last executing test programs:

3m33.087881417s ago: executing program 4 (id=5):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
syz_mount_image$btrfs(&(0x7f0000000100), &(0x7f0000000000)='.\x00', 0x810, &(0x7f0000000680)={[{@fatal_errors_bug}, {@max_inline={'max_inline', 0x3d, [0x2d]}}, {@fragment_all}, {@usebackuproot}, {@check_int}, {@ref_verify}, {@subvolid={'subvolid', 0x3d, 0x5}}, {@acl}, {@barrier}, {@ssd}, {@subvol={'subvol', 0x3d, 'subvolid'}}, {@skip_balance}, {@acl}, {@discard}, {@ref_verify}]}, 0x0, 0x5145, &(0x7f00000057c0)="$eJzs3U+IVVUcB/Dz5n8KzksIbJVFINXCwU1ERE+ZoCLolYvBCJxaBOnCSZBoIYgt+rfwlRS1sGYltUhmYQS1cSGFEbgNDXPhRjGQXLTTmHfvufPeub773kzamH4+MnPvub97zj3vcRfv+5x7bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAQwgu/f3q4qn7q2vSZczONXQe3zlzeP73+dAi19vZaXt+57dmX39i+c6zoMPtStqzXew2ZdT2fNca6Ni726/55LYQwmgwwnC+fWVsatXN1b3nAStcv7jm6eV9j0/EjreGrl86eLL90Fk2s9gRWS35eXVg6lxrt30PJHkW749SrdZ2iWf/0hPtPXgQAsCxTzfai+Diaf8Qt2gfSetJuJO1W0o6fEFqdjZXIxh3rNc+NaX2V5tnIosJ4z3km9fz9L9rNtH/STqLGMubZvWseaSZ6zXMuqa/WPAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABuJ4+8NfJQVf3Utekz52Yauw5unbm8f3r96RDq7e21rFxb896Rxl/fbjt28MctXx2/8Pxjw3m/uBzp2Dn8FleemAzh9Y7KhTjsxXUhNLsL7Wb4olx4s73yXCwAAABwJ7m//XuoaGdxcLSrXWunyVr7X5SFxesX9xzdvK+x6fiR1vDVS2dPrny8Zo/xGjccr2jXl35qHcE4xt90vKV63HVvaZxq6Yhpnn/8/NTfVf1L+b9enf/jOyf/AwAA8G/I/+k41frl/+9e/ePjqv6l/L+x65Cl/B9nHPP/UFhZ/gcAAIDb2a3O/43SONX65f/xF0e/rupfyv9Tg+X/kc5px42/xgnvngxhqt/UAQAAgB7i/7svfbUQ83r2zUGa15969NC5qvFK+b8xWP4fDV/O39QXBgAAAKzY/Oc7Hq6ql/J/c7D8P35LZw0AAAAsx9sfTLxfVS/l/9nB8v+afJlf+ZB1+in+FcLhyRAmFlfmssLPofV0UQAAAABukpjT//xk1w9V+5Xy/1z1/f/jnQ7i9f9d9/8rXf/fUcju+vekGwMAAABwNypfzx9vj589uaDX8/cHvf7/gXsOvVJ1/FL+PzBY/h/uXN7M5/8BAADACvzfnv+3ozROtX73/7/vw3d+qepfyv+twfJ/XK7tfHknarXs/Xl3MoQNiyv53QS/iYfbnRQWRjsKbc2kx/bYIy8sjHcU2uaSHlsmQ3hwceVAUrg3FlpJ4cq6vDCfFE7HQn4+FIVjSeFEPNM+W5dPNy18Hwv5BRYL8QqKtcUlEUmPq716LBZu2ONscXAAAIC7SgzPeZYd7W6GNMou1PrtsKbfDkP9dhjut8NIskO6Y6/tYba7ELe3zmxa3vP/5wfL//GtGMsWva7/D/H6//y5hsX1/7OxUE8KC7HQTO8Y0IzHyMLuR/EY9Wbe48qGogAAAAB3tPi9wPAqzwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB/2LvzGLuu+nDgZ9Y3m2cmgZ8I+SEYoI5xwePxOCxqUzFOUxWFUsYlJaoQxcYeh8ETbLwUHAHyAkpRBE1LJPijKI4QqvkjqUWCgAYUNxVGUcMiqiJIlIi0JggUSgMoFCLh6r17z5v7zp23eBnbk34+kued975nuee+xffc5VwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/G0585H1/3Sr+0G+ve+TxG2fefXjTjU998LrLvxXCbO31rizcNXTrp2d+fve19xy+f/rO+05d/8r+vFweD8PVP935kw/HWk+tCuGLXSH0poF1I1mgL38+Uqvv3hBeNBLCZWExUC8xN5SVSBsOXxsM4WhYDIzExJcHQxgpBG74zoMPfKyauGMwhNUhhEraxmOVrI3BNHBVfxYYSgO7erPAr05n6oEvdWcBOGfxy1D/0B+fbcwwvnS5Jp+/vvO2YBdX2r2emBhvnu+nm5Z5oQr60xdmz+ltK1XHsih9PU74tq2Ab1tpPd/ubStuSOVbKKcXQ5XQvX1ux9b9C/viK91hcrKnWU3L9D5//+kPbDuT9Ir5HMYFGD8vn8OPf3P13T1r3/SN+9atfvLYq4785FwX83uFVVpML7dKyD9zK+Z9jGb8nqyAr19pK2nCRlcIYce7fufNreKl8f946/F//DjHx+6G3LHWZ0ezsXl8ZSQmfjaajc0BAABgxVgJe013TX71dYXiY5WkvtL4f6Kz4//xkH8+mM96eyKEmVriyFgIV9RezwKfi829cyyEl9ZSs42BTUngRAgvrCXW1qtKSgzEEhNJ4EejeWAmCZyMgdkk8NkYuD0JfDgGjieBbTFwIglcGwNhvrEfvzua96PjwGAMbMlW4vF4FsIvRmNrybp6tF4VAADAeZKPDvsanxbOdTjXDHF4eXywXYZ4BnbTDJWkhnQEWx9WNa2ht10N3e1qqPf7YOvul2rualdz6TSMrsYMn/7lX70ltFAa/0+1Hv9XlliQrtLx/xA21/7G3N15ZKEe3zLbkAEAAAA4B8P/88RnWsVL4/+Zzs7/j/tEegqZw8NxN8TOsRCmGgNZtb9fDmRHvYfzAAAAAKwE9ePx9WPh8/ljdop2Op4u5589w/zxwP/Mkvn7D31lS6vlLY3/Zzs7/3+o8TFbiJNxKT4xFsJAIfD1uJTVQM1EDPzg9Y2BvP8n4wq4LVaVn5hQr+q2WGJLDEwlgaPNSny7XuKKxkD+ZtUbP1Lvx3xeohAAAACACy7uDojH5eP5/y/7zfT7WpUrjf+3nNn5/7VxcOn0/oXhENb3htCTXhjw8FA2MWAMjHTlia8OZXX1pFUdGgrhmmrH0qqeyOf/703nGPzOYFZVDFzxsmNPX1VNfGYwhPXFwHffdterq4l9SaDe+J8PhvCSam/Txr8wkDXelzb+yYEQXlwI1Kt650AI1cb606oerOT3MUir+sdKCM8rBOpVvaYSwoEAwAoV/yvdXnxx74Fbdm5dWJjbs4yJuA9/MOyYX5ib3LZrYXulyTJtT5a5YRqjQ+U+dXrnm0fzKYreeu/mkU7S9esEp4pt5fvxSycO5s/jtlBfrZ/TfQ1PN6ZdfsXLy02EwpZUsy53L3OXh4qVLL6Jpfpj/v4wHAb2753bM/n+rfv27dmQ/e00+3T2Nx5mytbVhnRdDS21bB18PJrOlpU423W1pljJ+n03716/98At6+Zv3nrT3E1z79nwmumpq6c2Tr326vXVXk1lf9t0dc1SVSddPX1Xh/2q6TkvXb2yt1DJhfjVkJCQWGmJXcNrWv6fXBr/7249/o+/OvGXP5+fodnx//F4mD97ffEw/5YYONrp8f/xZkfz6ycGTCSBgzFw0GF+AAAAnhviID/uXIx7pX+89gtPtipXGv8f7Oz6//M0/3996vrrm03zvzaWmGo2/386zX99/v+Dzeb/T6f5r8//f/QizP+/vx5IVskvzP8PAAA8F1y4+f/bTu+f3iCglKHt9P7pDQJKGdpO49/pDQLOeP7/x/7jL/4rtFAa/9/e2fjfxP0AAABw6fjQn7zv/7WKl8b/R9uP/6cL5S/c/H+h2fn/E80Cs80mBjT/HwAAACtUs/n/xm8dekercqXx//HOjv/H0y66G3LHWp8dzea0C+mcdj8brV8yAAAAACtDd5ic7Oswb8PMqJs6LPQv6fyqIXw/nwq0VbroiT86dWbn/5/obPzfcF3Gx7+5+u6etW/6xrP3rVv95LFXHfnJ4vF/AAAAYPl0ul8CAAAAAAAAAAAAAAC4+J7498MbW8VL1/+HzbXXm13/H+/7F68veH5D7lhr+/n/8uc3vPGeA7UpCx8eDeHlxcDOwzsvC/m9+dcUAw+8fe0LqonDaYmvPH7tD6uJd6SBN6y7/Jlq4poksCVOkvjCNBDvqvjMqiQQp1f8tzQQ18fxNNCfBz66KutHV7qufjySrauudF09MhLCWCFQX1dfHMna6Eo7eEcSqHfwvWkgdvBP80B3ulT3DGdLFQMjseidw9lSAQBwyYpbgX1hx/zC3FTchI+PV/Y2PkYNU5YdKlfb1WHzj+ZTk7313s0jnaR70m3RxXuN94VKtQsbSpurxSxdtV6en1rarLrnN+lyu9neupuUS53pqutv3qPBrEeT23YtbO9r2/GN7bNM97bNsqE02Clm6a6t0g5q6WBZOuhRh+umg0WOz7vD5GRPkuv3YnA8NGj3iej0ev3iPH/NPgXFPO85deRXreorjf/HOxv/V4r9eia/GcDBeGe9vxkzzT8AAAAsr49u+vWn4r+33PrQd1vlLY3/Jzob/8c9WPmh4Gxvx4l4//8jYyHUbq0/ngU+F5t751gIL62lZmOJ7Ib618cSU1ngc3GHydpYYstsY1UDMXA8CfxoNA+cSAInYyDfS3Es5Lty/nY0hFfXUpsbS+yOJcaTwJtjYCIJTMbAVBJYFQMzSeCpVXlgNgn8awyE+cZ1de+qfF0BAAB0qHYPt3ycFY8/x2FXOs473tsuQ1e7DEPtMnS3y1BpmaEvHG/Wi/j88zFDX3LySlchU1/a7GBSSylDvBl+0wVvu3brh/+/3ZgzLVhqOp5/UD/foKsxw/2v662EFkrj/6nOxv9DjY9Z6yfj+H/x/n9Z4Otx8T4RTx2fiIEfvL4xkO8YOBkHu7fVq5rNS+SD9ttiiZkYmEgCu2NgJgls2ZwHjr6gMZCPtOuNH6k3Pp+XKAQAAADggos7COJumjj+v3PvR4ZblSuN/2c6G//H9oaLjX041npqVQhf7Fpcmnpg3UgWiPsxRuLl8S8aCeGywg6Oeom5oaxEf9Jw+NpgdoV6f1rVlweziw/i8xu+8+ADH6sm7hgMYXVh70u9jccqWRuDaeCq/iwwlAZ29WaBuOenHvhSdxaAc1bfKxg/UPmpLnXjS5UaaHZl3nPlnqBp90r7QJfIt9Q1V8ultMM136dat+Tb1vSCypb7bzlvSl+PE51825q+bb5tF0bp6zHu21bckMq3UE4vhiqhe/vcjq37F/bFV4pXspYs0/tcvEq1k/R5+BwePPulba+SLsBU8vMxtXS5pT+HXbG6j39z9d09a9/0jfvWrX7y2KuO/KTjxWgiXij84Af/eeR7hdW73Coh/8ytuN+TWb8nK+K/geTbPeFtCyFsfuqTt7WKl8b/s52N/3uTx5pfx5W5dyyEVxRW7sNx9f/hWPY7WAhkv5LPKweyQ+7/Odr0lxMAAADOt/rujvr+gvn8MTshPB0nl/PPhnB67Azyx/0VM0vm73S5h/7y7atbxUvj/y2tx/8DyWI6/u/4P8vk7I7/OyK5RL4LuSt6IH3h4Dntii5Vx7Jw/H9JZ/xtq2Zw/P9ic/zf8f+lOP7fhuP/S7rU37bSVtJuG10hhCf/4KuPtIqXxv+7Oxv/m/9v6Un76vP/bWk2/9/uZvP/HTT/HwAAsKyaTDSXjvNKs/eVMqSz95UytJ0gsO0Ug63n/2sxz95zZv6/0kptN//fD6987DehhdL4/2Bn4//4cRgutr5S5v+b2NykqttjYLeJAQEAALgUNds3AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMV1/9/99/ZW8Yd+e90jj9848+7Dm2586oPXXf6tEOZrr3dl4a6hWz898/O7r73n8P3Td9536vpXVvJyffnj/2/IHWt9djSEo4VXRmLiZ6PVJ4uBG954z4HeauLh0RBengVG8kp2Xlb9+9nRENYUSzzw9rUvqCYOL5bIAl95/NofVhPvSANvWHf5M9XENXmgK13cv1+VLW5XurgfWxXCWCFQX9x3r2qsqt7GH+eB7rSNfxjJ2oiBkVj0UyNZGzGwEEvMD4SwvjeEnrSqhypZVT1pVf9UyarqSav6UCWEa0IIvWlVj/dnVfWmPf9Wf1ZVDFzxsmNPX1VNHO0PYX0x8N233fXqauK9SaDe+J/1h/CS6kcmbfzzfVnjfWnjd/SF8OIQQn9a4pe9WYn+tMQTvSE8rxCoN/6u3hAOBJ4T4o9Pwy/a3gO37Ny6sDC3pzGxP6SvnE3ibVmiP29rMOyYX5ib3LZrYXslWaZmugrp04fOvu+PPv2BbdXHt967eaSTdG9erq+2yNN9DU83XupLH5drqFjJ4htTqj/m7w/DYWD/3rk9k+/fum/fng3Z306zT2d/e/Jotq42rJR1taZYyfp9N+9ev/fALevmb95609xNc+/Z8JrpqaunNk699ur11V5NZX/PR1fvaggN5o8Dy9nVK3sLlZz7t1xCQuLiJjYsQ83dDb9uU5f6D3lpQ39xQftCpfYDXRpWFLN01Xp5Pjq96Sx7fDbbKW17tKE0cChlmV4iy6HGLBtLg4nFWgazLLXtutLgsNhYd22VxufdYXKyp9l6GG98Wly9Pz2H1fv9fNV1mgYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgf9mBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgWAAAAABAmL91GD0bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwKQAA//8M5yTn") (async)
syz_mount_image$btrfs(&(0x7f0000000100), &(0x7f0000000000)='.\x00', 0x810, &(0x7f0000000680)={[{@fatal_errors_bug}, {@max_inline={'max_inline', 0x3d, [0x2d]}}, {@fragment_all}, {@usebackuproot}, {@check_int}, {@ref_verify}, {@subvolid={'subvolid', 0x3d, 0x5}}, {@acl}, {@barrier}, {@ssd}, {@subvol={'subvol', 0x3d, 'subvolid'}}, {@skip_balance}, {@acl}, {@discard}, {@ref_verify}]}, 0x0, 0x5145, &(0x7f00000057c0)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0)
socket$inet6(0xa, 0x1, 0x0)
keyctl$update(0x2, 0x0, 0x0, 0x0)
eventfd2(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
waitid(0x2, 0x0, 0x0, 0x1000000, 0x0)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) (async)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
openat$dsp1(0xffffffffffffff9c, &(0x7f00000003c0), 0x4200, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
r2 = syz_open_dev$vbi(&(0x7f0000000180), 0x2, 0x2)
ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0285628, &(0x7f0000000400)={0x6, 0x4, 0x0, 0x0, 0xe, 0x0, 0x6}) (async)
ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0285628, &(0x7f0000000400)={0x6, 0x4, 0x0, 0x0, 0xe, 0x0, 0x6})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="000000000000000000000000000000000a0000000000003bbbf7160a0a0000000000000000eb3e538cc0b8656f000000000000000000e7d1f65a"], 0x24}}, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3, 0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000001) (async)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000001)
openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000600)='/proc/asound/card0/oss_mixer\x00', 0x1001, 0x0) (async)
r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000600)='/proc/asound/card0/oss_mixer\x00', 0x1001, 0x0)
writev(r4, &(0x7f0000000980)=[{&(0x7f0000000500)="bb", 0x1}], 0x1) (async)
writev(r4, &(0x7f0000000980)=[{&(0x7f0000000500)="bb", 0x1}], 0x1)
r5 = socket$netlink(0x10, 0x3, 0x2)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000000)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r6, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r7, 0x0, 0x97, 0x8000000})
ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000040)={0x28, 0x4, r7, 0x0, &(0x7f0000ff7000/0x3000)=nil, 0x3000}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000040)={0x28, 0x4, r7, 0x0, &(0x7f0000ff7000/0x3000)=nil, 0x3000})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r6, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r7, 0x0, 0x0, 0x0, <r8=>0x0, 0x1})
ioctl$IOMMU_HWPT_ALLOC$TEST(r6, 0x3b89, &(0x7f0000000100)={0x28, 0x1, r8, r7, 0x0, 0x0, 0xdead, 0x4, &(0x7f00000000c0)}) (async)
ioctl$IOMMU_HWPT_ALLOC$TEST(r6, 0x3b89, &(0x7f0000000100)={0x28, 0x1, r8, r7, 0x0, 0x0, 0xdead, 0x4, &(0x7f00000000c0)})
close_range(r5, 0xffffffffffffffff, 0x0) (async)
close_range(r5, 0xffffffffffffffff, 0x0)

3m32.165567195s ago: executing program 4 (id=9):
r0 = socket$inet6_icmp(0xa, 0x2, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)

3m31.690129554s ago: executing program 4 (id=10):
socket(0x23, 0x5, 0x0)
socket(0x22, 0x80805, 0x9ceb)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00')
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200))
r1 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48640)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0, <r2=>0x0], 0x2})
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r2], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f00000001c0)})
ioctl$KVM_SET_CLOCK(r4, 0x4188aec6, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x9, 0x100a})
ioctl$KVM_CAP_X86_DISABLE_EXITS(r4, 0x4068aea3, &(0x7f0000000080)={0x8f, 0x0, 0x8})
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000180)={0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xd}}, 0xc)
fcntl$setstatus(r5, 0x4, 0x40800)
setsockopt$inet_mtu(r5, 0x0, 0xa, 0x0, 0x0)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x2c, 0xd, 0xffffffffffffffff)
write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xee)
ftruncate(r6, 0x2000009)
sendfile(r5, r6, 0x0, 0x7ffff004)

3m28.681519473s ago: executing program 4 (id=16):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={[&(0x7f00000000c0)='wlan1\x00', &(0x7f0000000100)='wlan1\x00']}, &(0x7f0000000300)={[&(0x7f0000000180)=':\':@+\x00', &(0x7f00000001c0)='[&)+.#\\\x00', &(0x7f0000000200)='.@#:\x00', &(0x7f0000000240)='\xb6\x99\x00', &(0x7f0000000280)='\x00', &(0x7f00000002c0)='@\x00']})
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)={0x34, r0, 0x1, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x15, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc0}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xbe}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x10)

3m27.437613094s ago: executing program 4 (id=18):
syz_mount_image$nilfs2(&(0x7f0000000140), &(0x7f0000000f00)='./file1\x00', 0x208800, &(0x7f0000003100)=ANY=[], 0x2, 0xf11, &(0x7f0000001e80)="$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")
syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240))
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x800, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',ZRdno=', @ANYRESHEX=r1, @ANYBLOB=',access=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'])

3m23.592193705s ago: executing program 4 (id=28):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r1, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10)
sendmmsg(r1, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)
sendmmsg$sock(r1, &(0x7f00000016c0)=[{{&(0x7f0000000600)=@nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x80, 0x0}}], 0x1, 0x4000014)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="50000000090601020000000000080000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}}, 0x90)
r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x0)
recvmsg$can_raw(r4, 0x0, 0x42)
openat$cgroup_pressure(r4, &(0x7f0000000280)='memory.pressure\x00', 0x2, 0x0)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_DAEMON(r4, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x130, r5, 0x20, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9e6}, @IPVS_CMD_ATTR_DEST={0x78, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x9}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2000000}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfffffffe}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x10001}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xa3d4}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@private=0xa010100}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7f}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, '\x00', 0x27}}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip_vti0\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_batadv\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x40}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x14}, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
pipe(&(0x7f0000000140)={<r7=>0xffffffffffffffff})
r8 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
getrandom(0xfffffffffffffffc, 0x15, 0x0)
fsconfig$FSCONFIG_SET_FD(r8, 0x5, &(0x7f0000000180)='fd', 0x0, r7)
r9 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x600001, 0x0)
r10 = socket$packet(0x11, 0x3, 0x300)
r11 = ioctl$KVM_GET_STATS_FD_vm(r9, 0xaece)
ioctl$TIOCGISO7816(r11, 0x80285442, &(0x7f00000001c0))
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000002280)={'vlan1\x00', <r12=>0x0})
sendto$packet(r10, &(0x7f00000002c0)="3303120081fd140000007ef588a8", 0xe, 0x20000081, &(0x7f0000000180)={0x11, 0x0, r12, 0x1, 0xcf}, 0x14)
write$binfmt_script(r9, &(0x7f0000000100)={'#! ', './file0', [{0x20, '\xff\xff\xff\xff\xff\xff'}, {0x20, 'nl80211\x00'}, {0x20, ':'}, {0x20, '\\/(\'({:'}, {}, {}, {}, {0x20, '\xff\xff\xff\xff\xff\xff'}], 0xa, "39caea64fcd6fad77c20f473b627c959dc3c6539a85bc372a8a024b2851c24b4f2bfe58e3833b73afbed9d08e85cb8c59dcaca7e7e59eb17905b25efb55b33d8e5e082d185827079600deefb05bbe2044d4849606db82b"}, 0x86)
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
prctl$PR_MCE_KILL(0x43, 0x0, 0x2)
sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)={0x50, r13, 0x1, 0x0, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x31, 0x33, @reassoc_resp={{{0x0, 0x0, 0x8}, {}, @broadcast, @device_a, @random="f70b87594b3f"}, 0x0, 0x7, @default, @val={0x1, 0x5, [{0x24, 0x1}, {0x48, 0x1}, {0xc, 0x1}, {0x9}, {0x60}]}, @void, [{0xdd, 0x6, "75c18ce5df00"}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x44800}, 0x0)

3m6.133718173s ago: executing program 32 (id=28):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r1, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10)
sendmmsg(r1, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)
sendmmsg$sock(r1, &(0x7f00000016c0)=[{{&(0x7f0000000600)=@nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x80, 0x0}}], 0x1, 0x4000014)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="50000000090601020000000000080000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}}, 0x90)
r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x0)
recvmsg$can_raw(r4, 0x0, 0x42)
openat$cgroup_pressure(r4, &(0x7f0000000280)='memory.pressure\x00', 0x2, 0x0)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_DAEMON(r4, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x130, r5, 0x20, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9e6}, @IPVS_CMD_ATTR_DEST={0x78, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x9}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2000000}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfffffffe}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x10001}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xa3d4}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@private=0xa010100}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7f}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, '\x00', 0x27}}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip_vti0\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_batadv\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x40}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x14}, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
pipe(&(0x7f0000000140)={<r7=>0xffffffffffffffff})
r8 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
getrandom(0xfffffffffffffffc, 0x15, 0x0)
fsconfig$FSCONFIG_SET_FD(r8, 0x5, &(0x7f0000000180)='fd', 0x0, r7)
r9 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x600001, 0x0)
r10 = socket$packet(0x11, 0x3, 0x300)
r11 = ioctl$KVM_GET_STATS_FD_vm(r9, 0xaece)
ioctl$TIOCGISO7816(r11, 0x80285442, &(0x7f00000001c0))
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000002280)={'vlan1\x00', <r12=>0x0})
sendto$packet(r10, &(0x7f00000002c0)="3303120081fd140000007ef588a8", 0xe, 0x20000081, &(0x7f0000000180)={0x11, 0x0, r12, 0x1, 0xcf}, 0x14)
write$binfmt_script(r9, &(0x7f0000000100)={'#! ', './file0', [{0x20, '\xff\xff\xff\xff\xff\xff'}, {0x20, 'nl80211\x00'}, {0x20, ':'}, {0x20, '\\/(\'({:'}, {}, {}, {}, {0x20, '\xff\xff\xff\xff\xff\xff'}], 0xa, "39caea64fcd6fad77c20f473b627c959dc3c6539a85bc372a8a024b2851c24b4f2bfe58e3833b73afbed9d08e85cb8c59dcaca7e7e59eb17905b25efb55b33d8e5e082d185827079600deefb05bbe2044d4849606db82b"}, 0x86)
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
prctl$PR_MCE_KILL(0x43, 0x0, 0x2)
sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)={0x50, r13, 0x1, 0x0, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x31, 0x33, @reassoc_resp={{{0x0, 0x0, 0x8}, {}, @broadcast, @device_a, @random="f70b87594b3f"}, 0x0, 0x7, @default, @val={0x1, 0x5, [{0x24, 0x1}, {0x48, 0x1}, {0xc, 0x1}, {0x9}, {0x60}]}, @void, [{0xdd, 0x6, "75c18ce5df00"}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x44800}, 0x0)

2m45.360494533s ago: executing program 1 (id=110):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000040)=0x1c, 0x180000)
setsockopt$inet6_tcp_int(r1, 0x6, 0x17, &(0x7f0000000080)=0xffffffff, 0x4)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0xffffffffffffffff}, {0x3, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@loopback, 0x40000, 0x32}, 0x8, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0)

2m44.967226758s ago: executing program 1 (id=111):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6)
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
sendmsg$nl_route(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
symlinkat(0x0, 0xffffffffffffffff, &(0x7f0000000200)='./bus\x00')
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r4, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e0000ea4feb931647fc5393de250000000000", 0x3d}, {&(0x7f0000000840)="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", 0x116}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2090)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4)
sendto$inet(r4, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet(r5, &(0x7f0000000080)={0x2, 0xe26, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10)
ioctl$FS_IOC_GETFSLABEL(r5, 0x81009431, &(0x7f00000000c0))
r6 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r6, 0x29, 0x37, &(0x7f0000000080)=ANY=[@ANYBLOB="0206e700001000000401"], 0x40)
setsockopt$inet6_buf(r6, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)

2m42.939820943s ago: executing program 1 (id=112):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x3, 0xb, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000000000000000000100180100002020782500000000cb0002017b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000100b7030000000000408500000062000b0095"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0xfe7, &(0x7f0000001e00)=""/4071, 0x0, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)

2m42.687916938s ago: executing program 1 (id=114):
socket$pppl2tp(0x18, 0x1, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x803, 0x0)
sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="03002cbd70000e0000000100000008000100", @ANYRES32, @ANYBLOB="08000200"], 0x34}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000)
syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='attr/keycreate\x00')
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffa4, 0x0}, 0x10)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000001380)=""/4117, 0x1015}], 0x1, 0x3, 0x0)

2m41.632267739s ago: executing program 1 (id=116):
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x401)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000000100)={0x53, 0xffffffffffffffff, 0x6, 0xfd, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000640)="3ffe7be3907c", 0x0, 0xfffffffb, 0x5dbcc8c695e4f439, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000})

2m40.971965639s ago: executing program 1 (id=118):
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
sendto(r0, 0x0, 0x0, 0x8c1, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0xc)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$team(&(0x7f0000000380), r1)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xb, 0x7}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_fw={{0x7}, {0x5c, 0x2, [@TCA_FW_ACT={0x58, 0x4, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x4, 0xfb, 0x3, 0x0, 0x7}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x475}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x84}, 0x8000)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'ip6_vti0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000900)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}, {0x10, 0xfff7}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x10001}]}, 0x40}, 0x1, 0x0, 0x0, 0x90}, 0x8010)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000003c0)={@loopback, @multicast1, <r10=>0x0}, &(0x7f0000000440)=0xc)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000580)={'gre0\x00', &(0x7f0000000480)={'erspan0\x00', <r11=>0x0, 0x20, 0x700, 0xffffffff, 0x1, {{0x2b, 0x4, 0x1, 0x7, 0xac, 0x68, 0x0, 0x0, 0x2f, 0x0, @multicast1, @multicast1, {[@rr={0x7, 0x23, 0x3a, [@local, @local, @loopback, @loopback, @broadcast, @rand_addr=0x64010101, @empty, @broadcast]}, @cipso={0x86, 0x73, 0x2, [{0x0, 0x11, "00741e4524e901b69336f5cd465109"}, {0x0, 0xf, "df6ec0941df02ec3ab2779d1f9"}, {0x7, 0xd, "4ee5ac30d5450bb454e2be"}, {0x1, 0x6, "1cce27d8"}, {0x5, 0x11, "b4c74089feffc9ea78d57b2a01af71"}, {0x5, 0xb, "c49047fe128e4460ec"}, {0x5, 0xd, "e87e12e510ee57325da3e7"}, {0x1, 0x3, "f0"}, {0x2, 0xe, "b61c615eeb74afab9ca2fdaa"}]}, @end]}}}}})
sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000840)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000800)={&(0x7f00000005c0)={0x224, r3, 0x200, 0x70bd25, 0x25dfdbfd, {}, [{{0x8, 0x1, r9}, {0x208, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xb}}, {0x8, 0x6, r10}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0x6, 0x2, 0xf}, {0x8, 0x1, 0xd, 0x7}]}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x7, 0x7, 0x7, 0x6}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x3, 0x75, 0x5, 0x348}, {0xff83, 0x6f, 0xe4, 0x40}, {0x0, 0x0, 0x61, 0xff}, {0x6, 0x5, 0x4, 0x7fffffff}, {0x1, 0x3, 0x2, 0x2}]}}}]}}]}, 0x224}, 0x1, 0x0, 0x0, 0x4}, 0x20004001)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2)
sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="a18326bd700000000003050000000800f5"], 0x38}}, 0x80c0)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xfffffffffffffe3b, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x800d}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0xc004}, 0x1)
getsockname(r2, &(0x7f0000000000)=@xdp, &(0x7f0000000080)=0x80)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)

2m39.420456245s ago: executing program 0 (id=119):
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
listen(r0, 0x0)
ppoll(&(0x7f00000000c0), 0x0, &(0x7f0000000240)={0x0, 0x3938700}, 0x0, 0x0)
syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, '\x00', '\x00', "00000000000000000000000000000000000000000000000000000003"}}}}}}, 0x0)
gettid()
clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0x0, 0x0, 0x0, 0x5a6c103, 0x10000000, 0x0, 0x0, 0x5, 0x0, 0x8, 0xfffffffffffffffd, 0x0, 0x0, 0x1})
r1 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23)
connect$inet6(r1, 0x0, 0x0)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000300)={@local, 0x7fffffff, 0x0, 0xff, 0x3}, 0x0)
syz_emit_ethernet(0x9e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800"], 0x0)

2m39.28156745s ago: executing program 0 (id=120):
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000780)=ANY=[@ANYBLOB="12011001000000086d0404ca00000000000109"], 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
unshare(0x2040400)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_int(r0, 0x0, 0x18, 0x0, &(0x7f0000000040)=0x2)

2m33.787537766s ago: executing program 0 (id=122):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180400000000000000020000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2m33.209334577s ago: executing program 0 (id=124):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000080)={0x2, 0xe26, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10)
connect$inet(r0, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, 0x0, 0x2c)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x129002, 0x0)
preadv(r1, &(0x7f0000000500)=[{&(0x7f0000000040)=""/199, 0xc7}], 0x1, 0x2, 0x51df)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'})
setsockopt$inet_tcp_int(r0, 0x6, 0x17, &(0x7f0000000040)=0x5, 0x4)

2m32.190351777s ago: executing program 0 (id=128):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x2000e844) (async)
r0 = syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file1\x00', 0x320001a, &(0x7f0000000040)=ANY=[@ANYRES8=0x0], 0xfc, 0x2c6, &(0x7f0000000240)="$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")
write$binfmt_format(0xffffffffffffffff, 0x0, 0x0) (async)
syz_usb_connect(0x6, 0xf5, &(0x7f0000000280)=ANY=[@ANYRESDEC=r0, @ANYRESDEC], 0x0)

2m26.702826526s ago: executing program 0 (id=129):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r0, &(0x7f0000000200)=0xf, 0x12) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f0000000240)=ANY=[@ANYRESDEC=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000c7a598d89076014500000000950000000000000085100000fcffffff18400000f9ffffff000000000000000085100000fdffffff8510"], &(0x7f0000000000)='syzkaller\x00', 0xf, 0xd9, &(0x7f0000000f80)=""/217, 0x41100, 0x8, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) (async, rerun: 64)
r1 = socket$packet(0x11, 0x2, 0x300) (rerun: 64)
setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) (async)
sendto$inet(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000040)={0x2, 0x3, @remote}, 0x10) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'xfrm0\x00'}) (async, rerun: 64)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async, rerun: 64)
socket$igmp(0x2, 0x3, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 64)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) (async, rerun: 64)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) (async, rerun: 32)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) (async, rerun: 32)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32)
socket$nl_route(0x10, 0x3, 0x0) (rerun: 32)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r6, 0x0, 0x0)
bind$packet(r1, &(0x7f0000000300)={0x11, 0x1a, 0x0, 0x1, 0x25, 0x6, @remote}, 0x14)

2m25.840187128s ago: executing program 33 (id=118):
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
sendto(r0, 0x0, 0x0, 0x8c1, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0xc)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$team(&(0x7f0000000380), r1)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xb, 0x7}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_fw={{0x7}, {0x5c, 0x2, [@TCA_FW_ACT={0x58, 0x4, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x4, 0xfb, 0x3, 0x0, 0x7}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x475}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x84}, 0x8000)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'ip6_vti0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000900)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}, {0x10, 0xfff7}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x10001}]}, 0x40}, 0x1, 0x0, 0x0, 0x90}, 0x8010)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000003c0)={@loopback, @multicast1, <r10=>0x0}, &(0x7f0000000440)=0xc)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000580)={'gre0\x00', &(0x7f0000000480)={'erspan0\x00', <r11=>0x0, 0x20, 0x700, 0xffffffff, 0x1, {{0x2b, 0x4, 0x1, 0x7, 0xac, 0x68, 0x0, 0x0, 0x2f, 0x0, @multicast1, @multicast1, {[@rr={0x7, 0x23, 0x3a, [@local, @local, @loopback, @loopback, @broadcast, @rand_addr=0x64010101, @empty, @broadcast]}, @cipso={0x86, 0x73, 0x2, [{0x0, 0x11, "00741e4524e901b69336f5cd465109"}, {0x0, 0xf, "df6ec0941df02ec3ab2779d1f9"}, {0x7, 0xd, "4ee5ac30d5450bb454e2be"}, {0x1, 0x6, "1cce27d8"}, {0x5, 0x11, "b4c74089feffc9ea78d57b2a01af71"}, {0x5, 0xb, "c49047fe128e4460ec"}, {0x5, 0xd, "e87e12e510ee57325da3e7"}, {0x1, 0x3, "f0"}, {0x2, 0xe, "b61c615eeb74afab9ca2fdaa"}]}, @end]}}}}})
sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000840)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000800)={&(0x7f00000005c0)={0x224, r3, 0x200, 0x70bd25, 0x25dfdbfd, {}, [{{0x8, 0x1, r9}, {0x208, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xb}}, {0x8, 0x6, r10}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0x6, 0x2, 0xf}, {0x8, 0x1, 0xd, 0x7}]}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x7, 0x7, 0x7, 0x6}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x3, 0x75, 0x5, 0x348}, {0xff83, 0x6f, 0xe4, 0x40}, {0x0, 0x0, 0x61, 0xff}, {0x6, 0x5, 0x4, 0x7fffffff}, {0x1, 0x3, 0x2, 0x2}]}}}]}}]}, 0x224}, 0x1, 0x0, 0x0, 0x4}, 0x20004001)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2)
sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="a18326bd700000000003050000000800f5"], 0x38}}, 0x80c0)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xfffffffffffffe3b, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x800d}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0xc004}, 0x1)
getsockname(r2, &(0x7f0000000000)=@xdp, &(0x7f0000000080)=0x80)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)

2m11.785166933s ago: executing program 34 (id=129):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r0, &(0x7f0000000200)=0xf, 0x12) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f0000000240)=ANY=[@ANYRESDEC=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000c7a598d89076014500000000950000000000000085100000fcffffff18400000f9ffffff000000000000000085100000fdffffff8510"], &(0x7f0000000000)='syzkaller\x00', 0xf, 0xd9, &(0x7f0000000f80)=""/217, 0x41100, 0x8, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) (async, rerun: 64)
r1 = socket$packet(0x11, 0x2, 0x300) (rerun: 64)
setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) (async)
sendto$inet(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000040)={0x2, 0x3, @remote}, 0x10) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'xfrm0\x00'}) (async, rerun: 64)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async, rerun: 64)
socket$igmp(0x2, 0x3, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 64)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) (async, rerun: 64)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) (async, rerun: 32)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) (async, rerun: 32)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32)
socket$nl_route(0x10, 0x3, 0x0) (rerun: 32)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r6, 0x0, 0x0)
bind$packet(r1, &(0x7f0000000300)={0x11, 0x1a, 0x0, 0x1, 0x25, 0x6, @remote}, 0x14)

1m5.769383086s ago: executing program 3 (id=243):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000a8c5000000a50000001804f3ffffffffffffff0000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1m5.118501726s ago: executing program 3 (id=246):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'veth1_virt_wifi\x00', 0x2})
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r2=>0x0})
remap_file_pages(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000008, 0x7, 0x10)
getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x7, 0x0, &(0x7f0000000040))
kexec_load(0x0, 0x1, &(0x7f00000006c0)=[{0x0}], 0x1)
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYRES16=r1, @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600138993694863d4c25def0d998e851600000a0018000000000000004ac3f1e1fcace5f921fb6de591318316f337a46fb00f197570b3d29fe58d76524a38bb2642d27cf4d7761537b7cb64ccf5d225cd86e3f95b3e4c205cc4b26199fbaef674c3400f79beb406"], 0x4c}}, 0x0)

1m4.912525105s ago: executing program 3 (id=247):
getpid()
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000740)='./file0/file0\x00', 0x10008, &(0x7f0000000700)={[{@inlinecrypt}, {@nogrpid}]}, 0x0, 0x4ac, &(0x7f0000000e40)="$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")
prlimit64(0x0, 0x1, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prlimit64(r1, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f00000006c0)=0xffffffc0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x3fe, 0x0, 0x2, 0x300, 0x0})
r5 = syz_open_procfs(0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000002880)=ANY=[@ANYRES16=r5, @ANYRES32=0x0, @ANYRES8=r4, @ANYBLOB="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"], 0x104}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x13c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r7, &(0x7f0000002740)=[{{&(0x7f0000000240)=@tipc=@id, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/62, 0x3e}, {&(0x7f00000004c0)=""/216, 0xd8}], 0x2}, 0x6dd}, {{&(0x7f0000000600)=@isdn, 0xffffffa1, &(0x7f00000008c0), 0x0, &(0x7f0000000b00)=""/145, 0x91}, 0xfffffff7}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000bc0)=""/183, 0xb7}, {&(0x7f0000000c80)}, {&(0x7f0000000cc0)=""/224, 0xe0}, {&(0x7f0000000dc0)=""/19, 0x13}], 0x4}, 0x6}, {{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000002400)=""/61, 0x3d}], 0x2, &(0x7f0000002480)=""/93, 0x5d}, 0x800}, {{&(0x7f0000002500)=@x25, 0x80, &(0x7f00000002c0)=[{&(0x7f00000003c0)=""/145, 0x84}], 0x1, &(0x7f0000002680)=""/149, 0x95}, 0x1}], 0x5, 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x80)

59.911427925s ago: executing program 3 (id=249):
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1})
socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x803, 0x0)
sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44800}, 0x20000000)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x1b, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@cb_func={0x18, 0x4, 0x4, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x4000027}, @exit, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffd}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0xf, 0x1001, &(0x7f0000001cc0)=""/4097, 0x40f00, 0x4d}, 0x94)
syz_open_procfs(0xffffffffffffffff, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffa4, 0x0}, 0x10)
fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0x8, 0x2)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x0)
preadv(r4, &(0x7f00000002c0)=[{&(0x7f0000000480)=""/116}], 0x10000000000002c5, 0x0, 0x0)

58.99741989s ago: executing program 3 (id=250):
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x401)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000000100)={0x53, 0xffffffffffffffff, 0x6, 0xfd, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000640)="58fe7be3907c", 0x0, 0xfffffffb, 0x5dbcc8c695e4f439, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000})

58.578131975s ago: executing program 3 (id=251):
r0 = syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa18c56, &(0x7f0000000e40)=ANY=[@ANYRESDEC=0x0], 0x1, 0x2e4, &(0x7f0000001240)="$eJzs3c2KI1UUAOBTSaU78YfOwtUgWKALV83MPEE30sJgr5Ra6EYbpwekExo6EPAHM7NyL7hy4Ru4cyv4AG58AxfuVMSNsxBLkqrKXyeTidrTKt+3qZOqe+4993InAwW5/c7z/bO754N7Dz76PtrtJBoHcRAPk+hGI2r35+KxTgAA/2UPiyJ+KUqb2u4sfEobV1kXAHB1Huf//69/jIjmk60LALg6b7z51muHx8dHr2dZO6L/yTBPoryWzw/vxXvRi9O4GXvxe0QxVcbP3Dk+ijTL6pcBw07kEf23v60+H/4UMcm/FQfVrbn8+o1CNhEv9UfDfDzy+NqKp744//VGXejt2IvnIopW3UN5efXO8dHt7HJ+5Dvx8oufV/X/cRr7sRffvRvn0Yu7ky5m+R/fyrJXis9++7CcQR6RjIb57qTdTNGMZHHtNr4wAQAAAAAAAAAAAAAAAAAAAACANfazqe78+Tn1aYD7+8vP0zzi536dPzsf6CAm5wNVx/uM5s7XuZllWVGdnTPMW1Ge75PGjTTS65o3AAAAAAAAAAAAAAAAAAAA/JsM3v/g7KTXO71YCL4pxkHnkW2Wg3TuTv2z/s1Zq4OzLyO2z3qcIJpVab3k0hBJ/WgpqxUR6zr8as1Yu9sU1lkx6Ek01q1h2ouy+E+3X4QXVk3wnwm6s1Lr3XV2ksR05e9Xq7uY1V69SeZ2Xb0NLwbJFhuyWLF0zbVZO3917s3pTMt+nt6yn1Y9nU6sajOecWtxiGmb9tJith4xVkzXcFNhz9b/CJa/KarFb/+97xsAAAAAAAAAAAAAAAAAAGC92a9/44dLDx9cS0kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8MTN/v7/NIju8p3lYFQlT+401jZuj4Pdi8HccI3q2r2GqQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA/9mcAAAD//8xkQxQ=")
r1 = socket$can_raw(0x1d, 0x3, 0x1)
unshare(0x24020400)
setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x7, &(0x7f0000000100)=0x6, 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
connect$802154_dgram(r2, &(0x7f0000000200)={0x2, @long}, 0x8)
r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
connect(r3, &(0x7f0000000000)=@ieee802154={0x27, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x80)
ioctl(r3, 0x200, &(0x7f0000000300)="dae22169635cd568929649775b73021f09e91e1f23927e237f9112aad8d492dd73ccd780737989d13fe32f76ce2bd4fda965c8db7cd6ff1db366dcc139b1e7c179ffb9f485d185b438eb48d6d0f37e9bdf40f131fb562b53b64235e04df152c7290128f832ea40c001f37be2ede60edeb9c3b1d8669e25283969f3034e0adecbfd7c3df96e7c4a0a0fd595685c2e2aa3522506309bb342b16fb9a5831a317ca0564dd790f6")
mknod$loop(&(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000ac0)={{0x1, 0x1, 0x18, <r4=>r0}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'})
sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x60, 0x13, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x8880)
execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000001c0)={[], 0x23})
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(0x0, r5)
r6 = socket$packet(0x11, 0x2, 0x300)
mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4000, 0x3, &(0x7f0000e69000/0x4000)=nil)
unshare(0x20000400)
setsockopt$packet_int(r6, 0x107, 0x11, &(0x7f0000000280)=0xffffffff, 0x4)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='memory.swap.current\x00', 0x275a, 0x0)
openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$LOOP_SET_CAPACITY(r7, 0x4c07)
recvmsg$inet_nvme(r7, &(0x7f0000000a80)={&(0x7f0000000540)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000000980)=[{&(0x7f00000005c0)=""/170, 0xaa}, {&(0x7f0000000680)=""/216, 0xd8}, {&(0x7f0000000780)=""/149, 0x95}, {&(0x7f0000000840)=""/230, 0xe6}, {&(0x7f0000000940)=""/25, 0x19}], 0x5, &(0x7f0000000a00)=""/7, 0x7}, 0x20)

42.984301123s ago: executing program 35 (id=251):
r0 = syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa18c56, &(0x7f0000000e40)=ANY=[@ANYRESDEC=0x0], 0x1, 0x2e4, &(0x7f0000001240)="$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")
r1 = socket$can_raw(0x1d, 0x3, 0x1)
unshare(0x24020400)
setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x7, &(0x7f0000000100)=0x6, 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
connect$802154_dgram(r2, &(0x7f0000000200)={0x2, @long}, 0x8)
r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
connect(r3, &(0x7f0000000000)=@ieee802154={0x27, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x80)
ioctl(r3, 0x200, &(0x7f0000000300)="dae22169635cd568929649775b73021f09e91e1f23927e237f9112aad8d492dd73ccd780737989d13fe32f76ce2bd4fda965c8db7cd6ff1db366dcc139b1e7c179ffb9f485d185b438eb48d6d0f37e9bdf40f131fb562b53b64235e04df152c7290128f832ea40c001f37be2ede60edeb9c3b1d8669e25283969f3034e0adecbfd7c3df96e7c4a0a0fd595685c2e2aa3522506309bb342b16fb9a5831a317ca0564dd790f6")
mknod$loop(&(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000ac0)={{0x1, 0x1, 0x18, <r4=>r0}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'})
sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x60, 0x13, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x8880)
execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000001c0)={[], 0x23})
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(0x0, r5)
r6 = socket$packet(0x11, 0x2, 0x300)
mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4000, 0x3, &(0x7f0000e69000/0x4000)=nil)
unshare(0x20000400)
setsockopt$packet_int(r6, 0x107, 0x11, &(0x7f0000000280)=0xffffffff, 0x4)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='memory.swap.current\x00', 0x275a, 0x0)
openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$LOOP_SET_CAPACITY(r7, 0x4c07)
recvmsg$inet_nvme(r7, &(0x7f0000000a80)={&(0x7f0000000540)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000000980)=[{&(0x7f00000005c0)=""/170, 0xaa}, {&(0x7f0000000680)=""/216, 0xd8}, {&(0x7f0000000780)=""/149, 0x95}, {&(0x7f0000000840)=""/230, 0xe6}, {&(0x7f0000000940)=""/25, 0x19}], 0x5, &(0x7f0000000a00)=""/7, 0x7}, 0x20)

34.850387346s ago: executing program 2 (id=262):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x3, 0xb, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000000000000000000100180100002020782500000000cb0002017b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000100b703000000000040850000006200300095"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0xfe7, &(0x7f0000001e00)=""/4071, 0x0, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)

34.533610083s ago: executing program 2 (id=263):
syz_mount_image$hpfs(&(0x7f000000a000), &(0x7f0000009ec0)='./file1\x00', 0x3200041, &(0x7f0000000000)=ANY=[@ANYBLOB="6561733d6e6f2c636173653d617369732c636865636b3d6e6f6e652c00ecb1696642cb97380abf69dce83f1c1dd0eb96506352e4c7d6b88109eebe378da654d5d91d6a45e65053658f366b87b26180bdb0a0e2ef4103c4336999ae591f101bac606a7595fc5a131d32d3723526dc1d4b5c1ce2f300a7eb59286590c97f58ae092a495a425b0bec6265"], 0x1, 0x9e15, &(0x7f000000a040)="$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")
rename(0x0, &(0x7f00000000c0)='./file0/../file0/file0\x00')
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0xfffffffc}, 0x9)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$SO_TIMESTAMP(r1, 0x1, 0x41, 0x0, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001200010a00000000ffdbdf2507"], 0x28}}, 0x0)
fspick(0xffffffffffffffff, &(0x7f0000000100)='./file0/../file0/file0/file0\x00', 0x1)
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000))
chown(&(0x7f0000000000)='.\x00', 0x0, 0xffffffffffffffff)

26.975074949s ago: executing program 2 (id=264):
r0 = socket(0x22, 0x800, 0x401)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=<r1=>0x0)
ioprio_set$pid(0x2, r1, 0x2004)
fcntl$getownex(r0, 0x10, &(0x7f0000000040))
socketpair(0xa, 0xa, 0x7d08c18c, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
clock_gettime(0x0, &(0x7f00000000c0)={<r4=>0x0, <r5=>0x0})
setsockopt$sock_timeval(r3, 0x1, 0x42, &(0x7f0000000100)={r4, r5/1000+60000}, 0x10)
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
recvfrom$inet(r6, &(0x7f0000000140)=""/229, 0xe5, 0x2000, &(0x7f0000000240)={0x2, 0x4e21, @broadcast}, 0x10)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x112, 0xffffffffffffffff, 0x2000)
r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/comedi2\x00', 0x80000, 0x0)
ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f00000002c0)={'s526\x00', [0x0, 0x54, 0x2, 0x6, 0xb1f0, 0xffffff91, 0x40, 0x0, 0x9, 0x1, 0x3b55, 0x4cfffe56, 0x3, 0x26, 0xb8, 0x99, 0x1, 0x9, 0x4, 0x4, 0x7, 0x4, 0x6, 0xffff0872, 0x1ff, 0x3, 0x100c, 0x1, 0x8, 0x6, 0x3, 0x4]})
ioctl$sock_SIOCDELDLCI(r6, 0x8981, &(0x7f0000000380)={'team0\x00', 0x1c1})
r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1)
getsockopt$llc_int(r8, 0x10c, 0x8, &(0x7f0000000400), &(0x7f0000000440)=0x4)
bind$unix(r3, &(0x7f0000000480)=@file={0x0, './file0\x00'}, 0x6e)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000540)=@o_path={&(0x7f0000000500)='./file0\x00', r8, 0x4000, r6}, 0x18)
r9 = socket(0x23, 0x4, 0x401)
socket$nl_netfilter(0x10, 0x3, 0xc)
r10 = accept4$bt_l2cap(r9, &(0x7f0000000580)={0x1f, 0x0, @fixed}, &(0x7f00000005c0)=0xe, 0x800)
getsockopt$IP_VS_SO_GET_DESTS(r10, 0x0, 0x484, &(0x7f0000000600)=""/28, &(0x7f0000000640)=0x1c)
sendmsg(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000680)="928adff22ad556dd6c73b5026bb22061d39fbe258dd7cb156df888e0ed0e124ba05386c6", 0x24}, {&(0x7f00000006c0)="17619568055680acdd03560f26bfe6e97b611f88667bcd12cd59023f5750701023056d0a1cc82dcc11adb2de485b8f7e0862ced2fe6a250c089f11321dcf38530b28bb457bff7d06d981cbd4080b55c5c0d6bb0717e737c3b702c586e01e01c70c4025f6ab4a3ae31fb6560be6d763bafd1814288b229b48ce2bc82e9ae092462e54e6666d04e23332c5c135b178c4e6d208fcef6d8422dd6b41cd513b09af33024e91d9b0021eba6a48efc8e627cead70814180f75595d20de0c9f30cddbc87408d6e", 0xc3}, {&(0x7f00000007c0)="ae9814cd7580989abef3172b037302622489c44120e93bfa61655dad2f3aa31ad2fa7df55f994c47263eb7de6d6ed350a97ead0d0260c7eae917bb19c2288f9907e09454622d29d2cbf56cd6dd01263c7d0b45eb9220611c23d19836b9e4f3b1ae2082e91a5b020194ff0804ae75a922e4316d4bd1df30a02478460a74ea0d26ad9148466a4b80bc034cf7ae52446da2700e3250aa75468ddf0c613eb106f9517ec0c177bce35de113c951b71642411b93a5cf3548eda6c8c9f94aa5bb94b004897ec47b2fe5a43b5d11d19ae252412bba4513", 0xd3}, {&(0x7f00000008c0)="6f212b04501ae88589b43b5d2a60edddc509ca02b921ae0914d50ecfcac63ca820144f7d88cd32a94b36b5372ee8700c84650ea7b98cbd8ce9d1245e23fd2409ac7f1c80254d1e2aa167aaccfc711204e13b98f0d3dd307cba60d292f7baff62ddc3e72b2304beb811d61dd5f33fc57956c6dd439cdbc59f84a18f5ec0c790ad3dfa8dd161713f31334d58c0b1cfd5b419c09ed513b57aea40e13ed2b30cc90d86d757716c7bb9b0e05b4246050c09f66c086c3ae53e9254d71c38f8319bcc30486e801aae8d17589bee4e4d128960d0342d775b6d81c61881c6644c19c3b71434cdf137cfbfc132", 0xe8}], 0x4, &(0x7f0000000a00)=[{0x88, 0x109, 0x800, "bafed611921dd6ae4cb5dc8e69398ddf5d52be3294c7dec4c8f4c4e6ecda0b22006dc177f35ff0e7cdfcc7d1d643df1859534fb92d8521d2238083ce4c969cf6becce77f8463f7160bec16ac3dfca0f32b90cc045624e532d6817165ef89213c8cafc444160ecac34d0e916e9b3f64b7e17fd81a3ddae6"}, {0xc8, 0x111, 0x2, "0da7a82bb6bc33d157124d1dd10a0d9a733339a42b36482948fceda4fc64e4419457d71c02d1b910ae7a25fb8242ef1e0512dcbcc812a61554ad160f4fdae98d0189daef54086dd1e056202753a76621eedefdcd4d94c9f6021364edf18c8e3d9419f99439a4a9c1ed58ff10922766baca2fe7e636341fb915c8cdf93b7e356a54efa055f0246145306eae8ddbd00385e0ac6759d887212e08b82986188cd14dffc2cd65e571530b56d4d0482a8c111b52eb81396a1b"}, {0xf8, 0x1, 0x4, "f58863ce0e78ec497d19f15130a6c2556544ff92ddbb464a277dd7def234574b121746e4cea1f7ac75b60971a6c641ea216f76fba88957d89428bced6eccb68da7e503178fa3f9d92af925e00ed0edc3ded71327c9b73765ba07aa8e97f76b97925da1503ff4a8647d13f11b8f86a93e24d48e15d59b4b476af9d9b3bfa97ed7a5d376c77584d93cd83a130e92fb631f5fcd2f1981c398be99bc031847ebc37e3cbe94de4206f090e5c55e31bdc28becdaaa640e59c2828c2e12c50d12a69b09029af3ff41a6916d3a3a75f52f15c69636a562fa1bce4d9da893cc6e25daa118a599f5a4b86a"}], 0x248}, 0x4)
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000cc0)={0xfffffffffffffffe, 0x3, 0x7ed88b08b787ed4c, 0x873, 0x4, 0x0, [{0x6, 0x1000, 0xffffffffffffffff, '\x00', 0x180}, {0x3, 0xaeb, 0xf, '\x00', 0x108}, {0x9, 0x5, 0x9, '\x00', 0x2682}, {0x80, 0x5, 0x9, '\x00', 0x200}]})
ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f0000000dc0)=<r11=>0x0)
bind$nfc_llcp(r0, &(0x7f0000000e00)={0x27, r11, 0xffffffffffffffff, 0x3, 0x39, 0x3, "6309dc7c1e1e083da788b155b52b17b977c5caad9a159653a77c8a145f82309ea0868aadcfccfc246dc4fb3b338f13b99fe6f32ebe9bbb7e0176c563a26c78", 0x3b}, 0x60)
ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, &(0x7f0000001100)={0x2, 0x1, &(0x7f0000000e80)=""/108, &(0x7f0000000f00)=""/198, &(0x7f0000001000)=""/246, 0x200000})
ioctl$XFS_IOC_ERROR_INJECTION(r2, 0x40085874, &(0x7f0000001140)={r10, 0x7})
sendfile(r6, r2, &(0x7f0000001180)=0x3, 0x51)
ioctl$CEC_DQEVENT(0xffffffffffffffff, 0xc0506107, &(0x7f00000011c0))

21.877193963s ago: executing program 2 (id=265):
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x401)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000000100)={0x53, 0xffffffffffffffff, 0x6, 0xfd, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000640)="58fe7be3907c", 0x0, 0xfffffffb, 0x5dbcc8c695e4f439, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000})

21.69700906s ago: executing program 2 (id=266):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e24, 0x1, @loopback, 0xdd}}, 0x1eaa, 0x1}, 0x90)
syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000000)='./file1\x00', 0xa18cd6, &(0x7f0000000100)={[{@uni_xlateno}, {@shortname_mixed}, {@uni_xlate}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@shortname_mixed}, {@utf8}, {@fat=@check_normal}, {@shortname_winnt}, {@shortname_winnt}, {@numtail}, {@rodir}, {@fat=@showexec}, {@utf8}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}]}, 0x81, 0x29b, &(0x7f0000000580)="$eJzs3c9qK1UYAPBv0iRNVEgWrkRwQBeuwr33CW6QChezUrLQjV5sC5KEQgMB/2Dsyr3gynfwHXwAN76BC5eCO7sQR5KZSdI0bY3EVOrvt5kvc74v509OWyjMyUevjgbHZ+PTiy9+jkYjicrTeBqXSbSjEqWvAgB4SC6zLH7LcnflVqMeEVmreFXZw/AAgH/BNn//AYCH4b33P3in2+sdvZumjYjR15N+Evk1b++exicxjJN4FK34IyJbyOOXnvWOopqm5T8DJs3oR4w+/LF43f01Yl7/OFrRXq+vF1npXLwxmk76s55n11q8kER0syRPeRKteDkiq0XxJvnl7We9oyfp9fro1+PN178rxv/nSXSiFT99HGcxjOP5Wyzrv3ycpm9l3/7+eT6DfkQynfQP53lL2cFePhAAAAAAAAAAAAAAAAAAAAAAAP4XOulCe/X8nPI0wE5nc/uN5wMVJ/xMV87XeZSmaXmMz6Rfi7y+Gq9Uo3p/MwcAAAAAAAAAAAAAAAAAAID/jvGnnw2eD4cn51eCH7JZ0Lw1Zz2ortwpH+u/u2pzMPg+YvuqvxPEQTG0YXKti6Rs2kFfh9skNzd1GpWb1rA6jHzw32w/sNd2NcFbg3J3DZ4ncUdyY/MmWdl15TY8HydbbMhsw9Id3FhV39Hc6y/+0/LmxoWazbi2WMyrVY3ZJ7lyp7bjn5Q1yc5/9wAAAAAAAAAAAAAAAAAAAFctH/qNX641XtzLkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg75bf/78Ior1+Zz2YFsXzO5Xbkw/Pxxu6be95mgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADxwfwUAAP//5OlVhQ==")
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000001180)=0x2000000)
mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r2, 0x0)
ioctl$SNDCTL_DSP_GETOPTR(r2, 0x5008, 0x0)
r3 = epoll_create(0x5)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0xa})
r4 = socket$packet(0x11, 0x3, 0x300)
unshare(0x26020480)
open_tree(0xffffffffffffff9c, 0x0, 0x89901)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={@mcast2, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2, 0x3e, 0x100, 0x500, 0x2, 0x204})
syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
syz_emit_ethernet(0x5e, &(0x7f00000004c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "6f050c", 0x28, 0x3a, 0x1, @private0, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local}}}}}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond0\x00', <r5=>0x0})
sendto$packet(r4, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_opts(r6, 0x0, 0x16, &(0x7f0000000040)="e1", 0x1)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40))

15.293959222s ago: executing program 2 (id=267):
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)}], 0x1}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {0x0}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x3, 0x20000044)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00'})
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000100)=@multiplanar_overlay={0x0, 0xd, 0x4, 0x80, 0x2, {0x0, 0x2710}, {0x3, 0xc, 0x3c, 0x5, 0x3, 0x5, ']EVv'}, 0x9cf, 0x3, {0x0}, 0x2})
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0)
preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000140)=""/4078, 0xfee}], 0x1, 0xed, 0x207fff)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0)
syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000bfe000/0x400000)=nil)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r5 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r5, 0x2, &(0x7f0000000280)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000080)="441f08100000009837a0324d7df546bcb8e8c94efe76cef3e200", 0x1a)
syz_open_procfs(0x0, &(0x7f00000190c0)='net/ip_tables_targets\x00')
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xd, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="6112b400000000006113500000"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94)
connect$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x27, 0x0, 0x4e23}, 0x6e)
r8 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNIMAP(r8, 0x4b67, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x7, 0x2}]})
sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)

0s ago: executing program 36 (id=267):
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)}], 0x1}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {0x0}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x3, 0x20000044)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00'})
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000100)=@multiplanar_overlay={0x0, 0xd, 0x4, 0x80, 0x2, {0x0, 0x2710}, {0x3, 0xc, 0x3c, 0x5, 0x3, 0x5, ']EVv'}, 0x9cf, 0x3, {0x0}, 0x2})
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0)
preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000140)=""/4078, 0xfee}], 0x1, 0xed, 0x207fff)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0)
syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000bfe000/0x400000)=nil)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r5 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r5, 0x2, &(0x7f0000000280)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000080)="441f08100000009837a0324d7df546bcb8e8c94efe76cef3e200", 0x1a)
syz_open_procfs(0x0, &(0x7f00000190c0)='net/ip_tables_targets\x00')
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xd, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="6112b400000000006113500000"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94)
connect$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x27, 0x0, 0x4e23}, 0x6e)
r8 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNIMAP(r8, 0x4b67, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x7, 0x2}]})
sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)

kernel console output (not intermixed with test programs):

 transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   98.480924][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   98.538077][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_0
[   98.538091][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   98.538112][ T5620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   98.984882][ T5615] team0: Port device team_slave_1 added
[   98.986742][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1
[   98.986755][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   98.986776][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   99.043303][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_1
[   99.043348][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   99.043425][ T5620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   99.063413][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0
[   99.063501][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   99.063587][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   99.177648][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1
[   99.177662][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   99.177683][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   99.247403][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0
[   99.247417][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   99.247437][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   99.314039][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1
[   99.314052][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   99.314073][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   99.453321][ T5614] hsr_slave_0: entered promiscuous mode
[   99.455250][ T5614] hsr_slave_1: entered promiscuous mode
[   99.516374][ T5616] hsr_slave_0: entered promiscuous mode
[   99.518340][ T5616] hsr_slave_1: entered promiscuous mode
[   99.519878][ T5616] debugfs: 'hsr0' already exists in 'hsr'
[   99.519971][ T5616] Cannot create hsr debugfs directory
[   99.551354][ T5620] hsr_slave_0: entered promiscuous mode
[   99.558406][ T5620] hsr_slave_1: entered promiscuous mode
[   99.560031][ T5620] debugfs: 'hsr0' already exists in 'hsr'
[   99.560062][ T5620] Cannot create hsr debugfs directory
[   99.683115][ T5613] hsr_slave_0: entered promiscuous mode
[   99.685011][ T5613] hsr_slave_1: entered promiscuous mode
[   99.686439][ T5613] debugfs: 'hsr0' already exists in 'hsr'
[   99.686471][ T5613] Cannot create hsr debugfs directory
[   99.828769][ T5615] hsr_slave_0: entered promiscuous mode
[   99.830604][ T5615] hsr_slave_1: entered promiscuous mode
[   99.834106][ T5615] debugfs: 'hsr0' already exists in 'hsr'
[   99.834205][ T5615] Cannot create hsr debugfs directory
[   99.992358][ T5626] Bluetooth: hci0: command tx timeout
[  100.232368][ T5626] Bluetooth: hci2: command tx timeout
[  100.312368][ T5618] Bluetooth: hci1: command tx timeout
[  100.312478][ T5626] Bluetooth: hci3: command tx timeout
[  100.392483][ T5626] Bluetooth: hci4: command tx timeout
[  100.920227][ T5614] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  100.970681][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  100.985069][ T5614] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  101.025028][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  101.043458][ T5614] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  101.087688][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  101.121465][ T5614] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  101.150197][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  101.315074][ T5620] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  101.365472][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  101.370052][ T5620] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  101.418240][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  101.431339][ T5620] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  101.458154][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  101.491909][ T5620] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  101.529642][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  101.798948][ T5613] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  101.843957][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  101.851525][ T5613] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  101.880914][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  101.894669][ T5613] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  101.937434][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  101.978502][ T5613] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  102.018377][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  102.073469][ T5626] Bluetooth: hci0: command tx timeout
[  102.267692][ T5615] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  102.311001][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  102.313983][ T5626] Bluetooth: hci2: command tx timeout
[  102.345796][ T5615] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  102.380735][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  102.392308][ T5626] Bluetooth: hci3: command tx timeout
[  102.392343][ T5626] Bluetooth: hci1: command tx timeout
[  102.416251][ T5615] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  102.459324][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  102.474265][ T5618] Bluetooth: hci4: command tx timeout
[  102.505247][ T5615] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  102.548854][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  102.658303][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0
[  102.769063][ T5616] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  102.816277][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  102.839224][ T5616] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  102.869174][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  102.888573][ T5616] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  102.927281][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  102.950838][ T5616] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  102.990814][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  103.029116][ T5614] 8021q: adding VLAN 0 to HW filter on device team0
[  103.093058][   T67] bridge0: port 1(bridge_slave_0) entered blocking state
[  103.093746][   T67] bridge0: port 1(bridge_slave_0) entered forwarding state
[  103.153523][ T5620] 8021q: adding VLAN 0 to HW filter on device bond0
[  103.208817][   T67] bridge0: port 2(bridge_slave_1) entered blocking state
[  103.208957][   T67] bridge0: port 2(bridge_slave_1) entered forwarding state
[  103.357775][ T5620] 8021q: adding VLAN 0 to HW filter on device team0
[  103.400909][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0
[  103.434017][ T1462] bridge0: port 1(bridge_slave_0) entered blocking state
[  103.434194][ T1462] bridge0: port 1(bridge_slave_0) entered forwarding state
[  103.525448][   T67] bridge0: port 2(bridge_slave_1) entered blocking state
[  103.525621][   T67] bridge0: port 2(bridge_slave_1) entered forwarding state
[  103.640058][ T5613] 8021q: adding VLAN 0 to HW filter on device team0
[  103.724751][ T1462] bridge0: port 1(bridge_slave_0) entered blocking state
[  103.724933][ T1462] bridge0: port 1(bridge_slave_0) entered forwarding state
[  103.789038][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0
[  103.831993][ T4885] bridge0: port 2(bridge_slave_1) entered blocking state
[  103.843150][ T4885] bridge0: port 2(bridge_slave_1) entered forwarding state
[  104.107840][ T5615] 8021q: adding VLAN 0 to HW filter on device team0
[  104.150245][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0
[  104.197251][ T1391] bridge0: port 1(bridge_slave_0) entered blocking state
[  104.197449][ T1391] bridge0: port 1(bridge_slave_0) entered forwarding state
[  104.327474][   T67] bridge0: port 2(bridge_slave_1) entered blocking state
[  104.331025][   T67] bridge0: port 2(bridge_slave_1) entered forwarding state
[  104.521495][ T5616] 8021q: adding VLAN 0 to HW filter on device team0
[  104.666198][   T67] bridge0: port 1(bridge_slave_0) entered blocking state
[  104.667916][   T67] bridge0: port 1(bridge_slave_0) entered forwarding state
[  104.745951][  T167] bridge0: port 2(bridge_slave_1) entered blocking state
[  104.746172][  T167] bridge0: port 2(bridge_slave_1) entered forwarding state
[  105.188827][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0
[  105.653253][ T5620] 8021q: adding VLAN 0 to HW filter on device batadv0
[  105.991801][ T5614] veth0_vlan: entered promiscuous mode
[  106.153752][ T5614] veth1_vlan: entered promiscuous mode
[  106.309989][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0
[  106.370558][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0
[  106.657682][ T5614] veth0_macvtap: entered promiscuous mode
[  106.700286][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0
[  106.737267][ T5614] veth1_macvtap: entered promiscuous mode
[  106.900639][ T5613] veth0_vlan: entered promiscuous mode
[  106.924863][ T5615] veth0_vlan: entered promiscuous mode
[  106.954548][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0
[  106.977071][ T5620] veth0_vlan: entered promiscuous mode
[  107.021530][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1
[  107.037744][ T5613] veth1_vlan: entered promiscuous mode
[  107.052370][ T5615] veth1_vlan: entered promiscuous mode
[  107.106196][ T5620] veth1_vlan: entered promiscuous mode
[  107.110133][ T1462] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  107.160084][ T1462] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  107.175933][ T1462] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  107.196744][ T1462] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  107.326963][ T5616] veth0_vlan: entered promiscuous mode
[  107.553167][ T5616] veth1_vlan: entered promiscuous mode
[  107.705740][ T5613] veth0_macvtap: entered promiscuous mode
[  107.784732][ T5615] veth0_macvtap: entered promiscuous mode
[  107.821241][ T5620] veth0_macvtap: entered promiscuous mode
[  107.838815][ T5613] veth1_macvtap: entered promiscuous mode
[  107.860371][ T5615] veth1_macvtap: entered promiscuous mode
[  107.901546][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  107.901590][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  107.960108][ T5620] veth1_macvtap: entered promiscuous mode
[  108.084235][  T177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  108.084257][  T177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  108.091905][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0
[  108.185243][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0
[  108.213826][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1
[  108.214955][ T5616] veth0_macvtap: entered promiscuous mode
[  108.250138][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_0
[  108.301069][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1
[  108.331397][ T5616] veth1_macvtap: entered promiscuous mode
[  108.348701][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_1
[  108.350652][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  108.418732][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  108.437382][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  108.472663][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  108.523461][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  108.543250][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  108.566917][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  108.637889][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  108.725381][ T1462] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  108.737284][ T1462] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  108.758544][ T1462] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  108.820687][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0
[  108.960616][ T1462] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  109.024935][   T38] audit: type=1326 audit(1780278670.358:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5805 comm="syz.3.4" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4e481ce59 code=0x7ffc0000
[  109.033082][   T38] audit: type=1326 audit(1780278670.358:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5805 comm="syz.3.4" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4e481ce59 code=0x7ffc0000
[  109.033137][   T38] audit: type=1326 audit(1780278670.358:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5805 comm="syz.3.4" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fc4e481ce59 code=0x7ffc0000
[  109.033185][   T38] audit: type=1326 audit(1780278670.358:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5805 comm="syz.3.4" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4e481ce59 code=0x7ffc0000
[  109.059579][   T38] audit: type=1326 audit(1780278670.368:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5805 comm="syz.3.4" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc4e481cbc2 code=0x7ffc0000
[  109.080039][   T38] audit: type=1326 audit(1780278670.398:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5805 comm="syz.3.4" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc4e47dd68e code=0x7ffc0000
[  109.136919][   T38] audit: type=1326 audit(1780278670.468:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5805 comm="syz.3.4" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fc4e481cc87 code=0x7ffc0000
[  109.149370][   T38] audit: type=1326 audit(1780278670.468:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5805 comm="syz.3.4" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc4e47dd68e code=0x7ffc0000
[  109.151509][   T38] audit: type=1326 audit(1780278670.478:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5805 comm="syz.3.4" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc4e481caeb code=0x7ffc0000
[  109.211410][ T5806] loop3: detected capacity change from 0 to 1024
[  109.313339][   T38] audit: type=1326 audit(1780278670.628:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5805 comm="syz.3.4" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fc4e47dd68e code=0x7ffc0000
[  109.527282][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1
[  110.247767][ T5806] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  110.583465][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  110.589364][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  110.592465][ T5806] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4'.
[  110.615976][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  110.679500][  T151] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  110.715248][ T5806] capability: warning: `syz.3.4' uses 32-bit capabilities (legacy support in use)
[  110.739552][   T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  110.739575][   T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  110.885384][ T5614] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.975611][ T1462] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  110.975633][ T1462] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  111.160045][ T1462] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  111.160069][ T1462] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  111.591767][  T177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  111.591789][  T177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  111.839867][ T1462] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  111.839891][ T1462] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  112.104572][ T5758] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  112.270892][  T167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  112.270913][  T167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  112.356831][ T5758] usb 4-1: Using ep0 maxpacket: 8
[  112.469076][ T5758] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  112.469107][ T5758] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  112.469148][ T5758] usb 4-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00
[  112.469172][ T5758] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  112.632313][  T151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  112.632335][  T151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  112.791873][ T5758] usb 4-1: config 0 descriptor??
[  113.213875][ T5829] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  113.470389][ T5827] loop4: detected capacity change from 0 to 32768
[  113.531119][   T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  113.531141][   T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  114.013670][  T837] usb 4-1: USB disconnect, device number 2
[  114.562708][ T5601] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  114.915610][ T5601] usb 2-1: Using ep0 maxpacket: 32
[  114.945143][ T5601] usb 2-1: config 0 has an invalid interface number: 67 but max is 0
[  114.945172][ T5601] usb 2-1: config 0 has no interface number 0
[  115.004860][ T5601] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  115.004896][ T5601] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.004918][ T5601] usb 2-1: Product: syz
[  115.004933][ T5601] usb 2-1: Manufacturer: syz
[  115.004950][ T5601] usb 2-1: SerialNumber: syz
[  115.236623][ T5601] usb 2-1: config 0 descriptor??
[  115.646720][ T5854] loop2: detected capacity change from 0 to 128
[  116.032417][ T5601] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  116.032468][ T5601] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  116.235941][ T5601] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61
[  116.263026][ T5601] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -61
[  116.442283][ T5734] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  116.475999][ T5861] loop3: detected capacity change from 0 to 1764
[  116.648092][ T5734] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11
[  116.648142][ T5734] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  116.648166][ T5734] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.717313][ T5862] netlink: 'syz.2.3': attribute type 4 has an invalid length.
[  116.760659][ T5734] usb 1-1: config 0 descriptor??
[  117.001744][ T5856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  117.005633][ T5856] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  117.153678][  T823] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  117.546108][  T823] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 246, changing to 11
[  117.546147][  T823] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  117.546252][  T823] usb 3-1: New USB device found, idVendor=048d, idProduct=ce50, bcdDevice= 0.00
[  117.546280][  T823] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  117.569465][ T5869] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15'.
[  117.588316][ T5869] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15'.
[  117.588978][ T5869] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15'.
[  117.589637][ T5869] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15'.
[  117.590214][ T5869] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15'.
[  117.590833][ T5869] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15'.
[  117.591402][ T5869] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15'.
[  117.606045][ T5869] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15'.
[  117.657963][ T5869] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15'.
[  117.658580][ T5869] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15'.
[  118.035569][ T5734] usbhid 1-1:0.0: can't add hid device: -71
[  118.035704][ T5734] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  118.058236][  T823] usb 3-1: config 0 descriptor??
[  118.088367][ T5758] usb 2-1: USB disconnect, device number 2
[  118.934101][  T823] usbhid 3-1:0.0: can't add hid device: -71
[  118.934261][  T823] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  119.024059][ T5734] usb 1-1: USB disconnect, device number 2
[  119.134950][  T823] usb 3-1: USB disconnect, device number 2
[  119.541593][ T5884] loop4: detected capacity change from 0 to 4096
[  119.851633][ T5896] loop8: detected capacity change from 0 to 7
[  120.048735][ T5734] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  120.076057][ T5896] Dev loop8: unable to read RDB block 7
[  120.076106][ T5896]  loop8: unable to read partition table
[  120.076564][ T5896] loop8: partition table beyond EOD, truncated
[  120.076599][ T5896] loop_reread_partitions: partition scan of loop8 (þ被xü^>à– �) failed (rc=-5)
[  120.252240][ T5734] usb 1-1: Using ep0 maxpacket: 8
[  120.257566][ T5734] usb 1-1: no configurations
[  120.257586][ T5734] usb 1-1: can't read configurations, error -22
[  120.374401][  T823] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  120.582198][  T823] usb 4-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00
[  120.582232][  T823] usb 4-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0
[  120.582261][  T823] usb 4-1: Product: syz
[  120.585720][ T5906] loop2: detected capacity change from 0 to 64
[  120.612699][ T5734] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  120.666790][  T823] usb 4-1: config 0 descriptor??
[  120.694022][  T823] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected
[  120.699040][  T823] usb 4-1: Detected FT232H
[  120.852301][ T5734] usb 1-1: Using ep0 maxpacket: 8
[  120.853843][ T5734] usb 1-1: no configurations
[  120.853863][ T5734] usb 1-1: can't read configurations, error -22
[  120.889246][  T823] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  120.946992][ T5734] usb usb1-port1: attempt power cycle
[  121.005614][ T5908] loop1: detected capacity change from 0 to 8
[  121.206175][ T5909] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  121.362584][ T5734] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  121.403987][ T5734] usb 1-1: Using ep0 maxpacket: 8
[  121.407349][ T5734] usb 1-1: no configurations
[  121.407371][ T5734] usb 1-1: can't read configurations, error -22
[  121.486508][  T823] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  121.572318][ T5734] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  121.630422][ T5734] usb 1-1: Using ep0 maxpacket: 8
[  121.631333][ T5734] usb 1-1: no configurations
[  121.631351][ T5734] usb 1-1: can't read configurations, error -22
[  121.650432][ T5734] usb usb1-port1: unable to enumerate USB device
[  121.735510][ T5906] openvswitch: netlink: Flow key attr not present in new flow.
[  122.071555][ T5758] usb 2-1: new full-speed USB device number 3 using dummy_hcd
[  122.234963][ T5758] usb 2-1: config 0 has an invalid interface number: 8 but max is 0
[  122.234994][ T5758] usb 2-1: config 0 has no interface number 0
[  122.235106][ T5758] usb 2-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84
[  122.235137][ T5758] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 4
[  122.242461][ T5758] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  122.242494][ T5758] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  122.242517][ T5758] usb 2-1: Product: syz
[  122.242542][ T5758] usb 2-1: SerialNumber: syz
[  122.358167][ T5758] usb 2-1: config 0 descriptor??
[  122.529007][ T5906] UBIFS error (pid: 5906): cannot open "c:::", error -22
[  122.534611][   T38] kauditd_printk_skb: 135 callbacks suppressed
[  122.534636][   T38] audit: type=1326 audit(1780278683.558:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5912 comm="syz.0.27" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b44cbce59 code=0x7ffc0000
[  122.534689][   T38] audit: type=1326 audit(1780278683.558:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5912 comm="syz.0.27" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b44cbce59 code=0x7ffc0000
[  122.534739][   T38] audit: type=1326 audit(1780278683.558:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5912 comm="syz.0.27" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b44cbce59 code=0x7ffc0000
[  122.534789][   T38] audit: type=1326 audit(1780278683.558:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5912 comm="syz.0.27" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f2b44cbce59 code=0x7ffc0000
[  122.534839][   T38] audit: type=1326 audit(1780278683.558:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5912 comm="syz.0.27" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b44cbce59 code=0x7ffc0000
[  122.534889][   T38] audit: type=1326 audit(1780278683.558:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5912 comm="syz.0.27" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b44cbce59 code=0x7ffc0000
[  122.534937][   T38] audit: type=1326 audit(1780278683.558:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5912 comm="syz.0.27" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f2b44cbce59 code=0x7ffc0000
[  122.534978][   T38] audit: type=1326 audit(1780278683.558:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5912 comm="syz.0.27" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2b44cbcbc2 code=0x7ffc0000
[  122.535028][   T38] audit: type=1326 audit(1780278683.578:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5912 comm="syz.0.27" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b44cbce59 code=0x7ffc0000
[  123.460104][   T38] audit: type=1326 audit(1780278684.788:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5912 comm="syz.0.27" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2b44c7d68e code=0x7ffc0000
[  123.734078][ T5914] loop0: detected capacity change from 0 to 32768
[  123.795313][ T5914] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.27 (5914)
[  124.490465][ T5758] usbhid 2-1:0.8: couldn't find an input interrupt endpoint
[  124.865449][   T10] usb 4-1: USB disconnect, device number 3
[  125.030369][ T5601] usb 2-1: USB disconnect, device number 3
[  125.346253][ T5914] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  125.346313][ T5914] BTRFS info (device loop0): using sha256 checksum algorithm
[  125.399590][ T5914] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR
[  125.403797][ T5914] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR
[  125.404958][ T5914] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR
[  125.410171][ T5914] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR
[  125.411406][ T5914] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR
[  125.474130][ T5914] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR
[  125.495408][ T5914] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR
[  125.496586][ T5914] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR
[  125.505805][ T5914] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR
[  125.512609][ T5914] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR
[  125.577135][ T5914] BTRFS error (device loop0): open_ctree failed: -12
[  128.065746][   T10] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  128.356225][ T5953] openvswitch: netlink: Message has 8 unknown bytes.
[  128.429626][   T10] ftdi_sio 4-1:0.0: device disconnected
[  128.645185][ T5958] loop5: detected capacity change from 0 to 127
[  128.786099][ T5958]  loop5: unable to read partition table
[  128.786324][ T5958] loop_reread_partitions: partition scan of loop5 (þ被x) failed (rc=-5)
[  129.254483][ T5734] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  129.426296][ T5734] usb 3-1: Using ep0 maxpacket: 8
[  129.430376][ T5734] usb 3-1: no configurations
[  129.430407][ T5734] usb 3-1: can't read configurations, error -22
[  129.564172][ T5734] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  129.729144][ T5734] usb 3-1: Using ep0 maxpacket: 8
[  129.730110][ T5734] usb 3-1: no configurations
[  129.730127][ T5734] usb 3-1: can't read configurations, error -22
[  129.734188][ T5734] usb usb3-port1: attempt power cycle
[  129.868393][ T5969] loop0: detected capacity change from 0 to 4096
[  129.952467][ T5969] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[  129.998841][ T5972] loop3: detected capacity change from 0 to 1764
[  130.001740][ T5972] =======================================================
[  130.001740][ T5972] WARNING: The mand mount option has been deprecated and
[  130.001740][ T5972]          and is ignored by this kernel. Remove the mand
[  130.001740][ T5972]          option from the mount to silence this warning.
[  130.001740][ T5972] =======================================================
[  130.132295][ T5734] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  130.167400][ T5734] usb 3-1: Using ep0 maxpacket: 8
[  130.170651][ T5734] usb 3-1: no configurations
[  130.170672][ T5734] usb 3-1: can't read configurations, error -22
[  130.292260][ T5734] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  130.315825][ T5734] usb 3-1: Using ep0 maxpacket: 8
[  130.318878][ T5734] usb 3-1: no configurations
[  130.318896][ T5734] usb 3-1: can't read configurations, error -22
[  130.346393][ T5734] usb usb3-port1: unable to enumerate USB device
[  130.417616][ T5974] loop3: detected capacity change from 0 to 64
[  132.261165][ T5979] UBIFS error (pid: 5979): cannot open "c:::", error -22
[  132.892339][ T5978] syz.3.42 (5978) used greatest stack depth: 18632 bytes left
[  133.065984][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[  133.066132][ T1339] ieee802154 phy1 wpan1: encryption failed: -22
[  133.235430][ T5969] ntfs3(loop0): ino=19, mi_enum_attr
[  133.235749][ T5969] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  133.338478][ T5981] __nla_validate_parse: 1 callbacks suppressed
[  133.338500][ T5981] netlink: 8 bytes leftover after parsing attributes in process `syz.2.43'.
[  133.518265][ T5969] ntfs3(loop0): Failed to initialize $Extend/$ObjId.
[  133.793105][ T5720] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  134.087370][ T5720] usb 3-1: Using ep0 maxpacket: 32
[  134.111176][ T5720] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  134.111199][ T5720] usb 3-1: config 0 has no interface number 0
[  134.154699][ T5720] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8
[  134.154732][ T5720] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.154755][ T5720] usb 3-1: Product: syz
[  134.154770][ T5720] usb 3-1: Manufacturer: syz
[  134.154786][ T5720] usb 3-1: SerialNumber: syz
[  134.282839][ T5720] usb 3-1: config 0 descriptor??
[  134.350106][ T5720] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  134.350159][ T5720] usb 3-1: selecting invalid altsetting 1
[  134.350177][ T5720] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  134.446217][ T5720] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  134.447875][ T5720] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  134.447952][ T5720] usb 3-1: media controller created
[  134.665483][ T5720] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  134.850341][ T5720] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[  134.850402][ T5720] zl10353_read_register: readreg error (reg=127, ret==-71)
[  134.865543][ T5720] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  134.976916][ T5991] loop8: detected capacity change from 0 to 7
[  135.009603][ T5991] Dev loop8: unable to read RDB block 7
[  135.009652][ T5991]  loop8: unable to read partition table
[  135.009873][ T5991] loop8: partition table beyond EOD, truncated
[  135.009892][ T5991] loop_reread_partitions: partition scan of loop8 (þ被xü^>à– �) failed (rc=-5)
[  135.337803][ T5997] loop0: detected capacity change from 0 to 64
[  135.671268][ T5720] usb 3-1: USB disconnect, device number 7
[  136.638149][ T6006] FAULT_INJECTION: forcing a failure.
[  136.638149][ T6006] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  136.638209][ T6006] CPU: 1 UID: 0 PID: 6006 Comm: syz.1.51 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  136.638240][ T6006] Tainted: [L]=SOFTLOCKUP
[  136.638248][ T6006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  136.638270][ T6006] Call Trace:
[  136.638283][ T6006]  <TASK>
[  136.638293][ T6006]  dump_stack_lvl+0xe8/0x150
[  136.638329][ T6006]  should_fail_ex+0x46b/0x600
[  136.638364][ T6006]  _copy_from_user+0x2d/0xb0
[  136.638400][ T6006]  input_event_from_user+0xb1/0x290
[  136.638426][ T6006]  ? __pfx_input_event_from_user+0x10/0x10
[  136.638456][ T6006]  ? rt_spin_unlock+0x160/0x200
[  136.638491][ T6006]  evdev_write+0x2ca/0x4c0
[  136.638524][ T6006]  ? __lock_acquire+0x6b5/0x2d10
[  136.638565][ T6006]  ? __pfx_evdev_write+0x10/0x10
[  136.638609][ T6006]  ? rw_verify_area+0x25b/0x4e0
[  136.638643][ T6006]  ? __pfx_evdev_write+0x10/0x10
[  136.638680][ T6006]  vfs_write+0x2a3/0xba0
[  136.638724][ T6006]  ? __pfx_vfs_write+0x10/0x10
[  136.638760][ T6006]  ? __fget_files+0x2a/0x420
[  136.638797][ T6006]  ? __fget_files+0x2a/0x420
[  136.638826][ T6006]  ? __fget_files+0x3a6/0x420
[  136.638855][ T6006]  ? __fget_files+0x2a/0x420
[  136.638895][ T6006]  ksys_write+0x156/0x270
[  136.638933][ T6006]  ? __pfx_ksys_write+0x10/0x10
[  136.638978][ T6006]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  136.639010][ T6006]  do_syscall_64+0x174/0x580
[  136.639031][ T6006]  ? trace_irq_disable+0x3b/0x140
[  136.639060][ T6006]  ? clear_bhb_loop+0x40/0x90
[  136.639088][ T6006]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  136.639111][ T6006] RIP: 0033:0x7fb73765ce59
[  136.639138][ T6006] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  136.639158][ T6006] RSP: 002b:00007fb7358b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  136.639182][ T6006] RAX: ffffffffffffffda RBX: 00007fb7378d5fa0 RCX: 00007fb73765ce59
[  136.639199][ T6006] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000003
[  136.639213][ T6006] RBP: 00007fb7358b6090 R08: 0000000000000000 R09: 0000000000000000
[  136.639226][ T6006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  136.639239][ T6006] R13: 00007fb7378d6038 R14: 00007fb7378d5fa0 R15: 00007ffe6c6bf068
[  136.639274][ T6006]  </TASK>
[  140.372285][ T5734] usb 1-1: new full-speed USB device number 7 using dummy_hcd
[  140.507499][ T5626] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  140.553278][ T5626] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  140.553789][ T6028] loop2: detected capacity change from 0 to 512
[  140.558075][ T5626] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  140.596869][ T5734] usb 1-1: config 0 has an invalid interface number: 8 but max is 0
[  140.596901][ T5734] usb 1-1: config 0 has no interface number 0
[  140.596947][ T5734] usb 1-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F
[  140.596975][ T5734] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  140.597003][ T5734] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  140.599437][ T5734] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  140.599468][ T5734] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  140.599490][ T5734] usb 1-1: Product: syz
[  140.599504][ T5734] usb 1-1: SerialNumber: syz
[  140.626381][ T5626] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  140.675583][ T5626] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  140.851589][ T6028] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  140.851610][ T6028] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  140.960335][ T6031] loop3: detected capacity change from 0 to 128
[  141.009363][ T5734] usb 1-1: config 0 descriptor??
[  141.024196][ T5734] cm109 1-1:0.8: invalid payload size 0, expected 4
[  141.030433][ T5734] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input5
[  141.121479][ T6028] EXT4-fs (loop2): 1 truncate cleaned up
[  141.231397][ T6028] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  141.285425][    C1] cm109 1-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90
[  141.429294][ T6028] EXT4-fs error (device loop2): ext4_generic_delete_entry:2673: inode #2: block 13: comm syz.2.60: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  141.567063][ T6031] FAT-fs (loop3): bread failed, FSINFO block (sector = 18433)
[  141.598904][ T6028] EXT4-fs (loop2): Remounting filesystem read-only
[  143.413042][ T5626] Bluetooth: hci5: command tx timeout
[  144.145813][ T5616] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  145.450963][ T5626] Bluetooth: hci5: command tx timeout
[  145.584825][    C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  145.588225][    C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  145.590409][    C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  145.590665][    C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  145.590899][    C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  145.591147][    C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  145.591407][    C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  145.591656][    C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  145.591901][    C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  145.592290][    C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  145.827120][ T5880] usb 1-1: USB disconnect, device number 7
[  145.827256][    C0] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  146.120793][ T6083] FAULT_INJECTION: forcing a failure.
[  146.120793][ T6083] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  146.120832][ T6083] CPU: 0 UID: 0 PID: 6083 Comm: syz.1.73 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  146.120860][ T6083] Tainted: [L]=SOFTLOCKUP
[  146.120866][ T6083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  146.120878][ T6083] Call Trace:
[  146.120885][ T6083]  <TASK>
[  146.120894][ T6083]  dump_stack_lvl+0xe8/0x150
[  146.120932][ T6083]  should_fail_ex+0x46b/0x600
[  146.120964][ T6083]  _copy_from_user+0x2d/0xb0
[  146.120999][ T6083]  input_event_from_user+0xb1/0x290
[  146.121022][ T6083]  ? __pfx_input_event_from_user+0x10/0x10
[  146.121048][ T6083]  ? rt_spin_unlock+0x160/0x200
[  146.121080][ T6083]  evdev_write+0x2ca/0x4c0
[  146.121113][ T6083]  ? __lock_acquire+0x6b5/0x2d10
[  146.121146][ T6083]  ? __pfx_evdev_write+0x10/0x10
[  146.121187][ T6083]  ? rw_verify_area+0x25b/0x4e0
[  146.121229][ T6083]  ? __pfx_evdev_write+0x10/0x10
[  146.121261][ T6083]  vfs_write+0x2a3/0xba0
[  146.121298][ T6083]  ? __pfx_vfs_write+0x10/0x10
[  146.121329][ T6083]  ? __fget_files+0x2a/0x420
[  146.121367][ T6083]  ? __fget_files+0x2a/0x420
[  146.121392][ T6083]  ? __fget_files+0x3a6/0x420
[  146.121416][ T6083]  ? __fget_files+0x2a/0x420
[  146.121451][ T6083]  ksys_write+0x156/0x270
[  146.121493][ T6083]  ? __pfx_ksys_write+0x10/0x10
[  146.121536][ T6083]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  146.121560][ T6083]  do_syscall_64+0x174/0x580
[  146.121588][ T6083]  ? trace_irq_disable+0x3b/0x140
[  146.121619][ T6083]  ? clear_bhb_loop+0x40/0x90
[  146.121650][ T6083]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  146.121675][ T6083] RIP: 0033:0x7fb73765ce59
[  146.121694][ T6083] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  146.121711][ T6083] RSP: 002b:00007fb7358b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  146.121732][ T6083] RAX: ffffffffffffffda RBX: 00007fb7378d5fa0 RCX: 00007fb73765ce59
[  146.121746][ T6083] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000003
[  146.121758][ T6083] RBP: 00007fb7358b6090 R08: 0000000000000000 R09: 0000000000000000
[  146.121770][ T6083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  146.121780][ T6083] R13: 00007fb7378d6038 R14: 00007fb7378d5fa0 R15: 00007ffe6c6bf068
[  146.121810][ T6083]  </TASK>
[  146.701621][ T6091] loop3: detected capacity change from 0 to 256
[  147.016340][ T5880] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  147.857794][ T5626] Bluetooth: hci5: command tx timeout
[  148.110196][ T6091] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d)
[  148.136125][ T6101] openvswitch: netlink: Message has 8 unknown bytes.
[  149.018939][ T6029] bridge0: port 1(bridge_slave_0) entered blocking state
[  149.019656][ T6029] bridge0: port 1(bridge_slave_0) entered disabled state
[  149.079978][ T6029] bridge_slave_0: entered allmulticast mode
[  149.103804][ T6029] bridge_slave_0: entered promiscuous mode
[  149.128846][ T6029] bridge0: port 2(bridge_slave_1) entered blocking state
[  149.129339][ T6029] bridge0: port 2(bridge_slave_1) entered disabled state
[  149.129681][ T6029] bridge_slave_1: entered allmulticast mode
[  149.163590][ T6029] bridge_slave_1: entered promiscuous mode
[  149.433041][ T6112] netlink: 32 bytes leftover after parsing attributes in process `syz.1.79'.
[  149.736675][ T6029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  149.774615][ T6029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  149.863770][ T6029] team0: Port device team_slave_0 added
[  149.879646][ T6029] team0: Port device team_slave_1 added
[  149.902307][ T5880] usb 3-1: new full-speed USB device number 8 using dummy_hcd
[  149.913022][ T5626] Bluetooth: hci5: command tx timeout
[  150.055265][ T5880] usb 3-1: unable to get BOS descriptor or descriptor too short
[  150.056090][ T5880] usb 3-1: not running at top speed; connect to a high speed hub
[  150.080324][ T5880] usb 3-1: New USB device found, idVendor=1235, idProduct=8213, bcdDevice= 0.40
[  150.080356][ T5880] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  150.080387][ T5880] usb 3-1: Product: 䘹�頉�鑡�곳㫎醟᳠뢮�鞶輓䠭庇䖉틪洚��㓆��㡦�嫀┬翗槬��똇퇣�⭶䬒�鶌驵�魊�ᾡ骥⬳��꼫뇉뽢⥵╻
[  150.080412][ T5880] usb 3-1: Manufacturer: 넫⤬勉蹀唾栟囊뎭�⠈殔
[  150.080433][ T5880] usb 3-1: SerialNumber: �
[  150.187995][ T5880] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  150.242695][ T6133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.84'.
[  150.242717][ T6133] netlink: 4 bytes leftover after parsing attributes in process `syz.3.84'.
[  150.242743][ T6133] netlink: 'syz.3.84': attribute type 18 has an invalid length.
[  150.242758][ T6133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.84'.
[  150.623733][   T38] kauditd_printk_skb: 7 callbacks suppressed
[  150.623754][   T38] audit: type=1326 audit(1780278713.948:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6134 comm="syz.1.85" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb73765ce59 code=0x7ffc0000
[  150.623875][   T38] audit: type=1326 audit(1780278713.948:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6134 comm="syz.1.85" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb73765ce59 code=0x7ffc0000
[  150.623927][   T38] audit: type=1326 audit(1780278713.948:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6134 comm="syz.1.85" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7fb73765ce59 code=0x7ffc0000
[  150.624028][   T38] audit: type=1326 audit(1780278713.948:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6134 comm="syz.1.85" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb73765ce59 code=0x7ffc0000
[  150.624078][   T38] audit: type=1326 audit(1780278713.948:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6134 comm="syz.1.85" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb73765ce59 code=0x7ffc0000
[  150.624198][   T38] audit: type=1326 audit(1780278713.948:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6134 comm="syz.1.85" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb73765ce59 code=0x7ffc0000
[  150.624246][   T38] audit: type=1326 audit(1780278713.948:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6134 comm="syz.1.85" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb73765ce59 code=0x7ffc0000
[  150.624353][   T38] audit: type=1326 audit(1780278713.948:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6134 comm="syz.1.85" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb73765ce59 code=0x7ffc0000
[  150.624409][   T38] audit: type=1326 audit(1780278713.958:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6134 comm="syz.1.85" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fb73765ce59 code=0x7ffc0000
[  150.624522][   T38] audit: type=1326 audit(1780278713.958:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6134 comm="syz.1.85" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb73765ce59 code=0x7ffc0000
[  151.240093][ T6029] batman_adv: batadv0: Adding interface: batadv_slave_0
[  151.240112][ T6029] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  151.240142][ T6029] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  151.306661][ T5880] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  151.353759][ T6029] batman_adv: batadv0: Adding interface: batadv_slave_1
[  151.353778][ T6029] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  151.364729][ T6029] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  152.132255][ T5733] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  152.389971][ T5733] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  152.390065][ T5733] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  152.390087][ T5733] usb 2-1: Product: syz
[  152.390103][ T5733] usb 2-1: Manufacturer: syz
[  152.390119][ T5733] usb 2-1: SerialNumber: syz
[  152.689124][ T5880] usb 3-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8213); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues
[  152.689314][ T5880] usb 3-1: Error initialising Scarlett Gen 3 Mixer Driver: -22
[  152.776894][ T5733] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  152.918868][ T6029] hsr_slave_0: entered promiscuous mode
[  152.957560][ T6029] hsr_slave_1: entered promiscuous mode
[  152.966877][ T6029] debugfs: 'hsr0' already exists in 'hsr'
[  152.975360][ T6029] Cannot create hsr debugfs directory
[  152.999545][ T5343] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  153.210800][ T6147] warning: `syz.2.88' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  153.281181][ T6142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  153.281781][ T6142] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  153.310553][ T6151] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.88'.
[  153.322556][ T6150] netlink: 40 bytes leftover after parsing attributes in process `syz.0.89'.
[  153.369043][ T6151] netlink: 16 bytes leftover after parsing attributes in process `syz.2.88'.
[  153.821496][ T6140] loop3: detected capacity change from 0 to 32768
[  154.454764][ T6161] loop5: detected capacity change from 0 to 7
[  154.582771][ T6140] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  154.588731][ T6140] workqueue: Failed to create a rescuer kthread for wq "xfs-cil/loop3": -EINTR
[  154.685707][ T6140] XFS (loop3): log mount failed
[  155.360935][ T6161] Dev loop5: unable to read RDB block 7
[  155.360978][ T6161]  loop5: unable to read partition table
[  155.361160][ T6161] loop5: partition table beyond EOD, truncated
[  155.361194][ T6161] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  156.327758][ T5343] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[  156.351967][ T5733] usb 2-1: USB disconnect, device number 4
[  156.459273][ T6170] netlink: 32 bytes leftover after parsing attributes in process `syz.1.93'.
[  156.569095][ T5880] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22
[  156.571141][ T5343] ath9k_htc: Failed to initialize the device
[  156.593151][ T5733] usb 2-1: ath9k_htc: USB layer deinitialized
[  156.848224][ T5880] usb 3-1: USB disconnect, device number 8
[  156.897693][ T6151] netlink: 16 bytes leftover after parsing attributes in process `syz.2.88'.
[  157.539615][ T5903] udevd[5903]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  157.873065][ T6196] loop0: detected capacity change from 0 to 128
[  157.952321][   T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  158.118141][   T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  158.118205][   T10] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  158.118231][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  158.167166][   T10] usb 2-1: config 0 descriptor??
[  158.218523][   T10] pwc: Askey VC010 type 2 USB webcam detected.
[  158.620319][   T10] pwc: recv_control_msg error -32 req 02 val 2b00
[  158.660763][ T6194] loop1: detected capacity change from 0 to 512
[  158.905284][   T10] pwc: recv_control_msg error -32 req 02 val 2700
[  158.920474][   T10] pwc: recv_control_msg error -32 req 02 val 2c00
[  159.061528][ T6194] loop1: detected capacity change from 0 to 1024
[  159.116086][ T1418] wlan1: Trigger new scan to find an IBSS to join
[  159.288762][   T10] pwc: recv_control_msg error -32 req 04 val 1000
[  159.338635][   T10] pwc: recv_control_msg error -32 req 04 val 1300
[  159.340500][   T10] pwc: recv_control_msg error -32 req 04 val 1400
[  159.344347][   T10] pwc: recv_control_msg error -32 req 02 val 2000
[  159.367548][   T10] pwc: recv_control_msg error -32 req 02 val 2100
[  159.671462][   T10] pwc: recv_control_msg error -71 req 02 val 2500
[  159.671967][   T10] pwc: recv_control_msg error -71 req 02 val 2400
[  159.691448][   T10] pwc: recv_control_msg error -71 req 02 val 2600
[  159.705685][   T10] pwc: recv_control_msg error -71 req 02 val 2900
[  159.710729][ T6218] loop2: detected capacity change from 0 to 128
[  159.734127][   T10] pwc: recv_control_msg error -71 req 02 val 2800
[  159.735724][   T10] pwc: recv_control_msg error -71 req 04 val 1100
[  159.736840][   T10] pwc: recv_control_msg error -71 req 04 val 1200
[  159.946361][   T10] pwc: Registered as video103.
[  159.985038][ T6218] hpfs: Bad magic ... probably not HPFS
[  160.066642][ T6222] loop3: detected capacity change from 0 to 1024
[  160.150040][   T10] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input6
[  160.197973][   T10] usb 2-1: USB disconnect, device number 5
[  160.918791][ T6029] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  161.380312][ T6229] loop0: detected capacity change from 0 to 40427
[  162.448166][ T6029] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  162.684992][ T6029] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  163.523741][   T10] usb 1-1: new full-speed USB device number 8 using dummy_hcd
[  163.561941][ T6029] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  163.597231][ T6029] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  163.707554][   T10] usb 1-1: config 252 has an invalid descriptor of length 0, skipping remainder of the config
[  163.707583][   T10] usb 1-1: config 252 has 0 interfaces, different from the descriptor's value: 1
[  163.707623][   T10] usb 1-1: New USB device found, idVendor=0c45, idProduct=6280, bcdDevice=d5.fc
[  163.707648][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  163.834339][ T1238] wlan1: Trigger new scan to find an IBSS to join
[  164.055930][ T6029] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  164.077810][ T6029] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  164.583644][ T6029] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  165.208056][  T151] wlan1: Creating new IBSS network, BSSID d6:fd:47:05:d7:97
[  165.591457][   T10] usb 1-1: USB disconnect, device number 8
[  166.803248][   T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  166.961381][   T10] usb 1-1: Using ep0 maxpacket: 8
[  166.976234][   T10] usb 1-1: unable to read config index 0 descriptor/start: -61
[  166.976275][   T10] usb 1-1: can't read configurations, error -61
[  167.150823][   T10] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  167.312449][   T10] usb 1-1: Using ep0 maxpacket: 8
[  167.317914][   T10] usb 1-1: unable to read config index 0 descriptor/start: -61
[  167.317956][   T10] usb 1-1: can't read configurations, error -61
[  167.318532][   T10] usb usb1-port1: attempt power cycle
[  167.802572][   T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  167.823640][   T10] usb 1-1: Using ep0 maxpacket: 8
[  167.827548][   T10] usb 1-1: unable to read config index 0 descriptor/start: -61
[  167.827593][   T10] usb 1-1: can't read configurations, error -61
[  168.002260][   T10] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  168.084489][   T10] usb 1-1: Using ep0 maxpacket: 8
[  168.088143][   T10] usb 1-1: unable to read config index 0 descriptor/start: -61
[  168.088195][   T10] usb 1-1: can't read configurations, error -61
[  168.089404][   T10] usb usb1-port1: unable to enumerate USB device
[  173.910360][ T6029] 8021q: adding VLAN 0 to HW filter on device bond0
[  174.034619][ T6294] loop3: detected capacity change from 0 to 512
[  179.332168][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  179.432155][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  180.012959][ T6029] 8021q: adding VLAN 0 to HW filter on device team0
[  180.106986][ T1418] bridge0: port 1(bridge_slave_0) entered blocking state
[  180.107194][ T1418] bridge0: port 1(bridge_slave_0) entered forwarding state
[  180.477985][ T1462] bridge0: port 2(bridge_slave_1) entered blocking state
[  180.478123][ T1462] bridge0: port 2(bridge_slave_1) entered forwarding state
[  181.550704][ T5618] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  181.624459][ T5618] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  181.645867][ T5618] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  181.664092][ T5618] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  181.672039][ T5618] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  181.815877][  T837] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  181.972899][  T837] usb 4-1: Using ep0 maxpacket: 32
[  181.975735][  T837] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[  181.975765][  T837] usb 4-1: config 0 has no interface number 0
[  181.978867][  T837] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  181.978897][  T837] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  181.978919][  T837] usb 4-1: Product: syz
[  181.978935][  T837] usb 4-1: Manufacturer: syz
[  181.978951][  T837] usb 4-1: SerialNumber: syz
[  182.084605][  T837] usb 4-1: config 0 descriptor??
[  183.509651][  T837] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  183.509687][  T837] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  183.866230][ T5618] Bluetooth: hci4: command tx timeout
[  184.404812][  T837] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61
[  184.407789][  T837] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -61
[  185.919490][ T5618] Bluetooth: hci4: command tx timeout
[  185.924309][ T5848] usb 4-1: USB disconnect, device number 4
[  186.150014][ T6322] loop2: detected capacity change from 0 to 32768
[  186.523058][ T6322] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  186.579547][ T6339] loop3: detected capacity change from 0 to 512
[  187.003775][ T6322] XFS (loop2): Ending clean mount
[  187.329925][ T6339] EXT4-fs (loop3): 1 orphan inode deleted
[  187.340748][ T6339] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  187.367251][ T6339] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  187.414249][ T1418] __quota_error: 281 callbacks suppressed
[  187.414274][ T1418] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  187.414516][ T1418] EXT4-fs error (device loop3): ext4_release_dquot:7070: comm kworker/u8:12: Failed to release dquot type 1
[  187.992317][ T5618] Bluetooth: hci4: command tx timeout
[  188.089439][ T5616] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  188.292454][ T5614] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  190.072580][ T5618] Bluetooth: hci4: command tx timeout
[  192.607736][ T5879] usb 3-1: new full-speed USB device number 9 using dummy_hcd
[  192.670815][ T6356] loop3: detected capacity change from 0 to 32768
[  192.691903][ T6356] jfs: Unknown parameter 'loginuid'
[  192.775068][ T5879] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  192.775108][ T5879] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  192.775151][ T5879] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[  192.775177][ T5879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  192.865130][ T5879] usb 3-1: config 0 descriptor??
[  193.401434][ T5879] isku 0003:1E7D:319C.0001: unknown main item tag 0x1
[  193.401475][ T5879] isku 0003:1E7D:319C.0001: item fetching failed at offset 6/7
[  193.445258][ T5879] isku 0003:1E7D:319C.0001: parse failed
[  193.445345][ T5879] isku 0003:1E7D:319C.0001: probe with driver isku failed with error -22
[  194.498288][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[  194.498412][ T1339] ieee802154 phy1 wpan1: encryption failed: -22
[  194.580283][ T6375] loop5: detected capacity change from 0 to 127
[  194.638442][ T6375]  loop5: unable to read partition table
[  194.639504][ T6375] loop_reread_partitions: partition scan of loop5 (þ被x) failed (rc=-5)
[  195.031516][ T5626] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  195.079711][ T5626] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  195.107781][ T5626] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  195.172801][ T5626] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  195.173784][ T5626] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  195.413508][ T4885] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  196.480859][ T5848] usb 3-1: USB disconnect, device number 9
[  196.726837][ T1391] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  196.875339][ T6391] loop2: detected capacity change from 0 to 64
[  197.286330][ T5618] Bluetooth: hci3: command tx timeout
[  197.585740][ T6396] UBIFS error (pid: 6396): cannot open "c:::", error -22
[  199.725641][ T5618] Bluetooth: hci3: command tx timeout
[  200.402115][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  200.478566][ T5626] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  200.537774][ T5626] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  200.548867][ T5626] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  200.580636][ T5626] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  200.600016][ T5626] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  200.990558][ T6426] loop2: detected capacity change from 0 to 256
[  200.992570][ T6426] vfat: Bad value for 'nonumtail'
[  201.166700][ T1391] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.835420][ T5618] Bluetooth: hci3: command tx timeout
[  202.657136][ T1391] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  202.715327][ T5618] Bluetooth: hci1: command tx timeout
[  202.932512][ T6458] loop2: detected capacity change from 0 to 4096
[  202.936851][ T6458] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  203.071619][ T6458] ntfs3(loop2): Failed to load $UpCase (-22).
[  203.237299][ T6462] netlink: 12 bytes leftover after parsing attributes in process `syz.3.165'.
[  203.914648][ T5618] Bluetooth: hci3: command tx timeout
[  204.016242][ T1391] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.804828][ T5618] Bluetooth: hci1: command tx timeout
[  204.811620][ T6489] netlink: 36 bytes leftover after parsing attributes in process `syz.3.175'.
[  205.190278][ T6493] loop5: detected capacity change from 0 to 7
[  205.191358][ T6493] Dev loop5: unable to read RDB block 7
[  205.191411][ T6493]  loop5: unable to read partition table
[  205.191658][ T6493] loop5: partition table beyond EOD, truncated
[  205.191679][ T6493] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  206.268770][ T6509] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20002
[  206.872415][ T5618] Bluetooth: hci1: command tx timeout
[  207.012560][ T6515] loop3: detected capacity change from 0 to 32768
[  207.013890][ T6515] btrfs: Deprecated parameter 'usebackuproot'
[  207.014107][ T6515] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  207.222905][ T6515] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.184 (6515)
[  207.359174][ T6515] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  207.359210][ T6515] BTRFS info (device loop3): using crc32c checksum algorithm
[  207.529179][ T6516] F2FS-fs: Conflicting test_dummy_encryption options
[  208.369585][   T38] audit: type=1326 audit(1780278772.995:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6514 comm="syz.2.183" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa687c7ce59 code=0x0
[  208.466934][ T4885] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0x9e9f7c6e level 0
[  208.467092][ T6515] BTRFS error (device loop3): failed to load root extent
[  208.467141][ T6515] BTRFS warning (device loop3): try to load backup roots slot 1
[  208.471716][  T123] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  208.475297][ T6515] BTRFS warning (device loop3): couldn't read tree root
[  208.475326][ T6515] BTRFS warning (device loop3): try to load backup roots slot 2
[  208.479308][ T4885] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  208.479526][ T6515] BTRFS warning (device loop3): couldn't read tree root
[  208.479549][ T6515] BTRFS warning (device loop3): try to load backup roots slot 3
[  208.618778][ T6515] BTRFS info (device loop3): rebuilding free space tree
[  208.880629][ T6515] BTRFS info (device loop3): checking UUID tree
[  208.886708][ T6515] BTRFS info (device loop3): enabling ssd optimizations
[  208.886751][ T6515] BTRFS info (device loop3): turning on async discard
[  208.886769][ T6515] BTRFS info (device loop3): enabling free space tree
[  208.886790][ T6515] BTRFS info (device loop3): force clearing of disk cache
[  208.886808][ T6515] BTRFS info (device loop3): enabling auto defrag
[  208.886825][ T6515] BTRFS info (device loop3): trying to use backup root at mount time
[  208.886856][ T6515] BTRFS info (device loop3): use zstd compression, level 3
[  208.973525][ T1391] bridge_slave_1: left allmulticast mode
[  208.973840][ T1391] bridge_slave_1: left promiscuous mode
[  208.995682][ T5618] Bluetooth: hci1: command tx timeout
[  209.030044][ T1391] bridge0: port 2(bridge_slave_1) entered disabled state
[  209.540185][ T1391] bridge_slave_0: left allmulticast mode
[  209.540233][ T1391] bridge_slave_0: left promiscuous mode
[  209.540530][ T1391] bridge0: port 1(bridge_slave_0) entered disabled state
[  209.621567][ T6542] Zero length message leads to an empty skb
[  211.297912][ T5614] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  212.460342][ T6542] loop2: detected capacity change from 0 to 32768
[  212.584703][ T6546] loop5: detected capacity change from 0 to 7
[  212.588040][ T6546] Dev loop5: unable to read RDB block 7
[  212.588081][ T6546]  loop5: unable to read partition table
[  212.588283][ T6546] loop5: partition table beyond EOD, truncated
[  212.588301][ T6546] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  213.962915][ T6551] loop3: detected capacity change from 0 to 32768
[  213.990111][ T6551] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  214.078250][ T6551] XFS (loop3): Ending clean mount
[  214.252713][ T5614] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  214.253152][ T1391] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  214.436483][ T1391] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  214.607639][ T1391] bond0 (unregistering): Released all slaves
[  216.173639][ T5880] usb 4-1: new full-speed USB device number 5 using dummy_hcd
[  216.217281][ T6579] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0
[  216.344365][ T5880] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  216.346907][ T5880] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40
[  216.346941][ T5880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=19
[  216.346964][ T5880] usb 4-1: Product: syz
[  216.346979][ T5880] usb 4-1: Manufacturer: syz
[  216.346994][ T5880] usb 4-1: SerialNumber: syz
[  216.445742][ T6581] mmap: syz.2.194 (6581): VmData 37531648 exceed data ulimit 33554432. Update limits or use boot option ignore_rlimit_data.
[  216.915445][ T6584] loop5: detected capacity change from 0 to 7
[  217.005667][ T6584] Dev loop5: unable to read RDB block 7
[  217.005717][ T6584]  loop5: unable to read partition table
[  217.005937][ T6584] loop5: partition table beyond EOD, truncated
[  217.005974][ T6584] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  217.032222][ T5623] Bluetooth: hci2: command 0x0406 tx timeout
[  217.056483][ T5623] Bluetooth: hci0: command 0x0406 tx timeout
[  217.186753][ T5880] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202
[  217.483617][ T5733] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  217.750991][ T5733] usb 3-1: Using ep0 maxpacket: 32
[  217.767787][ T5733] usb 3-1: config 0 has an invalid interface number: 67 but max is 0
[  217.767817][ T5733] usb 3-1: config 0 has no interface number 0
[  217.793607][ T5733] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  217.793639][ T5733] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  217.793661][ T5733] usb 3-1: Product: syz
[  217.793675][ T5733] usb 3-1: Manufacturer: syz
[  217.793689][ T5733] usb 3-1: SerialNumber: syz
[  217.855134][ T5733] usb 3-1: config 0 descriptor??
[  218.001391][ T6307] bridge0: port 1(bridge_slave_0) entered blocking state
[  218.001849][ T6307] bridge0: port 1(bridge_slave_0) entered disabled state
[  218.002444][ T6307] bridge_slave_0: entered allmulticast mode
[  218.017768][ T6307] bridge_slave_0: entered promiscuous mode
[  218.256575][ T6307] bridge0: port 2(bridge_slave_1) entered blocking state
[  218.257189][ T6307] bridge0: port 2(bridge_slave_1) entered disabled state
[  218.257782][ T6307] bridge_slave_1: entered allmulticast mode
[  218.307176][ T5733] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  218.307210][ T5733] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  218.340089][ T6307] bridge_slave_1: entered promiscuous mode
[  218.715930][ T5720] usb 4-1: USB disconnect, device number 5
[  218.831925][ T5720] usblp0: removed
[  219.242335][ T5733] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61
[  219.242564][ T5733] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -61
[  219.424088][ T6307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  219.507141][ T6600] loop3: detected capacity change from 0 to 64
[  219.606245][ T6307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  220.124968][ T1391] hsr_slave_0: left promiscuous mode
[  220.163834][ T1391] hsr_slave_1: left promiscuous mode
[  220.167137][ T1391] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  220.167414][ T1391] batman_adv: batadv0: Removing interface: batadv_slave_0
[  220.205169][ T1391] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  220.205193][ T1391] batman_adv: batadv0: Removing interface: batadv_slave_1
[  220.615688][ T1391] veth1_macvtap: left promiscuous mode
[  220.615883][ T1391] veth0_macvtap: left promiscuous mode
[  220.616599][ T1391] veth1_vlan: left promiscuous mode
[  220.649735][ T1391] veth0_vlan: left promiscuous mode
[  220.955484][ T5720] usb 3-1: USB disconnect, device number 10
[  221.000715][ T6620] loop3: detected capacity change from 0 to 32768
[  221.086354][ T6623] loop2: detected capacity change from 0 to 64
[  221.087201][ T6623] hfs: Unknown parameter 'c
[  221.087201][ T6623] Sator'
[  221.133773][ T6620] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  221.240782][ T6620] XFS (loop3): Ending clean mount
[  221.591211][ T6623] UBIFS error (pid: 6623): cannot open "c:::", error -22
[  221.602861][ T5614] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  222.685657][ T6636] FAULT_INJECTION: forcing a failure.
[  222.685657][ T6636] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  222.685698][ T6636] CPU: 1 UID: 0 PID: 6636 Comm: syz.3.202 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  222.685730][ T6636] Tainted: [L]=SOFTLOCKUP
[  222.685737][ T6636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  222.685751][ T6636] Call Trace:
[  222.685760][ T6636]  <TASK>
[  222.685770][ T6636]  dump_stack_lvl+0xe8/0x150
[  222.685806][ T6636]  should_fail_ex+0x46b/0x600
[  222.685846][ T6636]  _copy_to_user+0x31/0xb0
[  222.685899][ T6636]  usbdev_read+0x543/0x750
[  222.685956][ T6636]  ? __pfx_usbdev_read+0x10/0x10
[  222.686000][ T6636]  ? rw_verify_area+0x2ac/0x4e0
[  222.686041][ T6636]  vfs_readv+0x597/0x850
[  222.686070][ T6636]  ? __pfx_usbdev_read+0x10/0x10
[  222.686170][ T6636]  ? __pfx_vfs_readv+0x10/0x10
[  222.686271][ T6636]  ? __fget_files+0x2a/0x420
[  222.686308][ T6636]  ? __fget_files+0x3a6/0x420
[  222.686339][ T6636]  ? __fget_files+0x2a/0x420
[  222.686379][ T6636]  __x64_sys_preadv+0x1a2/0x2b0
[  222.686407][ T6636]  ? __pfx___x64_sys_preadv+0x10/0x10
[  222.686442][ T6636]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  222.686469][ T6636]  do_syscall_64+0x174/0x580
[  222.686493][ T6636]  ? trace_irq_disable+0x3b/0x140
[  222.686523][ T6636]  ? clear_bhb_loop+0x40/0x90
[  222.686553][ T6636]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  222.686578][ T6636] RIP: 0033:0x7fc4e481ce59
[  222.686601][ T6636] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  222.686620][ T6636] RSP: 002b:00007fc4e2a6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  222.686644][ T6636] RAX: ffffffffffffffda RBX: 00007fc4e4a95fa0 RCX: 00007fc4e481ce59
[  222.686662][ T6636] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000006
[  222.686683][ T6636] RBP: 00007fc4e2a6e090 R08: 0000000000000000 R09: 0000000000000000
[  222.686698][ T6636] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001
[  222.686711][ T6636] R13: 00007fc4e4a96038 R14: 00007fc4e4a95fa0 R15: 00007fff90c6a9e8
[  222.686748][ T6636]  </TASK>
[  223.423225][ T1391] team0 (unregistering): Port device team_slave_1 removed
[  223.529063][ T1391] team0 (unregistering): Port device team_slave_0 removed
[  223.897241][ T6378] bridge0: port 1(bridge_slave_0) entered blocking state
[  223.897592][ T6378] bridge0: port 1(bridge_slave_0) entered disabled state
[  223.897949][ T6378] bridge_slave_0: entered allmulticast mode
[  223.947034][ T6378] bridge_slave_0: entered promiscuous mode
[  224.127246][ T6307] team0: Port device team_slave_0 added
[  224.207150][ T5272] 8021q: adding VLAN 0 to HW filter on device eth1
[  224.215154][ T6378] bridge0: port 2(bridge_slave_1) entered blocking state
[  224.215587][ T6378] bridge0: port 2(bridge_slave_1) entered disabled state
[  224.215947][ T6378] bridge_slave_1: entered allmulticast mode
[  224.245940][ T6378] bridge_slave_1: entered promiscuous mode
[  224.354464][ T6307] team0: Port device team_slave_1 added
[  224.511262][ T6640] loop3: detected capacity change from 0 to 32768
[  224.789353][ T6378] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  224.790894][ T6640] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  224.940427][ T6640] XFS (loop3): Ending clean mount
[  224.957140][ T6307] batman_adv: batadv0: Adding interface: batadv_slave_0
[  224.957156][ T6307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  224.957180][ T6307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  224.967577][ T6378] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  224.976070][ T6419] bridge0: port 1(bridge_slave_0) entered blocking state
[  224.991382][ T6419] bridge0: port 1(bridge_slave_0) entered disabled state
[  225.082476][ T6419] bridge_slave_0: entered allmulticast mode
[  225.086313][ T6419] bridge_slave_0: entered promiscuous mode
[  225.129577][ T6307] batman_adv: batadv0: Adding interface: batadv_slave_1
[  225.129596][ T6307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  225.129626][ T6307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  225.205295][ T6419] bridge0: port 2(bridge_slave_1) entered blocking state
[  225.205653][ T6419] bridge0: port 2(bridge_slave_1) entered disabled state
[  225.205995][ T6419] bridge_slave_1: entered allmulticast mode
[  225.237232][ T6419] bridge_slave_1: entered promiscuous mode
[  225.340419][ T5614] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  225.684821][ T6378] team0: Port device team_slave_0 added
[  225.761127][ T6378] team0: Port device team_slave_1 added
[  225.778744][ T6419] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  226.027120][ T6419] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  226.279160][ T6307] hsr_slave_0: entered promiscuous mode
[  226.295215][ T6307] hsr_slave_1: entered promiscuous mode
[  226.297113][ T6307] debugfs: 'hsr0' already exists in 'hsr'
[  226.297152][ T6307] Cannot create hsr debugfs directory
[  226.320740][ T6378] batman_adv: batadv0: Adding interface: batadv_slave_0
[  226.320756][ T6378] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  226.320780][ T6378] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  226.543077][ T6378] batman_adv: batadv0: Adding interface: batadv_slave_1
[  226.543095][ T6378] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  226.543120][ T6378] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  226.904728][ T6655] loop2: detected capacity change from 0 to 32768
[  226.919391][ T6655] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.206 (6655)
[  226.979045][ T6655] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  226.979080][ T6655] BTRFS info (device loop2): using sha256 checksum algorithm
[  227.367923][ T1418] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  227.947450][ T6655] BTRFS info (device loop2): rebuilding free space tree
[  228.053258][ T6655] BTRFS info (device loop2): enabling ssd optimizations
[  228.053290][ T6655] BTRFS info (device loop2): using spread ssd allocation scheme
[  228.053314][ T6655] BTRFS info (device loop2): enabling free space tree
[  228.053332][ T6655] BTRFS info (device loop2): force clearing of disk cache
[  228.053349][ T6655] BTRFS info (device loop2): enabling auto defrag
[  228.053374][ T6655] BTRFS info (device loop2): max_inline set to 0
[  228.301622][ T6688] loop3: detected capacity change from 0 to 512
[  228.357990][ T6688] EXT4-fs (loop3): Test dummy encryption mode enabled
[  228.439279][ T6419] team0: Port device team_slave_0 added
[  228.464684][ T5616] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  228.624324][ T5272] 8021q: adding VLAN 0 to HW filter on device eth2
[  228.629901][ T6419] team0: Port device team_slave_1 added
[  228.700093][ T6688] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.207: inode has both inline data and extents flags
[  228.700354][ T6688] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  228.705363][    C0] EXT4-fs (loop3): initial error at time 1780278795: ext4_orphan_get:1397: inode 15
[  228.705406][    C0] EXT4-fs (loop3): last error at time 1780278795: ext4_orphan_get:1397: inode 15
[  228.756494][ T6688] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.207: couldn't read orphan inode 15 (err -117)
[  228.756754][ T6688] loop3: lost filesystem error report for type 5 error -117
[  228.813034][ T6688] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  228.964782][ T6688] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni"
[  229.005694][ T6688] fscrypt: AES-256-XTS using implementation "xts-aes-aesni-avx"
[  229.335414][ T6419] batman_adv: batadv0: Adding interface: batadv_slave_0
[  229.349064][ T6419] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  229.349103][ T6419] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  229.643478][ T6419] batman_adv: batadv0: Adding interface: batadv_slave_1
[  229.643496][ T6419] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  229.643525][ T6419] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  229.827847][ T6699] loop5: detected capacity change from 0 to 7
[  229.950783][ T5614] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  229.992334][ T6699] Dev loop5: unable to read RDB block 7
[  229.992379][ T6699]  loop5: unable to read partition table
[  229.992598][ T6699] loop5: partition table beyond EOD, truncated
[  230.033908][ T6378] hsr_slave_0: entered promiscuous mode
[  230.036134][ T6378] hsr_slave_1: entered promiscuous mode
[  230.037924][ T6378] debugfs: 'hsr0' already exists in 'hsr'
[  230.037948][ T6378] Cannot create hsr debugfs directory
[  230.065761][ T6699] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  230.664194][ T6707] loop2: detected capacity change from 0 to 4096
[  230.684196][ T6707] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  230.849112][ T6419] hsr_slave_0: entered promiscuous mode
[  230.851821][ T6419] hsr_slave_1: entered promiscuous mode
[  230.871698][ T6419] debugfs: 'hsr0' already exists in 'hsr'
[  230.871729][ T6419] Cannot create hsr debugfs directory
[  230.931903][ T6707] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  231.000519][ T6707] ntfs3(loop2): ino=1a, mi_enum_attr
[  231.000696][ T6707] ntfs3(loop2): Failed to initialize $Extend/$ObjId.
[  231.084887][   T38] audit: type=1326 audit(1797056242.418:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6714 comm="syz.3.216" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc4e481ce59 code=0x0
[  231.232119][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  231.252113][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  231.262114][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  231.272156][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  231.282120][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  231.292126][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  231.302127][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  231.522952][ T6718] ntfs3(loop2): ino=5, "/" indx_read_ra
[  231.524310][ T6718] ntfs3(loop2): ino=5, "/" indx_read_ra
[  231.921651][ T6716] loop3: detected capacity change from 0 to 8192
[  231.922785][ T6716] vfat: Unknown parameter '€
[  231.922785][ T6716] '
[  232.617296][ T1391] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  232.625102][ T6734] loop3: detected capacity change from 0 to 64
[  234.907357][ T6744] UBIFS error (pid: 6744): cannot open "c:::", error -22
[  235.075461][ T5272] 8021q: adding VLAN 0 to HW filter on device eth3
[  236.489272][ T6749] loop2: detected capacity change from 0 to 512
[  236.761884][ T6746] 9p: Bad value for 'rfdno'
[  236.855964][ T6752] loop3: detected capacity change from 0 to 2048
[  237.075894][ T6753] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  237.981481][ T6765] netlink: 16 bytes leftover after parsing attributes in process `syz.2.224'.
[  238.296848][ T6753] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  238.301303][ T6753] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4)
[  238.382579][ T6753] Remounting filesystem read-only
[  239.191598][ T5614] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer
[  239.685963][ T1391] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  240.624464][ T6767] loop3: detected capacity change from 0 to 32768
[  240.701103][ T6767] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  241.152212][ T6767] XFS (loop3): Ending clean mount
[  241.638007][ T5626] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  241.711658][ T5626] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  241.754733][ T5626] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  241.804440][ T5626] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  241.805747][ T5626] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  242.252647][ T5614] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  243.190496][ T6793] syz.2.231 uses obsolete (PF_INET,SOCK_PACKET)
[  243.998019][ T5618] Bluetooth: hci5: command tx timeout
[  244.410600][ T1391] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  245.621039][ T6799] atomic_op ffff88803a38ba18 conn xmit_atomic 0000000000000000
[  246.087638][ T5618] Bluetooth: hci5: command tx timeout
[  246.281937][ T6815] loop3: detected capacity change from 0 to 64
[  247.381891][ T6823] UBIFS error (pid: 6823): cannot open "c:::", error -22
[  248.898492][ T5618] Bluetooth: hci5: command tx timeout
[  250.104238][ T5848] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  250.256466][ T5848] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  250.256506][ T5848] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  250.258224][ T5848] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  250.258257][ T5848] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  250.258280][ T5848] usb 3-1: Manufacturer: syz
[  250.333128][ T5848] usb 3-1: config 0 descriptor??
[  250.953473][ T5618] Bluetooth: hci5: command tx timeout
[  251.304897][ T5848] uclogic 0003:256C:006D.0002: interface is invalid, ignoring
[  251.331466][ T6828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  251.350845][ T6828] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  252.387035][ T5848] usb 3-1: USB disconnect, device number 11
[  253.323117][ T6842] loop5: detected capacity change from 0 to 127
[  253.374594][ T6842]  loop5: unable to read partition table
[  253.376039][ T6842] loop_reread_partitions: partition scan of loop5 (þ被x) failed (rc=-5)
[  253.858432][ T1391] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  254.217095][ T5272] 8021q: adding VLAN 0 to HW filter on device eth4
[  255.619777][ T5626] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  255.671928][ T5626] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  255.685299][ T5626] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  255.690062][ T5626] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  255.723326][ T5626] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  256.381417][ T6856] input: syz0 as /devices/virtual/input/input7
[  256.408576][ T6859] loop3: detected capacity change from 0 to 512
[  256.646472][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[  256.646590][ T1339] ieee802154 phy1 wpan1: encryption failed: -22
[  257.286988][ T6859] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #15: comm syz.3.240: corrupted in-inode xattr: e_name out of bounds
[  257.287034][ T6859] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  257.298850][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  257.298878][    C0] EXT4-fs (loop3): initial error at time 1797056268: ext4_iget_extra_inode:5128: inode 15
[  257.298914][    C0] EXT4-fs (loop3): last error at time 1797056268: ext4_iget_extra_inode:5128: inode 15
[  257.366719][ T6859] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.240: couldn't read orphan inode 15 (err -117)
[  257.366756][ T6859] loop3: lost filesystem error report for type 5 error -117
[  257.390099][ T6859] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  257.703819][  T837] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  257.915325][  T837] usb 4-1: config index 0 descriptor too short (expected 12336, got 441)
[  257.915360][  T837] usb 4-1: config 48 has too many interfaces: 48, using maximum allowed: 32
[  257.915383][  T837] usb 4-1: config 48 has an invalid descriptor of length 0, skipping remainder of the config
[  257.915404][  T837] usb 4-1: config 48 has 0 interfaces, different from the descriptor's value: 48
[  257.915445][  T837] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  257.915470][  T837] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  257.992342][ T5618] Bluetooth: hci4: command tx timeout
[  258.562278][  T837] usb 4-1: USB disconnect, device number 6
[  258.603434][ T6846] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  259.261470][  T151] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  259.996958][ T5614] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  260.090821][ T5618] Bluetooth: hci4: command tx timeout
[  260.183761][ T6885] loop5: detected capacity change from 0 to 7
[  260.190676][ T6885] Dev loop5: unable to read RDB block 7
[  260.190724][ T6885]  loop5: unable to read partition table
[  260.190964][ T6885] loop5: partition table beyond EOD, truncated
[  260.190985][ T6885] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  260.846931][ T6893] mmap: syz.3.246 (6893) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  260.949552][ T6891] loop2: detected capacity change from 0 to 512
[  260.951041][ T6895] loop3: detected capacity change from 0 to 512
[  261.059226][ T5626] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  261.116303][ T5626] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  261.137979][ T5626] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  261.169334][ T5626] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  261.188062][ T5626] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  261.564084][ T6891] EXT4-fs (loop2): 1 truncate cleaned up
[  261.601902][ T6891] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  261.949498][   T38] audit: type=1800 audit(1797056272.978:457): pid=6891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.245" name="file1" dev="loop2" ino=15 res=0 errno=0
[  262.152290][ T5618] Bluetooth: hci4: command tx timeout
[  262.255492][ T5848] IPVS: starting estimator thread 0...
[  263.138599][ T6903] IPVS: using max 7 ests per chain, 16800 per kthread
[  263.435397][ T5618] Bluetooth: hci6: command tx timeout
[  264.232618][ T5618] Bluetooth: hci4: command tx timeout
[  265.450429][ T5616] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  265.741574][ T5618] Bluetooth: hci6: command tx timeout
[  266.882594][ T5733] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  267.153125][ T5733] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  267.153158][ T5733] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  267.153179][ T5733] usb 3-1: Product: syz
[  267.153195][ T5733] usb 3-1: Manufacturer: syz
[  267.153210][ T5733] usb 3-1: SerialNumber: syz
[  267.235025][ T6926] loop3: detected capacity change from 0 to 256
[  267.240236][ T6926] vfat: Unknown parameter '00000000000000000000'
[  267.832243][ T5618] Bluetooth: hci6: command tx timeout
[  269.912511][ T5618] Bluetooth: hci6: command tx timeout
[  273.098741][ T6930] loop2: detected capacity change from 0 to 32768
[  275.182261][ T5733] rtl8150 3-1:1.0: couldn't reset the device
[  275.182590][ T5733] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5
[  276.332678][ T5733] usb 3-1: USB disconnect, device number 12
[  281.292944][    C1] sched: DL replenish lagged too much
[  284.635840][ T6939] loop2: detected capacity change from 0 to 512
[  284.664068][ T6939] ext4: Unknown parameter 'noacl'
[  284.850235][ T5626] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  284.910718][ T5626] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  284.924276][ T5626] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  284.971707][ T5626] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  284.983014][ T5626] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  287.032345][ T5618] Bluetooth: hci7: command tx timeout
[  288.916111][ T6781] bridge0: port 1(bridge_slave_0) entered blocking state
[  288.916472][ T6781] bridge0: port 1(bridge_slave_0) entered disabled state
[  288.916869][ T6781] bridge_slave_0: entered allmulticast mode
[  288.949189][ T6781] bridge_slave_0: entered promiscuous mode
[  289.026588][ T6781] bridge0: port 2(bridge_slave_1) entered blocking state
[  289.026942][ T6781] bridge0: port 2(bridge_slave_1) entered disabled state
[  289.027351][ T6781] bridge_slave_1: entered allmulticast mode
[  289.089237][ T6781] bridge_slave_1: entered promiscuous mode
[  289.112670][ T5618] Bluetooth: hci7: command tx timeout
[  290.243839][  T151] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  291.195629][ T5618] Bluetooth: hci7: command tx timeout
[  291.444350][ T7001] loop2: detected capacity change from 0 to 128
[  291.660691][ T7001] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  291.661139][ T7001] hpfs: filesystem error: improperly stopped
[  291.661161][ T7001] hpfs: You really don't want any checks? You are crazy...
[  291.696192][ T7001] hpfs: hpfs_map_sector(): read error
[  291.696211][ T7001] hpfs: code page support is disabled
[  291.773194][ T7001] hpfs: hpfs_map_4sectors(): unaligned read
[  291.809419][ T7001] hpfs: hpfs_map_4sectors(): unaligned read
[  291.809444][ T7001] hpfs: filesystem error: unable to find root dir
[  293.272477][ T5618] Bluetooth: hci7: command tx timeout
[  298.378534][ T6781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  298.460072][ T6850] bridge0: port 1(bridge_slave_0) entered blocking state
[  298.470420][ T6850] bridge0: port 1(bridge_slave_0) entered disabled state
[  298.470880][ T6850] bridge_slave_0: entered allmulticast mode
[  298.496623][ T6850] bridge_slave_0: entered promiscuous mode
[  298.579390][ T5272] 8021q: adding VLAN 0 to HW filter on device eth5
[  298.628202][ T6781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  298.708735][ T6850] bridge0: port 2(bridge_slave_1) entered blocking state
[  298.709124][ T6850] bridge0: port 2(bridge_slave_1) entered disabled state
[  298.709521][ T6850] bridge_slave_1: entered allmulticast mode
[  298.767203][ T6850] bridge_slave_1: entered promiscuous mode
[  299.180188][ T6781] team0: Port device team_slave_0 added
[  299.229407][ T6850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  299.250188][ T6781] team0: Port device team_slave_1 added
[  299.283849][ T6850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  299.533517][ T6781] batman_adv: batadv0: Adding interface: batadv_slave_0
[  299.533535][ T6781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  299.533565][ T6781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  301.306526][ T5626] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  301.369812][ T5626] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  301.382857][ T5626] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  301.384899][ T5626] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  301.385827][ T5626] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  303.514178][ T5626] Bluetooth: hci0: command tx timeout
[  303.632775][ T7021] comedi comedi2: comedi_config --init_data is deprecated
[  304.180502][ T7029] loop2: detected capacity change from 0 to 256
[  304.585891][ T6850] team0: Port device team_slave_0 added
[  304.633365][ T6781] batman_adv: batadv0: Adding interface: batadv_slave_1
[  304.633385][ T6781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  304.633417][ T6781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  304.762835][ T6850] team0: Port device team_slave_1 added
[  304.843819][  T837] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  304.992372][  T837] usb 3-1: Using ep0 maxpacket: 32
[  304.994874][  T837] usb 3-1: config index 0 descriptor too short (expected 29220, got 36)
[  304.994906][  T837] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  304.994930][  T837] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81
[  304.994984][  T837] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  304.995009][  T837] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  304.995035][  T837] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  304.995079][  T837] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  304.995105][  T837] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  305.231516][  T837] usb 3-1: config 0 descriptor??
[  305.593091][ T5626] Bluetooth: hci0: command tx timeout
[  305.970963][ T6850] batman_adv: batadv0: Adding interface: batadv_slave_0
[  305.970986][ T6850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  305.971021][ T6850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  307.201896][ T6889] bridge0: port 1(bridge_slave_0) entered blocking state
[  307.213951][ T6889] bridge0: port 1(bridge_slave_0) entered disabled state
[  307.267006][ T6889] bridge_slave_0: entered allmulticast mode
[  307.358054][ T6889] bridge_slave_0: entered promiscuous mode
[  307.679987][ T5626] Bluetooth: hci0: command tx timeout
[  307.783816][ T6850] batman_adv: batadv0: Adding interface: batadv_slave_1
[  307.783836][ T6850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  307.783877][ T6850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  308.205137][ T6889] bridge0: port 2(bridge_slave_1) entered blocking state
[  308.220381][ T6889] bridge0: port 2(bridge_slave_1) entered disabled state
[  308.231224][ T6889] bridge_slave_1: entered allmulticast mode
[  308.363922][ T6889] bridge_slave_1: entered promiscuous mode
[  309.752580][ T5626] Bluetooth: hci0: command tx timeout
[  309.839315][  T837] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  309.989366][  T837] usb 3-1: USB disconnect, device number 13
[  310.144603][  T837] usblp0: removed
[  310.745971][ T6889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  312.834154][ T6889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  312.937514][ T5272] 8021q: adding VLAN 0 to HW filter on device eth6
[  313.174020][ T6850] hsr_slave_0: entered promiscuous mode
[  313.180318][ T6850] hsr_slave_1: entered promiscuous mode
[  313.203075][ T6850] debugfs: 'hsr0' already exists in 'hsr'
[  313.203106][ T6850] Cannot create hsr debugfs directory
[  313.401801][ T6889] team0: Port device team_slave_0 added
[  313.466676][ T6889] team0: Port device team_slave_1 added
[  313.804937][ T6889] batman_adv: batadv0: Adding interface: batadv_slave_0
[  313.804956][ T6889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  313.804985][ T6889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  314.011092][ T6889] batman_adv: batadv0: Adding interface: batadv_slave_1
[  314.011111][ T6889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  314.011151][ T6889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  314.032782][ T6933] bridge0: port 1(bridge_slave_0) entered blocking state
[  314.033161][ T6933] bridge0: port 1(bridge_slave_0) entered disabled state
[  314.078475][ T6933] bridge_slave_0: entered allmulticast mode
[  314.090681][ T6933] bridge_slave_0: entered promiscuous mode
[  315.829460][ T5618] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  315.915766][ T5618] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  315.947194][ T5618] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  315.949236][ T5618] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  315.950217][ T5618] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  317.041611][ T6933] bridge0: port 2(bridge_slave_1) entered blocking state
[  317.041975][ T6933] bridge0: port 2(bridge_slave_1) entered disabled state
[  317.057946][ T6933] bridge_slave_1: entered allmulticast mode
[  317.095243][ T6933] bridge_slave_1: entered promiscuous mode
[  317.408996][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[  317.409119][ T1339] ieee802154 phy1 wpan1: encryption failed: -22
[  318.404119][ T6933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  318.872489][ T5626] Bluetooth: hci8: command tx timeout
[  319.433925][ T5626] Bluetooth: hci3: command 0x0406 tx timeout
[  320.952522][ T5626] Bluetooth: hci8: command tx timeout
[  321.430853][   T60] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  321.498816][   T60] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  321.541456][   T60] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  321.552744][   T60] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  321.559818][   T60] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  322.465224][  T167] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  323.032518][   T60] Bluetooth: hci8: command tx timeout
[  324.552389][   T60] Bluetooth: hci5: command tx timeout
[  324.649742][   T60] Bluetooth: hci1: command 0x0406 tx timeout
[  325.112684][   T60] Bluetooth: hci8: command tx timeout
[  326.247240][ T5618] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  326.340897][ T5618] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  326.373746][ T5618] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  326.375067][ T5618] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  326.424140][ T5618] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  326.634293][ T5618] Bluetooth: hci5: command tx timeout
[  328.712613][ T5626] Bluetooth: hci5: command tx timeout
[  330.219190][ T6933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  330.240490][ T5626] Bluetooth: hci9: command tx timeout
[  330.305447][ T5272] 8021q: adding VLAN 0 to HW filter on device eth7
[  330.792641][ T5626] Bluetooth: hci5: command tx timeout
[  332.312597][   T60] Bluetooth: hci9: command tx timeout
[  334.392316][   T60] Bluetooth: hci9: command tx timeout
[  336.472233][   T60] Bluetooth: hci9: command tx timeout
[  339.921511][ T6933] team0: Port device team_slave_0 added
[  340.067970][ T6933] team0: Port device team_slave_1 added
[  340.775399][ T6933] batman_adv: batadv0: Adding interface: batadv_slave_0
[  340.775418][ T6933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  340.775449][ T6933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  344.049786][ T6933] batman_adv: batadv0: Adding interface: batadv_slave_1
[  344.049806][ T6933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  344.049836][ T6933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  344.569287][ T5626] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  344.655666][ T5626] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  344.659389][ T5626] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  344.677251][ T5626] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  344.679436][ T5626] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  346.792790][ T5626] Bluetooth: hci4: command tx timeout
[  348.872405][   T60] Bluetooth: hci4: command tx timeout
[  350.952337][   T60] Bluetooth: hci4: command tx timeout
[  353.045353][   T60] Bluetooth: hci4: command tx timeout
[  355.517849][  T123] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  361.785438][ T5626] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  361.828367][ T5626] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  361.831104][ T5626] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  361.898357][ T5626] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  361.901730][ T5626] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  362.440294][ T1391] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  364.075293][   T60] Bluetooth: hci1: command tx timeout
[  366.152290][ T5626] Bluetooth: hci1: command tx timeout
[  368.232415][ T5626] Bluetooth: hci1: command tx timeout
[  370.312376][ T5626] Bluetooth: hci1: command tx timeout
[  376.789802][   T60] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  376.847658][   T60] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  376.850513][   T60] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  376.934142][   T60] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  376.941297][   T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  378.889804][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[  378.889931][ T1339] ieee802154 phy1 wpan1: encryption failed: -22
[  379.036581][ T5626] Bluetooth: hci0: command tx timeout
[  381.112437][ T5626] Bluetooth: hci0: command tx timeout
[  382.227543][   T60] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  382.340474][   T60] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  382.352914][   T60] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  382.358022][   T60] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  382.359002][   T60] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  383.192478][   T60] Bluetooth: hci0: command tx timeout
[  384.472202][   T60] Bluetooth: hci6: command tx timeout
[  385.273269][   T60] Bluetooth: hci0: command tx timeout
[  386.317769][ T5626] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  386.407606][ T5626] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  386.422248][ T5626] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  386.430947][ T5626] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  386.439211][ T5626] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  386.554770][   T60] Bluetooth: hci6: command tx timeout
[  388.633877][ T5626] Bluetooth: hci6: command tx timeout
[  388.712470][ T5626] Bluetooth: hci7: command tx timeout
[  390.239928][ T1238] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  390.712311][ T5626] Bluetooth: hci6: command tx timeout
[  390.795278][ T5626] Bluetooth: hci7: command tx timeout
[  392.872381][   T60] Bluetooth: hci7: command tx timeout
[  394.952296][ T5626] Bluetooth: hci7: command tx timeout
[  402.536630][ T5272] 8021q: adding VLAN 0 to HW filter on device eth8
[  405.020144][ T7139] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg2": -EINTR
[  406.009842][   T60] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  406.077877][   T60] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  406.088564][   T60] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  406.109681][   T60] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  406.128206][   T60] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  407.236805][ T7174] bridge0: port 1(bridge_slave_0) entered blocking state
[  407.237170][ T7174] bridge0: port 1(bridge_slave_0) entered disabled state
[  407.237619][ T7174] bridge_slave_0: entered allmulticast mode
[  407.273082][ T7174] bridge_slave_0: entered promiscuous mode
[  407.437199][ T7183] bridge0: port 1(bridge_slave_0) entered blocking state
[  407.437561][ T7183] bridge0: port 1(bridge_slave_0) entered disabled state
[  407.437968][ T7183] bridge_slave_0: entered allmulticast mode
[  407.466864][ T7183] bridge_slave_0: entered promiscuous mode
[  407.687283][ T7174] bridge0: port 2(bridge_slave_1) entered blocking state
[  407.687644][ T7174] bridge0: port 2(bridge_slave_1) entered disabled state
[  407.688073][ T7174] bridge_slave_1: entered allmulticast mode
[  407.698781][ T7174] bridge_slave_1: entered promiscuous mode
[  407.732925][ T7183] bridge0: port 2(bridge_slave_1) entered blocking state
[  407.733283][ T7183] bridge0: port 2(bridge_slave_1) entered disabled state
[  407.733727][ T7183] bridge_slave_1: entered allmulticast mode
[  407.770432][ T7183] bridge_slave_1: entered promiscuous mode
[  408.472233][   T60] Bluetooth: hci10: command tx timeout
[  410.552286][   T60] Bluetooth: hci10: command tx timeout
[  412.632382][   T60] Bluetooth: hci10: command tx timeout
[  414.712553][   T60] Bluetooth: hci10: command tx timeout
[  422.162297][ T7183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  422.323368][ T7183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  422.801229][ T7205] bridge0: port 1(bridge_slave_0) entered blocking state
[  422.801762][ T7205] bridge0: port 1(bridge_slave_0) entered disabled state
[  422.822452][ T7205] bridge_slave_0: entered allmulticast mode
[  422.850782][ T7205] bridge_slave_0: entered promiscuous mode
[  423.267842][ T7205] bridge0: port 2(bridge_slave_1) entered blocking state
[  423.268201][ T7205] bridge0: port 2(bridge_slave_1) entered disabled state
[  423.268564][ T7205] bridge_slave_1: entered allmulticast mode
[  423.317864][ T7205] bridge_slave_1: entered promiscuous mode
[  423.334893][ T7213] bridge0: port 1(bridge_slave_0) entered blocking state
[  423.335291][ T7213] bridge0: port 1(bridge_slave_0) entered disabled state
[  423.370316][ T7213] bridge_slave_0: entered allmulticast mode
[  423.415954][ T7213] bridge_slave_0: entered promiscuous mode
[  423.469017][ T7183] team0: Port device team_slave_0 added
[  423.741114][ T5626] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  423.793006][ T5626] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  423.810419][ T5626] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  423.898641][ T5626] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  423.911314][ T5626] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  424.291929][ T7213] bridge0: port 2(bridge_slave_1) entered blocking state
[  424.292640][ T7213] bridge0: port 2(bridge_slave_1) entered disabled state
[  424.293117][ T7213] bridge_slave_1: entered allmulticast mode
[  424.427279][ T7213] bridge_slave_1: entered promiscuous mode
[  424.544574][ T7183] team0: Port device team_slave_1 added
[  425.118121][ T7205] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  425.276537][ T7213] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  425.297016][ T7183] batman_adv: batadv0: Adding interface: batadv_slave_0
[  425.297036][ T7183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  425.297069][ T7183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  425.371468][ T7205] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  425.447420][ T7213] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  425.467527][ T7183] batman_adv: batadv0: Adding interface: batadv_slave_1
[  425.467547][ T7183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  425.467578][ T7183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  425.764523][ T1418] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  426.074368][ T5626] Bluetooth: hci3: command tx timeout
[  428.152594][ T5626] Bluetooth: hci3: command tx timeout
[  428.558297][ T7205] team0: Port device team_slave_0 added
[  428.587104][ T7213] team0: Port device team_slave_0 added
[  428.605997][ T7205] team0: Port device team_slave_1 added
[  428.627919][ T7213] team0: Port device team_slave_1 added
[  429.049752][ T7183] hsr_slave_0: entered promiscuous mode
[  429.057719][ T7183] hsr_slave_1: entered promiscuous mode
[  429.059994][ T7183] debugfs: 'hsr0' already exists in 'hsr'
[  429.060028][ T7183] Cannot create hsr debugfs directory
[  429.100005][ T7205] batman_adv: batadv0: Adding interface: batadv_slave_0
[  429.100024][ T7205] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  429.100056][ T7205] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  429.175223][ T7213] batman_adv: batadv0: Adding interface: batadv_slave_0
[  429.175242][ T7213] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  429.175273][ T7213] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  429.281660][ T7205] batman_adv: batadv0: Adding interface: batadv_slave_1
[  429.281684][ T7205] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  429.281719][ T7205] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  429.336200][ T7213] batman_adv: batadv0: Adding interface: batadv_slave_1
[  429.336221][ T7213] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  429.336255][ T7213] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  430.232389][ T5626] Bluetooth: hci3: command tx timeout
[  431.706923][ T7205] hsr_slave_0: entered promiscuous mode
[  431.711675][ T7205] hsr_slave_1: entered promiscuous mode
[  431.733728][ T7205] debugfs: 'hsr0' already exists in 'hsr'
[  431.733761][ T7205] Cannot create hsr debugfs directory
[  431.795435][ T7213] hsr_slave_0: entered promiscuous mode
[  431.800820][ T7213] hsr_slave_1: entered promiscuous mode
[  431.833045][ T7213] debugfs: 'hsr0' already exists in 'hsr'
[  431.833089][ T7213] Cannot create hsr debugfs directory
[  432.327497][ T5626] Bluetooth: hci3: command tx timeout
[  438.260628][   T60] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  438.305355][   T60] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  438.337120][   T60] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  438.338607][   T60] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  438.379094][   T60] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  440.472264][   T60] Bluetooth: hci1: command tx timeout
[  440.661853][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[  440.670377][ T1339] ieee802154 phy1 wpan1: encryption failed: -22
[  442.333322][   T60] Bluetooth: hci8: command 0x0406 tx timeout
[  442.552345][   T60] Bluetooth: hci1: command tx timeout
[  443.695847][ T5618] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  443.742538][ T5618] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  443.759729][ T5618] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  443.765113][ T5618] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  443.815979][ T5618] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  444.632378][   T60] Bluetooth: hci1: command tx timeout
[  445.912828][ T5626] Bluetooth: hci4: command tx timeout
[  446.712650][ T5626] Bluetooth: hci1: command tx timeout
[  447.473044][ T5626] Bluetooth: hci5: command 0x0406 tx timeout
[  447.992388][ T5626] Bluetooth: hci4: command tx timeout
[  448.371820][ T5618] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  448.434661][ T5618] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  448.440981][ T5618] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  448.500375][ T5618] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  448.513209][ T5618] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  450.072583][   T60] Bluetooth: hci4: command tx timeout
[  450.254667][ T7308] bridge0: port 1(bridge_slave_0) entered blocking state
[  450.255014][ T7308] bridge0: port 1(bridge_slave_0) entered disabled state
[  450.255464][ T7308] bridge_slave_0: entered allmulticast mode
[  450.290663][ T7308] bridge_slave_0: entered promiscuous mode
[  450.446615][ T7308] bridge0: port 2(bridge_slave_1) entered blocking state
[  450.447001][ T7308] bridge0: port 2(bridge_slave_1) entered disabled state
[  450.447458][ T7308] bridge_slave_1: entered allmulticast mode
[  450.504553][ T7308] bridge_slave_1: entered promiscuous mode
[  450.636007][   T60] Bluetooth: hci11: command tx timeout
[  450.921501][ T7308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  451.048213][ T7308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  451.536831][ T7308] team0: Port device team_slave_0 added
[  452.152504][   T60] Bluetooth: hci4: command tx timeout
[  452.555941][   T60] Bluetooth: hci9: command 0x0406 tx timeout
[  452.713065][   T60] Bluetooth: hci11: command tx timeout
[  454.793080][   T60] Bluetooth: hci11: command tx timeout
[  456.873491][ T5626] Bluetooth: hci11: command tx timeout
[  457.176205][ T7308] team0: Port device team_slave_1 added
[  457.477950][ T7308] batman_adv: batadv0: Adding interface: batadv_slave_0
[  457.477970][ T7308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  457.478004][ T7308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  457.558658][   T39] INFO: task syz-executor:5614 blocked for more than 143 seconds.
[  457.558710][   T39]       Tainted: G             L      syzkaller #0
[  457.558724][   T39]       Blocked by coredump.
[  457.558731][   T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  457.558741][   T39] task:syz-executor    state:D stack:21336 pid:5614  tgid:5614  ppid:1      task_flags:0x40054c flags:0x00080003
[  457.558827][   T39] Call Trace:
[  457.558840][   T39]  <TASK>
[  457.558856][   T39]  __schedule+0x16f9/0x5500
[  457.558894][   T39]  ? add_lock_to_list+0xc7/0x100
[  457.558964][   T39]  ? __pfx___schedule+0x10/0x10
[  457.558996][   T39]  ? rt_mutex_slowlock_block+0x2e9/0x680
[  457.559074][   T39]  rt_mutex_schedule+0x76/0xf0
[  457.559115][   T39]  rt_mutex_slowlock_block+0x508/0x680
[  457.559158][   T39]  ? rt_mutex_slowlock_block+0x2e9/0x680
[  457.559192][   T39]  rt_mutex_slowlock+0x2dc/0x780
[  457.559226][   T39]  ? rt_mutex_slowlock+0x1fd/0x780
[  457.559257][   T39]  ? __pfx_rt_mutex_slowlock+0x10/0x10
[  457.559302][   T39]  ? rcu_barrier+0x4c/0x580
[  457.559331][   T39]  ? rcu_barrier+0x4c/0x580
[  457.559361][   T39]  ? rcu_barrier+0x4c/0x580
[  457.559381][   T39]  mutex_lock_nested+0x168/0x1d0
[  457.559410][   T39]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  457.559444][   T39]  rcu_barrier+0x4c/0x580
[  457.559478][   T39]  netdev_run_todo+0x2fc/0x12b0
[  457.559510][   T39]  ? rtnl_is_locked+0x9/0x20
[  457.559540][   T39]  ? __pfx_netdev_run_todo+0x10/0x10
[  457.559569][   T39]  ? kasan_quarantine_put+0xbb/0x1f0
[  457.668134][   T39]  ? lockdep_hardirqs_on+0x7a/0x110
[  457.668182][   T39]  ? netdev_state_change+0x1ca/0x220
[  457.668221][   T39]  ? __pfx_tun_chr_close+0x10/0x10
[  457.668246][   T39]  tun_chr_close+0x13f/0x1c0
[  457.668271][   T39]  __fput+0x461/0xa70
[  457.668314][   T39]  task_work_run+0x1d9/0x270
[  457.668350][   T39]  ? __pfx_task_work_run+0x10/0x10
[  457.668380][   T39]  ? do_exit+0x70a/0x22c0
[  457.668407][   T39]  ? kmem_cache_free+0x187/0x6c0
[  457.668447][   T39]  ? put_net+0x191/0x260
[  457.668467][   T39]  ? do_exit+0x70a/0x22c0
[  457.668499][   T39]  do_exit+0x70f/0x22c0
[  457.668532][   T39]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  457.668581][   T39]  ? __pfx_do_exit+0x10/0x10
[  457.668614][   T39]  ? rt_mutex_slowunlock+0x4a7/0x8b0
[  457.668646][   T39]  ? reacquire_held_locks+0x104/0x190
[  457.668680][   T39]  ? rt_spin_lock+0x1e0/0x400
[  457.668728][   T39]  do_group_exit+0x21b/0x2d0
[  457.668759][   T39]  ? rt_spin_unlock+0x160/0x200
[  457.668791][   T39]  get_signal+0x1284/0x1330
[  457.668849][   T39]  arch_do_signal_or_restart+0xbc/0x840
[  457.668879][   T39]  ? __pfx___x64_sys_wait4+0x10/0x10
[  457.668912][   T39]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  457.668961][   T39]  exit_to_user_mode_loop+0xa9/0x680
[  457.668990][   T39]  ? rcu_is_watching+0x15/0xb0
[  457.669025][   T39]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  457.669057][   T39]  do_syscall_64+0x353/0x580
[  457.669080][   T39]  ? trace_irq_disable+0x3b/0x140
[  457.669108][   T39]  ? clear_bhb_loop+0x40/0x90
[  457.669138][   T39]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  457.669162][   T39] RIP: 0033:0x7fc4e47dd68e
[  457.669183][   T39] RSP: 002b:00007fff90c6ace8 EFLAGS: 00000246 ORIG_RAX: 000000000000003d
[  457.669209][   T39] RAX: fffffffffffffe00 RBX: 0000555591e12500 RCX: 00007fc4e47dd68e
[  457.669226][   T39] RDX: 0000000040000000 RSI: 00007fff90c6ad8c RDI: ffffffffffffffff
[  457.669243][   T39] RBP: 00007fff90c6ad8c R08: 0000000000000000 R09: 0000000000000000
[  457.669258][   T39] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000061
[  457.669273][   T39] R13: 0000555591e25a10 R14: 00000000000412a8 R15: 00007fff90c6ade0
[  457.669310][   T39]  </TASK>
[  457.669437][   T39] 
[  457.669437][   T39] Showing all locks held in the system:
[  457.669450][   T39] 4 locks held by kworker/u8:0/12:
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  457.669470][   T39]  #0: ffff888035f3a938 ((wq_completion)wg-kex-wg1#9){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
[  457.815349][   T39]  #1: ffffc90000117c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
[  457.815449][   T39]  #2: ffffffff8de613c0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420
[  457.815506][   T39]  #3: ffffffff8dfcac60 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420
[  457.815571][   T39] 4 locks held by pr/legacy/17:
[  457.815585][   T39]  #0: ffffffff8dfbccc0 (console_lock){+.+.}-{0:0}, at: legacy_kthread_func+0x1a3/0x250
[  457.815644][   T39]  #1: ffffffff8dea45b8 (console_srcu){....}-{0:0}, at: console_flush_one_record+0xfa/0xb90
[  457.815709][   T39]  #2: ffffffff99bc0f98 (&port_lock_key){+.+.}-{3:3}, at: serial8250_console_write+0x178/0x1b50
[  457.815767][   T39]  #3: ffffffff8dfcac60 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400
[  457.815832][   T39] 4 locks held by rcuc/1/29:
[  457.815845][   T39]  #0: ffffffff8dfcac60 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420
[  457.815898][   T39]  #1: ffffffff8dfcac60 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x271/0xc60
[  457.815962][   T39]  #2: ffffffff8dfcac60 (rcu_read_lock){....}-{1:3}, at: NF_HOOK+0x9e/0x3c0
[  457.816017][   T39]  #3: ffffffff8dfcac60 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xa6/0x2550
[  457.816084][   T39] 7 locks held by ktimers/1/30:
[  457.816097][   T39]  #0: ffffffff8de613c0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420
[  457.816151][   T39]  #1: ffffffff8dfcac60 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420
[  457.816213][   T39]  #2: ffff8880b87241a8 (tasklet_sync_callback.cb_lock){+...}-{3:3}, at: tasklet_action_common+0xc5/0x610
[  457.816271][   T39]  #3: ffffffff8dfcac60 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400
[  457.816330][   T39]  #4: ffffffff8dfcac60 (rcu_read_lock){....}-{1:3}, at: ieee80211_rx_napi+0xd3/0x3e0
[  457.816402][   T39]  #5: ffffffff8de613c0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420
[  457.816454][   T39]  #6: ffff888063df0228 (&rdev->bss_lock){+...}-{3:3}, at: cfg80211_inform_single_bss_data+0xbbf/0x1b80
[  457.816518][   T39] 1 lock held by khungtaskd/39:
[  457.816532][   T39]  #0: ffffffff8dfcac60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  457.816615][   T39] 6 locks held by kworker/u8:5/123:
[  457.816628][   T39]  #0: ffff88813fe8c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
[  457.816702][   T39]  #1: ffffc900030a7c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
[  457.816773][   T39]  #2: ffff88801af48310 (&devlink->lock_key#5){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbd0
[  457.971175][   T39]  #3: ffff888062b4d520 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbd0
[  457.971262][   T39]  #4: ffffffff8dfcac60 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400
[  457.971323][   T39]  #5: ffff8880b863b8a0 (&rq->__lock){-...}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150
[  457.971403][   T39] 2 locks held by kworker/u8:6/151:
[  457.971418][   T39]  #0: ffff88813fe8c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
[  457.971500][   T39]  #1: ffffc900039b7c40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
[  457.971580][   T39] 6 locks held by kworker/u8:7/167:
[  457.971593][   T39]  #0: ffff88813fe8c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
[  457.971661][   T39]  #1: ffffc900039f7c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
[  457.971728][   T39]  #2: ffff888063df08d8 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x460
[  457.971796][   T39]  #3: ffffffff8de613c0 (lo[  457.971796][   T39]  #3: ffffffff8de613c0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420
[  457.971849][   T39]  #4: ffffffff8dfcac60 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420
[  457.971902][   T39]  #5: ffff888063df0228 (&rdev->bss_lock){+...}-{3:3}, at: cfg80211_put_bss+0x5b/0x270
[  457.972290][   T39] 2 locks held by kworker/0:2/837:
[  457.972306][   T39]  #0: ffff88813fe4f938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
[  457.972386][   T39]  #1: ffffc900050c7c40 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
[  457.972518][   T39] 3 locks held by kworker/u8:9/1191:
[  457.972532][   T39]  #0: ffff88813fe8c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
[  457.972620][   T39]  #1: ffffc90006177c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
[  457.972689][   T39]  #2: ffff888041d008d8 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x460
[  457.972758][   T39] 6 locks held by kworker/u8:11/1391:
[  457.972771][   T39]  #0: ffff88801b69e138 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
[  458.140765][   T39]  #1: ffffc900068d7c40 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
[  458.140857][   T39]  #2: ffffffff8f380c60 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800
[  458.140926][   T39]  #3: ffff888061aec160 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x420
[  458.140985][   T39]  #4: ffff88803c544310 (&devlink->lock_key#3){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x142/0x420
[  458.141046][   T39]  #5: ffffffff8dfd0e30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[  458.141103][   T39] 5 locks held by kworker/u8:12/1418:
[  458.141116][   T39]  #0: ffff88813fe8c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
[  458.141184][   T39]  #1: ffffc90006877c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
[  458.141261][   T39]  #2: ffff88803ac4e310 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbd0
[  458.141331][   T39]  #3: ffff88804df35520 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbd0
[  458.141396][   T39]  #4: ffffffff8dfcac60 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400
[  458.141469][   T39] 4 locks held by kworker/u8:13/1462:
[  458.141483][   T39]  #0: ffff88813fe8c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
[  458.141551][   T39]  #1: ffffc90006ac7c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
[  458.141620][   T39]  #2: ffff888062ce08d8 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x460
[  458.141685][   T39]  #3: ffffffff8de613c0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420
[  458.141755][   T39] 5 locks held by kworker/u8:15/4885:
[  458.141768][   T39]  #0: ffff88813fe8c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
[  458.141835][   T39]  #1: ffffc9000f2dfc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
[  458.141905][   T39]  #2: ffff88801af48310 (&devlink->lock_key#5){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbd0
[  458.142452][   T39]  #3: ffff8880620f1120 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbd0
[  458.142520][   T39]  #4: ffffffff8dfcac60 (rcu_read_lock){....}-{1:3}, at: debug_object_activate+0xa8/0x3a0
[  458.472503][   T39] 2 locks held by getty/5366:
[  458.472527][   T39]  #0: ffff8880328650a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  458.472619][   T39]  #1: ffffc90003cbe2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13a0
[  458.472686][   T39] 2 locks held by syz-executor/5599:
[  458.472701][   T39]  #0: ffff88803e6d9f30 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x194/0x9e0
[  458.472778][   T39]  #1: ffffffff8dfcac60 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xa6/0x2550
[  458.472850][   T39] 1 lock held by syz-executor/5614:
[  458.472864][   T39]  #0: ffffffff8dfd0e30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[  458.472928][   T39] 4 locks held by kworker/0:4/5720:
[  458.472942][   T39]  #0: ffff88813fe4e538 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
[  458.473016][   T39]  #1: ffffc90005237c40 ((gc_work).work){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
[  458.473094][   T39]  #2: ffffffff8ead0498 ("ratelimiter_table_lock"){+.+.}-{3:3}, at: wg_ratelimiter_gc_entries+0x5d/0x480
[  458.473173][   T39]  #3: ffffffff8dfcac60 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400
[  458.473243][   T39] 5 locks held by kworker/0:9/5879:
[  458.473258][   T39]  #0: ffff88813fe4e538 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
[  458.473331][   T39]  #1: ffffc900059afc40 ((work_completion)(&(&tbl->managed_work)->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
[  458.473417][   T39]  #2: ffffffff8de613c0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420
[  458.473474][   T39]  #3: ffffffff8dfcac60 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420
[  458.473531][   T39]  #4: ffffffff8f4739b8 (&tbl->lock){+...}-{3:3}, at: neigh_managed_work+0x4e/0x250
[  458.473604][   T39] 1 lock held by syz-executor/6378:
[  458.473617][   T39]  #0: ffffffff8dfd0e30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[  458.473688][   T39] 1 lock held by syz-executor/6419:
[  458.473702][   T39]  #0: ffffffff8dfd0e30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[  458.473762][   T39] 1 lock held by syz-executor/6781:
[  458.473776][   T39]  #0: ffffffff8dfd0e30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[  458.492406][   T39] 1 lock held by syz-executor/6850:
[  458.492436][   T39]  #0: ffffffff8dfd0e30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[  458.492554][   T39] 1 lock held by syz-executor/6889:
[  458.492581][   T39]  #0: ffffffff8dfd0e30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[  458.492646][   T39] 1 lock held by syz-executor/6933:
[  458.492660][   T39]  #0: ffffffff8dfd0e30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[  458.492723][   T39] 1 lock held by syz-executor/7012:
[  458.492738][   T39]  #0: ffffffff8dfd0e30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[  458.492810][   T39] 2 locks held by syz-executor/7064:
[  458.492824][   T39]  #0: ffffffff8f380c60 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730
[  458.492897][   T39]  #1: ffffffff8dfd0e30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[  458.492969][   T39] 1 lock held by syz.2.267/7068:
[  458.492984][   T39]  #0: ffffffff8dfd0e30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[  458.493045][   T39] 2 locks held by syz-executor/7098:
[  458.493060][   T39]  #0: ffffffff8f380c60 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730
[  458.493129][   T39]  #1: ffffffff8dfd0e30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[  458.493192][   T39] 2 locks held by syz-executor/7105:
[  458.493207][   T39]  #0: ffffffff8f380c60 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730
[  458.493279][   T39]  #1: ffffffff8dfd0e30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[  458.493346][   T39] 1 lock held by syz-executor/7139:
[  458.493361][   T39]  #0: ffffffff8dfd0e30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[  458.493422][   T39] 1 lock held by syz-executor/7174:
[  458.493437][   T39]  #0: ffffffff8dfd0e30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[  458.493490][   T39] 3 locks held by syz-executor/7183:
[  458.493504][   T39]  #0: ffff8880654f0f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0
[  458.493580][   T39]  #1: ffff8880654f00b0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x67c/0x1150
[  458.493644][   T39]  #2: ffffffff8f513598 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260
[  458.493714][   T39] 3 locks held by syz-executor/7205:
[  458.493729][   T39]  #0: ffff888028e24f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0
[  458.493803][   T39]  #1: ffff888028e240b0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x67c/0x1150
[  458.493868][   T39]  #2: ffffffff8f513598 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260
[  458.493939][   T39] 2 locks held by syz-executor/7213:
[  458.493984][   T39]  #0: ffff88806e1e4f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0
[  458.494068][   T39]  #1: ffff88806e1e40b0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x67c/0x1150
[  458.494141][   T39] 1 lock held by syz-executor/7308:
[  458.494156][   T39]  #0: ffffffff8f390178 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0
[  458.494230][   T39] 2 locks held by syz-executor/7340:
[  458.494245][   T39]  #0: ffffffff8f8d2168 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250
[  458.494311][   T39]  #1: ffffffff8f390178 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0
[  458.494383][   T39] 7 locks held by syz-executor/7391:
[  458.494397][   T39]  #0: ffffffff8f390178 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0
[  458.494474][   T39]  #1: ffffffff8f384e80 (dev_addr_sem){++++}-{4:4}, at: do_setlink+0x815/0x45a0
[  458.494535][   T39]  #2: ffffffff8de613c0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420
[  458.494596][   T39]  #3: ffffffff8dfcac60 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420
[  458.494656][   T39]  #4: ffffffff8f4739b8 (&tbl->lock){+...}-{3:3}, at: neigh_changeaddr+0x46/0x150
[  458.494725][   T39]  #5: ffffffff8dfcac60 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400
[  458.494792][   T39]  #6: ffffffff8dfcac60 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xa6/0x2550
[  458.494865][   T39] 1 lock held by syz-executor/7398:
[  458.494880][   T39]  #0: ffffffff8f390178 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x722/0xbe0
[  458.494965][   T39] 2 locks held by syz-executor/7431:
[  458.494979][   T39]  #0: ffffffff8f380c60 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730
[  458.495050][   T39]  #1: ffffffff8f390178 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2d5/0x850
[  458.495125][   T39] 
[  458.495132][   T39] =============================================
[  458.495132][   T39] 
[  458.495166][   T39] NMI backtrace for cpu 0
[  458.495208][   T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  458.495243][   T39] Tainted: [L]=SOFTLOCKUP
[  458.495252][   T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  458.495268][   T39] Call Trace:
[  458.495278][   T39]  <TASK>
[  458.495290][   T39]  dump_stack_lvl+0xe8/0x150
[  458.495329][   T39]  nmi_cpu_backtrace+0x274/0x2d0
[  458.495364][   T39]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  458.495400][   T39]  nmi_trigger_cpumask_backtrace+0x17a/0x380
[  458.495439][   T39]  sys_info+0x135/0x170
[  458.495484][   T39]  watchdog+0xfd3/0x1030
[  458.495532][   T39]  ? watchdog+0x1c9/0x1030
[  458.495570][   T39]  kthread+0x388/0x470
[  458.495602][   T39]  ? __pfx_watchdog+0x10/0x10
[  458.495630][   T39]  ? __pfx_kthread+0x10/0x10
[  458.495662][   T39]  ret_from_fork+0x514/0xb70
[  458.495699][   T39]  ? __pfx_ret_from_fork+0x10/0x10
[  458.495732][   T39]  ? __switch_to+0xc79/0x1410
[  458.495765][   T39]  ? __pfx_kthread+0x10/0x10
[  458.495798][   T39]  ret_from_fork_asm+0x1a/0x30
[  458.495849][   T39]  </TASK>
[  458.495859][   T39] Sending NMI from CPU 0 to CPUs 1:
[  458.495902][    C1] NMI backtrace for cpu 1
[  458.495924][    C1] CPU: 1 UID: 0 PID: 30 Comm: ktimers/1 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  458.495953][    C1] Tainted: [L]=SOFTLOCKUP
[  458.496023][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  458.496048][    C1] RIP: 0010:memset_orig+0x75/0xb0
[  458.496078][    C1] Code: 89 47 30 48 89 47 38 48 8d 7f 40 75 d8 0f 1f 84 00 00 00 00 00 89 d1 83 e1 38 74 14 c1 e9 03 66 0f 1f 44 00 00 ff c9 48 89 07 <48> 8d 7f 08 75 f5 83 e2 07 74 0a ff ca 88 07 48 8d 7f 01 75 f6 4c
[  458.496094][    C1] RSP: 0000:ffffc90000a4e870 EFLAGS: 00000202
[  458.496116][    C1] RAX: 0000000000000000 RBX: ffffc90000a4e998 RCX: 0000000000000001
[  458.496128][    C1] RDX: 0000000000000010 RSI: 0000000000000000 RDI: ffffc90000a4e998
[  458.496141][    C1] RBP: dffffc0000000000 R08: ffffc90000a4e9a7 R09: 0000000000000000
[  458.496154][    C1] R10: ffffc90000a4e998 R11: fffff52000149d35 R12: ffffc90000a4f3a0
[  458.496168][    C1] R13: 1ffff92000149d2b R14: ffffc90000a4e948 R15: ffffc90000a4e990
[  458.496182][    C1] FS:  0000000000000000(0000) GS:ffff888125fcd000(0000) knlGS:0000000000000000
[  458.496197][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  458.496210][    C1] CR2: 00007f8bda7e64e8 CR3: 000000007d734000 CR4: 00000000003526f0
[  458.496238][    C1] Call Trace:
[  458.496246][    C1]  <TASK>
[  458.496253][    C1]  unwind_next_frame+0xf33/0x2550
[  458.496293][    C1]  ? unwind_next_frame+0xa6/0x2550
[  458.496327][    C1]  ? nft_synproxy_do_eval+0x305/0x580
[  458.496355][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  458.496379][    C1]  arch_stack_walk+0x11b/0x150
[  458.496409][    C1]  ? nft_do_chain+0x48d/0x1ae0
[  458.496439][    C1]  stack_trace_save+0xa9/0x100
[  458.496461][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  458.496489][    C1]  ? __kmalloc_cache_noprof+0x3a6/0x690
[  458.496520][    C1]  ref_tracker_alloc+0x1b3/0x4a0
[  458.496545][    C1]  ? dst_init+0x6f/0x490
[  458.496566][    C1]  ? ip_route_output_key_hash_rcu+0x14d0/0x25e0
[  458.496600][    C1]  ? ip_route_output_key_hash+0x18d/0x2a0
[  458.496628][    C1]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  458.496658][    C1]  ? synproxy_send_client_synack+0x8c1/0xe30
[  458.496683][    C1]  ? dst_init+0xe6/0x490
[  458.496703][    C1]  ? dst_alloc+0x12a/0x170
[  458.496722][    C1]  ? ip_route_output_key_hash_rcu+0x14d0/0x25e0
[  458.496749][    C1]  ? ip_route_output_key_hash+0x18d/0x2a0
[  458.496775][    C1]  ? ip_route_output_flow+0x2a/0x150
[  458.496798][    C1]  ? ip_route_me_harder+0x742/0xf90
[  458.496822][    C1]  ? synproxy_send_tcp+0x34c/0x670
[  458.496844][    C1]  ? synproxy_send_client_synack+0x8c1/0xe30
[  458.496868][    C1]  ? nft_synproxy_eval_v4+0x34a/0x4e0
[  458.496892][    C1]  ? nft_synproxy_do_eval+0x305/0x580
[  458.496930][    C1]  ? rcu_is_watching+0x15/0xb0
[  458.496960][    C1]  ? trace_kmem_cache_alloc+0x29/0xe0
[  458.496988][    C1]  dst_init+0xe6/0x490
[  458.497010][    C1]  dst_alloc+0x12a/0x170
[  458.497033][    C1]  ip_route_output_key_hash_rcu+0x14d0/0x25e0
[  458.497066][    C1]  ? ip_route_output_key_hash+0xd8/0x2a0
[  458.497093][    C1]  ip_route_output_key_hash+0x18d/0x2a0
[  458.497121][    C1]  ? __pfx_ip_route_output_key_hash+0x10/0x10
[  458.497157][    C1]  ip_route_output_flow+0x2a/0x150
[  458.497179][    C1]  ? ip_route_me_harder+0x730/0xf90
[  458.497205][    C1]  ip_route_me_harder+0x742/0xf90
[  458.497236][    C1]  ? __pfx_ip_route_me_harder+0x10/0x10
[  458.497269][    C1]  ? __cookie_v4_init_sequence+0x25d/0x500
[  458.497294][    C1]  synproxy_send_tcp+0x34c/0x670
[  458.497321][    C1]  synproxy_send_client_synack+0x8c1/0xe30
[  458.497353][    C1]  ? __pfx_synproxy_send_client_synack+0x10/0x10
[  458.497377][    C1]  ? nft_symhash_init+0x168/0x310
[  458.497399][    C1]  ? synproxy_pernet+0x45/0x270
[  458.497428][    C1]  nft_synproxy_eval_v4+0x34a/0x4e0
[  458.497457][    C1]  ? __pfx_nft_synproxy_eval_v4+0x10/0x10
[  458.497483][    C1]  ? nf_ip_checksum+0x13c/0x510
[  458.497513][    C1]  nft_synproxy_do_eval+0x305/0x580
[  458.497536][    C1]  ? reacquire_held_locks+0x104/0x190
[  458.497564][    C1]  ? rt_spin_lock+0x1e0/0x400
[  458.497591][    C1]  ? __pfx_nft_synproxy_do_eval+0x10/0x10
[  458.497672][    C1]  ? lockdep_hardirqs_on+0x7a/0x110
[  458.497794][    C1]  nft_do_chain+0x48d/0x1ae0
[  458.497830][    C1]  ? __pfx_nft_do_chain+0x10/0x10
[  458.497880][    C1]  ? __lock_acquire+0x6b5/0x2d10
[  458.497908][    C1]  nft_do_chain_inet+0x360/0x4b0
[  458.497936][    C1]  ? __pfx_nft_do_chain_inet+0x10/0x10
[  458.498016][    C1]  ? NF_HOOK+0x9e/0x3c0
[  458.498035][    C1]  ? NF_HOOK+0x9e/0x3c0
[  458.498054][    C1]  ? __pfx_nft_do_chain_inet+0x10/0x10
[  458.498081][    C1]  nf_hook_slow+0xc5/0x220
[  458.498106][    C1]  NF_HOOK+0x21f/0x3c0
[  458.498126][    C1]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[  458.498151][    C1]  ? NF_HOOK+0x9e/0x3c0
[  458.498169][    C1]  ? __pfx_NF_HOOK+0x10/0x10
[  458.498186][    C1]  ? ip_rcv_finish_core+0xda3/0x1c00
[  458.498208][    C1]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[  458.498231][    C1]  ? ip_local_deliver+0x12a/0x1b0
[  458.498253][    C1]  NF_HOOK+0x336/0x3c0
[  458.498270][    C1]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  458.498301][    C1]  ? __pfx_ip_rcv_finish+0x10/0x10
[  458.498320][    C1]  ? NF_HOOK+0x9e/0x3c0
[  458.498337][    C1]  ? __pfx_NF_HOOK+0x10/0x10
[  458.498357][    C1]  ? __pfx_ip_rcv_finish+0x10/0x10
[  458.498380][    C1]  ? __pfx_ip_rcv+0x10/0x10
[  458.498398][    C1]  ? process_backlog+0x271/0xc60
[  458.498422][    C1]  ? __pfx_ip_rcv+0x10/0x10
[  458.498441][    C1]  process_backlog+0x569/0xc60
[  458.498469][    C1]  ? rcu_is_watching+0x15/0xb0
[  458.498505][    C1]  __napi_poll+0xab/0x550
[  458.498530][    C1]  net_rx_action+0x696/0xe00
[  458.498555][    C1]  ? __virt_addr_valid+0x13c/0x390
[  458.498573][    C1]  ? lock_acquire+0x106/0x350
[  458.498604][    C1]  ? __pfx_net_rx_action+0x10/0x10
[  458.498629][    C1]  ? kvm_sched_clock_read+0x11/0x20
[  458.498663][    C1]  ? __pfx_sched_clock_cpu+0x10/0x10
[  458.498692][    C1]  ? __local_bh_disable_ip+0x3c/0x420
[  458.498723][    C1]  handle_softirqs+0x1de/0x6d0
[  458.498747][    C1]  ? smpboot_thread_fn+0x4d/0xa50
[  458.498767][    C1]  run_ktimerd+0x69/0x100
[  458.498787][    C1]  smpboot_thread_fn+0x541/0xa50
[  458.498807][    C1]  ? smpboot_thread_fn+0x4d/0xa50
[  458.498836][    C1]  kthread+0x388/0x470
[  458.498866][    C1]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  458.498884][    C1]  ? __pfx_kthread+0x10/0x10
[  458.498907][    C1]  ret_from_fork+0x514/0xb70
[  458.498933][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  458.498965][    C1]  ? __switch_to+0xc79/0x1410
[  458.498986][    C1]  ? __pfx_kthread+0x10/0x10
[  458.499009][    C1]  ret_from_fork_asm+0x1a/0x30
[  458.499045][    C1]  </TASK>
[  458.499920][   T39] Kernel panic - not syncing: hung_task: blocked tasks
[  458.499951][   T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  458.499984][   T39] Tainted: [L]=SOFTLOCKUP
[  458.499993][   T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  458.500007][   T39] Call Trace:
[  458.500017][   T39]  <TASK>
[  458.500028][   T39]  vpanic+0x56c/0xa60
[  458.500068][   T39]  ? __pfx_vpanic+0x10/0x10
[  458.500111][   T39]  panic+0xc5/0xd0
[  458.500142][   T39]  ? __pfx_panic+0x10/0x10
[  458.500170][   T39]  ? __x2apic_send_IPI_mask+0x158/0x190
[  458.500200][   T39]  ? wq_watchdog_touch+0xf9/0x160
[  458.500237][   T39]  ? nmi_trigger_cpumask_backtrace+0x247/0x380
[  458.500275][   T39]  watchdog+0x102c/0x1030
[  458.500312][   T39]  ? watchdog+0x1c9/0x1030
[  458.500352][   T39]  kthread+0x388/0x470
[  458.500382][   T39]  ? __pfx_watchdog+0x10/0x10
[  458.500407][   T39]  ? __pfx_kthread+0x10/0x10
[  458.500436][   T39]  ret_from_fork+0x514/0xb70
[  458.500470][   T39]  ? __pfx_ret_from_fork+0x10/0x10
[  458.500499][   T39]  ? __switch_to+0xc79/0x1410
[  458.500526][   T39]  ? __pfx_kthread+0x10/0x10
[  458.500556][   T39]  ret_from_fork_asm+0x1a/0x30
[  458.500613][   T39]  </TASK>
[  458.501249][   T39] Kernel Offset: disabled