last executing test programs:

3m38.527814137s ago: executing program 1 (id=2):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x24000840)
syz_emit_ethernet(0x38, &(0x7f0000000040)={@local, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x2, 0x2c, 0x1, @remote, @local, {[], "0639"}}}}}, 0x0)

3m33.777941063s ago: executing program 1 (id=11):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
recvmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/49, 0x31}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3400000044000701feffffff00000000037c0000040042800c00018006000600800a0000100002"], 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f00000105c0)='./file1\x00', 0x2, &(0x7f0000000180)=ANY=[@ANYBLOB='active_logs=4,jqfmt=vfsv0,prjjquota=f2fs\x00,mode=adaptive,heap,norecovery,fsync_mode=posix,user_xattr,disable_roll_forward,\x00\x00\x00'], 0x1, 0x105da, &(0x7f0000010600)="$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")
truncate(&(0x7f0000000040)='./file1\x00', 0x1001bfc)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a)
ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000000000000ff"])

3m28.403824283s ago: executing program 1 (id=17):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
socket$kcm(0x10, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8)
setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'erspan0\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000100900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, 0x0, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff)
sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040091}, 0x20000010)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$unix(0x1, 0x2, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000140)={'wlan1\x00'})
sendmsg$NL80211_CMD_NEW_INTERFACE(r5, 0x0, 0x24044884)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10)
sendto(r1, 0x0, 0xfffffffffffffceb, 0xc040, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

3m13.850189079s ago: executing program 4 (id=37):
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x5, &(0x7f0000000040)=0x24, 0x5)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xf)
futex(&(0x7f00000000c0)=0x1, 0x0, 0x1, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x20000000)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000025300)=""/102392, 0x18ff8)
lgetxattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="73401166acfd3f797374656d2e415e7d00"], &(0x7f0000000280)=""/79, 0x4f)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000240), 0xa000, 0x0)
syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x80140, 0x0)
r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
fcntl$setlease(r1, 0x400, 0x0)
fsetxattr$system_posix_acl(r2, &(0x7f0000000140)='system.posix_acl_default\x00', 0x0, 0x0, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x4)
writev(r3, &(0x7f00000000c0), 0x0)
r4 = socket$inet(0x2, 0x2, 0x0)
r5 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC_PROXY(r5, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x6, 0x4, @remote, 0x5}, {0xa, 0x4e20, 0x6, @private1={0xfc, 0x1, '\x00', 0xf6}, 0xffffffff}, 0x1, {[0xfffffffb, 0x1, 0x1, 0x800d, 0x6a, 0xeb, 0x4, 0xc4f9]}}, 0x5c)
setsockopt$inet_mreqn(r4, 0x0, 0x23, 0x0, 0x0)

3m10.871639267s ago: executing program 32 (id=17):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
socket$kcm(0x10, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8)
setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'erspan0\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000100900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, 0x0, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff)
sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040091}, 0x20000010)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$unix(0x1, 0x2, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000140)={'wlan1\x00'})
sendmsg$NL80211_CMD_NEW_INTERFACE(r5, 0x0, 0x24044884)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10)
sendto(r1, 0x0, 0xfffffffffffffceb, 0xc040, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

3m10.197397624s ago: executing program 4 (id=44):
r0 = syz_open_dev$dvb_demux(0x0, 0x7a5966a2, 0x100)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
syz_io_uring_setup(0xf01, &(0x7f0000000080)={0x0, 0x7f3d, 0xc00, 0xe, 0x42f6}, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0))
r4 = io_uring_setup(0x30a9, &(0x7f00000007c0)={0x0, 0x54f8, 0x40, 0x400003, 0x89})
io_uring_setup(0x669, &(0x7f00000002c0))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0x1c, 0x20000048, 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
r6 = dup(r5)
setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x20)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c)
sendmsg$inet6(r5, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x10000007, 0xfffc, 0xe655, 0x2, 0x85, 0x8, 0xff}, 0x9c)

3m6.006507356s ago: executing program 4 (id=46):
mkdir(&(0x7f0000000380)='./file1\x00', 0xa)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x400000, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r2=>r1}, './file1\x00'})
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x223}}, './file1\x00'})

3m5.390508413s ago: executing program 4 (id=48):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newtclass={0x104, 0x28, 0x200, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x4, 0x5}, {0xf, 0x4}, {0xd, 0xfff3}}, [@tclass_kind_options=@c_htb={{0x8}, {0x64, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x1, 0x2, 0x0, 0x9, 0x21d7, 0xa81}, {0x4, 0x0, 0x3, 0x2, 0xfffd, 0x338}, 0xffffff88, 0x1, 0xfffffffb, 0x41, 0xc}}, @TCA_HTB_PARMS={0x30, 0x1, {{0xc0, 0x3, 0x1, 0x65, 0x6, 0x8}, {0x2, 0x0, 0x1c18, 0x9ccf, 0x68, 0x4}, 0x0, 0x5, 0x3, 0xe, 0x7ff}}]}}, @tclass_kind_options=@c_ingress={0xc}, @tclass_kind_options=@c_skbprio={0xc}, @TCA_RATE={0x6, 0x5, {0x2, 0x80}}, @TCA_RATE={0x6, 0x5, {0x4, 0x4}}, @tclass_kind_options=@c_htb={{0x8}, {0x8, 0x2, [@TCA_HTB_OFFLOAD={0x4}]}}, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_CEIL64={0xc, 0x7, 0xffffffffffffff81}, @TCA_HTB_RATE64={0xc, 0x6, 0x3}]}}, @tclass_kind_options=@c_ingress={0xc}]}, 0x104}}, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0x1c, &(0x7f0000000500)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x100b8, 0x0, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x0, 0xb0e4}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xa0}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001140)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)

3m3.552003054s ago: executing program 5 (id=40):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x24000840)
syz_emit_ethernet(0x3f, &(0x7f0000000040)={@local, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x9, 0x2c, 0x1, @remote, @local, {[@routing={0x2c, 0x0, 0x0, 0x1}], "06"}}}}}, 0x0)

3m1.444888599s ago: executing program 4 (id=54):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000196c0)=ANY=[@ANYRESDEC=r0, @ANYRES32=0x0, @ANYBLOB="fffe01000100a70008001b000000000010001a800c000a800500080008000000"], 0x38}}, 0x4000)
r1 = socket$inet(0x2, 0x0, 0x4)
r2 = fsopen(&(0x7f0000000040)='squashfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
getpgrp(0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x13)
ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000019700)={0x79, 0x0, 0x5d8})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file2\x00', 0x2810812, &(0x7f0000000240)=ANY=[@ANYBLOB="6d6f64653d30783030303030303000000000ffffffff322c696f636861727365743d69736f01000080000000006865636b3d7374726963742c636865636b3d72656c617865642c6d61703d6e6f726d616c2c6769643d", @ANYRESHEX=0x0, @ANYBLOB=',uid=', @ANYRESHEX=0x0, @ANYBLOB=',nocompress,iocharset=cp861,\x00'], 0x1, 0xa2c, &(0x7f0000000300)="$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")
mount$bind(0x0, &(0x7f0000000200)='./file2\x00', 0x0, 0x2125099, 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./bus\x00', 0x402300a, 0x0, 0x5, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000000680)=""/102400, 0x19000)
sendmsg$SEG6_CMD_SETHMAC(r3, 0x0, 0x0)
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0xa8400, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000002b40)='cubic', 0x4)
setsockopt$inet6_int(r5, 0x29, 0x43, 0x0, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x3, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x0)
syz_usbip_server_init(0x1)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000000080))

2m58.733825261s ago: executing program 4 (id=57):
syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5b9, &(0x7f0000000680)="$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")
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000640)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}})
ioctl$FUSE_DEV_IOC_CLONE(r0, 0xe503, 0x0)

2m42.409777101s ago: executing program 33 (id=57):
syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5b9, &(0x7f0000000680)="$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")
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000640)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}})
ioctl$FUSE_DEV_IOC_CLONE(r0, 0xe503, 0x0)

1m4.038697461s ago: executing program 0 (id=201):
r0 = syz_open_dev$radio(&(0x7f0000000100), 0x3, 0x2)
syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2)
r1 = syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
r3 = open(&(0x7f0000000180)='./file1\x00', 0x14977e, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x10040, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@dfltuid}]}})
r4 = syz_io_uring_setup(0x88f, 0x0, 0x0, 0x0, 0x0)
write$P9_RREAD(r4, &(0x7f0000000340)={0xce, 0x75, 0x1, {0xc3, "528d17fffae707e1a6a7071d4b15ea3204daa231d3fcd5ffdd5e422e1915408d8332c1bca81e119e69000cc4419441b6b1994b969c14541a76bd1ae00f689012418805cd5a21eae1fad0edc8dd406cfc0aa817ee1dbf13334abea9e8d6bd6b1a346ea1b61eaa342d4dfda2b24bafa521f6db2bff4c71e24ecd8a4598e18b50030a247b6be2979c68d89eb31aaed7d080a153df6150ae8f67136aa57b5fe26607cd50469eca3114d52d93c1012260e91d4401b84827657de0faad9d45d51495c9ae3aa2"}}, 0xce)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r5 = socket$netlink(0x10, 0x3, 0xf)
bind$netlink(r5, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4)
sendmsg$NFT_BATCH(r5, &(0x7f0000005cc0)={0x0, 0x0, &(0x7f0000005c80)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001800010000000000000000000100000a140000000b0a010200"], 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x800)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000080)={0x5, 0x2})
ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f00000000c0)=0x2)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r8, 0xc01064c8, &(0x7f00000000c0)={0x0, 0x2000000, 0x0})
r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000280)={[0x60000000004, 0x1000000000, 0x80000000000005, 0x41, 0x2000000, 0x0, 0x2004cb, 0xffffffffeffffffe, 0xa1d, 0x9, 0x5, 0x0, 0x3, 0x2, 0x2], 0x10000, 0x202})
ioctl$KVM_RUN(r9, 0xae80, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4040aea0, &(0x7f00000000c0)=@arm64={0xa, 0xc, 0x3, '\x00', 0x2})
ioctl$KVM_SET_SREGS(r9, 0x4138ae84, &(0x7f0000000100)={{0x0, 0xeeee0000, 0x0, 0x0, 0x8, 0x2, 0x1, 0x2, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0xa000, 0xd, 0x0, 0x0, 0x0, 0x10, 0x0, 0x7, 0x7}, {0x1000, 0x1000, 0x9, 0xff, 0x4, 0x4, 0x0, 0x0, 0x3, 0xf6, 0x0, 0xfc}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x8, 0x8, 0x6, 0xfc}, {0xeeee8000, 0xffff1000, 0x9, 0x75, 0x0, 0x8, 0x0, 0x0, 0x8, 0x2, 0x83}, {0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x42, 0x0, 0x0, 0x0, 0x5}, {0x58000, 0x3000, 0xd, 0xfe, 0x8, 0x1, 0x3, 0x0, 0x0, 0x0, 0x4}, {0x2, 0x9000, 0x9, 0x0, 0x0, 0x1, 0x0, 0xca, 0x26}, {0x10000, 0x7}, {0x7000}, 0xddf8ffdb, 0x0, 0x13cd800, 0x42044, 0x0, 0x0, 0x0, [0xb, 0x0, 0x1, 0x40]})
ioctl$KVM_RUN(r9, 0xae80, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1})

1m2.651900815s ago: executing program 0 (id=205):
r0 = syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)="180c4552", 0x4)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x4, 0x0, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101090, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12af8c9, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x40042, 0x144)
unshare(0x22020400)
umount2(&(0x7f0000000180)='./file0/../file0\x00', 0x0)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000207, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000200f97a640d35a7386700", "28094cf00000000000004ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac000000000000000000080000000000000000001900", "90be8b1c55080021000c547d03d8a0f4bd00", [0x0, 0x9]}})

1m2.303668833s ago: executing program 0 (id=207):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="1c00eaffffffffffff060000000000000000000808000540000000d4"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x404000c)
socket$nl_route(0x10, 0x3, 0x0)
openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000c80)='./file0\x00', 0x810400, &(0x7f0000000200)=ANY=[@ANYBLOB='lastblock=00000000000000000226,mode=00000000000000000000000,session=00000000000000000000,noadinicb,nostrict,uid=', @ANYRESDEC=0x0, @ANYRESOCT=0x0], 0x4, 0xc24, &(0x7f0000000d00)="$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")
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
flock(0xffffffffffffffff, 0x0)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x64841}, 0x40000)
ptrace(0x10, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0)

59.957478915s ago: executing program 0 (id=209):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0)
ioctl$FBIOBLANK(r0, 0x4611, 0x3)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4880)
r1 = socket$packet(0x11, 0x2, 0x300)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f0000000280)={[{@rodir}, {@numtail}, {@utf8no}, {@fat=@usefree}, {@shortname_mixed}, {@uni_xlateno}, {@numtail}, {@utf8no}, {@fat=@check_normal}, {@fat=@codepage={'codepage', 0x3d, '864'}}, {@fat=@check_strict}, {@shortname_winnt}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@utf8no}, {@rodir}]}, 0x3, 0x27b, &(0x7f0000000640)="$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")
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0))
setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES8=r0], 0x0, 0x2d, 0x0, 0x0, 0x7}, 0x28)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52)
ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000100)=ANY=[])
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000891000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f0000000140)="889f2eb1baf80c66b8ce8d168f66efbafc0ced66b9800000c00f326635010000000f30ba4200edbaa000b8bfb6ef67d8e666b8000000000f23c80f21f866350000c0000f23f82ef0300b3e260f79f93e9e", 0x51}], 0x1, 0x3a, &(0x7f0000000240)=[@efer={0x2, 0x1}], 0x1)
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f00000003c0)={[{@acl}, {@heartbeat_local}, {@dir_resv_level={'dir_resv_level', 0x3d, 0x3}}, {@coherency_full}, {@cluster_stack}, {@user_xattr}, {@coherency_full}, {@resv_level={'resv_level', 0x3d, 0x1}}]}, 0x81, 0x442e, &(0x7f0000008940)="$eJzs3cFPXNUCB+BzL7xX6Gv7oK+LvsTESWyiUUOgK5UmAqWl0GJNtY1xMx1g2qID08BgXHSBuyauTFwYF40m7lg1LNzWP8GNy7puYhduTEwaMTNzB7iXmTBtGLD6fUm53HPPOfcwv7n3nllMT5yo3Jpfzs0v5wqLufLsjeXTuU/KpZWFYoj3yUGfn/Z0IifZH5zLZ8+/d+10CD/M/fRoY2NjI1R1h6aGtv3+2693ZrdvG+JMm2q/zXvbKx+GEE7sGFdVVwjhg+9DiEIIo0nZWLLtDSEcC/Vj1+58fj23R6O5/7B4Jv9k+u768KmptXvrrf/2KISvS/9//ebCLy91Df/86h6dHgAAAAAAAAAAAAAAAACA59zElctX3x0cCg+i0L0W7fy+7kSybfX92I0982Ln/1gAAAAAAAAAAAAAAAAAAAD4i9r6/n8uOt7k+//jyXakRfuNtzs/Rjpn8p3L4+cGh5L136Mdx99Iih6PdoX+Juu+Z9d/H820b77++87zPKvG+Brn7QtRPJDaj+OBgRC+TRZ+Pxkdjkvl5cprN8ori3N7NoznVjr/+ur9qXSSBf3bzX8s03/n1///3453U3X/+t69xf7W0vl3taz33WdRW/mfzbTbj/x5dun8u2tlvdsrjNRvANX8v+jePf/xTP+dyv9YCCEXVceaS90BqnOYanmr+Qpp6fz/VStL3TqTF7LV9f97Jv9zmf4P6v6/mn0Q0VQ6/3/XynpSNbau//549+v/fKb/g8i/Ov5Vz/+2pPM/VC/sTlWpvZLt3v8nMv13Kv+rcTLOY1HqHbAW1ctb/X91pKXzT1/54dDWw+DxaNzW/O9Cpv/9+vzXOG/j81/j9v9KVP/8R3Pp/Htb1mv3+p/MtOv0/X+kNv/jWaXzP1wrS8+d+2o/281/KtN/p/KvzUp6Gvlv3U/+OFQv/8b8ry3p/P9TL4y311it/azN/6Ld5/8XM/0fxPyvOv7VuGlls8KMdP5HWtar5v9jG8//S5l2nc8/hMGnTbX1Y+4fJ53/0Zb1atd/z+75T2fadTr/lzvZOQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBzYCzZ9oUoHkjtx/HAQAhnk/2T4XA0U5jLz5TKsx8vhzCelOfC8ehmqTxTKOXnF8tzxXyhVCrPhnAuOX4i9ETLpXIlv1C4fX6zr97oVrGwVJkpFiohhImk/IVwtNHXzHxloXA7hHBh89h/4/LS7VuFxfzc/NJbg4ODg2Fycwz9UfHTSnGxUj97/WgIU5tt+6Jtg6sdvrg5liPRR+WVpcVCqVZ+aVubUnm2UNrWZjo59mXojypLK4uzhUoxXyrfbJzvII0k2/HJK+9fuTS04/j1qL4d299hAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPCUHgy/+VUIobu+F4cQclHyS5T8S7n/sHgm/2T67vrwqam1e+uPmtUBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+ZAcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgq79I/SQBDFAfjNWGjpMayW3c52RREtXBE8gR7Dw+hRvIR3sEiRNkUIJLMQ9g9sk1Tf1zyYHzPvwTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWO7xrXt/rZuIFFfby4jfz7//4/y51O+76fsXZ5iR03l66e4f6qb8exrlt+Vo1eZ9ull/fcRE7f0M9mS4TwfjPkNz+zY3X9/3OlKuIqIt+U3KuaqWvQUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7duBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADxwIAAAAAwvyto+jbAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBfAQAA//+V1h8r")

57.124699094s ago: executing program 0 (id=213):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket(0x1d, 0x2, 0x6)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
close(r1)
connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x2, 0x2, 0x1002, 0x1, {0xa, 0x4e24, 0x4, @empty, 0x1f}}}, 0x3a)
setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000000)={0x0, 0x80000000}, 0x8)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', <r3=>0x0})
bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r3, 0x8000000000000003, {0x0, 0x0, 0x2}, 0xfd}, 0x18)
r4 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000440)={0xfffffffe, 0xa, 0x8, 0x10000000}, 0x10)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000080)={0x4, 0x6}, 0x4)
sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001200010a00000000000000008038"], 0x26}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x300, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x10, 0x9}, {0xf, 0x5}, {0xe, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004845}, 0x480c5)
close(r0)

55.936605374s ago: executing program 0 (id=215):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="1c00eaffffffffffff060000000000000000000808000540000000d4"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x404000c)
socket$nl_route(0x10, 0x3, 0x0)
openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000c80)='./file0\x00', 0x810400, &(0x7f0000000200)=ANY=[@ANYBLOB='lastblock=00000000000000000226,mode=00000000000000000000000,session=00000000000000000000,noadinicb,nostrict,uid=', @ANYRESDEC=0x0, @ANYRESOCT=0x0], 0x4, 0xc24, &(0x7f0000000d00)="$eJzs3V9oXOl5B+D3myOtJW/TzG42zh/nYmAD2Xqzi2R51yregBwrIgvGa1ZWLhYKGluyO6w0kiW5eEMJLiSUkLa45CKXNWwCvauvWggNuFfbEgKiV6UXxW03Zns3CaQtvViVM/ONNNLalrK2JXn9PMb+nTnznpnvzOrVnDN7zpwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACK+/o2TQ8Npr0cBAOymM5NvDo14/weAJ8o5+/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGwvRRHfjRTv/qCVptu3OwZON5pXrk6NT9x9scEUKSpRtOvLvwPDR0eOvfLq8dFu3n/5h+0L8cbkuZO1Uwvzi0uzy8uzM7WpZuPCwszsjh/hQZff6kj7BajNv31l5uLF5drRl0c23X21eufA04eqJ0YPj7zVrZ0an5iY7Knp6//Yz/4R6eE9FJ8gT0UR34wU7730QapHRCUevBe2+d3xqA1GX9l/7ZWYGp9or8hco95cKe9MlVzVF1HtWWis2yO70IsPZCziWvnfqRzwkXL1JhfrS/Xzc7O1s/WllcZKY6GZKp3RlutTjUqMpojFiGgVez149pv+KOJYpLjz61Y6HxFFtw9ePDP55tDI9g/QtwuDvMfTVouI1XgMehb2qQNRxF9Gih9OD8WF3Ffttnk/4itlvhZxucxbKa7n26n8BTEa8SvvJ/BY64sifhEpFlIrzXR7v71defpbtdebFxd6arvblY/9/sFusm3CPjYQRZxvb/G30sf/sAsAAAAAAAAAAAAA2B1F/DRS3Jx/IS1G7zmljeal2rn6+bnOUcHdY/9ream1tbW1aupkLedQzrGcZ3NO51zMeS3n9Zw3ct7MeSvnas7bOVs5o5KfP2ct51DOsZxnc07nXMx5Lef1nDdy3sx5K+dqzts5WznDeU8AAAAAAAAAAAAAAAAAAAA8ZINRxESkuPHuH7WvKx3t69J/+sTomfHneq8Z/7ltHqesfTkifho7uyZvf77WeKqUfx7+egHbG4givpOv//cnez0YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgX6hEEd+NFD/6TStFioixiOno5O1ir0cHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJQGUhGnIsV/fWOgfXs1Ir4YER+ulX8i/ndtq70eMQAAAAAAAAAAAAAAAAAAAHwCpSIuR4ofv9dK1Yi4Wr1z4OlD1ROjh0feKqKIVJb01r8xee5k7dTC/OLS7PLy7Extqtm4sDAzu9OnGzjdaF65OjU+8UhWZluDj3j8gwOnFhbfWWpc+sOVu95/cODk+eWVpfqFu98dg9EXMdQ750h7wFPjE+1BzzXqzfaiqXKPAfZF1Ha6MgAAAAAAAAAAAAAAAAAAAOwbB1MR45Hi+Z8dS93zxvs65/x/qnOrWK/9yR9vfBfA3Jbs6v3+gJ1Mp50O9Ej7xPva1PjExGTP7L7+j5aWY0qpiM9GisN///n2+fApDt713Piy7s8ixej/Hct11cNl3dimqoEjU+MTtTMLzZdOzs0tXKiv1M/PzdYmF+sXdvzFAQAAAAAAAAAAAAAAAAAAAHAfB1MRfx4pjr2+mrrXnc/n//d1bvWc//9aRPey8wNpc65rn9v/u+1z+zvTnz4x+vrR5+81/1Gc/1+OKaUiPowUz/zV59vX0++e/z+0pbas+3Gk+MX3vpTrKk+VdcPd1ek84sXG3OxQWftipPj+2W5ttGtfzbWf2agdLmv/IVI8+weba4/n2uc2ao+WtXcixcSZu9d+dqN2pKwdjBRf/dNat/ZgWfv1XHtoo/blCwtzMzt9eXkylf3/b5Hiy8PfTN2f+Xv2f8/3f1zbkus+0vP3n35Y/V/tmXct9/Va7v/hbfr/cqT4i+tfynWd3jua73+m/e9G/38/UvzepzbXvpJrn92oHd7pasFeKvv/nyLF6u1/Wf+Zz/2fO2ujQ3v7/4t9m7O7XbBX/f9Mz7xqHtfIb/lawJNm+Z1vv12fm5tdMmHChIn1ib3+zQQ8auX2/39Hiq9dLlJ3PzZv//9O59bG/v//fGdj+//Elly3R9v/z/bMO5H3Wvr7IgZW5hf7PxcxsPzOt19qzNcvzV6abY6MjB7//WPDR48P9z/V3bnfmNrxawePu7L/344UP/mbf17/HHvz/v/dP/87uCXX7VH/f6Z3nTbt1+z4pYAnTtn/fx0p/vXGB+v/v+l+n/91P+d74fnNOdgt2qP+f65nXi3/M9oz74Ui4uROnwsAAAAAAAAAAB4TB1MRP4sUf9v6x/Vr3m8+/ie+3K3tPf7vXvbD9f8BgPsr3/8nI8XPD341db9DZifH/89syXV7dPzvoZ55M7t0XvOOX2QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiYUhRxIFK8+4NWul2UtzsGTjeaV65OjU/cfbHBFCkqUbTry78Dw0dHjr3y6vHRbt5/+YftC/HG5LmTtVML84tLs8vLszO1qWbjwsLM7I4f4UGX3+pI+wWozb99ZebixeXa0ZdHNt19tXrnwNOHqidGD4+81a2dGp+YmOyp6ev/2M/+EenhPRSfIE9FET+PFO+99EH69yKiEg/eC9v87njUBqOv7L/2SkyNT7RXZK5Rb66Ud6ZKruqLqPYsNNbtkV3oxQcyFnEtIirlgI+Uqze5WF+qn5+brZ2tL600VhoLzVTpjLZcn2pUYjRFLEZEq9jrwbPf9EcRfxcp7vy6lf6jiCi6ffDimck3h0a2f4C+XRjkPZ62WkSsxmPQs7BPHYginosUP5weiv8sOn3Vbpv3I75S5msRl8u8leJ6vp3KXxCjEb/yfgKPtb4o4mykWEit9H6Re7+9XXn6W7XXmxcXemq725WP/f7BbrJtwj42EEX8sr3F30q/9H4OAAAAAAAAAAAAAPtcEV+LFDfnX0jt80PXzyltNC/VztXPz3UO6+8e+1/LS62tra1VUydrOYdyjuU8m3M652LOazmv57yR82bOWzlXc97O2coZlfz8OWs5h3KO5TybczrnYs5rOa/nvJHzZs5bOVdz3s7ZyhmOkwYAAAAAAAAAAAAAAAAA4BGpRBHfixQ/+k0rrRWd68tORydvO88VPtH+PwAA//9mFkcG")
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
flock(0xffffffffffffffff, 0x0)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x64841}, 0x40000)
ptrace(0x10, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0x50b, 0x8, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x200, 0x5, 0x0, 0x0, 0xf407}, 0xfffffffb, 0x0, 0x0, 0x4, 0x7, 0x4, 0x40, 0x9, 0x0, 0x10000, {0x1, 0x0, 0x0, 0x1006}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc71f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x5, 0xa, 0x70}}}}}]}}]}}, 0x0)
sync()
syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000040)='./bus\x00', 0x8889b, 0x0, 0xfc, 0x0, &(0x7f00000000c0))
r6 = socket$can_j1939(0x1d, 0x2, 0x7)
getsockopt$SO_J1939_PROMISC(r6, 0x6b, 0x2, &(0x7f0000000080), &(0x7f0000000040)=0xfffffffffffffe58)

39.002174644s ago: executing program 34 (id=215):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="1c00eaffffffffffff060000000000000000000808000540000000d4"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x404000c)
socket$nl_route(0x10, 0x3, 0x0)
openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000c80)='./file0\x00', 0x810400, &(0x7f0000000200)=ANY=[@ANYBLOB='lastblock=00000000000000000226,mode=00000000000000000000000,session=00000000000000000000,noadinicb,nostrict,uid=', @ANYRESDEC=0x0, @ANYRESOCT=0x0], 0x4, 0xc24, &(0x7f0000000d00)="$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")
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
flock(0xffffffffffffffff, 0x0)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x64841}, 0x40000)
ptrace(0x10, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0x50b, 0x8, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x200, 0x5, 0x0, 0x0, 0xf407}, 0xfffffffb, 0x0, 0x0, 0x4, 0x7, 0x4, 0x40, 0x9, 0x0, 0x10000, {0x1, 0x0, 0x0, 0x1006}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc71f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x5, 0xa, 0x70}}}}}]}}]}}, 0x0)
sync()
syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000040)='./bus\x00', 0x8889b, 0x0, 0xfc, 0x0, &(0x7f00000000c0))
r6 = socket$can_j1939(0x1d, 0x2, 0x7)
getsockopt$SO_J1939_PROMISC(r6, 0x6b, 0x2, &(0x7f0000000080), &(0x7f0000000040)=0xfffffffffffffe58)

8.732559285s ago: executing program 2 (id=260):
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x1010002, &(0x7f0000000180)={[{@iocharset={'iocharset', 0x3d, 'cp860'}}, {@shortname_winnt}, {@uni_xlate}, {@uni_xlate}, {@numtail}, {@utf8}, {@utf8no}, {@shortname_lower}, {@numtail}, {@shortname_mixed}, {@utf8no}, {@fat=@codepage={'codepage', 0x3d, '950'}}, {@utf8no}, {@fat=@dmask={'dmask', 0x3d, 0x13}}, {@fat=@nfs_stale_rw}, {@uni_xlate}, {@numtail}]}, 0x1, 0x379, &(0x7f00000028c0)="$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")
r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
write$binfmt_elf32(r0, &(0x7f00000016c0)=ANY=[@ANYBLOB="7f454c46040700030700000000000000020003"], 0x58)
close(r0)
execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000000)={0x9, 0x3})
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x40)

8.293150527s ago: executing program 3 (id=262):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2b, 0x0, {{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x1, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in=@rand_addr=0x64010102, 0x0, 0x3c}, 0x2, @in=@local, 0x6, 0x4, 0x3}]}]}, 0xfc}}, 0x0)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
sendmsg$inet6(r1, &(0x7f0000000440)={&(0x7f0000000300)={0xa, 0x4e24, 0xffffffff, @mcast1, 0x1fffd}, 0x1c, 0x0}, 0x48814)

8.063661094s ago: executing program 3 (id=263):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000380)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r0 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
writev(r0, &(0x7f0000001200)=[{&(0x7f0000000040)="9b3236bf3128702b84e739e340aefd52f6927e1880724ea4ee84af20417b2f4c4eae764732107158f0c4c403e5a2b875a4ba80d3d2651d7e78cb5026ab5d1c335b700e3b057364fc09e0ff7543be358d33a0bc6ed6e8a96323d9c7f53d36c9279809c28aacd1be7534fe9ac703e0d5393ac3ae20cfc32f48dbde4abc4321e50afdc5ab0acc41838c105e", 0x8a}, {0x0}, {&(0x7f00000001c0)="2af7a9be2789e60f5731568224dadc67fc49d196f1abbee4de5e2e22b0c7519659ec98dcd23cb1bccc8edbe876da89325c55848a1623", 0x36}, {&(0x7f0000000200)="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", 0xe00}], 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r2, 0x0, 0x18, &(0x7f0000000180), 0x4)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_MON_SET(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000010c0)=ANY=[@ANYBLOB="895ea8a929d6c55290aa23620b3c8592af46b76a5801c9f499a3fd3963d745b88aa6c93d709190a9ecb6c50dd85a892e8e8a6233c184169701e03ee4bab5ad3b2e425f800cb9f583c56b8e797968243bffbf4ef227e2e0bd5d", @ANYRES64=r0, @ANYBLOB="010025bd7000fcdbdf2511000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000400}, 0x20000000)
mmap(&(0x7f0000384000/0x3000)=nil, 0x3000, 0xb635773f07ebbeee, 0x8031, r3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
syz_emit_vhci(&(0x7f00000021c0)=ANY=[@ANYBLOB=';\x00'], 0xe)
prctl$PR_MCE_KILL(0x43, 0x0, 0x1)
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
r6 = socket(0x10, 0x803, 0x0)
bind$netlink(r6, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
r7 = socket(0x10, 0x803, 0x0)
bind$netlink(r7, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r8 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0)
close(r8)
r9 = socket(0x29, 0x803, 0x5)
ioctl$sock_SIOCETHTOOL(r9, 0x8946, 0x0)

7.970070669s ago: executing program 3 (id=264):
r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000004400)={&(0x7f0000004380)={0x34, r0, 0x20d, 0x70bd2b, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xffff]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}]}, 0x34}}, 0x4000)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"})
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
capset(0x0, 0x0)
prctl$PR_SCHED_CORE(0x3a, 0x8, 0x0, 0x2, 0x0)
r7 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0)
read$FUSE(r6, &(0x7f0000006340)={0x2020, 0x0, <r8=>0x0}, 0x2058)
write$FUSE_LSEEK(r6, &(0x7f00000021c0)={0x18, 0x0, r8, {0x7}}, 0x18)
read$FUSE(r6, &(0x7f000000a380)={0x2020, 0x0, <r9=>0x0}, 0x2020)
write$FUSE_IOCTL(r6, &(0x7f0000002140)={0x20, 0x0, r9, {0xfffffffe, 0x0, 0x8000403}}, 0x20)
syz_fuse_handle_req(r6, &(0x7f0000008380)="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", 0x2000, &(0x7f0000004e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="d000000000000000090000000000000005000000000000000300000000000000a3"], 0x0, 0x0, 0x0, 0x0})
getdents64(r7, 0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x4)
syz_open_dev$usbfs(0x0, 0x77f, 0x40000)
open(&(0x7f0000000080)='./file0\x00', 0x101081, 0x10)
syz_emit_ethernet(0x0, 0x0, 0x0)
r10 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r10, 0xc0184800, &(0x7f0000000100)={0x1, r5})

7.263806704s ago: executing program 2 (id=265):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
recvmsg(r0, &(0x7f00000031c0)={0x0, 0x0, 0x0}, 0x2000)
r1 = socket(0x2b, 0x80801, 0x1)
syz_usb_connect$lan78xx(0x3, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendto(r1, &(0x7f0000000540)="fd733e13a64442526bd69018ea9bb5479211417e07dc8a74ca442df202b0543d46139018efd834bc2d0520e39578a0eab23f0c55f37120357dd85d6a0b22c207d8ceb9ab0b18cf2d0321d59fda36032d7900fe5b5f6c03ba80bc0023f8028207e51f62d502e166a0c86b7d48a7efff799093125735b289652c6d9fcb58c8f3fb0a3a37d6ad1e532f4c57a200c3296e06aecf6e06411fe78547cca60c66cb29ac23e04d73377cf213d8b2f363e33657e9bdfd33d576d4a3fd071c097a0ff9ac6e672c00b5fa05950ac320b6975bcedf90df8972df7c963466", 0xd8, 0x20000004, &(0x7f0000000640)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @bcast]}, 0x80)
sendto(0xffffffffffffffff, 0x0, 0x0, 0x810, 0x0, 0x0)
listen(0xffffffffffffffff, 0x90004)
syz_emit_vhci(&(0x7f0000001180)=ANY=[@ANYBLOB="043e130100c90001", @ANYRESHEX, @ANYBLOB="28cbc43f3f9e4a0769ec04073d62d51a0a9ffe243f458bb7dc848aaceb8f256ce2b527df3d43625c4ef8b1"], 0x16)
syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x0)
modify_ldt$write2(0x11, &(0x7f0000000100)={0x81, 0x0, 0x4000, 0x1}, 0x10)
modify_ldt$read(0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000280), 0x0, 0x40002000, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuset.effective_mems\x00', 0x275a, 0x0)
preadv2(r4, &(0x7f0000000080)=[{&(0x7f0000000040)=""/37, 0x25}], 0x1, 0x9, 0x6, 0x17)

3.666696434s ago: executing program 2 (id=266):
syz_open_dev$dvb_frontend(&(0x7f00000015c0), 0x0, 0x400)
openat$sequencer(0xffffff9c, 0x0, 0x2000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0}, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv6_newrule={0x30, 0x20, 0x1, 0x0, 0x25dfdbfb, {0xa, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3001a}, [@FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x30}}, 0x40000)
syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd708", 0x18, 0x6, 0x0, @remote, @local, {[], {{0xfff5, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0x96}]}}}}}}}}, 0x0)

1.989049227s ago: executing program 2 (id=267):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94)
r0 = socket(0x400000000010, 0x3, 0x0)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e", 0x8b}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83a", 0x5a}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e", 0x62}, {&(0x7f0000000900)}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6e", 0x71}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f39f", 0x1c}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x48}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa464613c", 0xf}], 0x1}}], 0x4, 0x20000044)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'})
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0), 0x0)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

1.896181985s ago: executing program 3 (id=268):
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$FITRIM(0xffffffffffffffff, 0x4010586e, &(0x7f0000000100)={0x2000, 0x32, 0x1})

1.617705195s ago: executing program 3 (id=269):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000100)}, 0x24008484)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe)
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
mount$overlay(0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_off}]})
keyctl$join(0x1, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = dup(r3)
setsockopt$CAN_RAW_JOIN_FILTERS(r4, 0x65, 0x6, &(0x7f0000000040), 0x4)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r5, &(0x7f0000000480)={0x1f, 0x7, @none, 0x2ef5, 0x2}, 0xe)
connect$packet(r5, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x20, 0x3, &(0x7f0000000ac0)=ANY=[@ANYRES8=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r6, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x3, 0x600}}, 0x20)
r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmmsg$inet(r7, &(0x7f0000000900)=[{{&(0x7f0000007b00)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000180)="e6e0", 0x2}], 0x1}}], 0x1, 0x800)

257.037346ms ago: executing program 2 (id=270):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000000203010200000000000000000100000a08000340000004000800034000000800080001000100001e090002"], 0x6c}, 0x1, 0x0, 0x0, 0x24004004}, 0x4004080)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
fchdir(r1)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, &(0x7f0000001dc0)={0xf, 0x5, 0x0, {r1}}, 0x20)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x5}}, '\x00'})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000680)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0x5, 0x6, 0x27, @dev={0xfe, 0x80, '\x00', 0x2a}, @mcast1, 0x8, 0x7, 0x40, 0xffff}})

190.618143ms ago: executing program 3 (id=271):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x13c, 0x10, 0x413, 0x70bd28, 0x1900, {{@in=@local, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x20, 0x7, 0x4e24, 0x0, 0xa, 0x20, 0x20, 0x1d}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, 0x0, 0x32}, @in=@private=0xa010100, {0x4, 0x7, 0x0, 0x40000000000004, 0xffffffffffffffff, 0x6, 0x7f}, {0x0, 0xffffffffffffffff, 0x4}, {0xf6, 0x4, 0x8}, 0x0, 0x34ff, 0x2, 0x1, 0xbe}, [@algo_aead={0x4c, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x804)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)

0s ago: executing program 2 (id=272):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newroute={0x30, 0x18, 0x1ef, 0x3f000000, 0x0, {}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x2}}]}, 0x30}, 0x1, 0x11}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.139' (ED25519) to the list of known hosts.
[   79.137578][ T5812] cgroup: Unknown subsys name 'net'
[   79.377321][ T5812] cgroup: Unknown subsys name 'cpuset'
[   79.442763][ T5812] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   81.386586][ T5812] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   83.779770][ T5828] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   83.795994][ T5828] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   83.798726][ T5828] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   83.800856][ T5828] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   83.829425][ T5828] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   84.017557][ T5145] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   84.066365][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   84.068647][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   84.069918][ T5836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   84.100431][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   84.102957][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   84.118535][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   84.122584][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   84.173040][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   84.175319][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   84.181506][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   84.194921][ T5841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   84.208915][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   84.209115][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   84.216563][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   84.223462][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   84.238440][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   84.251058][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   84.252595][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   84.254605][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   84.957335][ T5826] chnl_net:caif_netlink_parms(): no params data found
[   85.278876][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.279077][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.279255][ T5826] bridge_slave_0: entered allmulticast mode
[   85.283353][ T5826] bridge_slave_0: entered promiscuous mode
[   85.334892][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.335172][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.335472][ T5826] bridge_slave_1: entered allmulticast mode
[   85.337914][ T5826] bridge_slave_1: entered promiscuous mode
[   85.538196][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   85.576735][ T5833] chnl_net:caif_netlink_parms(): no params data found
[   85.599525][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   85.658659][ T5831] chnl_net:caif_netlink_parms(): no params data found
[   85.758116][ T5826] team0: Port device team_slave_0 added
[   85.785801][ T5830] chnl_net:caif_netlink_parms(): no params data found
[   85.793114][ T5832] chnl_net:caif_netlink_parms(): no params data found
[   85.808173][ T5826] team0: Port device team_slave_1 added
[   85.914188][ T5842] Bluetooth: hci0: command tx timeout
[   86.069639][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.069652][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.069669][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.140785][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.140799][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.140816][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.172364][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.172652][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.173252][ T5833] bridge_slave_0: entered allmulticast mode
[   86.177018][ T5833] bridge_slave_0: entered promiscuous mode
[   86.255553][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.255981][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.256220][ T5833] bridge_slave_1: entered allmulticast mode
[   86.259554][ T5833] bridge_slave_1: entered promiscuous mode
[   86.290278][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.290600][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.291001][ T5831] bridge_slave_0: entered allmulticast mode
[   86.294030][ T5831] bridge_slave_0: entered promiscuous mode
[   86.312682][ T5842] Bluetooth: hci3: command tx timeout
[   86.357561][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.357765][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.357958][ T5831] bridge_slave_1: entered allmulticast mode
[   86.360055][ T5831] bridge_slave_1: entered promiscuous mode
[   86.392309][ T5842] Bluetooth: hci2: command tx timeout
[   86.455668][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   86.456281][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.456616][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.456894][ T5830] bridge_slave_0: entered allmulticast mode
[   86.459217][ T5830] bridge_slave_0: entered promiscuous mode
[   86.463814][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.464118][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.464707][ T5832] bridge_slave_0: entered allmulticast mode
[   86.468094][ T5832] bridge_slave_0: entered promiscuous mode
[   86.482047][ T5845] Bluetooth: hci1: command tx timeout
[   86.482285][ T5842] Bluetooth: hci4: command tx timeout
[   86.538451][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   86.538836][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.539033][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.539193][ T5830] bridge_slave_1: entered allmulticast mode
[   86.541236][ T5830] bridge_slave_1: entered promiscuous mode
[   86.554221][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.554508][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.554777][ T5832] bridge_slave_1: entered allmulticast mode
[   86.558199][ T5832] bridge_slave_1: entered promiscuous mode
[   86.576003][ T5826] hsr_slave_0: entered promiscuous mode
[   86.578256][ T5826] hsr_slave_1: entered promiscuous mode
[   86.592996][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   86.658481][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   86.729526][ T5833] team0: Port device team_slave_0 added
[   86.735948][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   86.744865][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   86.789372][ T5833] team0: Port device team_slave_1 added
[   86.794724][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   86.800444][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   86.819965][ T5831] team0: Port device team_slave_0 added
[   86.884600][ T5831] team0: Port device team_slave_1 added
[   87.049313][    T9] cfg80211: failed to load regulatory.db
[   87.267800][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0
[   87.267815][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   87.267831][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   87.271174][ T5830] team0: Port device team_slave_0 added
[   87.282523][ T5832] team0: Port device team_slave_0 added
[   87.355692][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1
[   87.355705][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   87.355722][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   87.359052][ T5832] team0: Port device team_slave_1 added
[   87.361687][ T5830] team0: Port device team_slave_1 added
[   87.438784][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0
[   87.438798][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   87.438815][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   87.540895][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1
[   87.540909][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   87.540933][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   87.618437][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0
[   87.618450][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   87.618466][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   87.620522][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0
[   87.620532][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   87.620548][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   87.669143][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1
[   87.669160][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   87.669185][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   87.672667][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1
[   87.672683][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   87.672707][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   87.815254][ T5833] hsr_slave_0: entered promiscuous mode
[   87.816781][ T5833] hsr_slave_1: entered promiscuous mode
[   87.818230][ T5833] debugfs: 'hsr0' already exists in 'hsr'
[   87.818312][ T5833] Cannot create hsr debugfs directory
[   87.883243][ T5831] hsr_slave_0: entered promiscuous mode
[   87.884761][ T5831] hsr_slave_1: entered promiscuous mode
[   87.886136][ T5831] debugfs: 'hsr0' already exists in 'hsr'
[   87.886171][ T5831] Cannot create hsr debugfs directory
[   87.992959][ T5842] Bluetooth: hci0: command tx timeout
[   88.130179][ T5832] hsr_slave_0: entered promiscuous mode
[   88.132870][ T5832] hsr_slave_1: entered promiscuous mode
[   88.134701][ T5832] debugfs: 'hsr0' already exists in 'hsr'
[   88.134725][ T5832] Cannot create hsr debugfs directory
[   88.147337][ T5830] hsr_slave_0: entered promiscuous mode
[   88.149393][ T5830] hsr_slave_1: entered promiscuous mode
[   88.151058][ T5830] debugfs: 'hsr0' already exists in 'hsr'
[   88.151081][ T5830] Cannot create hsr debugfs directory
[   88.392131][ T5842] Bluetooth: hci3: command tx timeout
[   88.472018][ T5842] Bluetooth: hci2: command tx timeout
[   88.552259][ T5842] Bluetooth: hci4: command tx timeout
[   88.552288][ T5842] Bluetooth: hci1: command tx timeout
[   88.636598][ T5826] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   88.680327][ T5826] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   88.727165][ T5826] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   88.760476][ T5826] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   88.803964][ T5826] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   88.838392][ T5826] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   88.902906][ T5826] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   88.948226][ T5826] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   89.175018][ T5833] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   89.209231][ T5833] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   89.214810][ T5833] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   89.245509][ T5833] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   89.250648][ T5833] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   89.289311][ T5833] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   89.311429][ T5833] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   89.347640][ T5833] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   89.538136][ T5831] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   89.569431][ T5831] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   89.577489][ T5831] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   89.611209][ T5831] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   89.640938][ T5831] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   89.668482][ T5831] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   89.696569][ T5831] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   89.727135][ T5831] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   89.866987][ T5832] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   89.885941][ T5832] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   89.895333][ T5832] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   89.927023][ T5832] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   89.943712][ T5832] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   89.988823][ T5832] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   90.020171][ T5832] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   90.058617][ T5832] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   90.072878][ T5845] Bluetooth: hci0: command tx timeout
[   90.130220][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0
[   90.238875][ T5830] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   90.266354][ T5830] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   90.298403][ T5830] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   90.338181][ T5830] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   90.350179][ T5830] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   90.377552][ T5830] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   90.388435][ T5826] 8021q: adding VLAN 0 to HW filter on device team0
[   90.388782][ T5830] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   90.418003][ T5830] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   90.475633][ T5845] Bluetooth: hci3: command tx timeout
[   90.508539][  T827] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.509215][  T827] bridge0: port 1(bridge_slave_0) entered forwarding state
[   90.552020][ T5845] Bluetooth: hci2: command tx timeout
[   90.586975][  T827] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.587088][  T827] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.611626][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0
[   90.632696][ T5845] Bluetooth: hci1: command tx timeout
[   90.632725][ T5845] Bluetooth: hci4: command tx timeout
[   90.776731][ T5833] 8021q: adding VLAN 0 to HW filter on device team0
[   90.826551][  T827] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.826710][  T827] bridge0: port 1(bridge_slave_0) entered forwarding state
[   90.913929][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0
[   90.919484][   T69] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.919605][   T69] bridge0: port 2(bridge_slave_1) entered forwarding state
[   91.071610][ T5831] 8021q: adding VLAN 0 to HW filter on device team0
[   91.098031][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0
[   91.181686][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.190455][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   91.291501][ T3486] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.291726][ T3486] bridge0: port 2(bridge_slave_1) entered forwarding state
[   91.345638][ T5832] 8021q: adding VLAN 0 to HW filter on device team0
[   91.409839][ T3610] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.409987][ T3610] bridge0: port 1(bridge_slave_0) entered forwarding state
[   91.438945][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0
[   91.503689][ T1186] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.503955][ T1186] bridge0: port 2(bridge_slave_1) entered forwarding state
[   91.700844][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.754752][ T5830] 8021q: adding VLAN 0 to HW filter on device team0
[   91.878879][ T3610] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.879077][ T3610] bridge0: port 1(bridge_slave_0) entered forwarding state
[   91.983364][ T3610] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.983587][ T3610] bridge0: port 2(bridge_slave_1) entered forwarding state
[   92.162980][ T5842] Bluetooth: hci0: command tx timeout
[   92.177195][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0
[   92.553528][ T5842] Bluetooth: hci3: command tx timeout
[   92.632129][ T5842] Bluetooth: hci2: command tx timeout
[   92.667119][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0
[   92.712477][ T5842] Bluetooth: hci4: command tx timeout
[   92.712514][ T5842] Bluetooth: hci1: command tx timeout
[   92.787274][ T5826] veth0_vlan: entered promiscuous mode
[   92.791594][ T5833] veth0_vlan: entered promiscuous mode
[   92.832481][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0
[   92.874410][ T5826] veth1_vlan: entered promiscuous mode
[   92.888794][ T5833] veth1_vlan: entered promiscuous mode
[   93.001658][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0
[   93.069503][ T5831] veth0_vlan: entered promiscuous mode
[   93.117874][ T5826] veth0_macvtap: entered promiscuous mode
[   93.137116][ T5833] veth0_macvtap: entered promiscuous mode
[   93.161344][ T5832] veth0_vlan: entered promiscuous mode
[   93.166644][ T5831] veth1_vlan: entered promiscuous mode
[   93.175634][ T5826] veth1_macvtap: entered promiscuous mode
[   93.186699][ T5833] veth1_macvtap: entered promiscuous mode
[   93.247275][ T5832] veth1_vlan: entered promiscuous mode
[   93.313925][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0
[   93.331259][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0
[   93.388129][ T5830] veth0_vlan: entered promiscuous mode
[   93.397554][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1
[   93.408334][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1
[   93.474278][   T44] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.498282][ T5831] veth0_macvtap: entered promiscuous mode
[   93.501498][   T44] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.518368][ T5830] veth1_vlan: entered promiscuous mode
[   93.534715][   T44] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.554512][   T44] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.564145][  T827] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.565156][ T5831] veth1_macvtap: entered promiscuous mode
[   93.574849][  T827] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.607250][  T827] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.667270][  T827] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.759297][ T5832] veth0_macvtap: entered promiscuous mode
[   93.937929][ T5832] veth1_macvtap: entered promiscuous mode
[   94.150151][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0
[   94.212841][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1
[   94.309953][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0
[   94.327156][ T5830] veth0_macvtap: entered promiscuous mode
[   94.373496][ T1186] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.404204][ T1186] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.412690][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.412712][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.438147][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1
[   94.439223][ T1186] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   94.499854][ T5830] veth1_macvtap: entered promiscuous mode
[   94.508847][ T1186] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   94.580016][   T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.580040][   T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.600116][ T3610] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.625393][ T3610] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.658285][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   94.671712][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   94.738385][ T3610] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.738407][ T3610] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.047983][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0
[   95.078026][ T3610] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.078047][ T3610] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.289368][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1
[   95.535461][ T1186] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.535484][ T1186] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.593037][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.677701][ T3610] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.678254][ T3610] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.678530][ T3610] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   96.059133][ T5948] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'.
[   96.135696][ T3486] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.135720][ T3486] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.516971][ T1186] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.517012][ T1186] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.571355][ T5946] loop4: detected capacity change from 0 to 32768
[   96.780218][ T5946] jfs: Unknown parameter 'iochar{et'
[   96.889681][ T1186] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.889703][ T1186] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.208852][   T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.208875][   T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.616654][ T5956] comedi comedi3: aio_iiro_16: I/O base address or length out of range
[   99.843032][ T3573] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.843049][ T3573] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.913320][  T820] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  103.859562][ T5978] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  105.181538][ T5983] netlink: 'syz.3.4': attribute type 1 has an invalid length.
[  105.304921][ T5963] syz.2.3 (5963) used greatest stack depth: 18912 bytes left
[  106.306078][ T5994] loop2: detected capacity change from 0 to 512
[  106.454594][ T5992] netlink: 'syz.1.11': attribute type 2 has an invalid length.
[  107.231534][ T5992] loop1: detected capacity change from 0 to 131072
[  107.452030][ T5992] F2FS-fs (loop1): invalid crc value
[  107.699697][ T5992] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  107.746387][ T5992] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  107.825867][ T6004] loop4: detected capacity change from 0 to 256
[  110.399737][ T5994] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  110.440408][ T6004] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  110.555248][ T6004] exFAT-fs (loop4): start_clu is invalid cluster(0xffffffff)
[  111.060448][ T5832] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  111.307794][ T6016] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18'.
[  111.547961][ T6020] fuse: Unknown parameter ''
[  116.652568][ T6038] loop2: detected capacity change from 0 to 1764
[  118.192165][ T6049] netlink: 4 bytes leftover after parsing attributes in process `syz.3.26'.
[  118.873739][ T6033] iso9660: Corrupted directory entry in block 14 of inode 1920
[  119.998000][ T6050] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10)
[  119.999204][ T6050] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  120.565142][ T6050] vhci_hcd vhci_hcd.0: Device attached
[  120.659285][ T6061] vhci_hcd: connection closed
[  120.699336][  T149] vhci_hcd vhci_hcd.2: stop threads
[  120.724605][  T149] vhci_hcd vhci_hcd.2: release socket
[  120.724702][  T149] vhci_hcd vhci_hcd.2: disconnect device
[  123.221027][ T6085] capability: warning: `syz.0.32' uses deprecated v2 capabilities in a way that may be insecure
[  124.439391][ T6098] No control pipe specified
[  124.627651][ T6085] loop0: detected capacity change from 0 to 128
[  124.632555][ T6100] loop2: detected capacity change from 0 to 512
[  124.848163][ T6100] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  127.683344][   T32] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  128.562346][ T5832] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.563439][ T5845] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[  131.585520][ T5845] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  133.173589][ T6145] No control pipe specified
[  133.329028][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  133.350396][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  133.361081][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  133.371787][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  133.382492][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  133.393157][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  133.403848][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  133.414536][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  133.425226][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  133.435925][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  134.460429][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[  134.460577][ T1339] ieee802154 phy1 wpan1: encryption failed: -22
[  134.487811][ T6131] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[  137.323102][ T6174] loop2: detected capacity change from 0 to 512
[  137.339357][ T6174] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  137.339376][ T6174] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  137.480530][ T6180] netlink: 16 bytes leftover after parsing attributes in process `syz.3.53'.
[  137.505706][ T6182] loop4: detected capacity change from 0 to 1764
[  138.511940][ T6182] iso9660: Corrupted directory entry in block 14 of inode 1920
[  138.529924][ T6174] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  138.533276][ T6174] EXT4-fs (loop2): 1 truncate cleaned up
[  138.860313][ T6174] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  138.959924][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  139.009749][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  139.012389][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  139.020324][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  139.022891][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  139.119262][ T6178] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10)
[  139.119284][ T6178] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  139.182847][ T6178] vhci_hcd vhci_hcd.0: Device attached
[  139.226167][ T6194] vhci_hcd: connection closed
[  139.228857][ T3610] vhci_hcd vhci_hcd.4: stop threads
[  139.228889][ T3610] vhci_hcd vhci_hcd.4: release socket
[  139.265525][ T3610] vhci_hcd vhci_hcd.4: disconnect device
[  139.516874][ T5832] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  139.911618][ T1186] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  140.402315][ T6207] loop4: detected capacity change from 0 to 512
[  140.538080][ T6207] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  140.897601][ T1186] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.134549][ T5845] Bluetooth: hci2: command tx timeout
[  142.526615][ T6217] loop0: detected capacity change from 0 to 128
[  142.545857][ T6217] =======================================================
[  142.545857][ T6217] WARNING: The mand mount option has been deprecated and
[  142.545857][ T6217]          and is ignored by this kernel. Remove the mand
[  142.545857][ T6217]          option from the mount to silence this warning.
[  142.545857][ T6217] =======================================================
[  142.861226][ T5899] IPVS: starting estimator thread 0...
[  143.139768][ T6217] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  143.139971][ T6217] hpfs: filesystem error: improperly stopped
[  143.139991][ T6217] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  143.140006][ T6217] hpfs: You really don't want any checks? You are crazy...
[  143.141033][ T6217] hpfs: hpfs_map_sector(): read error
[  143.141046][ T6217] hpfs: code page support is disabled
[  143.213394][ T6220] IPVS: using max 9 ests per chain, 21600 per kthread
[  143.275293][ T6217] hpfs: hpfs_map_4sectors(): unaligned read
[  143.275670][ T6217] hpfs: hpfs_map_4sectors(): unaligned read
[  143.275681][ T6217] hpfs: filesystem error: unable to find root dir
[  143.508903][ T5815] libceph: connect (1)[c::]:6789 error -101
[  143.509832][ T5815] libceph: mon0 (1)[c::]:6789 connect error
[  143.529886][ T6222] ceph: No mds server is up or the cluster is laggy
[  143.547662][ T5815] libceph: connect (1)[c::]:6789 error -101
[  143.547871][ T5815] libceph: mon0 (1)[c::]:6789 connect error
[  143.634649][ T1186] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.350895][ T5845] Bluetooth: hci2: command tx timeout
[  146.662943][ T5845] Bluetooth: hci2: command tx timeout
[  148.549855][ T1186] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.894659][ T5845] Bluetooth: hci2: command tx timeout
[  149.031632][ T6189] chnl_net:caif_netlink_parms(): no params data found
[  149.050447][ T5845] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201'
[  149.050476][ T5845] CPU: 0 UID: 0 PID: 5845 Comm: kworker/u9:7 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  149.050503][ T5845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  149.050517][ T5845] Workqueue: hci1 hci_rx_work
[  149.050548][ T5845] Call Trace:
[  149.050557][ T5845]  <TASK>
[  149.050567][ T5845]  dump_stack_lvl+0xe8/0x150
[  149.050595][ T5845]  sysfs_create_dir_ns+0x271/0x2a0
[  149.050622][ T5845]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  149.050657][ T5845]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  149.050689][ T5845]  ? rt_spin_unlock+0x160/0x200
[  149.050725][ T5845]  kobject_add_internal+0x631/0xd10
[  149.050766][ T5845]  kobject_add+0x163/0x240
[  149.050802][ T5845]  ? __pfx_kobject_add+0x10/0x10
[  149.050840][ T5845]  ? get_device_parent+0x370/0x3a0
[  149.050872][ T5845]  device_add+0x408/0xbb0
[  149.050903][ T5845]  hci_conn_add_sysfs+0xd5/0x210
[  149.050932][ T5845]  le_conn_complete_evt+0x10e6/0x16b0
[  149.050980][ T5845]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  149.051017][ T5845]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  149.051043][ T5845]  ? lockdep_hardirqs_on+0x7a/0x110
[  149.051071][ T5845]  ? skb_pull_data+0xfb/0x200
[  149.051108][ T5845]  hci_le_conn_complete_evt+0x187/0x470
[  149.051147][ T5845]  hci_event_packet+0x659/0xef0
[  149.051182][ T5845]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  149.051220][ T5845]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  149.051252][ T5845]  ? __pfx_hci_event_packet+0x10/0x10
[  149.051279][ T5845]  ? rt_spin_unlock+0x14f/0x200
[  149.051336][ T5845]  ? hci_send_to_monitor+0xe2/0x590
[  149.051376][ T5845]  hci_rx_work+0x3ee/0x1040
[  149.051417][ T5845]  ? process_one_work+0x8b7/0x1710
[  149.051438][ T5845]  process_one_work+0x9a3/0x1710
[  149.051483][ T5845]  ? __pfx_process_one_work+0x10/0x10
[  149.051503][ T5845]  ? do_raw_spin_lock+0x12b/0x2f0
[  149.051549][ T5845]  worker_thread+0xba8/0x11e0
[  149.051602][ T5845]  kthread+0x388/0x470
[  149.051632][ T5845]  ? __pfx_worker_thread+0x10/0x10
[  149.051654][ T5845]  ? __pfx_kthread+0x10/0x10
[  149.051687][ T5845]  ret_from_fork+0x514/0xb70
[  149.051716][ T5845]  ? __pfx_ret_from_fork+0x10/0x10
[  149.051741][ T5845]  ? __switch_to+0xc79/0x1410
[  149.051779][ T5845]  ? __pfx_kthread+0x10/0x10
[  149.051812][ T5845]  ret_from_fork_asm+0x1a/0x30
[  149.051857][ T5845]  </TASK>
[  149.051918][ T5845] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  149.051961][ T5845] Bluetooth: hci1: failed to register connection device
[  152.853548][ T6257] Zero length message leads to an empty skb
[  154.460694][ T6276] netlink: 100 bytes leftover after parsing attributes in process `syz.0.71'.
[  154.785653][ T6189] bridge0: port 1(bridge_slave_0) entered blocking state
[  154.786537][ T6189] bridge0: port 1(bridge_slave_0) entered disabled state
[  154.786882][ T6189] bridge_slave_0: entered allmulticast mode
[  154.827700][ T6189] bridge_slave_0: entered promiscuous mode
[  154.889023][ T6189] bridge0: port 2(bridge_slave_1) entered blocking state
[  154.891271][ T6189] bridge0: port 2(bridge_slave_1) entered disabled state
[  154.891638][ T6189] bridge_slave_1: entered allmulticast mode
[  154.914507][ T6189] bridge_slave_1: entered promiscuous mode
[  155.216602][ T6295] loop3: detected capacity change from 0 to 128
[  155.284479][ T6189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  155.374971][ T6295] hpfs: hpfs_map_sector(): read error
[  155.794525][ T6268] process 'syz.2.70' launched './file0' with NULL argv: empty string added
[  155.845829][ T6300] loop3: detected capacity change from 0 to 16
[  155.895626][ T1186] bridge_slave_1: left allmulticast mode
[  155.895739][ T1186] bridge_slave_1: left promiscuous mode
[  155.946214][ T1186] bridge0: port 2(bridge_slave_1) entered disabled state
[  156.216849][ T1186] bridge_slave_0: left allmulticast mode
[  156.216883][ T1186] bridge_slave_0: left promiscuous mode
[  156.217175][ T1186] bridge0: port 1(bridge_slave_0) entered disabled state
[  156.259173][ T6300] erofs (device loop3): mounted with root inode @ nid 36.
[  156.310132][ T6303] random: crng reseeded on system resumption
[  156.693687][ T5845] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  156.724493][ T5845] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  156.725864][ T5845] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  156.727516][ T5845] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  156.729996][ T5845] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  157.108170][ T6315] loop0: detected capacity change from 0 to 32768
[  157.111077][ T6315] btrfs: Deprecated parameter 'usebackuproot'
[  157.111273][ T6315] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  157.135151][ T6315] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.82 (6315)
[  157.277085][ T6315] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  157.277124][ T6315] BTRFS info (device loop0): using crc32c checksum algorithm
[  157.521985][ T1025] BTRFS warning (device loop0): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  157.522371][ T6315] BTRFS error (device loop0): failed to load root extent
[  157.522423][ T6315] BTRFS warning (device loop0): try to load backup roots slot 1
[  157.524482][ T1025] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  157.524617][ T6315] BTRFS warning (device loop0): couldn't read tree root
[  157.524637][ T6315] BTRFS warning (device loop0): try to load backup roots slot 2
[  157.528271][ T1025] BTRFS error (device loop0): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  157.528407][ T6315] BTRFS warning (device loop0): couldn't read tree root
[  157.528429][ T6315] BTRFS warning (device loop0): try to load backup roots slot 3
[  157.661587][ T6315] BTRFS info (device loop0): rebuilding free space tree
[  157.850293][ T6330] loop3: detected capacity change from 0 to 2048
[  157.935393][ T6330] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  157.962909][ T1186] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  158.007911][ T6315] BTRFS info (device loop0): checking UUID tree
[  158.009856][ T6315] BTRFS info (device loop0): enabling ssd optimizations
[  158.009882][ T6315] BTRFS info (device loop0): turning on async discard
[  158.009899][ T6315] BTRFS info (device loop0): enabling free space tree
[  158.009915][ T6315] BTRFS info (device loop0): force clearing of disk cache
[  158.009930][ T6315] BTRFS info (device loop0): enabling auto defrag
[  158.009946][ T6315] BTRFS info (device loop0): trying to use backup root at mount time
[  158.009964][ T6315] BTRFS info (device loop0): use zstd compression, level 3
[  158.091920][ T1186] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  158.171009][ T1186] bond0 (unregistering): Released all slaves
[  158.213121][   T38] audit: type=1326 audit(1776607752.408:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6326 comm="syz.3.83" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc72d9cc819 code=0x0
[  158.311205][ T6189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  158.977765][ T6341] loop2: detected capacity change from 0 to 4096
[  159.012669][ T6341] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512).
[  159.016788][ T6341] ntfs3(loop2): ino=3, mi_enum_attr
[  159.019332][ T6341] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  159.023992][ T5845] Bluetooth: hci5: command tx timeout
[  159.053333][ T6341] ntfs3(loop2): volume is dirty and "force" flag is not set!
[  159.496965][ T6189] team0: Port device team_slave_0 added
[  159.965380][ T6189] team0: Port device team_slave_1 added
[  161.210427][ T5845] Bluetooth: hci5: command tx timeout
[  161.695457][ T5830] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  162.064508][ T5833] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  162.256476][ T6352] loop3: detected capacity change from 0 to 1764
[  162.465522][ T6352] iso9660: Corrupted directory entry in block 14 of inode 1920
[  162.778514][ T6189] batman_adv: batadv0: Adding interface: batadv_slave_0
[  162.778527][ T6189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  162.778544][ T6189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  162.785598][ T6362] netlink: 16 bytes leftover after parsing attributes in process `syz.2.89'.
[  162.818792][ T6363] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10)
[  162.818823][ T6363] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  162.823605][ T6362] loop2: detected capacity change from 0 to 164
[  162.824103][ T6363] vhci_hcd vhci_hcd.0: Device attached
[  162.850125][ T6189] batman_adv: batadv0: Adding interface: batadv_slave_1
[  162.850144][ T6189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  162.850173][ T6189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  162.907788][ T6364] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0
[  162.909519][ T1025] vhci_hcd vhci_hcd.3: stop threads
[  162.909539][ T1025] vhci_hcd vhci_hcd.3: release socket
[  162.909577][ T1025] vhci_hcd vhci_hcd.3: disconnect device
[  163.228045][ T6359] rock: directory entry would overflow storage
[  163.228054][ T6359] rock: sig=0x4d4e, size=5, remaining=4
[  163.228343][ T6359] isofs: isofs_export_get_parent(): child directory not normalized!
[  163.436168][ T5845] Bluetooth: hci5: command tx timeout
[  163.586240][ T6189] hsr_slave_0: entered promiscuous mode
[  163.588761][ T6189] hsr_slave_1: entered promiscuous mode
[  163.591078][ T6189] debugfs: 'hsr0' already exists in 'hsr'
[  163.591106][ T6189] Cannot create hsr debugfs directory
[  164.649738][ T6374] loop0: detected capacity change from 0 to 32768
[  164.936808][ T6374] JBD2: Ignoring recovery information on journal
[  165.099212][ T6374] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  165.668779][ T5845] Bluetooth: hci5: command tx timeout
[  166.002286][ T6397] loop2: detected capacity change from 0 to 1024
[  166.306982][ T6401] netlink: 8 bytes leftover after parsing attributes in process `syz.3.96'.
[  166.447296][ T6397] hfsplus: unable to find HFS+ superblock
[  166.481011][ T6374] OCFS2: ERROR (device loop0): int ocfs2_reserve_local_alloc_bits(struct ocfs2_super *, u32, struct ocfs2_alloc_context *): local alloc inode 76 says it has 9 used bits, but a count shows 8
[  166.481052][ T6374] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  166.481063][ T6374] OCFS2: File system is now read-only.
[  166.481078][ T6374] (syz.0.91,6374,1):ocfs2_reserve_local_alloc_bits:710 ERROR: status = -30
[  166.481103][ T6374] (syz.0.91,6374,1):ocfs2_reserve_clusters_with_limit:1266 ERROR: status = -30
[  166.481151][ T6374] (syz.0.91,6374,1):ocfs2_reserve_clusters_with_limit:1315 ERROR: status = -30
[  166.481173][ T6374] (syz.0.91,6374,1):ocfs2_lock_allocators:3101 ERROR: status = -30
[  166.481196][ T6374] (syz.0.91,6374,1):ocfs2_write_begin_nolock:1724 ERROR: status = -30
[  166.481239][ T6374] (syz.0.91,6374,1):__ocfs2_page_mkwrite:96 ERROR: status = -30
[  166.481392][ T6374] OCFS2: ERROR (device loop0): int ocfs2_reserve_local_alloc_bits(struct ocfs2_super *, u32, struct ocfs2_alloc_context *): local alloc inode 76 says it has 9 used bits, but a count shows 8
[  166.481424][ T6374] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  166.481468][ T6374] (syz.0.91,6374,1):ocfs2_reserve_local_alloc_bits:710 ERROR: status = -30
[  166.481491][ T6374] (syz.0.91,6374,1):ocfs2_reserve_clusters_with_limit:1266 ERROR: status = -30
[  166.481556][ T6374] (syz.0.91,6374,1):ocfs2_reserve_clusters_with_limit:1315 ERROR: status = -30
[  166.481578][ T6374] (syz.0.91,6374,1):ocfs2_lock_allocators:3101 ERROR: status = -30
[  166.481598][ T6374] (syz.0.91,6374,1):ocfs2_write_begin_nolock:1724 ERROR: status = -30
[  166.481640][ T6374] (syz.0.91,6374,1):__ocfs2_page_mkwrite:96 ERROR: status = -30
[  167.129443][ T6401] bridge0: port 2(bridge_slave_1) entered disabled state
[  167.145922][ T6401] bridge0: port 1(bridge_slave_0) entered disabled state
[  167.191172][ T5833] ocfs2: Unmounting device (7,0) on (node local)
[  167.576305][ T6408] netlink: 5 bytes leftover after parsing attributes in process `syz.0.99'.
[  167.844124][ T6401] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  167.852208][ T6401] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  169.090687][ T1186] hsr_slave_0: left promiscuous mode
[  169.249460][ T1186] hsr_slave_1: left promiscuous mode
[  169.251963][ T1186] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  169.252838][ T1186] batman_adv: batadv0: Removing interface: batadv_slave_0
[  169.273657][ T1186] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  169.273684][ T1186] batman_adv: batadv0: Removing interface: batadv_slave_1
[  169.338932][ T1186] veth1_macvtap: left promiscuous mode
[  169.339220][ T1186] veth0_macvtap: left promiscuous mode
[  169.339563][ T1186] veth1_vlan: left promiscuous mode
[  169.339917][ T1186] veth0_vlan: left promiscuous mode
[  169.698636][ T6415] loop0: detected capacity change from 0 to 40427
[  169.735517][ T6415] F2FS-fs: heap/no_heap options were deprecated
[  169.762705][ T6415] F2FS-fs (loop0): Image doesn't support compression
[  169.762802][ T6415] F2FS-fs (loop0): build fault injection rate: 690
[  169.814766][ T6415] F2FS-fs (loop0): invalid crc value
[  170.255311][ T1186] team0 (unregistering): Port device team_slave_1 removed
[  170.302784][ T1186] team0 (unregistering): Port device team_slave_0 removed
[  170.303437][ T6415] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  170.347282][ T6415] F2FS-fs (loop0): Start checkpoint disabled!
[  170.417383][ T6415] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0
[  170.468560][ T6415] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  170.518956][ T6414] syz.0.101: attempt to access beyond end of device
[  170.518956][ T6414] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  170.562454][ T6412] lo speed is unknown, defaulting to 1000
[  170.569798][ T6412] lo speed is unknown, defaulting to 1000
[  170.575946][ T6412] lo speed is unknown, defaulting to 1000
[  170.579622][ T6412] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  170.579662][ T6412] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  170.579706][ T6412] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  170.587148][ T6412] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  170.605760][ T6412] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  170.629456][ T5490] 8021q: adding VLAN 0 to HW filter on device eth1
[  170.683486][ T6412] lo speed is unknown, defaulting to 1000
[  170.688551][ T6412] lo speed is unknown, defaulting to 1000
[  170.691722][ T6412] lo speed is unknown, defaulting to 1000
[  170.697358][ T6412] lo speed is unknown, defaulting to 1000
[  170.700496][ T6412] lo speed is unknown, defaulting to 1000
[  170.706201][ T6412] lo speed is unknown, defaulting to 1000
[  170.785631][ T3573] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  170.892232][  T149] kworker/u8:6: attempt to access beyond end of device
[  170.892232][  T149] loop0: rw=2049, sector=45104, nr_sectors = 16 limit=40427
[  170.892644][  T149] CPU: 0 UID: 0 PID: 149 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  170.892663][  T149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  170.892671][  T149] Workqueue: writeback wb_workfn (flush-7:0)
[  170.892700][  T149] Call Trace:
[  170.892705][  T149]  <TASK>
[  170.892711][  T149]  dump_stack_lvl+0xe8/0x150
[  170.892728][  T149]  f2fs_stop_checkpoint+0x383/0x540
[  170.892745][  T149]  f2fs_write_end_io+0x1274/0x1740
[  170.892777][  T149]  __submit_merged_bio+0x256/0x6a0
[  170.892795][  T149]  __submit_merged_write_cond+0x3c9/0x4e0
[  170.892814][  T149]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  170.892842][  T149]  f2fs_write_data_pages+0x287e/0x34f0
[  170.892882][  T149]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  170.892906][  T149]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  170.892945][  T149]  ? __lock_acquire+0x6b5/0x2cf0
[  170.892971][  T149]  ? __lock_acquire+0x6b5/0x2cf0
[  170.893005][  T149]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  170.893022][  T149]  do_writepages+0x32e/0x550
[  170.893041][  T149]  ? rt_mutex_slowunlock+0x4a7/0x8b0
[  170.893059][  T149]  ? reacquire_held_locks+0x104/0x190
[  170.893077][  T149]  ? rt_spin_lock+0x1e0/0x400
[  170.893100][  T149]  __writeback_single_inode+0x133/0x10e0
[  170.893117][  T149]  ? rt_spin_unlock+0x160/0x200
[  170.893137][  T149]  writeback_sb_inodes+0x97f/0x1980
[  170.893173][  T149]  ? lockdep_hardirqs_on+0x7a/0x110
[  170.893194][  T149]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  170.893234][  T149]  ? rcu_is_watching+0x15/0xb0
[  170.893258][  T149]  wb_writeback+0x445/0xb00
[  170.893274][  T149]  ? queue_io+0x1d1/0x440
[  170.893293][  T149]  ? __pfx_wb_writeback+0x10/0x10
[  170.893317][  T149]  wb_workfn+0x3fd/0xf20
[  170.893334][  T149]  ? look_up_lock_class+0x57/0x110
[  170.893359][  T149]  ? __pfx_wb_workfn+0x10/0x10
[  170.893382][  T149]  ? do_raw_spin_unlock+0xf5/0x210
[  170.893399][  T149]  ? process_one_work+0x8b7/0x1710
[  170.893413][  T149]  ? process_one_work+0x8b7/0x1710
[  170.893433][  T149]  ? process_one_work+0x8b7/0x1710
[  170.893444][  T149]  process_one_work+0x9a3/0x1710
[  170.893470][  T149]  ? __pfx_process_one_work+0x10/0x10
[  170.893481][  T149]  ? do_raw_spin_lock+0x12b/0x2f0
[  170.893505][  T149]  worker_thread+0xba8/0x11e0
[  170.893525][  T149]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  170.893540][  T149]  ? __kthread_parkme+0x7a/0x1f0
[  170.893555][  T149]  ? __kthread_parkme+0x19c/0x1f0
[  170.893573][  T149]  kthread+0x388/0x470
[  170.893590][  T149]  ? __pfx_worker_thread+0x10/0x10
[  170.893602][  T149]  ? __pfx_kthread+0x10/0x10
[  170.893619][  T149]  ret_from_fork+0x514/0xb70
[  170.893635][  T149]  ? __pfx_ret_from_fork+0x10/0x10
[  170.893649][  T149]  ? __switch_to+0xc79/0x1410
[  170.893670][  T149]  ? __pfx_kthread+0x10/0x10
[  170.893687][  T149]  ret_from_fork_asm+0x1a/0x30
[  170.893713][  T149]  </TASK>
[  170.952387][  T149] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  170.952578][  T149] CPU: 0 UID: 0 PID: 149 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  170.952603][  T149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  170.952615][  T149] Workqueue: writeback wb_workfn (flush-7:0)
[  170.952655][  T149] Call Trace:
[  170.952663][  T149]  <TASK>
[  170.952671][  T149]  dump_stack_lvl+0xe8/0x150
[  170.952698][  T149]  f2fs_stop_checkpoint+0x383/0x540
[  170.952725][  T149]  f2fs_write_end_io+0x1274/0x1740
[  170.952771][  T149]  __submit_merged_bio+0x256/0x6a0
[  170.952800][  T149]  __submit_merged_write_cond+0x3c9/0x4e0
[  170.952831][  T149]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  170.952876][  T149]  f2fs_write_data_pages+0x287e/0x34f0
[  170.952936][  T149]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  170.952974][  T149]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  170.953038][  T149]  ? __lock_acquire+0x6b5/0x2cf0
[  170.953079][  T149]  ? __lock_acquire+0x6b5/0x2cf0
[  170.953124][  T149]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  170.953150][  T149]  do_writepages+0x32e/0x550
[  170.953187][  T149]  ? rt_mutex_slowunlock+0x4a7/0x8b0
[  170.953214][  T149]  ? reacquire_held_locks+0x104/0x190
[  170.953240][  T149]  ? rt_spin_lock+0x1e0/0x400
[  170.953277][  T149]  __writeback_single_inode+0x133/0x10e0
[  170.953304][  T149]  ? rt_spin_unlock+0x160/0x200
[  170.953339][  T149]  writeback_sb_inodes+0x97f/0x1980
[  170.953381][  T149]  ? lockdep_hardirqs_on+0x7a/0x110
[  170.953411][  T149]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  170.953474][  T149]  ? rcu_is_watching+0x15/0xb0
[  170.953510][  T149]  wb_writeback+0x445/0xb00
[  170.953536][  T149]  ? queue_io+0x1d1/0x440
[  170.953566][  T149]  ? __pfx_wb_writeback+0x10/0x10
[  170.953605][  T149]  wb_workfn+0x3fd/0xf20
[  170.953632][  T149]  ? look_up_lock_class+0x57/0x110
[  170.953671][  T149]  ? __pfx_wb_workfn+0x10/0x10
[  170.953706][  T149]  ? do_raw_spin_unlock+0xf5/0x210
[  170.953734][  T149]  ? process_one_work+0x8b7/0x1710
[  170.953755][  T149]  ? process_one_work+0x8b7/0x1710
[  170.953788][  T149]  ? process_one_work+0x8b7/0x1710
[  170.953806][  T149]  process_one_work+0x9a3/0x1710
[  170.953848][  T149]  ? __pfx_process_one_work+0x10/0x10
[  170.953866][  T149]  ? do_raw_spin_lock+0x12b/0x2f0
[  170.953904][  T149]  worker_thread+0xba8/0x11e0
[  170.953937][  T149]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  170.953961][  T149]  ? __kthread_parkme+0x7a/0x1f0
[  170.953984][  T149]  ? __kthread_parkme+0x19c/0x1f0
[  170.954012][  T149]  kthread+0x388/0x470
[  170.954037][  T149]  ? __pfx_worker_thread+0x10/0x10
[  170.954056][  T149]  ? __pfx_kthread+0x10/0x10
[  170.954083][  T149]  ret_from_fork+0x514/0xb70
[  170.954108][  T149]  ? __pfx_ret_from_fork+0x10/0x10
[  170.954129][  T149]  ? __switch_to+0xc79/0x1410
[  170.954160][  T149]  ? __pfx_kthread+0x10/0x10
[  170.954194][  T149]  ret_from_fork_asm+0x1a/0x30
[  170.954235][  T149]  </TASK>
[  170.964842][  T149] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  171.166183][ T6422] netlink: 224 bytes leftover after parsing attributes in process `syz.3.102'.
[  171.239755][ T3573] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  171.448537][ T3573] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  171.450796][ T3573] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  174.544861][ T6311] chnl_net:caif_netlink_parms(): no params data found
[  175.900410][ T6451] 9p: Bad value for 'rfdno'
[  175.997159][ T6450] 9p: Bad value for 'wfdno'
[  176.191293][ T6451] loop3: detected capacity change from 0 to 1024
[  176.197296][ T6451] EXT4-fs: Ignoring removed bh option
[  176.401160][ T6451] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  176.655870][ T6465] loop2: detected capacity change from 0 to 512
[  176.714485][ T6465] EXT4-fs (loop2): Test dummy encryption mode enabled
[  176.714609][ T6465] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  176.714723][ T6465] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities
[  180.908744][ T5830] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  181.096836][ T5490] 8021q: adding VLAN 0 to HW filter on device eth2
[  181.206904][ T6476] loop0: detected capacity change from 0 to 256
[  181.681349][ T5845] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection
[  184.715715][ T6489] IPVS: rr: FWM 3 0x00000003 - no destination available
[  184.766720][ T6189] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  184.768344][    C1] IPVS: rr: FWM 3 0x00000003 - no destination available
[  184.864195][ T6189] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  184.945024][ T6491] netlink: 'syz.2.113': attribute type 4 has an invalid length.
[  185.212304][ T6189] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  186.059472][ T6501] loop0: detected capacity change from 0 to 1024
[  186.199008][ T6501] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  186.235376][ T6189] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  186.235750][ T6492] netlink: 'syz.2.113': attribute type 4 has an invalid length.
[  186.326744][ T6311] bridge0: port 1(bridge_slave_0) entered blocking state
[  186.327089][ T6311] bridge0: port 1(bridge_slave_0) entered disabled state
[  186.327432][ T6311] bridge_slave_0: entered allmulticast mode
[  186.393257][ T6311] bridge_slave_0: entered promiscuous mode
[  187.436048][ T6189] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  187.645748][ T6189] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  187.848766][ T6311] bridge0: port 2(bridge_slave_1) entered blocking state
[  187.849137][ T6311] bridge0: port 2(bridge_slave_1) entered disabled state
[  187.849489][ T6311] bridge_slave_1: entered allmulticast mode
[  187.856413][ T6311] bridge_slave_1: entered promiscuous mode
[  187.908405][ T6189] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  188.020892][ T5835] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  188.058182][ T5833] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  188.099436][ T6189] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  188.324870][ T5835] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  188.324919][ T5835] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  188.324957][ T5835] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  188.325082][ T5835] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  188.325126][ T5835] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  188.426849][ T5835] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  188.426883][ T5835] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  188.426905][ T5835] usb 3-1: Product: syz
[  188.426919][ T5835] usb 3-1: Manufacturer: syz
[  189.272662][ T5835] cdc_wdm 3-1:1.0: skipping garbage
[  189.272698][ T5835] cdc_wdm 3-1:1.0: skipping garbage
[  189.385665][ T5835] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  189.385692][ T5835] cdc_wdm 3-1:1.0: Unknown control protocol
[  189.423728][ T6311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  189.555929][   T38] audit: type=1326 audit(1776607781.864:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6506 comm="syz.2.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5871bac819 code=0x7ffc0000
[  189.555988][   T38] audit: type=1326 audit(1776607781.864:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6506 comm="syz.2.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5871bac819 code=0x7ffc0000
[  189.556029][   T38] audit: type=1326 audit(1776607781.864:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6506 comm="syz.2.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7f5871bac819 code=0x7ffc0000
[  189.556069][   T38] audit: type=1326 audit(1776607781.864:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6506 comm="syz.2.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5871bac819 code=0x7ffc0000
[  189.556111][   T38] audit: type=1326 audit(1776607781.864:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6506 comm="syz.2.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5871bac819 code=0x7ffc0000
[  189.558505][   T38] audit: type=1326 audit(1776607781.864:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6506 comm="syz.2.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5871bac819 code=0x7ffc0000
[  189.559220][ T5835] usb 3-1: USB disconnect, device number 3
[  189.710676][   T38] audit: type=1326 audit(1776607781.864:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6506 comm="syz.2.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5871bac819 code=0x7ffc0000
[  189.710734][   T38] audit: type=1326 audit(1776607781.920:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6506 comm="syz.2.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5871bac819 code=0x7ffc0000
[  189.766581][   T38] audit: type=1326 audit(1776607782.061:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6506 comm="syz.2.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5871bac819 code=0x7ffc0000
[  189.766636][   T38] audit: type=1326 audit(1776607782.061:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6506 comm="syz.2.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5871bac819 code=0x7ffc0000
[  189.886074][ T6311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  190.993234][ T6311] team0: Port device team_slave_0 added
[  191.093204][ T6311] team0: Port device team_slave_1 added
[  191.294869][ T6569] netlink: 8 bytes leftover after parsing attributes in process `syz.3.122'.
[  191.294895][ T6569] netlink: 8 bytes leftover after parsing attributes in process `syz.3.122'.
[  191.610010][ T6571] loop2: detected capacity change from 0 to 256
[  191.629240][ T6569] loop3: detected capacity change from 0 to 32768
[  191.634968][ T6569] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.122 (6569)
[  191.675368][ T6571] exfat: Deprecated parameter 'utf8'
[  191.675391][ T6571] exfat: Deprecated parameter 'utf8'
[  191.675531][ T6571] exfat: Deprecated parameter 'utf8'
[  191.694761][ T6311] batman_adv: batadv0: Adding interface: batadv_slave_0
[  191.694778][ T6311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  191.694802][ T6311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  191.747130][ T6569] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  191.747167][ T6569] BTRFS info (device loop3): using crc32c checksum algorithm
[  191.776507][ T6311] batman_adv: batadv0: Adding interface: batadv_slave_1
[  191.776526][ T6311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  191.776583][ T6311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  191.944990][ T6571] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d)
[  191.986329][ T1186] BTRFS warning (device loop3): checksum verify failed on logical 5341184 mirror 1 wanted 0xe51addfa found 0x2006d979 level 0
[  191.986480][ T6569] BTRFS error (device loop3): failed to load root free space
[  192.090525][ T6569] BTRFS error (device loop3): open_ctree failed: -5
[  192.231962][ T6058] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  192.425852][ T6311] hsr_slave_0: entered promiscuous mode
[  192.428598][ T6056] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  192.431903][ T6311] hsr_slave_1: entered promiscuous mode
[  192.444626][ T6058] usb 1-1: Using ep0 maxpacket: 16
[  192.445707][ T6058] usb 1-1: too many configurations: 123, using maximum allowed: 8
[  192.446554][ T6311] debugfs: 'hsr0' already exists in 'hsr'
[  192.446582][ T6311] Cannot create hsr debugfs directory
[  192.449053][ T6058] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  192.452798][ T6058] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  192.597272][ T6056] usb 3-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice= 0.00
[  192.597306][ T6056] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  192.598575][ T6058] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  192.612956][ T6058] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  192.641347][ T6058] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  192.645852][ T6058] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  192.647050][ T6058] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  192.648225][ T6058] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  192.658950][ T6058] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[  192.658984][ T6058] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45
[  192.659006][ T6058] usb 1-1: SerialNumber: syz
[  192.884992][ T6058] usb 1-1: config 0 descriptor??
[  192.915899][ T6596] 9pnet_virtio: no channels available for device syz
[  192.970790][ T6058] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input5
[  193.257251][ T6056] usb 3-1: config 0 descriptor??
[  193.581646][ T6571] capability: warning: `syz.2.123' uses 32-bit capabilities (legacy support in use)
[  193.637910][ T6571] program syz.2.123 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  193.810261][ T6056] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected
[  193.820172][ T6056] usb 3-1: Detected SIO
[  193.835753][ T6056] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  194.305293][ T6586] input: syz1 as /devices/virtual/input/input6
[  195.760257][ T6608] exFAT-fs (loop2): error, exfat_zeroed_cluster: out of range(sect:224 len:8)
[  195.760289][ T6608] exFAT-fs (loop2): Filesystem has been set read-only
[  197.686305][ T6056] usb 3-1: USB disconnect, device number 4
[  198.056368][ T5490] 8021q: adding VLAN 0 to HW filter on device eth3
[  198.059966][ T5180] bcm5974 1-1:0.0: could not read from device
[  198.100399][ T6056] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  198.453585][ T6056] ftdi_sio 3-1:0.0: device disconnected
[  198.454008][ T6619] fuse: Unknown parameter ''
[  198.464515][ T5180] bcm5974 1-1:0.0: could not read from device
[  198.714203][ T6058] usb 1-1: USB disconnect, device number 2
[  198.786299][ T5180] bcm5974 1-1:0.0: could not read from device
[  199.544771][ T6634] loop3: detected capacity change from 0 to 32768
[  199.559708][ T6634] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.131 (6634)
[  199.582275][ T6189] 8021q: adding VLAN 0 to HW filter on device bond0
[  199.593694][ T6634] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  199.593722][ T6634] BTRFS info (device loop3): using crc32c checksum algorithm
[  199.839775][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[  199.840070][ T1339] ieee802154 phy1 wpan1: encryption failed: -22
[  199.885953][ T6562] BTRFS warning (device loop3): checksum verify failed on logical 5341184 mirror 1 wanted 0xe51addfa found 0x2006d979 level 0
[  199.887305][ T6634] BTRFS error (device loop3): failed to load root free space
[  199.992280][ T6634] BTRFS error (device loop3): open_ctree failed: -5
[  202.065183][ T6189] 8021q: adding VLAN 0 to HW filter on device team0
[  202.374555][ T6058] usb 1-1: new full-speed USB device number 3 using dummy_hcd
[  202.557971][ T6058] usb 1-1: device descriptor read/all, error -71
[  203.415428][ T5845] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  203.466094][ T5845] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  203.469072][ T5845] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  203.489068][ T5845] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  203.525583][ T5845] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  203.914267][ T6667] netlink: 4 bytes leftover after parsing attributes in process `syz.0.133'.
[  206.730461][ T5845] Bluetooth: hci6: command tx timeout
[  207.769808][ T6682] loop3: detected capacity change from 0 to 1024
[  209.320173][ T6682] No buffer was provided with the request
[  209.341880][ T6682] IPVS: lblc: FWM 3 0x00000003 - no destination available
[  209.499710][ T5912] IPVS: starting estimator thread 0...
[  209.596087][ T6695] IPVS: using max 7 ests per chain, 16800 per kthread
[  209.663659][ T5845] Bluetooth: hci6: command tx timeout
[  210.564725][ T6697] loop2: detected capacity change from 0 to 2048
[  210.803282][ T6697] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  210.863052][ T6697] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  210.863079][ T6697] UDF-fs: Scanning with blocksize 512 failed
[  211.127111][ T5490] 8021q: adding VLAN 0 to HW filter on device eth4
[  211.437846][ T6697] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  212.050238][   T60] Bluetooth: hci6: command tx timeout
[  212.550474][   T32] hid-generic 0100:0003:0000.0001: unknown main item tag 0x0
[  212.550550][   T32] hid-generic 0100:0003:0000.0001: unknown main item tag 0x0
[  212.550578][   T32] hid-generic 0100:0003:0000.0001: unknown main item tag 0x0
[  212.550603][   T32] hid-generic 0100:0003:0000.0001: unknown main item tag 0x0
[  212.550628][   T32] hid-generic 0100:0003:0000.0001: unknown main item tag 0x0
[  212.550653][   T32] hid-generic 0100:0003:0000.0001: unknown main item tag 0x0
[  212.550678][   T32] hid-generic 0100:0003:0000.0001: unknown main item tag 0x0
[  212.550703][   T32] hid-generic 0100:0003:0000.0001: unknown main item tag 0x0
[  212.550727][   T32] hid-generic 0100:0003:0000.0001: unknown main item tag 0x0
[  212.550751][   T32] hid-generic 0100:0003:0000.0001: unknown main item tag 0x0
[  212.781218][   T32] hid-generic 0100:0003:0000.0001: hidraw0: <UNKNOWN> HID v0.23 Device [syz1] on syz1
[  212.954665][   T60] Bluetooth: hci1: command 0x0406 tx timeout
[  212.961018][   T60] Bluetooth: hci0: command 0x0406 tx timeout
[  212.961320][   T60] Bluetooth: hci4: command 0x0406 tx timeout
[  212.961345][   T60] Bluetooth: hci3: command 0x0406 tx timeout
[  214.248633][ T5845] Bluetooth: hci6: command tx timeout
[  214.403718][ T6311] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  214.445698][ T6715] fido_id[6715]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  214.580823][ T6311] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  214.642138][ T6663] lo speed is unknown, defaulting to 1000
[  214.648100][ T6311] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  215.037203][ T6311] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  215.141409][ T6311] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  215.218168][ T6311] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  216.866130][ T6311] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  217.323936][ T6744] loop3: detected capacity change from 0 to 32768
[  217.571365][ T6744] JBD2: Ignoring recovery information on journal
[  218.415289][ T6311] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  218.776453][ T6747] loop2: detected capacity change from 0 to 32768
[  218.778705][ T6747] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.153 (6747)
[  218.819422][ T6747] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  218.819461][ T6747] BTRFS info (device loop2): using crc32c checksum algorithm
[  218.970444][   T67] BTRFS warning (device loop2): checksum verify failed on logical 5341184 mirror 1 wanted 0xe51addfa found 0x2006d979 level 0
[  218.970610][ T6747] BTRFS error (device loop2): failed to load root free space
[  218.995866][ T6744] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  219.077202][ T6747] BTRFS error (device loop2): open_ctree failed: -5
[  219.730202][ T6777] loop0: detected capacity change from 0 to 32768
[  219.981230][ T6777] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  220.206195][ T6777] XFS (loop0): Ending clean mount
[  222.087147][ T5145] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  222.151150][ T5145] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  222.169650][ T5145] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  222.186948][ T5145] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  222.260997][ T5145] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  222.781900][ T5830] ocfs2: Unmounting device (7,3) on (node local)
[  223.027961][ T5833] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  224.260971][ T6816] loop3: detected capacity change from 0 to 32768
[  224.618149][ T6816] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.163 (6816)
[  224.873829][ T6816] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  224.873868][ T6816] BTRFS info (device loop3): using crc32c checksum algorithm
[  224.943173][ T5836] Bluetooth: hci2: command tx timeout
[  226.586279][ T3573] BTRFS warning (device loop3): checksum verify failed on logical 5341184 mirror 1 wanted 0xe51addfa found 0x2006d979 level 0
[  226.586429][ T6816] BTRFS error (device loop3): failed to load root free space
[  226.642620][ T6816] BTRFS error (device loop3): open_ctree failed: -5
[  227.152741][ T5836] Bluetooth: hci2: command tx timeout
[  227.733971][ T5912] usb 3-1: new full-speed USB device number 6 using dummy_hcd
[  227.909132][ T5912] usb 3-1: device descriptor read/64, error -71
[  228.197082][ T6852] loop0: detected capacity change from 0 to 16
[  228.267180][ T6852] erofs (device loop0): rootino(nid 36) is not a directory(i_mode 127766)
[  228.329015][ T6804] lo speed is unknown, defaulting to 1000
[  228.355199][ T5912] usb 3-1: new full-speed USB device number 7 using dummy_hcd
[  228.509545][ T5912] usb 3-1: device descriptor read/64, error -71
[  228.627283][ T5912] usb usb3-port1: attempt power cycle
[  228.985958][ T6858] loop3: detected capacity change from 0 to 4096
[  229.033063][ T5912] usb 3-1: new full-speed USB device number 8 using dummy_hcd
[  229.056211][ T5912] usb 3-1: device descriptor read/8, error -71
[  229.216134][ T6663] chnl_net:caif_netlink_parms(): no params data found
[  229.320259][ T5912] usb 3-1: new full-speed USB device number 9 using dummy_hcd
[  229.344994][ T5912] usb 3-1: device descriptor read/8, error -71
[  229.404865][ T5836] Bluetooth: hci2: command tx timeout
[  229.472142][ T5912] usb usb3-port1: unable to enumerate USB device
[  229.539226][ T6056] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  229.710640][ T6056] usb 1-1: Using ep0 maxpacket: 8
[  229.856833][ T6056] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  229.856895][ T6056] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b1c, bcdDevice= 0.00
[  229.856919][ T6056] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  229.883362][ T6056] usb 1-1: config 0 descriptor??
[  230.144579][ T6862] loop0: detected capacity change from 0 to 128
[  230.145293][ T6862] udf: Unknown parameter '
'
[  232.027262][ T5836] Bluetooth: hci2: command tx timeout
[  233.366765][ T6876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  233.388356][ T6876] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  235.759645][ T6056] usb 1-1: string descriptor 0 read error: -71
[  236.562028][ T6056] usb 1-1: USB disconnect, device number 5
[  237.092210][ T6894] netlink: 4 bytes leftover after parsing attributes in process `syz.0.176'.
[  237.329622][ T1536] bridge_slave_1: left allmulticast mode
[  237.329652][ T1536] bridge_slave_1: left promiscuous mode
[  237.329973][ T1536] bridge0: port 2(bridge_slave_1) entered disabled state
[  238.527401][ T1536] bridge_slave_0: left allmulticast mode
[  238.527435][ T1536] bridge_slave_0: left promiscuous mode
[  238.527838][ T1536] bridge0: port 1(bridge_slave_0) entered disabled state
[  238.888256][ T6056] usb 1-1: new full-speed USB device number 6 using dummy_hcd
[  239.067091][ T6056] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  239.067126][ T6056] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  239.067148][ T6056] usb 1-1: Product: syz
[  239.067163][ T6056] usb 1-1: Manufacturer: syz
[  239.067178][ T6056] usb 1-1: SerialNumber: syz
[  239.132964][ T6056] usb 1-1: config 0 descriptor??
[  239.398729][ T6056] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  240.094938][ T6056] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  240.361476][ T6919] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.181'.
[  241.058562][ T5815] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  241.230470][ T5815] usb 3-1: Using ep0 maxpacket: 8
[  241.236073][ T5815] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  241.236135][ T5815] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89
[  241.236163][ T5815] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7
[  241.236189][ T5815] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024
[  241.236219][ T5815] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 221, changing to 11
[  241.236246][ T5815] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 50448, setting to 1024
[  241.236272][ T5815] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  241.285667][ T5815] usb 3-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8
[  241.285699][ T5815] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  241.285718][ T5815] usb 3-1: Product: syz
[  241.285732][ T5815] usb 3-1: Manufacturer: syz
[  241.285746][ T5815] usb 3-1: SerialNumber: syz
[  241.327816][ T5815] usb 3-1: config 0 descriptor??
[  241.329051][ T6927] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  241.329358][ T6927] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  241.550216][ T5815] rc_core: IR keymap rc-snapstream-firefly not found
[  241.550240][ T5815] Registered IR keymap rc-empty
[  241.594234][ T5815] rc rc0: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  241.621259][ T5815] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input7
[  241.653085][ T1536] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  241.778200][ T6056] usb 1-1: USB disconnect, device number 6
[  242.126893][ T1536] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  242.254142][ T5815] input: syz syz mouse as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input8
[  242.398932][ T1536] bond0 (unregistering): Released all slaves
[  242.642330][ T5490] 8021q: adding VLAN 0 to HW filter on device eth5
[  242.832420][ T6926] batadv_slave_1: entered promiscuous mode
[  242.989812][    C0] ati_remote 3-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19
[  242.998861][ T6663] bridge0: port 1(bridge_slave_0) entered blocking state
[  242.999213][ T6663] bridge0: port 1(bridge_slave_0) entered disabled state
[  242.999568][ T6663] bridge_slave_0: entered allmulticast mode
[  243.112263][ T6663] bridge_slave_0: entered promiscuous mode
[  243.143231][   T37] usb 3-1: USB disconnect, device number 10
[  243.212517][ T6663] bridge0: port 2(bridge_slave_1) entered blocking state
[  243.212924][ T6663] bridge0: port 2(bridge_slave_1) entered disabled state
[  243.213275][ T6663] bridge_slave_1: entered allmulticast mode
[  243.253470][ T6663] bridge_slave_1: entered promiscuous mode
[  243.362370][ T6933] loop0: detected capacity change from 0 to 32768
[  243.461016][ T6926] batadv_slave_1: left promiscuous mode
[  245.194306][ T5912] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  245.366835][ T5912] usb 1-1: Using ep0 maxpacket: 32
[  245.370739][ T5912] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  245.370775][ T5912] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  245.370817][ T5912] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  245.370843][ T5912] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  245.443646][ T5912] usb 1-1: config 0 descriptor??
[  245.495463][ T5912] hub 1-1:0.0: USB hub found
[  245.628485][ T1536] hsr_slave_0: left promiscuous mode
[  246.713963][ T5912] hub 1-1:0.0: 1 port detected
[  246.757196][ T1536] hsr_slave_1: left promiscuous mode
[  246.758398][ T1536] batman_adv: batadv0: Removing interface: batadv_slave_0
[  246.827765][ T1536] batman_adv: batadv0: Removing interface: batadv_slave_1
[  247.369326][ T6939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  247.372369][ T6939] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  247.657624][   T32] usb 1-1: USB disconnect, device number 7
[  248.312447][ T6968] tmpfs: Bad value for 'mpol'
[  248.334964][ T6967] loop3: detected capacity change from 0 to 512
[  248.465999][ T6967] EXT4-fs warning (device loop3): ext4_multi_mount_protect:314: fsck is running on the filesystem
[  248.466030][ T6967] EXT4-fs warning (device loop3): ext4_multi_mount_protect:314: MMP failure info: last update time: 1756377954, last update node: nogikhp920.muc.corp.google.com, last update device: loop12
[  248.890495][ T1536] team0 (unregistering): Port device team_slave_1 removed
[  249.166683][ T1536] team0 (unregistering): Port device team_slave_0 removed
[  250.176359][ T6985] loop2: detected capacity change from 0 to 8192
[  250.572408][ T6974] mmap: syz.3.195 (6974) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  251.123910][ T6663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  252.345691][ T6663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  253.752693][ T6663] team0: Port device team_slave_0 added
[  253.863874][ T6663] team0: Port device team_slave_1 added
[  255.012016][ T6663] batman_adv: batadv0: Adding interface: batadv_slave_0
[  255.012033][ T6663] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  255.012059][ T6663] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  255.119506][ T6663] batman_adv: batadv0: Adding interface: batadv_slave_1
[  255.119525][ T6663] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  255.119564][ T6663] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  255.121005][ T6804] chnl_net:caif_netlink_parms(): no params data found
[  255.388526][ T7025] netlink: 7076 bytes leftover after parsing attributes in process `syz.2.203'.
[  255.634046][ T6663] hsr_slave_0: entered promiscuous mode
[  255.636746][ T6663] hsr_slave_1: entered promiscuous mode
[  255.638674][ T6663] debugfs: 'hsr0' already exists in 'hsr'
[  255.638701][ T6663] Cannot create hsr debugfs directory
[  256.119854][ T7033] loop5: detected capacity change from 0 to 7
[  256.181217][ T6804] bridge0: port 1(bridge_slave_0) entered blocking state
[  256.181655][ T6804] bridge0: port 1(bridge_slave_0) entered disabled state
[  256.181937][ T6804] bridge_slave_0: entered allmulticast mode
[  256.183046][ T7033] Dev loop5: unable to read RDB block 7
[  256.183090][ T7033]  loop5: unable to read partition table
[  256.183332][ T7033] loop5: partition table beyond EOD, truncated
[  256.183368][ T7033] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  256.200091][ T6804] bridge_slave_0: entered promiscuous mode
[  256.381485][ T6804] bridge0: port 2(bridge_slave_1) entered blocking state
[  256.381833][ T6804] bridge0: port 2(bridge_slave_1) entered disabled state
[  256.382208][ T6804] bridge_slave_1: entered allmulticast mode
[  256.397406][ T6804] bridge_slave_1: entered promiscuous mode
[  256.448425][   T37] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  256.635553][   T37] usb 4-1: Using ep0 maxpacket: 16
[  256.639173][   T37] usb 4-1: config index 0 descriptor too short (expected 46593, got 71)
[  256.639199][   T37] usb 4-1: config 0 has too many interfaces: 158, using maximum allowed: 32
[  256.639219][   T37] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  256.639236][   T37] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 158
[  256.639255][   T37] usb 4-1: config 0 has no interface number 0
[  256.677645][   T37] usb 4-1: New USB device found, idVendor=046c, idProduct=14e0, bcdDevice= 0.01
[  256.677675][   T37] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  256.677695][   T37] usb 4-1: Product: syz
[  256.677709][   T37] usb 4-1: Manufacturer: syz
[  256.677722][   T37] usb 4-1: SerialNumber: syz
[  256.762978][ T7040] loop0: detected capacity change from 0 to 2048
[  256.923974][   T37] usb 4-1: config 0 descriptor??
[  256.934479][ T7040] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  256.984382][ T7040] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[  256.984408][ T7040] UDF-fs: Scanning with blocksize 512 failed
[  257.001223][   T37] uvcvideo 4-1:0.105: probe with driver uvcvideo failed with error -22
[  257.048895][ T7040] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  257.249271][ T7047] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  257.318932][   T37] usb 4-1: USB disconnect, device number 2
[  259.250787][ T7047] 
@0Ùÿÿ: renamed from bond_slave_1 (while UP)
[  259.760279][    C1] [drm:vkms_crtc_handle_vblank_timeout] *ERROR* vkms failure on handling vblank
[  259.985507][ T7067] loop0: detected capacity change from 0 to 256
[  260.688641][ T6804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  260.720658][ T5490] 8021q: adding VLAN 0 to HW filter on device eth6
[  261.437873][ T6804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  261.810758][ T6804] team0: Port device team_slave_0 added
[  261.964975][ T6804] team0: Port device team_slave_1 added
[  262.875360][ T7097] loop0: detected capacity change from 0 to 2048
[  262.942439][ T7097] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  262.945153][ T7097] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[  262.945175][ T7097] UDF-fs: Scanning with blocksize 512 failed
[  262.994003][ T7097] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  264.563513][ T6804] batman_adv: batadv0: Adding interface: batadv_slave_0
[  264.563526][ T6804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  264.563543][ T6804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  264.643771][ T5973] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  264.715921][ T6804] batman_adv: batadv0: Adding interface: batadv_slave_1
[  264.715939][ T6804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  264.715965][ T6804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  264.832879][ T5973] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[  264.832936][ T5973] usb 1-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00
[  264.832962][ T5973] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  264.980805][ T5973] usb 1-1: config 0 descriptor??
[  264.981668][ T7103] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  265.178099][   T37] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  265.386152][   T37] usb 4-1: Using ep0 maxpacket: 32
[  265.409585][   T37] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  265.409611][   T37] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  265.409630][   T37] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 3
[  265.495141][   T37] usb 4-1: New USB device found, idVendor=0582, idProduct=00b2, bcdDevice= 0.40
[  265.495175][   T37] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  265.495194][   T37] usb 4-1: Product: syz
[  265.495208][   T37] usb 4-1: Manufacturer: syz
[  265.495223][   T37] usb 4-1: SerialNumber: syz
[  265.679546][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[  265.679870][ T1339] ieee802154 phy1 wpan1: encryption failed: -22
[  267.774704][   T37] usb 4-1: USB disconnect, device number 3
[  267.940680][ T5145] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  268.006436][ T5145] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  268.017680][ T5145] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  268.030377][ T5145] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  268.094751][ T5145] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  270.511095][ T5145] Bluetooth: hci5: command tx timeout
[  270.662155][ T5973] usbhid 1-1:0.0: can't add hid device: -32
[  270.662309][ T5973] usbhid 1-1:0.0: probe with driver usbhid failed with error -32
[  271.221620][ T7145] loop3: detected capacity change from 0 to 2048
[  271.331278][ T7145] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  271.472229][ T6804] hsr_slave_0: entered promiscuous mode
[  271.500143][ T6804] hsr_slave_1: entered promiscuous mode
[  271.504924][ T6804] debugfs: 'hsr0' already exists in 'hsr'
[  271.504951][ T6804] Cannot create hsr debugfs directory
[  271.834166][ T7148] loop3: detected capacity change from 0 to 128
[  272.736978][ T5145] Bluetooth: hci5: command tx timeout
[  273.108008][ T7155] loop3: detected capacity change from 0 to 2048
[  273.129213][ T7155] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  273.152049][ T7155] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  273.152075][ T7155] UDF-fs: Scanning with blocksize 512 failed
[  273.166555][ T7132] lo speed is unknown, defaulting to 1000
[  273.383190][ T7155] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  274.961888][ T5145] Bluetooth: hci5: command tx timeout
[  275.178268][ T7163] loop3: detected capacity change from 0 to 128
[  275.310477][ T7163] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  275.310534][ T7163] hpfs: filesystem error: improperly stopped
[  275.310550][ T7163] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  275.310565][ T7163] hpfs: You really don't want any checks? You are crazy...
[  275.356383][ T7163] hpfs: hpfs_map_sector(): read error
[  275.356403][ T7163] hpfs: code page support is disabled
[  275.356561][ T7163] hpfs: hpfs_map_4sectors(): unaligned read
[  275.356657][ T7163] hpfs: hpfs_map_4sectors(): unaligned read
[  275.356667][ T7163] hpfs: filesystem error: unable to find root dir
[  275.714320][ T7170] netlink: 32 bytes leftover after parsing attributes in process `syz.2.226'.
[  276.273600][ T5912] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  276.473580][ T5912] usb 4-1: New USB device found, idVendor=0421, idProduct=0007, bcdDevice=b8.51
[  276.473613][ T5912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  276.473629][ T5912] usb 4-1: Product: syz
[  276.473638][ T5912] usb 4-1: Manufacturer: syz
[  276.473646][ T5912] usb 4-1: SerialNumber: syz
[  276.515761][ T1536] bridge_slave_1: left allmulticast mode
[  276.515792][ T1536] bridge_slave_1: left promiscuous mode
[  276.521614][ T1536] bridge0: port 2(bridge_slave_1) entered disabled state
[  276.538638][ T5912] usb 4-1: config 0 descriptor??
[  276.557757][ T5912] rndis_host 4-1:0.0: More than one union descriptor, skipping ...
[  276.557783][ T5912] rndis_host 4-1:0.0: rndis: master #0/ffff888061e42000 slave #1/0000000000000000
[  276.559506][ T5912] cdc_acm 4-1:0.0: More than one union descriptor, skipping ...
[  276.596213][ T1536] bridge_slave_0: left allmulticast mode
[  276.596234][ T1536] bridge_slave_0: left promiscuous mode
[  276.596430][ T1536] bridge0: port 1(bridge_slave_0) entered disabled state
[  277.183257][ T5145] Bluetooth: hci5: command tx timeout
[  277.241855][ T5815] usb 4-1: USB disconnect, device number 4
[  277.691348][ T7180] syz.2.229 uses obsolete (PF_INET,SOCK_PACKET)
[  277.803063][ T1536] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  277.911264][ T1536] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  279.609266][ T1536] bond0 (unregistering): Released all slaves
[  280.428184][ T7189] loop3: detected capacity change from 0 to 1024
[  280.521998][ T7189] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  280.740796][ T5836] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  280.769418][ T5836] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  280.782576][ T5836] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  280.785318][ T5836] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  280.786267][ T5836] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  281.362147][ T1536] hsr_slave_0: left promiscuous mode
[  281.406006][ T1536] hsr_slave_1: left promiscuous mode
[  281.410097][ T1536] batman_adv: batadv0: Removing interface: batadv_slave_0
[  281.450601][ T1536] batman_adv: batadv0: Removing interface: batadv_slave_1
[  282.121606][ T1536] team0 (unregistering): Port device team_slave_1 removed
[  282.175754][ T1536] team0 (unregistering): Port device team_slave_0 removed
[  282.186892][ T5912] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  282.369187][ T5912] usb 3-1: Using ep0 maxpacket: 16
[  282.371143][ T5912] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  282.371170][ T5912] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  282.371191][ T5912] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  282.373482][ T5912] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  282.373510][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  282.373525][ T5912] usb 3-1: Product: syz
[  282.373533][ T5912] usb 3-1: Manufacturer: syz
[  282.373541][ T5912] usb 3-1: SerialNumber: syz
[  282.563670][ T5490] 8021q: adding VLAN 0 to HW filter on device eth7
[  282.720035][ T7219] netlink: 'syz.3.236': attribute type 15 has an invalid length.
[  282.746644][ T7214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  282.747372][ T7214] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  282.806541][ T5912] usb 3-1: 0:2 : does not exist
[  282.853111][ T5912] usb 3-1: 1:0: failed to get current value for ch 0 (-22)
[  283.086417][ T5145] Bluetooth: hci6: command tx timeout
[  283.695498][ T5912] usb 3-1: USB disconnect, device number 11
[  284.275016][ T7132] chnl_net:caif_netlink_parms(): no params data found
[  284.860815][ T7190] lo speed is unknown, defaulting to 1000
[  284.926567][ T7230] netlink: 8 bytes leftover after parsing attributes in process `syz.3.238'.
[  285.267733][ T5912] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  285.343705][ T5145] Bluetooth: hci6: command tx timeout
[  285.424494][ T5912] usb 3-1: Using ep0 maxpacket: 16
[  285.430209][ T5912] usb 3-1: config 4 has an invalid interface number: 227 but max is 0
[  285.430240][ T5912] usb 3-1: config 4 has no interface number 0
[  285.430271][ T5912] usb 3-1: config 4 interface 227 has no altsetting 0
[  285.437801][ T5912] usb 3-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice=43.06
[  285.437846][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  285.437866][ T5912] usb 3-1: Product: syz
[  285.437880][ T5912] usb 3-1: Manufacturer: syz
[  285.437894][ T5912] usb 3-1: SerialNumber: syz
[  285.463237][ T7237] loop3: detected capacity change from 0 to 128
[  285.654880][ T7237] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  285.919984][ T5836] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  285.947757][ T7237] ext4 filesystem being mounted at /78/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  285.971307][ T5836] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  285.973122][ T5836] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  286.006128][ T5836] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  286.032124][ T5836] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  286.412739][ T7132] bridge0: port 1(bridge_slave_0) entered blocking state
[  286.413035][ T7132] bridge0: port 1(bridge_slave_0) entered disabled state
[  286.413359][ T7132] bridge_slave_0: entered allmulticast mode
[  286.440704][ T7132] bridge_slave_0: entered promiscuous mode
[  286.565285][ T7244] fuse: Unknown parameter '¬ E'
[  286.694053][ T7132] bridge0: port 2(bridge_slave_1) entered blocking state
[  286.694756][ T7132] bridge0: port 2(bridge_slave_1) entered disabled state
[  286.695286][ T7132] bridge_slave_1: entered allmulticast mode
[  286.706409][ T7132] bridge_slave_1: entered promiscuous mode
[  286.894161][ T5830] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  287.628142][ T5145] Bluetooth: hci6: command tx timeout
[  288.662077][ T5145] Bluetooth: hci7: command tx timeout
[  288.733883][ T5912] etas_es58x 3-1:4.227: Starting syz syz (Serial Number syz)
[  288.859730][ T5912] usb 3-1: USB disconnect, device number 12
[  288.992763][   T38] kauditd_printk_skb: 56 callbacks suppressed
[  288.992783][   T38] audit: type=1326 audit(1776607874.871:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7251 comm="syz.2.241" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5871bac819 code=0x0
[  289.061028][   T38] audit: type=1326 audit(1776607874.927:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7251 comm="syz.2.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5871bac819 code=0x7ffc0000
[  289.061097][   T38] audit: type=1326 audit(1776607874.936:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7251 comm="syz.2.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5871bac819 code=0x7ffc0000
[  289.061144][   T38] audit: type=1326 audit(1776607874.936:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7251 comm="syz.2.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5871bac819 code=0x7ffc0000
[  289.062860][   T38] audit: type=1326 audit(1776607874.936:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7251 comm="syz.2.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5871bac819 code=0x7ffc0000
[  289.062911][   T38] audit: type=1326 audit(1776607874.936:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7251 comm="syz.2.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5871bac819 code=0x7ffc0000
[  289.062957][   T38] audit: type=1326 audit(1776607874.936:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7251 comm="syz.2.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5871bac819 code=0x7ffc0000
[  289.063003][   T38] audit: type=1326 audit(1776607874.936:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7251 comm="syz.2.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5871bac819 code=0x7ffc0000
[  289.068942][   T38] audit: type=1326 audit(1776607874.936:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7251 comm="syz.2.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5871bac819 code=0x7ffc0000
[  289.068999][   T38] audit: type=1326 audit(1776607874.936:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7251 comm="syz.2.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5871bac819 code=0x7ffc0000
[  289.821875][ T7252] team_slave_0: entered promiscuous mode
[  289.821964][ T7252] team_slave_1: entered promiscuous mode
[  289.834832][ T7252] macsec1: entered promiscuous mode
[  289.834853][ T7252] team0: entered promiscuous mode
[  289.841962][ T5145] Bluetooth: hci6: command tx timeout
[  289.859650][ T7252] 8021q: adding VLAN 0 to HW filter on device macsec1
[  289.873303][ T7252] team0: Device macsec1 is already an upper device of the team interface
[  290.144272][ T7252] team0: left promiscuous mode
[  290.204051][ T7252] team_slave_0: left promiscuous mode
[  290.204142][ T7252] team_slave_1: left promiscuous mode
[  290.370728][ T7259] loop3: detected capacity change from 0 to 256
[  290.372154][ T7259] exfat: Unknown parameter ''
[  290.494515][ T7132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  290.808131][ T7132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  290.852374][ T7259] loop3: detected capacity change from 0 to 32768
[  290.877215][ T5145] Bluetooth: hci7: command tx timeout
[  290.932747][ T1536] bridge_slave_1: left allmulticast mode
[  290.932781][ T1536] bridge_slave_1: left promiscuous mode
[  290.933085][ T1536] bridge0: port 2(bridge_slave_1) entered disabled state
[  291.050814][ T1536] bridge_slave_0: left allmulticast mode
[  291.050846][ T1536] bridge_slave_0: left promiscuous mode
[  291.051128][ T1536] bridge0: port 1(bridge_slave_0) entered disabled state
[  291.149664][ T7261] netlink: 36 bytes leftover after parsing attributes in process `syz.2.243'.
[  291.743950][ T1536] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  291.882487][ T1536] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  292.001198][ T1536] bond0 (unregistering): Released all slaves
[  292.077927][ T7263] loop2: detected capacity change from 0 to 32768
[  292.395664][ T7240] lo speed is unknown, defaulting to 1000
[  292.476421][ T7132] team0: Port device team_slave_0 added
[  292.567714][ T7132] team0: Port device team_slave_1 added
[  292.716387][ T7263] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  293.024778][ T7263] XFS (loop2): Ending clean mount
[  293.075863][ T1536] hsr_slave_0: left promiscuous mode
[  293.109395][ T5145] Bluetooth: hci7: command tx timeout
[  293.123768][ T1536] hsr_slave_1: left promiscuous mode
[  293.124820][ T1536] batman_adv: batadv0: Removing interface: batadv_slave_0
[  293.286649][ T1536] batman_adv: batadv0: Removing interface: batadv_slave_1
[  293.442696][ T5832] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  294.811685][ T1536] team0 (unregistering): Port device team_slave_1 removed
[  294.865246][ T1536] team0 (unregistering): Port device team_slave_0 removed
[  295.306253][ T7132] batman_adv: batadv0: Adding interface: batadv_slave_0
[  295.306271][ T7132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  295.306298][ T7132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  295.322522][ T5145] Bluetooth: hci7: command tx timeout
[  295.369256][ T7306] faux_driver vgem: [drm] Unknown color mode 181; guessing buffer size.
[  295.517824][ T7132] batman_adv: batadv0: Adding interface: batadv_slave_1
[  295.517841][ T7132] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  295.517866][ T7132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  295.611191][ T7300] loop2: detected capacity change from 0 to 32768
[  295.810410][ T7300] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  296.289081][ T7132] hsr_slave_0: entered promiscuous mode
[  296.296474][ T7132] hsr_slave_1: entered promiscuous mode
[  296.301729][ T7132] debugfs: 'hsr0' already exists in 'hsr'
[  296.301756][ T7132] Cannot create hsr debugfs directory
[  296.332525][ T7190] chnl_net:caif_netlink_parms(): no params data found
[  296.334137][ T7300] XFS (loop2): Ending clean mount
[  296.608689][ T5832] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  302.573995][ T7348] netlink: 52 bytes leftover after parsing attributes in process `syz.3.252'.
[  303.072549][ T7190] bridge0: port 1(bridge_slave_0) entered blocking state
[  303.073001][ T7190] bridge0: port 1(bridge_slave_0) entered disabled state
[  303.073619][ T7190] bridge_slave_0: entered allmulticast mode
[  303.112442][ T7190] bridge_slave_0: entered promiscuous mode
[  303.689393][ T7190] bridge0: port 2(bridge_slave_1) entered blocking state
[  303.698937][ T7190] bridge0: port 2(bridge_slave_1) entered disabled state
[  303.699323][ T7190] bridge_slave_1: entered allmulticast mode
[  303.721944][ T7190] bridge_slave_1: entered promiscuous mode
[  304.995125][ T5145] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201'
[  304.995197][ T5145] CPU: 0 UID: 0 PID: 5145 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  304.995227][ T5145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  304.995243][ T5145] Workqueue: hci3 hci_rx_work
[  304.995279][ T5145] Call Trace:
[  304.995289][ T5145]  <TASK>
[  304.995301][ T5145]  dump_stack_lvl+0xe8/0x150
[  304.995335][ T5145]  sysfs_create_dir_ns+0x271/0x2a0
[  304.995366][ T5145]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  304.995405][ T5145]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  304.995437][ T5145]  ? rt_spin_unlock+0x160/0x200
[  304.995474][ T5145]  kobject_add_internal+0x631/0xd10
[  304.995516][ T5145]  kobject_add+0x163/0x240
[  304.995566][ T5145]  ? __pfx_kobject_add+0x10/0x10
[  304.995606][ T5145]  ? get_device_parent+0x370/0x3a0
[  304.995641][ T5145]  device_add+0x408/0xbb0
[  304.995674][ T5145]  hci_conn_add_sysfs+0xd5/0x210
[  304.995704][ T5145]  le_conn_complete_evt+0x10e6/0x16b0
[  304.995751][ T5145]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  304.995788][ T5145]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  304.995825][ T5145]  ? lockdep_hardirqs_on+0x7a/0x110
[  304.995856][ T5145]  ? skb_pull_data+0xfb/0x200
[  304.995899][ T5145]  hci_le_conn_complete_evt+0x187/0x470
[  304.995943][ T5145]  hci_event_packet+0x659/0xef0
[  304.995982][ T5145]  ? __pfx____migrate_enable+0x10/0x10
[  304.996009][ T5145]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  304.996041][ T5145]  ? __pfx_hci_event_packet+0x10/0x10
[  304.996069][ T5145]  ? preempt_schedule_common+0x82/0xd0
[  304.996094][ T5145]  ? preempt_schedule_thunk+0x16/0x30
[  304.996140][ T5145]  ? hci_send_to_monitor+0xe2/0x590
[  304.996181][ T5145]  hci_rx_work+0x3ee/0x1040
[  304.996224][ T5145]  ? process_one_work+0x8b7/0x1710
[  304.996247][ T5145]  process_one_work+0x9a3/0x1710
[  304.996298][ T5145]  ? __pfx_process_one_work+0x10/0x10
[  304.996320][ T5145]  ? do_raw_spin_lock+0x12b/0x2f0
[  304.996367][ T5145]  worker_thread+0xba8/0x11e0
[  304.996404][ T5145]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  304.996433][ T5145]  ? __kthread_parkme+0x7a/0x1f0
[  304.996459][ T5145]  ? __kthread_parkme+0x19c/0x1f0
[  304.996502][ T5145]  kthread+0x388/0x470
[  304.996534][ T5145]  ? __pfx_worker_thread+0x10/0x10
[  304.996557][ T5145]  ? __pfx_kthread+0x10/0x10
[  304.996589][ T5145]  ret_from_fork+0x514/0xb70
[  304.996620][ T5145]  ? __pfx_ret_from_fork+0x10/0x10
[  304.996646][ T5145]  ? __switch_to+0xc79/0x1410
[  304.996686][ T5145]  ? __pfx_kthread+0x10/0x10
[  304.996719][ T5145]  ret_from_fork_asm+0x1a/0x30
[  304.996769][ T5145]  </TASK>
[  305.026353][ T5145] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  305.026550][ T5145] Bluetooth: hci3: failed to register connection device
[  307.103930][ T7190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  307.346814][ T7372] loop3: detected capacity change from 0 to 512
[  307.439108][ T7372] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  307.507341][ T7372] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c099, mo2=0102]
[  307.507471][ T7372] System zones: 0-2, 18-18, 34-35
[  307.556391][ T7190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  307.558581][ T7372] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  307.559144][ T7372] ext4 filesystem being mounted at /88/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  307.689169][ T7383] loop2: detected capacity change from 0 to 512
[  307.691360][ T7383] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  307.691753][ T7383] EXT4-fs (loop2): can't mount with journal_async_commit, fs mounted w/o journal
[  307.733281][ T1536] bridge_slave_1: left allmulticast mode
[  307.733312][ T1536] bridge_slave_1: left promiscuous mode
[  307.755890][ T1536] bridge0: port 2(bridge_slave_1) entered disabled state
[  307.833932][ T1536] bridge_slave_0: left allmulticast mode
[  307.833954][ T1536] bridge_slave_0: left promiscuous mode
[  307.834139][ T1536] bridge0: port 1(bridge_slave_0) entered disabled state
[  308.145361][ T1536] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  308.228626][ T1536] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  308.293272][ T1536] bond0 (unregistering): Released all slaves
[  308.575133][  T827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  308.608667][ T7240] chnl_net:caif_netlink_parms(): no params data found
[  308.616499][ T5815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  308.652434][ T6056] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  308.768799][ T5830] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  308.952842][ T7190] team0: Port device team_slave_0 added
[  309.255599][  T827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  309.278475][ T1536] hsr_slave_0: left promiscuous mode
[  309.287283][ T7390] loop3: detected capacity change from 0 to 512
[  309.343401][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  309.431168][ T1536] hsr_slave_1: left promiscuous mode
[  309.433109][ T1536] batman_adv: batadv0: Removing interface: batadv_slave_0
[  309.446465][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  309.492753][ T1536] batman_adv: batadv0: Removing interface: batadv_slave_1
[  309.498484][ T7386] loop2: detected capacity change from 0 to 32768
[  309.594191][ T7386] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  309.719176][ T7386] XFS (loop2): Ending clean mount
[  309.747844][ T7390] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.259: iget: bad extra_isize 90 (inode size 256)
[  309.748083][ T7390] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  309.753092][ T7390] EXT4-fs (loop3): Remounting filesystem read-only
[  309.753281][ T7390] EXT4-fs warning (device loop3): ext4_evict_inode:270: couldn't mark inode dirty (err -30)
[  309.766937][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  309.766962][    C1] EXT4-fs (loop3): initial error at time 1776607894: ext4_xattr_inode_iget:441: inode 11
[  309.766994][    C1] EXT4-fs (loop3): last error at time 1776607894: ext4_xattr_inode_iget:441: inode 11
[  309.867714][ T7390] EXT4-fs (loop3): 1 orphan inode deleted
[  309.889490][ T7390] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  309.970537][ T5832] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  310.007861][ T5830] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  310.182105][ T7402] netlink: 52 bytes leftover after parsing attributes in process `syz.3.261'.
[  310.538858][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  310.748011][ T7408] loop2: detected capacity change from 0 to 256
[  311.016958][ T7408] FAT-fs (loop2): Directory bread(block 64) failed
[  311.017001][ T7408] FAT-fs (loop2): Directory bread(block 65) failed
[  311.017128][ T7408] FAT-fs (loop2): Directory bread(block 66) failed
[  311.017153][ T7408] FAT-fs (loop2): Directory bread(block 67) failed
[  311.017259][ T7408] FAT-fs (loop2): Directory bread(block 68) failed
[  311.017284][ T7408] FAT-fs (loop2): Directory bread(block 69) failed
[  311.017436][ T7408] FAT-fs (loop2): Directory bread(block 70) failed
[  311.017461][ T7408] FAT-fs (loop2): Directory bread(block 71) failed
[  311.029825][ T7408] FAT-fs (loop2): Directory bread(block 72) failed
[  311.029875][ T7408] FAT-fs (loop2): Directory bread(block 73) failed
[  311.268674][ T1536] team0 (unregistering): Port device team_slave_1 removed
[  311.415232][ T1536] team0 (unregistering): Port device team_slave_0 removed
[  311.431600][  T827] kworker/u8:7: attempt to access beyond end of device
[  311.431600][  T827] loop2: rw=1, sector=1224, nr_sectors = 4 limit=256
[  311.660371][  T820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  312.038695][ T5145] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection
[  313.270354][ T7190] team0: Port device team_slave_1 added
[  313.605673][ T3573] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  313.623061][ T1186] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  314.858528][ T6058] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  314.858574][ T6058] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  314.858597][ T6058] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  315.752683][ T7429] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  315.948281][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  316.430013][ T7427] lo speed is unknown, defaulting to 1000
[  316.430619][ T7427] lo speed is unknown, defaulting to 1000
[  316.432501][ T7427] lo speed is unknown, defaulting to 1000
[  316.434179][ T7427] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  316.434215][ T7427] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  316.434258][ T7427] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  316.453055][ T7427] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  316.512737][ T7427] lo speed is unknown, defaulting to 1000
[  316.515966][ T7427] lo speed is unknown, defaulting to 1000
[  316.519147][ T7427] lo speed is unknown, defaulting to 1000
[  316.522287][ T7427] lo speed is unknown, defaulting to 1000
[  316.525622][ T7427] lo speed is unknown, defaulting to 1000
[  316.531700][ T7427] lo speed is unknown, defaulting to 1000
[  316.536745][ T7427] lo speed is unknown, defaulting to 1000
[  316.750265][ T7190] batman_adv: batadv0: Adding interface: batadv_slave_0
[  316.750283][ T7190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  316.750313][ T7190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  316.824182][ T7190] batman_adv: batadv0: Adding interface: batadv_slave_1
[  316.824200][ T7190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  316.824226][ T7190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  317.058783][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  317.203305][ T7240] bridge0: port 1(bridge_slave_0) entered blocking state
[  317.203723][ T7240] bridge0: port 1(bridge_slave_0) entered disabled state
[  317.204178][ T7240] bridge_slave_0: entered allmulticast mode
[  317.206440][ T7240] bridge_slave_0: entered promiscuous mode
[  318.399737][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  318.438780][ T7442] netlink: 52 bytes leftover after parsing attributes in process `syz.2.270'.
[  318.847326][   T39] INFO: task syz.4.57:6207 blocked for more than 145 seconds.
[  318.847361][   T39]       Tainted: G         [  318.847361][   T39]       Tainted: G             L      syzkaller #0
[  318.847372][   T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  318.847381][   T39] task:syz.4.57        state:D stack:24632 pid:6207  tgid:6206  ppid:5826   task_flags:0x400140 flags:0x00080002
[  318.847451][   T39] Call Trace:
[  318.847459][   T39]  <TASK>
[  318.847475][   T39]  __schedule+0x169e/0x54f0
[  318.847523][   T39]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  318.847553][   T39]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  318.847582][   T39]  ? rt_spin_lock+0x1e0/0x400
[  318.847618][   T39]  ? __pfx___schedule+0x10/0x10
[  318.847655][   T39]  ? schedule+0x90/0x360
[  318.847682][   T39]  schedule+0x164/0x360
[  318.847706][   T39]  fuse_chan_wait_aborted+0x15b/0x250
[  318.847738][   T39]  ? __pfx_fuse_chan_wait_aborted+0x10/0x10
[  318.847765][   T39]  ? __pfx_autoremove_wake_function+0x10/0x10
[  318.847795][   T39]  ? __pfx_fuse_chan_abort+0x10/0x10
[  318.847821][   T39]  ? do_raw_spin_lock+0x12b/0x2f0
[  318.847854][   T39]  fuse_conn_destroy+0x1e7/0x3e0
[  318.847889][   T39]  ? __pfx_fuse_conn_destroy+0x10/0x10
[  318.847918][   T39]  ? lockdep_hardirqs_on+0x7a/0x110
[  318.847944][   T39]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  318.847977][   T39]  ? rt_mutex_slowunlock+0x4a7/0x8b0
[  318.848006][   T39]  ? do_raw_spin_lock+0x12b/0x2f0
[  318.848033][   T39]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  318.848070][   T39]  ? lockdep_hardirqs_on+0x7a/0x110
[  318.848094][   T39]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  318.848121][   T39]  fuse_kill_sb_anon+0x1ef/0x270
[  318.848156][   T39]  deactivate_locked_super+0xbc/0x130
[  318.848182][   T39]  ? __pfx_fuse_fill_super+0x10/0x10
[  318.848214][   T39]  get_tree_nodev+0xd7/0x150
[  318.848247][   T39]  fuse_get_tree+0x2a0/0x3a0
[  318.848281][   T39]  vfs_get_tree+0x92/0x2a0
[  318.848317][   T39]  do_new_mount+0x341/0xd30
[  318.848341][   T39]  ? apparmor_capable+0x126/0x170
[  318.848381][   T39]  ? __pfx_do_new_mount+0x10/0x10
[  318.848407][   T39]  ? ns_capable+0x89/0xe0
[  318.848433][   T39]  ? path_mount+0x690/0x10e0
[  318.848458][   T39]  ? user_path_at+0xd4/0x160
[  318.848492][   T39]  ? user_path_at+0xd4/0x160
[  318.848524][   T39]  __se_sys_mount+0x31d/0x420
[  318.848579][   T39]  ? __pfx___se_sys_mount+0x10/0x10
[  318.848612][   T39]  ? __x64_sys_mount+0x20/0xc0
[  318.848638][   T39]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  318.848663][   T39]  do_syscall_64+0x15f/0xf80
[  318.848685][   T39]  ? trace_irq_disable+0x3b/0x140
[  318.861386][   T39]  ? clear_bhb_loop+0x40/0x90
[  318.861424][   T39]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  318.861446][   T39] RIP: 0033:0x7f24342bc819
[  318.861464][   T39] RSP: 002b:00007f2432516028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  318.861486][   T39] RAX: ffffffffffffffda RBX: 00007f2434535fa0 RCX: 00007f24342bc819
[  318.861501][   T39] RDX: 0000200000000080 RSI: 00002000000020c0 RDI: 0000000000000000
[  318.861516][   T39] RBP: 00007f2434352c91 R08: 0000200000000640 R09: 0000000000000000
[  318.861529][   T39] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  318.861541][   T39] R13: 00007f2434536038 R14: 00007f2434535fa0 R15: 00007ffdcfbb5678
[  318.861574][   T39]  </TASK>
[  318.861608][   T39] 
[  318.861608][   T39] Showing all locks held in the system:
[  318.861619][   T39] 4 locks held by pr/legacy/17:
[  318.861631][   T39]  #0: ffffffff8dfba3a0 (console_lock){+.+.}-{0:0}, at: legacy_kthread_func+0x1a3/0x250
[  318.861685][   T39]  #1: ffffffff8dea1c98 (console_srcu){....}-{0:0}, at: console_flush_one_record+0xfa/0xb90
[  318.861745][   T39]  #2: ffffffff99bd6738 (&port_lock_key){+.+.}-{3:3}, at: serial8250_console_write+0x179/0x1b90
[  318.861800][   T39]  #3: ffffffff8dfc8100 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400
[  318.861857][   T39] 1 lock held by khungtaskd/39:
[  318.861868][   T39]  #0: ffffffff8dfc8100 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  318.861923][   T39] 3 locks held by kworker/u8:6/149:
[  318.861934][   T39]  #0: ffff88813fe7c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x890/0x1710
[  318.861982][   T39]  #1: ffffc90002f77c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x8b7/0x1710
[  318.862028][   T39]  #2: ffffffff8f382478 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[  318.862088][   T39] 2 locks held by kworker/u8:12/1220:
[  318.862099][   T39]  #0: ffff88813fe7c938 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_one_work+0x890/0x1710
[  318.862170][   T39]  #1: ffffc900062ffc40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x8b7/0x1710
[  318.864260][   T39] 4 locks held by kworker/u8:13/1536:
[  318.864275][   T39]  #0: ffff88801b686138 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x890/0x1710
[  318.864329][   T39]  #1: ffffc90006bdfc40 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x8b7/0x1710
[  318.864401][   T39]  #2: ffffffff8f373400 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800
[  318.864457][   T39]  #3: ffffffff99bc91f8 (&xa->xa_lock#15){+.+.}-{3:3}, at: ref_tracker_dir_exit+0xb2/0x650
[  318.864764][   T39] 2 locks held by kworker/u8:15/3573:
[  318.864779][   T39]  #0: ffff88813fe7c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x890/0x1710
[  318.864833][   T39]  #1: ffffc9000ef1fc40 ((reaper_work).work){+.+.}-{0:0}, at: process_one_work+0x8b7/0x1710
[  318.864904][   T39] 2 locks held by dhcpcd/5490:
[  318.864917][   T39]  #0: ffff88802b6a6928 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: netlink_dump+0xe2/0xe10
[  318.864973][   T39]  #1: 
[  318.867213][ T6056] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  318.867487][   T39] ffffffff8f382478 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x92/0x200
[  318.867543][   T39] 2 locks held by getty/5581:
[  318.867555][   T39]  #0: ffff88803778e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  318.867608][   T39]  #1: ffffc90003cbe2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13a0
[  318.867665][   T39] 3 locks held by kworker/0:3/5815:
[  318.867677][   T39]  #0: ffff88813fe3b938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x890/0x1710
[  318.867734][   T39]  #1: ffffc90004367c40 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x8b7/0x1710
[  318.867779][   T39]  #2: ffffffff8f382478 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20
[  318.867830][   T39] 5 locks held by kworker/0:4/5835:
[  318.867841][   T39]  #0: ffff88813fe3b938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x890/0x1710
[  318.867888][   T39]  #1: ffffc90004c57c40 ((work_completion)(&debugfs_reap_worker)){+.+.}-{0:0}, at: process_one_work+0x8b7/0x1710
[  318.867936][   T39]  #2: ffffffff99bc91f8 (&xa->xa_lock#15){+.+.}-{3:3}, at: debugfs_reap_work+0x17b/0x210
[  318.867996][   T39]  #3: ffffffff8dfc8100 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400
[  318.868050][   T39]  #4: ffffffff8e775800 (fill_pool_map-wait-type-override){+.+.}-{3:3}, at: debug_objects_fill_pool+0x6f/0xd0
[  318.868105][   T39] 1 lock held by syz.4.57/6207:
[  318.868116][   T39]  #0: ffff88803998e0d0 (&type->s_umount_key#64/1){+.+.}-{4:4}, at: alloc_super+0x28c/0xac0
[  318.868200][   T39] 10 locks held by syz-executor/7132:
[  318.868211][   T39]  #0: ffff888037e46480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0
[  318.868275][   T39]  #1: ffff88805f04d878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540
[  318.868333][   T39]  #2: ffff888029ded968 (kn->active#53){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540
[  318.868391][   T39]  #3: ffffffff8ebe6a18 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: new_device_store+0x13c/0x710
[  318.868442][   T39]  #4: ffff888029d3c160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450
[  318.868492][   T39]  #5: ffff888025198310 (&devlink->lock_key#6){+.+.}-{4:4}, at: nsim_drv_probe+0xc9/0xc30
[  318.868550][   T39]  #6: ffffffff8f382478 (rtnl_mutex){+.+.}-{4:4}, at: nsim_create+0x894/0x1170
[  318.868599][   T39]  #7: ffff888055f7cf50 (&dev_instance_lock_key#24){+.+.}-{4:4}, at: register_netdevice+0x171e/0x1d10
[  318.868658][   T39]  #8: ffff888055f7c708 (&dir->lock#2){+.+.}-{3:3}, at: ref_tracker_alloc+0x1ee/0x4a0
[  318.868807][   T39]  #9: ffffffff8dfc8100 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400
[  318.868871][   T39] 2 locks held by syz-executor/7190:
[  318.868883][   T39]  #0: ffffffff8ead3ee8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250
[  318.868941][   T39]  #1: ffffffff8f382478 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0
[  318.868991][   T39] 1 lock held by syz-executor/7240:
[  318.869003][   T39]  #0: ffffffff8f382478 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0
[  318.870997][   T39] 1 lock held by syz.3.271/7444:
[  318.871017][   T39]  #0: ffff88803e914b08 (&net->xfrm.xfrm_cfg_mutex){+.+.}-{4:4}, at: xfrm_netlink_rcv+0x6a/0x90
[  318.871085][   T39] 4 locks held by syz.2.272/7448:
[  318.871096][   T39]  #0: ffff888022af9db0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x194/0x9e0
[  318.871151][   T39]  #1: ffffffff8dfc8100 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x200
[  318.871204][   T39]  #2: ffff888025997058 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210
[  318.871260][   T39]  #3: ffffffff8dfc8100 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400
[  318.871315][   T39] 1 lock held by modprobe/7451:
[  318.871325][   T39]  #0: ffff888025c381c8 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500
[  318.871384][   T39] 
[  318.871389][   T39] =============================================
[  318.871389][   T39] 
[  318.871399][   T39] NMI backtrace for cpu 0
[  318.871416][   T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  318.871442][   T39] Tainted: [L]=SOFTLOCKUP
[  318.871449][   T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  318.871461][   T39] Call Trace:
[  318.871471][   T39]  <TASK>
[  318.871479][   T39]  dump_stack_lvl+0xe8/0x150
[  318.871503][   T39]  nmi_cpu_backtrace+0x274/0x2d0
[  318.871530][   T39]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  318.871554][   T39]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  318.871587][   T39]  sys_info+0x135/0x170
[  318.871612][   T39]  watchdog+0xfd3/0x1030
[  318.871643][   T39]  ? watchdog+0x1c9/0x1030
[  318.871670][   T39]  kthread+0x388/0x470
[  318.871697][   T39]  ? __pfx_watchdog+0x10/0x10
[  318.871717][   T39]  ? __pfx_kthread+0x10/0x10
[  318.871753][   T39]  ret_from_fork+0x514/0xb70
[  318.871782][   T39]  ? __pfx_ret_from_fork+0x10/0x10
[  318.871804][   T39]  ? __switch_to+0xc79/0x1410
[  318.871837][   T39]  ? __pfx_kthread+0x10/0x10
[  318.871863][   T39]  ret_from_fork_asm+0x1a/0x30
[  318.871901][   T39]  </TASK>
[  318.871908][   T39] Sending NMI from CPU 0 to CPUs 1:
[  318.871937][    C1] NMI backtrace for cpu 1
[  318.871954][    C1] CPU: 1 UID: 0 PID: 17 Comm: pr/legacy Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  318.871978][    C1] Tainted: [L]=SOFTLOCKUP
[  318.871984][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  318.872002][    C1] RIP: 0010:io_serial_in+0x77/0xc0
[  318.872030][    C1] Code: e8 be bf 87 fc 44 89 f9 d3 e3 49 83 ee 80 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 6f 36 f1 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 4a 3e fd 05 cc 44 89 f9 80 e1 07
[  318.872045][    C1] RSP: 0018:ffffc900001679d0 EFLAGS: 00000202
[  318.872062][    C1] RAX: 1ffffffff337ac00 RBX: 00000000000003fd RCX: 0000000000000000
[  318.872075][    C1] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000000
[  318.872086][    C1] RBP: ffffffff99bd69f0 R08: 0000000000000000 R09: 0000000000000000
[  318.872097][    C1] R10: dffffc0000000000 R11: ffffffff853ce990 R12: dffffc0000000000
[  318.872109][    C1] R13: 0000000000000000 R14: ffffffff99bd6760 R15: 0000000000000000
[  318.872122][    C1] FS:  0000000000000000(0000) GS:ffff888125fba000(0000) knlGS:0000000000000000
[  318.872136][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  318.872148][    C1] CR2: 000000110c33306c CR3: 00000000373c2000 CR4: 00000000003526f0
[  318.872165][    C1] Call Trace:
[  318.872172][    C1]  <TASK>
[  318.872180][    C1]  wait_for_lsr+0x1aa/0x2f0
[  318.872207][    C1]  serial8250_console_write+0x120d/0x1b90
[  318.872237][    C1]  ? __pfx_serial8250_console_write+0x10/0x10
[  318.872259][    C1]  ? console_flush_one_record+0xfa/0xb90
[  318.872283][    C1]  ? console_flush_one_record+0x48f/0xb90
[  318.872305][    C1]  console_flush_one_record+0x68b/0xb90
[  318.872328][    C1]  ? console_flush_one_record+0xfa/0xb90
[  318.872350][    C1]  ? __pfx_console_flush_one_record+0x10/0x10
[  318.872371][    C1]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  318.872392][    C1]  legacy_kthread_func+0x1b6/0x250
[  318.872414][    C1]  ? __pfx_legacy_kthread_func+0x10/0x10
[  318.872434][    C1]  ? __pfx_autoremove_wake_function+0x10/0x10
[  318.872455][    C1]  ? __kthread_parkme+0x7a/0x1f0
[  318.872477][    C1]  kthread+0x388/0x470
[  318.872499][    C1]  ? __pfx_legacy_kthread_func+0x10/0x10
[  318.872518][    C1]  ? __pfx_kthread+0x10/0x10
[  318.872539][    C1]  ret_from_fork+0x514/0xb70
[  318.872558][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  318.872576][    C1]  ? __switch_to+0xc79/0x1410
[  318.872602][    C1]  ? __pfx_kthread+0x10/0x10
[  318.872623][    C1]  ret_from_fork_asm+0x1a/0x30
[  318.872656][    C1]  </TASK>
[  318.874653][   T39] Kernel panic - not syncing: hung_task: blocked tasks
[  318.874675][   T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  318.874703][   T39] Tainted: [L]=SOFTLOCKUP
[  318.874710][   T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  318.874721][   T39] Call Trace:
[  318.874729][   T39]  <TASK>
[  318.874737][   T39]  vpanic+0x56c/0xa60
[  318.874771][   T39]  ? __pfx___schedule+0x10/0x10
[  318.874793][   T39]  ? __pfx_vpanic+0x10/0x10
[  318.874823][   T39]  panic+0xc5/0xd0
[  318.874846][   T39]  ? __pfx_panic+0x10/0x10
[  318.874869][   T39]  ? preempt_schedule_thunk+0x16/0x30
[  318.874903][   T39]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  318.874935][   T39]  watchdog+0x102c/0x1030
[  318.874964][   T39]  ? watchdog+0x1c9/0x1030
[  318.874992][   T39]  kthread+0x388/0x470
[  318.875018][   T39]  ? __pfx_watchdog+0x10/0x10
[  318.875038][   T39]  ? __pfx_kthread+0x10/0x10
[  318.875065][   T39]  ret_from_fork+0x514/0xb70
[  318.875088][   T39]  ? __pfx_ret_from_fork+0x10/0x10
[  318.875110][   T39]  ? __switch_to+0xc79/0x1410
[  318.875147][   T39]  ? __pfx_kthread+0x10/0x10
[  318.875173][   T39]  ret_from_fork_asm+0x1a/0x30
[  318.875214][   T39]  </TASK>
[  318.875553][   T39] Kernel Offset: disabled