last executing test programs:

47.325029862s ago: executing program 1 (id=913):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r4, 0xc4c85512, 0x0)
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$SO_TIMESTAMP(r5, 0x1, 0x3f, 0x0, 0x0)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCGWINSZ(r6, 0x5413, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0xf, '\x00', 0x0, @fallback=0xfb827ab984038ea1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
recvmmsg(r5, 0x0, 0x0, 0x0, 0x0)
r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0)
ioctl$PIO_UNISCRNMAP(r7, 0x5453, 0x0)
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000240)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYRES32=0x0], 0x81, 0x4ac, &(0x7f00000011c0)="$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")
r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c7401, 0x98)
write$FUSE_INIT(r8, 0x0, 0x0)

45.129760007s ago: executing program 1 (id=918):
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r0 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000940), &(0x7f0000000200), 0xa7c, r2}, 0x38)

40.654034038s ago: executing program 1 (id=928):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e20, @local}], 0x10)
sendmsg$inet_sctp(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000380)}], 0x1, 0x0, 0x0, 0x804c040}, 0x1)
syz_emit_vhci(&(0x7f00000036c0)=ANY=[@ANYBLOB="02c90010000c0005001704080007000d55f1"], 0x15)
socket$nl_netfilter(0x10, 0x3, 0xc)
dup(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r1)
socket(0x2a, 0x2, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000200)={0x6, 0x2, 0xe, 0x16c}, 0x10)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
r3 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfb, {0x60, 0x0, 0x0, r5, {0x0, 0xc}, {0x8, 0xa}, {0xffe0, 0xe}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_LIMIT={0x8, 0x2, 0x1}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x55}, 0x8010)
sendmsg$inet(r2, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)

38.75768294s ago: executing program 1 (id=937):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7)
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000180)='./file1\x00', 0x2000c98, &(0x7f00000003c0), 0x2, 0x55ae, &(0x7f0000005600)="$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")
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000009)
ioprio_set$pid(0x2, 0x0, 0x0)
sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000024d00)={0x0, 0x0, &(0x7f0000024cc0)={&(0x7f0000006dc0)=@newchain={0x34, 0x64, 0x300, 0x70bd2e, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0x5, 0x10}, {0xf, 0x2}}, [@f_rsvp={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x1)
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
epoll_create1(0x80000)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x50032, 0xffffffffffffffff, 0x0)
r1 = signalfd4(r0, &(0x7f00000000c0)={[0x4452]}, 0x8, 0x800)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
fsmount(r1, 0x1, 0x1)
io_setup(0x8, &(0x7f00000001c0))
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x1, 0x0)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x8000000000000000, 0x7d, 0x7, 0x8000, 0x4, 0x1}, 0x0, &(0x7f0000000040)={0x3ff, 0x3222, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000004, 0x9}, 0x0, 0x0)
ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f00000000c0)={0xf0f041, 0x8000})
unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0)

33.207451043s ago: executing program 1 (id=951):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r3, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x0, 0x4})
ioctl$DVB_DEMUX_DMX_ADD_PID(r3, 0x40026f33, &(0x7f0000000500)=0x7)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r3, 0x40146f2c, &(0x7f0000000000)={0x101, 0x0, 0x2, 0x1, 0x4})
inotify_init()
r4 = userfaultfd(0x80801)
timer_create(0xb33ac006f9a86d04, 0x0, &(0x7f00000001c0))
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
timer_settime(0x0, 0x1, 0x0, 0x0)
r5 = socket(0x2b, 0x1, 0x1)
setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x2, 0x100, 0x10, 0x0, 0xffffffffffffffff, 0xc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x3, 0x8}, 0x50)

28.678395774s ago: executing program 1 (id=960):
r0 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0)
r1 = syz_open_dev$vbi(&(0x7f0000000140), 0x0, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0)
syz_open_dev$sndmidi(0x0, 0x2, 0x141102)
openat$incfs(0xffffffffffffffff, 0x0, 0x22000, 0x89)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r5, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4)
socket$inet_mptcp(0x2, 0x1, 0x106)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
ioctl$VIDIOC_G_FREQUENCY(r1, 0xc02c5638, &(0x7f00000002c0)={0x0, 0x5, 0x9c})
r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec0000000109"], 0x0)
syz_usb_control_io$cdc_ecm(r6, 0x0, &(0x7f0000000b00)={0x1c, 0x0, 0x0, 0x0})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000040)={'ip6_vti0\x00', 0x0})

18.760158547s ago: executing program 2 (id=981):
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r0 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000940), &(0x7f0000000200), 0xa7c, r2}, 0x38)

17.278587854s ago: executing program 0 (id=986):
socket$nl_generic(0x10, 0x3, 0x10)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}], 0x700, 0x2, 0x0)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
openat$dir(0xffffff9c, &(0x7f0000000080)='./file0\x00', 0x40040, 0x0)

15.173376938s ago: executing program 0 (id=990):
timer_settime(0x0, 0x0, 0x0, 0x0)
r0 = semget(0x1, 0x4, 0x39c)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
semctl$IPC_RMID(r0, 0x0, 0x0)

13.503385137s ago: executing program 32 (id=960):
r0 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0)
r1 = syz_open_dev$vbi(&(0x7f0000000140), 0x0, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0)
syz_open_dev$sndmidi(0x0, 0x2, 0x141102)
openat$incfs(0xffffffffffffffff, 0x0, 0x22000, 0x89)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r5, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4)
socket$inet_mptcp(0x2, 0x1, 0x106)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
ioctl$VIDIOC_G_FREQUENCY(r1, 0xc02c5638, &(0x7f00000002c0)={0x0, 0x5, 0x9c})
r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec0000000109"], 0x0)
syz_usb_control_io$cdc_ecm(r6, 0x0, &(0x7f0000000b00)={0x1c, 0x0, 0x0, 0x0})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000040)={'ip6_vti0\x00', 0x0})

12.893997394s ago: executing program 2 (id=996):
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
r0 = syz_open_dev$cec(&(0x7f0000000340), 0x0, 0x0)
openat$vicodec0(0xffffff9c, 0x0, 0x2, 0x0)
r1 = epoll_create1(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0)
bind$alg(r3, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x58)
openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x4e2080, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0xc000000b})
signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff9]}, 0x8, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
ioctl$CEC_DQEVENT(r0, 0xc0506107, 0x0)
ioctl$CEC_DQEVENT(r0, 0xc0506107, 0x0)
ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x3, 0xa, 0x0, "fbda6b21f1d747979779531871c838f51ef5dfaee256e99c476c937d00", 0x43353039})
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2041, 0x0)

11.552457869s ago: executing program 0 (id=997):
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xb, 0x5, 0xc, 0x80000000, 0x1}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0)
syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x44, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRESHEX, @ANYBLOB=',namecse=1,uid=\x00', @ANYRESHEX=0x0, @ANYRES32], 0x1, 0x1545, &(0x7f0000001a00)="$eJzs3AucTVX7OPDnWWvtMSROk1yGtdazOcllmSTJJUkuSZIkSW4JSZO8kpAYQpKGJCSXIYkhJJeJSeN+v18SkqRJkpDckvX/TPFXb97f+77/t19+/988389nf2Y9Z+9n7Wef55w5e2/mfNt1aK0mtas3IiL4j+CvP5IAIBYABgJAXgAIAKB8XPm4rPU5JSb9Zzthf64HU690BexK4v5nb9z/7I37n71x/7M37n/2xv3P3rj/2Rv3n7HsbNO0Qtfwkn2XP/v+fyzf////CH/+/y+SWWbsl2vKXNcNIOZfTeH+Z2/c//+1gn9lI+5/9pTzwk/uf3YVe6ULYH+lPpd/mN//2UGOf7iG+5+9cf8Zy86u9P3nv3KJuczxQuR/2HNw5MK12V+0vyv9+mOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxlj2c9pcoALg4vtJ1McYYY4wxxhhj7M/jc1zpChhjjDHGGGOMMfbfD0GABAUBxEAOiIWckAsEAFwNeSAvROAaiINrIR9cB/mhABSEQhAPhaEIaDBggSCEolAMonA9FIcboASUhFJQGhyUgQS4EcrCTVAObobycAtUgFuhIlSCylAFboOqcDtUgzugOtwJNaAm1ILacBfUgbuhLtwD9eBeqA/3IcD90BAegEbwIDSGh6AJPAxN4RFoBs2hBbSEVv91PjS4bP7z0BNegF7QG5KgD/SFF6Ef9IcB8BIMhJdhELwCg+FVSIYhMBReg2HwOgyHN2AEjIRR8CaMhrdgDIyFcTAeUmACTIS3YRK8A5PhXZgCUyEVpsF0eA9mwEyYBe/DbPgA5sBcmAfzIQ0+hAWwENLhI1gEH0MGLIYlsBSWwXJYASthFayGNbAW1sF62AAbYRNshi2wFbbBdtgBn8BO+BR2wW7YA5/BXvj838w/9Xf53RAQUKBAhQpjMAZjMRZzYS7MjbkxD+bBCEYwDuMwH+bD/JgfC2JBjMd4LIJF0KBBQsKiWBSjGMXiWBxLYAkshaXQocMETMCyeBOWw3JYHstjBayAFbESVsIqWAWrYlWshtWwOlbHGlgDa2EtvAvvwj5YF+tiPayH9bH+xdtT2AgbYWNsjE2wCTbFptgMm2ELbIGtsBW2xtbYBttgO2yH7bE9dsAOmIiJ2BE7YifshJ2xM3bBLtgVu2I37I7dM5/PAfgCvoC9sYbog32xL/bD5BwD8CV8CV/GQfgKvoKvYjIOwaH4Gr6Gr+NwPIkjcCSOwlFYVbyFY3AskhiPKZiCE3EiTsJJmFXouzgVU3EaTsfpOANn4kx8H2fjB/gBzsW5OB/TMA0X4EJMx3RchKcwAxfjElyKy3A5LsOVuApX4hpci2twPa7HjbgRN+Nm3IpbcTtux09QAeCnuBt3YzLuxb24D/fhftyPB/AAZmImHsSDeAgP4WE8jEfwCB7FY3gcj+EJPIEn8RSextN4Fs/iOXw2/uvGn5RcnQwiixJKxIgYEStiRS6RS+QWuUUekUdERETEiTiRT+QT+UV+UVAUFPEiXhQRRYQRRpAIYwBAREVUFBfFRQlRQpQSpYQTTiSIBFFWlBXlRDlRXtwiKohbRUVRSbR1VUQVUVW0c9XEHaK6qC5qiJqilqgtaos6oo6oK+qKeqKeqC/qiwbiftFQ9MEB+KDI6kwTMQSbiqHYTDQX8sJvsNZiOLYRbUU78bgYiSOwg2jtEsVToqMYg53E38RYfEZ0EeOxq3hOdBPdRQ/xvOgp2rheoreYjH1EXzEV+4n+YoB4SczAmuJ9nJ2zlnhVJIshYqh4TczH18Vw8YYYIUaKUeJNMVq8JcaIsWKcGC9SxAQxUbwtJol3xGTxrpgipopUMU1MF++JGWKmmCXeF7PFB2KOmCvmifkiTXwoFoiFIl18JBaJj0WGWCyWiKVimVguVoiVYpVYLdaItWKdWC82iI1ik9gstoitYpvYLnaIT8RO8anYJXaLPeIzsVd8LvaJL8R+8aU4IL4SmeJrcVB8Iw6Jb8Vh8Z04Ir4XR8UxcVz8IE6IH8VJcUqcFmfEWfGTOCd+FueFFyBRCimlkoGMkTlkrMwpc8mrZG4ZXHh2r5Fx8lqZT14n88sCsqAsJONlYVlEammklSRDWVQWk1F5vSwub5AlZElZSpaWTpaRCfJGWVbeJMvJm2V5eYusIG+VFWUlWVlWkbfJqvJ2CZFf91FD1pS1ZG15l0yCu2VdeY+sJ++V9eV9soG8XzaUD8hG8kHZWD4km8iHZVP5iGwmm8sWsqVsJR+VreVjso1sK9vJx2V7+YTsIJ+UifIp2VH6Cy+RZ2QX+azsKp+T3WR32UP+LM9LL3vJ3hL6gOwrX5T9ZH85IBYA5MtykHxFDpavymQ5RA6Vr8lh8nU5XL4hR8iRcpR8U46Wb8kxcqwcJ8fLFDlBTpRvy0nyHTlZviunyKkyVU6TA+TAX2aaJeU/zX/7MvmDf9n7RrlJbpZb5Fa5TW6XO+QncqfcKXfJXXKP3CP3yr1yn9wn98v98oA8IDNlpjwoD8pD8pA8LA/LI/KIPCqPyTPyB3lC/ihPylPylDwjz8qz8tyF5wAUKqGkUipQMSqHilU5VS51lcqtrlZ5VF4VUdeoOHWtyqeuU/lVAVVQFVLxqrAqorQyyipSoSqqiqmouh4vvGBUKVVaOVVGJagb/518VVzdoEqokr/Lv1hf0j+or5VqpVqr1qqNaqPaqXaqvWqvOqgOKlElqo6qo+qkOqnOqrPqorqorqqr6qa6qR6qh+qpeqpeqpdKUkmqr3pR9VP91QD1khqoXlaD1CA1WA1WySpZDVVD1TA1TA1Xw9UINUKNUqPUaDVajVFj1Dg1TqWoFDVRTVST1CQ1WU1WU9QUlapS1XQ1Xc1QM9QsNUvNVrPVHDVHzVPzVJpKUwvUApWu0tUitUhlqMVqsVqqlqrlarlaqVaq1Wq1WqvWqvVqvcpQm9QmtUVtUdvUNrVD7VA71U61S+1Se9QetVftVfvUPrVf7VcH1AGVqTLVQXVQHVKH1GF1WB1RR9RRdVQdV8fVCXVCnVQn1Wl1Wp1VZ9U5dU6dV+ezTvsCEYhABSqICWKC2CA2yBXkCnIHuYM8QZ4gEkSCuCAuyBdcF+QPCgQFg0JBfFA4KBLowAQ2EBeaHg2uD4oHNwQlgpJBqaB04IIyQUJwY1A2uCkoF9wclA9uCSoEtwYVg0pB5aBKcFtQNbg9qBbcEVQP7gxqBDWDWkHt4K6gTnB3UDe4J6gX3BvUD+4LGgT3Bw2DB4JGwYNB4+ChoEnwcNA0eCRoFjQPWgQtg1Z/6vzenyzwmOule+sk3Uf31S/qfrq/HqBf0gP1y3qQfkUP1q/qZD1ED9Wv6WH6dT1cv6FH6JF6lH5Tj9Zv6TF6rB6nx+sUPUFP1G/rSfodPVm/q6foqTpVT9PT9Xt6hp6pZ+n39Wz9gZ6j5+p5er5O0x/qBXqhTtcf6UX6Y52hF+sleqleppfrFXqlXqVX6zV6rV6n1+sNeqPepDfrLXqr3qa36x36E71Tf6p36d16j/5M79Wf6336C71ff6kP6K90pv5aH9Tf6EP6W31Yf6eP6O/1UX1MH9c/6BP6R31Sn9Kn9Rl9Vv+kz+mf9Xnts07usz7ejTLKxJgYE2tiTS6Ty+Q2uU0ek8dETMTEmTiTz+Qz+U1+U9AUNPEm3hQxRUwWMmSKmqImaqKmuCluSpgSppQpZZxxJsEkmLKmrClnypnyprypYCqYiqaiqWwqm9vMbeZ2c7u5w9xh7jR3mpqmpqltaps6po6pa+qaeqaeqW/qmwamgWloGppGppFpbBqbJqaJaWqammammWlhWphWppVpbVqbNqaNaWfamfamvelgOphEk2g6mo6mk+lkOpvOpovpYrqarqab6WZ6mB6mp+lpepleJskkmb6mr+ln+pkBZoAZaAaaQWaQGWwGm2STbIaaoWaYGWaGm+FmhBlpRmWdqJq3zBgz1owz402KSTETzUQzyUwyk81kM8VMMakm1Uw3080MM8PMMrPMbDPbzDFzzDwzz6SZNLPALDDpJt0sMotMhskwS8wSs8wsMyvMCrPKrDJrzBqzDtaZDWaD2WQ2mS1mi9lmtpkdZofZaXaaXWaX2WP2mL1mr9ln9pn9Zr85YA6YTJNpDpqD5pA5ZA6bw+aIOWKOmqPmuDluTpgT5qQ5aU6b0+asKXDh89KbWJvT5rJX2dz2apvH5rV/Hxe0hWy8LWyLWG3z2wK/i421toQtaUvZ0tbZMjbB3viHuKKtZCvbKvY2W9Xebqv9Ia5j77Z17T22nr3X1rZ3/S6ub++zDezDtiEigG1uG9uWtol92Da1j9hmtrltYVva9vYJ28E+aRPtU7ajffoP8QK70K6yq+0au9busrvtaXvGHrLf2rP2J9vL9rYD7ct2kH3FDrav2mQ75A/xKPumHW3fsmPsWDvOjv9DPMVOtal2mp1u37Mz7Mw/xGn2Qzvbpts5dq6dZ+f/EmfVlG4/sovsxzbDBrDELrXL7HK7wq68WKvPa9fbDXaj3Wk/tVvsVrvNbrc7Lp4I2912j/3M7rWf24P2G7vffmkP2MM20379S5x1fIftd/aI/d4etcfscfuDPWF/VBezs479B/uzPW+9BUICkqQooBjKQbGUk3LRVZSbrqY8lJcidA3F0bWUj66j/FSAClIhiqfCVIQ0GbJEFFJRKkZRup4ulleKSpOjMpRAN1JZuonK0c1Unm6hCnQrVaRKVJmq0G1UlW6nanQHVac7qQbVpFpUm+6iOnQ31aV7qB7dS/XpPmpA91NDeoAa0YPUmB6iJvQwNaVHqBk1pxbUklrRo9SaHqM21Jba0ePUnp6gDvQkJdJT1JGepk70N+pMz1AXepa60nPUjbpTD3qeetIL1It6UxL1ob70IvWj/jSAXqKB9DINoldoML1KyTSEhtJrNIxep+H0Bo2gkTSK3qTR9BaNobE0jsZTCk2gifQ2TaJ3aDK9S1NoKqXSNJpO79EMmkmz6H2aTR/QHJpL82g+pdGHtIAWUjp9RIvoY8qgxbSEltIyWk4raCWtotW0htbSOlpPG2gjbaLNtIW20jbaTjvoE9pJn9Iu2k176DPaS5/TPvqC9tOXdIC+okz6mg7SN3SIvqXD9J3vTd/TUTpGx+kHOkE/0kk6RafpDJ2ln+gc/UznyROEGIpQhioMwpgwRxgb5gxzhVeFucOrwzxh3jASXhPGhdeG+cLrwvxhgbBgWCiMDwuHRUIdmtCGFIZh0bBYGA2vD4uHN4QlwpJhqbB06MIyYUJ4Y1g2vCksF94clg9vCSuEt4YVw0rhw/dWCW8Lq4a3h9XCO8Lq4Z1hjbBmWCusHd4V1gnvDuuG94T1wnvDcuF9YYPw/rBh+EDYKHwwbBw+FDYJHw6bho+EzcLmYYuwZdgqfDRsHT4Wtgnbhu3Cx8P24RNhh/DJMDF8KuwYPv3L+vsW/uP1SWGfsG/4Yvhi6P09cl50fjQt+mF0QXRhND36UXRR9ONoRnRxdEl0aXRZdHl0RXRldFV0dXRNdG10XXR9dEN0Y9T72jnAoRNOOuUCF+NyuFiX0+VyV7nc7mqXx+V1EXeNi3PXunzuOpffFXAFXSEX7wq7Ik4746wjF7qirpiLuutdcXeDK+FKulKutHOujEtwLV0r18q1do+5Nq6ta+ced4+7J9wT7kn3pHvKdXRPu07ub66ze8Z1cc+6Z91zrpvr7nq4511PNyHPr+/JJNfX9XX9XD83wA1wA91AN8gNcoPdYJfskt1QN9QNc8PccDfcjXAj3Cg3yo12o90YN8aNc+NciktxE91EN8lNcpPdZDfFTXGpLtVNd9PdDDfDVZ35617muDlunpvn0lyaW+CyzhnT3SK3yGW4DLfELXHL3DK3wq1wq9wqt8atcevcOrfBbXCb3Ca3xW1x29w2t8PtcDvdTrfL5/11UrfX7XP73H633x1wX7lM97U76L5xh9y37rD7zh1x37uj7pg77n5wJ9yP7qQ75U67M+6s+8mdcz+78867lMiEyMTI25FJkXcikyPvRqZEpkZSI9Mi0yPvRWZEZkZmRd6PzI58EJkTmRuZF5kfSYt8GFkQWRhJj3wUWRT5OJIRWRxZElkaWRZZHvG+8JbQF/XFfNRf74v7G3wJX9KX8qW982V8gr/Rl/U3+XL+Zl/e3+Ir+Ft9RV/JV/aP+Ga+uW/hW/pW/lHf2j/m2/i2vp1/3Lf3T/gO/kmf6J/yHf3TvpP/m+/sn/Fd/LO+q3/Od/PdfQ//vO/pX/C9fG+f5Pv4vv5F38/39wP8S36gf9kP8q/4wf5Vn+yH+KH+NT/Mv+6H+zf8CD/Sj4p504++eIkM432Kn+An+rf9JP+On+zf9VPOep/qp/np/j0/w8/0s/z7frb/wM/xc/08P9+n+Q/9Ar/Qp/uP/CL/sc/wiy/eVPYr/Eq/yq/2a/xav86v9xv8Rr/Jb/Zb/Fa/zW/3O/wnfqf/1O/yu/0e/5nf6z/3+/wXfr//0h/wX/lM/7U/6L/xh/y3/rD/zh/x3/uj/pg/7n/wJ/yP/qQ/5U/7M/6s/8mf8z/78/w3a4wxxhhj/5IJl4bi92t+vZ3f5zI54jcb9wWAq7cWyvzt+qwzynX5fx33F/HtIwDwVO+uD15catRI+r/bZkgIis0FuPgvQVli4FK8GNrBE5AIbaHsZevvL7qfpT/On5T0m/mjtwDk+k1OLFyKL83/BQAmXWb+Rx8ftaBCeDruv5h/LkCJYpdycsKleDG0++X+Slso9w/qL9D6n9Sf88sUgDa/yckNl+JL9SfAY/A0JP5uS8YYY4wxxhhj7Ff9ReXOF68/L/6Pz7+/vs26Po9Xl3JywKX4n12fM8YYY4wxxhhj7Mp7pnuPJx9NTGzb+d8fVPt/yvqXB03hv2tmHlx24D3AxUcUAPyHEwJkDeRfeRSb/5J9JV946/z9qmVnfAD/M1r5Zwyu8C8mxhhjjDHG2J/u0kn/7x9XV6ogxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGMsG/orvk6Mv02AMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcZYdvd/AgAA//8vzfwg")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x2)
lseek(0xffffffffffffffff, 0x10000000005, 0x0)
r4 = socket$inet6_sctp(0xa, 0x801, 0x84)
connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c)
sendto$inet6(r4, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c)
bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0)
ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000040)={0x2b, 0x13, 0x0, 0x1a, 0x0, 0xa9, 0x3, 0x6})
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', <r5=>0x0})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000800)={@ipv4={'\x00', '\xff\xff', @remote}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0, 0x2, 0x6, 0x0, 0x100, 0xd17, 0x100107, r5})

11.400629131s ago: executing program 2 (id=998):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r3, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x0, 0x4})
ioctl$DVB_DEMUX_DMX_ADD_PID(r3, 0x40026f33, &(0x7f0000000500)=0x7)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r3, 0x40146f2c, &(0x7f0000000000)={0x101, 0x0, 0x2, 0x1, 0x4})
inotify_init()
r4 = userfaultfd(0x80801)
timer_create(0xb33ac006f9a86d04, 0x0, &(0x7f00000001c0))
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
r5 = socket(0x2b, 0x1, 0x1)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c)

9.347877954s ago: executing program 3 (id=1002):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x3, 0x10980901, 0x1})
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r3, &(0x7f0000000cc0)=@in6={0x21, 0x2800, 0x2, 0x1c, {0xa, 0x1b59, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x4}}, 0x24)

8.161413747s ago: executing program 3 (id=1005):
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYRES16, @ANYBLOB="d81058c357d34b1e1b334deb6597aa756f36b6c8d8bed0ad6709442e674aecd3303d61370cba4bbf296b2a55aad551c35f8de560402a9aacd150974d703b97208852b0c2eca74757d331895cad7f2f93e063ac5502265b1e91479406e7e6382f9b2038995985fa956a2454a469428f6ee839584438795250f5df8e9f85a6185174366a2a14e1156340580a35b0e726531ce8156ffe7aa8c28e5c233ce263ce7a4644efb8bdffd47c6875f319775b3bc36edf54058cc29cbdf0f2cc6689fcf3030cdbfd", @ANYRES64, @ANYRES8, @ANYRESOCT, @ANYRES32, @ANYRESHEX, @ANYRESDEC], 0x1, 0x171, &(0x7f0000000580)="$eJzs281O4mAUxvGnwBSG+WKGmVkYFyYudCPlI5K400shUAmxqBE3EBd6BV6DV+XWC9CFO1diaFq/KG2ikRfh/9vwlicnHBannJBUABbWtlZkyZI9uljOFc6LlumWAEzJMHi9HwJYPOk70x0AMONmR7qSdH170lTaHtsPRvlpmKey4/mZtJQJciunr6/3iwtpLay38pH1+cf8W2S+vhp+/nf90E/9UkG/9UfFIG8F9Tn9f8cmBADA4rBUen55GZGX4upT2u14bnli/sXPKxNz28+rCXltYp7181LzwGvFtQkgQkqx4504/+mE+c8kzD8Ac3r9wV7D89wjDhzm/GDPRhszdci8uAOE/96N3jF8YwLw4Zzj7qHT6w82Ot1G2227+9Vyeau+WavUq46/2Tvx+z2Az+vp1990JwAAAAAAAAAAAAAA4K3+6p/pFgAAAABMyTSeNDL9HQEAAAAAAAAAAAAAAAAAmDcPAQAA//9W9x5W")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100088}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x0)
recvmmsg(r3, &(0x7f0000007700), 0x318, 0xfc0, 0x0)

8.004793229s ago: executing program 4 (id=1006):
timer_settime(0x0, 0x0, 0x0, 0x0)
r0 = semget(0x1, 0x4, 0x39c)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
semctl$IPC_RMID(r0, 0x0, 0x0)

7.08978394s ago: executing program 3 (id=1007):
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
r0 = syz_open_dev$cec(&(0x7f0000000340), 0x0, 0x0)
openat$vicodec0(0xffffff9c, 0x0, 0x2, 0x0)
r1 = epoll_create1(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0)
bind$alg(r3, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x58)
openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x4e2080, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0xc000000b})
signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff9]}, 0x8, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
ioctl$CEC_DQEVENT(r0, 0xc0506107, 0x0)
ioctl$CEC_DQEVENT(r0, 0xc0506107, 0x0)
ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x3, 0xa, 0x0, "fbda6b21f1d747979779531871c838f51ef5dfaee256e99c476c937d00", 0x43353039})
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2041, 0x0)

6.289923329s ago: executing program 2 (id=1008):
syz_mount_image$squashfs(&(0x7f0000000940), &(0x7f0000000640)='./file0\x00', 0x10090c6, &(0x7f0000000980)=ANY=[@ANYBLOB="00bc7811e943bbb3bc31a70c81525069e4320000000000f11fac5b600346a3cf2dc67c5bf96eefd90802c528f84db5e3fc53e166dfc62a0d50ae803645e5d16182a2681f3849384200268bfa5c4991d8ef3c2679ce26a969c0d9046fc4e1ca6999c39077bd2c8cd6cab448c9c880591bb4e20c350915203da8e126912d9df6847dee13e1c99fe1999a7b66331fd2447fc60d6e06e2ce393943ae07f22346d6901708f493c5ec64ff21318445692e7c4cbd1c3360"], 0x9, 0x1a1, &(0x7f00000001c0)="$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")
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x400000, 0x0, 0xfffffeb6, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
pipe(0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="130000000800000008"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000a80)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b70000000000000095"], &(0x7f0000001080)='syzkaller\x00'}, 0x94)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r4, &(0x7f0000000180), 0x0}, 0x20)

5.448024469s ago: executing program 4 (id=1009):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x3d6d9000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfff}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x0, 0x7fff8000}]})
close_range(r3, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, 0x0, 0x0)
recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)

4.578396648s ago: executing program 2 (id=1010):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7)
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000180)='./file1\x00', 0x2000c98, &(0x7f00000003c0), 0x2, 0x55ae, &(0x7f0000005600)="$eJzs3X9snHUdB/DnruvaFdeWMOuArGwDJFtEOjdNCCR2bNNpYTnphE3I+gNH0DmtY8NVCCtinIERijWMwQoLbn9MEYqucyiJBewqul8IJtNFBbPFNWOkOBExYTG9u+d299zaHhMpwuu1tM/zvc/z/d73njx/3PvW73MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABEHwx+N3TL/t3roJ26+ru++8a85e+2D3kuMX3rq1avND20v2dTz31aNVq1qPLF1w0/2JpkfW93d3BkEs2S+W7t9w2fwrr69vuKI0HLDxc6ltZeVQT5nq+mKqMTbnwcF+uT9NQRAURwYoSm/npXfiOQNkdlfkDzisayf1tE4dP69x28qujc8uu3xL/ktnUOloT2C0pK+rgyeupdrk73jkiEw769KL5Vyiqf7RC+4deREAwFtSk0huMm9H029xM+22aD3Sro202yPt8B1Ce3bjVKTGHTvUPCdH66M0z9pUVCgZcp6Revr8Z9qJaP9IOxI13sI8cw9NR5rSoebZEqmP1jwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3k0uuH5m/d49D7/8ldbf/u7h17/16sePrGq8ZaC7/qJ1ix/v2PG9vx2tWtV6ZOmCm+5PND2yvr+7Mwgqk/1iqe6xZ6ri8ZkDddseu6e3puFDC9cUpccNt2OyDg72hzsXVwRBc1blYDhsf3kQJHILyWawIb/wpeTOZ8ICAAAA7yVnJn/HM+1UHCzOaceSaTKW/BdKhcVrJ/W0Th0/r3Hbyq6Nzy67fMupj5cYYrzak46XaVee+IllBeMw/kbHO1EPD12RN87woiNG8/zpx/qnNdfdUHrl7gsWzphdv+XS4CfTD3csX3TfhBfHL9nXXpOX/yuHz//hmZP/AQAA+G/I/9FxhjdS/m+uqZh0cOp3ix67rur44fkP/Lyz7/kn4w8VD3Q//dLYcbf9cnVe/p+c85R5+T+ccZj/48Gp5X8AAAB4N/tf5//avHGGN1L+/8X+zZ//98pvTDk84187Xnj69xdvnVI+/7WyGTe8+cSCVxp2tf0pL//XFJb/x2RPO3xwVzjhZRVBUFP4SQUAAAByhP/vfuKjhTCvpz45iOb1y+4qe3LXG+tvjJ/V8o8zFvfPqv7i7tVf37ApNrChc92O5XNX5OX/2sLyf/E783IBAACAAvxm+y13V395ydYtew7N2XFnYvPYS+a+uuennVf1vXwsUfT8zX15+T9RWP4vGZ2XAwAAAJzEU+MmPnfo0UNfm7177YS9q9rmPD5t3+qFD/xz9t+veOnPxzddWJ6X/xsLy/9l6W165UOq087wrxA6KoKgdHCnJVXoC9o/mSkAAAAAb5Mwpzc1revduX7MrNfOPvzDNSuW/2rvpd++a2P1zQd+XXX7ucf2996Yl/9bhr//f3ing3D9f879//LW/2cVUnf9u8SNAQAAAHg/yl/PH94eP/XNBUN9/36h6/8/euaBko7m8ysnx7dVz3rig31Xra1+fVHHRZ/YfusbH46V//VTefm/rbD8X5S9fTu//w8AAABOwf/b9/8tzhtneCPd/79v3DPnrPnsPT+o/WbZU+e+eXfzd9oPTj9v87QzPlJ0fvecmX/4fl7+by8s/4fb07JfXk94fm6vCIKJgzvpuwluDae7LFLoKs4qpE58pEd92CNd6CrJKiS1RHp8rCIIpgzutEUKp4eF9khhoDxd2BQp7A0L6eshU3g0UugJr7R7y9PTjRZ+FhbSCyy6whUUp2WWRER6HBuqx2DhpD0OZJ4cAADgfSUMz+ksW5zbDKJRtis20gFlIx0QH+mAopEOGBM5IHrgUI8HjbmF8PEfz+1e+so1D9b1Xt1w9KzZe5bc0faBnkW9O7/wo55z/nL1Cws/nZf/NxWW/8NTMTa1GWr9fxCu/09/r2Fm/X9jWKiMFLrCQiJ6x4BE+BypsHtn+ByViXSPgYmZAgAAALynhZ8LFI3yPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/sHfvcVJVd4LATzf9oJum6YgBY4ygRkR3aZomGEQcUXRXo4tNJKtjhtAIjXZoAwq4YsyKr3GV6GLUmBjZwY+jJg6r+CDqRIXoiElGJfE5Kz4HnciqS9BR45gs++m+dYqqW112IaC0+/3+0XWqfud569F17r11LgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/P/hsiX3Nrw58H9965ffW/f697409TdTD9m8y19uqHt3yDlPbT5ocN0tbw1asPCNtklnXtsyffk1G1YuDaGlq1xZUrzsoUHl5aP/cMxdt13xcNO0wVPOrcrUm4mHfp1/yjN3Loytvto/hLvLQqhIB0bUJYHKzP26WN8edSF8LmwJZEu01SYl0g2Hh2tCWBa2BLJV3VsTQl1OYMoTD666rDNxVU0I+4YQqtNtvFCdtFGTDgyrSgK16cCciiTw/uZENnBPeRKArVHV3YPxzZB90a9oyc/Q0H1lRV5/lR+3czuZ9PD6xERD8XxvHbaDO5Wj4Lls2aanrduXBttdwdtjtXdbL3i3FWznJZ623C9SmW8om7eEqkP5zLZZ0xd0zI+PlIfGxj7FatpBz/O6TefM2Jp0r3kdxg40bJfX4QO1k+ove3viwStP/uPp+85fO3Vbu/lczibNTe9o1SHzmus1z2M04dP7PNm8LYW3r539aSv4ljTUl64QwvF/+nzZM3Ne2n3jB6+eOPH2Fy6+etrCa6ZMfHbQL8b+47W73D3t8oL5f8NHz//jyznelufljq1+WJ/MzeMjdTGxsT6ZmwMAAECv0Rv2mn519KsvnfrQ3YteXH5cxXfH/eqk3eorzv5+x/G7rhz/xUuvbH98l4L5/9DSjv/HQ/51uaNdHcKErsQFA0LYrevxJPCz2J2TB4SwV1eqJT9wWCqwOoQvdCX2z1aVKtE3lhiaCvy+PhOYkAqsiYGWVODGGFiSClwYAytSgRkxsDoVODwGQnv+OA6oz4yj5EBNDLQmG3FFPAvhnfrYWmpbrctWBQAAsJ1kZoeV+XdzznXY1gxxermipqcM8QzsohmqUzWkZ7DZaVXRGip6qqG8pxqy41700cMvqLmsp5oLTsMoy8/w4ZDvlA+YuPeP7rpxxE3NL0787rtjj//Kn998d/X+//Tf7zln/nUHFMz/mz56/l/dTUfKCo7/hzC562/MXZ6JdGTjrS15GQAAAIBtcNVjS5+84YCj/s99L99355euvaF89dVf/7+vbLxg71HHDS/r+3ffXlEw/59Q2vn/cZ9In5zM4dG4G2L2gBCa8gNJtQcXBpKj3v0yAQAAAOgNssfjs8fC2zO3ySna6fl0Yf6WrcwfD/xP6Db/5Zv++tkvX/vkiQuH7bPhiv925gdlnx/7u12OXTvy8bf2HPYPDX0Lz/9vKe38/9r826QTa2IvrhwQQt+cwCOxl52BLkNj4OVD8wOZ8a+JG2BxrCpzYkK2qsWxRGsMNKUCy4qV+G22xG75gcyTlW38guw42jMlcgIAAADwiYu7A+Jx+Xj+/z2TD/jS/oNeGvPinvcufG3C0hNOrf3hPrfs+vqAjkljDpxwyBHPFMz/W7fu/P+ueXDB6f0d/UIYWRFCn/QPAx6tTRYGjIG6skzi/tqkrj7pqs6rDWF858DSVb2SWf+/Ir3G4BM1SVUxsNveP900rDNxQ00II3MDz3zz+jGdifmpQLbxb9SEMKRztOnGV/ZNGq9MN35N3xD2zAlkqzq5bwidjVWlq3qwOnMdg3RVt1WHMDAnkK3qwOoQFgYAeqn4r3Rm7oPzFp49e3pHR9sZOzAR9+HXhFntHW2NM+Z0zKwu0qeZqT7nLWN0XuGYSr3yzfOZJYqmDrl9eCnp7O8Em3LbyuzHLzhxMHM/fheq7Bpnc2Xe3dHpIQ/fp7CJkPNNqtiQy3fwkGtzK9nyJBbUH/NXhX6h74J5bWc0njV9/vwzRiV/S83enPyNh5mSbTUqva1qu+tbCS+PoqtlpXzcbbVfbiUj5582d+S8hWePaD9t+iltp7R9p3nsqObmMV8dO6Z5ZOeompK/PQx1v+6qTg118/Uljms7DnX3ipxKPolPDQkJid6WmL6k7PwJ0359/7f2WHPaWSft8fd7zBxx0l9d/pu5JzYeMvlX1//l2oL5/9yPnv/HT534yZ9Zn6HY8f+GeJg/eXzLYf7WGFhW6vH/hmJH87MnBgxNBRbFwCKH+QEAAPhsiLsj497MuFf6urp/uvvImTMOef+XJ0y5+m/Hjjv1rPX7Nlx89bFL/sP6d5asOuLtgvn/otJ+/7+d1v/PLl3/tWLL/O8fSzQVW/8/vcx/dv3/RcXW/08v859d/3/Zp7D+/4JsILVJ3rH+PwAA8Fnwya3/3+Py/ukLBBRk6HF5//QFAgoy9LiMf6kXCNjq9f/ndPxF7aDL54w7dMTcHz+yau8lA2/70vMTf73P0oNG3LvylvdG3Vow/19S2vzfwv0AAACw83jol32/ffG7w+5/6pH3jyy79Lcbbzr+r9oOOOQPA5tPmXx0zfdv+reC+f+y0ub/n/z6f6HY+f9DiwVaii0MaP0/AAAAeqli6//dPPDloavnj7jxsZ+/ectLrb+YOf61f7fkB1+ZPqzp5jXrftMwY33B/H9FafP/eNpFeV7u2JsP65M17UJ6TbuN9dmfDAAAAEDvUB4aGytLzJu3MuphH7/NdZmlQD8qnevp+watWlD+0FVl1Rt/cMm0QxrPPfbMOUdetP77tU/+pHZqY/UZBfP/1aXN//N+l/FA7aT6y96eePCHK0/+4+n7zl87dcvxfwAAAGDHKXW/BAAAAAAAAAAAAAAA8Ol7qnXpQR+MOvqNmXuN+tM3jn3hB4u/+M1H/ubaP5/588Pv26t987ApBb//D5O7yhX7/X+87l/8fcGuebljqz2v/5e5P+WYWxd2LVn4aH0I++QGZp8/+3Mhc23+/XIDq6buP7gzcX66xH0vHv5aZ2JaOnDUiF3e60yMTwVa4yKJX0gH4lUV3+ufCsTlFZ9MB+L2WJEOVGUCl/RPxlGW3lYb6pJtVZbeVs/VhTAgJ5DdVnfXJW2UpQd4VSqQHeDp6UAc4KRMoDzdq1v7Jb2KgbpY9G/6Jb0CAGCnFb8FVoZZ7R1tTfErfLzdvSL/Nspbsuy8wmrLSmz++czSZFOH3D68lHSf9HfRLdcarwzVnUMYVfB1NTdLWdcot08tPWy6XYsMuafV3sqLlEvb2k1XVXxENcmIGmfM6ZhZ2ePAR/ecpbmixyyjCiY7uVnKuzZpCbWU0JcSRlTitimhy/F+eWhs7JPKNS4GG0Kenl4Rpf5eP3edv2Kvgtw8f1tz7aV9Bvd5/9/GX/TQgwMqO06d3HbR7o/988BRM3/8wwdbr/l9wfy/obT5f3XuuN7LXAxgUbyy3sEDQmgtcUQAAADw2fc/z11+x4lz1myYtbri2d/9bnb5cSdWbj7nrnPOvui5+xcfdcm/v3lb4yvKntp04hubzvrrN37ylesePuulw2ecddekdYesb6u+8bt/sfzUIQXz/6Glzf/jHqzMoeBkb8fqeP3/CwaE0HVp/YYk8LM43JMHhLBXV6ollkguqP+1WKIpCfws7jDZP5Zobcmvqm8MrEgFfl+fCaxOBdbEQGYvxU9DZlfOFfUhjOlKTc4vMTeWaEgFjouBoalAYww0pQL9Y2BCKvBm/0ygJRX4xxgI7fnb6s7+mW0FAACwNTLzrMr8uyE9z1tR0VOGsp4y1PaUobynDNU9ZSg2inj/jpihMnXySllOpsp0rTWpWgoyxIvhb3W/CjKE3+bnTBcsaDqef5A936AsP8O4H97RetDX5v1408U/evzIAy88csmVb196dL/BVz77v9vP7dd/U23B/L+ptPl/bf5t0vqaOP/fcv2/JPBI7N6V8dTxoTHw8qH5gcyOgTVxsrs4W1VLpkRm0r44lpgQA0NTgbkxMCEVaJ2cCSwbnB/IzLSzjV+Qbbw9UyInAAAAAJ+4uIMg7qaJ8/+V48I7exz5fvPuVw6cO+7xR847YnrNrtU1/zx+7dLxl1Y/tF/fgvn/hNLm/7G9frmNXRh782r/EO4u29KbbGBEXRKI+zHq4s/j96gL4XM5OziyJdpqkxJVqYbDwzXJL9Sr0lXdW5OsMRDvT3niwVWXdSauqglh35y9L9k2XqhO2qhJB4ZVJYHadGBORRKIe36ygXvKkwBss+xewfiCypzqktXQfbkir7/PyjVB08Mr2AfaTb7ufnO1o1SnH8jsU83auqetoDp2iIK3x2rvtt74bmvwbsv9IpX5hrJ5S6g6lM9smzV9Qcf8+EjuL1kL7KDnOfdXqqWkt8PrcNHH723PqtMdaEp9fDR1X67712FZrO6B2kn1l7098eCVJ//x9H3nr51acjeKiD8UPvjWuQc8l7N5d7TqkHnN9brPkxafJ73x38BQT1sIYfkFs5584l/ef75iffN/OXDs8tvefGz5Tw56YNaIL2y45Msb33r3qIL5f0tp8/+K1G2XD+LGnDcghOE5G/fRuPknDkg+B3MCyafkwMJAcsh9fX3RT04AAADY3rK7O7L7C9ozt8kJ4el5cmH+lq3MH/dXTOg2f6n9HjjmH7536FWvf+Pr63e//NGlT637T2++csS0Qx/Y9PSKla83H/v5pwvm/60fPf/vm+qm4/+O/7ODOP7frZ19V3Tf9AOLtmlXdEF17BCO/3drZ3+3Of7fLcf/Hf/vjuP/PXD8v1s7+9NW8C1pri9dIYTWATfc/ova6cP7XXHOt2as/fnT7zSNe6Hu3KPv/B+HLw7XnLfqzwXz/7mlzf+t/9f9on3Z9f9ai63/N7fY+n+LrP8HAADsUEUWmkvP8wpW7yvIkF69ryBDjwsE9rjEoPX/tnr9v9qTzj7plfq39rpm4u3/+c7pFz5/0onP7tvn+RNuP+GmkVcPf+nLGwrm/4tKm//Hl0O/3NZ7y/p/QycXqWpJDMy1MCAAAAA7o2I7CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPh0rXhw8Rc3L97noJue/fxNh//rsjWz9v7VAZtHjzm5cfjigWVX/t2/vDVowcI32iadeW3L9OXXbFi5NIT2rnJlSfGyhwaVl4/+wzF33XbFw03TBk85tzpTb2Xm9ot5uWOrH9aHsCznkbqY2FjfeWdLYMoxty6s6Ew8Wh/CPrmB2efP/lxn4sb6EPbLDayauv/gzsT56RL3vXj4a52JaenAUSN2ea8zMT4TKEt397r+SXfL0t29rH8IA3IC2e5+u39+Vdk2/mMmUJ5u4+a6pI0YqItFf1SXtBEDHbFEe98QRlaE0Cdd1a+rk6r6pKv6++qkqj7pqv5rdQjjQwgV6aperEqqqkiPfG1VUlUM7Lb3TzcN60wsqwphZG7gmW9eP6YzcXoqkG3861UhDOl8yaQbv6Myabwy3fhVlSHsGUKoSpf414qkRFW6xCsVIQzMCWQbP7UihIWBz4T44TMz98F5C8+ePb2jo+2MHZioyrRVE2a1d7Q1zpjTMbM61adiynLSm8/7+GN/ftM5Mzpvpw65fXgp6YpMucquLjdX5t0dvbP3PvarNreSLc9HQf0xf1XoF/oumNd2RuNZ0+fPP2NU8rfU7M3J3z6ZaLKtRvWWbbVfbiUj5582d+S8hWePaD9t+iltp7R9p3nsqObmMV8dO6Z5ZOeompK/22Oo13/yQ929IqeST+IDQEJCorclyvM+3Zp29g/ygi/6WzpaGaq7PqALphW5Wcq6Rrk9Bn3Yxxzxx/me0uOIRhVMHAqyNPecZXTBZGJLlpokS9f3uoLJYW5N5V2bNN4vD42NfYpth4b8u7mb961t2LzrMpuu1DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPD/2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsIOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBYAAAAAECYv3UYPRsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAlwIAAP//WKHPZA==")
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000009)
ioprio_set$pid(0x2, 0x0, 0x0)
sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000024d00)={0x0, 0x0, &(0x7f0000024cc0)={&(0x7f0000006dc0)=@newchain={0x34, 0x64, 0x300, 0x70bd2e, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0x5, 0x10}, {0xf, 0x2}}, [@f_rsvp={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x1)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
epoll_create1(0x80000)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x50032, 0xffffffffffffffff, 0x0)
r1 = signalfd4(r0, &(0x7f00000000c0)={[0x4452]}, 0x8, 0x800)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
fsmount(r1, 0x1, 0x1)
io_setup(0x8, &(0x7f00000001c0))
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x1, 0x0)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x8000000000000000, 0x7d, 0x7, 0x8000, 0x4, 0x1}, 0x0, &(0x7f0000000040)={0x3ff, 0x3222, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000004, 0x9}, 0x0, 0x0)
ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f00000000c0)={0xf0f041, 0x8000})
unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0)

4.542022928s ago: executing program 3 (id=1011):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, 0x0, 0x0)
setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c)

3.445891271s ago: executing program 0 (id=1012):
ioperm(0x2, 0x7ff, 0x8)
ioperm(0x9, 0x6, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6(0xa, 0x80001, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x0, 0x0)
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x6)
r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, 0x0)
unshare(0x4000280)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r5, 0x0, 0xf, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000440)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=@ipv6_newrule={0x24, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xfe, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008005}, 0x44050)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x22000402, &(0x7f00000003c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@noblock_validity}, {@noinit_itable}, {@discard}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@noquota}, {@sb={'sb', 0x3d, 0x7}}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x85, 0x4ef, &(0x7f0000000b00)="$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")

3.406717101s ago: executing program 3 (id=1013):
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2)
r0 = epoll_create1(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x4452]}, 0x8, 0x800)
r3 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0)
bind$alg(r3, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x58)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x249, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x4000002, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0xef8, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0x10000, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x4, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x3, 0x81, 0x3, 0x9d82, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8d0, 0x7fffffff, 0x100009, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0x8, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0xfffffffe, 0x9]}, 0x45c)
openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x4e2080, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0xc000000b})
signalfd4(r2, &(0x7f0000000140)={[0xfffffffffffffff9]}, 0x8, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
ioctl$CEC_DQEVENT(0xffffffffffffffff, 0xc0506107, 0x0)
ioctl$CEC_DQEVENT(0xffffffffffffffff, 0xc0506107, 0x0)
ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x3, 0xa, 0x0, "fbda6b21f1d747979779531871c838f51ef5dfaee256e99c476c937d00", 0x43353039})
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2041, 0x0)

1.82166962s ago: executing program 4 (id=1014):
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff})
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f0000000700)={0x0, [[0x9ef8, 0x100, 0x0, 0x8000], [0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x7, 0x4]], '\x00', [{0x36}, {0x3, 0xfffffffb}, {0x0, 0x5}, {0x0, 0x80000000}, {0x0, 0x0, 0x0, 0x1, 0x1}, {0x1, 0x5f}, {}, {0x0, 0x6}, {0x3, 0x3}, {0x0, 0xffffffff}, {0x0, 0x12}], '\x00', 0x1000})
madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf)
r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, 0x0, 0x0)
request_key(&(0x7f00000001c0)='dns_resolver\x00', 0x0, 0x0, 0x0)
ptrace$cont(0x1f, 0x0, 0xff, 0xd4)
syz_open_dev$sndctrl(0x0, 0x1, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
r3 = shmget$private(0x0, 0x3000, 0xd91bd4079aedf3f5, &(0x7f0000ffc000/0x3000)=nil)
shmctl$SHM_STAT(r3, 0xd, &(0x7f00000001c0)=""/56)
execveat(r0, &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000002c0), 0x400)
shmat(r3, &(0x7f00003c7000/0x1000)=nil, 0x2000)
socket$key(0xf, 0x3, 0x2)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)={0x24, r5, 0x5, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r5, 0x5, 0xfffffffe, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)

1.599197612s ago: executing program 0 (id=1015):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x3, 0x10980901, 0x1})
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r3, &(0x7f0000000cc0)=@in6={0x21, 0x2800, 0x2, 0x1c, {0xa, 0x1b59, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x4}}, 0x24)

1.338098145s ago: executing program 4 (id=1016):
set_mempolicy(0x3, &(0x7f0000000080)=0x2, 0x8)
socket(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7)
prlimit64(r0, 0x8, &(0x7f0000000100)={0x3, 0x6}, &(0x7f00000001c0))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
add_key$user(0x0, &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd)
keyctl$read(0xb, 0x0, 0x0, 0x0)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1)
r4 = creat(&(0x7f00000000c0)='./file0\x00', 0xc2)
ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000000)={'\x00', 0xc, 0x2, 0x803fd, 0x1, 0x800})
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendmmsg$inet(r3, 0x0, 0x0, 0xc054)
unshare(0x62040200)

1.066080578s ago: executing program 3 (id=1017):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e20, @local}], 0x10)
sendmsg$inet_sctp(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000380)}], 0x1, 0x0, 0x0, 0x804c040}, 0x1)
syz_emit_vhci(&(0x7f00000036c0)=ANY=[@ANYBLOB="02c90010000c0005001704080007000d55f1"], 0x15)
socket$nl_netfilter(0x10, 0x3, 0xc)
dup(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r1)
socket(0x2a, 0x2, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10)
setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
r3 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfb, {0x60, 0x0, 0x0, r5, {0x0, 0xc}, {0x8, 0xa}, {0xffe0, 0xe}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_LIMIT={0x8, 0x2, 0x1}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x55}, 0x8010)
sendmsg$inet(r2, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)

418.371066ms ago: executing program 0 (id=1018):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x7)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x8)
sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x5c}}, 0x40)
getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x3f)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x884)

256.586427ms ago: executing program 4 (id=1019):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c)
setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0)

214.092828ms ago: executing program 2 (id=1020):
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xd4f163e6ee09ede3, 0x4c033, 0xffffffffffffffff, 0x8000000)
mprotect(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1)

0s ago: executing program 4 (id=1021):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r3, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x0, 0x4})
ioctl$DVB_DEMUX_DMX_ADD_PID(r3, 0x40026f33, &(0x7f0000000500)=0x7)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r3, 0x40146f2c, &(0x7f0000000000)={0x101, 0x0, 0x2, 0x1, 0x4})
inotify_init()
r4 = userfaultfd(0x80801)
timer_create(0xb33ac006f9a86d04, 0x0, &(0x7f00000001c0))
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
timer_settime(0x0, 0x1, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x2, 0x100, 0x10, 0x0, 0xffffffffffffffff, 0xc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x3, 0x8}, 0x50)

kernel console output (not intermixed with test programs):

4][   T23] Bluetooth: hci2: command 0x0409 tx timeout
[   64.017651][   T23] Bluetooth: hci0: command 0x0409 tx timeout
[   64.039278][ T4200] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.046687][ T4200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.072868][ T4200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.083571][   T23] Bluetooth: hci3: command 0x0409 tx timeout
[   64.090830][    T7] Bluetooth: hci1: command 0x0409 tx timeout
[   64.170604][    T7] Bluetooth: hci4: command 0x0409 tx timeout
[   64.227073][ T4200] device hsr_slave_0 entered promiscuous mode
[   64.234290][ T4200] device hsr_slave_1 entered promiscuous mode
[   64.241467][ T4200] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   64.249056][ T4200] Cannot create hsr debugfs directory
[   64.384356][ T4188] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   64.399957][ T4188] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   64.417752][ T4188] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   64.438399][ T4188] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   64.454858][ T4189] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   64.475790][ T4189] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   64.492289][ T4189] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   64.518104][ T4189] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   64.573663][ T4193] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   64.612164][ T4193] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   64.621530][ T4193] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   64.641707][ T4194] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   64.658485][ T4193] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   64.684197][ T4194] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   64.695691][ T4194] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   64.714302][ T4194] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   64.755653][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.794407][ T4188] 8021q: adding VLAN 0 to HW filter on device team0
[   64.804021][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   64.814338][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   64.835073][ T4200] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   64.847584][ T4200] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   64.859353][ T4200] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   64.869484][ T4200] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   64.887232][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.902324][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   64.913557][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   64.923832][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.931310][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.942257][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   64.968548][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   64.978491][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   64.989781][  T154] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.996944][  T154] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.010604][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   65.018380][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   65.032574][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   65.046710][ T4189] 8021q: adding VLAN 0 to HW filter on device team0
[   65.066166][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   65.075906][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   65.086650][  T154] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.093787][  T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.102229][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   65.111327][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   65.152477][ T4188] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   65.163158][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   65.176462][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   65.186587][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   65.195394][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   65.205061][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   65.213801][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   65.222513][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   65.232642][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   65.241673][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   65.250121][  T155] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.257245][  T155] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.265697][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   65.274904][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   65.284136][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   65.299702][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   65.308118][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   65.316184][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   65.336835][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.359906][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   65.377034][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   65.410199][ T4194] 8021q: adding VLAN 0 to HW filter on device team0
[   65.431942][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   65.442476][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   65.452799][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   65.463664][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   65.472692][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   65.483395][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   65.492316][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   65.501106][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   65.509056][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   65.522582][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   65.555085][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   65.573438][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   65.589215][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.596413][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.626483][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.664718][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   65.679690][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   65.689441][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   65.699140][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.706297][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.716253][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   65.725965][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   65.735350][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   65.744941][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   65.756391][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   65.765647][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   65.775027][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   65.797639][ T4193] 8021q: adding VLAN 0 to HW filter on device team0
[   65.815201][ T4200] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.828193][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   65.838194][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   65.848292][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   65.857330][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   65.866355][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   65.876265][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   65.898447][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   65.914529][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   65.930124][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   65.947500][  T144] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.954681][  T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.964714][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   65.974234][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   65.983820][  T144] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.990942][  T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.008852][ T4200] 8021q: adding VLAN 0 to HW filter on device team0
[   66.025176][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   66.034211][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   66.042950][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   66.051510][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   66.059068][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   66.067422][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   66.090539][ T4231] Bluetooth: hci0: command 0x041b tx timeout
[   66.096911][ T4231] Bluetooth: hci2: command 0x041b tx timeout
[   66.119751][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.127564][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   66.137982][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   66.148304][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   66.157576][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   66.166172][ T4237] Bluetooth: hci1: command 0x041b tx timeout
[   66.173729][ T4237] Bluetooth: hci3: command 0x041b tx timeout
[   66.181377][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   66.191595][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   66.200127][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   66.209252][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   66.225823][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   66.237042][  T144] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.244186][  T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.252503][ T4231] Bluetooth: hci4: command 0x041b tx timeout
[   66.259997][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   66.268738][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   66.279231][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   66.288031][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   66.302714][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   66.314376][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   66.328747][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   66.340321][  T144] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.347476][  T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.377583][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.428622][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   66.437603][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   66.453947][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   66.466874][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   66.531923][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   66.547599][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   66.559573][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   66.577120][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   66.585982][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   66.595486][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   66.604794][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   66.613585][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   66.624338][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   66.655221][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   66.664526][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   66.672321][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   66.683258][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   66.692338][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   66.700727][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   66.711874][ T4200] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   66.734692][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.749630][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   66.758721][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   66.775267][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   66.788800][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   66.801360][ T4188] device veth0_vlan entered promiscuous mode
[   66.833082][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.845327][ T4188] device veth1_vlan entered promiscuous mode
[   66.858868][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   66.868062][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   66.876250][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   66.889829][ T4189] device veth0_vlan entered promiscuous mode
[   66.909482][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   66.918692][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   66.927503][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   66.937126][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   66.945586][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   66.969651][ T4189] device veth1_vlan entered promiscuous mode
[   66.994040][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   67.002538][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   67.011557][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   67.020867][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   67.036032][ T4188] device veth0_macvtap entered promiscuous mode
[   67.051549][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   67.061498][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   67.098369][ T4189] device veth0_macvtap entered promiscuous mode
[   67.111310][ T4189] device veth1_macvtap entered promiscuous mode
[   67.119089][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   67.127951][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   67.137120][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   67.146908][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   67.155504][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   67.164447][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   67.173875][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   67.182573][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   67.208836][ T4193] device veth0_vlan entered promiscuous mode
[   67.218711][ T4188] device veth1_macvtap entered promiscuous mode
[   67.227226][ T4194] device veth0_vlan entered promiscuous mode
[   67.235248][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   67.244531][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   67.253302][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   67.261442][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   67.269260][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   67.277084][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   67.286019][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   67.294588][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   67.309968][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   67.318475][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   67.334280][ T4200] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.348336][ T4194] device veth1_vlan entered promiscuous mode
[   67.382390][ T4193] device veth1_vlan entered promiscuous mode
[   67.401437][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.421688][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.434596][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.449428][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.457409][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   67.466502][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   67.476530][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   67.485176][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   67.494581][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   67.504312][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   67.513708][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   67.539344][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.552175][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.567556][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.581406][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.588843][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   67.601666][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   67.618510][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   67.635462][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   67.647094][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   67.659225][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   67.688331][ T4194] device veth0_macvtap entered promiscuous mode
[   67.698785][ T4188] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.709793][ T4188] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.718985][ T4188] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.728034][ T4188] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.745025][ T4189] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.760054][ T4189] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.774431][ T4189] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.789088][ T4189] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.835533][ T4194] device veth1_macvtap entered promiscuous mode
[   67.855364][ T4193] device veth0_macvtap entered promiscuous mode
[   67.885219][ T3029] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   67.894335][ T3029] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   67.903009][ T3029] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   67.912456][ T3029] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   67.934284][ T4193] device veth1_macvtap entered promiscuous mode
[   67.947623][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.958737][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.969766][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.980791][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.993066][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.002658][ T3029] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   68.014196][ T3029] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   68.022439][ T3029] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   68.031319][ T3029] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   68.084382][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.099887][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.110273][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.121142][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.132773][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.142083][ T3029] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   68.151519][ T3029] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   68.160872][ T3029] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   68.161469][ T4237] Bluetooth: hci2: command 0x040f tx timeout
[   68.174966][ T3029] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   68.186175][ T4237] Bluetooth: hci0: command 0x040f tx timeout
[   68.211653][ T4194] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.229652][ T4194] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.238570][ T4194] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.247766][ T4194] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.248015][   T23] Bluetooth: hci3: command 0x040f tx timeout
[   68.263199][   T23] Bluetooth: hci1: command 0x040f tx timeout
[   68.274407][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   68.285708][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.295782][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   68.306867][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.318126][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   68.328962][   T23] Bluetooth: hci4: command 0x040f tx timeout
[   68.335607][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.346974][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.378862][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   68.387905][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   68.409216][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.419999][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.430660][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.441448][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.451670][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.462555][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.474121][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.489526][ T3029] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   68.504211][ T3029] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   68.515576][ T3029] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.528655][ T3029] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.542335][ T4193] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.552504][ T4193] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.563634][ T4193] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.572929][ T4193] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.584759][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   68.590971][ T4240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.600762][ T4240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.609888][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   68.618801][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   68.627453][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   68.635458][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   68.646387][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   68.663345][ T4200] device veth0_vlan entered promiscuous mode
[   68.724333][ T4200] device veth1_vlan entered promiscuous mode
[   68.776219][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.786759][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.811082][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   68.821263][ T4240] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.829145][ T4240] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.861275][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   68.915806][ T4200] device veth0_macvtap entered promiscuous mode
[   68.933668][ T4240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.949324][ T4240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.950989][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   68.966097][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   68.977980][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   68.986110][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   69.013314][ T4200] device veth1_macvtap entered promiscuous mode
[   69.065997][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   69.076636][ T4240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.106181][ T4240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.112551][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.335889][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   69.348994][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.366731][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   69.378827][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.388746][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   69.399425][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.411528][ T4200] batman_adv: batadv0: Interface activated: batadv_slave_0
[   69.560608][ T4270] loop2: detected capacity change from 0 to 512
[   69.925820][ T4270] EXT4-fs warning (device loop2): dx_probe:833: inode #2: comm syz.2.3: Unrecognised inode hash code 4
[   70.180666][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   70.199303][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   70.217851][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   70.257596][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   70.279489][ T4270] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.3: Corrupt directory, running e2fsck is recommended
[   70.295896][ T4270] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117
[   70.304326][ T4270] EXT4-fs error (device loop2): ext4_iget_extra_inode:4573: inode #15: comm syz.2.3: corrupted in-inode xattr
[   70.317850][ T4270] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.3: couldn't read orphan inode 15 (err -117)
[   70.330111][ T4270] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000101,noblock_validity,noinit_itable,discard,auto_da_alloc,grpjquota=.noquota,sb=0x0000000000000007,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback.
[   70.376664][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.391064][ T3029] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.398934][ T3029] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.468564][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.481461][ T4231] Bluetooth: hci0: command 0x0419 tx timeout
[   70.488498][ T4231] Bluetooth: hci2: command 0x0419 tx timeout
[   70.495086][ T4231] Bluetooth: hci1: command 0x0419 tx timeout
[   70.501571][ T4231] Bluetooth: hci3: command 0x0419 tx timeout
[   70.507885][ T3161] Bluetooth: hci4: command 0x0419 tx timeout
[   70.515779][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.526375][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.536311][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.547123][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.557034][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.568481][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.590274][ T4200] batman_adv: batadv0: Interface activated: batadv_slave_1
[   70.634753][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   70.643688][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   70.654960][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   70.668600][ T4200] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.706204][ T4200] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.716493][ T4200] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.732364][ T4200] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.757825][ T4240] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.794896][ T4240] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.848741][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   71.615654][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[   71.623162][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[   71.690703][ T4240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.732967][ T4240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.748378][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   71.850429][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!!
[   71.870430][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!!
[   71.880403][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!!
[   71.890393][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!!
[   71.900385][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!!
[   71.910386][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!!
[   71.920380][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!!
[   71.930379][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!!
[   71.940375][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!!
[   71.950371][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!!
[   72.690551][ T4284] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.698443][ T4284] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.724850][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   73.407279][ T4304] loop1: detected capacity change from 0 to 8192
[   73.501592][ T4304] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal
[   73.520616][ T4304] REISERFS (device loop1): using ordered data mode
[   73.527412][ T4304] reiserfs: using flush barriers
[   73.558782][ T4304] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   73.577201][ T4304] REISERFS (device loop1): checking transaction log (loop1)
[   73.593711][ T4304] REISERFS (device loop1): Using r5 hash to sort names
[   73.687884][ T4293] loop0: detected capacity change from 0 to 32768
[   73.709143][ T4304] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[   74.006990][ T4316] loop3: detected capacity change from 0 to 512
[   74.792312][ T4316] EXT4-fs warning (device loop3): dx_probe:833: inode #2: comm syz.3.11: Unrecognised inode hash code 4
[   74.803936][ T4316] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.11: Corrupt directory, running e2fsck is recommended
[   74.817753][ T4316] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[   74.836130][ T4316] EXT4-fs error (device loop3): ext4_iget_extra_inode:4573: inode #15: comm syz.3.11: corrupted in-inode xattr
[   74.861849][ T4316] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.11: couldn't read orphan inode 15 (err -117)
[   74.892774][ T4316] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000101,noblock_validity,noinit_itable,discard,auto_da_alloc,grpjquota=.noquota,sb=0x0000000000000007,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback.
[   76.240650][ T4331] loop3: detected capacity change from 0 to 512
[   76.278691][ T4331] EXT4-fs warning (device loop3): dx_probe:833: inode #2: comm syz.3.15: Unrecognised inode hash code 4
[   76.289970][ T4331] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.15: Corrupt directory, running e2fsck is recommended
[   76.304178][ T4331] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[   76.319522][ T4331] EXT4-fs error (device loop3): ext4_iget_extra_inode:4573: inode #15: comm syz.3.15: corrupted in-inode xattr
[   76.384487][ T4336] process 'syz.1.12' launched '/dev/fd/3/./file0' with NULL argv: empty string added
[   76.479035][ T4331] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.15: couldn't read orphan inode 15 (err -117)
[   76.511012][ T4328] loop0: detected capacity change from 0 to 512
[   76.519112][ T4331] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000101,noblock_validity,noinit_itable,discard,auto_da_alloc,grpjquota=.noquota,sb=0x0000000000000007,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback.
[   78.392290][ T4328] EXT4-fs: failed to create workqueue
[   79.933693][ T4328] EXT4-fs (loop0): mount failed
[   80.177630][ T4350] team0: Port device gretap1 added
[   81.709564][ T4356] device macvlan2 entered promiscuous mode
[   81.745207][ T4356] team0: Device macvlan2 is already an upper device of the team interface
[   82.953731][ T4373] loop3: detected capacity change from 0 to 512
[   83.727006][ T4366] loop2: detected capacity change from 0 to 8192
[   83.734174][ T4373] EXT4-fs warning (device loop3): dx_probe:833: inode #2: comm syz.3.24: Unrecognised inode hash code 4
[   83.745795][ T4373] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.24: Corrupt directory, running e2fsck is recommended
[   83.759103][ T4373] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[   83.767479][ T4373] EXT4-fs error (device loop3): ext4_iget_extra_inode:4573: inode #15: comm syz.3.24: corrupted in-inode xattr
[   83.780481][ T4373] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.24: couldn't read orphan inode 15 (err -117)
[   83.792791][ T4373] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000101,noblock_validity,noinit_itable,discard,auto_da_alloc,grpjquota=.noquota,sb=0x0000000000000007,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback.
[   83.827166][ T4376] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 255: padding at end of block bitmap is not set
[   84.606694][ T4366] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
[   84.656126][ T4366] REISERFS (device loop2): using ordered data mode
[   84.689994][ T4366] reiserfs: using flush barriers
[   84.884507][ T4366] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   84.997057][ T4366] REISERFS (device loop2): checking transaction log (loop2)
[   87.753181][ T1107] cfg80211: failed to load regulatory.db
[   87.795400][ T4366] REISERFS (device loop2): Using r5 hash to sort names
[   87.811023][ T4366] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[   89.511971][ T4400] input: syz1 as /devices/virtual/input/input5
[   90.418639][ T4417] loop3: detected capacity change from 0 to 128
[   90.623504][ T4417] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   92.697684][ T4428] loop1: detected capacity change from 0 to 512
[   93.912833][ T4435] loop4: detected capacity change from 0 to 512
[   94.099551][ T4428] EXT4-fs warning (device loop1): dx_probe:833: inode #2: comm syz.1.40: Unrecognised inode hash code 4
[   94.110792][ T4428] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.40: Corrupt directory, running e2fsck is recommended
[   94.125940][ T4428] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117
[   94.135120][ T4428] EXT4-fs error (device loop1): ext4_iget_extra_inode:4573: inode #15: comm syz.1.40: corrupted in-inode xattr
[   94.637638][ T4428] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.40: couldn't read orphan inode 15 (err -117)
[   94.722064][ T4428] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000101,noblock_validity,noinit_itable,discard,auto_da_alloc,grpjquota=.noquota,sb=0x0000000000000007,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback.
[   95.076363][ T4427] sched: RT throttling activated
[   95.666902][ T4436] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 255: padding at end of block bitmap is not set
[   95.684002][ T4435] EXT4-fs: failed to create workqueue
[   95.689435][ T4435] EXT4-fs (loop4): mount failed
[   97.786856][ T4451] loop4: detected capacity change from 0 to 8192
[   98.036350][ T4451] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal
[   98.109462][ T4451] REISERFS (device loop4): using ordered data mode
[   98.135861][ T4451] reiserfs: using flush barriers
[   98.943083][ T4451] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   99.229498][ T4451] REISERFS (device loop4): checking transaction log (loop4)
[   99.424987][ T4451] REISERFS (device loop4): Using r5 hash to sort names
[   99.556218][ T4451] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  101.475745][ T4486] loop1: detected capacity change from 0 to 512
[  104.028228][ T4486] EXT4-fs warning (device loop1): dx_probe:833: inode #2: comm syz.1.54: Unrecognised inode hash code 4
[  104.039488][ T4486] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.54: Corrupt directory, running e2fsck is recommended
[  104.053009][ T4486] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117
[  104.061324][ T4486] EXT4-fs error (device loop1): ext4_iget_extra_inode:4573: inode #15: comm syz.1.54: corrupted in-inode xattr
[  104.079173][ T4486] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.54: couldn't read orphan inode 15 (err -117)
[  104.092835][ T4486] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000101,noblock_validity,noinit_itable,discard,auto_da_alloc,grpjquota=.noquota,sb=0x0000000000000007,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback.
[  104.575436][ T4507] loop4: detected capacity change from 0 to 512
[  105.148953][ T4507] EXT4-fs warning (device loop4): dx_probe:833: inode #2: comm syz.4.56: Unrecognised inode hash code 4
[  105.160530][ T4507] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.56: Corrupt directory, running e2fsck is recommended
[  105.174523][ T4507] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117
[  105.183249][ T4507] EXT4-fs error (device loop4): ext4_iget_extra_inode:4573: inode #15: comm syz.4.56: corrupted in-inode xattr
[  105.214219][ T4507] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.56: couldn't read orphan inode 15 (err -117)
[  105.230143][ T4507] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000101,noblock_validity,noinit_itable,discard,auto_da_alloc,grpjquota=.noquota,sb=0x0000000000000007,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback.
[  108.785165][ T4549] autofs4:pid:4549:autofs_fill_super: called with bogus options
[  109.635574][ T4553] loop1: detected capacity change from 0 to 512
[  109.803689][ T4553] EXT4-fs warning (device loop1): dx_probe:833: inode #2: comm syz.1.69: Unrecognised inode hash code 4
[  109.815498][ T4553] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.69: Corrupt directory, running e2fsck is recommended
[  109.829730][ T4553] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117
[  109.839047][ T4553] EXT4-fs error (device loop1): ext4_iget_extra_inode:4573: inode #15: comm syz.1.69: corrupted in-inode xattr
[  109.851695][ T4553] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.69: couldn't read orphan inode 15 (err -117)
[  109.864672][ T4553] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000101,noblock_validity,noinit_itable,discard,auto_da_alloc,grpjquota=.noquota,sb=0x0000000000000007,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback.
[  109.970588][ T4563] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 255: padding at end of block bitmap is not set
[  110.109698][ T4565] loop4: detected capacity change from 0 to 512
[  110.472333][ T4565] EXT4-fs warning (device loop4): dx_probe:833: inode #2: comm syz.4.71: Unrecognised inode hash code 4
[  110.567006][ T4565] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.71: Corrupt directory, running e2fsck is recommended
[  111.005461][ T4565] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117
[  111.508264][ T4565] EXT4-fs error (device loop4): ext4_iget_extra_inode:4573: inode #15: comm syz.4.71: corrupted in-inode xattr
[  113.146966][ T4565] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.71: couldn't read orphan inode 15 (err -117)
[  113.169257][ T4565] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000101,noblock_validity,noinit_itable,discard,auto_da_alloc,grpjquota=.noquota,sb=0x0000000000000007,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback.
[  113.291514][ T4574] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 255: padding at end of block bitmap is not set
[  114.359450][ T4606] loop3: detected capacity change from 0 to 512
[  116.122821][ T4606] EXT4-fs warning (device loop3): dx_probe:833: inode #2: comm syz.3.82: Unrecognised inode hash code 4
[  116.134463][ T4606] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.82: Corrupt directory, running e2fsck is recommended
[  116.176232][ T4606] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[  116.185193][ T4606] EXT4-fs error (device loop3): ext4_iget_extra_inode:4573: inode #15: comm syz.3.82: corrupted in-inode xattr
[  116.207044][ T4606] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.82: couldn't read orphan inode 15 (err -117)
[  116.219754][ T4606] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000101,noblock_validity,noinit_itable,discard,auto_da_alloc,grpjquota=.noquota,sb=0x0000000000000007,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback.
[  116.404527][ T4611] loop2: detected capacity change from 0 to 256
[  116.581951][ T4611] =======================================================
[  116.581951][ T4611] WARNING: The mand mount option has been deprecated and
[  116.581951][ T4611]          and is ignored by this kernel. Remove the mand
[  116.581951][ T4611]          option from the mount to silence this warning.
[  116.581951][ T4611] =======================================================
[  116.695634][ T4615] device macvlan2 entered promiscuous mode
[  116.748818][ T4611] exfat: Bad value for 'uid'
[  119.531179][ T4624] input: syz1 as /devices/virtual/input/input6
[  122.119907][ T4647] autofs4:pid:4647:autofs_fill_super: called with bogus options
[  122.423200][ T4646] loop1: detected capacity change from 0 to 512
[  122.675270][ T4646] EXT4-fs warning (device loop1): dx_probe:833: inode #2: comm syz.1.96: Unrecognised inode hash code 4
[  122.932915][ T4646] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.96: Corrupt directory, running e2fsck is recommended
[  122.956334][ T4660] loop4: detected capacity change from 0 to 1024
[  123.297821][ T4646] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117
[  123.803509][ T4646] EXT4-fs error (device loop1): ext4_iget_extra_inode:4573: inode #15: comm syz.1.96: corrupted in-inode xattr
[  123.882235][ T4646] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.96: couldn't read orphan inode 15 (err -117)
[  124.265060][ T4646] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000101,noblock_validity,noinit_itable,discard,auto_da_alloc,grpjquota=.noquota,sb=0x0000000000000007,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback.
[  124.293311][ T4665] device macvlan2 entered promiscuous mode
[  125.125961][ T4667] input: syz1 as /devices/virtual/input/input7
[  125.280489][ T4658] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 255: padding at end of block bitmap is not set
[  126.271194][ T4677] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  130.664704][ T4709] input: syz1 as /devices/virtual/input/input8
[  132.648155][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[  132.722938][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[  133.508186][ T4728] loop4: detected capacity change from 0 to 512
[  133.904329][ T4726] loop2: detected capacity change from 0 to 1024
[  135.204936][ T4728] EXT4-fs warning (device loop4): dx_probe:833: inode #2: comm syz.4.120: Unrecognised inode hash code 4
[  135.216327][ T4728] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.120: Corrupt directory, running e2fsck is recommended
[  135.230039][ T4728] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117
[  135.238469][ T4728] EXT4-fs error (device loop4): ext4_iget_extra_inode:4573: inode #15: comm syz.4.120: corrupted in-inode xattr
[  135.252526][ T4728] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.120: couldn't read orphan inode 15 (err -117)
[  135.264906][ T4728] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000101,noblock_validity,noinit_itable,discard,auto_da_alloc,grpjquota=.noquota,sb=0x0000000000000007,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback.
[  137.742120][ T4750] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  141.286958][ T4771] loop4: detected capacity change from 0 to 512
[  142.196421][ T4771] EXT4-fs warning (device loop4): dx_probe:833: inode #2: comm syz.4.131: Unrecognised inode hash code 4
[  143.260491][ T4771] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.131: Corrupt directory, running e2fsck is recommended
[  143.367491][ T4771] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117
[  144.232211][ T4771] EXT4-fs error (device loop4): ext4_iget_extra_inode:4573: inode #15: comm syz.4.131: corrupted in-inode xattr
[  144.366409][ T4771] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.131: couldn't read orphan inode 15 (err -117)
[  144.530558][ T4771] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000101,noblock_validity,noinit_itable,discard,auto_da_alloc,grpjquota=.noquota,sb=0x0000000000000007,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback.
[  144.793009][ T4797] loop0: detected capacity change from 0 to 512
[  145.380447][ T4797] EXT4-fs warning (device loop0): dx_probe:833: inode #2: comm syz.0.139: Unrecognised inode hash code 4
[  145.404645][ T4797] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.139: Corrupt directory, running e2fsck is recommended
[  145.452855][ T4802] netlink: 28 bytes leftover after parsing attributes in process `syz.1.141'.
[  145.595273][ T4797] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117
[  145.604669][ T4797] EXT4-fs error (device loop0): ext4_iget_extra_inode:4573: inode #15: comm syz.0.139: corrupted in-inode xattr
[  145.621812][ T4797] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.139: couldn't read orphan inode 15 (err -117)
[  145.637347][ T4797] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000101,noblock_validity,noinit_itable,discard,auto_da_alloc,grpjquota=.noquota,sb=0x0000000000000007,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback.
[  148.452663][ T3161] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  148.510478][ T3161] Bluetooth: hci0: Injecting HCI hardware error event
[  148.563302][ T4199] Bluetooth: hci0: hardware error 0x00
[  149.681249][ T4778] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 255: padding at end of block bitmap is not set
[  150.014328][ T4819] input: syz1 as /devices/virtual/input/input9
[  152.883954][ T4846] Zero length message leads to an empty skb
[  153.897635][ T4852] netlink: 28 bytes leftover after parsing attributes in process `syz.2.154'.
[  153.938579][ T4848] loop4: detected capacity change from 0 to 8192
[  154.157747][ T4848] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal
[  154.174030][ T4848] REISERFS (device loop4): using ordered data mode
[  154.209825][ T4848] reiserfs: using flush barriers
[  154.261927][ T4848] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  154.291528][ T4848] REISERFS (device loop4): checking transaction log (loop4)
[  154.310555][ T4848] REISERFS (device loop4): Using r5 hash to sort names
[  154.345159][ T4848] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  154.371892][ T4863] loop1: detected capacity change from 0 to 512
[  155.070036][ T4867] netlink: 28 bytes leftover after parsing attributes in process `syz.2.167'.
[  155.259305][ T4863] EXT4-fs warning (device loop1): dx_probe:833: inode #2: comm syz.1.156: Unrecognised inode hash code 4
[  155.576078][ T4863] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.156: Corrupt directory, running e2fsck is recommended
[  157.729105][ T4863] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117
[  157.742297][ T4863] EXT4-fs error (device loop1): ext4_iget_extra_inode:4573: inode #15: comm syz.1.156: corrupted in-inode xattr
[  158.235979][ T4863] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.156: couldn't read orphan inode 15 (err -117)
[  158.288817][ T4863] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000101,noblock_validity,noinit_itable,discard,auto_da_alloc,grpjquota=.noquota,sb=0x0000000000000007,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback.
[  158.480520][ T4873] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 255: padding at end of block bitmap is not set
[  158.617265][ T4886] loop3: detected capacity change from 0 to 512
[  158.850170][ T4889] input: syz1 as /devices/virtual/input/input10
[  159.405955][ T4886] EXT4-fs warning (device loop3): dx_probe:833: inode #2: comm syz.3.161: Unrecognised inode hash code 4
[  159.449844][ T4886] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.161: Corrupt directory, running e2fsck is recommended
[  159.466875][ T4886] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[  159.476556][ T4886] EXT4-fs error (device loop3): ext4_iget_extra_inode:4573: inode #15: comm syz.3.161: corrupted in-inode xattr
[  159.518060][ T4886] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.161: couldn't read orphan inode 15 (err -117)
[  159.531447][ T4886] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000101,noblock_validity,noinit_itable,discard,auto_da_alloc,grpjquota=.noquota,sb=0x0000000000000007,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback.
[  162.058916][ T4891] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 255: padding at end of block bitmap is not set
[  162.278474][ T4920] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  162.500728][ T4698] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  162.790596][ T4698] usb 1-1: Using ep0 maxpacket: 8
[  162.916149][ T4698] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  163.144966][ T4698] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  163.206041][ T4698] pvrusb2: Hardware description: Terratec Grabster AV400
[  164.100035][ T4698] pvrusb2: **********
[  164.104205][ T4698] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  164.115094][ T4698] pvrusb2: Important functionality might not be entirely working.
[  164.123146][ T4698] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  164.134587][ T4698] pvrusb2: **********
[  164.173917][ T2423] pvrusb2: Invalid write control endpoint
[  164.409014][ T4918] pvrusb2: Invalid write control endpoint
[  164.439593][ T2423] pvrusb2: Invalid write control endpoint
[  164.450882][ T4229] usb 1-1: USB disconnect, device number 2
[  164.466621][ T2423] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  164.488854][ T2423] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  164.496830][ T2423] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  164.507410][ T2423] pvrusb2: Device being rendered inoperable
[  164.536570][ T2423] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  164.548637][ T2423] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  164.587544][ T2423] pvrusb2: Attached sub-driver cx25840
[  164.611752][ T2423] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  164.645321][ T2423] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  167.449786][ T4948] input: syz1 as /devices/virtual/input/input11
[  167.918942][ T4942] loop1: detected capacity change from 0 to 512
[  168.052297][ T4942] EXT4-fs warning (device loop1): dx_probe:833: inode #2: comm syz.1.182: Unrecognised inode hash code 4
[  168.201256][ T4942] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.182: Corrupt directory, running e2fsck is recommended
[  168.343358][ T4942] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117
[  168.400612][ T4942] EXT4-fs error (device loop1): ext4_iget_extra_inode:4573: inode #15: comm syz.1.182: corrupted in-inode xattr
[  168.757247][ T4942] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.182: couldn't read orphan inode 15 (err -117)
[  169.035126][ T4942] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000101,noblock_validity,noinit_itable,discard,auto_da_alloc,grpjquota=.noquota,sb=0x0000000000000007,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback.
[  172.080451][ T4953] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 255: padding at end of block bitmap is not set
[  172.256970][ T4995] syz.3.186 uses obsolete (PF_INET,SOCK_PACKET)
[  176.660450][ T4698] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  177.434741][ T4698] usb 5-1: Using ep0 maxpacket: 8
[  177.820683][ T4698] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  178.119367][ T4698] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  178.998679][ T4698] pvrusb2: Hardware description: Terratec Grabster AV400
[  179.047494][ T4698] pvrusb2: **********
[  179.074680][ T4698] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  179.097773][ T5058] loop2: detected capacity change from 0 to 512
[  179.169125][ T4698] pvrusb2: Important functionality might not be entirely working.
[  180.183681][ T4698] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  180.247008][ T5058] EXT4-fs warning (device loop2): dx_probe:833: inode #2: comm syz.2.204: Unrecognised inode hash code 4
[  181.109213][ T4698] pvrusb2: **********
[  181.130567][ T2423] pvrusb2: Invalid write control endpoint
[  181.146625][ T4698] usb 5-1: USB disconnect, device number 2
[  181.210255][ T5058] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.204: Corrupt directory, running e2fsck is recommended
[  181.326801][ T2423] pvrusb2: Invalid write control endpoint
[  181.400606][   T21] usb 1-1: new full-speed USB device number 3 using dummy_hcd
[  182.208204][ T2423] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  182.261874][ T2423] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  182.269591][ T2423] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  182.291708][ T5058] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117
[  182.356020][ T2423] pvrusb2: Device being rendered inoperable
[  182.386071][ T5058] EXT4-fs error (device loop2): ext4_iget_extra_inode:4573: inode #15: comm syz.2.204: corrupted in-inode xattr
[  182.555001][ T2423] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  182.572451][ T2423] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b)
[  182.872092][ T5058] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.204: couldn't read orphan inode 15 (err -117)
[  182.896857][ T2423] pvrusb2: Attached sub-driver cx25840
[  182.918832][ T2423] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  182.932530][ T5058] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000101,noblock_validity,noinit_itable,discard,auto_da_alloc,grpjquota=.noquota,sb=0x0000000000000007,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback.
[  182.957276][ T2423] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  183.397605][ T5085] device veth1_to_batadv entered promiscuous mode
[  183.420450][ T5085] device macsec1 entered promiscuous mode
[  183.440412][ T5068] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 255: padding at end of block bitmap is not set
[  183.481405][ T5085] device veth1_to_batadv left promiscuous mode
[  185.920992][   T21] Bluetooth: hci2: command 0x0406 tx timeout
[  185.997970][   T21] Bluetooth: hci4: command 0x0406 tx timeout
[  186.099717][   T21] Bluetooth: hci3: command 0x0406 tx timeout
[  186.213602][   T21] Bluetooth: hci1: command 0x0406 tx timeout
[  188.065374][ T5118] netlink: 80 bytes leftover after parsing attributes in process `syz.0.222'.
[  188.130438][ T5100] loop3: detected capacity change from 0 to 32768
[  188.210044][ T5100] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.218 (5100)
[  189.090649][ T5100] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  189.099607][ T5100] BTRFS info (device loop3): force clearing of disk cache
[  189.114302][ T5100] BTRFS info (device loop3): enabling auto defrag
[  189.147130][ T5100] BTRFS info (device loop3): max_inline at 0
[  189.153556][ T5100] BTRFS info (device loop3): using free space tree
[  189.160177][ T5100] BTRFS info (device loop3): has skinny extents
[  189.626030][ T5100] BTRFS error (device loop3): open_ctree failed: -12
[  190.876620][ T5160] input: syz1 as /devices/virtual/input/input12
[  191.012858][ T5162] device veth1_to_batadv entered promiscuous mode
[  191.043664][ T5162] device macsec1 entered promiscuous mode
[  191.117767][ T5162] device veth1_to_batadv left promiscuous mode
[  194.086189][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[  194.093893][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[  195.924200][ T5202] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  196.164039][ T5195] loop1: detected capacity change from 0 to 32768
[  196.324649][ T5208] input: syz1 as /devices/virtual/input/input13
[  196.364772][ T5195] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.239 (5195)
[  196.419526][ T5195] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  196.468579][ T5195] BTRFS info (device loop1): force clearing of disk cache
[  196.523755][ T5195] BTRFS info (device loop1): enabling auto defrag
[  196.830922][ T5195] BTRFS info (device loop1): max_inline at 0
[  196.842943][ T5195] BTRFS info (device loop1): using free space tree
[  196.902862][ T5195] BTRFS info (device loop1): has skinny extents
[  197.376277][ T5230] device veth1_to_batadv entered promiscuous mode
[  197.382933][ T5230] device macsec1 entered promiscuous mode
[  197.391731][ T5230] device veth1_to_batadv left promiscuous mode
[  197.500443][ T5195] BTRFS info (device loop1): enabling ssd optimizations
[  197.521432][ T5195] BTRFS info (device loop1): clearing free space tree
[  197.528875][ T5195] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  197.637415][ T5195] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  197.786770][ T5195] BTRFS info (device loop1): creating free space tree
[  197.795849][ T5195] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  197.805895][ T5195] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  197.863474][ T5240] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  197.973041][ T5243] loop4: detected capacity change from 0 to 512
[  198.277783][ T5243] EXT4-fs warning (device loop4): dx_probe:833: inode #2: comm syz.4.244: Unrecognised inode hash code 4
[  198.371059][ T5243] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.244: Corrupt directory, running e2fsck is recommended
[  198.447489][ T5243] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117
[  198.476108][ T5252] loop3: detected capacity change from 0 to 16
[  198.521068][ T5252] erofs: Unknown parameter 'ãé'
[  198.545691][ T5243] EXT4-fs error (device loop4): ext4_iget_extra_inode:4573: inode #15: comm syz.4.244: corrupted in-inode xattr
[  198.658824][ T5243] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.244: couldn't read orphan inode 15 (err -117)
[  198.790257][ T5243] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000101,noblock_validity,noinit_itable,discard,auto_da_alloc,grpjquota=.noquota,sb=0x0000000000000007,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback.
[  198.877266][ T5260] atomic_op ffff88802493d998 conn xmit_atomic 0000000000000000
[  198.891136][ T5260] capability: warning: `syz.3.250' uses 32-bit capabilities (legacy support in use)
[  198.910738][ T5260] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  198.921723][ T5260] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  200.456613][ T5273] loop2: detected capacity change from 0 to 512
[  200.789326][ T5273] EXT4-fs warning (device loop2): dx_probe:833: inode #2: comm syz.2.252: Unrecognised inode hash code 4
[  200.935965][ T5273] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.252: Corrupt directory, running e2fsck is recommended
[  201.027692][ T5273] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117
[  201.040783][ T5248] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 255: padding at end of block bitmap is not set
[  201.051049][ T5273] EXT4-fs error (device loop2): ext4_iget_extra_inode:4573: inode #15: comm syz.2.252: corrupted in-inode xattr
[  201.199489][ T5285] input: syz1 as /devices/virtual/input/input14
[  201.342917][ T5273] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.252: couldn't read orphan inode 15 (err -117)
[  201.480449][ T5273] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000101,noblock_validity,noinit_itable,discard,auto_da_alloc,grpjquota=.noquota,sb=0x0000000000000007,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback.
[  202.704430][ T5248] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 255: padding at end of block bitmap is not set
[  204.814758][ T5302] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  204.863256][ T5302] device macvlan2 entered promiscuous mode
[  204.871523][ T5302] device bond1 entered promiscuous mode
[  204.877636][ T5302] device gretap1 entered promiscuous mode
[  204.886460][ T5302] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  204.896263][ T5302] device bond1 left promiscuous mode
[  204.901734][ T5302] device gretap1 left promiscuous mode
[  205.056827][ T5308] loop2: detected capacity change from 0 to 128
[  207.995785][ T5334] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  209.885967][ T5352] loop3: detected capacity change from 0 to 512
[  210.062781][ T5352] EXT4-fs warning (device loop3): dx_probe:833: inode #2: comm syz.3.271: Unrecognised inode hash code 4
[  210.140674][ T5352] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.271: Corrupt directory, running e2fsck is recommended
[  210.187120][ T5352] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[  210.227463][ T5352] EXT4-fs error (device loop3): ext4_iget_extra_inode:4573: inode #15: comm syz.3.271: corrupted in-inode xattr
[  210.398797][ T5352] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.271: couldn't read orphan inode 15 (err -117)
[  210.414655][ T5361] loop0: detected capacity change from 0 to 16
[  210.491230][ T5360] device macvlan2 entered promiscuous mode
[  210.508951][ T5360] device bond1 entered promiscuous mode
[  210.521149][ T5360] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  210.559497][ T5360] device bond1 left promiscuous mode
[  210.604740][ T5361] erofs: Unknown parameter 'ãé'
[  210.639346][ T5352] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000101,noblock_validity,noinit_itable,discard,auto_da_alloc,grpjquota=.noquota,sb=0x0000000000000007,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback.
[  210.980742][ T5364] atomic_op ffff88807d535998 conn xmit_atomic 0000000000000000
[  210.999058][ T5364] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  211.008020][ T5364] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  211.360397][ T5355] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 255: padding at end of block bitmap is not set
[  211.749809][ T5367] loop0: detected capacity change from 0 to 32768
[  211.794066][ T5367] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.278 (5367)
[  211.811366][ T5367] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  211.820122][ T5367] BTRFS info (device loop0): using free space tree
[  211.826762][ T5367] BTRFS info (device loop0): has skinny extents
[  212.117937][ T5367] BTRFS info (device loop0): enabling ssd optimizations
[  213.120396][ T5398] input: syz1 as /devices/virtual/input/input15
[  217.808021][ T5429] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  217.918546][ T5429] device macvlan2 entered promiscuous mode
[  217.931914][ T5429] device bond1 entered promiscuous mode
[  217.947746][ T5429] device gretap1 entered promiscuous mode
[  217.961030][ T5429] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  217.979289][ T5429] device bond1 left promiscuous mode
[  217.988566][ T5429] device gretap1 left promiscuous mode
[  218.571068][ T5435] loop3: detected capacity change from 0 to 764
[  218.712922][ T5435] rock: directory entry would overflow storage
[  218.719359][ T5435] rock: sig=0x4f50, size=4, remaining=3
[  218.872631][ T5435] iso9660: Corrupted directory entry in block 6 of inode 1792
[  221.610447][ T5462] loop0: detected capacity change from 0 to 512
[  221.897356][ T5462] EXT4-fs warning (device loop0): dx_probe:833: inode #2: comm syz.0.298: Unrecognised inode hash code 4
[  221.909042][ T5462] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.298: Corrupt directory, running e2fsck is recommended
[  221.922641][ T5462] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117
[  221.931018][ T5462] EXT4-fs error (device loop0): ext4_iget_extra_inode:4573: inode #15: comm syz.0.298: corrupted in-inode xattr
[  221.944150][ T5462] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.298: couldn't read orphan inode 15 (err -117)
[  221.957492][ T5462] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000101,noblock_validity,noinit_itable,discard,auto_da_alloc,grpjquota=.noquota,sb=0x0000000000000007,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback.
[  222.557951][ T5473] loop4: detected capacity change from 0 to 128
[  224.367820][ T5489] netlink: 'syz.3.307': attribute type 1 has an invalid length.
[  224.692819][ T5489] device macvlan2 entered promiscuous mode
[  224.744650][ T5489] device bond2 entered promiscuous mode
[  224.821468][ T5489] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  224.864194][ T5489] device bond2 left promiscuous mode
[  227.431764][ T5511] loop3: detected capacity change from 0 to 512
[  227.646500][ T5511] EXT4-fs warning (device loop3): dx_probe:833: inode #2: comm syz.3.311: Unrecognised inode hash code 4
[  227.659593][ T5511] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.311: Corrupt directory, running e2fsck is recommended
[  227.675626][ T5511] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[  227.684112][ T5511] EXT4-fs error (device loop3): ext4_iget_extra_inode:4573: inode #15: comm syz.3.311: corrupted in-inode xattr
[  227.696592][ T5511] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.311: couldn't read orphan inode 15 (err -117)
[  227.709245][ T5511] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000101,noblock_validity,noinit_itable,discard,auto_da_alloc,grpjquota=.noquota,sb=0x0000000000000007,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback.
[  231.754124][ T5553] ODEBUG: Out of memory. ODEBUG disabled
[  235.941550][ T5582] loop1: detected capacity change from 0 to 512
[  238.070453][ T5582] EXT4-fs warning (device loop1): dx_probe:833: inode #2: comm syz.1.334: Unrecognised inode hash code 4
[  238.081905][ T5582] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.334: Corrupt directory, running e2fsck is recommended
[  238.096984][ T5582] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117
[  238.105696][ T5582] EXT4-fs error (device loop1): ext4_iget_extra_inode:4573: inode #15: comm syz.1.334: corrupted in-inode xattr
[  238.118690][ T5582] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.334: couldn't read orphan inode 15 (err -117)
[  238.131396][ T5582] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000101,noblock_validity,noinit_itable,discard,auto_da_alloc,grpjquota=.noquota,sb=0x0000000000000007,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback.
[  240.331705][ T5599] netlink: 'syz.4.341': attribute type 1 has an invalid length.
[  240.474044][ T5599] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  240.601632][ T5601] device macvlan2 entered promiscuous mode
[  240.819872][ T5601] device bond1 entered promiscuous mode
[  240.828259][ T5601] device gretap1 entered promiscuous mode
[  240.839681][ T5601] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  241.543242][ T5601] device bond1 left promiscuous mode
[  241.548734][ T5601] device gretap1 left promiscuous mode
[  245.381224][ T5643] loop1: detected capacity change from 0 to 512
[  245.494954][ T5643] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  245.573456][ T5643] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters
[  245.606442][ T5643] Quota error (device loop1): write_blk: dquota write failed
[  245.630529][ T5643] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5
[  245.639838][ T5643] Quota error (device loop1): write_blk: dquota write failed
[  245.650226][ T5643] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota
[  245.660932][ T5643] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.352: Failed to acquire dquot type 1
[  245.681277][ T5643] EXT4-fs (loop1): 1 truncate cleaned up
[  245.687365][ T5643] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,noblock_validity,inode_readahead_blks=0x0000000000010000,resgid=0x0000000000000000,norecovery,abort,auto_da_alloc,nouid32,resgid=0x00000000000000002,errors=continue. Quota mode: writeback.
[  245.712591][    C0] vkms_vblank_simulate: vblank timer overrun
[  245.846632][ T5630] loop0: detected capacity change from 0 to 32768
[  245.947460][ T5630] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.348 (5630)
[  246.008628][ T5630] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  246.033531][ T5630] BTRFS info (device loop0): using free space tree
[  246.060350][ T5254] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  246.072196][ T5630] BTRFS info (device loop0): has skinny extents
[  246.268536][ T5630] BTRFS info (device loop0): enabling ssd optimizations
[  246.460613][ T5254] usb 2-1: Using ep0 maxpacket: 16
[  246.622380][ T5675] netlink: 'syz.4.357': attribute type 1 has an invalid length.
[  246.825582][ T5254] usb 2-1: config 1 has an invalid descriptor of length 238, skipping remainder of the config
[  246.836409][ T5254] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  246.868330][ T5680] device macvlan2 entered promiscuous mode
[  246.876598][ T5680] device bond2 entered promiscuous mode
[  246.892757][ T5680] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  247.646721][ T5254] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  247.660327][ T5254] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  247.668613][ T5254] usb 2-1: Product: syz
[  247.678511][ T5254] usb 2-1: Manufacturer: syz
[  247.686431][ T5254] usb 2-1: SerialNumber: syz
[  247.820962][ T5680] device bond2 left promiscuous mode
[  248.072545][ T5254] usb 2-1: 0:2 : does not exist
[  248.417181][ T5254] usb 2-1: USB disconnect, device number 2
[  250.925912][ T4351] udevd[4351]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  251.044825][ T5706] netlink: 4 bytes leftover after parsing attributes in process `syz.4.364'.
[  255.609696][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[  255.616127][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[  255.675462][ T5719] loop1: detected capacity change from 0 to 32768
[  256.767033][ T5740] netlink: 'syz.0.374': attribute type 1 has an invalid length.
[  256.791742][ T5719] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.369 (5719)
[  257.570405][ T5719] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  257.579116][ T5719] BTRFS info (device loop1): using free space tree
[  257.642536][ T5719] BTRFS info (device loop1): has skinny extents
[  257.678615][ T5740] device macvlan2 entered promiscuous mode
[  257.707214][ T5740] device bond2 entered promiscuous mode
[  257.728996][ T5740] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  257.743300][ T5719] BTRFS error (device loop1): open_ctree failed: -12
[  257.768990][ T4457] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by udevd (4457)
[  257.976561][ T5740] device bond2 left promiscuous mode
[  264.827013][ T5806] trusted_key: encrypted_key: insufficient parameters specified
[  266.628169][ T5814] netlink: 'syz.4.394': attribute type 1 has an invalid length.
[  266.679565][ T5814] device macvlan2 entered promiscuous mode
[  266.727875][ T5814] device bond3 entered promiscuous mode
[  266.770952][ T5814] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  266.805669][ T5814] device bond3 left promiscuous mode
[  271.972577][ T5856] loop3: detected capacity change from 0 to 512
[  274.161243][ T5856] EXT4-fs warning (device loop3): dx_probe:833: inode #2: comm syz.3.405: Unrecognised inode hash code 4
[  274.172780][ T5856] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.405: Corrupt directory, running e2fsck is recommended
[  274.186303][ T5856] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[  274.195983][ T5856] EXT4-fs error (device loop3): ext4_iget_extra_inode:4573: inode #15: comm syz.3.405: corrupted in-inode xattr
[  274.296300][ T5856] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.405: couldn't read orphan inode 15 (err -117)
[  274.309147][ T5856] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000101,noblock_validity,noinit_itable,discard,auto_da_alloc,grpjquota=.noquota,sb=0x0000000000000007,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback.
[  274.318204][ T5867] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  274.746510][ T5874] netlink: 4 bytes leftover after parsing attributes in process `syz.1.410'.
[  278.877877][ T5910] loop1: detected capacity change from 0 to 512
[  279.157746][ T5910] EXT4-fs warning (device loop1): dx_probe:833: inode #2: comm syz.1.421: Unrecognised inode hash code 4
[  279.169394][ T5910] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.421: Corrupt directory, running e2fsck is recommended
[  279.187571][ T5910] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117
[  279.202839][ T5910] EXT4-fs error (device loop1): ext4_iget_extra_inode:4573: inode #15: comm syz.1.421: corrupted in-inode xattr
[  279.217023][ T5910] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.421: couldn't read orphan inode 15 (err -117)
[  279.231677][ T5910] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000101,noblock_validity,noinit_itable,discard,auto_da_alloc,grpjquota=.noquota,sb=0x0000000000000007,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback.
[  280.654514][ T5925] netlink: 4 bytes leftover after parsing attributes in process `syz.0.426'.
[  282.645753][ T5946] loop3: detected capacity change from 0 to 512
[  282.792975][ T5946] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  283.301424][ T5946] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  283.346372][ T5946] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002]
[  283.368234][ T5946] System zones: 1-12
[  283.388442][ T5946] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  283.706282][ T5946] EXT4-fs (loop3): 1 truncate cleaned up
[  283.712578][ T5946] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,data=journal,,errors=continue. Quota mode: none.
[  287.533061][ T5997] loop1: detected capacity change from 0 to 512
[  287.947212][ T5997] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #15: comm syz.1.448: corrupted inode contents
[  288.014949][ T6009] loop3: detected capacity change from 0 to 512
[  289.102737][ T5997] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem
[  289.122828][ T5997] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #15: comm syz.1.448: corrupted inode contents
[  289.140690][ T5997] EXT4-fs error (device loop1): ext4_evict_inode:332: inode #15: comm syz.1.448: mark_inode_dirty error
[  289.954630][ T6009] EXT4-fs warning (device loop3): dx_probe:833: inode #2: comm syz.3.450: Unrecognised inode hash code 4
[  289.966017][ T6009] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.450: Corrupt directory, running e2fsck is recommended
[  289.980007][ T6009] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[  289.988334][ T6009] EXT4-fs error (device loop3): ext4_iget_extra_inode:4573: inode #15: comm syz.3.450: corrupted in-inode xattr
[  290.001373][ T6009] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.450: couldn't read orphan inode 15 (err -117)
[  290.013761][ T6009] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000101,noblock_validity,noinit_itable,discard,auto_da_alloc,grpjquota=.noquota,sb=0x0000000000000007,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback.
[  290.098172][ T5997] EXT4-fs (loop1): 1 orphan inode deleted
[  290.130482][ T5997] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  291.570584][ T6022] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  298.551569][ T6072] loop3: detected capacity change from 0 to 32768
[  300.014284][ T6072] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  300.023085][ T6072] BTRFS info (device loop3): using free space tree
[  300.029622][ T6072] BTRFS info (device loop3): has skinny extents
[  300.281174][ T6072] BTRFS info (device loop3): enabling ssd optimizations
[  307.023778][ T6166] tipc: Started in network mode
[  307.053881][ T6166] tipc: Node identity 5a803ecec332, cluster identity 4711
[  307.098620][ T6166] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  307.134540][ T6170] device syzkaller0 entered promiscuous mode
[  307.143117][ T6169] input: syz1 as /devices/virtual/input/input16
[  307.202913][ T6166] tipc: Resetting bearer <eth:syzkaller0>
[  307.263071][ T6165] tipc: Resetting bearer <eth:syzkaller0>
[  307.305256][ T6165] tipc: Disabling bearer <eth:syzkaller0>
[  308.895860][ T6194] loop3: detected capacity change from 0 to 512
[  309.033212][ T6194] EXT4-fs warning (device loop3): dx_probe:833: inode #2: comm syz.3.491: Unrecognised inode hash code 4
[  309.045126][ T6194] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.491: Corrupt directory, running e2fsck is recommended
[  309.068797][ T6194] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[  309.078303][ T6194] EXT4-fs error (device loop3): ext4_iget_extra_inode:4573: inode #15: comm syz.3.491: corrupted in-inode xattr
[  309.101328][ T6194] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.491: couldn't read orphan inode 15 (err -117)
[  309.114073][ T6194] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000101,noblock_validity,noinit_itable,discard,auto_da_alloc,grpjquota=.noquota,sb=0x0000000000000007,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback.
[  309.937110][ T6207] loop0: detected capacity change from 0 to 32768
[  310.042651][ T6207] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.500 (6207)
[  310.060984][ T6207] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  310.069713][ T6207] BTRFS info (device loop0): using free space tree
[  310.076355][ T6207] BTRFS info (device loop0): has skinny extents
[  310.336882][ T6207] BTRFS info (device loop0): enabling ssd optimizations
[  310.800444][ T6198] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 255: padding at end of block bitmap is not set
[  311.540471][ T4229] usb 2-1: new full-speed USB device number 3 using dummy_hcd
[  311.797058][ T6240] input: syz1 as /devices/virtual/input/input17
[  311.901696][ T4229] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  312.080669][ T4229] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e
[  312.106876][ T4229] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  312.139688][ T4229] usb 2-1: Product: syz
[  312.159070][ T4229] usb 2-1: Manufacturer: syz
[  312.179815][ T4229] usb 2-1: SerialNumber: syz
[  312.291118][ T4229] usb 2-1: config 0 descriptor??
[  312.331275][ T4229] hub 2-1:0.0: bad descriptor, ignoring hub
[  312.457888][ T4229] hub: probe of 2-1:0.0 failed with error -5
[  312.469041][ T4229] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input18
[  313.722416][ T5142] usb 2-1: USB disconnect, device number 3
[  317.062960][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[  317.074669][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[  317.386401][ T6292] input: syz1 as /devices/virtual/input/input19
[  319.835943][ T6313] 9pnet: Insufficient options for proto=fd
[  322.396297][ T6337] input: syz1 as /devices/virtual/input/input20
[  323.515388][ T6350] 9pnet: Insufficient options for proto=fd
[  326.800442][ T5687] usb 1-1: new full-speed USB device number 4 using dummy_hcd
[  327.370788][ T6381] input: syz1 as /devices/virtual/input/input21
[  327.537671][ T5687] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  327.824635][ T5687] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e
[  327.835890][ T5687] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  327.844464][ T5687] usb 1-1: Product: syz
[  327.848745][ T5687] usb 1-1: Manufacturer: syz
[  327.853866][ T5687] usb 1-1: SerialNumber: syz
[  327.871662][ T5687] usb 1-1: config 0 descriptor??
[  327.937163][ T5687] hub 1-1:0.0: bad descriptor, ignoring hub
[  327.968157][ T5687] hub: probe of 1-1:0.0 failed with error -5
[  327.988810][ T5687] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input22
[  328.343919][ T6393] 9pnet: Insufficient options for proto=fd
[  331.342486][ T6404] DRBG: could not allocate CTR cipher TFM handle: ctr(aes)
[  334.840310][ T5142] usb 4-1: new full-speed USB device number 2 using dummy_hcd
[  335.026626][ T5687] usb 1-1: USB disconnect, device number 4
[  335.200368][ T5142] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  335.412348][ T5142] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e
[  335.435453][ T5142] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  335.480333][ T5142] usb 4-1: Product: syz
[  335.486358][ T5142] usb 4-1: Manufacturer: syz
[  335.496530][ T5142] usb 4-1: SerialNumber: syz
[  335.811355][ T5142] usb 4-1: config 0 descriptor??
[  335.861902][ T5142] hub 4-1:0.0: bad descriptor, ignoring hub
[  335.867867][ T5142] hub: probe of 4-1:0.0 failed with error -5
[  335.883214][ T5142] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input23
[  336.944220][ T5150] usb 4-1: USB disconnect, device number 2
[  337.322344][  T146] Bluetooth: Wrong link type (-22)
[  337.337098][ T6466] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  337.339566][    C0] hrtimer: interrupt took 255525 ns
[  337.696267][ T6464] loop1: detected capacity change from 0 to 512
[  337.808157][ T6464] EXT4-fs warning (device loop1): dx_probe:833: inode #2: comm syz.1.565: Unrecognised inode hash code 4
[  337.819913][ T6464] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.565: Corrupt directory, running e2fsck is recommended
[  337.838386][ T6464] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117
[  337.847005][ T6464] EXT4-fs error (device loop1): ext4_iget_extra_inode:4573: inode #15: comm syz.1.565: corrupted in-inode xattr
[  337.859744][ T6464] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.565: couldn't read orphan inode 15 (err -117)
[  337.872045][ T6464] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000101,noblock_validity,noinit_itable,discard,auto_da_alloc,grpjquota=.noquota,sb=0x0000000000000007,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback.
[  338.640355][ T6469] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 255: padding at end of block bitmap is not set
[  340.447276][ T6475] loop3: detected capacity change from 0 to 32768
[  340.531170][ T6475] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.571 (6475)
[  340.546810][ T6494] netlink: 28 bytes leftover after parsing attributes in process `syz.1.576'.
[  340.609917][ T6475] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  340.660381][ T6475] BTRFS info (device loop3): enabling disk space caching
[  340.673273][ T6475] BTRFS info (device loop3): force clearing of disk cache
[  340.696226][ T6475] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8)
[  340.733704][ T6475] BTRFS info (device loop3): use lzo compression, level 0
[  340.759460][ T6475] BTRFS info (device loop3): disk space caching is enabled
[  340.794874][ T6475] BTRFS info (device loop3): has skinny extents
[  342.358660][ T6523] input: syz1 as /devices/virtual/input/input24
[  342.440739][ T6475] BTRFS error (device loop3): open_ctree failed: -12
[  346.443461][ T6556] netlink: 28 bytes leftover after parsing attributes in process `syz.2.589'.
[  346.806926][ T6561] loop3: detected capacity change from 0 to 512
[  347.779857][ T6561] EXT4-fs warning (device loop3): dx_probe:833: inode #2: comm syz.3.587: Unrecognised inode hash code 4
[  347.791519][ T6561] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.587: Corrupt directory, running e2fsck is recommended
[  347.805451][ T6561] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[  347.813782][ T6561] EXT4-fs error (device loop3): ext4_iget_extra_inode:4573: inode #15: comm syz.3.587: corrupted in-inode xattr
[  347.827666][ T6561] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.587: couldn't read orphan inode 15 (err -117)
[  347.850992][ T6561] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000101,noblock_validity,noinit_itable,discard,auto_da_alloc,grpjquota=.noquota,sb=0x0000000000000007,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback.
[  348.359282][ T6575] loop1: detected capacity change from 0 to 32768
[  348.383630][ T6575] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.594 (6575)
[  348.613198][ T6575] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  348.621968][ T6575] BTRFS info (device loop1): using free space tree
[  348.628501][ T6575] BTRFS info (device loop1): has skinny extents
[  349.853004][ T6575] BTRFS info (device loop1): enabling ssd optimizations
[  350.561027][ T6570] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 255: padding at end of block bitmap is not set
[  350.672609][ T4351] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 10 /dev/loop1 scanned by udevd (4351)
[  359.335577][ T6678] netlink: 8 bytes leftover after parsing attributes in process `syz.1.618'.
[  362.110348][ T6592] Set syz1 is full, maxelem 65536 reached
[  362.192943][ T6703] loop3: detected capacity change from 0 to 512
[  362.536590][ T6703] EXT4-fs warning (device loop3): dx_probe:833: inode #2: comm syz.3.624: Unrecognised inode hash code 4
[  362.705127][ T6703] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.624: Corrupt directory, running e2fsck is recommended
[  362.903490][ T6703] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[  363.155673][ T6703] EXT4-fs error (device loop3): ext4_iget_extra_inode:4573: inode #15: comm syz.3.624: corrupted in-inode xattr
[  363.474610][ T6703] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.624: couldn't read orphan inode 15 (err -117)
[  363.764221][ T6703] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000101,noblock_validity,noinit_itable,discard,auto_da_alloc,grpjquota=.noquota,sb=0x0000000000000007,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback.
[  364.732232][ T6732] netlink: 8 bytes leftover after parsing attributes in process `syz.4.634'.
[  366.599564][ T6753] input: syz1 as /devices/virtual/input/input25
[  366.640417][ T6714] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 255: padding at end of block bitmap is not set
[  370.391412][ T6793] input: syz1 as /devices/virtual/input/input26
[  371.916709][ T6801] loop0: detected capacity change from 0 to 512
[  372.060757][ T6801] EXT4-fs warning (device loop0): dx_probe:833: inode #2: comm syz.0.654: Unrecognised inode hash code 4
[  372.139187][ T6801] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.654: Corrupt directory, running e2fsck is recommended
[  372.223378][ T6801] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117
[  372.286623][ T6801] EXT4-fs error (device loop0): ext4_iget_extra_inode:4573: inode #15: comm syz.0.654: corrupted in-inode xattr
[  372.406107][ T6801] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.654: couldn't read orphan inode 15 (err -117)
[  372.477565][ T6801] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000101,noblock_validity,noinit_itable,discard,auto_da_alloc,grpjquota=.noquota,sb=0x0000000000000007,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback.
[  375.286987][ T6803] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 255: padding at end of block bitmap is not set
[  375.386694][ T6749] Set syz1 is full, maxelem 65536 reached
[  378.084625][   T13] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  378.413322][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[  378.420645][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[  378.440425][   T13] usb 1-1: Using ep0 maxpacket: 16
[  378.637603][   T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  378.850501][   T13] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  379.020496][   T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  379.028894][   T13] usb 1-1: Product: syz
[  379.033641][   T13] usb 1-1: Manufacturer: syz
[  379.038349][   T13] usb 1-1: SerialNumber: syz
[  379.039726][ T6873] tipc: Started in network mode
[  379.049836][   T13] usb 1-1: config 0 descriptor??
[  379.112940][   T13] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  379.130258][   T13] em28xx 1-1:0.0: DVB interface 0 found: bulk
[  379.255781][ T6873] tipc: Node identity 7ec294d77a0d, cluster identity 4711
[  379.290489][ T6873] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  379.330944][ T6876] device syzkaller0 entered promiscuous mode
[  379.605754][ T6876] tipc: Resetting bearer <eth:syzkaller0>
[  379.680165][ T6872] tipc: Resetting bearer <eth:syzkaller0>
[  379.697493][ T6872] tipc: Disabling bearer <eth:syzkaller0>
[  380.600437][   T13] em28xx 1-1:0.0: unknown em28xx chip ID (0)
[  380.620337][ T4231] tipc: Node number set to 80712919
[  381.053429][ T6893] loop3: detected capacity change from 0 to 512
[  381.646199][   T13] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  381.656760][ T6893] EXT4-fs warning (device loop3): dx_probe:833: inode #2: comm syz.3.680: Unrecognised inode hash code 4
[  381.675749][   T13] em28xx 1-1:0.0: board has no eeprom
[  381.709531][ T6893] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.680: Corrupt directory, running e2fsck is recommended
[  381.767752][ T6893] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[  381.787597][ T6893] EXT4-fs error (device loop3): ext4_iget_extra_inode:4573: inode #15: comm syz.3.680: corrupted in-inode xattr
[  381.836421][ T6893] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.680: couldn't read orphan inode 15 (err -117)
[  381.854157][   T13] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  381.874402][   T13] em28xx 1-1:0.0: dvb set to bulk mode.
[  381.940483][ T6893] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000101,noblock_validity,noinit_itable,discard,auto_da_alloc,grpjquota=.noquota,sb=0x0000000000000007,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback.
[  381.941286][   T13] usb 1-1: USB disconnect, device number 5
[  382.096313][   T13] em28xx 1-1:0.0: Disconnecting em28xx
[  382.171120][ T4177] em28xx 1-1:0.0: Binding DVB extension
[  382.386422][ T4177] em28xx 1-1:0.0: Registering input extension
[  382.417799][   T13] em28xx 1-1:0.0: Closing input extension
[  382.661359][   T13] em28xx 1-1:0.0: Freeing device
[  385.022932][  T146] Bluetooth: Wrong link type (-22)
[  385.046087][ T6922] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  385.121623][ T6896] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 255: padding at end of block bitmap is not set
[  390.073191][ T6964] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  391.872147][ T6966] loop0: detected capacity change from 0 to 32768
[  391.979993][ T6966] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.702 (6966)
[  392.015026][ T6966] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  392.036536][ T6966] BTRFS info (device loop0): turning on async discard
[  392.060335][ T6966] BTRFS info (device loop0): metadata ratio 0
[  392.082280][ T6966] BTRFS info (device loop0): setting nodatasum
[  392.102141][ T6966] BTRFS info (device loop0): using free space tree
[  392.124460][ T6966] BTRFS info (device loop0): has skinny extents
[  392.849695][ T6966] BTRFS info (device loop0): enabling ssd optimizations
[  392.951662][   T26] audit: type=1800 audit(1778097775.621:2): pid=6966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.702" name="file1" dev="loop0" ino=260 res=0 errno=0
[  395.410887][  T146] Bluetooth: Wrong link type (-22)
[  396.339878][ T7046] fuse: Bad value for 'fd'
[  397.357432][ T7052] loop0: detected capacity change from 0 to 512
[  397.750868][ T7052] EXT4-fs warning (device loop0): dx_probe:833: inode #2: comm syz.0.720: Unrecognised inode hash code 4
[  397.892897][ T7052] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.720: Corrupt directory, running e2fsck is recommended
[  398.081865][ T7052] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117
[  398.681380][ T7052] EXT4-fs error (device loop0): ext4_iget_extra_inode:4573: inode #15: comm syz.0.720: corrupted in-inode xattr
[  398.786381][ T7052] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.720: couldn't read orphan inode 15 (err -117)
[  398.798836][ T7052] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000101,noblock_validity,noinit_itable,discard,auto_da_alloc,grpjquota=.noquota,sb=0x0000000000000007,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback.
[  399.440790][ T7059] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 255: padding at end of block bitmap is not set
[  402.130057][  T146] Bluetooth: Wrong link type (-22)
[  403.974065][ T7107] netlink: 'syz.3.740': attribute type 1 has an invalid length.
[  404.016335][ T7107] device macvlan2 entered promiscuous mode
[  404.029531][ T7107] device bond3 entered promiscuous mode
[  404.035992][ T7107] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  404.067908][ T7107] device bond3 left promiscuous mode
[  407.413273][ T7129] loop3: detected capacity change from 0 to 512
[  407.536161][ T7129] EXT4-fs warning (device loop3): dx_probe:833: inode #2: comm syz.3.744: Unrecognised inode hash code 4
[  407.547586][ T7129] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.744: Corrupt directory, running e2fsck is recommended
[  407.561382][ T7129] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[  407.569701][ T7129] EXT4-fs error (device loop3): ext4_iget_extra_inode:4573: inode #15: comm syz.3.744: corrupted in-inode xattr
[  407.583832][ T7129] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.744: couldn't read orphan inode 15 (err -117)
[  407.598702][ T7129] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000101,noblock_validity,noinit_itable,discard,auto_da_alloc,grpjquota=.noquota,sb=0x0000000000000007,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback.
[  407.622577][    C1] vkms_vblank_simulate: vblank timer overrun
[  407.808511][  T146] Bluetooth: Wrong link type (-22)
[  407.816460][ T7140] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  408.386923][ T7151] netlink: 'syz.1.752': attribute type 1 has an invalid length.
[  408.496693][ T7156] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  408.924215][ T7161] device macvlan2 entered promiscuous mode
[  410.070011][ T7161] device bond2 entered promiscuous mode
[  410.076089][ T7161] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  410.088301][ T7161] device bond2 left promiscuous mode
[  411.074844][ T7173] loop0: detected capacity change from 0 to 2048
[  411.085669][ T7170] loop3: detected capacity change from 0 to 512
[  411.148989][ T7170] EXT4-fs warning (device loop3): dx_probe:833: inode #2: comm syz.3.757: Unrecognised inode hash code 4
[  411.160388][ T7170] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.757: Corrupt directory, running e2fsck is recommended
[  411.169714][ T7173] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  411.190353][ T7170] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[  411.198662][ T7170] EXT4-fs error (device loop3): ext4_iget_extra_inode:4573: inode #15: comm syz.3.757: corrupted in-inode xattr
[  411.211792][ T7170] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.757: couldn't read orphan inode 15 (err -117)
[  411.224222][ T7170] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000101,noblock_validity,noinit_itable,discard,auto_da_alloc,grpjquota=.noquota,sb=0x0000000000000007,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback.
[  411.360254][ T7173] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  411.400508][ T7173] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[  411.408221][ T7173] UDF-fs: Scanning with blocksize 512 failed
[  411.642282][ T7173] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  415.993532][ T7226] netlink: 8 bytes leftover after parsing attributes in process `syz.2.773'.
[  416.566923][ T7232] loop3: detected capacity change from 0 to 32768
[  416.608571][ T7234] netlink: 'syz.2.775': attribute type 1 has an invalid length.
[  416.628281][ T5767] libceph: connect (1)[c::]:6789 error -101
[  416.646048][ T7234] device macvlan2 entered promiscuous mode
[  417.384034][ T7234] device bond2 entered promiscuous mode
[  417.511146][ T5767] libceph: mon0 (1)[c::]:6789 connect error
[  417.552429][ T7234] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  417.595224][ T7242] loop1: detected capacity change from 0 to 2048
[  417.603839][ T7234] device bond2 left promiscuous mode
[  417.699435][ T7233] ceph: No mds server is up or the cluster is laggy
[  417.782430][ T5767] libceph: connect (1)[c::]:6789 error -101
[  417.880580][ T7242] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  417.881260][ T5767] libceph: mon0 (1)[c::]:6789 connect error
[  418.068748][ T7242] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  418.079923][ T7242] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[  418.089644][ T7242] UDF-fs: Scanning with blocksize 512 failed
[  418.865168][ T6114] libceph: connect (1)[c::]:6789 error -101
[  418.871787][ T6114] libceph: mon0 (1)[c::]:6789 connect error
[  418.882170][ T7242] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  422.264663][  T146] Bluetooth: Wrong link type (-22)
[  422.743700][ T7285] loop3: detected capacity change from 0 to 32768
[  423.519751][ T7291] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  423.617111][ T7294] netlink: 'syz.4.791': attribute type 1 has an invalid length.
[  424.691774][ T7304] device macvlan2 entered promiscuous mode
[  424.699135][ T7304] device bond4 entered promiscuous mode
[  424.837745][ T7304] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  425.479360][ T7304] device bond4 left promiscuous mode
[  426.965350][ T7324] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  427.757712][  T146] Bluetooth: Wrong link type (-22)
[  427.763574][  T146] Bluetooth: hci3: link tx timeout
[  427.769158][  T146] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa
[  428.284755][ T7337] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  428.301689][ T7339] loop0: detected capacity change from 0 to 64
[  429.025182][ T7348] netlink: 8 bytes leftover after parsing attributes in process `syz.0.804'.
[  429.037871][ T7348] netlink: 8 bytes leftover after parsing attributes in process `syz.0.804'.
[  429.049198][ T7348] netlink: 8 bytes leftover after parsing attributes in process `syz.0.804'.
[  429.060107][ T7348] netlink: 8 bytes leftover after parsing attributes in process `syz.0.804'.
[  429.333001][ T7348] netlink: 8 bytes leftover after parsing attributes in process `syz.0.804'.
[  429.987751][ T7359] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  431.716184][  T146] Bluetooth: Wrong link type (-22)
[  433.514631][ T7405] netlink: 8 bytes leftover after parsing attributes in process `syz.2.820'.
[  433.526497][ T7405] netlink: 8 bytes leftover after parsing attributes in process `syz.2.820'.
[  433.536920][ T7405] netlink: 8 bytes leftover after parsing attributes in process `syz.2.820'.
[  433.547015][ T7405] netlink: 8 bytes leftover after parsing attributes in process `syz.2.820'.
[  433.556703][ T7405] netlink: 8 bytes leftover after parsing attributes in process `syz.2.820'.
[  435.731950][ T4231] libceph: connect (1)[c::]:6789 error -101
[  435.948592][ T4231] libceph: mon0 (1)[c::]:6789 connect error
[  436.449292][ T7410] ceph: No mds server is up or the cluster is laggy
[  436.471121][ T4231] libceph: connect (1)[c::]:6789 error -101
[  436.477167][ T4231] libceph: mon0 (1)[c::]:6789 connect error
[  436.973396][ T7427] loop1: detected capacity change from 0 to 512
[  437.581953][ T7427] EXT4-fs warning (device loop1): dx_probe:833: inode #2: comm syz.1.828: Unrecognised inode hash code 4
[  437.593688][ T7427] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.828: Corrupt directory, running e2fsck is recommended
[  437.609756][ T7427] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117
[  437.618106][ T7427] EXT4-fs error (device loop1): ext4_iget_extra_inode:4573: inode #15: comm syz.1.828: corrupted in-inode xattr
[  437.643698][ T7427] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.828: couldn't read orphan inode 15 (err -117)
[  437.667044][ T7427] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000101,noblock_validity,noinit_itable,discard,auto_da_alloc,grpjquota=.noquota,sb=0x0000000000000007,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback.
[  440.962735][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[  440.969518][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[  441.136719][ T7462] netlink: 'syz.3.839': attribute type 1 has an invalid length.
[  441.207707][ T7464] device macvlan2 entered promiscuous mode
[  441.237896][ T7464] device bond4 entered promiscuous mode
[  441.266091][ T7464] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  441.310658][ T7464] device bond4 left promiscuous mode
[  443.130967][ T7476] loop3: detected capacity change from 0 to 512
[  443.262418][ T7485] netlink: 8 bytes leftover after parsing attributes in process `syz.4.843'.
[  443.280722][ T7485] netlink: 8 bytes leftover after parsing attributes in process `syz.4.843'.
[  443.291074][ T7485] netlink: 8 bytes leftover after parsing attributes in process `syz.4.843'.
[  443.301488][ T7485] netlink: 8 bytes leftover after parsing attributes in process `syz.4.843'.
[  443.311105][ T7485] netlink: 8 bytes leftover after parsing attributes in process `syz.4.843'.
[  443.893626][ T7476] EXT4-fs warning (device loop3): dx_probe:833: inode #2: comm syz.3.842: Unrecognised inode hash code 4
[  443.905172][ T7476] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.842: Corrupt directory, running e2fsck is recommended
[  443.920670][ T7476] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[  443.929092][ T7476] EXT4-fs error (device loop3): ext4_iget_extra_inode:4573: inode #15: comm syz.3.842: corrupted in-inode xattr
[  443.942022][ T7476] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.842: couldn't read orphan inode 15 (err -117)
[  443.947629][ T7490] loop1: detected capacity change from 0 to 64
[  443.962442][ T7476] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000101,noblock_validity,noinit_itable,discard,auto_da_alloc,grpjquota=.noquota,sb=0x0000000000000007,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback.
[  445.252103][ T7500] netlink: 8 bytes leftover after parsing attributes in process `syz.1.846'.
[  445.263961][ T7500] netlink: 8 bytes leftover after parsing attributes in process `syz.1.846'.
[  445.274346][ T7500] netlink: 8 bytes leftover after parsing attributes in process `syz.1.846'.
[  445.284505][ T7500] netlink: 8 bytes leftover after parsing attributes in process `syz.1.846'.
[  445.294087][ T7500] netlink: 8 bytes leftover after parsing attributes in process `syz.1.846'.
[  448.826435][ T7531] netlink: 'syz.2.852': attribute type 1 has an invalid length.
[  448.924183][ T7529] loop3: detected capacity change from 0 to 512
[  448.980647][ T7529] EXT4-fs warning (device loop3): dx_probe:833: inode #2: comm syz.3.859: Unrecognised inode hash code 4
[  448.992280][ T7529] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.859: Corrupt directory, running e2fsck is recommended
[  449.006196][ T7529] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[  449.014718][ T7529] EXT4-fs error (device loop3): ext4_iget_extra_inode:4573: inode #15: comm syz.3.859: corrupted in-inode xattr
[  449.028524][ T7529] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.859: couldn't read orphan inode 15 (err -117)
[  449.040999][ T7529] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000101,noblock_validity,noinit_itable,discard,auto_da_alloc,grpjquota=.noquota,sb=0x0000000000000007,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback.
[  449.076382][ T7531] device macvlan2 entered promiscuous mode
[  449.084212][ T7531] device bond3 entered promiscuous mode
[  449.091556][ T7531] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  449.117076][ T7531] device bond3 left promiscuous mode
[  449.902944][ T7546] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  452.481417][ T7559] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  453.999549][ T7575] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  458.149232][  T146] Bluetooth: Wrong link type (-22)
[  458.155387][  T146] Bluetooth: hci2: link tx timeout
[  458.159538][ T7612] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  458.161172][  T146] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  459.170268][ T7632] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  459.888379][ T7637] loop0: detected capacity change from 0 to 64
[  460.368384][ T7647] __nla_validate_parse: 5 callbacks suppressed
[  460.368422][ T7647] netlink: 8 bytes leftover after parsing attributes in process `syz.0.888'.
[  461.142989][  T146] Bluetooth: Wrong link type (-22)
[  461.148506][  T146] Bluetooth: hci2: link tx timeout
[  461.153857][  T146] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  461.244254][ T7660] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  463.450424][ T5767] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  465.263154][ T5767] usb 1-1: unable to read config index 0 descriptor/start: -71
[  465.303531][ T5767] usb 1-1: can't read configurations, error -71
[  465.689069][ T7692] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  466.281223][ T7698] netlink: 'syz.2.907': attribute type 1 has an invalid length.
[  466.338663][ T7703] device macvlan2 entered promiscuous mode
[  466.396455][ T7703] device bond4 entered promiscuous mode
[  466.402900][ T7703] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  466.458897][ T7703] device bond4 left promiscuous mode
[  466.678998][ T7707] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  467.496848][ T7715] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  467.981076][ T7722] loop1: detected capacity change from 0 to 128
[  468.017395][ T7724] fuse: Bad value for 'fd'
[  468.348824][ T7722] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  469.465906][ T7722] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  469.940738][ T7734] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  470.202174][ T7736] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  470.212351][ T7736] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  471.737172][ T7754] netlink: 'syz.3.923': attribute type 1 has an invalid length.
[  473.083109][ T7759] device macvlan2 entered promiscuous mode
[  473.098814][ T7759] device bond5 entered promiscuous mode
[  473.111472][ T7759] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  473.504863][ T7759] device bond5 left promiscuous mode
[  474.306483][  T146] Bluetooth: Wrong link type (-22)
[  474.313857][  T146] Bluetooth: hci3: link tx timeout
[  474.319066][  T146] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa
[  474.328479][  T146] Bluetooth: hci3: link tx timeout
[  474.349817][  T146] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  474.471685][ T7778] xt_connbytes: Forcing CT accounting to be enabled
[  474.972223][ T7782] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  475.515576][ T7795] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  476.532981][ T4229] Bluetooth: hci3: command 0x0406 tx timeout
[  477.386317][ T7822] netlink: 12 bytes leftover after parsing attributes in process `syz.0.940'.
[  477.693233][ T7827] netlink: 'syz.0.942': attribute type 1 has an invalid length.
[  477.740039][ T7827] device macvlan2 entered promiscuous mode
[  477.748238][ T7827] device bond3 entered promiscuous mode
[  477.754794][ T7827] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  477.766605][ T7827] device bond3 left promiscuous mode
[  477.890099][ T7824] loop3: detected capacity change from 0 to 32768
[  478.156650][ T7824] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[  478.165323][ T7811] loop1: detected capacity change from 0 to 32768
[  478.187430][ T7824] JBD2: Ignoring recovery information on journal
[  478.276851][ T7811] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  478.288361][ T7811] BTRFS info (device loop1): using free space tree
[  478.326515][ T7811] BTRFS info (device loop1): has skinny extents
[  478.379608][ T7824] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  478.512328][   T26] audit: type=1800 audit(1778097861.181:3): pid=7824 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.941" name="file2" dev="loop3" ino=17058 res=0 errno=0
[  478.571898][ T7811] BTRFS info (device loop1): enabling ssd optimizations
[  478.791640][ T4194] ocfs2: Unmounting device (7,3) on (node local)
[  479.135716][ T7855] loop0: detected capacity change from 0 to 512
[  479.504445][ T7855] EXT4-fs warning (device loop0): dx_probe:833: inode #2: comm syz.0.944: Unrecognised inode hash code 4
[  479.515889][ T7855] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.944: Corrupt directory, running e2fsck is recommended
[  479.530672][ T7855] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117
[  479.539873][ T7855] EXT4-fs error (device loop0): ext4_iget_extra_inode:4573: inode #15: comm syz.0.944: corrupted in-inode xattr
[  479.940712][ T7855] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.944: couldn't read orphan inode 15 (err -117)
[  479.953281][ T7855] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000101,noblock_validity,noinit_itable,discard,auto_da_alloc,grpjquota=.noquota,sb=0x0000000000000007,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback.
[  481.945620][ T7879] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  482.747459][ T4351] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 10 /dev/loop1 scanned by udevd (4351)
[  482.861343][ T7892] netlink: 'syz.4.955': attribute type 1 has an invalid length.
[  483.708609][ T7894] device macvlan2 entered promiscuous mode
[  483.771471][ T7894] device bond5 entered promiscuous mode
[  483.814804][ T7894] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  483.869704][ T7894] device bond5 left promiscuous mode
[  484.971597][ T7906] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  486.274754][ T7915] loop0: detected capacity change from 0 to 64
[  487.927015][ T5149] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  488.317428][ T7939] loop3: detected capacity change from 0 to 128
[  488.631529][ T5149] usb 2-1: unable to read config index 0 descriptor/start: -61
[  488.662166][ T5149] usb 2-1: can't read configurations, error -61
[  488.811694][ T5149] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  489.318597][ T7939] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  489.330535][ T7939] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  489.567689][ T7945] xt_connbytes: Forcing CT accounting to be enabled
[  491.401746][ T7965] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  492.775313][ T7973] netlink: 'syz.3.974': attribute type 1 has an invalid length.
[  493.767181][ T7973] device macvlan2 entered promiscuous mode
[  493.911118][ T7973] device bond6 entered promiscuous mode
[  494.133919][ T7973] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  494.411812][ T5149] usb 2-1: device descriptor read/all, error -110
[  494.418582][ T5149] usb usb2-port1: attempt power cycle
[  494.666009][ T7997] loop0: detected capacity change from 0 to 128
[  496.092953][ T7973] device bond6 left promiscuous mode
[  496.228154][ T7997] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  496.239946][ T7997] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  496.550274][ T5149] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  497.460368][ T5149] usb 2-1: device descriptor read/8, error -32
[  497.582382][ T8012] netlink: 12 bytes leftover after parsing attributes in process `syz.4.985'.
[  497.730322][ T5149] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  497.825813][ T8017] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  497.852461][ T5149] usb 2-1: device descriptor read/8, error -32
[  498.651796][ T5149] usb usb2-port1: unable to enumerate USB device
[  501.310741][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[  501.317084][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[  501.734129][ T8041] loop3: detected capacity change from 0 to 32768
[  504.698392][ T8063] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1000'.
[  506.730084][ T8081] loop3: detected capacity change from 0 to 64
[  507.232897][ T8085] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1005'.
[  507.244300][ T8085] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1005'.
[  507.254518][ T8085] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1005'.
[  507.264793][ T8085] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1005'.
[  507.274654][ T8085] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1005'.
[  507.753851][ T5687] Bluetooth: hci5: command 0x0409 tx timeout
[  508.595825][ T8093] loop0: detected capacity change from 0 to 256
[  510.359525][ T8093] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d)
[  510.480244][ T4698] Bluetooth: hci5: command 0x041b tx timeout
[  511.073020][ T8067] chnl_net:caif_netlink_parms(): no params data found
[  511.457992][ T8067] bridge0: port 1(bridge_slave_0) entered blocking state
[  511.478164][ T8067] bridge0: port 1(bridge_slave_0) entered disabled state
[  511.660085][ T8067] device bridge_slave_0 entered promiscuous mode
[  511.669720][ T8067] bridge0: port 2(bridge_slave_1) entered blocking state
[  511.676943][ T8067] bridge0: port 2(bridge_slave_1) entered disabled state
[  511.685236][ T8067] device bridge_slave_1 entered promiscuous mode
[  511.709458][ T8067] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  512.819264][ T4698] Bluetooth: hci5: command 0x040f tx timeout
[  513.240936][ T8067] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  513.871481][ T8067] team0: Port device team_slave_0 added
[  514.441120][ T8069] Bluetooth: Wrong link type (-22)
[  514.446569][ T8069] Bluetooth: hci2: link tx timeout
[  514.452024][ T8069] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  514.459688][ T8069] Bluetooth: hci2: link tx timeout
[  514.464881][ T8069] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  514.509388][ T8067] team0: Port device team_slave_1 added
[  514.557467][ T8132] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  514.565395][ T8134] netlink: 'syz.0.1018': attribute type 1 has an invalid length.
[  514.665337][ T8067] batman_adv: batadv0: Adding interface: batadv_slave_0
[  514.789303][ T8067] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  514.816249][ T8067] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  514.840492][ T8137] device macvlan2 entered promiscuous mode
[  514.858244][ T8137] device bond5 entered promiscuous mode
[  514.871886][ T8137] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  515.071824][ T8144] ------------[ cut here ]------------
[  515.077973][ T8144] WARNING: CPU: 0 PID: 8144 at include/linux/fs.h:532 hugetlb_split+0x237/0x2a0
[  515.087333][ T8144] Modules linked in:
[  515.091368][ T8144] CPU: 0 PID: 8144 Comm: syz.2.1020 Not tainted syzkaller #0
[  515.098831][ T8144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  515.109289][ T8144] RIP: 0010:hugetlb_split+0x237/0x2a0
[  515.114870][ T8144] Code: bf ff 4c 89 f7 48 89 de 4c 89 fa 31 c9 5b 41 5c 41 5d 41 5e 41 5f 5d eb 7a e8 95 a8 bf ff 0f 0b e9 62 fe ff ff e8 89 a8 bf ff <0f> 0b e9 2d ff ff ff 48 c7 c1 c4 23 8a 8d 80 e1 07 80 c1 03 38 c1
[  515.134752][ T8144] RSP: 0018:ffffc900033efb40 EFLAGS: 00010283
[  515.190078][ T8144] RAX: ffffffff81b98c07 RBX: 0000200000800000 RCX: 0000000000080000
[  515.198198][ T8144] RDX: ffffc90010ab3000 RSI: 00000000000001b2 RDI: 00000000000001b3
[  515.206269][ T8144] RBP: 0000000000000000 R08: ffff888025ee69bf R09: 1ffff11004bdcd37
[  515.214331][ T8144] R10: dffffc0000000000 R11: ffffed1004bdcd38 R12: ffff888078d82e08
[  515.222479][ T8144] R13: dffffc0000000000 R14: ffff888078d82d68 R15: ffff88807a459ac0
[  515.230533][ T8144] FS:  00007fa149e7f6c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000
[  515.239519][ T8144] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  515.246235][ T8144] CR2: 00007fa14bcb54c0 CR3: 00000000244ca000 CR4: 00000000003506f0
[  515.254324][ T8144] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  515.262424][ T8144] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  515.270491][ T8144] Call Trace:
[  515.273895][ T8144]  <TASK>
[  515.276895][ T8144]  __vma_adjust+0x2b6/0x1c10
[  515.281661][ T8144]  ? asm_sysvec_reschedule_ipi+0x16/0x20
[  515.287437][ T8144]  ? hugetlb_vm_op_open+0x144/0x220
[  515.292758][ T8144]  __split_vma+0x34b/0x410
[  515.297263][ T8144]  mprotect_fixup+0x518/0x800
[  515.302107][ T8144]  ? change_protection+0x1910/0x1910
[  515.307476][ T8144]  ? common_file_perm+0x171/0x1c0
[  515.312590][ T8144]  ? bpf_lsm_file_mprotect+0x5/0x10
[  515.317847][ T8144]  ? security_file_mprotect+0x7e/0xb0
[  515.323337][ T8144]  do_mprotect_pkey+0x657/0x910
[  515.328261][ T8144]  __x64_sys_mprotect+0x7c/0x90
[  515.333241][ T8144]  do_syscall_64+0x4c/0xa0
[  515.337747][ T8144]  ? clear_bhb_loop+0x30/0x80
[  515.342496][ T8144]  ? clear_bhb_loop+0x30/0x80
[  515.347244][ T8144]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  515.353216][ T8144] RIP: 0033:0x7fa14bc67dd9
[  515.357715][ T8144] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  515.377451][ T8144] RSP: 002b:00007fa149e7f028 EFLAGS: 00000246 ORIG_RAX: 000000000000000a
[  515.385964][ T8144] RAX: ffffffffffffffda RBX: 00007fa14bee1180 RCX: 00007fa14bc67dd9
[  515.394065][ T8144] RDX: 0000000000000001 RSI: 0000000000800000 RDI: 0000200000800000
[  515.402169][ T8144] RBP: 00007fa14bcfdd69 R08: 0000000000000000 R09: 0000000000000000
[  515.410247][ T8144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  515.418338][ T8144] R13: 00007fa14bee1218 R14: 00007fa14bee1180 R15: 00007ffe7d8fd3e8
[  515.426506][ T8144]  </TASK>
[  515.429614][ T8144] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  515.436922][ T8144] CPU: 0 PID: 8144 Comm: syz.2.1020 Not tainted syzkaller #0
[  515.444321][ T8144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  515.454443][ T8144] Call Trace:
[  515.457841][ T8144]  <TASK>
[  515.460793][ T8144]  dump_stack_lvl+0x188/0x250
[  515.465794][ T8144]  ? show_regs_print_info+0x20/0x20
[  515.471037][ T8144]  ? load_image+0x400/0x400
[  515.475603][ T8144]  panic+0x2e5/0x810
[  515.479546][ T8144]  ? bpf_jit_dump+0xd0/0xd0
[  515.484094][ T8144]  ? hugetlb_split+0x237/0x2a0
[  515.488894][ T8144]  __warn+0x248/0x2b0
[  515.492915][ T8144]  ? hugetlb_split+0x237/0x2a0
[  515.497710][ T8144]  report_bug+0x1b7/0x2e0
[  515.502078][ T8144]  handle_bug+0x3a/0x70
[  515.506280][ T8144]  exc_invalid_op+0x16/0x40
[  515.510817][ T8144]  asm_exc_invalid_op+0x16/0x20
[  515.515704][ T8144] RIP: 0010:hugetlb_split+0x237/0x2a0
[  515.521106][ T8144] Code: bf ff 4c 89 f7 48 89 de 4c 89 fa 31 c9 5b 41 5c 41 5d 41 5e 41 5f 5d eb 7a e8 95 a8 bf ff 0f 0b e9 62 fe ff ff e8 89 a8 bf ff <0f> 0b e9 2d ff ff ff 48 c7 c1 c4 23 8a 8d 80 e1 07 80 c1 03 38 c1
[  515.540833][ T8144] RSP: 0018:ffffc900033efb40 EFLAGS: 00010283
[  515.546955][ T8144] RAX: ffffffff81b98c07 RBX: 0000200000800000 RCX: 0000000000080000
[  515.555138][ T8144] RDX: ffffc90010ab3000 RSI: 00000000000001b2 RDI: 00000000000001b3
[  515.563135][ T8144] RBP: 0000000000000000 R08: ffff888025ee69bf R09: 1ffff11004bdcd37
[  515.571144][ T8144] R10: dffffc0000000000 R11: ffffed1004bdcd38 R12: ffff888078d82e08
[  515.579161][ T8144] R13: dffffc0000000000 R14: ffff888078d82d68 R15: ffff88807a459ac0
[  515.587298][ T8144]  ? hugetlb_split+0x237/0x2a0
[  515.592119][ T8144]  __vma_adjust+0x2b6/0x1c10
[  515.596777][ T8144]  ? asm_sysvec_reschedule_ipi+0x16/0x20
[  515.602472][ T8144]  ? hugetlb_vm_op_open+0x144/0x220
[  515.607712][ T8144]  __split_vma+0x34b/0x410
[  515.612171][ T8144]  mprotect_fixup+0x518/0x800
[  515.616902][ T8144]  ? change_protection+0x1910/0x1910
[  515.622218][ T8144]  ? common_file_perm+0x171/0x1c0
[  515.627282][ T8144]  ? bpf_lsm_file_mprotect+0x5/0x10
[  515.632506][ T8144]  ? security_file_mprotect+0x7e/0xb0
[  515.637917][ T8144]  do_mprotect_pkey+0x657/0x910
[  515.642903][ T8144]  __x64_sys_mprotect+0x7c/0x90
[  515.647796][ T8144]  do_syscall_64+0x4c/0xa0
[  515.652237][ T8144]  ? clear_bhb_loop+0x30/0x80
[  515.656947][ T8144]  ? clear_bhb_loop+0x30/0x80
[  515.661651][ T8144]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  515.667607][ T8144] RIP: 0033:0x7fa14bc67dd9
[  515.672057][ T8144] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  515.691697][ T8144] RSP: 002b:00007fa149e7f028 EFLAGS: 00000246 ORIG_RAX: 000000000000000a
[  515.700145][ T8144] RAX: ffffffffffffffda RBX: 00007fa14bee1180 RCX: 00007fa14bc67dd9
[  515.708153][ T8144] RDX: 0000000000000001 RSI: 0000000000800000 RDI: 0000200000800000
[  515.716165][ T8144] RBP: 00007fa14bcfdd69 R08: 0000000000000000 R09: 0000000000000000
[  515.724168][ T8144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  515.732170][ T8144] R13: 00007fa14bee1218 R14: 00007fa14bee1180 R15: 00007ffe7d8fd3e8
[  515.740185][ T8144]  </TASK>
[  515.743466][ T8144] Kernel Offset: disabled
[  515.748079][ T8144] Rebooting in 86400 seconds..