last executing test programs:

22m32.711472859s ago: executing program 1 (id=19):
r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3})
ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000180)={0x3ff, "8907b1f858716a8bd4421c401a890bf4a3beae505b81f4acc97e7e4349ca21af", 0x400, 0x8, 0x16d, 0x4, 0x4})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
ioctl$VIDIOC_DBG_S_REGISTER(r1, 0x4038564f, &(0x7f0000000100)={{0x4, @addr=0x10001}, 0x8, 0x4, 0x1dc})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000100), 0x1003, r2}, 0x38)

22m32.464373455s ago: executing program 1 (id=23):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, 0x0)

22m31.599573699s ago: executing program 1 (id=27):
r0 = timerfd_create(0x0, 0x0)
timerfd_settime(r0, 0x3, 0x0, 0x0)
clock_adjtime(0x0, &(0x7f0000000040)={0xd54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x732})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, 0x0, 0x0)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r2, 0x0, 0x0)
sendmmsg$inet6(r2, 0x0, 0x0, 0x0)
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
write(0xffffffffffffffff, &(0x7f0000000040), 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6)
r6 = fsopen(&(0x7f0000000100)='ocfs2_dlmfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
r7 = fsmount(r6, 0x0, 0x0)
fchdir(r7)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)

22m29.533135895s ago: executing program 1 (id=32):
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
close(r0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x20008000)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r2 = ioctl$KVM_GET_STATS_FD_vm(r1, 0xaece)
read$FUSE(r2, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000)
syz_clone(0x2000, 0x0, 0xff36, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
fsopen(&(0x7f0000000100)='mqueue\x00', 0x1)
symlinkat(&(0x7f0000000280)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00')
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x41000000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
socket$inet6(0xa, 0x2, 0x0)

22m26.139172097s ago: executing program 1 (id=35):
openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r0 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8)
accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000240)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x800)
r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r2, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)
r3 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x1})
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040))
close_range(r4, 0xffffffffffffffff, 0x0)

22m22.791064698s ago: executing program 1 (id=42):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_usb_connect(0x2, 0x440, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000c1b2fd40861246206fc1000000010902"], 0x0)
ioctl$COMEDI_CMD(0xffffffffffffffff, 0x80506409, &(0x7f0000000580)={0x40b, 0x8, 0x0, 0x10001, 0x80, 0xdc, 0x0, 0x91, 0x0, 0xd, 0x100, 0x9, 0x0, 0x0, &(0x7f0000000480)})
prlimit64(0x0, 0xe, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x9, 0x3b071, 0xffffffffffffffff, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000300)=[{&(0x7f0000032680)=""/102389, 0x18ff5}], 0x1, 0x1903d}}], 0x48}, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f00000002c0)={'HL\x00'}, &(0x7f0000000300)=0x1e)
r3 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000c80)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be", @ANYBLOB="172c"], 0x0)
syz_usb_control_io(r3, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000002c0)=ANY=[@ANYBLOB="de0e00000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r3, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, 0x0, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = eventfd(0x3)
ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000000)={0x7c, 0x3000, 0x8, r6})
ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f00000003c0)={0xb03, 0x3000, 0x0, r6})
keyctl$clear(0x7, 0xfffffffffffffff9)

22m7.178899732s ago: executing program 32 (id=42):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_usb_connect(0x2, 0x440, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000c1b2fd40861246206fc1000000010902"], 0x0)
ioctl$COMEDI_CMD(0xffffffffffffffff, 0x80506409, &(0x7f0000000580)={0x40b, 0x8, 0x0, 0x10001, 0x80, 0xdc, 0x0, 0x91, 0x0, 0xd, 0x100, 0x9, 0x0, 0x0, &(0x7f0000000480)})
prlimit64(0x0, 0xe, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x9, 0x3b071, 0xffffffffffffffff, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000300)=[{&(0x7f0000032680)=""/102389, 0x18ff5}], 0x1, 0x1903d}}], 0x48}, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f00000002c0)={'HL\x00'}, &(0x7f0000000300)=0x1e)
r3 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000c80)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be", @ANYBLOB="172c"], 0x0)
syz_usb_control_io(r3, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000002c0)=ANY=[@ANYBLOB="de0e00000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r3, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, 0x0, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = eventfd(0x3)
ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000000)={0x7c, 0x3000, 0x8, r6})
ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f00000003c0)={0xb03, 0x3000, 0x0, r6})
keyctl$clear(0x7, 0xfffffffffffffff9)

20m4.069164744s ago: executing program 0 (id=209):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
fcntl$setownex(0xffffffffffffffff, 0xf, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
io_setup(0x200, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00')
read$FUSE(r1, &(0x7f00000102c0)={0x2020}, 0x2020)

20m1.403680866s ago: executing program 0 (id=212):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x20040045)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000025300)=""/102392, 0x18ff8)
getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, 0x0, 0x0)
socket$alg(0x26, 0x5, 0x0)
r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802)
writev(r1, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a00"/42, 0x2a}], 0x1)
poll(&(0x7f00000001c0)=[{r1, 0xa}], 0x1, 0x9)

20m0.568693589s ago: executing program 0 (id=215):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
chdir(&(0x7f00000000c0)='./bus\x00')
sendmsg$unix(0xffffffffffffffff, 0x0, 0xc800)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x13, r0, 0x0)
mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000003c0)={'\x00', 0x80, 0x100, 0x7fe, 0x2, 0x7, <r1=>0xffffffffffffffff})
prlimit64(r1, 0xe, &(0x7f0000000300)={0x8, 0x100008f}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
socket$packet(0x11, 0x3, 0x300)
add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x420, 0x288, 0x43, 0xa0, 0x288, 0x98, 0x388, 0x178, 0x178, 0x388, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'ip6erspan0\x00'}, 0x12a, 0x228, 0x288, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@string={{0xc0}, {0x0, 0x3, 'kmp\x00', "7af8bdb4c056dc65949041982abfe9ed51b01289c0026e2e6034ed587be5f09017b907388134b0ede40eb8d493f20d534fc37f23ec524d91a7a041f36bb1d1c3ab474544c5ef3f2fa69a80a0d967ee4464257d28d31e6843bc1221dfb9a6a27ad13af7061b737fd97d94f50942c68242819c941c0b4d9ec154c7d327187e8198", 0x38, 0x2, {0x1}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x7, 0x5, 0x4, 0x3, 0x4], 0x2, 0x4}, {0xffffffffffffffff, [0x1, 0x1, 0x1, 0x1, 0x1, 0x2], 0x4}}}}, {{@uncond, 0x0, 0xe0, 0x100, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x1b, 0x408, 0xfffffffb}}, @common=@set={{0x40}, {{0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300], 0x0, 0x1}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x480)

19m59.164502697s ago: executing program 0 (id=218):
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
close(r0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x20008000)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r2 = ioctl$KVM_GET_STATS_FD_vm(r1, 0xaece)
read$FUSE(r2, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000)
syz_clone(0x2000, 0x0, 0xff36, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x9, &(0x7f0000000000)=0x3, 0x4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
fsopen(&(0x7f0000000100)='mqueue\x00', 0x1)
symlinkat(&(0x7f0000000280)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00')
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x41000000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
socket$inet6(0xa, 0x2, 0x0)

19m49.721378613s ago: executing program 0 (id=229):
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
ioperm(0x5, 0x6, 0x1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x20008000)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0)
r0 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece)
read$FUSE(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000)
syz_clone(0x2000, 0x0, 0xff36, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x9, &(0x7f0000000000)=0x3, 0x4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
fsopen(&(0x7f0000000100)='mqueue\x00', 0x1)
symlinkat(&(0x7f0000000280)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00')
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x41000000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
socket$inet6(0xa, 0x2, 0x0)

19m42.579950058s ago: executing program 0 (id=237):
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
close(r0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x20008000)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r2 = ioctl$KVM_GET_STATS_FD_vm(r1, 0xaece)
read$FUSE(r2, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000)
syz_clone(0x2000, 0x0, 0xff36, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x9, &(0x7f0000000000)=0x3, 0x4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
fsopen(&(0x7f0000000100)='mqueue\x00', 0x1)
symlinkat(&(0x7f0000000280)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00')
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x41000000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
socket$inet6(0xa, 0x2, 0x0)

19m25.611707038s ago: executing program 33 (id=237):
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
close(r0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x20008000)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r2 = ioctl$KVM_GET_STATS_FD_vm(r1, 0xaece)
read$FUSE(r2, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000)
syz_clone(0x2000, 0x0, 0xff36, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x9, &(0x7f0000000000)=0x3, 0x4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
fsopen(&(0x7f0000000100)='mqueue\x00', 0x1)
symlinkat(&(0x7f0000000280)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00')
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x41000000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
socket$inet6(0xa, 0x2, 0x0)

5m51.855662893s ago: executing program 5 (id=2297):
syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0)
r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000200)={&(0x7f0000000700)=[{0x0, 0x1000, 0x0, &(0x7f0000000480)}, {0xa019, 0x9000, 0x0, 0x0}], 0x2})

5m49.091818408s ago: executing program 5 (id=2303):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
sendmmsg(r1, &(0x7f0000003dc0)=[{{&(0x7f0000000180)=@can, 0x80, &(0x7f0000001600)=[{&(0x7f0000000440)="4e358ed59ee7a636d3a35d9bb1a218701d8f6d70ee6d34b9565d847dddb24e725b783f9101eb20349037dec5e247e46ce598d7", 0x33}, {&(0x7f0000000480)="de672c01ae74efbb33d3b1fcf9d8a4a1845abe67f2ad60bef161284a6297a65be31b72cd66831d7d9f74469dae421b5d6a331714e6df851fc55d97333f55d368b1cb4763b960495ae1d6e370a1c0040c85a920328e354405bdfacf9e70e995e227", 0x61}, {&(0x7f0000000040)="d9737c05b9c1cd0a18c4c77b1a2dfea46602f580445e6c1a916a4d93365ff2a96c6914f50fa5e7c9d53d54b7f381630cb4bb781235f0b7d8a99321d1cb58828bb4d47d1e4fae64dbf4120c7e0eef4197c524e44ad5f0bc80d1b9e657fbd885971caf5c0393773557", 0x68}, {&(0x7f0000000600)="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", 0x5fe}], 0x4}}], 0x1, 0x48010)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@newtfilter={0x24, 0x11, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050)

5m46.006569962s ago: executing program 5 (id=2312):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x2ddfdbff, 0x2ffffffff}, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[], 0x4c}}, 0x0)

5m45.730643549s ago: executing program 5 (id=2313):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x800714, &(0x7f00000000c0), 0xff, 0x4df, &(0x7f0000010a80)="$eJzs3c9rHFUcAPDv7Cb9GZuotdraarSKwR9Jk/6wBw8qCoIKgh7qMSZprd020kRoS9AoUs8F7+JR8OjJmxdRD+IfoOBRCkWD0FQUIrM7k2R/Jdsm6TbJ5wPbfW/2zcx7M+9l37y3Mw1g0+pN/0kiuiLi14jorkSrE/RW3mZnpkZuzEyNJDE39+afSTnd9ZmpkTxpvt7OLNJXiCh8msTzSf1+Jy5eOjNcKo2dz+IDk2ffH5i4eOmZ02eHT42dGjs3dPz4kcODzx4bOlq1XoNN1dneYFlaruv7Phzfv/eVt6+8PnLiyjs/fp1ua8+ByudZOba0sPmIG3W5eDViui5Zb3rU/porq/3s8ZZ2tH7ctSicdLQxI9yUYkSkp6uz3P67oxgLJ687Xv6krZkD1lT63bS1+cfTc8AGlkS7cwC0R/5Fn17/5q/47zZ1Pu4A115YuOifnZkamZ0fz+iIQra8cw333xsRJ6b/+SJ9Rc14CgDAWij3bZ6u6f+VFWJP+b0y17Erm0PpiYi7I+KeiLg3InZHxH0R5bT3R8QDlZXnulvcf29NvL7/U7jaMM+rJO3/Pbeo7zc7M1U9HFaInmL5rTLH0ROdycnTpbFD2THpi86taXxwiX1891LzaaXF/b/0leahJgNXOyoL5jcyOjw5vFoH4drHEfs6qsqfHf9kfiYgrQF7I2LfzW16Vx44/eRX+5slalT+vC+8rFWYZ5r7MuKJyvmfjpry55Im85NpHT82dHRgW5TGDg3ktaLeT79cfqPZ/ldU/lWQnv8d1fW/JkX330llvrYzSqWx8xM3v4/Lv33W9Jpm+fLP1/95af3fkrxVnrP++d3KsgvDk5PnByO2JK+V41lj2Rbp8qGFdS9k8Tx9Wv6+g43qf6H8Ny6y8/9gRKSV+EDEroci4uEs749ExKMRcXCJ8v/w4mPvLVH+JJJo6/kfjcbtP9OTLJ6vv4VA8cz33zabt2/t/B8pz673ZUvKf/+W0WoGV3j4AAAAYF0oRERXJIX+Sri3KwqF/v7Kb/h3x45CaXxi8qmT4x+cG63cI9ATnYV8pKt70XjoYJL//r0SH8rGivPPD2fjxp8Xt5fj/SPjpdE2lx02u53V7T/y9p/6o9ju3AFrrvk82hK3BgAbQm37L7QpH8Dt18rvaFwLwMbUoP0veobGv9W3CtU/5wJYxzoahIDNoVGr/6gmXtf/b/SULWDdqW//vzd4ZB2wEen1w+al/cPmpf3DprSS+/pvPZDfLLBk4jyLDdNsa/kO/80SyB8Ps5b72h4LS6JQDnRF07V2tOto5GPVSybubmWDEfHNivNTXIVypS2meklxuQKuMNDqf4YBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwZ/s/AAD//16M4Cg=")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x3, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c67808cf338674bd9bffbcafd468e306d7b4af07ec3ad71e14dc00000000c2ab00c60e0000000000000800000901000038fabe8279c2f1d600", "f28359738e229a4c66810000000000d300e6d6020000d2000000000000000001", [0x9, 0x40000000000000]})
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff)

5m44.22527925s ago: executing program 5 (id=2318):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$HIDIOCGUSAGE(r1, 0x5b01, 0x0)

5m43.518857019s ago: executing program 5 (id=2324):
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018010000646c6c2500000000002020207b1af8ff000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1af}], 0x1}, 0x0)
sendto(0xffffffffffffffff, &(0x7f0000000540)="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", 0x255, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00])
read$FUSE(r0, &(0x7f0000003680)={0x2020}, 0x2020)

5m42.452078258s ago: executing program 34 (id=2324):
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018010000646c6c2500000000002020207b1af8ff000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1af}], 0x1}, 0x0)
sendto(0xffffffffffffffff, &(0x7f0000000540)="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", 0x255, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00])
read$FUSE(r0, &(0x7f0000003680)={0x2020}, 0x2020)

4m42.863299347s ago: executing program 6 (id=2586):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000440)=0x2)

4m42.473645837s ago: executing program 6 (id=2589):
r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000180), 0x8000, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x103902, 0x0)
r2 = dup(r1)
write$UHID_INPUT(r2, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50)
io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0)

4m41.751975657s ago: executing program 6 (id=2593):
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}})
statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0xf0cb2f4a0c2cfc5d, 0x0)

4m41.62351825s ago: executing program 6 (id=2594):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0)
mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x107)

4m41.379281737s ago: executing program 6 (id=2595):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
statx(0xffffffffffffff9c, 0x0, 0x800, 0x1, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x8020)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, 0x0, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r2, 0xffffffffffffffff, 0x0)

4m40.943778459s ago: executing program 6 (id=2597):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socket$nl_generic(0x10, 0x3, 0x10)
timer_create(0x1, 0x0, 0x0)
syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0x0, 0x0, 0x0}, 0x0, &(0x7f0000000140), &(0x7f0000000180))
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000001d80)={'filter\x00', 0x111, 0x4, 0x3a0, 0x1d0, 0x1d0, 0x2b8, 0x2b8, 0x2b8, 0x2b8, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0xe8}, @unspec=@MARK={0x28}}, {{@arp={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'nicvf0\x00', 'lo\x00'}, 0xc0, 0xe8, 0x0, {0xb000000}}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x2}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@remote}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'xfrm0\x00', 'ipvlan1\x00'}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f0)

4m40.393765554s ago: executing program 35 (id=2597):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socket$nl_generic(0x10, 0x3, 0x10)
timer_create(0x1, 0x0, 0x0)
syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0x0, 0x0, 0x0}, 0x0, &(0x7f0000000140), &(0x7f0000000180))
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000001d80)={'filter\x00', 0x111, 0x4, 0x3a0, 0x1d0, 0x1d0, 0x2b8, 0x2b8, 0x2b8, 0x2b8, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0xe8}, @unspec=@MARK={0x28}}, {{@arp={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'nicvf0\x00', 'lo\x00'}, 0xc0, 0xe8, 0x0, {0xb000000}}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x2}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@remote}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'xfrm0\x00', 'ipvlan1\x00'}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f0)

4m16.659272988s ago: executing program 2 (id=2656):
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket$kcm(0x11, 0x3, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84d, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x2, 0xb}, 0x5, 0x34, 0x91f}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_RATE64={0xc, 0x4, 0xdd31e353c9fd1eb}]}}]}, 0x70}}, 0x50)
sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdc05, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xb, 0xb}, {0x6, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x2b4, 0x9, 0x1ff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240040e0}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4)

4m16.212203371s ago: executing program 2 (id=2659):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket(0x2b, 0x80801, 0x1)
ioctl$sock_inet6_udp_SIOCOUTQ(r2, 0x894b, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0)
openat$6lowpan_control(0xffffff9c, 0x0, 0x2, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x101402, 0x0)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r3, 0xffffffffffffffff, 0x0)

4m15.202693418s ago: executing program 2 (id=2661):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680))
r1 = eventfd2(0x1, 0x1)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000})
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10)

4m14.152290316s ago: executing program 2 (id=2668):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x800714, &(0x7f00000000c0), 0xff, 0x4df, &(0x7f0000010a80)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x3, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c67808cf338674bd9bffbcafd468e306d7b4af07ec3ad71e14dc00000000c2ab00c60e0000000000000800000901000038fabe8279c2f1d600", "f28359738e229a4c66810000000000d300e6d6020000d2000000000000000001", [0x9, 0x40000000000000]})
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff)

4m13.472281795s ago: executing program 3 (id=2673):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private2, @in6=@mcast2, 0x0, 0x1, 0x4e22, 0xe, 0xa}, {0xfffffffffffffffc, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffd, 0xb5, 0x1}, 0x800, 0x0, 0x1, 0x1}, {{@in=@remote, 0x4d6, 0x32}, 0x2, @in=@multicast1, 0x0, 0x2, 0x3}}, 0xe4)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0)
close(r0)

4m13.241788391s ago: executing program 2 (id=2674):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0xf6b, 0x3000, 0x4})

4m13.221549412s ago: executing program 3 (id=2675):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680))
r1 = eventfd2(0x1, 0x1)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000})
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10)

4m12.704302346s ago: executing program 2 (id=2676):
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x2, 0x5, 0x700000, 0x7, 0x8, 0x0, 0x7f}, 0x1c)

4m12.330048166s ago: executing program 36 (id=2676):
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x2, 0x5, 0x700000, 0x7, 0x8, 0x0, 0x7f}, 0x1c)

4m12.228259619s ago: executing program 3 (id=2680):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x600)
ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1)

4m12.078527553s ago: executing program 3 (id=2682):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x800714, &(0x7f00000000c0), 0xff, 0x4df, &(0x7f0000010a80)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x3, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c67808cf338674bd9bffbcafd468e306d7b4af07ec3ad71e14dc00000000c2ab00c60e0000000000000800000901000038fabe8279c2f1d600", "f28359738e229a4c66810000000000d300e6d6020000d2000000000000000001", [0x9, 0x40000000000000]})
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff)

4m11.573413797s ago: executing program 3 (id=2685):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000380)={0x40, 0x17, 0x3, "20e147"}, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2)
ioctl$HIDIOCGFEATURE(r1, 0xc0404807, &(0x7f0000000940)={0xd, "95bc9233a0ffadb335984bb3280b7840ca36304441bfb8b79ebdfe0534843f462a2e51c23b47519839c74c89785759d861f0cbab603459d543d8937b4693682b"})

4m7.047622089s ago: executing program 3 (id=2690):
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket$kcm(0x11, 0x3, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84d, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x2, 0xb}, 0x5, 0x34, 0x91f}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_RATE64={0xc, 0x4, 0xdd31e353c9fd1eb}]}}]}, 0x70}}, 0x50)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4)

4m6.564822793s ago: executing program 37 (id=2690):
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket$kcm(0x11, 0x3, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84d, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x2, 0xb}, 0x5, 0x34, 0x91f}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_RATE64={0xc, 0x4, 0xdd31e353c9fd1eb}]}}]}, 0x70}}, 0x50)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4)

19.666549596s ago: executing program 4 (id=4109):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
listen(r4, 0x3)
socket$inet(0xa, 0x801, 0x84)
listen(r4, 0xfffffffc)
r5 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r5, &(0x7f0000000f40)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000500)='p', 0x1}], 0x1}}], 0x1, 0x20000004)
r6 = socket$inet(0xa, 0x801, 0x84)
listen(r6, 0x8)
capset(0x0, 0x0)
listen(0xffffffffffffffff, 0xfff)
r7 = socket$netlink(0x10, 0x3, 0x4)
listen(r5, 0x7)
writev(r7, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101", 0x32}], 0x1)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'veth0_virt_wifi\x00', {0x1}})

18.814261049s ago: executing program 7 (id=4110):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
r2 = eventfd(0x0)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f})
ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/237, &(0x7f00000000c0)=""/85, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2})
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000340)=0x1)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)

18.299456323s ago: executing program 7 (id=4112):
setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$igmp(0x2, 0x3, 0x2)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b0000000800", @ANYRES32=r4, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502"], 0x3c}, 0x1, 0x0, 0x0, 0x4008840}, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)

16.349800726s ago: executing program 7 (id=4115):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$TCFLSH(r1, 0x400455c8, 0x2)
ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000140)=0xffffffc0)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040))

15.969312567s ago: executing program 4 (id=4116):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000080)={0x48, 0x13, 0xffffffffffffffff, 0x0, 0x10000, 0x0, 0x1, 0x2ea473, 0x2eb80c})

15.84565659s ago: executing program 7 (id=4117):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
r2 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79})
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_MOVE(r2, 0xc028aa05, &(0x7f00000000c0)={&(0x7f0000bfc000/0xb000)=nil, &(0x7f0000005000/0x3000)=nil, 0xb000, 0x3})

15.745852683s ago: executing program 4 (id=4118):
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000)
r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x40002)
close_range(r1, 0xffffffffffffffff, 0x0)

15.708559793s ago: executing program 8 (id=4119):
syz_mount_image$nilfs2(&(0x7f0000000080), &(0x7f0000000040)='./file2\x00', 0x3200400, &(0x7f0000000180)=ANY=[], 0x1, 0xa92, &(0x7f0000002d00)="$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")
truncate(&(0x7f00000000c0)='./file2\x00', 0x8da3)

15.279955045s ago: executing program 4 (id=4120):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x9, 0x0, 0x7ffffdbd}]})
r4 = shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x1000)
shmdt(r4)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f0000274000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil)
syz_emit_ethernet(0x95, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f00000001c0)={0x1, 0x1, [0xf74, 0x4e0, 0xe4b, 0xa20]})
syz_open_dev$usbfs(&(0x7f0000000100), 0x775, 0x8000)
munlockall()
dup(r2)
r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r5, 0x0, 0x0)
syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x100)
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0xc, r1, 0x0, 0xfffffffffffffffc, 0x1541})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r1, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000})
r6 = socket(0x11, 0x2, 0x0)
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r6, 0x3ba0, &(0x7f00000002c0)={0x48, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x9})
setsockopt(r6, 0x107, 0x1, 0x0, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb", 0x2c}], 0x1}, 0x4048004)
r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040))
close_range(r8, 0xffffffffffffffff, 0x0)

15.050013851s ago: executing program 8 (id=4121):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, 0x0, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x4e, &(0x7f0000000240)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x40, 0x210, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300, {[@rr={0x7, 0xf, 0xf, [@private=0xa010100, @empty, @broadcast]}]}}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x4, 0x9, @remote, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0)
setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe428116085f06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c)

13.726988717s ago: executing program 8 (id=4123):
syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL")
syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100800, 0x0, 0x1, 0x0, &(0x7f0000000080))

13.110077004s ago: executing program 8 (id=4125):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
listen(r4, 0x3)
socket$inet(0xa, 0x801, 0x84)
listen(r4, 0xfffffffc)
r5 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r5, &(0x7f0000000f40)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000500)='p', 0x1}], 0x1}}], 0x1, 0x20000004)
r6 = socket$inet(0xa, 0x801, 0x84)
listen(r6, 0x8)
capset(0x0, 0x0)
listen(0xffffffffffffffff, 0xfff)
r7 = socket$netlink(0x10, 0x3, 0x4)
listen(r5, 0x7)
writev(r7, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101", 0x32}], 0x1)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'veth0_virt_wifi\x00', {0x1}})

9.997145979s ago: executing program 8 (id=4126):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10)
sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r2 = dup(r0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20)
write$binfmt_elf64(r2, &(0x7f0000000740)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x0, 0x1, 0x2, 0x5, 0x3, 0x3e, 0xed24, 0xfd, 0x40, 0x2b6, 0xd, 0x9, 0x38, 0x1, 0xc, 0x1, 0x469}, [{0x70000000, 0x0, 0x7, 0x33, 0x100000001, 0x100000000, 0x9, 0x2}]}, 0x34000)

7.826279568s ago: executing program 4 (id=4129):
syz_mount_image$jfs(&(0x7f0000000140), &(0x7f0000000080)='./file1\x00', 0x3010846, &(0x7f0000006500)={[{@discard_size={'discard', 0x3d, 0xf4}}, {@usrquota}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@usrquota}, {@noquota}, {@nointegrity}, {@noquota}, {@iocharset={'iocharset', 0x3d, 'utf8'}}]}, 0x24, 0x62e1, &(0x7f0000006580)="$eJzs3cuOHFcZB/Cv+jYXE8fKIgoWQpPEXEKIr8EYAiRZwIINC+QtsjWZRBYOINsgJ7LwRLNhwUOAkFgixJIVD5AFW3Y8AJZsJFAWKIVq5pxxdaV7esb2dPW4fj9pXPX1qZo+5X9XX6aq+gQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAED/8wY/PFRFx5VfphhMRn4t+RC9iparXImJl7UR9nRdiuzmej4jhUkS1/vY/z0a8HhEfH4+4/+DOenXz+X324/t//scffnLsR3//0/DMf/9yq//GtOVu3/7tf/5699G3FwAAALqoLMuySB/zT0bEIH22BwCefvn1v0zy7eqFqzcXrD9qtVqtPoJ1XTnZ3XoREZv1dar3DA7HA8ARsxmftN0FWiT/ThtExLG2OwEstKLtDnAo7j+4s16kfIv668HaTns+F2Qs/81i9/qOadNZmueYzOvxtRX9eG5Kf1bm1IdFkvPvNfO/stM+Sssddv5PWDGY0jAt/9HOpU+dk/PvN/NvOGL5T7UVvYn5d1XOf3Cg/PvyBwAAAACABZb//n+i5eO/S4+/Kfuy1/HftTn1AQAAAAAAAACetIOO/zdojP+3y/h/AAAAsLCqz+qV3x1/eNu072Krbr9cRDzTWB7omHSxzGrb/QAAAAAAAAAAAACALhnsnMN7uYgYRsQzq6tlWVY/dc36oB53/aOu69sPXdb2kzwAAOz4+HjjWv4iYjkiLqfv+huurq6W5fLKarlarizl97OjpeVypfa5Nk+r25ZG+3hDPBiV1S9brq1XN+vz8qz25u+r7mtU9vfRsfloMXAAiIidV6P7016R/uf16mgqy2ej5Tc5HBF77P8cUfZ/9qPtxykAAABw+MqyLIv0dd4n0zH/XtudAgDmIr/+N48LqNVqtVqtfvrqunKyu/UiIjbr61TvGQzHDwBHzGZ80nYXaJH8O20QES+03QlgoRVtd4BDcf/BnfUi5VvUXw/S+O75XJCx/DeL7fXy+pOmszTPMZnX42sr+vHclP48P6c+LJKcf6+Z/5Wd9lFa7vHzL8f+TNjWOUbT8q+280QL/Wlbzr/fzL/hsPf/edmK3sT8uyrnPzhQ/n35AwAAAADAAst//z+xUMd/R4+6OTPtdfx3beIah9cXAAAAAAAAAHhS7j+4s56ve83H/78wYTnXfz6dcv6F/Dsp599r5P/VxnL92vy9tx/m/+8Hd9b/eOtfn8/T/ea/lGeK9Mgq0iOiSPdUDNL0cbbus7aG/VF1T8Oi1x+kc37K4btxLa7HRpwdW7aX/j8etp8ba696OtxuL/s77efH2ge77Xn9C2Ptw3R2UbmS20/Hevw8rsc72+1V29KM7V+e0V7OaM/59+3/nZTzH9R+qvxXU3vRmFbufdT7zH5fn066n7euffE3Zw9/c2baiv7uttVV2/dSC/3Z/j85Nopf3ty4cfr21Vu3bpyLNBm79XykyROW8x+mn93n/5d32vPzfn1/vffR6MD5L4qtGEzN/+XafLW9r8y5b23I+Y/ST87/ndQ+ef8/yvlP3/9fbaE/AAAAAAAAAAAAAAAAsJeyLLcvEX0rIi6m63/aujYTAJifYe31v0xy27zq/pzvT60+tLoo5nF/xcJsbwv1p+Wc738wfkPb269WP4m6rpzszXoREX+rr1O9Z/j1pF8GACyyTyPin213gtbIv8Py9/1V01NtdwaYq5sffPjTq9evb9y42XZPAAAAAAAAAIBHlcf/XKuN/3yqLMu7jeXGxn99O9Yed/zPfDnNwwFGpwxU3T/4Nu1lqzfq92rDjb8Y08b/Hu7O7TX+92DG/Q1ntI9mtC/NaF+e0T7xQo+anP+LtfHOT0XEycbw610Y/7U55n0X5Pxfqj2eq/y/0liunn/5+6Ocf28s/zO33v/FmZsffPjatfevvrfx3sbPLpw7d/bCxYuXLl068+616xtnd/5tsceHK+efx752Hmi35Pxz5vLvlpz/l1It/27J+X851fLvlpx/fr8n/27J+efPPvLvlpz/K6mWf7fk/L+Wavl3S87/1VTLv1ty/l9Ptfy7Jef/Wqrl3y05/9Opln+35PzPpHqf+a8cdr+Yj5x/PsJl/++WnH8+s0H+3ZLzP59q+XdLzv9CquXfLTn/11Mt/27J+X8j1fLvlpz/xVTLv1ty/t9Mtfy7Jed/KdXy75ac/7dSLf9uyfl/O9Xy75ac/xupln+35Py/k2r5d0vO/7upln+35Py/l2r5d0vO/81Uy79bHn7/vxkzZszkmbafmQAAAAAAAAAAAACApnmcTtz2NgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/2cHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdi71xi5zvp+4Gf25rUDiYGQv5O/gY1jEuNssutLfKF1MeHacCuBUOgF2/WuzYJveO0SaCSbBkokjIoq2oZKbQGhNm8q/IIXtAKUF6gVUiVoX9A3iAqVFxEKKCBVohVkqznneZ6dmZ3Lrne9njnn85Hsn/fMmTnPnHnOmf3t+jsHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgEZ3vm72U7Usy+p/8r82Z9kL6v/eOLE5X/bqGz1CAAAAYLV+lf/93C1pweFl3KlhnX95+Xe+urCwsJC9d/jPRz+3sJBumMiy0Q1Zlt8WXf3h+2qN6wSPZ+O1oYavh3psfrjH7SM9bh/tcftYj9s39Lh9vMftS3bAEhuLn8fkD7Y9/+fmYpdmt2aj+W3b29zr8dqGoaH4s5xcLb/PwuiJbC47lc1m003rF+vW8vW/fmd9W2/O4raGGra1tT5DfvbY8TiGWtjH25u2tfiY0U9em038/GePHf+7C8/e3q723A1Nj1eMc8e2+jg/EZYUY61lG9I+ieMcahjn1javyXDTOGv5/er/bh3nc8sc5/DiMNdV62s+ng3l//5uvp9GGn+sl/bT1rDsF3dlWXZ5cdit6yzZVjaUbWpaMrT4+owXM7L+GPWp9OJsZEXz9M5lzNN6ndnePE9bj4n4+t8Z7jfSYQyNL9NPPj7W8Lr/cuFa5mlUf9adjpXWObjWx0q/zME4L76bP+kn2s7B7eH5P3Z35znYdu60mYPpeTfMwW295uDQ2HA+5vQi1PL7LM7BXU3rD+dbquX1mbu7z8GpC6fPTc1/9GP3zZ0+dnL25OyZPbt2Te/Zt+/AgQNTJ+ZOzU4Xf1/j3u5/m7KhdAxsC/suHgP3tKzbOFUXvji25Px7rcfheJfjcHPLumt9HI60Prna+hyQS+d0cWy8u77Tx68MZR2Osfz12bn64zA974bjcKThOGz7ntLmOBxZxnFYX+fczuV9zzLS8KfdGDq/F6xuDm5umIOt34+0zsG1/n6kX+bgeJgX39/Z+b1gaxjvE5Mr/X5kONvU9KY6tPh0w7mnviR9vz9+IC/t5uUd9RtuGssuzs+ev//RYxcunN+VhbIuXtIwV1rn66aG55Qtma9DK56vh+de/sQdbZZvDvtq/L76X+MdX6v6Onvv7/5a5e9u7fdn09LdWShrbL33Z7t38/r+HMuyz3/r4w9/47HPv67j/qz3m5+YWv334qkvbTj/jnY4/8a+//lie+mhHh8eHSmO3+G0d0abzsfNL9VIfu6q5dt+bmp55+PR8Ge9z8e3djkfb2lZd63Px6OtTy6ej2u9ftqxOq2v53iYJ6emu5+P6+ts2b3SOTmyZE42HmN3hVoL+/9VoVNIp/CGudNp3qZtjYyMhuc1ErfQPE/3NK0/Gnqz+rae2h2+KUyjXN483XFXsf5ww/2i9ZqnEy3rrvU8TT/76jRPa71++nZtWl/P8TAvbt3TfZ7W13l67+rPnRvjPxvOnWO95uDo8Fh9zKNpEubn+2xhY5yD92fHs7PZqWwmv3Usn0+1fFuTDyzvXDkW/qz3uXJLlzm4o2XdtZ6D6X2s09yrjSx98mug9fUcD/PiyQe6z8H6Oq/ffw3fuzYtaT5X7ghL0joN37u2/nyt08+87mjZTddrroyEcX5rf/efzdbXOXVgpX1m9/10b1hyU5v91Hr8djqmZrL12U9bwjifPdB5P9XHU1/ncweXOZ8OZ1l26cMP5j/vDb9fuXTxe19t+r1Lu9/pXPrwgz994Yl/Xsn4ARh8zxdlU/Fe1/BDtOX8/h8AAAAYCLHvHwo10f8DAABAacS+P/6v8ET/DwAAAKUR+/6RUJMy9P9/3HuVLa9/du75S1lK5i8E8fa0Gx4q1osZ1+nw9cTCovryB788+9//dGl5wxvKsuyXD/1R2/W3PBTHVZgI47z6hublS3z1vmVt++gjl9J2G/PrXwiPH5/PcqdBuwjudJZlX7/lM/l2Jt53Ja9PP3Q0rw9ffuLx+jrPHSy+jvd/5iXF+n8dwr+HTxxruv8zYT/8KNTpt7TfH/F+X7nyqq3737O4vXi/2rab86f95PuLx42fk/PZx4v1437uNP5vfPqpr9TXf/SV7cd/aaj9+J8Kj/vlUP/nZcX6ja9B/et4v0+G8cftxfvd/6Vvth3/1U8V6597Y7He0VDj9neEr7e/8dm5xv31aO1Y0/PK3lSsF7c//b0/zW+Pjxcfv3X840euNO2P1vnx9L8XjzPVsn5cHrcT/WPL9uuP0zg/4/af+pOjTfu51/avPvzMy+qP27r9e1vWO/fhnfn2Fx+v+ROb/uaTn2m7vTiew/9wrun5HH5nOI7D9p98f5iP4fb/vVo8XuunKxx9Z/P5J67/hc2Xmp5P9OafF9u/+pqTed0wvnHTTS944c2XX1Hfd1n23Q3F4/Xa/sm/Pds0/i/eVuyPeHvM6Lduv5O4/fMfmTxzdv7i3Ezaq4/dkn92zluL8cTx3hLOra1fHzl74QOz5yemJ6azbKK8H6F3zb4U6k+Lcrn72gtLzqA7Hwmv5x1/+fVNd//bp+Py/3h3sfzKW4r3rXvCep8NyzeH129l21/qyTtvy4/v2tNhhAtLPy94NbZu//GBZa0Ynn/r9wVxvp976Qfy/VC/LX/fiMf1Ksf/g5nicb4W9utC+GTmbbctbq9x/fjZCFfeVRzvq95/4TQXX9e/D6/3235UPH4cV3y+Pwjfx3xzS/P5Ls6Pr10aan38/FM8LofzSXa5uD2uFff3leduazu8+Dkk2eXb86//LD3O7St6mp3Mf3R+6tTcmYuPTl2Ynb8wNf/Rjx05ffbimQtH8s/yPPLBLnf9q3uyLFs8P23Kz08zs/v2ZvnZ6mxRrrNVjD+32vGfe+T4zP7pu2dmTxy7eOLCI+dmz588Pj9/fHZm/u5jJ07MfqTX/edmDu3afXDP/t2TJ+dmDh04eHDPwcm5M2frwygG1cO+6Q9Nnjl/JL/L/KG9B3c98MDe6cnTZ2dmD+2fnp682Ov++XvTZP3efzh5fvbUsQtzp2cn5+c+Nnto18F9+3b3/DTA0+dOzE9Mnb94Zuri/Oz5qeK5TFzIF9ff+3rdn3Ka/8/i+9lWteKD+LJ33LsvfT5r3Zc/3vGhilVaPkD02fBZNN9+0bkDy/k69v2joSZl6P8BAACAXOz7x0JN9P8AAABQGrHv3xBqov8HAACA0oh9/3io6b8EVKT/L13+f8ulZW1f/l/+v3F/yf9XLP//rn7L/xfnC/n/tbHa/L38fyD/L/+f8vNjWZatT37++oxf/l/+nxup3/L/se/fmGV+/w8AAAAlFfv+TaEm+n8AAAAojdj33xRqov8HAACA0oh9/wtCTSrS/8v/y//L/8v/y/+33778/2CS/+9O/r+T4hOh5f/np7IbmJ9fi/GvMP9/eS3HfwPy/xsbv5D/px/1W/4/9v0vDDWpSP8PAAAAVRD7/ptDTfT/AAAAUBqx778l1ET/DwAAAKUR+/7NoSYV6f/l/1eV/0+ZK/n/5vHL/zeT/w/zQf5f/n8dyP93J//fg/z/Db1+/qCP3/X/5f9Zqt/y/7Hvf1GoSUX6fwAAACit0cV/xr7/xaEm+n8AAADoPyPXdrfY978k1GRJ/3+NGwAAAABuuNj335q1BMEr8vt/+X/X/5f/l/+X/2+//eXn/4cz+f/+If/fnfx/D/L/8v/Vzf+PZ/L/XAf9lv/P+/5sPHtpqElF+n8AAACogtj33xZqov8HAACA0oh9//8LNdH/AwAAQGnEvn9LqElF+n/5/9Lk/3/R+NLJ/8v/d9u+/L/r/5eZ/H938v89yP/L/1c3/+/6/1wX/Zb/j33/7aEmFen/AQAAoApi339HqIn+HwAAAEoj9v3/P9RE/w8AAAClEfv+raEmFen/5f/7PP8fk6Ou/y//L//fl/n/cfn/viP/3538fw/y//L/8v/y/6ypfsv/x77/ZaEmFen/AQAAoApi3//yUBP9PwAAAJRG7PtfEWqi/wcAAIDSiH3/RKhJRfr/leT/a5fl/zu5ztf/H1vG9f+byP/L/3fbvvy/6/+Xmfx/d/L/Pcj/y//L/8v/s6b6Lf8f+/47Q00q0v8DAABAFcS+f1uoif4fAAAASiP2/XeFmuj/AQAAoDRi37891KQi/b/r/w9E/j+T/5f/l/+X/5f/Xx75/+7k/3uQ/5f/l/+X/2dNrXH+f6h14Urz/7Hvf2WoSUX6fwAAAKiC2PffHWqi/wcAAIDSiH3/PaEm+n8AAAAojdj37wg1qUj/L/8v/y//L/8v/99++/L/g0n+vzv5/x7k/+X/5f/l/1lT/Xb9/9j3vyrUpCL9PwAAAFRB7Pt3hpro/wEAAKA0Yt9/b6iJ/h8AAABKI/b9k6EmFen/5f/l/+X/5f/l/9tvX/5/MMn/dyf/34P8v/y//L/8P2uq3/L/se+/L9SkIv0/AAAAVEHs++8PNdH/AwAAQGnEvn8q1ET/DwAAAKUR+/7pUJOK9P/y//L/8v/y/yvK/79i8XE75v/jAvn/JvL/60P+vzv5/x7k/+X/b3j+f1T+n1Lpt/x/7Pt3hZpUpP8HAACAKoh9/+5QE/0/AAAAlEbs+/eEmuj/AQAAoDRi37831KQi/b/8v/y//L/8v+v/t9++/P9gkv/vbu3z//Epyv/L/8v/u/6//D9L9Vv+P/b9D4SaVKT/BwAAgCqIff++UBP9PwAAAJRG7Pv3h5ro/wEAAKA0Yt9/INSkIv2//L/8v/y//L/8f/vty/8PJvn/7lz/v4eW/P9YeF+S/5f/H4T8f31uyf/Tb/ot/x/7/oOhJhXp/wEAAKAKYt//6lAT/T8AAACURuz7fy3URP8PAAAApRH7/l8PNalI/y//L/8v/y//3+/5/zH5f/n/FZD/707+vwfX/5f/H+D8v+v/04/6Lf8f+/5DoSYV6f8BAACgCmLf/xuhJvp/AAAAKI3Y978m1ET/DwAAAKUR+/7DoSYV6f/l/9cp/x8Xyv/L/8v/u/6//P91Jf/fnfx/D/L/8v/y//L/rKl+y//Hvv+1oSYV6f8BAACgCmLf/2Coif4fAAAASiP2/a8LNdH/AwAAQGnEvv/1oSYV6f/l/13//8bn/0ebxi7/v3g/+f+C/L/8/0rI/3cn/9+D/L/8v/y//D9rqt/y/7Hvf0OoSUX6fwAAAKiC2Pe/MdRE/w8AAAClEfv+N4Wa6P8BAACgNGLf/+ZQk4r0//L/8v83Pv/v+v/y/wX5f/n/tSD/391g5v/ru1H+P5P/7/vxy//L/7NUv+X/Y9//m6EmFen/AQAAoApi3/9QqIn+HwAAAEoj9v1vCTXR/wMAAEBpxL7/raEmFen/5f/l/+X/5f/l/9tvX/5/MMn/dzdg+f9f3RyWu/5/Qf6/v8e/0vz/SMvX1yX//8NO+f+FDa33l//neui3/H/s+98WalKR/h8AAACqIPb9bw810f8DAABAacS+/x2hJvp/AAAAKI3Y9/9WqElF+n/5//o4FtPL8v/y//kC+X/5f/n/gSX/392A5f/D9f/l/yP5//4ev+v/y/+zVL/l/2Pf/85Qk4r0/wAAAFAFse9/ONRE/w8AAAClEfv+d4Wa6P8BAACgNGLf/+5Qk4r0//L/rv8v/y//L//ffvvy/4NpbfL/w/L/8v/y//L//ZH//y/5fwZbv+X/Y9//SKhJRfp/AAAAqILY978n1ET/DwAAAKUR+/7fDjXR/wMAAEBpxL7/vaEmFen/5f8HJf8/If+/wvz/WFgm/y//L/9fLa7/393W7T/unKxsJP8v/y//3x/5f9f/Z8D1W/4/9v3vCzVZfv8/vuw1AQAAgBsi9v2/E2pSkd//AwAAQBXEvv93Q030/wAAAFAase//vVCT0vX/n2u7VP5/UPL/rv+fuf6//H/L85H/l/9vZ/3y//HMM3D5f9f/70b+X/5f/r9j/n+ox/3l/2mn3/L/se///VCT0vX/AAAAUF2x739/qIn+HwAAAAZCu/+T3Sr2/UdCTfT/AAAAUBqx7z8aalKR/l/+X/5f/r9P8/9/se1fv/+dtx/dJf8v/y//vyLrev3/+sE/eNf/l//vRv5f/l/+3/X/WVP9lv+Pff+xUJPFxu+tLvAPAAAAgy32/X8QalKR3/8DAABAFcS+/3ioif4fAAAASiP2/TOhJhXp/+X/5f/l//s0/z/A1/+P+2OQ8v+TGwYo/x9PuvL/ba1r/v89izlx+f+V5v/H2i5tzf/X5P+byP+vePzfzrJM/l/+nxuo3/L/se+fDTWpSP8PAAAAVRD6/qETRV28Qf8PAAAApRH7/pOhJvp/AAAAKI3Y938g1KQi/b/8v/y//L/8v+v/t99+3+b/Xf+/K/n/7von/9+e6//L/w/y+OX/5f9Zqt/y/7Hvnws1qUj/DwAAAFUQ+/4Phpro/wEAAKA0Yt//oVAT/T/A/7F3H02W1ecdx2/jpugpypTLGy+8wHu/BBZmbb8AL9h4YVe5XDbYxjkxOCehnAOSUEABBZAQSkgoC5SQUBaSUM5CKCOpRjXdz/NMh9Pndk/f2/fc///zWfhhGnruxeoCfjTfOQAA0Izc/X8at3Sy//X/+n/9v/5f/z/8+vr/9aT/H6f/n0P/r//X/+v/Waip9f+5+/8sbulk/wMAAEAPcvdfG7fY/wAAANCM3P3XxS32PwAAADQjd/+fxy1ruf83Hj5uJaj/1/832///jv7/sNfX/+v/W6b/H6f/n+O0+v8rZvr/JVj1+z9B///ITP9Po6bW/+fu/4u4ZS33PwAAADAkd/9fxi32PwAAADQjd//1cYv9DwAAAM3I3f9XcUsn+39f/78x67P/z4xX/99S/3+h19+c6f/3vL7+X//fstPt/288/1c+/b/+3/P/g/7f8//1/+w3tf4/d/9fxy2d7H8AAADoQe7+v4lb7H8AAABoRu7+v41b7H8AAABoRu7+v4tbOtn/E3z+//b/CJ7/v/Nj/f9C+n/P/9/3+vp//X/L+n7+/9bcP6Kn/v/6By6/9pE7f/Ou47y+/v/i+/kz+n/9v/6fAVPr/3P3/33c0sn+BwAAgB7k7v+HuMX+BwAAgGbk7v/HuMX+BwAAgDV0ZvCjufv/KW7pZP9PsP/feV/6/236/1Ps/7f0//p//X8L+u7/5+up/7+Y1++k/x/+h+IJ9PMntbD3f8tM/6//Z0Gm1v/n7v/nuKWT/Q8AAAA9yN3/L3GL/Q8AAADTNfQfYo/I3X9D3GL/AwAAQDNy95+NWzrZ//r/5ff/v9D/r0f/7/n/+n/9fxP0/+P0/3P00f8fSv/v+f/6fxZtav1/7v4b45ZO9j8AAAD0IHf/v8Yt9j8AAAA0I3f/v8Ut9j8AAAA0I3f/v8ctnex//b/n/+v/9f/6/+HX1/+vJ/3/OP3/HPr/k/bzl+r/9f/6f3Y7Zv//6MhfthfS/+fu/4+4pZP9DwAAAD3I3f+fcYv9DwAAAM3I3f9fcYv9DwAAAM3I3f/fcUsn+1//r//X/5+w/7/iws/TXf9/8Etvm/5/mP7/dOj/x02m/9/YHPyw/n/t+3/P/9f/6//ZY2rP/8/d/z9xSyf7HwAAAHqQu/9/45aR/X/sf5kPAAAArFTu/v+LW3z/HwAAANZeVme5+/8/bulk/+v/9f/6f8//9/z/4dcf6//v2vX+9P/Tov8fN5n+/xD6f/3/Or9//b/+n4Om1v/n7n9M3NLJ/gcAAIAe5O6/KW6x/wEAAKAZufsfG7fY/wAAANCM3P2Pi1s62f/D/f+F36//Pxr9/973r/8f/vpYVP+fP6P+f7T/v9rz//uk/x+n/59D/6//1/8f1v+fmff5+n+GTK3/z93/+Lilk/0PAAAAPcjd/4S4xf4HAACAZuTuf2LcYv8DAABAM3L3Pylu6WT/e/6//l//v379v+f/71jl8/9np97/b+r/j0j/P07/P4f+X/+v/x9//v/IrwKg/2fI1Pr/3P1Pjls62f8AAADQg9z9T4lb7H8AAABYD7v/24H9/0FpyN3/1LjF/gcAAIBm5O5/WtzSzv4ffVan/l//r//X/+v/h19/Wv2/5/8flf5/nP5/Dv3/Mvr5zcb6/5sP+/wp9P83LLv/H6H/Z8ie/v/uCx9fVf+fu//pcUs7+x8AAAC6l7v/GXGL/Q8AAADNyN3/zLjF/gcAAIBm5O5/VtzSyf5fev8/8qsP6P/1//p//b/+X/+/aPr/cfr/OfT/nv/v+f/6fxZqT/+/y6r6/9z9z45bOtn/AAAA0IPc/c+JW+x/AAAAaEbu/pvjFvsfAAAAmpG7/7lxSyf73/P/9f/6f/2//n/49fX/6+lE/f0l+v+i/9f/6//1//p/FmBq/X/u/ufFLZ3sfwAAAOhB7v7nxy32PwAAADQjd/8tcYv9DwAAAM3I3f+CuKWT/a//X27/nx/X/+v/Z/p//b/+/1R0+/z/jaG/Ex10SP9/3x+f/b29H9H/6//1//p//T9H9Gsjv28S/f+5C/90mbv/hXFLJ/sfAAAAepC7/0Vxi/0PAAAAzcjd/+K4xf4HAACAZuTuvzVuOeb+H2sehj185bE/ZQn0/57/r//X/+v/h19f/7+euu3/j8jz/+fQ/+v/9f/6fxZqEv3/rh/n7n9J3OL7/wAAANCM3P0vjVvsfwAAAGhG7v6XxS32PwAAADQjd//L45ZO9r/+X/+v/9f/6/+HX1//v570/+P0/3OsU/9/6wn6/83hD6+6nz+pVb9//b/+n4Om1v/n7r8tbulk/wMAAEAPcve/Im6x/wEAAKAZuftfGbfY/wAAANCM3P2vils62f/6f/2//l//r/8ffn39/3rS/4/T/89ms9tH3sBQ/3/usmn2/57/P7n3r//X/3PQ1Pr/3P2vjls62f8AAADQg9z9t8ct9j8AAAA0I3f/HXGL/Q8AAADNyN3/mrilk/2v/9f/6//1/wvo//f0tfr/Yfr/06H/H6f/n2Odnv+v/5/c+9f/6/85aGr9f+7+18Ytnex/AAAA6EHu/jvjFvsfAAAAmpG7/3Vxi/0PAAAAzcjdf1fc0sn+1//r//X/+n/P/x9+ff3/elpe/z/T/+v/9f9z6P/1//p/9pta/5+7//VxSyf7HwAAAHqQu/8NcYv9DwAAAM3I3f/GuMX+BwAAgGbk7n9T3NLJ/tf/6/+3+/l4A/p//f9sZf3/+b8G6f/1/yfn+f/j9P9z6P/1//p//T8LNdz/37Cy/j93/5vjlk72PwAAAPQgd//dcYv9DwAAAM3I3f+WuMX+BwAAgGbk7n9r3NLJ/tf/6//3Pv9/NtP/6/89/3/HKfT/WzP9/8Lp/8fp/+fQ/7fZ/18ya6j/P3Po5+v/maKpPf8/d/89cUsn+x8AAAB6kLv/bXGL/Q8AAADNyN3/9rjF/gcAAIBm5O5/R9zSyf7X/+v/9/b/nv+//QH9v/7f8//Xlv5/nP5/Dv1/m/2/5//r/1mZqfX/ufvfGbd0sv8BAACgB7n73xW32P8AAADQjNz9745b7H8AAABoRu7+98Qtnex//b/+X/+v/9f/D7++/n896f/H6f/n0P/r//X/+n8Wamr9f+7+98Ytnex/AAAA6EHu/nvjFvsfAAAAmpG7/764xf4HAACAZuTuf1/c0sn+1//r//X/69n/b+n/B/v//FrQ//drKv3/VVf97v36f/2//l//r//X//duav1/7v73xy2d7H8AAADoQe7+D8Qt9j8AAAA0I3f/B+MW+x8AAACakbv/Q3FLJ/v/YP9/6WynUN0x1P9Ho6b/30X/v/f96/+Hvz48/9/z//X/yzeV/t/z/y/u/ev/9f/r/P6P1f//1sHP1//Toqn1/7n7749bOtn/AAAA0IPc/R+OW+x/AAAAaEbu/o/ELfY/AAAANCN3/wNxSyf73/P/9f+n1f+f/1PS/+v/9f/6/2XT/4/T/8+h/9f/e/7/dX/4K/p/Fmdq/X/u/o/GLZ3sfwAAAOhB7v6PxS32PwAAADQjd//H4xb7HwAAAJqRu/8TcUsn+1//r//3/P8l9P+bw18f+n/9v/5/+fT/4/T/Zf+f2o5++v+toQ+uup8/qVW//yX1//dc7vn/rLGp9f+5+z8Zt3Sy/wEAAKAHufs/FbfY/wAAANCM3P2fjlvsfwAAAGhG7v7PxC2d7H/9f+P9//kfdN///4Hn/+97ff2//r9l+v/8O/ow/f8c/fT/g1bdz6/7+2/m+f/6fxZoav1/7v4H45ZO9j8AAAD0IHf/Z+MW+x8AAACakbv/c3GL/Q8AAADNyN3/+bilk/2v/2+8/9/3/P+NWY/9/wqe/3/I14f+X/+v/18+/f84/f8c+n/9v/5f/89CTa3/z93/0MZml/sfAAAA1tXv//afPHjUP/ah7f+7NftC3HL17NwRv40NAAAATNz53b+xOZt9cftHvv8PAAAALcrd/6W4pZP9r//vq//v8/n/S+z/z7+w/l//r/+fFP3/uBX0/1vHeX/6f/3/Or9//b/+n4Om1v/n7v9y3LJr+G0e+88SAAAAmJLc/V+JWzr5/j8AAAD0IHf/V+OWA/vfLwcIAAAA6yp3/9filk6+/6//n3j/P1tS/x9/nP5/h+f/6/+HXl//v570/+NO2P+f2/D8f/3/CP2//l//z35T6/9z9389bulk/wMAAECj9vwbhdz934hb7H8AAABoRu7+b8Yt9j8AAAA0I3f/t+KWTva//v/U+/9M1Zf4/P8z9Vue/995/3/T1uDr6//1/y3T/49bwfP/9f97f379/xLtev+X6f/1/0zD1Pr/3P3fjls62f8AAADQg9z934lb7H8AAABoRu7+78Yt9j8AAAA0I3f/w+fPr/a3/1fS/8dP0mn/f7zn/x+x///1K/a+9tzn/+v/++j/D3n9dvr/37j87L3X/NEdt+n/ueA0+//8WtD/6//1/zsm1P97/r/+n4lYfP+/ueeDx+3/t3f/bGv2vbilk/0PAAAAPcjd/0jcYv8DAABAM3L3fz9usf8BAACgGbn7fxC3dLL/Pf+/jf5/v3Xs//P/1yvo/89edP9/ZjabraT/z6a49/7f8//1/wd5/v84/f8c+n/9v/5f/89CLb7/3/vB4/b/uft/GLd0sv8BAACgB7n7fxS35P7fOPa/ugcAAAAmJnf/j+MW3/8HAACAZuTu/0nc0sn+1//r/6fS/yfP/7/weW09//+ailP77P+vrN/S/y+X/n+c/n8O/b/+X/+v/2ehptb/5+7/adzSyf4HAACAHuTufzRusf8BAACgGbn7fxa32P8AAADQjNz9P49bOtn/+v9W+/8s4vX/+v+p9P+e/+/5/6dD/z9O/z+H/n/N+//4gpnp//X/TMXU+v/c/b8MAAD//zPUZTo=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000140)=""/48, 0x30)

7.425272558s ago: executing program 8 (id=4130):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="60000000020601046c0001000000000000000000050005000a000000050001000600000005000400000000000900020073797a300000000014000300686173683a6970"], 0x60}}, 0x0)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)

6.606182731s ago: executing program 7 (id=4133):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r0, &(0x7f0000000840)="a6", 0x1, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x8}, 0x1c)
shutdown(r0, 0x1)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/172, 0xac, 0x1, 0x0}, &(0x7f0000000380)=0x40)

6.326718748s ago: executing program 7 (id=4134):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fgetxattr(r1, &(0x7f0000000180)=@random={'trusted.', 't\x00'}, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_x25_SIOCDELRT(r5, 0x890c, &(0x7f0000000640)={@null, 0x7, 'geneve1\x00'})
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000001c0)='usrquota')
setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000000c0)={0x9, {{0x2, 0x4e22, @local}}, 0x0, 0x38}, 0x90)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0)
write$tcp_mem(r6, &(0x7f0000000000)={0xf, 0x2d, 0x0, 0x3a, 0x2, 0x2c}, 0x48)
faccessat2(0xffffffffffffff9c, 0x0, 0x7, 0x1100)

4.499575868s ago: executing program 9 (id=4136):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
listen(r4, 0x3)
socket$inet(0xa, 0x801, 0x84)
listen(r4, 0xfffffffc)
r5 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r5, &(0x7f0000000f40)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000500)='p', 0x1}], 0x1}}], 0x1, 0x20000004)
r6 = socket$inet(0xa, 0x801, 0x84)
listen(r6, 0x8)
capset(0x0, 0x0)
listen(0xffffffffffffffff, 0xfff)
r7 = socket$netlink(0x10, 0x3, 0x4)
listen(r5, 0x7)
writev(r7, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101", 0x32}], 0x1)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'veth0_virt_wifi\x00', {0x1}})

4.498992148s ago: executing program 4 (id=4137):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000)
mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x2208004, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0xffffffffffffffff, <r4=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000240), &(0x7f0000000280)}, 0x20)
sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000000), 0xc, &(0x7f00000007c0)={&(0x7f00000003c0)={0x38c, 0x0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xdc}]}, @TIPC_NLA_MON={0x4}, @TIPC_NLA_NODE={0xbc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "4db0a73d37585686480cc50773ebd5d8bbf0e3c9e8"}}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "06c8166cae49997f0753015738321aef171bd0d90d84c143754740336e7e"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x100}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1ff}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xd5}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8}]}, @TIPC_NLA_NODE={0x1a0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0xe8, 0x3, "45e53967d715cbd58fd3e12851fa6c083f489d49f79687b4264ea3ac0a4fc4adabb6856273600cb4b9d2a8e31fcd5d97d582275ffd6fe45e4ffaee84bbfd19f5476830bcdfac25d767869a71705c248355cd95cea6b14fcf031e3a2412f8f6998ea2b8a8025f46db0c2bb3a6ac4d5a4d1a85165336a24256820ed4cd9dd6be64db02bc18812591c5fc08c7eba4887f5a2d9908ffa26461e823c2876f351b5e59e8cd4c95687558b80b7037c3363cc250b5d53cf4738920c1bed396d256cc21e2ba0f98c3cf80972219e2ccfa122f0ee1e97621bfd06ce0b3f149f76d244cc98a059a3219"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x100}, @TIPC_NLA_NODE_ID={0x9d, 0x3, "583d282fe65e3cd9fad23e8c936bb241574f34b130175460b609dd9aa21f672f102d6a2f1dc24133970a3721d23744a9e563dec0f0c7dac6d9e47d674c1cc75b23cd03f8e42d37c357a6654e57b0b4b8a9cb8e14f8dd8898e5fd828c735a4106a36a947213c7026e334be6df26c4ea30c616b19e6572163b591e86d51e9187f80e0561944a9ab6ededb7f27db31c0259c34bedf54165f597f6"}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7fff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9d3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth0_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffff1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xd}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xf2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xa85}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x43}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xd}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x38c}, 0x1, 0x0, 0x0, 0x800}, 0x20000000)
sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv4_delrule={0x24, 0x21, 0x1, 0x70bd2b, 0x25dfdbdb, {0x2, 0x0, 0x0, 0xdd, 0x0, 0x0, 0x0, 0x1, 0x1000c}, [@FRA_GENERIC_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e21, 0x4e24}}]}, 0x24}}, 0x0)
mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000300)={[], [{@uid_eq}, {@obj_user={'obj_user', 0x3d, 'cgroup\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/bus/usb/00#/00#\x00'}}, {@seclabel}, {@obj_role={'obj_role', 0x3d, '\\.'}}]})
mkdirat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup\x00', 0x108)
socket(0x84000000002a, 0x1, 0xff)
r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01)
r6 = syz_open_dev$usbfs(&(0x7f0000000180), 0x5, 0x20182)
ioctl$USBDEVFS_ALLOW_SUSPEND(r6, 0x5522)
readahead(r3, 0x9, 0x2)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"})
ioctl$USBDEVFS_ALLOW_SUSPEND(r5, 0x5522)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r7, 0x6, 0x1, &(0x7f0000000340)={0x4003, 0x9, 0x4010, 0x4, 0x91, 0x3, 0x1}, 0xc)

1.159229529s ago: executing program 9 (id=4138):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000002060108000000000000000000000000050005000a000040050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970000c0007800800064000"], 0x58}, 0x1, 0x0, 0x0, 0x4000010}, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
socket$netlink(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000000706012800000000000000000a000004050001000600"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80)

760.02123ms ago: executing program 9 (id=4139):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x100d0)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x306)

481.665387ms ago: executing program 9 (id=4140):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, 0x0, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x4e, &(0x7f0000000240)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x40, 0x210, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300, {[@rr={0x7, 0xf, 0xf, [@empty, @empty, @broadcast]}]}}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x4, 0x9, @remote, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0)
setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe428116085f06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c)

261.329343ms ago: executing program 9 (id=4141):
syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1214884, &(0x7f00000009c0)={[{@codepage={'codepage', 0x3d, 'cp437'}}, {@umask}, {@dir_umask={'dir_umask', 0x3d, 0x1}}, {@creator={'creator', 0x3d, "e5cb853d"}}, {}, {}, {@part={'part', 0x3d, 0xfff}}, {@part={'part', 0x3d, 0x8}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@file_umask={'file_umask', 0x3d, 0x1ff}}]}, 0x7, 0x318, &(0x7f00000004c0)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
getdents64(r0, &(0x7f00000000c0)=""/59, 0x3b)

0s ago: executing program 9 (id=4142):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
preadv2(0xffffffffffffffff, &(0x7f0000000b00), 0x0, 0x4, 0x3ff, 0x0)
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x28, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x7ff, 0x70}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x91}, 0x24044884)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x850)

kernel console output (not intermixed with test programs):

612863][T10633] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1104.620961][T10633] usb 6-1: Product: syz
[ 1104.625212][T10633] usb 6-1: Manufacturer: syz
[ 1104.629937][T10633] usb 6-1: SerialNumber: syz
[ 1104.666501][T10633] usb 6-1: config 0 descriptor??
[ 1104.682428][T10633] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[ 1104.696017][ T2904] bridge_slave_0: left allmulticast mode
[ 1104.701696][ T2904] bridge_slave_0: left promiscuous mode
[ 1104.713947][T10633] usb 6-1: setting power ON
[ 1104.718818][T10633] dvb-usb: bulk message failed: -22 (2/0)
[ 1104.735327][T10633] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1104.751317][ T2904] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1104.754469][T10633] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[ 1104.791360][T10633] usb 6-1: media controller created
[ 1104.860841][T10633] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1104.880102][T14173] dvb-usb: bulk message failed: -22 (3/0)
[ 1104.889099][T14173] dvb-usb: bulk message failed: -22 (3/0)
[ 1104.936672][T10633] usb 6-1: selecting invalid altsetting 6
[ 1104.943116][T10633] usb 6-1: digital interface selection failed (-22)
[ 1104.959008][T10633] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[ 1105.566634][T10633] usb 6-1: setting power OFF
[ 1105.571425][T10633] dvb-usb: bulk message failed: -22 (2/0)
[ 1105.809441][T14143] Bluetooth: hci0: command tx timeout
[ 1105.952908][T10633] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[ 1105.963117][T10633] (NULL device *): no alternate interface
[ 1106.090258][T10633] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[ 1106.141730][T10633] usb 6-1: USB disconnect, device number 36
[ 1106.364657][T10784] usb 4-1: new high-speed USB device number 52 using dummy_hcd
[ 1106.561891][T10784] usb 4-1: device descriptor read/64, error -71
[ 1106.871342][T10784] usb 4-1: new high-speed USB device number 53 using dummy_hcd
[ 1107.054148][T10784] usb 4-1: device descriptor read/64, error -71
[ 1107.184929][T10784] usb usb4-port1: attempt power cycle
[ 1107.603994][T10784] usb 4-1: new high-speed USB device number 54 using dummy_hcd
[ 1107.774616][T10784] usb 4-1: device descriptor read/8, error -71
[ 1107.865387][T14143] Bluetooth: hci0: command tx timeout
[ 1107.942741][ T2904] team0 (unregistering): Port device team_slave_1 removed
[ 1108.051480][ T2904] team0 (unregistering): Port device team_slave_0 removed
[ 1108.064136][T10784] usb 4-1: new high-speed USB device number 55 using dummy_hcd
[ 1108.111573][T10784] usb 4-1: device descriptor read/8, error -71
[ 1108.119168][ T2904] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1108.181212][ T2904] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1108.234164][T10784] usb usb4-port1: unable to enumerate USB device
[ 1108.303965][T10633] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[ 1108.543927][T10633] usb 5-1: Using ep0 maxpacket: 8
[ 1108.551525][T10633] usb 5-1: config index 0 descriptor too short (expected 30, got 18)
[ 1108.570782][T10633] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[ 1108.586857][T10633] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1108.602507][T10633] usb 5-1: Product: syz
[ 1108.612069][T10633] usb 5-1: Manufacturer: syz
[ 1108.622253][T10633] usb 5-1: SerialNumber: syz
[ 1108.631899][T10633] usb 5-1: config 0 descriptor??
[ 1108.666255][T10633] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[ 1108.676373][T10633] usb 5-1: setting power ON
[ 1108.680955][T10633] dvb-usb: bulk message failed: -22 (2/0)
[ 1108.692006][T10633] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1108.703656][T10633] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[ 1108.712469][T10633] usb 5-1: media controller created
[ 1108.727407][ T2904] bond0 (unregistering): Released all slaves
[ 1108.743662][T10633] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1108.768327][T10633] usb 5-1: selecting invalid altsetting 6
[ 1108.775607][T10633] usb 5-1: digital interface selection failed (-22)
[ 1108.782320][T10633] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[ 1108.809152][T10633] usb 5-1: setting power OFF
[ 1108.815587][T10633] dvb-usb: bulk message failed: -22 (2/0)
[ 1108.821361][T10633] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[ 1108.835551][T10633] (NULL device *): no alternate interface
[ 1108.858890][T10633] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[ 1108.898029][T10633] usb 5-1: USB disconnect, device number 40
[ 1108.924002][T14203] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2303'.
[ 1109.179714][T14141] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1109.206431][T14141] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1109.251862][T14141] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1109.285189][T14231] loop3: detected capacity change from 0 to 2048
[ 1109.296937][T14141] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1109.398226][T14231] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[ 1109.449417][T14231] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1109.498741][T14236] loop5: detected capacity change from 0 to 512
[ 1109.639526][T14236] EXT4-fs error (device loop5): ext4_orphan_get:1404: inode #15: comm syz.5.2313: inode has both inline data and extents flags
[ 1109.663541][T14141] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1109.717521][T14236] EXT4-fs error (device loop5): ext4_orphan_get:1409: comm syz.5.2313: couldn't read orphan inode 15 (err -117)
[ 1109.745055][T14141] 8021q: adding VLAN 0 to HW filter on device team0
[ 1109.772484][T14236] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1109.813209][ T2904] IPVS: stop unused estimator thread 0...
[ 1109.849015][ T2878] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1109.856379][ T2878] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1109.928846][ T2878] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1109.936128][ T2878] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1109.944175][T14143] Bluetooth: hci0: command tx timeout
[ 1110.042380][T14236] loop5: detected capacity change from 512 to 64
[ 1110.104167][T14249] syz.5.2313: attempt to access beyond end of device
[ 1110.104167][T14249] loop5: rw=14337, sector=72, nr_sectors = 2 limit=64
[ 1110.151463][T14141] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1110.153836][T14249] Buffer I/O error on dev loop5, logical block 36, lost sync page write
[ 1110.214449][T14249] EXT4-fs error (device loop5): ext4_handle_dirty_dirblock:440: inode #2: block 36: comm syz.5.2313: IO error syncing itable block
[ 1110.266686][T14141] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1110.337207][T14249] EXT4-fs error (device loop5) in add_dirent_to_buf:2220: IO failure
[ 1110.637072][T14249] EXT4-fs error (device loop5): ext4_check_bdev_write_error:225: comm syz.5.2313: Error while async write back metadata
[ 1110.879123][ T7256] syz-executor: attempt to access beyond end of device
[ 1110.879123][ T7256] loop5: rw=14337, sector=72, nr_sectors = 2 limit=64
[ 1110.984259][ T7256] Buffer I/O error on dev loop5, logical block 36, lost sync page write
[ 1111.003142][ T7256] EXT4-fs error (device loop5): ext4_handle_dirty_dirblock:440: inode #2: block 36: comm syz-executor: IO error syncing itable block
[ 1111.093930][ T7256] EXT4-fs error (device loop5) in ext4_delete_entry:2800: IO failure
[ 1111.313717][T13485] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1111.440885][T13485] syz_tun (unregistering): left promiscuous mode
[ 1111.496688][T14141] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1112.034769][T14281] loop4: detected capacity change from 0 to 32768
[ 1112.108444][T14141] veth0_vlan: entered promiscuous mode
[ 1112.161548][T14281] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1112.307893][T14281] XFS (loop4): Ending clean mount
[ 1112.334776][T14281] XFS (loop4): Quotacheck needed: Please wait.
[ 1112.354414][T14141] veth1_vlan: entered promiscuous mode
[ 1112.408457][T14141] veth0_macvtap: entered promiscuous mode
[ 1112.436859][T14141] veth1_macvtap: entered promiscuous mode
[ 1112.565326][T14281] XFS (loop4): Quotacheck: Done.
[ 1112.688037][   T27] audit: type=1800 audit(1777662959.370:14): pid=14281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2323" name="file1" dev="loop4" ino=9286 res=0 errno=0
[ 1112.714347][T14141] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1112.799804][ T6464] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1112.860544][T14141] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1113.256779][T14141] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1113.410518][T14141] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1113.522864][T14141] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1113.633998][T14141] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1113.932468][ T1040] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1113.959764][ T1040] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1114.394612][ T5783] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1114.420187][ T5783] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1114.422379][T10776] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1114.446368][ T5783] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1114.483640][T10776] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1114.492119][ T5783] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1114.503287][ T5783] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 1114.520360][ T5783] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1114.791318][T14327] loop4: detected capacity change from 0 to 128
[ 1114.823735][T14327] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1114.880428][T14327] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1114.944536][T10628] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[ 1115.112412][ T5981] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1115.123993][T10628] usb 4-1: device descriptor read/64, error -71
[ 1115.336041][T14342] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2335'.
[ 1115.348470][T14342] netlink: 'syz.2.2335': attribute type 1 has an invalid length.
[ 1115.365778][T14342] vxlan0: entered promiscuous mode
[ 1115.424643][T10628] usb 4-1: new high-speed USB device number 57 using dummy_hcd
[ 1115.614089][T10628] usb 4-1: device descriptor read/64, error -71
[ 1115.715835][T14315] chnl_net:caif_netlink_parms(): no params data found
[ 1115.738220][T10628] usb usb4-port1: attempt power cycle
[ 1115.830902][ T2878] bridge0: left promiscuous mode
[ 1115.852268][ T2878] hsr_slave_0: left promiscuous mode
[ 1115.861373][ T2878] hsr_slave_1: left promiscuous mode
[ 1115.880840][ T2878] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1115.893667][ T2878] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1115.917198][ T2878] bridge_slave_1: left allmulticast mode
[ 1115.935703][ T2878] bridge_slave_1: left promiscuous mode
[ 1115.958885][ T2878] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1115.979165][ T2878] bridge_slave_0: left allmulticast mode
[ 1115.998706][ T2878] bridge_slave_0: left promiscuous mode
[ 1116.020225][ T2878] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1116.214373][T10628] usb 4-1: new high-speed USB device number 58 using dummy_hcd
[ 1116.265219][T10628] usb 4-1: device descriptor read/8, error -71
[ 1116.533866][ T1287] ieee802154 phy0 wpan0: encryption failed: -22
[ 1116.540410][ T1287] ieee802154 phy1 wpan1: encryption failed: -22
[ 1116.603942][T10628] usb 4-1: new high-speed USB device number 59 using dummy_hcd
[ 1116.665246][T10628] usb 4-1: device descriptor read/8, error -71
[ 1116.674143][T14143] Bluetooth: hci2: command tx timeout
[ 1116.800756][T10628] usb usb4-port1: unable to enumerate USB device
[ 1117.027425][ T2878] team0 (unregistering): Port device team_slave_1 removed
[ 1117.085291][ T2878] team0 (unregistering): Port device team_slave_0 removed
[ 1117.141735][ T2878] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1117.229363][ T2878] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1117.933049][ T2878] bond0 (unregistering): Released all slaves
[ 1117.941456][T14394] sd 0:0:1:0: PR command failed: 1026
[ 1117.954091][T14394] sd 0:0:1:0: Sense Key : Illegal Request [current] 
[ 1117.961238][T14394] sd 0:0:1:0: Add. Sense: Invalid command operation code
[ 1118.200933][T14315] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1118.209603][T14315] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1118.221945][T14315] bridge_slave_0: entered allmulticast mode
[ 1118.230102][T14315] bridge_slave_0: entered promiscuous mode
[ 1118.362426][T14315] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1118.386404][T14315] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1118.467242][T14315] bridge_slave_1: entered allmulticast mode
[ 1118.602394][T14315] bridge_slave_1: entered promiscuous mode
[ 1118.754239][T14143] Bluetooth: hci2: command tx timeout
[ 1119.068095][T14315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1119.083147][T14315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1119.126824][T14315] team0: Port device team_slave_0 added
[ 1119.139736][T14315] team0: Port device team_slave_1 added
[ 1119.241753][T14315] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1119.314010][T14315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1119.341534][T14315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1119.481595][T14315] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1119.533754][T14315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1119.582540][T14315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1119.797632][T14315] hsr_slave_0: entered promiscuous mode
[ 1119.852178][T14315] hsr_slave_1: entered promiscuous mode
[ 1119.877312][T14315] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1119.903923][T14315] Cannot create hsr debugfs directory
[ 1120.301620][T14429] loop3: detected capacity change from 0 to 4096
[ 1120.486223][T14315] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1120.533511][T14315] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1120.567713][T14315] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1120.619070][T14315] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1120.824605][T14143] Bluetooth: hci2: command tx timeout
[ 1120.887662][T14315] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1121.094802][T14315] 8021q: adding VLAN 0 to HW filter on device team0
[ 1121.255806][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1121.263239][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1121.356302][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1121.363651][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1121.498745][T14458] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2367'.
[ 1121.859561][T14464] nbd0: detected capacity change from 0 to 63
[ 1122.006250][T14143] block nbd0: Receive control failed (result -104)
[ 1122.025168][ T1176] block nbd0: Dead connection, failed to find a fallback
[ 1122.033054][ T1176] block nbd0: shutting down sockets
[ 1122.040734][ T1176] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1122.051832][ T1176] Buffer I/O error on dev nbd0, logical block 1, async page read
[ 1122.060013][ T1176] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 2 prio class 2
[ 1122.072697][ T1176] Buffer I/O error on dev nbd0, logical block 2, async page read
[ 1122.080725][ T1176] Buffer I/O error on dev nbd0, logical block 3, async page read
[ 1122.431819][T14315] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1122.915667][T14143] Bluetooth: hci2: command tx timeout
[ 1123.237697][T14505] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2376'.
[ 1123.549294][T14315] veth0_vlan: entered promiscuous mode
[ 1123.597138][T14315] veth1_vlan: entered promiscuous mode
[ 1123.670366][T14315] veth0_macvtap: entered promiscuous mode
[ 1123.704086][T10628] usb 4-1: new high-speed USB device number 60 using dummy_hcd
[ 1123.722848][T14315] veth1_macvtap: entered promiscuous mode
[ 1123.769253][T14315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1123.780173][T14315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1123.794439][T14315] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1123.824093][T14315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1123.940465][T14315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1123.973362][T14315] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1124.038541][T14315] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1124.076668][T14315] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1124.083872][T10628] usb 4-1: Using ep0 maxpacket: 8
[ 1124.095174][T14315] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1124.105285][T10628] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[ 1124.110897][T14315] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1124.887770][T10628] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[ 1124.903933][T10628] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1124.913127][T10628] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1125.007140][ T1040] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1125.022113][ T1040] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1125.097879][T10776] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1125.115233][T10776] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1125.439605][T14538] tipc: Started in network mode
[ 1125.462189][T14538] tipc: Node identity 2e0000000000000002, cluster identity 4711
[ 1126.101459][T14552] tipc: Started in network mode
[ 1126.113240][T14552] tipc: Node identity da445da2a901, cluster identity 4711
[ 1126.131266][T14552] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1126.606778][T14555] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1126.615701][T14555] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1126.965540][T10785] usb 4-1: USB disconnect, device number 60
[ 1127.470639][T14555] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1127.590592][T14555] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1127.772677][ T5783] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1127.783058][ T5783] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1127.793082][ T5783] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1127.802656][ T5783] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1127.812347][ T5783] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 1127.821209][ T5783] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1128.120439][T14555] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1128.130078][T14555] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1128.139165][T14555] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1128.148294][T14555] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1128.250254][T14558] syzkaller0: entered promiscuous mode
[ 1128.257153][T14558] syzkaller0: entered allmulticast mode
[ 1128.271921][T14555] syz.2.2388 (14555) used greatest stack depth: 20040 bytes left
[ 1128.323280][T14564] tipc: Resetting bearer <eth:syzkaller0>
[ 1129.845223][T14588] Illegal XDP return value 3033868044 on prog  (id 73) dev N/A, expect packet loss!
[ 1129.918450][T14551] tipc: Resetting bearer <eth:syzkaller0>
[ 1129.934117][T14143] Bluetooth: hci3: command tx timeout
[ 1129.995248][T14551] tipc: Disabling bearer <eth:syzkaller0>
[ 1130.029014][ T5853] tipc: Node number set to 1933925794
[ 1130.849083][T14599] DRBG: could not allocate CTR cipher TFM handle: ctr(aes)
[ 1130.953924][T14584] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[ 1131.173942][T14584] usb 7-1: Using ep0 maxpacket: 8
[ 1131.198413][T14582] chnl_net:caif_netlink_parms(): no params data found
[ 1131.224425][T14584] usb 7-1: config index 0 descriptor too short (expected 301, got 45)
[ 1131.255260][T14584] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[ 1131.274448][T14618] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2400'.
[ 1131.303990][T14584] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1131.313203][T14584] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1131.937551][T14582] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1131.945255][T14143] Bluetooth: hci3: command tx timeout
[ 1131.985472][T14582] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1132.019046][T14582] bridge_slave_0: entered allmulticast mode
[ 1132.036560][T14582] bridge_slave_0: entered promiscuous mode
[ 1132.067880][T14582] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1132.088950][T14582] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1132.112037][T14582] bridge_slave_1: entered allmulticast mode
[ 1132.128002][T14582] bridge_slave_1: entered promiscuous mode
[ 1132.430651][T14582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1132.557205][T14582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1132.566738][T14655] fuse: Bad value for 'fd'
[ 1132.750761][T14582] team0: Port device team_slave_0 added
[ 1132.944000][T14582] team0: Port device team_slave_1 added
[ 1133.133385][T14582] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1133.143335][T14582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1133.184039][T14582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1133.245790][T14582] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1133.252948][T14582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1133.308305][T14582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1133.356788][T14670] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2410'.
[ 1133.498019][T14678] loop2: detected capacity change from 0 to 128
[ 1133.743464][T14582] hsr_slave_0: entered promiscuous mode
[ 1133.767644][T14584] usb 7-1: USB disconnect, device number 2
[ 1133.787067][T14582] hsr_slave_1: entered promiscuous mode
[ 1133.842472][T14582] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1133.853453][T14582] Cannot create hsr debugfs directory
[ 1134.024298][T14143] Bluetooth: hci3: command tx timeout
[ 1134.030937][T14688] loop6: detected capacity change from 0 to 1024
[ 1134.047826][T14688] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1134.131257][T14688] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1134.164155][T14688] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1134.236561][T14688] EXT4-fs error (device loop6): ext4_validate_block_bitmap:439: comm syz.6.2416: bg 0: block 112: padding at end of block bitmap is not set
[ 1134.287290][T14688] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28
[ 1134.289235][T14698] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1134.312338][T14688] EXT4-fs (loop6): This should not happen!! Data will be lost
[ 1134.312338][T14688] 
[ 1134.331827][T14688] EXT4-fs (loop6): Total free blocks count 0
[ 1134.349297][T14688] EXT4-fs (loop6): Free/Dirty block details
[ 1134.361413][T14688] EXT4-fs (loop6): free_blocks=0
[ 1134.370493][T14699] EXT4-fs error (device loop6): ext4_map_blocks:720: inode #15: comm syz.6.2416: lblock 0 mapped to illegal pblock 0 (length 3)
[ 1134.411014][T14688] EXT4-fs (loop6): dirty_blocks=64
[ 1134.420184][T14688] EXT4-fs (loop6): Block reservation details
[ 1134.440220][T14688] EXT4-fs (loop6): i_reserved_data_blocks=4
[ 1134.449788][T14698] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1134.492028][T14315] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[ 1134.529962][ T2878] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1134.570310][ T2878] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1134.591104][ T2878] bridge_slave_1: left allmulticast mode
[ 1134.599520][ T2878] bridge_slave_1: left promiscuous mode
[ 1134.612436][ T2878] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1134.632194][ T2878] bridge_slave_0: left allmulticast mode
[ 1134.638271][ T2878] bridge_slave_0: left promiscuous mode
[ 1134.646469][ T2878] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1135.094510][T14695] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1135.312962][ T2878] team0 (unregistering): Port device team_slave_1 removed
[ 1135.370348][ T2878] team0 (unregistering): Port device team_slave_0 removed
[ 1135.425343][ T2878] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1135.482866][ T2878] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1135.963354][ T2878] bond0 (unregistering): Released all slaves
[ 1136.109364][T14143] Bluetooth: hci3: command tx timeout
[ 1136.944094][ T2878] IPVS: stop unused estimator thread 0...
[ 1136.951445][T14734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1137.161655][T14737] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1137.261329][T14582] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1137.264541][T14745] fuse: Bad value for 'fd'
[ 1137.287618][T14582] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1137.323269][T14582] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1137.343591][T14582] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1137.568097][T14582] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1137.605115][T14582] 8021q: adding VLAN 0 to HW filter on device team0
[ 1137.619412][T10776] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1137.626679][T10776] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1137.660168][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1137.667430][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1137.734708][T10787] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[ 1137.816046][T14759] bond0: entered allmulticast mode
[ 1137.821403][T14759] bond_slave_0: entered allmulticast mode
[ 1137.832315][T14759] bond_slave_1: entered allmulticast mode
[ 1137.925656][T10787] usb 7-1: Using ep0 maxpacket: 8
[ 1137.935303][T10787] usb 7-1: config index 0 descriptor too short (expected 30, got 18)
[ 1137.947237][T10787] usb 7-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[ 1137.957023][T10787] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1137.973374][T10787] usb 7-1: Product: syz
[ 1137.983017][T10787] usb 7-1: Manufacturer: syz
[ 1138.002345][T10787] usb 7-1: SerialNumber: syz
[ 1138.016814][T10787] usb 7-1: config 0 descriptor??
[ 1138.035811][T10787] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[ 1138.055001][T10787] usb 7-1: setting power ON
[ 1138.059602][T10787] dvb-usb: bulk message failed: -22 (2/0)
[ 1138.092354][T10787] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1138.119206][T10787] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[ 1138.138032][T10787] usb 7-1: media controller created
[ 1138.143627][T14770] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2439'.
[ 1138.183209][T10787] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1138.253252][T14749] dvb-usb: bulk message failed: -22 (3/0)
[ 1138.279518][T14582] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1138.283915][T14749] dvb-usb: bulk message failed: -22 (80/0)
[ 1138.295710][T10787] usb 7-1: selecting invalid altsetting 6
[ 1138.316175][T10787] usb 7-1: digital interface selection failed (-22)
[ 1138.322871][T10787] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[ 1138.373589][T10787] usb 7-1: setting power OFF
[ 1138.385758][T10787] dvb-usb: bulk message failed: -22 (2/0)
[ 1138.391572][T10787] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[ 1138.438656][T10787] (NULL device *): no alternate interface
[ 1138.471376][T14582] veth0_vlan: entered promiscuous mode
[ 1138.492993][T14778] loop2: detected capacity change from 0 to 1024
[ 1138.556639][T10787] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[ 1138.576247][T14582] veth1_vlan: entered promiscuous mode
[ 1138.612948][T10787] usb 7-1: USB disconnect, device number 3
[ 1138.640170][   T27] audit: type=1800 audit(1777662985.340:15): pid=14778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2441" name="file1" dev="loop2" ino=20 res=0 errno=0
[ 1138.690757][T14782] syz.2.2441: attempt to access beyond end of device
[ 1138.690757][T14782] loop2: rw=0, sector=5778, nr_sectors = 2 limit=1024
[ 1138.726600][T14582] veth0_macvtap: entered promiscuous mode
[ 1138.756336][T14582] veth1_macvtap: entered promiscuous mode
[ 1138.831677][T14582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1138.872541][T14582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1138.888192][T14582] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1138.901659][T14582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1138.913512][T14582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1138.939006][T14582] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1139.044783][T14582] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1139.053582][T14582] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1139.086560][T14582] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1139.100097][T14788] loop2: detected capacity change from 0 to 256
[ 1139.124262][T14582] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1139.445347][ T2878] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1139.471016][T14792] loop2: detected capacity change from 0 to 512
[ 1139.477845][ T2878] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1139.579242][ T2878] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1139.651873][ T2878] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1140.038653][T14801] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2447'.
[ 1140.794183][T10628] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[ 1140.984435][T14584] usb 4-1: new high-speed USB device number 61 using dummy_hcd
[ 1141.049413][T10628] usb 7-1: Using ep0 maxpacket: 8
[ 1141.068611][T10628] usb 7-1: config index 0 descriptor too short (expected 301, got 45)
[ 1141.077873][T10628] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[ 1141.135240][T10628] usb 7-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[ 1141.170392][T10628] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1141.173908][T14584] usb 4-1: Using ep0 maxpacket: 8
[ 1141.183812][T10628] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1141.196271][T14584] usb 4-1: config index 0 descriptor too short (expected 30, got 18)
[ 1141.217744][T14584] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[ 1141.218300][T10628] usbtmc 7-1:16.0: bulk endpoints not found
[ 1141.238625][T14584] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1141.264470][T14584] usb 4-1: Product: syz
[ 1141.280109][T14584] usb 4-1: Manufacturer: syz
[ 1141.289620][T14584] usb 4-1: SerialNumber: syz
[ 1141.308217][T14584] usb 4-1: config 0 descriptor??
[ 1141.328315][T14584] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[ 1141.344066][T14584] usb 4-1: setting power ON
[ 1141.354164][T14584] dvb-usb: bulk message failed: -22 (2/0)
[ 1141.373014][T14584] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1141.393526][T14584] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[ 1141.440200][T14584] usb 4-1: media controller created
[ 1141.504569][T14584] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1141.544942][T14817] dvb-usb: bulk message failed: -22 (3/0)
[ 1141.550759][T14817] dvb-usb: bulk message failed: -22 (80/0)
[ 1141.595359][T14584] usb 4-1: selecting invalid altsetting 6
[ 1141.601170][T14584] usb 4-1: digital interface selection failed (-22)
[ 1141.627977][T14584] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[ 1141.655201][T14584] usb 4-1: setting power OFF
[ 1141.663906][T14584] dvb-usb: bulk message failed: -22 (2/0)
[ 1141.669702][T14584] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[ 1141.694240][T14584] (NULL device *): no alternate interface
[ 1141.792503][T14584] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[ 1141.850081][T14584] usb 4-1: USB disconnect, device number 61
[ 1142.422429][ T5783] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1142.462545][ T5783] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1142.489512][ T5783] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1142.519433][ T5783] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1142.528617][ T5783] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 1142.536596][ T5783] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1143.502523][T14584] usb 7-1: USB disconnect, device number 4
[ 1143.636902][T14844] chnl_net:caif_netlink_parms(): no params data found
[ 1144.475995][T14844] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1144.488868][T14844] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1144.516436][T14844] bridge_slave_0: entered allmulticast mode
[ 1144.523887][T14572] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[ 1144.550328][T14844] bridge_slave_0: entered promiscuous mode
[ 1144.584093][T14143] Bluetooth: hci4: command tx timeout
[ 1144.645855][T14844] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1144.661257][T14844] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1144.670941][T14844] bridge_slave_1: entered allmulticast mode
[ 1144.680182][T14844] bridge_slave_1: entered promiscuous mode
[ 1144.724155][T14572] usb 3-1: Using ep0 maxpacket: 8
[ 1144.731830][T14572] usb 3-1: config index 0 descriptor too short (expected 30, got 18)
[ 1144.748672][T14572] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[ 1144.764366][T14572] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1144.780362][T14572] usb 3-1: Product: syz
[ 1144.790574][T14572] usb 3-1: Manufacturer: syz
[ 1144.800288][T14572] usb 3-1: SerialNumber: syz
[ 1144.835261][T14572] usb 3-1: config 0 descriptor??
[ 1144.860505][T14572] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[ 1144.862556][T14844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1144.877825][T14572] usb 3-1: setting power ON
[ 1144.883405][T14572] dvb-usb: bulk message failed: -22 (2/0)
[ 1144.910914][T14844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1144.921979][T14572] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1144.934318][T10762] usb 4-1: new high-speed USB device number 62 using dummy_hcd
[ 1144.944520][T14572] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[ 1144.953087][T14572] usb 3-1: media controller created
[ 1145.047992][T14572] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1145.072732][T14884] dvb-usb: bulk message failed: -22 (3/0)
[ 1145.099556][T14884] cxusb: i2c wr: len=80 is too big!
[ 1145.099556][T14884] 
[ 1145.125822][T14572] usb 3-1: selecting invalid altsetting 6
[ 1145.135817][T10762] usb 4-1: Using ep0 maxpacket: 8
[ 1145.143466][T10762] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[ 1145.154156][T14572] usb 3-1: digital interface selection failed (-22)
[ 1145.167165][T14572] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[ 1145.167657][T10762] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[ 1145.193045][T14844] team0: Port device team_slave_0 added
[ 1145.201921][T14572] usb 3-1: setting power OFF
[ 1145.207238][T14572] dvb-usb: bulk message failed: -22 (2/0)
[ 1145.212226][T10762] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[ 1145.219244][T14844] team0: Port device team_slave_1 added
[ 1145.237513][T14572] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[ 1145.264950][T10762] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1145.283348][T10762] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1145.291551][T14572] (NULL device *): no alternate interface
[ 1145.331788][T10762] usbtmc 4-1:16.0: bulk endpoints not found
[ 1145.403298][T14572] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[ 1145.478583][T14572] usb 3-1: USB disconnect, device number 34
[ 1145.662094][T14844] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1145.669367][T14844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1145.698082][T14844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1145.797622][T14844] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1145.805449][T14844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1145.888281][T14844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1146.152802][T14844] hsr_slave_0: entered promiscuous mode
[ 1146.204475][T14844] hsr_slave_1: entered promiscuous mode
[ 1146.241432][T14844] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1146.250056][T14844] Cannot create hsr debugfs directory
[ 1146.350153][   T12] hsr_slave_0: left promiscuous mode
[ 1146.371384][   T12] hsr_slave_1: left promiscuous mode
[ 1146.408267][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1146.440087][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1146.464945][   T12] bridge_slave_1: left allmulticast mode
[ 1146.471193][   T12] bridge_slave_1: left promiscuous mode
[ 1146.484410][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1146.506469][   T12] bridge_slave_0: left allmulticast mode
[ 1146.518571][   T12] bridge_slave_0: left promiscuous mode
[ 1146.530139][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1146.576333][   T12] pim6reg9 (unregistering): left allmulticast mode
[ 1146.668181][T14143] Bluetooth: hci4: command tx timeout
[ 1146.797590][T14936] loop2: detected capacity change from 0 to 1764
[ 1146.878613][T14936] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[ 1147.594001][T14584] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[ 1147.670487][T10628] usb 4-1: USB disconnect, device number 62
[ 1147.794021][T14584] usb 3-1: Using ep0 maxpacket: 8
[ 1147.802118][T14584] usb 3-1: config index 0 descriptor too short (expected 30, got 18)
[ 1147.820926][T14584] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[ 1147.831186][T14584] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1147.854289][T14584] usb 3-1: Product: syz
[ 1147.858554][T14584] usb 3-1: Manufacturer: syz
[ 1147.863215][T14584] usb 3-1: SerialNumber: syz
[ 1147.883051][T14584] usb 3-1: config 0 descriptor??
[ 1147.898577][T14584] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[ 1147.912319][T14584] usb 3-1: setting power ON
[ 1147.935817][T14584] dvb-usb: bulk message failed: -22 (2/0)
[ 1147.950207][T14584] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1147.963441][T14584] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[ 1147.988932][T14584] usb 3-1: media controller created
[ 1148.023283][T14584] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1148.085746][T14584] usb 3-1: selecting invalid altsetting 6
[ 1148.100018][T14584] usb 3-1: digital interface selection failed (-22)
[ 1148.115036][T14584] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[ 1148.126994][T14951] dvb-usb: bulk message failed: -22 (3/0)
[ 1148.134493][T14584] usb 3-1: setting power OFF
[ 1148.141489][T14951] cxusb: i2c wr: len=80 is too big!
[ 1148.141489][T14951] 
[ 1148.141510][T14584] dvb-usb: bulk message failed: -22 (2/0)
[ 1148.171124][   T12] team0 (unregistering): Port device team_slave_1 removed
[ 1148.171345][T14584] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[ 1148.210255][T14584] (NULL device *): no alternate interface
[ 1148.273107][T14584] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[ 1148.299484][   T12] team0 (unregistering): Port device team_slave_0 removed
[ 1148.311915][T14584] usb 3-1: USB disconnect, device number 35
[ 1148.463277][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1148.483651][   T12] bond_slave_1 (unregistering): left allmulticast mode
[ 1148.615884][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1148.633067][   T12] bond_slave_0 (unregistering): left allmulticast mode
[ 1148.744466][T14143] Bluetooth: hci4: command tx timeout
[ 1149.087482][   T27] audit: type=1326 audit(1777662995.790:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14971 comm="syz.2.2484" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f6799cdd9 code=0x7ffc0000
[ 1149.125270][   T27] audit: type=1326 audit(1777662995.790:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14971 comm="syz.2.2484" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f6799cdd9 code=0x7ffc0000
[ 1149.172093][   T27] audit: type=1326 audit(1777662995.790:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14971 comm="syz.2.2484" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0f6795d60e code=0x7ffc0000
[ 1149.272025][   T27] audit: type=1326 audit(1777662995.790:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14971 comm="syz.2.2484" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f6799cdd9 code=0x7ffc0000
[ 1149.656194][   T12] bond0 (unregistering): Released all slaves
[ 1149.660821][T14978] kvm: pic: non byte write
[ 1150.098045][T10628] usb 4-1: new high-speed USB device number 63 using dummy_hcd
[ 1150.303911][T10628] usb 4-1: Using ep0 maxpacket: 8
[ 1150.315603][T10628] usb 4-1: config index 0 descriptor too short (expected 30, got 18)
[ 1150.356783][T10628] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[ 1150.393550][T10628] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1150.833079][T14143] Bluetooth: hci4: command tx timeout
[ 1151.231468][T10628] usb 4-1: Product: syz
[ 1151.236267][T10628] usb 4-1: Manufacturer: syz
[ 1151.240940][T10628] usb 4-1: SerialNumber: syz
[ 1151.248523][T10628] usb 4-1: config 0 descriptor??
[ 1151.257618][T10628] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[ 1151.265796][T10628] usb 4-1: setting power ON
[ 1151.270443][T10628] dvb-usb: bulk message failed: -22 (2/0)
[ 1151.279674][T10628] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1151.282551][   T12] IPVS: stop unused estimator thread 0...
[ 1151.289808][T10628] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[ 1151.304281][T10628] usb 4-1: media controller created
[ 1151.350533][T10628] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1151.424305][T10628] usb 4-1: selecting invalid altsetting 6
[ 1151.448573][T10628] usb 4-1: digital interface selection failed (-22)
[ 1151.496137][T10628] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[ 1151.510967][T14986] dvb-usb: bulk message failed: -22 (3/0)
[ 1151.517626][T10628] usb 4-1: setting power OFF
[ 1151.525207][T14986] cxusb: i2c wr: len=80 is too big!
[ 1151.525207][T14986] 
[ 1151.550957][T10628] dvb-usb: bulk message failed: -22 (2/0)
[ 1151.571555][T10628] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[ 1151.593920][T10628] (NULL device *): no alternate interface
[ 1151.721473][T10628] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[ 1151.798980][T10628] usb 4-1: USB disconnect, device number 63
[ 1152.212578][T14844] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1152.243146][T14844] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1152.259022][T14844] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1152.285948][T14844] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1152.364190][ T1176] block nbd0: Possible stuck request ffff888021cb8000: control (read@0,1024B). Runtime 30 seconds
[ 1152.569560][T15030] syzkaller0: entered promiscuous mode
[ 1152.577296][T15030] syzkaller0: entered allmulticast mode
[ 1152.963052][T14844] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1153.028046][T14844] 8021q: adding VLAN 0 to HW filter on device team0
[ 1153.046710][ T2904] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1153.054192][ T2904] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1153.101115][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1153.108499][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1153.873340][T14844] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1153.992889][T15073] loop6: detected capacity change from 0 to 256
[ 1154.241288][T15084] syzkaller0: entered promiscuous mode
[ 1154.270353][T15084] syzkaller0: entered allmulticast mode
[ 1154.934386][T15101] zonefs (nullb0) ERROR: Not a zoned block device
[ 1156.038330][T15108] loop3: detected capacity change from 0 to 32768
[ 1156.046836][T15108] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.2517 (15108)
[ 1156.070187][T14844] veth0_vlan: entered promiscuous mode
[ 1156.076128][T15108] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1156.086520][T15108] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[ 1156.095868][T15108] BTRFS info (device loop3): turning on sync discard
[ 1156.102651][T15108] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[ 1156.112318][T15108] BTRFS info (device loop3): use zstd compression, level 3
[ 1156.120829][T15108] BTRFS info (device loop3): turning on async discard
[ 1156.127991][T15108] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[ 1156.138700][T15108] BTRFS info (device loop3): trying to use backup root at mount time
[ 1156.146989][T15108] BTRFS info (device loop3): enabling ssd optimizations
[ 1156.154057][T15108] BTRFS info (device loop3): using spread ssd allocation scheme
[ 1156.161756][T15108] BTRFS info (device loop3): enabling auto defrag
[ 1156.168365][T15108] BTRFS info (device loop3): using free space tree
[ 1156.228284][T14844] veth1_vlan: entered promiscuous mode
[ 1156.266562][T14844] veth0_macvtap: entered promiscuous mode
[ 1156.283695][T14844] veth1_macvtap: entered promiscuous mode
[ 1156.301309][ T5981] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[ 1156.349477][T15108] BTRFS error (device loop3): failed to load root extent
[ 1156.356928][T15108] BTRFS warning (device loop3): try to load backup roots slot 1
[ 1156.379645][T14844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1156.393327][ T5981] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[ 1156.421261][T14844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1156.437977][T15108] BTRFS warning (device loop3): couldn't read tree root
[ 1156.445110][T15108] BTRFS warning (device loop3): try to load backup roots slot 2
[ 1156.453208][T14844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1156.465334][   T49] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[ 1156.500485][T15108] BTRFS warning (device loop3): couldn't read tree root
[ 1156.503347][T14844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1156.507883][T15108] BTRFS warning (device loop3): try to load backup roots slot 3
[ 1156.647302][T15108] BTRFS info (device loop3): rebuilding free space tree
[ 1156.684243][T15108] BTRFS info (device loop3): checking UUID tree
[ 1156.842409][T14844] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1157.339070][T14844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1157.345824][T14582] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1157.428764][T14844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1157.483618][T14844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1157.528724][T14844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1157.570331][T14844] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1157.640819][T14844] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1157.683914][T14844] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1157.692708][T14844] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1157.750427][T14844] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1158.266123][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1158.310816][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1158.481972][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1158.500857][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1158.638660][T15175] loop6: detected capacity change from 0 to 256
[ 1158.973473][T15184] loop2: detected capacity change from 0 to 512
[ 1159.007034][T15184] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[ 1159.143107][T15184] EXT4-fs (loop2): 1 truncate cleaned up
[ 1159.185365][T15184] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1159.879778][T14141] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1161.840924][T15261] zonefs (nullb0) ERROR: Not a zoned block device
[ 1164.557821][T15281] loop2: detected capacity change from 0 to 32768
[ 1164.591736][T15281] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.2552 (15281)
[ 1164.624731][T15281] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1164.635133][T15281] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[ 1164.644193][T15281] BTRFS info (device loop2): turning on sync discard
[ 1164.650929][T15281] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[ 1164.660631][T15281] BTRFS info (device loop2): use zstd compression, level 3
[ 1164.668092][T15281] BTRFS info (device loop2): turning on async discard
[ 1164.674943][T15281] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[ 1164.685793][T15281] BTRFS info (device loop2): trying to use backup root at mount time
[ 1164.694163][T15281] BTRFS info (device loop2): enabling ssd optimizations
[ 1164.701209][T15281] BTRFS info (device loop2): using spread ssd allocation scheme
[ 1164.708919][T15281] BTRFS info (device loop2): enabling auto defrag
[ 1164.715464][T15281] BTRFS info (device loop2): using free space tree
[ 1164.833315][ T5981] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[ 1164.916560][T15281] BTRFS error (device loop2): failed to load root extent
[ 1164.924378][T15281] BTRFS warning (device loop2): try to load backup roots slot 1
[ 1164.935974][ T5981] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[ 1164.949774][T15281] BTRFS warning (device loop2): couldn't read tree root
[ 1164.957548][T15281] BTRFS warning (device loop2): try to load backup roots slot 2
[ 1164.968505][ T5981] BTRFS error (device loop2): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[ 1164.982034][T15281] BTRFS warning (device loop2): couldn't read tree root
[ 1164.989448][T15281] BTRFS warning (device loop2): try to load backup roots slot 3
[ 1165.038815][T15281] BTRFS info (device loop2): rebuilding free space tree
[ 1165.073129][T15281] BTRFS info (device loop2): checking UUID tree
[ 1165.616196][T14141] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1166.065628][   T28] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[ 1166.527658][   T28] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[ 1166.548678][   T28] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1166.562815][   T28] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1166.572678][   T28] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1166.592834][   T28] usb 5-1: config 0 descriptor??
[ 1166.687720][T15334] zonefs (nullb0) ERROR: Not a zoned block device
[ 1167.355860][   T28] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 1169.064121][ T5853] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[ 1169.146362][T15391] loop6: detected capacity change from 0 to 32768
[ 1169.154849][T15391] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.2569 (15391)
[ 1169.162323][T15397] loop3: detected capacity change from 0 to 256
[ 1169.187332][T15391] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1169.197852][T15391] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm
[ 1169.206897][T15391] BTRFS info (device loop6): turning on sync discard
[ 1169.213958][T15391] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[ 1169.223856][T15391] BTRFS info (device loop6): use zstd compression, level 3
[ 1169.231180][T15391] BTRFS info (device loop6): turning on async discard
[ 1169.238387][T15391] BTRFS warning (device loop6): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[ 1169.249142][T15391] BTRFS info (device loop6): trying to use backup root at mount time
[ 1169.257343][T15391] BTRFS info (device loop6): enabling ssd optimizations
[ 1169.264577][T15391] BTRFS info (device loop6): using spread ssd allocation scheme
[ 1169.266351][ T5853] usb 3-1: Using ep0 maxpacket: 8
[ 1169.272343][T15391] BTRFS info (device loop6): enabling auto defrag
[ 1169.272381][T15391] BTRFS info (device loop6): using free space tree
[ 1169.377340][ T5853] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[ 1169.398614][ T5853] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1169.411338][   T11] BTRFS warning (device loop6): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[ 1169.430561][T15391] BTRFS error (device loop6): failed to load root extent
[ 1169.438012][T15391] BTRFS warning (device loop6): try to load backup roots slot 1
[ 1169.452471][ T3460] BTRFS warning (device loop6): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[ 1169.509597][ T5853] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1169.536639][T15391] BTRFS warning (device loop6): couldn't read tree root
[ 1169.546987][T15391] BTRFS warning (device loop6): try to load backup roots slot 2
[ 1169.556317][T10776] BTRFS error (device loop6): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[ 1169.567007][T15391] BTRFS warning (device loop6): couldn't read tree root
[ 1169.572631][ T5853] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[ 1169.574747][T15391] BTRFS warning (device loop6): try to load backup roots slot 3
[ 1169.590637][T10628] usb 5-1: USB disconnect, device number 41
[ 1169.635184][T15391] BTRFS info (device loop6): rebuilding free space tree
[ 1169.646035][ T5853] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[ 1169.650080][T15391] BTRFS info (device loop6): checking UUID tree
[ 1169.725703][ T5853] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1169.784635][ T5853] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1169.796200][ T5853] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1169.839442][ T5853] usbtmc: probe of 3-1:16.0 failed with error -22
[ 1170.117729][T14315] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1170.369663][T12465] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop6 scanned by udevd (12465)
[ 1170.691153][T15451] loop5: detected capacity change from 0 to 7
[ 1170.735378][T15451] Dev loop5: unable to read RDB block 7
[ 1170.781874][T15451]  loop5: unable to read partition table
[ 1170.793714][T10776] loop: Write error at byte offset 36, length 3584.
[ 1170.807764][    C1] I/O error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2
[ 1170.817416][    C1] Buffer I/O error on dev loop5, logical block 0, lost async page write
[ 1170.836178][T15451] loop5: partition table beyond EOD, truncated
[ 1170.884018][T15451] loop_reread_partitions: partition scan of loop5 (úùƒWå¡™‰ü�¾Ã½¸*‹ºÐ	œëÜ%õ«µ4FLQkÝŠ5) failed (rc=-5)
[ 1171.813512][T15464] loop3: detected capacity change from 0 to 32768
[ 1171.826463][T15464] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9
[ 1171.906605][T12465] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1171.934418][T14584] usb 3-1: USB disconnect, device number 36
[ 1172.530874][T15491] kvm: pic: non byte write
[ 1172.855156][T10789] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[ 1173.068121][T10789] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[ 1173.111573][T10789] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1173.153721][T10789] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1173.180041][T10789] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1173.215373][T10789] usb 5-1: config 0 descriptor??
[ 1173.242550][T10789] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 1173.383995][T10628] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[ 1173.432348][T15520] fuse: Bad value for 'fd'
[ 1173.594179][T10628] usb 3-1: Using ep0 maxpacket: 8
[ 1173.612111][T10628] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[ 1173.626498][T10628] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1173.638666][T10628] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1173.649577][T10628] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[ 1173.667539][T10628] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[ 1173.678917][T10628] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1173.695697][T10628] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1173.710408][T10628] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1173.755244][T10628] usbtmc: probe of 3-1:16.0 failed with error -22
[ 1174.050290][T15530] syzkaller0: entered promiscuous mode
[ 1174.056283][T15530] syzkaller0: entered allmulticast mode
[ 1174.306194][   T11] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1174.476315][   T11] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1174.590804][   T11] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1174.724003][   T11] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1175.256439][   T11] tipc: Left network mode
[ 1175.663911][ T5853] usb 5-1: USB disconnect, device number 42
[ 1175.683327][ T5783] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1175.698156][ T5783] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1175.707188][ T5783] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1175.718188][ T5783] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1175.729688][ T5783] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 1175.737403][ T5783] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1176.150922][T10628] usb 3-1: USB disconnect, device number 37
[ 1176.807940][T15575] chnl_net:caif_netlink_parms(): no params data found
[ 1177.169177][T15614] zonefs (nullb0) ERROR: Not a zoned block device
[ 1177.191460][   T11] hsr_slave_0: left promiscuous mode
[ 1177.229023][   T11] hsr_slave_1: left promiscuous mode
[ 1177.272068][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1177.294740][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1177.330934][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1177.354412][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1177.370046][   T11] bridge_slave_1: left allmulticast mode
[ 1177.381257][   T11] bridge_slave_1: left promiscuous mode
[ 1177.393825][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1177.411376][   T11] bridge_slave_0: left allmulticast mode
[ 1177.418744][   T11] bridge_slave_0: left promiscuous mode
[ 1177.425099][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1177.534684][   T11] veth1_macvtap: left promiscuous mode
[ 1177.540684][   T11] veth0_macvtap: left promiscuous mode
[ 1177.548205][   T11] veth1_vlan: left promiscuous mode
[ 1177.554264][   T11] veth0_vlan: left promiscuous mode
[ 1177.784528][T14143] Bluetooth: hci1: command tx timeout
[ 1177.971722][ T1287] ieee802154 phy0 wpan0: encryption failed: -22
[ 1177.978331][ T1287] ieee802154 phy1 wpan1: encryption failed: -22
[ 1178.071618][T15632] mmap: syz.2.2612 (15632) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[ 1178.604058][T14584] usb 4-1: new high-speed USB device number 64 using dummy_hcd
[ 1178.805814][T14584] usb 4-1: Using ep0 maxpacket: 32
[ 1178.827055][T14584] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[ 1178.835891][T14584] usb 4-1: config 0 has no interface number 0
[ 1178.845697][T14584] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1178.867277][T14584] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1178.875969][T14584] usb 4-1: Product: syz
[ 1178.880202][T14584] usb 4-1: Manufacturer: syz
[ 1178.885343][T14584] usb 4-1: SerialNumber: syz
[ 1178.911291][T14584] usb 4-1: config 0 descriptor??
[ 1178.930364][T14584] smsc95xx v2.0.0
[ 1179.005968][   T11] team0 (unregistering): Port device team_slave_1 removed
[ 1179.087091][   T11] team0 (unregistering): Port device team_slave_0 removed
[ 1179.164583][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1179.246063][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1179.860413][   T11] bond0 (unregistering): Released all slaves
[ 1179.864507][T14143] Bluetooth: hci1: command tx timeout
[ 1179.952841][T14584] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71
[ 1179.964387][T14584] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1179.974746][T14584] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[ 1179.986933][T14584] smsc95xx: probe of 4-1:0.67 failed with error -71
[ 1179.999061][T14584] usb 4-1: USB disconnect, device number 64
[ 1180.053004][T15607] syzkaller0: entered promiscuous mode
[ 1180.061627][T15607] syzkaller0: entered allmulticast mode
[ 1180.122214][T15575] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1180.130886][T15575] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1180.143313][T15575] bridge_slave_0: entered allmulticast mode
[ 1180.151041][T15575] bridge_slave_0: entered promiscuous mode
[ 1180.160879][T15575] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1180.168165][T15575] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1180.175673][T15575] bridge_slave_1: entered allmulticast mode
[ 1180.204309][T15575] bridge_slave_1: entered promiscuous mode
[ 1180.351885][T15575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1180.401372][T15575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1180.636921][T15651] zonefs (nullb0) ERROR: Not a zoned block device
[ 1181.567482][T15575] team0: Port device team_slave_0 added
[ 1181.617458][T15575] team0: Port device team_slave_1 added
[ 1181.745100][T15575] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1181.752218][T15575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1181.778954][T15575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1181.806952][T15575] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1181.817925][T15575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1181.887151][T15575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1181.943983][T14143] Bluetooth: hci1: command tx timeout
[ 1182.061327][T15575] hsr_slave_0: entered promiscuous mode
[ 1182.079175][T15575] hsr_slave_1: entered promiscuous mode
[ 1182.812277][T15679] syz.3.2624 (15679): drop_caches: 2
[ 1183.527605][T13148] block nbd0: Possible stuck request ffff888021cb8000: control (read@0,1024B). Runtime 60 seconds
[ 1184.167615][T14143] Bluetooth: hci1: command tx timeout
[ 1185.830579][T15686] syzkaller0: entered promiscuous mode
[ 1185.864145][T15686] syzkaller0: entered allmulticast mode
[ 1189.330429][T15714] zonefs (nullb0) ERROR: Not a zoned block device
[ 1190.480978][T15708] syzkaller0: entered promiscuous mode
[ 1190.528360][T15708] syzkaller0: entered allmulticast mode
[ 1190.558544][T15575] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1192.639883][T15749] loop3: detected capacity change from 0 to 1024
[ 1192.769798][   T27] audit: type=1800 audit(1777663039.470:20): pid=15749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2637" name=789CECDD4F681CD71D07F0EFAC57B2E482A32476624AA02286B454D4D61F9456BDC42DA5E8104A480F3D0B5B8E85D74A9094A28452D4FFD71E722DA407DD7A2AF46E68CFCD2D571D03855E7212F4A032B3B3D2CA5A292BDBD1AEECCFC7BC7DEFED9B79EFCD6FFE6976311BE0B9B53895E6C314599C7A7BB3ACEF6CCFB576B6E7BF16 dev="loop3" ino=5 res=0 errno=0
[ 1196.523420][T15575] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1196.563469][T15575] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1196.614231][T15575] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1197.120048][T15575] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1197.138154][T15789] fuse: Bad value for 'fd'
[ 1197.174709][T15575] 8021q: adding VLAN 0 to HW filter on device team0
[ 1197.225067][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1197.232280][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1197.297201][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1197.304486][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1198.232421][T15575] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1198.957525][T15823] kvm: pic: non byte write
[ 1199.242401][T15575] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1200.642366][T15575] veth0_vlan: entered promiscuous mode
[ 1200.694421][T15575] veth1_vlan: entered promiscuous mode
[ 1200.763415][T15575] veth0_macvtap: entered promiscuous mode
[ 1200.801633][T15575] veth1_macvtap: entered promiscuous mode
[ 1200.870706][T15867] syzkaller0: entered promiscuous mode
[ 1200.889970][T15867] syzkaller0: entered allmulticast mode
[ 1200.915298][T15575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1200.950697][T15575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1200.973947][T15575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1201.009430][T15575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1201.029309][T15873] fuse: Bad value for 'fd'
[ 1201.058194][T15575] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1201.072312][T15876] loop2: detected capacity change from 0 to 512
[ 1201.146311][T15876] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #15: comm syz.2.2668: inode has both inline data and extents flags
[ 1201.168502][T15876] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.2668: couldn't read orphan inode 15 (err -117)
[ 1201.194906][T15876] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1201.256175][T15575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1201.277235][T15575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1201.289995][T15575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1201.320927][T15575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1201.343280][T15575] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1201.364088][T15876] loop2: detected capacity change from 512 to 64
[ 1201.390626][T15575] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1201.417829][T15885] syz.2.2668: attempt to access beyond end of device
[ 1201.417829][T15885] loop2: rw=14337, sector=72, nr_sectors = 2 limit=64
[ 1201.433924][T15575] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1201.442702][T15575] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1201.489105][T15885] Buffer I/O error on dev loop2, logical block 36, lost sync page write
[ 1201.489677][T15575] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1201.519075][T15885] EXT4-fs error (device loop2): ext4_handle_dirty_dirblock:440: inode #2: block 36: comm syz.2.2668: IO error syncing itable block
[ 1201.557121][T15885] EXT4-fs error (device loop2) in add_dirent_to_buf:2220: IO failure
[ 1201.623429][T15885] EXT4-fs error (device loop2): ext4_check_bdev_write_error:225: comm syz.2.2668: Error while async write back metadata
[ 1201.741932][T15894] kvm: pic: non byte write
[ 1201.781585][ T1040] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1201.822587][ T1040] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1201.851003][T14141] syz-executor: attempt to access beyond end of device
[ 1201.851003][T14141] loop2: rw=14337, sector=72, nr_sectors = 2 limit=64
[ 1201.865788][T14141] Buffer I/O error on dev loop2, logical block 36, lost sync page write
[ 1201.875580][T14141] EXT4-fs error (device loop2): ext4_handle_dirty_dirblock:440: inode #2: block 36: comm syz-executor: IO error syncing itable block
[ 1201.892965][T14141] EXT4-fs error (device loop2) in ext4_delete_entry:2800: IO failure
[ 1201.945909][ T2904] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1201.967164][ T2904] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1202.099246][T14851] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1202.979472][T15919] syzkaller0: entered promiscuous mode
[ 1203.021858][T15919] syzkaller0: entered allmulticast mode
[ 1203.103064][T15928] loop3: detected capacity change from 0 to 512
[ 1203.142780][T15928] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #15: comm syz.3.2682: inode has both inline data and extents flags
[ 1203.183359][T15928] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.2682: couldn't read orphan inode 15 (err -117)
[ 1203.216485][T15928] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1203.272484][T15926] syzkaller0: entered promiscuous mode
[ 1203.303522][T15926] syzkaller0: entered allmulticast mode
[ 1203.374038][T15928] loop3: detected capacity change from 512 to 64
[ 1203.515814][T14582] EXT4-fs warning (device loop3): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -12 reading directory block
[ 1203.686155][T15393] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1203.768612][ T5783] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1203.781955][ T5783] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1203.810094][ T5783] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1203.852098][ T5783] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1203.878146][ T5783] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1203.887771][ T5783] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1206.027781][T14143] Bluetooth: hci0: command tx timeout
[ 1206.720662][T15941] kvm: pic: non byte write
[ 1206.810983][T15936] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1206.818597][T15936] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1207.245880][T15936] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1207.281318][T15936] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1207.602655][T15936] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1207.611865][T15936] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1207.621425][T15936] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1207.631222][T15936] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1207.819090][T15945] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2687'.
[ 1207.829683][T15945] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[ 1207.833415][T15946] netlink: 'syz.4.2687': attribute type 1 has an invalid length.
[ 1207.857493][T15946] vxlan0: entered promiscuous mode
[ 1208.104738][T14143] Bluetooth: hci0: command tx timeout
[ 1208.282251][ T5981] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1208.509936][ T5981] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1208.748950][ T5981] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1208.854493][T15937] chnl_net:caif_netlink_parms(): no params data found
[ 1209.012369][ T5981] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1209.253119][T15937] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1209.324021][T15937] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1209.344153][T15937] bridge_slave_0: entered allmulticast mode
[ 1209.351838][T15937] bridge_slave_0: entered promiscuous mode
[ 1209.368904][T15937] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1209.377461][T15937] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1209.386680][T15937] bridge_slave_1: entered allmulticast mode
[ 1209.401591][T15937] bridge_slave_1: entered promiscuous mode
[ 1209.442007][ T5783] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1209.453245][ T5783] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1209.463495][ T5783] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1209.481905][ T5783] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1209.491522][ T5783] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 1209.508776][ T5783] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1209.546196][T15937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1209.592712][T15937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1209.664194][T14584] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[ 1209.715005][T15937] team0: Port device team_slave_0 added
[ 1209.823668][T15937] team0: Port device team_slave_1 added
[ 1209.874263][T14584] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1209.896258][T14584] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1209.918823][T14584] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[ 1209.952615][T14584] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1209.957264][T15992] loop5: detected capacity change from 0 to 4095
[ 1209.983585][T14584] usb 5-1: config 0 descriptor??
[ 1210.004229][    C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 21 prio class 2
[ 1210.014626][    C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1210.024027][    C0] Buffer I/O error on dev loop5, logical block 0, async page read
[ 1210.044602][    C0] I/O error, dev loop5, sector 3840 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1210.055484][T15937] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1210.062646][T15937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1210.094371][    C1] I/O error, dev loop5, sector 3840 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1210.103895][    C1] Buffer I/O error on dev loop5, logical block 480, async page read
[ 1210.141171][T15937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1210.163382][T15937] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1210.172038][T15937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1210.199965][T14143] Bluetooth: hci0: command tx timeout
[ 1210.211589][T15937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1210.371802][T15937] hsr_slave_0: entered promiscuous mode
[ 1210.382857][T15937] hsr_slave_1: entered promiscuous mode
[ 1210.390453][T15937] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1210.400725][T15937] Cannot create hsr debugfs directory
[ 1210.423470][T14584] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0
[ 1210.452679][T14584] cp2112 0003:10C4:EA90.0004: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0
[ 1210.634646][T14584] cp2112 0003:10C4:EA90.0004: Part Number: 0xE1 Device Version: 0x47
[ 1211.004638][T15986] chnl_net:caif_netlink_parms(): no params data found
[ 1211.625898][T14143] Bluetooth: hci2: command tx timeout
[ 1211.707234][T15937] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1211.739211][ T5981] hsr_slave_0: left promiscuous mode
[ 1211.745913][ T5981] hsr_slave_1: left promiscuous mode
[ 1211.752148][ T5981] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1211.759912][ T5981] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1211.768806][ T5981] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1211.776780][ T5981] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1211.786391][ T5981] bridge_slave_1: left allmulticast mode
[ 1211.792254][ T5981] bridge_slave_1: left promiscuous mode
[ 1211.799867][ T5981] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1211.809379][ T5981] bridge_slave_0: left allmulticast mode
[ 1211.815912][ T5981] bridge_slave_0: left promiscuous mode
[ 1211.821730][ T5981] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1211.863780][ T5981] veth1_macvtap: left promiscuous mode
[ 1211.869516][ T5981] veth0_macvtap: left promiscuous mode
[ 1211.875330][ T5981] veth1_vlan: left promiscuous mode
[ 1211.880688][ T5981] veth0_vlan: left promiscuous mode
[ 1212.281492][T14143] Bluetooth: hci0: command tx timeout
[ 1212.900232][ T5981] team0 (unregistering): Port device team_slave_1 removed
[ 1212.979041][ T5981] team0 (unregistering): Port device team_slave_0 removed
[ 1213.057138][ T5981] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1213.140757][ T5981] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1213.708727][T14143] Bluetooth: hci2: command tx timeout
[ 1213.775435][ T5981] bond0 (unregistering): Released all slaves
[ 1213.785065][ T1176] block nbd0: Possible stuck request ffff888021cb8000: control (read@0,1024B). Runtime 90 seconds
[ 1213.954872][T15986] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1213.962077][T15986] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1213.969858][T15986] bridge_slave_0: entered allmulticast mode
[ 1213.978588][T15986] bridge_slave_0: entered promiscuous mode
[ 1213.991906][T15986] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1214.008575][T15986] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1214.017851][T15986] bridge_slave_1: entered allmulticast mode
[ 1214.027900][T15986] bridge_slave_1: entered promiscuous mode
[ 1214.038937][T15937] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1214.051426][T15937] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 1214.147538][T15937] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 1214.261916][T15986] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1214.287650][T15986] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1214.473660][T15986] team0: Port device team_slave_0 added
[ 1214.498610][T15986] team0: Port device team_slave_1 added
[ 1214.572611][T16039] loop5: detected capacity change from 0 to 4095
[ 1214.613398][    C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x84700 phys_seg 128 prio class 2
[ 1214.618643][T15986] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1214.630966][T15986] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1214.643999][    C1] I/O error, dev loop5, sector 1072 op 0x0:(READ) flags 0x84700 phys_seg 128 prio class 2
[ 1214.657836][T15986] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1214.667113][    C1] I/O error, dev loop5, sector 2112 op 0x0:(READ) flags 0x80700 phys_seg 54 prio class 2
[ 1214.684433][    C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1214.696655][    C0] Buffer I/O error on dev loop5, logical block 0, async page read
[ 1214.706545][    C0] I/O error, dev loop5, sector 3840 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1214.731205][    C1] I/O error, dev loop5, sector 3840 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1214.740738][    C1] Buffer I/O error on dev loop5, logical block 480, async page read
[ 1214.746011][T15986] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1214.773948][T15986] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1214.817413][T15986] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1214.963318][T15986] hsr_slave_0: entered promiscuous mode
[ 1214.994422][T15986] hsr_slave_1: entered promiscuous mode
[ 1215.002674][T15986] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1215.044148][T15986] Cannot create hsr debugfs directory
[ 1215.089265][T15937] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1215.198406][T15937] 8021q: adding VLAN 0 to HW filter on device team0
[ 1215.222851][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1215.230097][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1215.352756][ T2904] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1215.360093][ T2904] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1215.673265][T15986] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1215.699572][T15986] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1215.712018][T14584] cp2112 0003:10C4:EA90.0004: error requesting SMBus config
[ 1215.737237][T14584] cp2112: probe of 0003:10C4:EA90.0004 failed with error -110
[ 1215.750913][T15986] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1215.794430][T14143] Bluetooth: hci2: command tx timeout
[ 1215.794631][T14584] usb 5-1: USB disconnect, device number 43
[ 1215.820716][T15986] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1216.096331][T15986] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1216.141155][T15937] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1216.193613][T15986] 8021q: adding VLAN 0 to HW filter on device team0
[ 1216.227423][ T1040] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1216.234725][ T1040] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1216.255963][ T1040] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1216.263213][ T1040] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1216.320763][T16065] syzkaller0: entered promiscuous mode
[ 1216.327286][T16065] syzkaller0: entered allmulticast mode
[ 1217.873922][T14143] Bluetooth: hci2: command tx timeout
[ 1218.432851][T16088] loop5: detected capacity change from 0 to 4095
[ 1218.473560][    C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x84700 phys_seg 128 prio class 2
[ 1218.482484][    C0] I/O error, dev loop5, sector 1040 op 0x0:(READ) flags 0x84700 phys_seg 128 prio class 2
[ 1218.505994][    C0] I/O error, dev loop5, sector 2128 op 0x0:(READ) flags 0x80700 phys_seg 54 prio class 2
[ 1218.515996][    C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1218.525419][    C0] Buffer I/O error on dev loop5, logical block 0, async page read
[ 1218.546898][    C0] I/O error, dev loop5, sector 3840 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1218.569328][    C1] I/O error, dev loop5, sector 3840 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1218.578947][    C1] Buffer I/O error on dev loop5, logical block 480, async page read
[ 1220.310850][T15937] veth0_vlan: entered promiscuous mode
[ 1220.375300][T15937] veth1_vlan: entered promiscuous mode
[ 1220.399760][T15986] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1220.488526][T15937] veth0_macvtap: entered promiscuous mode
[ 1220.529266][T15937] veth1_macvtap: entered promiscuous mode
[ 1220.583070][T15937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1220.626476][T15937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1220.660658][T15937] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1220.696526][T15937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1220.731457][T15937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1220.775885][T15937] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1220.812987][T15937] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1220.828106][T15937] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1220.837539][T15937] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1220.873552][T15937] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1220.961963][T16125] can0: slcan on pty28.
[ 1221.088074][T16122] can0 (unregistered): slcan off pty28.
[ 1221.230488][T10776] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1221.274875][T10776] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1221.405585][T10776] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1221.424335][T10776] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1221.499241][T15986] veth0_vlan: entered promiscuous mode
[ 1221.532239][T15986] veth1_vlan: entered promiscuous mode
[ 1221.614952][T15986] veth0_macvtap: entered promiscuous mode
[ 1221.646378][T15986] veth1_macvtap: entered promiscuous mode
[ 1221.717695][T15986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1221.746676][T15986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1221.784765][T15986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1221.813973][T15986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1221.836059][T15986] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1221.889850][T15986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1221.935323][T15986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1221.971439][T15986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1221.997871][T15986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1222.041166][T15986] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1222.158141][T15986] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1222.189053][T15986] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1222.220754][T15986] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1222.244069][T15986] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1223.451779][ T2904] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1223.488906][ T2904] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1223.602715][ T2904] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1223.610707][ T2904] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1223.894556][T16174] capability: warning: `syz.4.2728' uses 32-bit capabilities (legacy support in use)
[ 1224.016551][T16174] program syz.4.2728 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1225.463081][T16198] zonefs (nullb0) ERROR: Not a zoned block device
[ 1226.779865][T10789] usb 5-1: new high-speed USB device number 44 using dummy_hcd
[ 1227.004061][T10789] usb 5-1: Using ep0 maxpacket: 32
[ 1227.135835][T10789] usb 5-1: config 0 has no interfaces?
[ 1227.317767][T10789] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.2b
[ 1227.436703][T10789] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1227.470816][T10789] usb 5-1: Product: syz
[ 1227.490842][T10789] usb 5-1: Manufacturer: syz
[ 1227.517524][T16219] block nbd8: shutting down sockets
[ 1227.533554][T10789] usb 5-1: SerialNumber: syz
[ 1227.561877][T10789] usb 5-1: config 0 descriptor??
[ 1227.786601][T16231] loop7: detected capacity change from 0 to 256
[ 1227.939385][T16229] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2743'.
[ 1228.004405][T16229] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1228.012688][T16229] IPv6: NLM_F_CREATE should be set when creating new route
[ 1228.049555][T16231] FAT-fs (loop7): Directory bread(block 64) failed
[ 1228.075460][T16231] FAT-fs (loop7): Directory bread(block 65) failed
[ 1228.137434][T16238] zonefs (nullb0) ERROR: Not a zoned block device
[ 1228.216376][T16231] FAT-fs (loop7): Directory bread(block 66) failed
[ 1228.345783][T16231] FAT-fs (loop7): Directory bread(block 67) failed
[ 1228.573126][T16231] FAT-fs (loop7): Directory bread(block 68) failed
[ 1228.684001][T16231] FAT-fs (loop7): Directory bread(block 69) failed
[ 1228.732544][T16231] FAT-fs (loop7): Directory bread(block 70) failed
[ 1228.741656][T10787] usb 5-1: USB disconnect, device number 44
[ 1228.803595][T16231] FAT-fs (loop7): Directory bread(block 71) failed
[ 1228.904192][T16231] FAT-fs (loop7): Directory bread(block 72) failed
[ 1228.910835][T16231] FAT-fs (loop7): Directory bread(block 73) failed
[ 1229.067902][T16245] loop9: detected capacity change from 0 to 512
[ 1229.232187][T16245] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1229.246224][T16245] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1229.264222][T16245] EXT4-fs (loop9): shut down requested (0)
[ 1229.632659][T15986] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1230.714182][T14572] usb 5-1: new high-speed USB device number 45 using dummy_hcd
[ 1231.087473][T16282] zonefs (nullb0) ERROR: Not a zoned block device
[ 1231.847733][T14572] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1231.859200][T14572] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1231.869403][T14572] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[ 1231.878824][T14572] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1231.893124][T14572] usb 5-1: config 0 descriptor??
[ 1232.327048][T14572] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0
[ 1232.379003][T14572] cp2112 0003:10C4:EA90.0005: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0
[ 1232.524644][T14572] cp2112 0003:10C4:EA90.0005: Part Number: 0xE1 Device Version: 0x47
[ 1232.771975][T16311] loop9: detected capacity change from 0 to 4096
[ 1232.779857][T14572] cp2112 0003:10C4:EA90.0005: error requesting SMBus config
[ 1232.792907][T16311] ntfs3: loop9: Different NTFS sector size (2048) and media sector size (512).
[ 1234.152215][T16336] zonefs (nullb0) ERROR: Not a zoned block device
[ 1235.422966][T16356] syzkaller0: entered promiscuous mode
[ 1235.444967][T16356] syzkaller0: entered allmulticast mode
[ 1235.679159][T16362] loop7: detected capacity change from 0 to 128
[ 1235.713115][T16362] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1235.747123][T16362] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1237.533480][T16389] loop8: detected capacity change from 0 to 128
[ 1237.555761][T16389] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1237.622143][T16389] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1237.812198][   T49] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1237.813437][T14572] cp2112: probe of 0003:10C4:EA90.0005 failed with error -32
[ 1237.882857][ T5774] usb 5-1: USB disconnect, device number 45
[ 1238.003133][T16400] loop9: detected capacity change from 0 to 128
[ 1238.034558][T16400] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1238.070753][T16402] syzkaller0: entered promiscuous mode
[ 1238.099081][T16402] syzkaller0: entered allmulticast mode
[ 1238.113026][T16400] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1238.202229][T16406] fuse: Bad value for 'fd'
[ 1238.559905][T16416] loop4: detected capacity change from 0 to 512
[ 1239.003159][T16416] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1239.281695][T16416] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1239.513328][ T1287] ieee802154 phy0 wpan0: encryption failed: -22
[ 1239.519845][ T1287] ieee802154 phy1 wpan1: encryption failed: -22
[ 1239.772730][T14844] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1240.129056][T16442] zonefs (nullb0) ERROR: Not a zoned block device
[ 1240.906324][T16449] fuse: Bad value for 'fd'
[ 1241.995219][T16498] loop8: detected capacity change from 0 to 512
[ 1242.141199][T16498] EXT4-fs error (device loop8): ext4_do_update_inode:5255: inode #16: comm syz.8.2817: corrupted inode contents
[ 1242.161412][T16498] EXT4-fs error (device loop8): ext4_dirty_inode:6143: inode #16: comm syz.8.2817: mark_inode_dirty error
[ 1242.176873][T16498] EXT4-fs error (device loop8): ext4_do_update_inode:5255: inode #16: comm syz.8.2817: corrupted inode contents
[ 1242.199296][T16498] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #16: comm syz.8.2817: mark_inode_dirty error
[ 1242.212033][T16498] EXT4-fs error (device loop8): ext4_do_update_inode:5255: inode #16: comm syz.8.2817: corrupted inode contents
[ 1242.226863][T16498] EXT4-fs error (device loop8) in ext4_orphan_del:303: Corrupt filesystem
[ 1242.244218][T16498] EXT4-fs error (device loop8): ext4_do_update_inode:5255: inode #16: comm syz.8.2817: corrupted inode contents
[ 1242.259151][T16498] EXT4-fs error (device loop8): ext4_truncate:4301: inode #16: comm syz.8.2817: mark_inode_dirty error
[ 1242.272304][T16498] EXT4-fs error (device loop8) in ext4_process_orphan:345: Corrupt filesystem
[ 1242.294822][T16498] EXT4-fs (loop8): 1 truncate cleaned up
[ 1242.302268][T16498] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1242.317871][ T2904] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14
[ 1242.329725][T16498] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1242.341907][ T2904] EXT4-fs error (device loop8): ext4_release_dquot:6989: comm kworker/u4:7: Failed to release dquot type 1
[ 1242.465144][T15937] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1243.865658][ T1176] block nbd0: Possible stuck request ffff888021cb8000: control (read@0,1024B). Runtime 120 seconds
[ 1244.388014][T16585] overlayfs: failed to clone upperpath
[ 1246.227634][T16619] loop4: detected capacity change from 0 to 128
[ 1246.255557][T16619] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1246.287521][T16619] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1246.365872][T10776] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1246.610400][T16630] program syz.8.2864 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1247.298937][T16655] loop8: detected capacity change from 0 to 128
[ 1247.329000][T16655] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1247.385761][T16655] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1247.476152][T16662] fuse: Bad value for 'fd'
[ 1248.188936][T16692] fuse: Bad value for 'fd'
[ 1250.923950][ T5136] udevd[5136]: worker [11851] /devices/virtual/block/nbd0 is taking a long time
[ 1251.753890][   T27] audit: type=1326 audit(1777663098.450:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16821 comm="syz.9.2937" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb443f9cdd9 code=0x7ffc0000
[ 1251.853903][   T27] audit: type=1326 audit(1777663098.450:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16821 comm="syz.9.2937" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb443f9cdd9 code=0x7ffc0000
[ 1251.919179][   T27] audit: type=1326 audit(1777663098.490:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16821 comm="syz.9.2937" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb443f9cdd9 code=0x7ffc0000
[ 1251.996804][   T27] audit: type=1326 audit(1777663098.490:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16821 comm="syz.9.2937" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb443f9cdd9 code=0x7ffc0000
[ 1252.073367][   T27] audit: type=1326 audit(1777663098.500:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16821 comm="syz.9.2937" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7fb443f9cdd9 code=0x7ffc0000
[ 1252.170992][   T27] audit: type=1326 audit(1777663098.500:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16821 comm="syz.9.2937" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb443f9cdd9 code=0x7ffc0000
[ 1252.261384][   T27] audit: type=1326 audit(1777663098.500:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16821 comm="syz.9.2937" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb443f9cdd9 code=0x7ffc0000
[ 1252.350430][   T27] audit: type=1326 audit(1777663098.510:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16821 comm="syz.9.2937" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fb443f9cdd9 code=0x7ffc0000
[ 1252.438649][   T27] audit: type=1326 audit(1777663098.510:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16821 comm="syz.9.2937" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fb443f9cdd9 code=0x7ffc0000
[ 1253.090828][   T27] audit: type=1326 audit(1777663099.790:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16865 comm="syz.9.2953" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb443f9cdd9 code=0x7fc00000
[ 1253.911391][T16889] fuse: Bad value for 'fd'
[ 1254.507155][   T11] wlan1: Trigger new scan to find an IBSS to join
[ 1256.884220][T16978] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2987'.
[ 1257.545592][   T11] wlan1: Trigger new scan to find an IBSS to join
[ 1259.214944][T17052] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3011'.
[ 1259.238191][T17052] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3011'.
[ 1259.838711][T17082] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3022'.
[ 1259.864178][T17082] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3022'.
[ 1260.063861][   T27] audit: type=1326 audit(1777663106.760:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17090 comm="syz.4.3024" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1452f9cdd9 code=0x7ffc0000
[ 1260.123846][   T27] audit: type=1326 audit(1777663106.770:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17090 comm="syz.4.3024" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1452f9cdd9 code=0x7ffc0000
[ 1260.182286][   T27] audit: type=1326 audit(1777663106.770:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17090 comm="syz.4.3024" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f1452f9cdd9 code=0x7ffc0000
[ 1260.271839][   T27] audit: type=1326 audit(1777663106.770:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17090 comm="syz.4.3024" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1452f9cdd9 code=0x7ffc0000
[ 1260.332579][   T27] audit: type=1326 audit(1777663106.770:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17090 comm="syz.4.3024" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f1452f9cdd9 code=0x7ffc0000
[ 1260.390888][   T27] audit: type=1326 audit(1777663106.770:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17090 comm="syz.4.3024" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1452f9cdd9 code=0x7ffc0000
[ 1260.733101][T17113] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3033'.
[ 1260.764481][T17113] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3033'.
[ 1261.051616][T17127] fuse: Bad value for 'group_id'
[ 1261.272591][T17138] netlink: 'syz.7.3039': attribute type 29 has an invalid length.
[ 1261.296024][T17138] netlink: 'syz.7.3039': attribute type 29 has an invalid length.
[ 1261.315404][T17133] netlink: 'syz.7.3039': attribute type 29 has an invalid length.
[ 1261.339744][T17143] netlink: 'syz.7.3039': attribute type 29 has an invalid length.
[ 1261.463964][ T2904] wlan1: Trigger new scan to find an IBSS to join
[ 1261.621859][T17151] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3043'.
[ 1261.980809][T17162] overlayfs: failed to resolve './bus': -2
[ 1262.032040][T17165] fuse: Bad value for 'group_id'
[ 1262.442556][T10776] wlan1: Creating new IBSS network, BSSID b6:f4:be:3b:ee:37
[ 1263.114227][T17181] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3054'.
[ 1263.263144][   T27] audit: type=1326 audit(1777663109.960:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17184 comm="syz.7.3055" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c4f9cdd9 code=0x7ffc0000
[ 1263.384103][   T27] audit: type=1326 audit(1777663109.960:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17184 comm="syz.7.3055" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c4f9cdd9 code=0x7ffc0000
[ 1263.478637][   T27] audit: type=1326 audit(1777663110.030:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17184 comm="syz.7.3055" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7f79c4f9cdd9 code=0x7ffc0000
[ 1263.538437][T17195] overlayfs: failed to resolve './bus': -2
[ 1263.561934][   T27] audit: type=1326 audit(1777663110.030:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17184 comm="syz.7.3055" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c4f9cdd9 code=0x7ffc0000
[ 1263.621120][T17198] fuse: Bad value for 'group_id'
[ 1263.974162][T17218] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3065'.
[ 1264.431380][T17236] overlayfs: failed to resolve './bus': -2
[ 1264.695127][T17245] autofs4:pid:17245:autofs_fill_super: called with bogus options
[ 1266.902234][T17328] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3101'.
[ 1267.064053][ T5783] Bluetooth: hci4: command 0x0406 tx timeout
[ 1267.631340][T17360] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3112'.
[ 1269.315244][T17398] fuse: Bad value for 'group_id'
[ 1269.355348][T17403] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3123'.
[ 1271.240609][T17438] fuse: Bad value for 'fd'
[ 1271.413299][T17439] fuse: Bad value for 'group_id'
[ 1272.119432][T17449] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3136'.
[ 1272.487770][T17465] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3142'.
[ 1272.844288][T17483] fuse: Bad value for 'group_id'
[ 1273.005507][T17489] overlayfs: missing 'lowerdir'
[ 1273.152997][T17496] fuse: Unknown parameter 'grou00000000000000000000'
[ 1274.225291][ T1176] block nbd0: Possible stuck request ffff888021cb8000: control (read@0,1024B). Runtime 150 seconds
[ 1274.508897][T14143] Bluetooth: hci2: ACL packet for unknown connection handle 201
[ 1274.873543][T17529] overlayfs: missing 'lowerdir'
[ 1275.767748][T17575] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3170'.
[ 1275.994242][T17583] overlayfs: missing 'lowerdir'
[ 1276.674049][T17612] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3180'.
[ 1276.695849][T17617] overlayfs: missing 'lowerdir'
[ 1278.294497][T17643] overlayfs: missing 'lowerdir'
[ 1278.523053][T17651] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3193'.
[ 1280.165670][T10628] IPVS: starting estimator thread 0...
[ 1280.250750][T17680] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1280.267386][T17683] overlayfs: missing 'lowerdir'
[ 1280.276280][T17676] IPVS: using max 16 ests per chain, 38400 per kthread
[ 1280.309585][T17686] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3203'.
[ 1282.072871][T17719] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3216'.
[ 1282.576174][T17744] fuse: Unknown parameter 'group_id00000000000000000000'
[ 1283.275223][T17768] fuse: Unknown parameter 'group_id00000000000000000000'
[ 1283.462085][T17774] fuse: Unknown parameter 'grou00000000000000000000'
[ 1283.792261][T17786] fuse: Bad value for 'user_id'
[ 1283.955707][T17795] fuse: Unknown parameter 'grou00000000000000000000'
[ 1284.404641][T17815] fuse: Bad value for 'user_id'
[ 1284.541286][T17821] fuse: Unknown parameter 'group_i00000000000000000000'
[ 1284.851903][T17833] fuse: Bad value for 'user_id'
[ 1285.011462][T17841] fuse: Unknown parameter 'group_i00000000000000000000'
[ 1285.023132][T17840] 9pnet_fd: Insufficient options for proto=fd
[ 1285.263268][T17852] overlayfs: failed to clone upperpath
[ 1285.278057][T17854] fuse: Bad value for 'fd'
[ 1285.895974][T17879] netlink: 'syz.4.3290': attribute type 10 has an invalid length.
[ 1286.075961][T17879] team0 (unregistering): Port device team_slave_0 removed
[ 1286.113498][T17879] team0 (unregistering): Port device team_slave_1 removed
[ 1289.084286][T17965] fuse: Unknown parameter '00000000000000000000'
[ 1290.335079][T18023] fuse: Bad value for 'user_id'
[ 1290.709118][T18043] overlayfs: failed to clone upperpath
[ 1291.281395][T18071] overlayfs: failed to clone upperpath
[ 1291.691848][T18082] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3377'.
[ 1291.722473][   T12] bond0: (slave bond_slave_0): interface is now down
[ 1291.736027][   T12] bond0: (slave bond_slave_1): interface is now down
[ 1291.761930][   T12] bond0: now running without any active interface!
[ 1292.203556][T18097] overlayfs: failed to clone upperpath
[ 1292.520223][T15231] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1293.486841][T18126] overlayfs: failed to clone upperpath
[ 1294.084876][T18149] overlayfs: failed to clone upperpath
[ 1295.089046][T18179] netlink: 'syz.7.3418': attribute type 13 has an invalid length.
[ 1295.117373][T18179] netlink: 'syz.7.3418': attribute type 17 has an invalid length.
[ 1295.858830][T18188] overlayfs: failed to clone upperpath
[ 1296.044751][T18179] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1296.077470][T18179] 8021q: adding VLAN 0 to HW filter on device team0
[ 1296.131053][T18179] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1296.334867][T18200] fuse: Invalid rootmode
[ 1296.619323][T18211] overlayfs: failed to clone upperpath
[ 1297.500055][T18237] fuse: Bad value for 'rootmode'
[ 1297.936191][T18247] overlayfs: failed to clone upperpath
[ 1298.193781][T18254] fuse: Bad value for 'rootmode'
[ 1298.489585][T18267] overlayfs: failed to clone upperpath
[ 1298.842851][T18274] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3456'.
[ 1298.858686][T18274] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3456'.
[ 1299.631312][T18281] fuse: Bad value for 'rootmode'
[ 1300.178737][T18308] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3473'.
[ 1300.501341][T18313] fuse: Unknown parameter 'use00000000000000000000'
[ 1300.831256][ T1287] ieee802154 phy0 wpan0: encryption failed: -22
[ 1300.837974][ T1287] ieee802154 phy1 wpan1: encryption failed: -22
[ 1302.221065][T18349] fuse: Unknown parameter 'use00000000000000000000'
[ 1302.904048][ T5783] Bluetooth: hci1: command 0x0406 tx timeout
[ 1303.012634][T18371] fuse: Unknown parameter 'use00000000000000000000'
[ 1303.138808][T18373] netlink: 67 bytes leftover after parsing attributes in process `syz.4.3497'.
[ 1303.303326][T18382] lo: entered allmulticast mode
[ 1303.383452][T18386] fuse: Invalid rootmode
[ 1303.604220][T18393] syz_tun: entered allmulticast mode
[ 1303.826104][T18398] fuse: Unknown parameter 'user_i00000000000000000000'
[ 1304.234578][T18410] fuse: Invalid rootmode
[ 1304.670204][ T1176] block nbd0: Possible stuck request ffff888021cb8000: control (read@0,1024B). Runtime 180 seconds
[ 1304.934908][T18441] fuse: Bad value for 'rootmode'
[ 1305.638381][T18463] fuse: Bad value for 'rootmode'
[ 1305.945194][ T5136] udevd[5136]: worker [11851] /devices/virtual/block/nbd0 timeout; kill it
[ 1305.964063][ T5136] udevd[5136]: seq 24621 '/devices/virtual/block/nbd0' killed
[ 1306.156894][T18490] fuse: Bad value for 'rootmode'
[ 1307.852327][T18517] overlayfs: failed to resolve './bus': -2
[ 1308.452296][T18534] fuse: Unknown parameter 'use00000000000000000000'
[ 1309.975421][T18557] securityfs: Unknown parameter ''
[ 1310.127496][T18563] fuse: Unknown parameter 'user_i00000000000000000000'
[ 1310.681130][T18578] IPv6: Can't replace route, no match found
[ 1311.575811][T18585] fuse: Unknown parameter 'user_i00000000000000000000'
[ 1312.957040][T18607] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3598'.
[ 1316.049271][T10786] IPVS: starting estimator thread 0...
[ 1316.294247][T18623] IPVS: using max 22 ests per chain, 52800 per kthread
[ 1323.952281][   T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1325.972033][T18763] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3657'.
[ 1326.145160][T18765] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1328.507801][ T5783] Bluetooth: hci0: command 0x0406 tx timeout
[ 1333.566004][T18847] Set syz1 is full, maxelem 0 reached
[ 1335.080284][ T5783] Bluetooth: hci2: command 0x0406 tx timeout
[ 1335.722315][ T1176] block nbd0: Possible stuck request ffff888021cb8000: control (read@0,1024B). Runtime 210 seconds
[ 1340.905174][T18937] netlink: 'syz.4.3724': attribute type 8 has an invalid length.
[ 1341.520845][T18950] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3730'.
[ 1341.696142][T18922] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3720'.
[ 1341.934496][T11662] udevd[11662]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[ 1341.978352][T12465] udevd[12465]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[ 1343.133260][T18981] vlan2: entered allmulticast mode
[ 1343.138790][T18981] macsec0: entered allmulticast mode
[ 1343.144340][T18981] veth1_macvtap: entered allmulticast mode
[ 1351.429268][T19067] syz_tun: entered allmulticast mode
[ 1351.558851][T19071] fuse: Unknown parameter 'fd0x0000000000000003'
[ 1352.271494][T19099] fuse: Unknown parameter 'fd0x0000000000000003'
[ 1354.935241][T19144] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3802'.
[ 1355.250276][T19156] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method
[ 1355.460679][   T49] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1355.760205][T19164] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3812'.
[ 1356.518304][T19172] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3814'.
[ 1356.529934][T19172] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3814'.
[ 1357.541926][T19188] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3821'.
[ 1358.337614][T19214] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3829'.
[ 1358.350464][T19214] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3829'.
[ 1358.590429][T19225] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3835'.
[ 1358.796370][T14143] Bluetooth: hci0: Ignoring connect complete event for invalid link type
[ 1360.189226][T19256] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3847'.
[ 1360.694667][T19269] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3850'.
[ 1360.706332][T19269] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3850'.
[ 1362.002556][T19288] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3859'.
[ 1362.270665][ T1287] ieee802154 phy0 wpan0: encryption failed: -22
[ 1362.278990][ T1287] ieee802154 phy1 wpan1: encryption failed: -22
[ 1362.972278][T19304] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3867'.
[ 1362.984189][T19304] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3867'.
[ 1365.883855][T19339] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3881'.
[ 1365.946624][T19340] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3878'.
[ 1365.957883][T19340] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3878'.
[ 1367.245865][ T1176] block nbd0: Possible stuck request ffff888021cb8000: control (read@0,1024B). Runtime 240 seconds
[ 1368.264930][T19366] netlink: 'syz.7.3888': attribute type 5 has an invalid length.
[ 1368.283124][T19366] ip6erspan0: entered promiscuous mode
[ 1368.980276][T19378] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[ 1370.027477][T19381] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3891'.
[ 1370.074654][T19381] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3891'.
[ 1370.893892][T19403] overlayfs: failed to clone upperpath
[ 1371.008386][T19405] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3898'.
[ 1371.241514][T19405] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3898'.
[ 1371.256352][T19405] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3898'.
[ 1371.269731][T19405] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3898'.
[ 1371.279862][T19405] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3898'.
[ 1371.962714][T19414] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3902'.
[ 1371.973221][T19414] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3902'.
[ 1372.074812][T19412] netlink: 120 bytes leftover after parsing attributes in process `syz.4.3901'.
[ 1373.842333][T19437] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3911'.
[ 1373.854061][T19437] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3911'.
[ 1376.182372][T14143] Bluetooth: hci1: unexpected cc 0x203e length: 2 > 1
[ 1376.191451][T14143] Bluetooth: hci1: unexpected event for opcode 0x203e
[ 1378.677961][T14143] Bluetooth: hci4: unexpected event for opcode 0x080b
[ 1379.623979][T19530] __nla_validate_parse: 2 callbacks suppressed
[ 1379.624000][T19530] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3948'.
[ 1379.672988][T19530] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3948'.
[ 1380.267040][T14143] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[ 1380.277695][T14143] Bluetooth: hci1: Injecting HCI hardware error event
[ 1380.288275][ T5783] Bluetooth: hci1: hardware error 0x00
[ 1381.623861][T19558] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3959'.
[ 1381.635119][T19558] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3959'.
[ 1382.344234][ T5783] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[ 1383.806816][T19598] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3975'.
[ 1383.820704][T19598] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3975'.
[ 1385.034885][T10786] kernel write not supported for file bpf-prog (pid: 10786 comm: kworker/0:11)
[ 1386.388757][T19660] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3999'.
[ 1386.399953][T19660] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3999'.
[ 1386.556070][T19662] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4002'.
[ 1386.927098][   T49] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1387.609379][T19686] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4011'.
[ 1389.991657][T19714] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4023'.
[ 1391.379057][T19729] can: request_module (can-proto-4) failed.
[ 1391.442465][T19717] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4025'.
[ 1391.459683][T19717] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4025'.
[ 1394.479888][T19770] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4040'.
[ 1394.550031][T19770] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4040'.
[ 1396.661349][T19790] autofs4:pid:19790:autofs_fill_super: called with bogus options
[ 1397.518761][ T1176] block nbd0: Possible stuck request ffff888021cb8000: control (read@0,1024B). Runtime 270 seconds
[ 1404.812435][T19821] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4059'.
[ 1404.826244][T19821] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4059'.
[ 1416.980071][T19871] overlayfs: failed to clone lowerpath
[ 1417.829157][ T5783] Bluetooth: hci0: ACL packet for unknown connection handle 201
[ 1417.996057][   T49] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1418.932563][T19884] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4078'.
[ 1424.054389][ T1287] ieee802154 phy0 wpan0: encryption failed: -22
[ 1424.060805][ T1287] ieee802154 phy1 wpan1: encryption failed: -22
[ 1426.372174][T19908] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4084'.
[ 1426.884776][T19919] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4088'.
[ 1427.554982][ T1176] block nbd0: Possible stuck request ffff888021cb8000: control (read@0,1024B). Runtime 300 seconds
[ 1428.139384][T19938] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[ 1431.806191][T19961] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4101'.
[ 1431.882220][T19963] syz_tun: entered allmulticast mode
[ 1433.203422][T19970] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4105'.
[ 1436.999150][T19994] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4112'.
[ 1446.595959][T20041] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[ 1448.557928][T20058] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4132'.
[ 1449.730421][T20074] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4130'.
[ 1450.013040][T20074] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4130'.
[ 1452.036062][ T1040] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1454.472824][T20089] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1455.123843][   T29] INFO: task udevd:11851 blocked for more than 144 seconds.
[ 1455.141807][   T29]       Not tainted syzkaller #0
[ 1455.174466][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1455.209527][   T29] task:udevd           state:D stack:23048 pid:11851 ppid:5136   flags:0x00004006
[ 1455.415114][   T29] Call Trace:
[ 1455.443915][   T29]  <TASK>
[ 1455.463757][   T29]  __schedule+0x1553/0x45a0
[ 1455.473524][   T29]  ? asan.module_dtor+0x20/0x20
[ 1455.505995][   T29]  ? mark_lock+0x94/0x320
[ 1455.528753][   T29]  ? lock_chain_count+0x20/0x20
[ 1455.550333][   T29]  ? _raw_spin_lock_irq+0xbb/0xf0
[ 1455.569543][   T29]  ? _raw_spin_lock_irqsave+0x100/0x100
[ 1455.582622][   T29]  schedule+0xbd/0x170
[ 1455.590136][   T29]  io_schedule+0x80/0xd0
[ 1455.598974][   T29]  folio_wait_bit_common+0x714/0xfa0
[ 1455.607365][   T29]  ? folio_wait_bit+0x30/0x30
[ 1455.612383][   T29]  ? _compound_head+0x120/0x120
[ 1455.624461][   T29]  ? filemap_add_folio+0x192/0x3c0
[ 1455.629821][   T29]  ? __filemap_get_folio+0x704/0xbb0
[ 1455.656277][   T29]  ? blkdev_writepage+0x30/0x30
[ 1455.661496][   T29]  do_read_cache_folio+0x1c0/0x7d0
[ 1455.672867][   T29]  ? blkdev_writepage+0x30/0x30
[ 1455.680498][   T29]  read_part_sector+0xd2/0x340
[ 1455.692137][   T29]  adfspart_check_POWERTEC+0x93/0xed0
[ 1455.702174][   T29]  ? adfspart_check_ADFS+0x620/0x620
[ 1455.713515][   T29]  ? put_partition+0x370/0x370
[ 1455.720256][   T29]  ? alloc_pages+0x4dc/0x740
[ 1455.730861][   T29]  bdev_disk_changed+0x740/0x1420
[ 1455.737827][   T29]  ? bdev_resize_partition+0xf0/0xf0
[ 1455.756258][   T29]  ? iput+0x343/0x920
[ 1455.762600][   T29]  blkdev_get_whole+0x30d/0x390
[ 1455.773249][   T29]  blkdev_get_by_dev+0x279/0x600
[ 1455.791059][   T29]  blkdev_open+0x152/0x360
[ 1455.805387][   T29]  ? blkdev_mmap+0x1b0/0x1b0
[ 1455.810437][   T29]  do_dentry_open+0x8c6/0x1500
[ 1455.821185][   T29]  path_openat+0x27f1/0x3230
[ 1455.827640][   T29]  ? do_sys_openat2+0xda/0x1d0
[ 1455.832649][   T29]  ? verify_lock_unused+0x140/0x140
[ 1455.849627][   T29]  ? do_filp_open+0x430/0x430
[ 1455.862539][   T29]  ? __virt_addr_valid+0x18c/0x540
[ 1455.874511][   T29]  do_filp_open+0x1f5/0x430
[ 1455.879440][   T29]  ? vfs_tmpfile+0x490/0x490
[ 1455.893383][   T29]  ? _raw_spin_unlock+0x28/0x40
[ 1455.900011][   T29]  ? alloc_fd+0x58f/0x630
[ 1455.913706][   T29]  do_sys_openat2+0x134/0x1d0
[ 1455.918622][   T29]  ? do_sys_open+0xe0/0xe0
[ 1455.923191][   T29]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[ 1455.936395][   T29]  ? lock_chain_count+0x20/0x20
[ 1455.941320][   T29]  __x64_sys_openat+0x139/0x160
[ 1455.951773][   T29]  do_syscall_64+0x55/0xa0
[ 1455.960743][   T29]  ? clear_bhb_loop+0x40/0x90
[ 1455.966564][   T29]  ? clear_bhb_loop+0x40/0x90
[ 1455.979118][   T29]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1455.993235][   T29] RIP: 0033:0x7ff9254a7407
[ 1456.012400][   T29] RSP: 002b:00007ffe0e8e10b0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[ 1456.032905][   T29] RAX: ffffffffffffffda RBX: 00007ff925b61880 RCX: 00007ff9254a7407
[ 1456.045086][   T29] RDX: 00000000000a0800 RSI: 0000557beb35e010 RDI: ffffffffffffff9c
[ 1456.063066][   T29] RBP: 0000557beb34e910 R08: 0000000000000000 R09: 0000000000000000
[ 1456.072945][   T29] R10: 0000000000000000 R11: 0000000000000202 R12: 0000557beb362ba0
[ 1456.087666][   T29] R13: 0000557beb366410 R14: 0000000000000000 R15: 0000557beb362ba0
[ 1456.109519][   T29]  </TASK>
[ 1456.116320][   T29] 
[ 1456.116320][   T29] Showing all locks held in the system:
[ 1456.140585][   T29] 1 lock held by khungtaskd/29:
[ 1456.313703][   T29]  #0: ffffffff8d1320e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290
[ 1456.387542][   T29] 2 locks held by getty/5530:
[ 1456.402070][   T29]  #0: ffff888030eb20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 1456.475826][   T29]  #1: ffffc900032762f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x433/0x1390
[ 1456.493890][   T29] 3 locks held by kworker/u4:2/10776:
[ 1456.502360][   T29]  #0: ffff8880b8e3c018 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xa9/0x140
[ 1456.515457][   T29]  #1: ffffc9000c377d00 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0
[ 1456.533981][   T29]  #2: ffff8880b8f29598 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x123/0x270
[ 1456.550755][   T29] 1 lock held by udevd/11851:
[ 1456.560454][   T29]  #0: ffff888021a5c4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600
[ 1456.588614][   T29] 6 locks held by syz-executor/15986:
[ 1456.600301][   T29] 
[ 1456.602770][   T29] =============================================
[ 1456.602770][   T29] 
[ 1456.613780][   T29] NMI backtrace for cpu 1
[ 1456.618175][   T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0
[ 1456.625504][   T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1456.635600][   T29] Call Trace:
[ 1456.638918][   T29]  <TASK>
[ 1456.641886][   T29]  dump_stack_lvl+0x18c/0x250
[ 1456.646621][   T29]  ? show_regs_print_info+0x20/0x20
[ 1456.651956][   T29]  ? load_image+0x420/0x420
[ 1456.656611][   T29]  nmi_cpu_backtrace+0x3a6/0x3e0
[ 1456.661684][   T29]  ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0
[ 1456.667898][   T29]  ? _printk+0xde/0x130
[ 1456.672094][   T29]  ? load_image+0x420/0x420
[ 1456.676652][   T29]  ? load_image+0x420/0x420
[ 1456.681204][   T29]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[ 1456.687412][   T29]  nmi_trigger_cpumask_backtrace+0x17a/0x2f0
[ 1456.693530][   T29]  watchdog+0xf3d/0xf80
[ 1456.697759][   T29]  ? watchdog+0x1e1/0xf80
[ 1456.702143][   T29]  kthread+0x2fa/0x390
[ 1456.706245][   T29]  ? hungtask_pm_notify+0x90/0x90
[ 1456.711328][   T29]  ? kthread_blkcg+0xd0/0xd0
[ 1456.715980][   T29]  ret_from_fork+0x48/0x80
[ 1456.720448][   T29]  ? kthread_blkcg+0xd0/0xd0
[ 1456.725094][   T29]  ret_from_fork_asm+0x11/0x20
[ 1456.730015][   T29]  </TASK>
[ 1456.734403][   T29] Sending NMI from CPU 1 to CPUs 0:
[ 1456.739931][    C0] NMI backtrace for cpu 0
[ 1456.739942][    C0] CPU: 0 PID: 15986 Comm: syz-executor Not tainted syzkaller #0
[ 1456.739958][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1456.739966][    C0] RIP: 0010:unwind_next_frame+0x4b3/0x2970
[ 1456.739989][    C0] Code: 48 c1 e8 3f 48 01 c8 48 83 e0 fe 4d 8d 3c 44 4c 89 f8 48 c1 e8 03 0f b6 04 10 84 c0 75 3e 4d 63 2f 4d 01 fd 4c 89 ef 4c 89 f6 <e8> 98 e7 4b 00 49 8d 47 04 4d 39 f5 4c 0f 46 e0 49 8d 47 fc 48 0f
[ 1456.740001][    C0] RSP: 0018:ffffc900000073b8 EFLAGS: 00000283
[ 1456.740015][    C0] RAX: 0000000000000000 RBX: ffffffff8ea2efd0 RCX: 0000000000000000
[ 1456.740026][    C0] RDX: dffffc0000000000 RSI: ffffffff81de84db RDI: ffffffff81de84e0
[ 1456.740036][    C0] RBP: ffffffff8ea2efcc R08: ffffc90000007550 R09: 0000000000000003
[ 1456.740046][    C0] R10: 0000000000000004 R11: 0000000000000100 R12: ffffffff8ea2efd0
[ 1456.740055][    C0] R13: ffffffff81de84e0 R14: ffffffff81de84db R15: ffffffff8ea2efd0
[ 1456.740066][    C0] FS:  0000555565708500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[ 1456.740079][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1456.740090][    C0] CR2: 00007fb4441e8158 CR3: 000000006959a000 CR4: 00000000003506f0
[ 1456.740106][    C0] Call Trace:
[ 1456.740111][    C0]  <IRQ>
[ 1456.740120][    C0]  ? kmem_cache_alloc_node+0x14b/0x320
[ 1456.740143][    C0]  ? kmem_cache_alloc_node+0x14c/0x320
[ 1456.740163][    C0]  ? kmem_cache_alloc_node+0x14c/0x320
[ 1456.740181][    C0]  ? stack_trace_save+0x100/0x100
[ 1456.740199][    C0]  arch_stack_walk+0x144/0x190
[ 1456.740217][    C0]  ? kmem_cache_alloc_node+0x14c/0x320
[ 1456.740239][    C0]  stack_trace_save+0xaa/0x100
[ 1456.740255][    C0]  ? stack_trace_snprint+0xf0/0xf0
[ 1456.740273][    C0]  ? stack_trace_save+0xaa/0x100
[ 1456.740289][    C0]  ? stack_trace_snprint+0xf0/0xf0
[ 1456.740307][    C0]  kasan_set_track+0x4e/0x70
[ 1456.740322][    C0]  ? kasan_set_track+0x4e/0x70
[ 1456.740336][    C0]  ? __kasan_slab_alloc+0x6c/0x80
[ 1456.740351][    C0]  ? slab_post_alloc_hook+0x6e/0x4b0
[ 1456.740369][    C0]  ? kmem_cache_alloc_node+0x14c/0x320
[ 1456.740412][    C0]  __kasan_slab_alloc+0x6c/0x80
[ 1456.740429][    C0]  slab_post_alloc_hook+0x6e/0x4b0
[ 1456.740452][    C0]  kmem_cache_alloc_node+0x14c/0x320
[ 1456.740471][    C0]  ? kmalloc_reserve+0x95/0x240
[ 1456.740546][    C0]  kmalloc_reserve+0x95/0x240
[ 1456.740561][    C0]  __alloc_skb+0x138/0x2c0
[ 1456.740577][    C0]  skb_copy+0x13d/0x7a0
[ 1456.740626][    C0]  can_can_gw_rcv+0x43c/0xec0
[ 1456.740733][    C0]  ? cgw_job_free_rcu+0x50/0x50
[ 1456.740753][    C0]  can_rcv_filter+0x120/0x770
[ 1456.740772][    C0]  ? can_receive+0x1a9/0x440
[ 1456.740791][    C0]  can_receive+0x312/0x440
[ 1456.740812][    C0]  can_rcv+0x145/0x270
[ 1456.740829][    C0]  ? canfd_rcv+0x270/0x270
[ 1456.740848][    C0]  __netif_receive_skb+0xcc/0x290
[ 1456.740886][    C0]  ? process_backlog+0x2cf/0x6f0
[ 1456.740901][    C0]  process_backlog+0x391/0x6f0
[ 1456.740924][    C0]  ? trigger_rx_softirq+0x60/0x60
[ 1456.740939][    C0]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[ 1456.740958][    C0]  ? lock_chain_count+0x20/0x20
[ 1456.740975][    C0]  __napi_poll+0xc0/0x460
[ 1456.740989][    C0]  ? net_rx_action+0x3a0/0xc40
[ 1456.741006][    C0]  net_rx_action+0x616/0xc40
[ 1456.741027][    C0]  ? net_tx_action+0x980/0x980
[ 1456.741042][    C0]  ? detach_timer+0x2b0/0x2b0
[ 1456.741058][    C0]  ? lock_chain_count+0x20/0x20
[ 1456.741078][    C0]  handle_softirqs+0x280/0x820
[ 1456.741095][    C0]  ? do_softirq+0xfa/0x1a0
[ 1456.741111][    C0]  ? do_softirq+0x1a0/0x1a0
[ 1456.741128][    C0]  ? __tcp_close+0x624/0xe40
[ 1456.741176][    C0]  do_softirq+0xfa/0x1a0
[ 1456.741190][    C0]  </IRQ>
[ 1456.741194][    C0]  <TASK>
[ 1456.741199][    C0]  ? __local_bh_enable_ip+0x1c0/0x1c0
[ 1456.741214][    C0]  ? lockdep_hardirqs_on_prepare+0x770/0x770
[ 1456.741233][    C0]  ? rcu_is_watching+0x15/0xb0
[ 1456.741253][    C0]  __local_bh_enable_ip+0x184/0x1c0
[ 1456.741268][    C0]  ? _local_bh_enable+0xa0/0xa0
[ 1456.741283][    C0]  ? __local_bh_enable_ip+0x13a/0x1c0
[ 1456.741299][    C0]  ? __tcp_close+0x624/0xe40
[ 1456.741319][    C0]  __tcp_close+0x624/0xe40
[ 1456.741339][    C0]  ? do_raw_spin_unlock+0x121/0x230
[ 1456.741360][    C0]  tcp_close+0x28/0x110
[ 1456.741378][    C0]  inet_release+0x13d/0x180
[ 1456.741409][    C0]  sock_close+0xbd/0x230
[ 1456.741442][    C0]  ? sock_mmap+0xa0/0xa0
[ 1456.741456][    C0]  __fput+0x234/0x970
[ 1456.741475][    C0]  __se_sys_close+0x15f/0x220
[ 1456.741495][    C0]  do_syscall_64+0x55/0xa0
[ 1456.741510][    C0]  ? clear_bhb_loop+0x40/0x90
[ 1456.741528][    C0]  ? clear_bhb_loop+0x40/0x90
[ 1456.741544][    C0]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1456.741562][    C0] RIP: 0033:0x7fb443f5d60e
[ 1456.741573][    C0] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1456.741592][    C0] RSP: 002b:00007ffcf03519e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[ 1456.741607][    C0] RAX: ffffffffffffffda RBX: 0000555565708500 RCX: 00007fb443f5d60e
[ 1456.741617][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[ 1456.741626][    C0] RBP: 00007ffcf0351a8c R08: 0000000000000000 R09: 0000000000000000
[ 1456.741635][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000176
[ 1456.741643][    C0] R13: 00000000000927c0 R14: 0000000000163774 R15: 00007ffcf0351ae0
[ 1456.741668][    C0]  </TASK>
[ 1457.312179][   T29] Kernel panic - not syncing: hung_task: blocked tasks
[ 1457.319119][   T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0
[ 1457.326614][   T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1457.336701][   T29] Call Trace:
[ 1457.340013][   T29]  <TASK>
[ 1457.342968][   T29]  dump_stack_lvl+0x18c/0x250
[ 1457.347696][   T29]  ? show_regs_print_info+0x20/0x20
[ 1457.352959][   T29]  ? load_image+0x420/0x420
[ 1457.357510][   T29]  panic+0x2dc/0x730
[ 1457.361619][   T29]  ? schedule_preempt_disabled+0x20/0x20
[ 1457.367292][   T29]  ? bpf_jit_dump+0xd0/0xd0
[ 1457.372014][   T29]  ? __irq_work_queue_local+0x13a/0x3b0
[ 1457.377642][   T29]  ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0
[ 1457.383840][   T29]  watchdog+0xf7c/0xf80
[ 1457.388036][   T29]  ? watchdog+0x1e1/0xf80
[ 1457.392415][   T29]  kthread+0x2fa/0x390
[ 1457.396515][   T29]  ? hungtask_pm_notify+0x90/0x90
[ 1457.401589][   T29]  ? kthread_blkcg+0xd0/0xd0
[ 1457.406220][   T29]  ret_from_fork+0x48/0x80
[ 1457.410674][   T29]  ? kthread_blkcg+0xd0/0xd0
[ 1457.415293][   T29]  ret_from_fork_asm+0x11/0x20
[ 1457.420106][   T29]  </TASK>
[ 1457.423806][   T29] Kernel Offset: disabled
[ 1457.428229][   T29] Rebooting in 86400 seconds..