5): 1 truncate cleaned up
[ 1079.964282][T16711] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 1081.299436][T16418] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1083.881369][T16761] loop4: detected capacity change from 0 to 128
[ 1083.914210][T16761] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1083.932207][T16761] ext4 filesystem being mounted at /31/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[ 1084.076404][T16192] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1084.236062][T16765] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2994'.
[ 1086.204760][T16793] tipc: Started in network mode
[ 1086.227687][T16793] tipc: Node identity 2d000000000000000000000000000001, cluster identity 4711
[ 1086.236659][T16793] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[ 1086.255864][T16771] loop4: detected capacity change from 0 to 40427
[ 1086.288908][T16771] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x7ffff
[ 1086.310433][T16771] F2FS-fs (loop4): invalid crc value
[ 1086.323961][T16771] F2FS-fs (loop4): Found nat_bits in checkpoint
[ 1086.411951][T16771] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[ 1086.528974][T16192] syz-executor: attempt to access beyond end of device
[ 1086.528974][T16192] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[ 1086.552226][T16192] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[ 1086.667458][ T5878] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[ 1086.847445][ T5878] usb 6-1: Using ep0 maxpacket: 16
[ 1087.250588][T16814] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3004'.
[ 1089.177856][T16817] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3009'.
[ 1090.444750][ T5878] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1090.453697][ T5878] usb 6-1: unable to read config index 0 descriptor/start: -71
[ 1090.462430][ T5878] usb 6-1: can't read configurations, error -71
[ 1091.084163][T16843] usb usb1: usbfs: process 16843 (syz.0.3018) did not claim interface 0 before use
[ 1091.339931][T16848] block device autoloading is deprecated and will be removed.
[ 1091.360473][T16848] syz.0.3020: attempt to access beyond end of device
[ 1091.360473][T16848] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0
[ 1092.474085][T16841] loop4: detected capacity change from 0 to 40427
[ 1092.539097][T16841] F2FS-fs (loop4): Image doesn't support compression
[ 1092.547572][T16841] F2FS-fs (loop4): Unrecognized mount option "whint_mode=fs-based" or missing value
[ 1092.926262][T16863] loop5: detected capacity change from 0 to 512
[ 1094.600098][T16863] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1095.590428][T16863] EXT4-fs (loop5): orphan cleanup on readonly fs
[ 1095.604560][T16863] EXT4-fs error (device loop5): ext4_validate_block_bitmap:439: comm syz.5.3023: bg 0: block 248: padding at end of block bitmap is not set
[ 1095.621436][T16863] Quota error (device loop5): write_blk: dquota write failed
[ 1095.628994][T16863] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[ 1095.639565][T16863] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.3023: Failed to acquire dquot type 1
[ 1096.099006][T16863] EXT4-fs (loop5): 1 truncate cleaned up
[ 1096.107750][T16863] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 1096.476105][T16418] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1096.725967][T16873] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[ 1097.040553][T16877] loop0: detected capacity change from 0 to 40427
[ 1097.064390][T16877] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[ 1097.072404][T16877] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[ 1097.090496][T16877] F2FS-fs (loop0): invalid crc value
[ 1097.108886][T16877] F2FS-fs (loop0): Found nat_bits in checkpoint
[ 1097.209192][T16877] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[ 1097.217204][T16877] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[ 1097.374693][T16877] syz.0.3027: attempt to access beyond end of device
[ 1097.374693][T16877] loop0: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[ 1097.391276][T16877] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[ 1098.999538][T16909] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3036'.
[ 1100.339286][T16922] hub 8-0:1.0: USB hub found
[ 1100.347455][T16922] hub 8-0:1.0: 1 port detected
[ 1101.864078][T16933] loop2: detected capacity change from 0 to 256
[ 1101.871662][T16934] loop5: detected capacity change from 0 to 1024
[ 1101.878463][T16933] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1101.895499][T16933] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[ 1101.898953][T16934] ext4: Unknown parameter 'obj_type'
[ 1101.916205][T16933] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[ 1104.140378][T16955] syz.4.3048 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[ 1104.323619][T16960] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3050'.
[ 1105.385471][T16982] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3057'.
[ 1105.438567][T16982] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3057'.
[ 1107.380668][T17008] loop2: detected capacity change from 0 to 512
[ 1107.388188][T17008] EXT4-fs: Ignoring removed nobh option
[ 1107.513516][T17008] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #3: comm syz.2.3066: corrupted inode contents
[ 1107.540918][T17008] EXT4-fs error (device loop2): ext4_dirty_inode:6106: inode #3: comm syz.2.3066: mark_inode_dirty error
[ 1107.559963][T17008] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #3: comm syz.2.3066: corrupted inode contents
[ 1107.591721][T17008] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #3: comm syz.2.3066: mark_inode_dirty error
[ 1107.612346][T17008] Quota error (device loop2): write_blk: dquota write failed
[ 1107.624485][T17015] syz.4.3065[17015] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1107.624698][T17015] syz.4.3065[17015] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1107.644122][T17015] sch_fq: defrate 4294967295 ignored.
[ 1107.696934][T17015] loop4: detected capacity change from 0 to 512
[ 1107.708304][T17015] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[ 1107.726364][T17008] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[ 1109.602118][T17008] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.3066: Failed to acquire dquot type 0
[ 1109.683502][T17015] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2867: Unable to expand inode 15. Delete some EAs or run e2fsck.
[ 1109.707015][T17015] EXT4-fs (loop4): 1 truncate cleaned up
[ 1109.720740][T17015] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1109.946119][T17008] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #16: comm syz.2.3066: corrupted inode contents
[ 1110.225526][T16192] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1110.229199][T17008] EXT4-fs error (device loop2): ext4_dirty_inode:6106: inode #16: comm syz.2.3066: mark_inode_dirty error
[ 1110.304255][T17008] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #16: comm syz.2.3066: corrupted inode contents
[ 1110.355447][T17008] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #16: comm syz.2.3066: mark_inode_dirty error
[ 1110.381769][T17020] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3069'.
[ 1110.391050][T17020] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3069'.
[ 1110.400236][T17008] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #16: comm syz.2.3066: corrupted inode contents
[ 1110.420312][T17008] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem
[ 1110.432703][T17008] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #16: comm syz.2.3066: corrupted inode contents
[ 1110.449992][T17008] EXT4-fs error (device loop2): ext4_truncate:4288: inode #16: comm syz.2.3066: mark_inode_dirty error
[ 1110.462078][T17008] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem
[ 1110.501622][T17008] EXT4-fs (loop2): 1 truncate cleaned up
[ 1110.518205][T17008] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1110.533057][T17008] ext4 filesystem being mounted at /169/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1110.706049][T14470] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1110.809409][T14915] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[ 1111.115324][T14915] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1111.167253][T14915] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1111.442080][T14915] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1111.462408][T14915] usb 1-1: New USB device found, idVendor=06cb, idProduct=73f6, bcdDevice= 0.00
[ 1111.477597][T14915] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1111.493719][T14915] usb 1-1: config 0 descriptor??
[ 1112.013383][T14915] itetech 0003:06CB:73F6.000B: hidraw0: USB HID v0.01 Device [HID 06cb:73f6] on usb-dummy_hcd.0-1/input0
[ 1112.216595][T14915] usb 1-1: USB disconnect, device number 19
[ 1112.973651][T17055] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3080'.
[ 1112.983761][T17055] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3080'.
[ 1113.972353][T17075] loop2: detected capacity change from 0 to 512
[ 1113.980632][T17075] EXT4-fs: Ignoring removed orlov option
[ 1116.430422][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[ 1116.436916][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[ 1116.446759][T17075] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1116.711827][T17075] EXT4-fs warning (device loop2): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop2.
[ 1117.985059][T17085] bridge0: port 3(gretap0) entered disabled state
[ 1118.153433][T17085] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1118.160903][T17085] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1118.425575][T17085] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1118.458349][T17085] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1119.037577][T17085] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1119.047030][T17085] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1119.056474][T17085] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1120.016493][T17091] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3090'.
[ 1120.025875][T17091] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3090'.
[ 1120.172446][T17108] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3096'.
[ 1120.636352][T17112] loop2: detected capacity change from 0 to 256
[ 1120.644181][T17112] exfat: Unknown parameter 'fsmagic'
[ 1124.601583][T17129] loop5: detected capacity change from 0 to 256
[ 1124.663824][T17129] exfat: Bad value for 'uid'
[ 1124.938036][ T5878] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[ 1124.965322][T17135] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3104'.
[ 1125.007375][T17135] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3104'.
[ 1125.166110][ T5878] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[ 1125.197604][ T5878] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1125.247405][ T5878] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1125.285655][ T5878] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[ 1125.318695][ T5878] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[ 1125.358227][ T5878] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[ 1125.366540][ T5878] usb 3-1: Manufacturer: syz
[ 1125.379766][ T5878] usb 3-1: config 0 descriptor??
[ 1125.560450][T17144] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3107'.
[ 1125.640253][T17145] loop0: detected capacity change from 0 to 256
[ 1125.649010][T17145] exfat: Deprecated parameter 'utf8'
[ 1125.666782][T17145] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[ 1125.827688][ T5878] appleir 0003:05AC:8243.000C: unknown main item tag 0x0
[ 1125.849624][ T5878] appleir 0003:05AC:8243.000C: No inputs registered, leaving
[ 1125.882522][ T5878] appleir 0003:05AC:8243.000C: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0
[ 1126.138053][ T5878] usb 3-1: USB disconnect, device number 17
[ 1126.287250][T17154] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3109'.
[ 1127.407574][T17163] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3113'.
[ 1127.436985][T17163] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3113'.
[ 1128.536326][T17177] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3116'.
[ 1128.691717][T17182] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3119'.
[ 1130.626833][T17184] tipc: Started in network mode
[ 1130.639245][T17184] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[ 1130.766846][T17184] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[ 1131.254874][T17194] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3123'.
[ 1131.418788][T17194] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3123'.
[ 1132.056420][T17204] loop2: detected capacity change from 0 to 512
[ 1132.088388][T17204] EXT4-fs: Ignoring removed orlov option
[ 1132.114754][T17204] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1133.606996][T17204] EXT4-fs (loop2): 1 orphan inode deleted
[ 1133.618718][T17204] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1134.582641][T14620] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14
[ 1134.602298][T17204] ext4 filesystem being mounted at /184/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1134.863460][T17216] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3128'.
[ 1134.874159][T14620] EXT4-fs error (device loop2): ext4_release_dquot:6974: comm kworker/u4:12: Failed to release dquot type 1
[ 1135.041290][T14470] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1137.327439][T14390] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[ 1137.696528][T14390] usb 3-1: Using ep0 maxpacket: 32
[ 1137.704401][T14390] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1137.724206][T14390] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1137.735101][T14390] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00
[ 1137.749828][T14390] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1137.838784][T17251] binder: 17246:17251 ioctl c00c620f 2000000004c0 returned -22
[ 1138.502322][T17251] syz.4.3135 (17251) used greatest stack depth: 17960 bytes left
[ 1138.616025][T14390] usb 3-1: config 0 descriptor??
[ 1139.003937][T17258] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3138'.
[ 1139.139499][T14390] usbhid 3-1:0.0: can't add hid device: -71
[ 1139.159447][T14390] usbhid: probe of 3-1:0.0 failed with error -71
[ 1139.199164][T14390] usb 3-1: USB disconnect, device number 18
[ 1140.315855][T17271] loop7: detected capacity change from 0 to 7
[ 1140.337742][T17271] Dev loop7: unable to read RDB block 7
[ 1140.344766][T17271]  loop7: unable to read partition table
[ 1140.350870][T17271] loop7: partition table beyond EOD, truncated
[ 1140.414265][T17276] loop5: detected capacity change from 0 to 256
[ 1140.421652][T17276] exfat: Unknown parameter 'fsmagic'
[ 1141.608593][T17271] loop_reread_partitions: partition scan of loop7 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[ 1142.825256][T17297] loop2: detected capacity change from 0 to 512
[ 1142.832924][T17297] EXT4-fs: Ignoring removed orlov option
[ 1144.595124][T17297] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1145.580317][T17297] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR
[ 1145.580663][T17297] EXT4-fs: failed to create workqueue
[ 1145.595690][T17297] EXT4-fs (loop2): mount failed
[ 1146.252084][T17308] loop2: detected capacity change from 0 to 512
[ 1146.289877][T17308] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1146.555221][T17308] EXT4-fs (loop2): orphan cleanup on readonly fs
[ 1148.327892][T17314] loop0: detected capacity change from 0 to 256
[ 1148.341120][T17314] exfat: Unknown parameter 'fsmagic'
[ 1148.647424][T17308] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.3152: bg 0: block 248: padding at end of block bitmap is not set
[ 1149.124589][T17308] Quota error (device loop2): write_blk: dquota write failed
[ 1149.132943][T17308] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[ 1149.143093][T17308] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.3152: Failed to acquire dquot type 1
[ 1149.161577][T17308] EXT4-fs (loop2): 1 truncate cleaned up
[ 1150.163347][T17308] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 1150.244009][T14470] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1150.482834][T17321] loop4: detected capacity change from 0 to 512
[ 1150.503970][T17321] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[ 1151.479307][T17321] EXT4-fs (loop4): 1 truncate cleaned up
[ 1151.492511][T17321] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1153.118311][T16192] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1153.357457][   T28] audit: type=1326 audit(1755214031.679:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17334 comm="syz.0.3159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f651cd8ebe9 code=0x7ffc0000
[ 1153.397898][   T28] audit: type=1326 audit(1755214031.709:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17334 comm="syz.0.3159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7f651cd8ebe9 code=0x7ffc0000
[ 1153.454960][   T28] audit: type=1326 audit(1755214031.709:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17334 comm="syz.0.3159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f651cd8ebe9 code=0x7ffc0000
[ 1153.521077][   T28] audit: type=1326 audit(1755214031.709:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17334 comm="syz.0.3159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f651cd8ebe9 code=0x7ffc0000
[ 1153.525667][T17338] loop5: detected capacity change from 0 to 512
[ 1153.576051][T17338] EXT4-fs: Ignoring removed orlov option
[ 1153.584433][T17338] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1153.614846][T17338] EXT4-fs (loop5): 1 orphan inode deleted
[ 1153.621678][T17338] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1153.640537][T17338] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1153.640613][T13562] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14
[ 1153.662505][T13562] EXT4-fs error (device loop5): ext4_release_dquot:6974: comm kworker/u4:8: Failed to release dquot type 1
[ 1153.742803][T16418] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1153.960865][T17356] loop5: detected capacity change from 0 to 256
[ 1153.968108][T17356] exfat: Unknown parameter 'fsmagic'
[ 1154.834599][   T28] audit: type=1326 audit(1755214033.159:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17357 comm="syz.2.3165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3de98ebe9 code=0x7ffc0000
[ 1154.922977][   T28] audit: type=1326 audit(1755214033.159:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17357 comm="syz.2.3165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3de98ebe9 code=0x7ffc0000
[ 1155.016996][   T28] audit: type=1326 audit(1755214033.209:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17357 comm="syz.2.3165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc3de98ebe9 code=0x7ffc0000
[ 1155.300722][   T28] audit: type=1326 audit(1755214033.209:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17357 comm="syz.2.3165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3de98ebe9 code=0x7ffc0000
[ 1156.259345][ T5878] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[ 1156.347620][   T28] audit: type=1326 audit(1755214033.209:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17357 comm="syz.2.3165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc3de98ebe9 code=0x7ffc0000
[ 1156.464703][   T28] audit: type=1326 audit(1755214033.209:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17357 comm="syz.2.3165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3de98ebe9 code=0x7ffc0000
[ 1156.535844][ T5878] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1156.591519][   T28] audit: type=1326 audit(1755214033.209:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17357 comm="syz.2.3165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3de98ebe9 code=0x7ffc0000
[ 1156.593775][ T5878] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1156.624885][T17371] 
[ 1156.627902][T17371] =============================
[ 1156.632786][T17371] WARNING: suspicious RCU usage
[ 1156.633600][   T28] audit: type=1326 audit(1755214033.219:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17357 comm="syz.2.3165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7fc3de98ebe9 code=0x7ffc0000
[ 1156.637888][T17371] 6.6.101-syzkaller #0 Not tainted
[ 1156.660243][   T28] audit: type=1326 audit(1755214033.219:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17357 comm="syz.2.3165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3de98ebe9 code=0x7ffc0000
[ 1156.665137][T17371] -----------------------------
[ 1156.665145][T17371] kernel/events/callchain.c:161 suspicious rcu_dereference_check() usage!
[ 1156.687720][   T28] audit: type=1326 audit(1755214033.219:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17357 comm="syz.2.3165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3de98ebe9 code=0x7ffc0000
[ 1156.692397][T17371] 
[ 1156.692397][T17371] other info that might help us debug this:
[ 1156.692397][T17371] 
[ 1156.692408][T17371] 
[ 1156.692408][T17371] rcu_scheduler_active = 2, debug_locks = 1
[ 1156.745770][T17371] 1 lock held by syz.2.3169/17371:
[ 1156.751224][T17371]  #0: ffffffff8cd2fd40 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x37/0x70
[ 1156.761597][T17371] 
[ 1156.761597][T17371] stack backtrace:
[ 1156.767673][T17371] CPU: 1 PID: 17371 Comm: syz.2.3169 Not tainted 6.6.101-syzkaller #0
[ 1156.775829][T17371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1156.785871][T17371] Call Trace:
[ 1156.789150][T17371]  <TASK>
[ 1156.792064][T17371]  dump_stack_lvl+0x16c/0x230
[ 1156.796728][T17371]  ? show_regs_print_info+0x20/0x20
[ 1156.801994][T17371]  ? load_image+0x3b0/0x3b0
[ 1156.806507][T17371]  lockdep_rcu_suspicious+0x1e1/0x300
[ 1156.811874][T17371]  get_callchain_entry+0x2a9/0x3c0
[ 1156.816977][T17371]  get_perf_callchain+0xa3/0x4b0
[ 1156.822089][T17371]  ? put_callchain_entry+0xb0/0xb0
[ 1156.827901][T17371]  ? preempt_schedule_common+0x82/0xc0
[ 1156.833360][T17371]  ? preempt_schedule+0xab/0xc0
[ 1156.838648][T17371]  ? schedule_preempt_disabled+0x20/0x20
[ 1156.844405][T17371]  ? _raw_spin_unlock_irqrestore+0x86/0x110
[ 1156.850487][T17371]  __bpf_get_stack+0x2d7/0x510
[ 1156.855255][T17371]  ? stack_map_get_build_id_offset+0x720/0x720
[ 1156.861416][T17371]  ? __cant_sleep+0x210/0x210
[ 1156.866702][T17371]  ? bpf_prog_d43750871481577d+0x45/0x49
[ 1156.872325][T17371]  bpf_get_stack_raw_tp+0x1a9/0x210
[ 1156.877514][T17371]  bpf_prog_d43750871481577d+0x45/0x49
[ 1156.882953][T17371]  bpf_prog_run_pin_on_cpu+0x63/0x140
[ 1156.888338][T17371]  bpf_prog_test_run_syscall+0x311/0x490
[ 1156.893960][T17371]  ? sock_gen_cookie+0x60/0x60
[ 1156.898806][T17371]  ? sock_gen_cookie+0x60/0x60
[ 1156.903556][T17371]  bpf_prog_test_run+0x321/0x390
[ 1156.908513][T17371]  __sys_bpf+0x440/0x800
[ 1156.912771][T17371]  ? bpf_link_show_fdinfo+0x350/0x350
[ 1156.918179][T17371]  ? lock_chain_count+0x20/0x20
[ 1156.923043][T17371]  __x64_sys_bpf+0x7c/0x90
[ 1156.927468][T17371]  do_syscall_64+0x55/0xb0
[ 1156.931872][T17371]  ? clear_bhb_loop+0x40/0x90
[ 1156.936621][T17371]  ? clear_bhb_loop+0x40/0x90
[ 1156.941298][T17371]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1156.947228][T17371] RIP: 0033:0x7fc3de98ebe9
[ 1156.951649][T17371] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1156.971906][T17371] RSP: 002b:00007fc3df89d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1156.982308][T17371] RAX: ffffffffffffffda RBX: 00007fc3debb5fa0 RCX: 00007fc3de98ebe9
[ 1156.990568][T17371] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a
[ 1156.998740][T17371] RBP: 00007fc3dea11e19 R08: 0000000000000000 R09: 0000000000000000
[ 1157.006787][T17371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1157.014754][T17371] R13: 00007fc3debb6038 R14: 00007fc3debb5fa0 R15: 00007ffca6ac29c8
[ 1157.022741][T17371]  </TASK>
[ 1157.033846][ T5878] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 1157.043747][ T5878] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1157.092990][ T5878] usb 5-1: config 0 descriptor??
[ 1157.098928][ T5878] usb 5-1: can't set config #0, error -71
[ 1157.162331][ T5878] usb 5-1: USB disconnect, device number 3
[ 1159.117506][T14216] Bluetooth: hci1: command 0x0406 tx timeout