last executing test programs:

2m28.474066441s ago: executing program 1 (id=17):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = socket(0xa, 0x3, 0x401)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000000000071163a0000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f00)={r2, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xcb, &(0x7f0000000540), 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffbfffd}, 0x94)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000008000000850000007500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b950ed1eff03076003008cb89e08", 0x0, 0xfe4, 0x60000000, 0x0, 0x2, 0x0, 0x0, 0x4}, 0xfffffffffffffff9)
r5 = socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x1000}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r7, <r8=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r6}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000008c0)='syzkaller\x00', 0x5}, 0x94)
sendmsg$nl_route_sched(r5, 0x0, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$FS_IOC_GETFSLABEL(r9, 0x400452c8, &(0x7f0000000100))

2m28.36221848s ago: executing program 1 (id=20):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x3)
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./file2\x00', 0x800018, &(0x7f00000000c0)={[{@autodefrag}, {@enospc_debug}, {@barrier}, {@max_inline={'max_inline', 0x3d, [0x6d]}}, {@clear_cache}, {@discard}, {@noenospc_debug}, {@space_cache_v2}, {@thread_pool={'thread_pool', 0x3d, 0x1}}]}, 0x1, 0x55a3, &(0x7f000000ac40)="$eJzs3X9snHUdB/DnruvaFdeWMOuArGwDJFtEOjdNCCR2bNNpYTnphE3I+gNH0DmtY8NVCCtinIERijWMwQoLbn9MEYqucyiJBewqul8IJtNFBbPFNWOkOBExYTG9u+d299zaHhMpwuu1tM/zvc/z/d73njx/3PvW73MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABEHwx+N3TL/t3roJ26+ru++8a85e+2D3kuMX3rq1avND20v2dTz31aNVq1qPLF1w0/2JpkfW93d3BkEs2S+W7t9w2fwrr69vuKI0HLDxc6ltZeVQT5nq+mKqMTbnwcF+uT9NQRAURwYoSm/npXfiOQNkdlfkDzisayf1tE4dP69x28qujc8uu3xL/ktnUOloT2C0pK+rgyeupdrk73jkiEw769KL5Vyiqf7RC+4deREAwFtSk0huMm9H029xM+22aD3Sro202yPt8B1Ce3bjVKTGHTvUPCdH66M0z9pUVCgZcp6Revr8Z9qJaP9IOxI13sI8cw9NR5rSoebZEqmP1jwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3k0uuH5m/d49D7/8ldbf/u7h17/16sePrGq8ZaC7/qJ1ix/v2PG9vx2tWtV6ZOmCm+5PND2yvr+7Mwgqk/1iqe6xZ6ri8ZkDddseu6e3puFDC9cUpccNt2OyDg72hzsXVwRBc1blYDhsf3kQJHILyWawIb/wpeTOZ8ICAAAA7yVnJn/HM+1UHCzOaceSaTKW/BdKhcVrJ/W0Th0/r3Hbyq6Nzy67fMupj5cYYrzak46XaVee+IllBeMw/kbHO1EPD12RN87woiNG8/zpx/qnNdfdUHrl7gsWzphdv+XS4CfTD3csX3TfhBfHL9nXXpOX/yuHz//hmZP/AQAA+G/I/9FxhjdS/m+uqZh0cOp3ix67rur44fkP/Lyz7/kn4w8VD3Q//dLYcbf9cnVe/p+c85R5+T+ccZj/48Gp5X8AAAB4N/tf5//avHGGN1L+/8X+zZ//98pvTDk84187Xnj69xdvnVI+/7WyGTe8+cSCVxp2tf0pL//XFJb/x2RPO3xwVzjhZRVBUFP4SQUAAAByhP/vfuKjhTCvpz45iOb1y+4qe3LXG+tvjJ/V8o8zFvfPqv7i7tVf37ApNrChc92O5XNX5OX/2sLyf/E783IBAACAAvxm+y13V395ydYtew7N2XFnYvPYS+a+uuennVf1vXwsUfT8zX15+T9RWP4vGZ2XAwAAAJzEU+MmPnfo0UNfm7177YS9q9rmPD5t3+qFD/xz9t+veOnPxzddWJ6X/xsLy/9l6W165UOq087wrxA6KoKgdHCnJVXoC9o/mSkAAAAAb5Mwpzc1revduX7MrNfOPvzDNSuW/2rvpd++a2P1zQd+XXX7ucf2996Yl/9bhr//f3ing3D9f879//LW/2cVUnf9u8SNAQAAAHg/yl/PH94eP/XNBUN9/36h6/8/euaBko7m8ysnx7dVz3rig31Xra1+fVHHRZ/YfusbH46V//VTefm/rbD8X5S9fTu//w8AAABOwf/b9/8tzhtneCPd/79v3DPnrPnsPT+o/WbZU+e+eXfzd9oPTj9v87QzPlJ0fvecmX/4fl7+by8s/4fb07JfXk94fm6vCIKJgzvpuwluDae7LFLoKs4qpE58pEd92CNd6CrJKiS1RHp8rCIIpgzutEUKp4eF9khhoDxd2BQp7A0L6eshU3g0UugJr7R7y9PTjRZ+FhbSCyy6whUUp2WWRER6HBuqx2DhpD0OZJ4cAADgfSUMz+ksW5zbDKJRtis20gFlIx0QH+mAopEOGBM5IHrgUI8HjbmF8PEfz+1e+so1D9b1Xt1w9KzZe5bc0faBnkW9O7/wo55z/nL1Cws/nZf/NxWW/8NTMTa1GWr9fxCu/09/r2Fm/X9jWKiMFLrCQiJ6x4BE+BypsHtn+ByViXSPgYmZAgAAALynhZ8LFI3yPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/sHfvcVJVd4LATzf9oJum6YgBY4ygRkR3aZomGEQcUXRXo4tNJKtjhtAIjXZoAwq4YsyKr3GV6GLUmBjZwY+jJg6r+CDqRIXoiElGJfE5Kz4HnciqS9BR45gs++m+dYqqW112IaC0+/3+0XWqfud569F17r11LgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/P/hsiX3Nrw58H9965ffW/f697409TdTD9m8y19uqHt3yDlPbT5ocN0tbw1asPCNtklnXtsyffk1G1YuDaGlq1xZUrzsoUHl5aP/cMxdt13xcNO0wVPOrcrUm4mHfp1/yjN3Loytvto/hLvLQqhIB0bUJYHKzP26WN8edSF8LmwJZEu01SYl0g2Hh2tCWBa2BLJV3VsTQl1OYMoTD666rDNxVU0I+4YQqtNtvFCdtFGTDgyrSgK16cCciiTw/uZENnBPeRKAbRbfDNkX/YqW/AwN3Zcr8vqr3G4d+3Slh9cnJhqK53vrsB3cqRxV6QdatulpK6iOHaLg7bHau60XvNsKtvMST1vuF6nMN5TNW0LVoXxm26zpCzrmx0fKQ2Njn2I17aDned2mc2ZsTbrXvA5jBxq2y+vwgdpJ9Ze9PfHglSf/8fR956+duq3dfC5nk+amd7TqkHnN9ZrnMZrg86QXvP0KviUN9aUrhHD8nz5f9sycl3bf+MGrJ068/YWLr5628JopE58d9Iux/3jtLndPu7xg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MbKxP5uYAAADQa/SGvaZfHf3qS6c+dPeiF5cfV/Hdcb86abf6irO/33H8rivHf/HSK9sf36Vg/j+0tOP/8ZB/Xe5oV4cwoStxwYAQdut6PAn8LHbn5AEh7NWVaskPHJYKrA7hC12J/bNVpUr0jSWGpgK/r88EJqQCa2KgJRW4MQaWpAIXxsCKVGBGDKxOBQ6PgdCeP44D6jPjKDlQEwOtyUZcEc9CeKc+tpbaVuuyVQEAAGwnmdlhZf7dnHMdtjVDnF6uqOkpQzwDu2iG6lQN6RlsdlpVtIaKnmoo76mG7LgXffTwC2ou66nmgtMwyvIzfDjkO+UDJu79o7tuHHFT84sTv/vu2OO/8uc33129/z/993vOmX/dAQXz/6aPnv9Xd9ORsoLj/yFM7vobc5dnIh3ZeGtLXgYAAABgG1z12NInbzjgqP9z38v33fmla28oX3311//vKxsv2HvUccPL+v7dt1cUzP8nlHb+f9wn0icnc3g07oaYPSCEpvxAUu3BhYHkqHe/TAAAAAB6g+zx+Oyx8PbMbXKKdno+XZi/ZSvzxwP/E7rNf/mmv372y9c+eeLCYftsuOK/nflB2efH/m6XY9eOfPytPYf9Q0PfwvP/W0o7/782/zbpxJrYiysHhNA3J/BI7GVnoMvQGHj50PxAZvxr4gZYHKvKnJiQrWpxLNEaA02pwLJiJX6bLbFbfiDzZGUbvyA7jvZMiZwAAAAAfOLi7oB4XD6e/3/P5AO+tP+gl8a8uOe9C1+bsPSEU2t/uM8tu74+oGPSmAMnHHLEMwXz/9atO/+/ax5ccHp/R78QRlaE0Cf9w4BHa5OFAWOgriyTuL82qatPuqrzakMY3zmwdFWvZNb/r0ivMfhETVJVDOy29083DetM3FATwsjcwDPfvH5MZ2J+KpBt/Bs1IQzpHG268ZV9k8Yr041f0zeEPXMC2apO7htCZ2NV6aoerM5cxyBd1W3VIQzMCWSrOrA6hIUBgF4q/iudmfvgvIVnz57e0dF2xg5MxH34NWFWe0db44w5HTOri/RpZqrPecsYnVc4plKvfPN8ZomiqUNuH15KOvs7wabctjL78QtOHMzcj9+FKrvG2VyZd3d0esjD9ylsIuR8kyo25PIdPOTa3Eq2PIkF9cf8VaFf6LtgXtsZjWdNnz//jFHJ31KzNyd/42GmZFuNSm+r2u76VsLLo+hqWSkfd1vtl1vJyPmnzR05b+HZI9pPm35K2ylt32keO6q5ecxXx45pHtk5qqbkbw9D3a+7qlND3Xx9iePajkPdvSKnkk/iU0NCQqK3JaYvKTt/wrRf3/+tPdacdtZJe/z9HjNHnPRXl/9m7omNh0z+1fV/ubZg/j/3o+f/8VMnfvJn1mcodvy/IR7mTx7fcpi/NQaWlXr8v6HY0fzsiQFDU4FFMbDIYX4AAAA+G+LuyLg3M+6Vvq7un+4+cuaMQ97/5QlTrv7bseNOPWv9vg0XX33skv+w/p0lq454u2D+v6i03/9vp/X/s0vXf63YMv/7xxJNxdb/Ty/zn13/f1Gx9f/Ty/xn1/9f9ims/78gG0htknes/w8AAHwWfHLr//e4vH/6AgEFGXpc3j99gYCCDD0u41/qBQK2ev3/OR1/UTvo8jnjDh0x98ePrNp7ycDbvvT8xF/vs/SgEfeuvOW9UbcWzP+XlDb/t3A/AAAA7Dwe+mXfb1/87rD7n3rk/SPLLv3txpuO/6u2Aw75w8DmUyYfXfP9m/6tYP6/rLT5/ye//l8odv7/0GKBlmILA1r/DwAAgF6q2Pp/Nw98eejq+SNufOznb97yUusvZo5/7d8t+cFXpg9runnNut80zFhfMP9fUdr8P552UZ6XO/bmw/pkTbuQXtNuY332JwMAAADQO5SHxsbKEvPmrYx62Mdvc11mKdCPSud6+r5BqxaUP3RVWfXGH1wy7ZDGc489c86RF63/fu2TP6md2lh9RsH8f3Vp8/+832U8UDup/rK3Jx784cqT/3j6vvPXTt1y/B8AAADYcUrdLwEAAAAAAAAAAAAAAHz6nmpdetAHo45+Y+Zeo/70jWNf+MHiL37zkb+59s9n/vzw+/Zq3zxsSsHv/8PkrnLFfv8fr/sXf1+wa17u2GrP6/9l7k855taFXUsWPlofwj65gdnnz/5cyFybf7/cwKqp+w/uTJyfLnHfi4e/1pmYlg4cNWKX9zoT41OB1rhI4hfSgXhVxff6pwJxecUn04G4PVakA1WZwCX9k3GUpbfVhrpkW5Wlt9VzdSEMyAlkt9XddUkbZekBXpUKZAd4ejoQBzgpEyhP9+rWfkmvYqAuFv2bfkmvAADYacVvgZVhVntHW1P8Ch9vd6/Iv43yliw7r7DashKbfz6zNNnUIbcPLyXdJ/1ddMu1xitDdecQRhV8Xc3NUtY1yu1TSw+bbtciQ+5ptbfyIuXStnbTVRUfUU0yosYZczpmVvY48NE9Z2mu6DHLqILJTm6W8q5NWkItJfSlhBGVuG1K6HK8Xx4aG/ukco2LwYaQp6dXRKm/189d56/YqyA3z9/WXHtpn8F93v+38Rc99OCAyo5TJ7ddtPtj/zxw1Mwf//DB1mt+XzD/byht/l+dO673MhcDWBSvrHfwgBBaSxwRAAAAfPb9z3OX33HinDUbZq2uePZ3v5tdftyJlZvPueucsy967v7FR13y72/e1viKsqc2nfjGprP++o2ffOW6h8966fAZZ901ad0h69uqb/zuXyw/dUjB/H9oafP/uAcrcyg42duxOl7//4IBIXRdWr8hCfwsDvfkASHs1ZVqiSWSC+p/LZZoSgI/iztM9o8lWlvyq+obAytSgd/XZwKrU4E1MZDZS/HTkNmVc0V9CGO6UpPzS8yNJRpSgeNiYGgq0BgDTalA/xiYkAq82T8TaEkF/jEGQnv+trqzf2ZbAQAAbI3MPKsy/25Iz/NWVPSUoaynDLU9ZSjvKUN1TxmKjSLevyNmqEydvFKWk6kyXWtNqpaCDPFi+Fvdr4IM4bf5OdMFC5qO5x9kzzcoy88w7od3tB70tXk/3nTxjx4/8sALj1xy5duXHt1v8JXP/u/2c/v131RbMP9vKm3+X5t/m7S+Js7/t1z/Lwk8Ert3ZTx1fGgMvHxofiCzY2BNnOwuzlbVkimRmbQvjiUmxMDQVGBuDExIBVonZwLLBucHMjPtbOMXZBtvz5TICQAAAMAnLu4giLtp4vx/5bjwzh5Hvt+8+5UD5457/JHzjphes2t1zT+PX7t0/KXVD+3Xt2D+P6G0+X9sr19uYxfG3rzaP4S7y7b0JhsYUZcE4n6Muvjz+D3qQvhczg6ObIm22qREVarh8HBN8gv1qnRV99YkawzE+1OeeHDVZZ2Jq2pC2Ddn70u2jReqkzZq0oFhVUmgNh2YU5EE4p6fbOCe8iQA2yy7VzC+oDKnumQ1dF+uyOvvs3JN0PTwCvaBdpOvu99c7SjV6Qcy+1Sztu5pK6iOHaLg7bHau603vtsavNtyv0hlvqFs3hKqDuUz22ZNX9AxPz6S+0vWAjvoec79lWop6e3wOlz08Xvbs+p0B5pSHx9N3Zfr/nVYFqt7oHZS/WVvTzx45cl/PH3f+WunltyNIuIPhQ++de4Bz+Vs3h2tOmRec73u86TF50lv/Dcw1NMWQlh+wawnn/iX95+vWN/8Xw4cu/y2Nx9b/pODHpg14gsbLvnyxrfePapg/t9S2vy/InXb5YO4MecNCGF4zsZ9NG7+iQOSz8GcQPIpObAwkBxyX19f9JMTAAAAtrfs7o7s/oL2zG1yQnh6nlyYv2Ur88f9FRO6zV9qvweO+YfvHXrV69/4+vrdL3906VPr/tObrxwx7dAHNj29YuXrzcd+/umC+X/rR8//+6a66fi/4//sII7/d2tn3xXdN/3Aom3aFV1QHTuE4//d2tnfbY7/d8vxf8f/u+P4fw8c/+/Wzv60FXxLmutLVwihdcANt/+idvrwflec860Za3/+9DtN416oO/foO//H4YvDNeet+nPB/H9uafN/6/91v2hfdv2/1mLr/80ttv7fIuv/AQAAO1SRhebS87yC1fsKMqRX7yvI0OMCgT0uMWj9v61e/6/2pLNPeqX+rb2umXj7f75z+oXPn3Tis/v2ef6E20+4aeTVw1/68oaC+f+i0ub/8eXQL7f13rL+39DJRapaEgNzLQwIAADAzqjYDgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+XSseXPzFzYv3OeimZz9/0+H/umzNrL1/dcDm0WNObhy+eGDZlX/3L28NWrDwjbZJZ17bMn35NRtWLg2hvatcWVK87KFB5eWj/3DMXbdd8XDTtMFTzq3O1FuZuf1iXu7Y6of1ISzLeaQuJjbWd97ZEphyzK0LKzoTj9aHsE9uYPb5sz/XmbixPoT9cgOrpu4/uDNxfrrEfS8e/lpnYlo6cNSIXd7rTIzPBMrS3b2uf9LdsnR3L+sfwoCcQLa73+6fX1W2jf+YCZSn27i5LmkjBupi0R/VJW3EQEcs0d43hJEVIfRJV/Xr6qSqPumq/r46qapPuqr/Wh3C+BBCRbqqF6uSqirSI19blVQVA7vt/dNNwzoTy6pCGJkbeOab14/pTJyeCmQb/3pVCEM6XzLpxu+oTBqvTDd+VWUIe4YQqtIl/rUiKVGVLvFKRQgDcwLZxk+tCGFh4DMhfvjMzH1w3sKzZ0/v6Gg7YwcmqjJt1YRZ7R1tjTPmdMysTvWpmLKc9ObzPv7Yn990zozO26lDbh9eSroiU66yq8vNlXl3R+/svY/9qs2tZMvzUVB/zF8V+oW+C+a1ndF41vT5888YlfwtNXtz8rdPJppsq1G9ZVvtl1vJyPmnzR05b+HZI9pPm35K2ylt32keO6q5ecxXx45pHtk5qqbk7/YY6vWf/FB3r8ip5JP4AJCQkOhtifK8T7emnf2DvOCL/paOVobqrg/ogmlFbpayrlFuj0Ef9jFH/HG+p/Q4olEFE4eCLM09ZxldMJnYkqUmydL1va5gcphbU3nXJo33y0NjY59i26Eh/27u5n1rGzbvusymKzUNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/D924EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOBYAAAAAEOZvHUbPBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKUAAAD//5twzl8=")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000001400), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
preadv2(r0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000001440)=""/4086, 0xff6}, {0x0}], 0x3, 0x6, 0x84, 0x8)
socket$inet6_tcp(0xa, 0x1, 0x0)
write$binfmt_misc(r0, &(0x7f00000007c0)="34c91f61732e1a3e0d76782890f355a6e4bf5cce9f6278c8c48257c0b218c890c88a660226bccf00354189e74c7014439f7c219996d7ee9f52f0de16618f4785a4a233e9061ef6890df6", 0x4a)

2m27.49471088s ago: executing program 1 (id=30):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = socket(0xa, 0x3, 0x401)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000000000071163a0000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f00)={r2, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xcb, &(0x7f0000000540), 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffbfffd}, 0x94)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000008000000850000007500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b950ed1eff03076003008cb89e08", 0x0, 0xfe4, 0x60000000, 0x0, 0x2, 0x0, 0x0, 0x4}, 0xfffffffffffffff9)
r5 = socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x1000}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r7, <r8=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r6}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000008c0)='syzkaller\x00', 0x5}, 0x94)
sendmsg$nl_route_sched(r5, 0x0, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$FS_IOC_GETFSLABEL(r9, 0x400452c8, &(0x7f0000000100))

2m27.25293353s ago: executing program 1 (id=35):
socket$nl_generic(0x10, 0x3, 0x10)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x275a, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'pimreg0\x00', 0x1})
ioctl$SIOCGIFHWADDR(r2, 0x8927, &(0x7f0000000100)={'gre0\x00'})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x45, 0x0, 0x1, 0xfffffffc}, {}, {0x6, 0x0, 0x0, 0x7fff0000}]})

2m25.565591727s ago: executing program 1 (id=59):
openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0))
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r6 = dup(r5)
write$UHID_INPUT(r6, &(0x7f0000004000)={0xf, {"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", 0xfffffffffffffe59}}, 0xfa)
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_REGISTER(r4, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2})
ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x2, 0x0)
fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0)
sendmsg(r1, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, 0x0, 0x4045)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x0, 0x8, 0x0, 0x3}, 0x0)
syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0xd55, {0x4, 0x2, 0x0, 0x7, 0x20000009, 0x40, {0x2, 0xfffffffffffffffb, 0x4, 0x100000001, 0x0, 0x10000000, 0x6, 0x3, 0x80000002, 0xc000, 0x3, 0x0, 0x0, 0x0, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
fsetxattr$security_capability(r0, &(0x7f00000001c0), &(0x7f0000000200)=@v3={0x3000000, [{0x10, 0x10000}, {0x7fff, 0x3}]}, 0x18, 0x2)
syz_open_dev$usbmon(&(0x7f0000000080), 0x4, 0x0)

2m24.628155553s ago: executing program 1 (id=71):
syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000100"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xffc2, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c00028005000100000000000800084000000008140005"], 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x0)

2m9.42138768s ago: executing program 32 (id=71):
syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000100"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xffc2, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c00028005000100000000000800084000000008140005"], 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x0)

1m41.059873145s ago: executing program 2 (id=430):
r0 = syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x0, 0x0, 0x41, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4f5d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r7 = openat$cgroup_devices(r6, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r7, &(0x7f00000003c0)={'b', ' *:* ', 'r\x00'}, 0x8)
write$cgroup_devices(r7, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\tw'], 0xa)
write$cgroup_devices(r7, &(0x7f00000000c0)={'a', ' *:* ', 'r\x00'}, 0x8)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000f00), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x80, r9, 0x1, 0x0, 0x0, {}, [{@pci={{0x8, 0x8e}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x80}}, 0x0)
ioctl$MEDIA_IOC_ENUM_ENTITIES(r0, 0xc1007c01, &(0x7f0000000500))

1m39.869833462s ago: executing program 2 (id=433):
r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
close(r1)
execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0)
r2 = openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0)
write(r2, &(0x7f0000000180)="01", 0x1)
close(r2)

1m38.951889376s ago: executing program 2 (id=436):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0)
write$FUSE_DIRENTPLUS(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="10"], 0x10)
getresuid(&(0x7f0000000000), &(0x7f0000000200), &(0x7f0000000400)=<r3=>0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,access=', @ANYRESDEC=r3])
chdir(&(0x7f0000000240)='./file0\x00')
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)

1m38.464262296s ago: executing program 2 (id=442):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0xc)

1m37.619692624s ago: executing program 2 (id=446):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = io_uring_setup(0x773c, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x3bc})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
r4 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x8010)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreq(r5, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x2a, &(0x7f00000007c0)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x20, 0xfc, 0x2, 0x0, @private=0xa010100, @multicast1=0xe0000300}, @echo={0x8, 0x0, 0x0, 0x8000, 0x3}}}}}, 0x0)
syz_emit_ethernet(0x3f, &(0x7f0000000380)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x31, 0x0, 0x20, 0x1, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @redirect={0x5, 0x0, 0x0, @local, {0x5, 0x4, 0x1, 0x19, 0x400, 0x65, 0xfff6, 0x1, 0x33, 0x0, @rand_addr=0x64010100, @broadcast}, "ba"}}}}}, 0x0)
setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, 0x0, 0x0)
r6 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r6, &(0x7f0000000000)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e23, 0x4, @mcast2, 0x7f}}, 0x24)
close_range(r3, r6, 0x0)
syz_io_uring_setup(0x83b, &(0x7f00000000c0)={0x0, 0x11e, 0x80, 0x3, 0x319}, &(0x7f0000000140), &(0x7f0000000400))
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000100)={@multicast2, @remote}, 0xc)

1m36.172644952s ago: executing program 2 (id=453):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x45, 0x0, 0x1, 0xfffffffc}, {}, {0x6, 0x0, 0x0, 0x7fff0000}]})

1m36.157456843s ago: executing program 33 (id=453):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x45, 0x0, 0x1, 0xfffffffc}, {}, {0x6, 0x0, 0x0, 0x7fff0000}]})

3.267031815s ago: executing program 6 (id=1074):
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000700000001"], 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r2 = add_key$user(0x0, &(0x7f0000000440), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000800)={r2, r2, r2}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}})

3.190321661s ago: executing program 6 (id=1075):
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000180)={{0x0, 0x2}})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x0, 0x0, 0x200, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffff7fc, 0x0, 0x0, 0x3a, 0xffff, [0x4, 0x80]}})
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0)
sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, 0x0, 0x40)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
recvmmsg(r1, &(0x7f0000000500)=[{{&(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0xbf, 0x0}}], 0x73d, 0x0, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2)

2.604166158s ago: executing program 4 (id=1081):
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x40002}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={0x2c, r1, 0x11, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x10)

2.260477606s ago: executing program 6 (id=1089):
syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4)
bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='jbd2_handle_extend\x00'}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='2', 0x1, 0x8)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r2, &(0x7f0000000000), 0xd)

2.133746257s ago: executing program 6 (id=1092):
fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mount$binderfs(0x0, &(0x7f00000023c0)='./binderfs\x00', &(0x7f0000002400), 0x4000, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f00000000c0)={0x0, 0x0, "a4cd91", 0x9})

1.892768686s ago: executing program 0 (id=1096):
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000700000001"], 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r2 = add_key$user(0x0, &(0x7f0000000440), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000800)={r2, r2, r2}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}})

1.891828946s ago: executing program 0 (id=1097):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
r0 = syz_open_dev$dri(0x0, 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, [], [], [0xfd, 0x0, 0x401], [0x0, 0x3, 0x400000006, 0x2]})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3})
syz_open_procfs(0x0, 0x0)
epoll_create1(0x0)
r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x0)
connect$ax25(r3, &(0x7f0000000000)={{0x3, @null, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @bcast, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48)
socket$inet(0x2, 0x800, 0x81)

1.700339752s ago: executing program 4 (id=1098):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r3)
r4 = socket$unix(0x1, 0x5, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x7, 0x478c1c16, 0x3, 0x3, 0x2, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c0e9}, 0x2404c050)
ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

1.444463193s ago: executing program 5 (id=1102):
syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4)
bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='jbd2_handle_extend\x00'}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='2', 0x1, 0x8)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r2, &(0x7f0000000000), 0xd)

1.35232453s ago: executing program 4 (id=1103):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000000100003040000", @ANYRES32=r3, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c0002800500190007000000631389c18161ea618d06820ac4"], 0x3c}}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)

1.310369284s ago: executing program 5 (id=1104):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x2000c050)

1.220965771s ago: executing program 3 (id=1105):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="6c0000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c"], 0x6c}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000003010104000000000000002002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x4048000)

1.168114295s ago: executing program 3 (id=1106):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ftruncate(0xffffffffffffffff, 0xffff)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

1.093922581s ago: executing program 4 (id=1107):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42c00)

1.012616058s ago: executing program 3 (id=1108):
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x40002}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={0x2c, r1, 0x11, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x10)

938.629654ms ago: executing program 4 (id=1109):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6(0xa, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
r4 = socket$netlink(0x10, 0x3, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x0, 0x0, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f0000000000)="ca02016eba2d52b5f2ac03cc9f38f9d9", 0x10)
sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000018, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000140), 0xfffffffffffffffa, 0x18000)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000200)='/dev/snd/midiC#D#\x00', &(0x7f0000000d80)="fb", 0x1)
write$UHID_CREATE(r0, &(0x7f0000000000)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x0, 0x0, 0xfffc, 0x4, 0x4000, 0x0, 0xc08}}, 0x120)

905.762187ms ago: executing program 5 (id=1110):
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000180)={{0x0, 0x2}})
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x0, 0x0, 0x200, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffff7fc, 0x0, 0x0, 0x3a, 0xffff, [0x4, 0x80]}})
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0)
sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, 0x0, 0x40)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2)
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
recvmmsg(r0, &(0x7f0000000500)=[{{&(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0xbf, 0x0}}], 0x73d, 0x0, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2)

877.561309ms ago: executing program 6 (id=1111):
socket$inet_tcp(0x2, 0x1, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="0a00000004000000040000000c00000000", @ANYRES32, @ANYBLOB="0000c9b43140b50a8ccc0000000000", @ANYRES32=0x0, @ANYRES32], 0x50)
r0 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r4, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_BLANKSCREEN(r5, 0x560e, &(0x7f0000000000))
r6 = socket$inet(0x2, 0x3, 0x6)
ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000000)={{0x2, 0x4e23, @rand_addr=0x64010103}, {0x306, @local}, 0x6f631b4376e74f1c, {0x2, 0x0, @rand_addr=0x440100fc}})
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$sock_inet_SIOCSARP(r6, 0x8953, 0x0)

837.533352ms ago: executing program 5 (id=1112):
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0xa0, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0xfffc, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}, @TCA_RATE={0x6, 0x5, {0x69, 0x3}}]}, 0xa0}}, 0x0)

636.492328ms ago: executing program 5 (id=1113):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r3)
r4 = socket$unix(0x1, 0x5, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x7, 0x478c1c16, 0x3, 0x3, 0x2, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c0e9}, 0x2404c050)
ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

323.902534ms ago: executing program 0 (id=1114):
syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4)
bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='jbd2_handle_extend\x00'}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540))
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='2', 0x1, 0x8)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r2, &(0x7f0000000000), 0xd)

299.566476ms ago: executing program 0 (id=1115):
syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}})
r1 = syz_io_uring_setup(0xbdc, &(0x7f0000001400)={0x0, 0xec25, 0x400, 0x1, 0xd4}, &(0x7f00000006c0)=<r2=>0x0, 0x0)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)

172.503306ms ago: executing program 3 (id=1116):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="6c0000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c"], 0x6c}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000003010104000000000000002002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x4048000)

156.236448ms ago: executing program 0 (id=1117):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000000100003040000", @ANYRES32=r3, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c0002800500190007000000631389c18161ea618d06820ac4"], 0x3c}}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)

150.668178ms ago: executing program 5 (id=1118):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$drirender128(0xffffffffffffff9c, 0x0, 0x100, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f00000001c0)=""/257, 0x0, 0x101, 0x6}, 0x28)
r3 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f00000002c0))

118.05651ms ago: executing program 3 (id=1119):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42c00)

46.048876ms ago: executing program 3 (id=1120):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)={0x14, r1, 0x1, 0x0, 0x25dfdbfc}, 0x14}}, 0x2000c050)

44.382356ms ago: executing program 4 (id=1121):
fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mount$binderfs(0x0, &(0x7f00000023c0)='./binderfs\x00', &(0x7f0000002400), 0x4000, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f00000000c0)={0x0, 0x0, "a4cd91", 0x9})

24.048778ms ago: executing program 0 (id=1122):
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000180)={{0x0, 0x2}})
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x0, 0x0, 0x200, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffff7fc, 0x0, 0x0, 0x3a, 0xffff, [0x4, 0x80]}})
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0)
sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, 0x0, 0x40)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2)
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
recvmmsg(r0, &(0x7f0000000500)=[{{&(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0xbf, 0x0}}], 0x73d, 0x0, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2)

0s ago: executing program 6 (id=1123):
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0xfffc, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}, @TCA_RATE={0x6, 0x5, {0x69, 0x3}}]}, 0xa4}}, 0x0)

kernel console output (not intermixed with test programs):

78234][ T4510] usb 1-1: config 0 interface 0 has no altsetting 0
[   38.483162][ T4510] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[   38.484942][ T4510] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   38.487898][ T4510] usb 1-1: config 0 interface 0 has no altsetting 0
[   38.489763][ T4510] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[   38.491133][ T4510] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   38.492805][ T4510] usb 1-1: config 0 interface 0 has no altsetting 0
[   38.501012][ T4824] tipc: Resetting bearer <eth:syzkaller0>
[   38.503778][ T4510] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[   38.505121][ T4510] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   38.506731][ T4510] usb 1-1: config 0 interface 0 has no altsetting 0
[   38.509680][ T4823] tipc: Resetting bearer <eth:syzkaller0>
[   38.516701][ T4510] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[   38.518037][ T4510] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   38.519881][ T4510] usb 1-1: config 0 interface 0 has no altsetting 0
[   38.526348][ T4510] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[   38.528950][ T4510] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   38.535088][ T4510] usb 1-1: config 0 interface 0 has no altsetting 0
[   38.540009][ T4510] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[   38.542211][ T4823] tipc: Disabling bearer <eth:syzkaller0>
[   38.542675][ T4510] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   38.547209][ T4510] usb 1-1: config 0 interface 0 has no altsetting 0
[   38.566051][ T4510] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[   38.567524][ T4510] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[   38.568381][ T4832] syz.4.90 uses obsolete (PF_INET,SOCK_PACKET)
[   38.568815][ T4510] usb 1-1: Product: syz
[   38.570444][ T4510] usb 1-1: Manufacturer: syz
[   38.572311][ T4510] usb 1-1: SerialNumber: syz
[   38.575013][ T4510] usb 1-1: config 0 descriptor??
[   38.580929][ T4510] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0
[   39.041293][ T4848] Bluetooth: MGMT ver 1.22
[   39.221702][ T4852] loop4: detected capacity change from 0 to 32768
[   39.222237][ T4854] loop2: detected capacity change from 0 to 32768
[   39.229210][ T4852] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 12
[   39.234212][ T4854] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.98 (4854)
[   39.277752][    C1] usb 1-1: yurex_control_callback - control failed: -71
[   39.280164][ T4510] usb 1-1: USB disconnect, device number 2
[   39.290948][ T4854] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   39.292628][ T4854] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm
[   39.294071][ T4854] BTRFS info (device loop2): max_inline at 0
[   39.294970][ T4854] BTRFS info (device loop2): enabling disk space caching
[   39.296099][ T4854] BTRFS info (device loop2): setting nodatasum
[   39.296982][ T4854] BTRFS info (device loop2): turning off barriers
[   39.297876][ T4854] BTRFS info (device loop2): turning on flush-on-commit
[   39.298899][ T4854] BTRFS info (device loop2): doing ref verification
[   39.299811][ T4854] BTRFS info (device loop2): force clearing of disk cache
[   39.300863][ T4854] BTRFS warning (device loop2): excessive commit interval 2147483647
[   39.302088][ T4854] BTRFS info (device loop2): enabling ssd optimizations
[   39.303092][ T4854] BTRFS info (device loop2): max_inline at 0
[   39.303945][ T4854] BTRFS info (device loop2): disk space caching is enabled
[   39.309918][ T4510] yurex 1-1:0.0: USB YUREX #0 now disconnected
[   39.351468][ T4854] BTRFS info (device loop2): rebuilding free space tree
[   39.356255][ T4854] BTRFS info (device loop2): disabling free space tree
[   39.357416][ T4854] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   39.358979][ T4854] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   39.384290][ T4469] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 12
[   39.398187][ T4327] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   39.480193][ T4881] netlink: 28 bytes leftover after parsing attributes in process `syz.4.99'.
[   39.481852][ T4881] netlink: 8 bytes leftover after parsing attributes in process `syz.4.99'.
[   39.522919][ T4885] tipc: Started in network mode
[   39.523684][ T4885] tipc: Node identity 06e9c90e9d5, cluster identity 4711
[   39.524877][ T4885] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   39.526349][ T4885] device syzkaller0 entered promiscuous mode
[   39.551978][ T4885] tipc: Resetting bearer <eth:syzkaller0>
[   39.557099][ T4884] tipc: Resetting bearer <eth:syzkaller0>
[   39.602146][ T4884] tipc: Disabling bearer <eth:syzkaller0>
[   39.793885][ T4898] loop4: detected capacity change from 0 to 32768
[   39.799473][ T4898] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 12
[   39.953876][ T4906] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   39.955877][ T4906] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   40.182441][ T4906] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   40.274570][ T4909] loop3: detected capacity change from 0 to 32768
[   40.276351][ T4909] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.112 (4909)
[   40.297499][ T4909] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   40.299100][ T4909] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm
[   40.300493][ T4909] BTRFS info (device loop3): max_inline at 0
[   40.301461][ T4909] BTRFS info (device loop3): enabling disk space caching
[   40.302496][ T4909] BTRFS info (device loop3): setting nodatasum
[   40.303384][ T4909] BTRFS info (device loop3): turning off barriers
[   40.304354][ T4909] BTRFS info (device loop3): turning on flush-on-commit
[   40.305372][ T4909] BTRFS info (device loop3): doing ref verification
[   40.306323][ T4909] BTRFS info (device loop3): force clearing of disk cache
[   40.307332][ T4909] BTRFS warning (device loop3): excessive commit interval 2147483647
[   40.308635][ T4909] BTRFS info (device loop3): enabling ssd optimizations
[   40.309696][ T4909] BTRFS info (device loop3): max_inline at 0
[   40.310555][ T4909] BTRFS info (device loop3): disk space caching is enabled
[   40.338550][ T4469] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 12
[   40.579483][   T27] audit: type=1326 audit(40.560:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4920 comm="syz.4.115" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8655c0a8 code=0x0
[   40.746421][ T4909] BTRFS info (device loop3): rebuilding free space tree
[   40.755881][ T4909] BTRFS info (device loop3): disabling free space tree
[   40.757159][ T4909] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   40.759156][ T4909] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   40.799035][ T4320] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   40.833686][ T4946] netlink: 4 bytes leftover after parsing attributes in process `syz.2.119'.
[   41.041511][ T4329] Bluetooth: hci0: command 0x0401 tx timeout
[   41.044294][ T4325] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[   41.100134][ T4952] vhci_hcd: default hub control req: 800f v0000 i0000 l31125
[   41.317256][ T4954] tipc: Started in network mode
[   41.318159][ T4954] tipc: Node identity 3600ab26453b, cluster identity 4711
[   41.319355][ T4954] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   41.320877][ T4954] device syzkaller0 entered promiscuous mode
[   41.327952][ T4954] tipc: Resetting bearer <eth:syzkaller0>
[   41.330113][ T4953] tipc: Resetting bearer <eth:syzkaller0>
[   41.411793][ T4953] tipc: Disabling bearer <eth:syzkaller0>
[   41.509100][ T4958] loop4: detected capacity change from 0 to 32768
[   41.511604][ T4958] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 12
[   41.869816][ T4469] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 12
[   42.110495][ T4972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   42.112302][ T4972] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   42.134092][ T4974] binder: tried to use weak ref as strong ref
[   42.137811][ T4974] binder: 4973:4974 Acquire 1 refcount change on invalid ref 0 ret -22
[   42.139535][ T4974] binder: 4973:4974 got transaction to invalid handle, 1
[   42.140678][ T4974] binder: 4974:4973 cannot find target node
[   42.142560][ T4974] binder: 4973:4974 transaction call to 0:0 failed 9/29201/-22, size 0-0 line 3054
[   42.144569][ T4510] binder: undelivered TRANSACTION_ERROR: 29201
[   42.309842][ T4994] tipc: Started in network mode
[   42.310663][ T4994] tipc: Node identity eed20a9d8ae1, cluster identity 4711
[   42.316010][ T4994] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   42.326606][ T4994] device syzkaller0 entered promiscuous mode
[   42.339148][ T4994] tipc: Resetting bearer <eth:syzkaller0>
[   42.345575][ T4991] tipc: Resetting bearer <eth:syzkaller0>
[   42.391881][ T4991] tipc: Disabling bearer <eth:syzkaller0>
[   42.558001][ T5000] loop0: detected capacity change from 0 to 32768
[   42.559703][ T5000] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 12
[   42.601181][ T4469] I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   43.121144][ T4329] Bluetooth: hci0: command 0x0c1a tx timeout
[   43.253667][ T5010] binder: tried to use weak ref as strong ref
[   43.254653][ T5010] binder: 5009:5010 Acquire 1 refcount change on invalid ref 0 ret -22
[   43.258294][ T5010] binder: 5009:5010 got transaction to invalid handle, 1
[   43.259462][ T5010] binder: 5010:5009 cannot find target node
[   43.260435][ T5010] binder: 5009:5010 transaction call to 0:0 failed 12/29201/-22, size 0-0 line 3054
[   43.273962][ T4663] binder: undelivered TRANSACTION_ERROR: 29201
[   43.906252][ T5027] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   43.907838][ T5027] device syzkaller0 entered promiscuous mode
[   43.917965][ T5027] tipc: Resetting bearer <eth:syzkaller0>
[   43.920810][ T5026] tipc: Resetting bearer <eth:syzkaller0>
[   44.027270][ T5030] loop3: detected capacity change from 0 to 32768
[   44.029525][ T5030] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 12
[   44.041737][ T5026] tipc: Disabling bearer <eth:syzkaller0>
[   44.094483][ T4469] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   44.222941][ T5035] binder: BINDER_SET_CONTEXT_MGR already set
[   44.224021][ T5035] binder: 5034:5035 ioctl 4018620d 200002c0 returned -16
[   44.237703][ T5035] binder: tried to use weak ref as strong ref
[   44.238738][ T5035] binder: 5034:5035 Acquire 1 refcount change on invalid ref 0 ret -22
[   44.240174][ T5035] binder: 5034:5035 got transaction to invalid handle, 1
[   44.247528][ T5035] binder: 5035:5034 cannot find target node
[   44.249166][ T5035] binder: 5034:5035 transaction call to 0:0 failed 15/29201/-22, size 0-0 line 3054
[   44.250991][ T4661] binder: undelivered TRANSACTION_ERROR: 29201
[   44.298512][ T5041] overlayfs: upper fs does not support RENAME_WHITEOUT.
[   44.299727][ T5041] overlayfs: failed to set xattr on upper
[   44.300640][ T5041] overlayfs: ...falling back to index=off,metacopy=off.
[   45.444456][ T5066] loop2: detected capacity change from 0 to 32768
[   45.446534][ T5066] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 12
[   45.565639][ T4469] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 12
[   45.624211][ T5070] binder: 5069:5070 tried to acquire reference to desc 0, got 1 instead
[   45.636509][ T5072] overlayfs: upper fs does not support RENAME_WHITEOUT.
[   45.637627][ T5072] overlayfs: failed to set xattr on upper
[   45.638473][ T5072] overlayfs: ...falling back to index=off,metacopy=off.
[   45.641777][ T5070] binder_alloc: 5069: binder_alloc_buf, no vma
[   45.642788][ T5070] binder: cannot allocate buffer: vma cleared, target dead or dying
[   46.177901][ T5089] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   46.180822][ T5089] device syzkaller0 entered promiscuous mode
[   46.276343][ T5093] tipc: Resetting bearer <eth:syzkaller0>
[   46.282469][ T5088] tipc: Resetting bearer <eth:syzkaller0>
[   46.351734][ T5088] tipc: Disabling bearer <eth:syzkaller0>
[   46.378203][ T5099] binder_alloc: 5098: binder_alloc_buf, no vma
[   46.403881][ T5101] overlayfs: upper fs does not support RENAME_WHITEOUT.
[   46.405037][ T5101] overlayfs: failed to set xattr on upper
[   46.405861][ T5101] overlayfs: ...falling back to index=off,metacopy=off.
[   47.499206][ T5128] binder_user_error: 1 callbacks suppressed
[   47.499216][ T5128] binder: tried to use weak ref as strong ref
[   47.501564][ T5128] binder: 5127:5128 Acquire 1 refcount change on invalid ref 0 ret -22
[   47.503056][ T5128] binder: 5127:5128 got transaction to invalid handle, 1
[   47.504227][ T5128] binder_debug: 5 callbacks suppressed
[   47.504239][ T5128] binder: 5128:5127 cannot find target node
[   47.506100][ T5128] binder: 5127:5128 transaction call to 0:0 failed 28/29201/-22, size 0-0 line 3054
[   47.507906][ T4826] binder: undelivered TRANSACTION_ERROR: 29201
[   47.821573][ T5132] overlayfs: failed to resolve './file0': -2
[   47.869289][ T5134] netlink: 'syz.4.191': attribute type 1 has an invalid length.
[   47.881300][ T5134] netlink: 8 bytes leftover after parsing attributes in process `syz.4.191'.
[   48.288267][ T5157] binder: tried to use weak ref as strong ref
[   48.289292][ T5157] binder: 5156:5157 Acquire 1 refcount change on invalid ref 0 ret -22
[   48.290871][ T5157] binder: 5156:5157 got transaction to invalid handle, 1
[   48.295516][ T5157] binder: 5157:5156 cannot find target node
[   48.296478][ T5157] binder: 5156:5157 transaction call to 0:0 failed 31/29201/-22, size 0-0 line 3054
[   48.297119][ T5159] overlayfs: failed to resolve './file0': -2
[   48.298191][ T3898] binder: undelivered TRANSACTION_ERROR: 29201
[   48.803346][ T4325] Bluetooth: hci4: command 0x0405 tx timeout
[   49.003321][ T5169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   49.015400][ T5169] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   49.555254][ T5180] loop3: detected capacity change from 0 to 32768
[   49.563292][ T5180] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.207 (5180)
[   49.574968][ T5180] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   49.578878][ T5180] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm
[   49.583727][ T5180] BTRFS info (device loop3): max_inline at 0
[   49.584684][ T5180] BTRFS info (device loop3): enabling disk space caching
[   49.589857][ T5180] BTRFS info (device loop3): setting nodatasum
[   49.594558][ T5180] BTRFS info (device loop3): turning off barriers
[   49.597218][ T5180] BTRFS info (device loop3): turning on flush-on-commit
[   49.599848][ T5180] BTRFS info (device loop3): doing ref verification
[   49.602870][ T5180] BTRFS info (device loop3): force clearing of disk cache
[   49.605182][ T5180] BTRFS warning (device loop3): excessive commit interval 2147483647
[   49.608130][ T5180] BTRFS info (device loop3): enabling ssd optimizations
[   49.610389][ T5180] BTRFS info (device loop3): max_inline at 0
[   49.614998][ T5180] BTRFS info (device loop3): disk space caching is enabled
[   49.643789][ T5192] binder: tried to use weak ref as strong ref
[   49.648354][ T5192] binder: 5188:5192 Acquire 1 refcount change on invalid ref 0 ret -22
[   49.649975][ T5192] binder: 5188:5192 got transaction to invalid handle, 1
[   49.661030][ T5192] binder: 5192:5188 cannot find target node
[   49.662809][ T5192] binder: 5188:5192 transaction call to 0:0 failed 34/29201/-22, size 0-0 line 3054
[   49.667559][ T3898] binder: undelivered TRANSACTION_ERROR: 29201
[   49.722586][ T5204] overlayfs: failed to resolve './file0': -2
[   49.794177][ T5180] BTRFS info (device loop3): rebuilding free space tree
[   49.797060][ T5180] BTRFS info (device loop3): disabling free space tree
[   49.798219][ T5180] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   49.799858][ T5180] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   49.904087][ T4320] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   50.427533][ T5222] netlink: 60 bytes leftover after parsing attributes in process `syz.3.217'.
[   51.026936][ T5237] binder: BINDER_SET_CONTEXT_MGR already set
[   51.027911][ T5237] binder: 5236:5237 ioctl 4018620d 200002c0 returned -16
[   51.029248][ T5237] binder: 5236:5237 got transaction to invalid handle, 1
[   51.030554][ T5237] binder: 5237:5236 cannot find target node
[   51.033463][ T5239] overlayfs: workdir and upperdir must reside under the same mount
[   51.100191][ T5244] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   51.105304][ T5244] device syzkaller0 entered promiscuous mode
[   51.342031][ T5248] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   51.343616][ T5248] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   51.581237][ T5248] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   51.585866][ T5244] tipc: Resetting bearer <eth:syzkaller0>
[   51.594139][ T5243] tipc: Resetting bearer <eth:syzkaller0>
[   51.671863][ T5243] tipc: Disabling bearer <eth:syzkaller0>
[   52.288018][ T5270] binder: BINDER_SET_CONTEXT_MGR already set
[   52.291798][ T5265] loop0: detected capacity change from 0 to 32768
[   52.293534][ T5265] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 12
[   52.293923][ T5270] binder: 5268:5270 ioctl 4018620d 200002c0 returned -16
[   52.323052][ T4469] I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   52.363857][ T5272] netlink: 6 bytes leftover after parsing attributes in process `syz.4.236'.
[   52.365387][ T5272] netlink: 6 bytes leftover after parsing attributes in process `syz.4.236'.
[   52.844603][ T5285] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   52.846266][ T5285] device syzkaller0 entered promiscuous mode
[   52.864863][ T5285] tipc: Resetting bearer <eth:syzkaller0>
[   52.868536][ T5283] tipc: Resetting bearer <eth:syzkaller0>
[   52.911983][ T5283] tipc: Disabling bearer <eth:syzkaller0>
[   53.045749][ T4329] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   53.047668][ T4329] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   53.049097][ T4329] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   53.050660][ T4329] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   53.053621][ T4329] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[   53.055410][ T4329] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   53.308998][ T5304] loop4: detected capacity change from 0 to 32768
[   53.313970][ T5308] netlink: 6 bytes leftover after parsing attributes in process `syz.0.249'.
[   53.319384][ T5304] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 12
[   53.342804][ T5305] binder: BINDER_SET_CONTEXT_MGR already set
[   53.343782][ T5305] binder: 5302:5305 ioctl 4018620d 200002c0 returned -16
[   53.345288][ T5305] binder_user_error: 3 callbacks suppressed
[   53.345293][ T5305] binder: 5302:5305 got transaction to invalid handle, 1
[   53.347468][ T5305] binder_debug: 11 callbacks suppressed
[   53.347476][ T5305] binder: 5305:5302 cannot find target node
[   53.360717][ T5308] netlink: 6 bytes leftover after parsing attributes in process `syz.0.249'.
[   53.392680][ T5291] chnl_net:caif_netlink_parms(): no params data found
[   53.408633][ T5305] binder: 5302:5305 transaction call to 0:0 failed 45/29201/-22, size 0-0 line 3054
[   53.411492][ T5314] binder: 5302:5314 got transaction to invalid handle, 1
[   53.412606][ T5314] binder: 5314:5302 cannot find target node
[   53.413601][ T5314] binder: 5302:5314 transaction async to 0:0 failed 46/29201/-22, size 0-0 line 3054
[   53.415481][ T4366] binder: undelivered TRANSACTION_ERROR: 29201
[   53.416572][ T4366] binder: undelivered TRANSACTION_ERROR: 29201
[   53.457153][ T4469] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 12
[   53.533452][ T5291] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.534650][ T5291] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.536163][ T5291] device bridge_slave_0 entered promiscuous mode
[   53.554061][ T5291] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.555367][ T5291] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.556855][ T5291] device bridge_slave_1 entered promiscuous mode
[   53.588383][ T5291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.621541][ T5291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.674164][ T5291] team0: Port device team_slave_0 added
[   53.685392][ T5291] team0: Port device team_slave_1 added
[   53.704413][ T5291] batman_adv: batadv0: Adding interface: batadv_slave_0
[   53.705604][ T5291] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.709636][ T5291] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   53.711197][ T4510] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   53.727921][ T5291] batman_adv: batadv0: Adding interface: batadv_slave_1
[   53.729067][ T5291] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.736878][ T5291] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   53.798311][ T5291] device hsr_slave_0 entered promiscuous mode
[   53.818977][ T5342] binder: 5341:5342 got transaction to invalid handle, 1
[   53.820145][ T5342] binder: 5342:5341 cannot find target node
[   53.825038][ T5342] binder: 5341:5342 transaction call to 0:0 failed 50/29201/-22, size 0-0 line 3054
[   53.827058][ T3898] binder: undelivered TRANSACTION_ERROR: 29201
[   53.835392][ T5291] device hsr_slave_1 entered promiscuous mode
[   53.838130][ T5344] netlink: 6 bytes leftover after parsing attributes in process `syz.4.262'.
[   53.921272][ T5291] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   53.922440][ T5291] Cannot create hsr debugfs directory
[   53.924563][ T4510] usb 1-1: Using ep0 maxpacket: 16
[   53.930293][ T4510] usb 1-1: unable to get BOS descriptor or descriptor too short
[   53.932469][ T5344] netlink: 6 bytes leftover after parsing attributes in process `syz.4.262'.
[   53.933174][ T4510] usb 1-1: config 9 has an invalid interface number: 48 but max is 0
[   53.935184][ T4510] usb 1-1: config 9 has no interface number 0
[   53.936129][ T4510] usb 1-1: config 9 interface 48 has no altsetting 0
[   53.939867][ T4510] usb 1-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=f3.7b
[   53.941443][ T4510] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   53.942664][ T4510] usb 1-1: Product: syz
[   53.943281][ T4510] usb 1-1: Manufacturer: syz
[   53.943974][ T4510] usb 1-1: SerialNumber: syz
[   54.276937][ T4510] gspca_main: vc032x-2.14.0 probing 0ac8:c301
[   54.376180][ T5291] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   54.756428][ T5291] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   54.788196][ T5291] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   54.833151][ T5291] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   54.944495][ T4510] gspca_vc032x: reg_w err -71
[   54.945492][ T4510] gspca_vc032x: I2c Bus Busy Wait 00
[   54.946262][ T4510] gspca_vc032x: I2c Bus Busy Wait 00
[   54.947252][ T4510] gspca_vc032x: I2c Bus Busy Wait 00
[   54.948010][ T4510] gspca_vc032x: I2c Bus Busy Wait 00
[   54.949345][ T4510] gspca_vc032x: I2c Bus Busy Wait 00
[   54.950281][ T4510] gspca_vc032x: I2c Bus Busy Wait 00
[   54.955212][ T4510] gspca_vc032x: I2c Bus Busy Wait 00
[   54.957210][ T4510] gspca_vc032x: I2c Bus Busy Wait 00
[   54.957929][ T4510] gspca_vc032x: I2c Bus Busy Wait 00
[   54.959821][ T4510] gspca_vc032x: I2c Bus Busy Wait 00
[   54.960654][ T4510] gspca_vc032x: I2c Bus Busy Wait 00
[   54.963766][ T4510] gspca_vc032x: I2c Bus Busy Wait 00
[   54.964620][ T4510] gspca_vc032x: I2c Bus Busy Wait 00
[   54.975144][ T4510] gspca_vc032x: I2c Bus Busy Wait 00
[   54.977239][ T4510] gspca_vc032x: I2c Bus Busy Wait 00
[   54.978132][ T4510] gspca_vc032x: I2c Bus Busy Wait 00
[   54.981225][ T4510] gspca_vc032x: I2c Bus Busy Wait 00
[   54.982055][ T4510] gspca_vc032x: I2c Bus Busy Wait 00
[   54.986110][ T5291] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.986198][ T4510] gspca_vc032x: I2c Bus Busy Wait 00
[   54.995426][ T4510] gspca_vc032x: Unknown sensor...
[   54.996343][ T4510] vc032x: probe of 1-1:9.48 failed with error -22
[   54.999570][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   55.001847][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   55.003917][ T4510] usb 1-1: USB disconnect, device number 3
[   55.019774][ T5291] 8021q: adding VLAN 0 to HW filter on device team0
[   55.026805][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   55.028435][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   55.030111][ T5060] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.031429][ T5060] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.033983][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   55.043082][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   55.045317][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   55.046849][ T5060] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.047941][ T5060] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.055545][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   55.057373][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   55.059121][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   55.063201][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   55.064856][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   55.066504][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   55.074336][ T5291] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   55.076206][ T5291] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   55.095274][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   55.096965][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   55.098606][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   55.100232][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   55.101912][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   55.105089][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   55.131198][ T4325] Bluetooth: hci5: command 0x0409 tx timeout
[   55.448848][ T5387] binder: 5386:5387 got transaction to invalid handle, 1
[   55.450049][ T5387] binder: 5387:5386 cannot find target node
[   55.563378][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   55.564675][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   55.566164][ T5395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   55.567679][ T5291] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.568500][ T5395] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   55.937841][ T5291] device veth0_vlan entered promiscuous mode
[   55.940915][ T5291] device veth1_vlan entered promiscuous mode
[   55.944478][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   55.946050][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   55.947515][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   55.948882][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   55.950388][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   55.955191][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   55.956643][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   55.958020][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   55.963985][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   55.965723][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   55.967596][ T5291] device veth0_macvtap entered promiscuous mode
[   55.969869][ T5291] device veth1_macvtap entered promiscuous mode
[   55.986679][ T5291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   55.988340][ T5291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   55.989833][ T5291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   55.992411][ T5291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   55.993996][ T5291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   55.995739][ T5291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   55.997246][ T5291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   55.998880][ T5291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   56.000376][ T5291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   56.006180][ T5291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   56.008375][ T5291] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.009985][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   56.011943][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   56.013412][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   56.016100][ T5291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   56.017701][ T5291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   56.019336][ T5291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   56.020981][ T5291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   56.026700][ T5291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   56.028324][ T5291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   56.029833][ T5291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   56.032018][ T5291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   56.033655][ T5291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   56.035374][ T5291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   56.045203][ T5291] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.046482][  T199] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   56.048079][  T199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   56.051540][ T5291] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.052918][ T5291] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.054415][ T5291] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.055835][ T5291] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.106814][ T1582] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.108110][ T1582] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.110096][  T199] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   56.127744][ T1582] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.129062][ T1582] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.130990][  T199] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   56.139457][ T5412] loop0: detected capacity change from 0 to 32768
[   56.150845][ T5412] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.281 (5412)
[   56.160261][ T5412] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   56.167790][ T5412] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm
[   56.171916][ T5412] BTRFS info (device loop0): max_inline at 0
[   56.175765][ T5412] BTRFS info (device loop0): enabling disk space caching
[   56.179163][ T5412] BTRFS info (device loop0): setting nodatasum
[   56.185724][ T5412] BTRFS info (device loop0): turning off barriers
[   56.188047][ T5412] BTRFS info (device loop0): turning on flush-on-commit
[   56.190389][ T5412] BTRFS info (device loop0): doing ref verification
[   56.193605][ T5412] BTRFS info (device loop0): force clearing of disk cache
[   56.196359][ T5412] BTRFS warning (device loop0): excessive commit interval 2147483647
[   56.199870][ T5412] BTRFS info (device loop0): enabling ssd optimizations
[   56.205327][ T5412] BTRFS info (device loop0): max_inline at 0
[   56.207525][ T5412] BTRFS info (device loop0): disk space caching is enabled
[   56.267126][ T5420] netlink: set zone limit has 8 unknown bytes
[   56.490755][ T5437] binder: 5434:5437 got transaction to invalid handle, 1
[   56.569928][ T5412] BTRFS info (device loop0): rebuilding free space tree
[   56.577639][ T5412] BTRFS info (device loop0): disabling free space tree
[   56.579087][ T5412] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   56.589986][ T5412] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   57.044903][ T5412] overlayfs: failed to resolve './bus': -2
[   57.103798][ T5450] netlink: 28 bytes leftover after parsing attributes in process `syz.2.286'.
[   57.105339][ T5450] netlink: 28 bytes leftover after parsing attributes in process `syz.2.286'.
[   57.130257][ T5448] 9pnet_fd: Insufficient options for proto=fd
[   57.178785][ T4324] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   57.187700][ T4506] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0
[   57.188913][ T4506] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0
[   57.190108][ T4506] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0
[   57.194522][ T4506] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0
[   57.195640][ T4506] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0
[   57.202049][ T4325] Bluetooth: hci5: command 0x041b tx timeout
[   57.204373][ T4506] hid-generic 0006:0004:0009.0001: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0
[   57.602897][ T5460] fido_id[5460]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   57.763211][ T5467] loop2: detected capacity change from 0 to 32768
[   57.904467][ T5467] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.292 (5467)
[   57.911413][ T5467] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   57.915497][ T5467] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm
[   57.917078][ T5467] BTRFS info (device loop2): enabling ssd optimizations
[   57.921615][ T5467] BTRFS info (device loop2): using spread ssd allocation scheme
[   57.923731][ T5467] BTRFS info (device loop2): setting nodatacow, compression disabled
[   57.925124][ T5467] BTRFS info (device loop2): not using ssd optimizations
[   57.926311][ T5467] BTRFS info (device loop2): not using spread ssd allocation scheme
[   57.927524][ T5467] BTRFS info (device loop2): use zlib compression, level 3
[   57.928695][ T5467] BTRFS info (device loop2): setting nodatasum
[   57.929769][ T5467] BTRFS info (device loop2): max_inline at 0
[   57.930846][ T5467] BTRFS info (device loop2): using free space tree
[   58.877906][   T27] audit: type=1326 audit(58.860:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5462 comm="syz.4.294" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8655c0a8 code=0x7fc00000
[   58.882976][   T27] audit: type=1326 audit(58.870:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5462 comm="syz.4.294" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff8655c0a8 code=0x7fc00000
[   58.889037][   T27] audit: type=1326 audit(58.870:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5462 comm="syz.4.294" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8655c0a8 code=0x7fc00000
[   58.929707][   T27] audit: type=1326 audit(58.870:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5462 comm="syz.4.294" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8655c0a8 code=0x7fc00000
[   58.954793][   T27] audit: type=1326 audit(58.870:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5462 comm="syz.4.294" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8655c0a8 code=0x7fc00000
[   58.972956][   T27] audit: type=1326 audit(58.870:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5462 comm="syz.4.294" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8655c0a8 code=0x7fc00000
[   58.979197][ T4414] BTRFS warning (device loop2): checksum verify failed on logical 5308416 mirror 1 wanted 0xe1d58233 found 0x566da5bc level 0
[   58.994629][   T27] audit: type=1326 audit(58.870:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5462 comm="syz.4.294" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8655c0a8 code=0x7fc00000
[   58.997915][   T27] audit: type=1326 audit(58.870:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5462 comm="syz.4.294" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8655c0a8 code=0x7fc00000
[   59.013725][   T27] audit: type=1326 audit(58.870:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5462 comm="syz.4.294" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8655c0a8 code=0x7fc00000
[   59.016941][   T27] audit: type=1326 audit(58.880:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5462 comm="syz.4.294" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8655c0a8 code=0x7fc00000
[   59.117958][ T4469] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop2 scanned by udevd (4469)
[   59.167905][ T5515] binder: 5513:5515 tried to acquire reference to desc 0, got 1 instead
[   59.169747][ T5515] binder_alloc: 5513: binder_alloc_buf, no vma
[   59.171819][ T5515] binder_debug: 5 callbacks suppressed
[   59.171832][ T5515] binder: cannot allocate buffer: vma cleared, target dead or dying
[   59.172915][ T5515] binder: 5513:5515 transaction call to 5513:0 failed 63/29189/-3, size 0-0 line 3239
[   59.176053][ T5515] binder: 5513:5515 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[   59.178140][ T5515] binder: 5515 RLIMIT_NICE not set
[   59.178915][ T5515] binder: 5513:5515 ioctl c0306201 20000240 returned -11
[   59.180359][ T5515] binder: 5513:5515 got reply transaction with no transaction stack
[   59.185431][ T5515] binder: 5513:5515 transaction reply to 0:0 failed 64/29201/-71, size 0-0 line 2955
[   59.187465][ T5515] binder: 5513:5515 ioctl c0306201 200004c0 returned -14
[   59.196132][ T4665] binder: undelivered TRANSACTION_ERROR: 29201
[   59.265208][ T5522] netlink: 28 bytes leftover after parsing attributes in process `syz.2.303'.
[   59.266859][ T5522] netlink: 28 bytes leftover after parsing attributes in process `syz.2.303'.
[   59.506709][ T4329] Bluetooth: hci5: command 0x040f tx timeout
[   61.387239][ T5556] netlink: 6 bytes leftover after parsing attributes in process `syz.5.315'.
[   61.388671][ T5556] netlink: 6 bytes leftover after parsing attributes in process `syz.5.315'.
[   61.529029][ T5564] binder: tried to use weak ref as strong ref
[   61.539780][ T5564] binder: 5563:5564 Acquire 1 refcount change on invalid ref 0 ret -22
[   61.542999][ T5564] binder: 5563:5564 got transaction to invalid handle, 1
[   61.548676][ T5564] binder: 5564:5563 cannot find target node
[   61.557469][ T5564] binder: 5563:5564 transaction call to 0:0 failed 67/29201/-22, size 0-0 line 3054
[   61.566441][ T5564] binder: 5563:5564 ioctl c0306201 200004c0 returned -14
[   62.325508][ T4325] Bluetooth: hci5: command 0x0419 tx timeout
[   62.653817][ T5583] binder: 5582:5583 IncRefs 0 refcount change on invalid ref 0 ret -22
[   62.658582][ T5583] binder: 5582:5583 got transaction to invalid handle, 1
[   62.659756][ T5583] binder: 5583:5582 cannot find target node
[   62.660632][ T5583] binder: 5582:5583 transaction call to 0:0 failed 70/29201/-22, size 0-0 line 3054
[   62.662989][ T4658] binder: undelivered TRANSACTION_ERROR: 29201
[   63.384591][ T5600] netlink: 6 bytes leftover after parsing attributes in process `syz.3.327'.
[   63.386131][ T5600] netlink: 6 bytes leftover after parsing attributes in process `syz.3.327'.
[   63.730788][ T5602] binder: tried to use weak ref as strong ref
[   63.741700][ T5602] binder: 5602:5601 cannot find target node
[   63.743130][ T5602] binder: 5601:5602 ioctl c0306201 200004c0 returned -14
[   63.790536][ T5608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   63.804719][ T5608] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   64.231902][ T5617] binder: 5615:5617 unknown command 1074553619
[   64.232977][ T5617] binder: 5615:5617 ioctl c0306201 20000040 returned -22
[   64.240746][ T5618] binder_user_error: 2 callbacks suppressed
[   64.240755][ T5618] binder: 5616:5618 IncRefs 0 refcount change on invalid ref 0 ret -22
[   64.253985][ T5618] binder: 5616:5618 got transaction to invalid handle, 1
[   64.255147][ T5618] binder_debug: 1 callbacks suppressed
[   64.255159][ T5618] binder: 5618:5616 cannot find target node
[   64.256925][ T5618] binder: 5616:5618 transaction call to 0:0 failed 76/29201/-22, size 0-0 line 3054
[   64.272588][ T4490] binder: undelivered TRANSACTION_ERROR: 29201
[   64.428237][ T5626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   64.442446][ T5626] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   64.486918][ T2061] ieee802154 phy0 wpan0: encryption failed: -22
[   64.491177][ T2061] ieee802154 phy1 wpan1: encryption failed: -22
[   64.504828][   T24] cfg80211: failed to load regulatory.db
[   64.995106][ T5638] binder: tried to use weak ref as strong ref
[   64.996319][ T5638] binder: 5637:5638 Acquire 1 refcount change on invalid ref 0 ret -22
[   65.002248][ T5638] binder: 5637:5638 got transaction to invalid handle, 1
[   65.006908][ T5638] binder: 5638:5637 cannot find target node
[   65.008141][ T5638] binder: 5637:5638 transaction call to 0:0 failed 79/29201/-22, size 0-0 line 3054
[   65.014048][ T5638] binder: 5637:5638 ioctl c0306201 200004c0 returned -14
[   65.651360][ T5648] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input3
[   65.856517][ T5654] binder: 5653:5654 IncRefs 0 refcount change on invalid ref 0 ret -22
[   65.928807][ T5654] binder: 5653:5654 got transaction to invalid handle, 1
[   65.930022][ T5654] binder: 5654:5653 cannot find target node
[   65.930907][ T5654] binder: 5653:5654 transaction call to 0:0 failed 82/29201/-22, size 0-0 line 3054
[   65.941354][   T24] binder: undelivered TRANSACTION_ERROR: 29201
[   68.699834][ T5731] netlink: 28 bytes leftover after parsing attributes in process `syz.0.368'.
[   68.701408][ T5731] netlink: 28 bytes leftover after parsing attributes in process `syz.0.368'.
[   69.359997][ T5723] loop3: detected capacity change from 0 to 32768
[   69.396756][ T5723] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9
[   69.446832][ T4469] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9
[   70.035286][ T4329] Bluetooth: hci5: command 0x0405 tx timeout
[   70.887530][ T5776] netlink: 16 bytes leftover after parsing attributes in process `syz.0.386'.
[   70.889096][ T5776] netlink: del zone limit has 8 unknown bytes
[   71.078986][ T5783] netlink: 28 bytes leftover after parsing attributes in process `syz.3.384'.
[   71.080553][ T5783] netlink: 28 bytes leftover after parsing attributes in process `syz.3.384'.
[   72.328366][ T5806] deleting an unspecified loop device is not supported.
[   72.939904][ T5779] loop4: detected capacity change from 0 to 32768
[   72.943554][ T5779] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9
[   72.974332][ T5806] sctp: failed to load transform for md5: -2
[   73.102277][ T4311] I/O error, dev loop4, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   75.130893][ T5860] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   75.132614][ T5860] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   75.611238][ T5860] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   77.831826][ T5913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   77.887228][ T5913] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   77.908948][ T5902] loop4: detected capacity change from 0 to 32768
[   77.916664][ T5902] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9
[   78.760093][ T4469] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9
[   79.231217][ T4663] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   79.431147][ T4663] usb 1-1: Using ep0 maxpacket: 16
[   79.433342][ T4663] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   79.435005][ T4663] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0
[   79.436386][ T4663] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   79.438360][ T4663] usb 1-1: config 0 interface 0 has no altsetting 0
[   79.441262][ T4663] usb 1-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[   79.442720][ T4663] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   79.443981][ T4663] usb 1-1: Product: syz
[   79.444651][ T4663] usb 1-1: Manufacturer: syz
[   79.445487][ T4663] usb 1-1: SerialNumber: syz
[   79.447412][ T4663] usb 1-1: config 0 descriptor??
[   79.954809][ T4663] usb 1-1: USB disconnect, device number 4
[   82.542690][ T6035] process 'syz.2.433' launched './file1' with NULL argv: empty string added
[   83.714329][ T6033] netlink: 60 bytes leftover after parsing attributes in process `syz.3.434'.
[   83.715933][ T6042] netlink: 28 bytes leftover after parsing attributes in process `syz.0.435'.
[   83.717297][ T6042] netlink: 28 bytes leftover after parsing attributes in process `syz.0.435'.
[   84.360901][ T6067] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready
[   84.362237][ T6067] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready
[   84.363845][ T6067] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   84.365107][ T6067] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   84.451779][ T6067] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   85.733722][ T6084] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   85.735131][ T6084] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   85.761280][ T6084] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   86.141917][ T4435] vhci_hcd: connection reset by peer
[   86.145388][   T11] vhci_hcd: stop threads
[   86.146546][   T11] vhci_hcd: release socket
[   86.148053][   T11] vhci_hcd: disconnect device
[   86.179010][ T6088] loop0: detected capacity change from 0 to 32768
[   86.198708][ T6088] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9
[   86.222189][   T22] vhci_hcd: vhci_device speed not set
[   86.250550][ T4469] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9
[   86.338285][ T4329] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   86.340686][ T4329] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   86.342607][ T4329] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   86.344950][ T4329] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   86.346684][ T4329] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   86.348021][ T4329] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   86.353748][ T4325] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   86.355405][ T4325] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   86.356673][ T4325] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   86.358354][ T4325] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   86.359808][ T4325] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   86.362496][ T4325] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   87.021160][ T4517] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   87.051315][ T6096] netlink: 28 bytes leftover after parsing attributes in process `syz.3.450'.
[   87.052792][ T6096] netlink: 28 bytes leftover after parsing attributes in process `syz.3.450'.
[   87.261171][ T4517] usb 1-1: Using ep0 maxpacket: 8
[   87.264426][ T4517] usb 1-1: unable to get BOS descriptor or descriptor too short
[   87.266525][ T4517] usb 1-1: config 8 has an invalid descriptor of length 86, skipping remainder of the config
[   87.268950][ T4517] usb 1-1: config 8 has 0 interfaces, different from the descriptor's value: 1
[   87.658017][ T4517] usb 1-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af
[   87.674771][ T4517] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   87.705447][ T4517] usb 1-1: Product: syz
[   87.706575][ T4517] usb 1-1: Manufacturer: syz
[   87.707393][ T4517] usb 1-1: SerialNumber: syz
[   87.985444][ T4517] usb 1-1: USB disconnect, device number 5
[   88.054737][ T4942] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.193545][ T4942] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.312949][ T4942] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.325802][ T6105] chnl_net:caif_netlink_parms(): no params data found
[   88.411147][ T4329] Bluetooth: hci2: command 0x0409 tx timeout
[   88.424336][ T4942] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.437802][ T6139] loop4: detected capacity change from 0 to 32768
[   88.450339][ T6139] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9
[   88.480216][ T6105] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.496233][ T6105] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.581152][ T6105] device bridge_slave_0 entered promiscuous mode
[   88.601601][ T6105] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.602735][ T6105] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.604235][ T6105] device bridge_slave_1 entered promiscuous mode
[   88.630550][ T6105] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   88.662994][ T6105] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   88.707952][ T6105] team0: Port device team_slave_0 added
[   88.710816][ T6105] team0: Port device team_slave_1 added
[   88.724140][ T4469] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9
[   88.817135][ T4658] kernel read not supported for file /usbmon9 (pid: 4658 comm: kworker/0:9)
[   88.856079][ T6156] netlink: 8 bytes leftover after parsing attributes in process `syz.4.467'.
[   89.115147][ T6105] batman_adv: batadv0: Adding interface: batadv_slave_0
[   89.118510][ T6105] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.130962][ T6105] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   89.138271][ T4942] tipc: Left network mode
[   89.142538][ T6105] batman_adv: batadv0: Adding interface: batadv_slave_1
[   89.145730][ T6105] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.178640][ T6105] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   89.282450][ T6105] device hsr_slave_0 entered promiscuous mode
[   89.581518][ T6105] device hsr_slave_1 entered promiscuous mode
[   89.681304][ T6105] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   89.683725][ T6105] Cannot create hsr debugfs directory
[   89.786794][ T6179] ax25_connect(): syz.4.470 uses autobind, please contact jreuter@yaina.de
[   90.136953][ T6169] netlink: 28 bytes leftover after parsing attributes in process `syz.3.469'.
[   90.138487][ T6169] netlink: 28 bytes leftover after parsing attributes in process `syz.3.469'.
[   90.573499][ T4325] Bluetooth: hci2: command 0x041b tx timeout
[   91.096174][ T6195] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   91.124263][ T6195] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   91.329843][ T6105] netdevsim netdevsim6 netdevsim0: renamed from eth0
[   92.281393][ T6105] netdevsim netdevsim6 netdevsim1: renamed from eth1
[   92.332824][ T6105] netdevsim netdevsim6 netdevsim2: renamed from eth2
[   92.345197][ T6212] loop5: detected capacity change from 0 to 32768
[   92.352287][ T4517] kernel read not supported for file /usbmon9 (pid: 4517 comm: kworker/1:14)
[   92.372426][ T6105] netdevsim netdevsim6 netdevsim3: renamed from eth3
[   92.378484][ T6212] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 9
[   92.515773][ T4469] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 9
[   92.652009][ T4329] Bluetooth: hci2: command 0x040f tx timeout
[   93.663610][ T6243] netlink: 28 bytes leftover after parsing attributes in process `syz.0.482'.
[   93.665058][ T6243] netlink: 28 bytes leftover after parsing attributes in process `syz.0.482'.
[   93.730309][ T6105] 8021q: adding VLAN 0 to HW filter on device bond0
[   93.750036][ T5891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   93.780826][ T5891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   93.841961][ T4575] kernel read not supported for file /usbmon9 (pid: 4575 comm: kworker/1:18)
[   94.256513][ T6262] loop4: detected capacity change from 0 to 32768
[   94.259144][ T6262] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9
[   94.296268][ T6105] 8021q: adding VLAN 0 to HW filter on device team0
[   94.651282][ T6270] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   94.673107][ T6270] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   94.735080][ T5490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   94.737142][ T5490] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   94.744782][ T5490] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.745992][ T5490] bridge0: port 1(bridge_slave_0) entered forwarding state
[   94.757332][ T5490] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   94.776822][ T5490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   94.788008][ T5490] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   94.797276][ T5490] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.798459][ T5490] bridge0: port 2(bridge_slave_1) entered forwarding state
[   94.801658][ T4575] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   94.886829][ T5490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   94.898477][ T5490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   94.988163][ T4575] usb 1-1: Using ep0 maxpacket: 8
[   95.260440][ T4575] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[   95.262173][ T4575] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   95.263730][ T4575] usb 1-1: Product: syz
[   95.264661][ T4575] usb 1-1: Manufacturer: syz
[   95.265405][ T4575] usb 1-1: SerialNumber: syz
[   95.287551][ T4469] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9
[   95.290622][ T4575] usb 1-1: config 0 descriptor??
[   95.291106][ T4329] Bluetooth: hci2: command 0x0419 tx timeout
[   95.446980][ T5490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   95.449745][ T5490] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   95.453233][ T5490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   95.457249][ T5490] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   95.465076][ T5490] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   95.496123][ T4575] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[   95.588575][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   95.590397][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   95.595179][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   95.599950][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   95.668109][ T4942] device hsr_slave_0 left promiscuous mode
[   95.962551][ T6319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   95.969881][ T6319] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   95.971699][ T4942] device hsr_slave_1 left promiscuous mode
[   96.051254][ T4942] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   96.052634][ T4942] batman_adv: batadv0: Removing interface: batadv_slave_0
[   96.054535][ T4942] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   96.055819][ T4942] batman_adv: batadv0: Removing interface: batadv_slave_1
[   96.057221][ T4942] device bridge_slave_1 left promiscuous mode
[   96.059399][ T4942] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.112141][ T4942] device bridge_slave_0 left promiscuous mode
[   96.113328][ T4942] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.231410][ T4942] device veth1_macvtap left promiscuous mode
[   96.232726][ T4942] device veth0_macvtap left promiscuous mode
[   96.233909][ T4942] device veth1_vlan left promiscuous mode
[   96.235001][ T4942] device veth0_vlan left promiscuous mode
[   96.641896][ T6326] loop5: detected capacity change from 0 to 32768
[   96.652655][ T6326] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 9
[   96.960307][ T4469] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 9
[   97.356553][ T4575] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71
[   97.359950][ T4575] usb 1-1: USB disconnect, device number 6
[   97.920387][ T6343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   97.923112][ T6343] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   98.573291][ T4942] team0 (unregistering): Port device team_slave_1 removed
[   98.760681][ T4942] team0 (unregistering): Port device team_slave_0 removed
[   98.769999][ T6349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   98.772011][ T6349] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   98.899917][ T6355] loop0: detected capacity change from 0 to 32768
[   98.902946][ T6355] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9
[   98.918524][ T4942] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   98.944921][ T4469] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9
[   99.011737][ T4877] kernel read not supported for file /usbmon9 (pid: 4877 comm: kworker/0:16)
[   99.111898][ T4942] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   99.311202][ T4877] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[   99.314988][ T6364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   99.317060][ T6364] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   99.322515][ T6364] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   99.492323][ T4877] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   99.493988][ T4877] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[   99.496183][ T4877] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   99.497459][ T4877] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   99.498602][ T4877] usb 1-1: SerialNumber: syz
[   99.707260][ T4877] usb 1-1: 0:2 : does not exist
[   99.708198][ T4877] usb 1-1: unit 5: unexpected type 0x09
[   99.715121][ T4877] usb 1-1: USB disconnect, device number 7
[   99.922945][ T4469] udevd[4469]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  101.345022][ T6381] loop5: detected capacity change from 0 to 32768
[  101.356349][ T6381] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 9
[  101.426839][ T4469] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 9
[  101.521330][ T4658] kernel read not supported for file /usbmon9 (pid: 4658 comm: kworker/0:9)
[  101.572257][ T4942] bond0 (unregistering): Released all slaves
[  101.672961][ T6390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  101.674703][ T6390] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  101.775257][ T6105] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  101.781659][ T6315] netlink: 28 bytes leftover after parsing attributes in process `syz.3.499'.
[  101.782932][ T6315] netlink: 28 bytes leftover after parsing attributes in process `syz.3.499'.
[  101.787298][ T6330] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  101.821702][ T6330] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  101.900042][ T6399] netlink: 'syz.4.529': attribute type 10 has an invalid length.
[  101.902938][ T6399] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.904598][ T6399] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.951855][ T6399] bridge0: port 2(bridge_slave_1) entered blocking state
[  101.953125][ T6399] bridge0: port 2(bridge_slave_1) entered forwarding state
[  101.955061][ T6399] bridge0: port 1(bridge_slave_0) entered blocking state
[  101.956429][ T6399] bridge0: port 1(bridge_slave_0) entered forwarding state
[  102.245216][ T6399] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  102.345137][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  102.346576][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  102.350843][ T6105] 8021q: adding VLAN 0 to HW filter on device batadv0
[  102.869796][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  102.876851][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  102.898094][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  102.899796][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  102.915015][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  102.917938][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  102.924002][ T6105] device veth0_vlan entered promiscuous mode
[  102.936789][ T6105] device veth1_vlan entered promiscuous mode
[  102.942272][ T4877] kernel read not supported for file /usbmon9 (pid: 4877 comm: kworker/0:16)
[  103.348544][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  103.350116][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  103.354436][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  103.356022][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  103.359002][ T6105] device veth0_macvtap entered promiscuous mode
[  103.370257][ T6105] device veth1_macvtap entered promiscuous mode
[  103.383607][ T6435] loop5: detected capacity change from 0 to 32768
[  103.386365][ T6105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  103.388247][ T6105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  103.407996][ T6105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  103.409870][ T6105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  103.412878][ T6105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  103.414622][ T6105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  103.416318][ T6105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  103.418000][ T6105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  103.419666][ T6105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  103.424283][ T6105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  103.427134][ T6105] batman_adv: batadv0: Interface activated: batadv_slave_0
[  103.428691][ T5490] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  103.430302][ T5490] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  103.441351][ T5490] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  103.443871][ T5490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  103.457667][ T6435] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 9
[  103.466717][ T6105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  103.481553][ T6105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  103.487549][ T6105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  103.493005][ T6105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  103.495040][ T6105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  103.512657][ T6105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  103.514382][ T6105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  103.516175][ T6105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  103.517776][ T6105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  103.519532][ T6105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  103.530631][ T6105] batman_adv: batadv0: Interface activated: batadv_slave_1
[  103.535531][ T6105] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  103.536919][ T6105] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  103.538274][ T6105] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  103.539665][ T6105] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  103.581654][ T1582] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  103.585429][ T1582] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  103.590641][ T6446] netlink: 28 bytes leftover after parsing attributes in process `syz.0.537'.
[  103.592782][ T6446] netlink: 28 bytes leftover after parsing attributes in process `syz.0.537'.
[  103.594996][ T5490] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  103.597225][ T5490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  103.604671][ T5490] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  103.947978][ T5580] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  103.949783][ T5580] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  103.954521][ T5891] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  104.004642][ T4469] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 9
[  104.838755][ T6486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  104.840300][ T6486] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  105.383741][ T4389] kernel read not supported for file /usbmon9 (pid: 4389 comm: kworker/0:6)
[  105.573346][ T4942] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.003057][ T4942] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.006660][ T6522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  106.020826][ T6522] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  106.115163][ T6525] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  106.261479][ T6525] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  106.457760][ T6509] loop0: detected capacity change from 0 to 32768
[  106.501807][ T6509] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9
[  106.506978][ T4942] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.544655][ T6534] netlink: 28 bytes leftover after parsing attributes in process `syz.3.552'.
[  106.546172][ T6534] netlink: 28 bytes leftover after parsing attributes in process `syz.3.552'.
[  106.589258][ T6545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  106.590955][ T6545] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  106.650422][ T4942] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.685897][ T4469] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9
[  107.198408][ T6557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  107.205839][ T6557] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  107.432890][ T4663] kernel read not supported for file /usbmon9 (pid: 4663 comm: kworker/0:11)
[  108.315640][ T6588] netlink: 'syz.5.565': attribute type 10 has an invalid length.
[  108.317396][ T6588] bridge0: port 2(bridge_slave_1) entered disabled state
[  108.318672][ T6588] bridge0: port 1(bridge_slave_0) entered disabled state
[  108.339051][ T6588] bridge0: port 2(bridge_slave_1) entered blocking state
[  108.340229][ T6588] bridge0: port 2(bridge_slave_1) entered forwarding state
[  108.341394][ T6588] bridge0: port 1(bridge_slave_0) entered blocking state
[  108.342497][ T6588] bridge0: port 1(bridge_slave_0) entered forwarding state
[  108.350458][ T6588] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  109.250476][ T6619] netlink: 28 bytes leftover after parsing attributes in process `syz.0.570'.
[  109.252146][ T6619] netlink: 28 bytes leftover after parsing attributes in process `syz.0.570'.
[  110.098382][ T6648] netlink: 'syz.5.580': attribute type 10 has an invalid length.
[  110.107764][ T6648] bridge0: port 2(bridge_slave_1) entered disabled state
[  110.109057][ T6648] bridge0: port 1(bridge_slave_0) entered disabled state
[  110.507406][ T6657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  110.511278][ T6657] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  111.675411][ T6678] bridge0: port 2(bridge_slave_1) entered blocking state
[  111.676764][ T6678] bridge0: port 2(bridge_slave_1) entered forwarding state
[  111.677970][ T6678] bridge0: port 1(bridge_slave_0) entered blocking state
[  111.679103][ T6678] bridge0: port 1(bridge_slave_0) entered forwarding state
[  111.683099][ T6678] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  112.157870][ T6678] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  112.160295][ T6691] netlink: 28 bytes leftover after parsing attributes in process `syz.4.589'.
[  112.162081][ T6691] netlink: 28 bytes leftover after parsing attributes in process `syz.4.589'.
[  113.237535][ T6737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  113.239427][ T6737] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  113.382211][ T4942] device hsr_slave_0 left promiscuous mode
[  113.732906][ T4942] device hsr_slave_1 left promiscuous mode
[  113.861225][ T4942] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  113.863654][ T4942] batman_adv: batadv0: Removing interface: batadv_slave_0
[  113.865119][ T4942] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  113.866390][ T4942] batman_adv: batadv0: Removing interface: batadv_slave_1
[  113.867950][ T4942] device bridge_slave_1 left promiscuous mode
[  113.869066][ T4942] bridge0: port 2(bridge_slave_1) entered disabled state
[  113.962962][ T4942] device bridge_slave_0 left promiscuous mode
[  113.965224][ T4942] bridge0: port 1(bridge_slave_0) entered disabled state
[  114.376396][ T6765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  114.378953][ T6765] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  114.441312][ T4942] device veth1_macvtap left promiscuous mode
[  114.442776][ T4942] device veth0_macvtap left promiscuous mode
[  114.443865][ T4942] device veth1_vlan left promiscuous mode
[  114.444725][ T4942] device veth0_vlan left promiscuous mode
[  116.424088][ T4942] team0 (unregistering): Port device team_slave_1 removed
[  116.582449][ T4942] team0 (unregistering): Port device team_slave_0 removed
[  116.761548][ T4942] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  116.817696][ T6779] loop4: detected capacity change from 0 to 32768
[  116.825223][ T6779] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9
[  116.856599][ T4469] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9
[  116.982396][ T4942] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  119.324459][ T4942] bond0 (unregistering): Released all slaves
[  119.538345][ T6747] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  119.581341][ T6747] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  119.585720][ T6756] netlink: 28 bytes leftover after parsing attributes in process `syz.0.608'.
[  119.587249][ T6756] netlink: 28 bytes leftover after parsing attributes in process `syz.0.608'.
[  119.641495][ T6767] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  119.715347][ T6795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  119.725432][ T6795] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  120.246428][ T6806] vxcan1 speed is unknown, defaulting to 1000
[  120.249412][ T6806] vxcan1 speed is unknown, defaulting to 1000
[  120.251294][ T6806] vxcan1 speed is unknown, defaulting to 1000
[  120.273233][ T6806] infiniband syz2: set active
[  120.274128][ T6806] infiniband syz2: added vxcan1
[  120.282678][   T27] kauditd_printk_skb: 57 callbacks suppressed
[  120.286943][   T27] audit: type=1326 audit(119.990:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6797 comm="syz.3.624" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96d5c0a8 code=0x7ffc0000
[  120.351507][   T27] audit: type=1326 audit(119.990:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6797 comm="syz.3.624" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96d5c0a8 code=0x7ffc0000
[  120.416204][   T27] audit: type=1326 audit(119.990:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6797 comm="syz.3.624" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=114 compat=0 ip=0xffff96d5c0a8 code=0x7ffc0000
[  120.425769][ T4877] vxcan1 speed is unknown, defaulting to 1000
[  120.528114][ T6806] RDS/IB: syz2: added
[  120.529147][ T6806] smc: adding ib device syz2 with port count 1
[  120.530153][ T6806] smc:    ib device syz2 port 1 has pnetid 
[  120.532678][ T6806] vxcan1 speed is unknown, defaulting to 1000
[  120.554510][ T4389] vxcan1 speed is unknown, defaulting to 1000
[  120.556145][   T27] audit: type=1326 audit(120.000:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6797 comm="syz.3.624" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96d5c0a8 code=0x7ffc0000
[  120.556659][ T6806] vxcan1 speed is unknown, defaulting to 1000
[  120.559525][   T27] audit: type=1326 audit(120.000:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6797 comm="syz.3.624" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96d5c0a8 code=0x7ffc0000
[  120.567182][   T27] audit: type=1326 audit(120.000:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6797 comm="syz.3.624" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff96d5c0a8 code=0x7ffc0000
[  120.576475][ T6806] vxcan1 speed is unknown, defaulting to 1000
[  120.593429][ T6806] vxcan1 speed is unknown, defaulting to 1000
[  120.602884][   T27] audit: type=1326 audit(120.000:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6797 comm="syz.3.624" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96d5c0a8 code=0x7ffc0000
[  120.606456][   T27] audit: type=1326 audit(120.000:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6797 comm="syz.3.624" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96d5c0a8 code=0x7ffc0000
[  120.610204][   T27] audit: type=1326 audit(120.000:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6797 comm="syz.3.624" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffff96d5c0a8 code=0x7ffc0000
[  120.646237][   T27] audit: type=1326 audit(120.000:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6797 comm="syz.3.624" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96d5c0a8 code=0x7ffc0000
[  120.743568][ T6806] vxcan1 speed is unknown, defaulting to 1000
[  121.185856][ T6816] loop6: detected capacity change from 0 to 32768
[  121.247913][ T6816] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 9
[  122.474501][ T6859] netlink: 28 bytes leftover after parsing attributes in process `syz.6.633'.
[  122.475956][ T6859] netlink: 28 bytes leftover after parsing attributes in process `syz.6.633'.
[  123.160600][ T5844] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 9
[  123.910225][ T6903] 9pnet_fd: Insufficient options for proto=fd
[  123.972591][ T6895] loop4: detected capacity change from 0 to 32768
[  123.986554][ T6895] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9
[  124.110681][ T6916] binder: 6914:6916 ioctl 4018620d 0 returned -22
[  124.114771][ T6916] binder: tried to use weak ref as strong ref
[  124.115776][ T6916] binder: 6914:6916 Acquire 1 refcount change on invalid ref 0 ret -22
[  124.117283][ T6916] binder: 6914:6916 got transaction to invalid handle, 1
[  124.118309][ T6916] binder: 6916:6914 cannot find target node
[  124.119297][ T6916] binder: 6914:6916 transaction call to 0:0 failed 85/29201/-22, size 0-0 line 3054
[  124.126811][ T6916] binder: 6914:6916 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  124.128760][ T6916] binder: 6916 RLIMIT_NICE not set
[  124.138800][ T6916] binder: 6914:6916 ioctl c0306201 20000240 returned -11
[  124.140612][ T6916] binder: 6914:6916 got reply transaction with no transaction stack
[  124.588324][ T6916] binder: 6914:6916 transaction reply to 0:0 failed 86/29201/-71, size 0-0 line 2955
[  124.594886][ T6916] binder: 6914:6916 ioctl c0306201 200004c0 returned -14
[  124.615488][ T4400] binder: undelivered TRANSACTION_ERROR: 29201
[  124.736413][ T6927] rdma_rxe: rxe_register_device failed with error -23
[  124.738215][ T6927] rdma_rxe: failed to add vxcan1
[  125.342858][ T4469] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9
[  126.050187][ T2061] ieee802154 phy0 wpan0: encryption failed: -22
[  126.069360][ T2061] ieee802154 phy1 wpan1: encryption failed: -22
[  127.151620][ T6952] 9pnet_fd: Insufficient options for proto=fd
[  128.064741][ T6970] binder: 6967:6970 ioctl 4018620d 0 returned -22
[  128.065999][ T6970] binder: tried to use weak ref as strong ref
[  128.066225][ T6972] netlink: 8 bytes leftover after parsing attributes in process `syz.0.660'.
[  128.066906][ T6970] binder: 6967:6970 Acquire 1 refcount change on invalid ref 0 ret -22
[  128.093009][ T6970] binder: 6967:6970 got transaction to invalid handle, 1
[  128.094163][ T6970] binder: 6970:6967 cannot find target node
[  128.095066][ T6970] binder: 6967:6970 transaction call to 0:0 failed 89/29201/-22, size 0-0 line 3054
[  128.152755][ T6974] netlink: 28 bytes leftover after parsing attributes in process `syz.5.661'.
[  128.154211][ T6974] netlink: 28 bytes leftover after parsing attributes in process `syz.5.661'.
[  128.157093][ T6970] binder: 6967:6970 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  128.169500][ T6970] binder: 6967:6970 ioctl c0306201 20000240 returned -11
[  128.205002][ T6970] binder: 6967:6970 transaction reply to 0:0 failed 90/29201/-71, size 0-0 line 2955
[  128.206747][ T6970] binder: 6967:6970 ioctl c0306201 200004c0 returned -14
[  128.278312][ T4663] binder: undelivered TRANSACTION_ERROR: 29201
[  128.318442][ T6960] loop6: detected capacity change from 0 to 32768
[  128.326306][ T6960] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 9
[  128.662967][ T5844] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 9
[  128.682521][ T7002] 9pnet_fd: Insufficient options for proto=fd
[  129.550066][ T6996] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready
[  129.551699][ T6996] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  129.651218][ T6996] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  130.650680][ T7024] ax25_connect(): syz.5.670 uses autobind, please contact jreuter@yaina.de
[  131.127719][ T7043] binder: 7042:7043 ioctl 4018620d 0 returned -22
[  131.139865][ T7043] binder_user_error: 2 callbacks suppressed
[  131.139872][ T7043] binder: tried to use weak ref as strong ref
[  131.155582][ T7043] binder: 7042:7043 Acquire 1 refcount change on invalid ref 0 ret -22
[  131.163619][ T7043] binder: 7042:7043 got transaction to invalid handle, 1
[  131.164901][ T7043] binder: 7043:7042 cannot find target node
[  131.174397][ T7043] binder: 7042:7043 transaction call to 0:0 failed 93/29201/-22, size 0-0 line 3054
[  131.178434][ T7043] binder: 7042:7043 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  131.187237][ T7043] binder: 7043 RLIMIT_NICE not set
[  131.190698][ T7043] binder: 7042:7043 ioctl c0306201 20000240 returned -11
[  131.194285][ T7043] binder: 7042:7043 got reply transaction with no transaction stack
[  131.198619][ T7045] netlink: 28 bytes leftover after parsing attributes in process `syz.3.674'.
[  131.200496][ T7045] netlink: 28 bytes leftover after parsing attributes in process `syz.3.674'.
[  131.245165][ T7043] binder: 7042:7043 transaction reply to 0:0 failed 94/29201/-71, size 0-0 line 2955
[  131.259515][ T7043] binder: 7042:7043 ioctl c0306201 200004c0 returned -14
[  131.292209][ T4400] binder: undelivered TRANSACTION_ERROR: 29201
[  131.508959][ T7054] loop3: detected capacity change from 0 to 32768
[  131.528218][ T7054] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9
[  131.586601][ T7071] 9pnet_fd: Insufficient options for proto=fd
[  131.700938][ T7051] loop6: detected capacity change from 0 to 32768
[  131.708467][ T7051] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 12
[  131.746315][ T4469] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9
[  132.376538][ T5844] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 12
[  132.753087][ T7099] 9pnet_fd: Insufficient options for proto=fd
[  133.020830][ T7110] ax25_connect(): syz.0.687 uses autobind, please contact jreuter@yaina.de
[  133.325023][ T7118] netlink: 28 bytes leftover after parsing attributes in process `syz.6.688'.
[  133.326470][ T7118] netlink: 28 bytes leftover after parsing attributes in process `syz.6.688'.
[  133.791862][ T7128] 9pnet_fd: Insufficient options for proto=fd
[  134.014959][ T7125] loop5: detected capacity change from 0 to 32768
[  134.025046][ T7125] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 9
[  134.395803][ T7133] loop6: detected capacity change from 0 to 32768
[  134.405092][ T7133] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 12
[  134.576114][ T4469] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 9
[  134.600601][ T5844] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 12
[  135.043121][ T4759] Bluetooth: hci0: Frame reassembly failed (-84)
[  135.057090][ T7144] Bluetooth: received HCILL_WAKE_UP_IND in state 2
[  135.538194][ T7184] netlink: 28 bytes leftover after parsing attributes in process `syz.4.704'.
[  135.539791][ T7184] netlink: 28 bytes leftover after parsing attributes in process `syz.4.704'.
[  135.613244][ T7188] ax25_connect(): syz.5.703 uses autobind, please contact jreuter@yaina.de
[  136.028282][ T7195] 9pnet_fd: Insufficient options for proto=fd
[  136.350950][ T7205] loop3: detected capacity change from 0 to 32768
[  136.360638][ T7205] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 12
[  136.745156][ T4469] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 12
[  136.763825][ T7203] loop6: detected capacity change from 0 to 32768
[  136.772769][ T7203] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 9
[  136.821920][ T5844] I/O error, dev loop6, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  137.047291][ T4325] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  137.543742][ T7255] binder: 7253:7255 got transaction to invalid handle, 1
[  137.552994][ T7255] binder: 7255:7253 cannot find target node
[  137.554039][ T7255] binder: 7253:7255 transaction call to 0:0 failed 98/29201/-22, size 0-0 line 3054
[  137.562583][ T7255] binder: 7253:7255 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  137.569973][ T7255] binder: 7255 RLIMIT_NICE not set
[  137.570780][ T7255] binder: 7253:7255 ioctl c0306201 20000240 returned -11
[  137.574741][ T7255] binder: 7253:7255 got reply transaction with no transaction stack
[  137.576195][ T7255] binder: 7253:7255 transaction reply to 0:0 failed 99/29201/-71, size 0-0 line 2955
[  137.585428][ T7255] binder: 7253:7255 ioctl c0306201 200004c0 returned -14
[  137.614649][   T22] binder: undelivered TRANSACTION_ERROR: 29201
[  137.830568][ T7271] netlink: 28 bytes leftover after parsing attributes in process `syz.3.723'.
[  137.832153][ T7271] netlink: 28 bytes leftover after parsing attributes in process `syz.3.723'.
[  137.849269][ T7272] ax25_connect(): syz.5.722 uses autobind, please contact jreuter@yaina.de
[  138.416812][ T7275] loop6: detected capacity change from 0 to 32768
[  138.428839][ T7275] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 12
[  138.580606][ T4469] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 12
[  139.807541][ T7322] binder: BINDER_SET_CONTEXT_MGR already set
[  139.808575][ T7322] binder: 7316:7322 ioctl 4018620d 200002c0 returned -16
[  139.809925][ T7322] binder: 7316:7322 got transaction to invalid handle, 1
[  139.823438][ T7322] binder: 7322:7316 cannot find target node
[  139.824421][ T7322] binder: 7316:7322 transaction call to 0:0 failed 102/29201/-22, size 0-0 line 3054
[  139.830902][ T7322] binder: 7316:7322 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  139.834575][ T7322] binder: 7322 RLIMIT_NICE not set
[  139.835587][ T7322] binder: 7316:7322 ioctl c0306201 20000240 returned -11
[  139.860079][ T7322] binder: 7316:7322 got reply transaction with no transaction stack
[  139.866814][ T7322] binder: 7316:7322 transaction reply to 0:0 failed 103/29201/-71, size 0-0 line 2955
[  139.943940][ T4389] binder: undelivered TRANSACTION_ERROR: 29201
[  139.980445][ T4389] binder: undelivered TRANSACTION_ERROR: 29201
[  140.171037][ T7337] netlink: 28 bytes leftover after parsing attributes in process `syz.3.736'.
[  140.172615][ T7337] netlink: 28 bytes leftover after parsing attributes in process `syz.3.736'.
[  140.318816][ T7333] loop0: detected capacity change from 0 to 32768
[  140.334404][ T7333] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 12
[  140.443279][ T4469] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 12
[  140.737665][ T7339] loop4: detected capacity change from 0 to 32768
[  140.741811][ T7346] block device autoloading is deprecated and will be removed.
[  140.747640][ T7339] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9
[  140.883893][ T4469] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9
[  141.028196][ T7358] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  141.121511][ T7358] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  142.559874][ T7375] loop5: detected capacity change from 0 to 32768
[  142.569846][ T7380] netlink: 'syz.6.751': attribute type 10 has an invalid length.
[  142.581554][ T7380] bridge0: port 2(bridge_slave_1) entered disabled state
[  142.582770][ T7380] bridge0: port 1(bridge_slave_0) entered disabled state
[  142.586758][ T7379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  142.588131][ T7379] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  142.608145][ T7375] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 12
[  142.626621][ T7380] bridge0: port 2(bridge_slave_1) entered blocking state
[  142.627894][ T7380] bridge0: port 2(bridge_slave_1) entered forwarding state
[  142.629097][ T7380] bridge0: port 1(bridge_slave_0) entered blocking state
[  142.630128][ T7380] bridge0: port 1(bridge_slave_0) entered forwarding state
[  142.650131][ T7380] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  142.718850][ T4469] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 12
[  143.382068][ T7384] loop5: detected capacity change from 0 to 32768
[  143.386390][ T7384] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 9
[  143.428005][ T4469] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 9
[  143.502201][ T7401] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  143.781232][ T7401] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  144.057254][ T7419] netlink: 28 bytes leftover after parsing attributes in process `syz.4.757'.
[  144.058799][ T7419] netlink: 28 bytes leftover after parsing attributes in process `syz.4.757'.
[  144.515568][ T7426] loop3: detected capacity change from 0 to 32768
[  144.525373][ T7426] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 12
[  144.531889][ T4400] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  144.597242][ T4469] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 12
[  144.731482][ T4400] usb 1-1: Using ep0 maxpacket: 32
[  144.733718][ T4400] usb 1-1: config 0 has an invalid interface number: 126 but max is 0
[  144.735009][ T4400] usb 1-1: config 0 has no interface number 0
[  144.736021][ T4400] usb 1-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023
[  144.737481][ T4400] usb 1-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8
[  144.738917][ T4400] usb 1-1: config 0 interface 126 has no altsetting 0
[  144.743650][ T4400] usb 1-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c
[  144.745040][ T4400] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.746207][ T4400] usb 1-1: Product: syz
[  144.746809][ T4400] usb 1-1: Manufacturer: syz
[  144.747492][ T4400] usb 1-1: SerialNumber: syz
[  144.763895][ T4400] usb 1-1: config 0 descriptor??
[  144.766898][ T7424] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  144.768074][ T7424] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  144.947211][ T7440] loop4: detected capacity change from 0 to 32768
[  144.963556][ T7440] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9
[  145.797388][ T4400] ir_usb 1-1:0.126: IR Dongle converter detected
[  145.799423][ T4400] usb 1-1: IRDA class descriptor not found, device not bound
[  145.828586][ T7452] netlink: 'syz.3.767': attribute type 10 has an invalid length.
[  145.831518][ T7452] bridge0: port 2(bridge_slave_1) entered disabled state
[  145.832724][ T7452] bridge0: port 1(bridge_slave_0) entered disabled state
[  145.873118][ T4400] usb 1-1: USB disconnect, device number 8
[  145.965727][ T7452] bridge0: port 2(bridge_slave_1) entered blocking state
[  145.966940][ T7452] bridge0: port 2(bridge_slave_1) entered forwarding state
[  145.968083][ T7452] bridge0: port 1(bridge_slave_0) entered blocking state
[  145.969232][ T7452] bridge0: port 1(bridge_slave_0) entered forwarding state
[  145.977189][ T7452] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  146.368536][ T7456] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  146.385356][ T4469] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9
[  146.889281][ T7456] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  147.446329][ T7479] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  147.571358][ T7479] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  147.902187][ T7489] 9pnet_fd: Insufficient options for proto=fd
[  148.007710][ T7469] loop0: detected capacity change from 0 to 32768
[  148.028563][ T7469] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 12
[  148.089531][ T4469] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 12
[  148.236809][ T7497] loop4: detected capacity change from 0 to 32768
[  148.250297][ T7497] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9
[  148.294027][ T7519] netlink: 12 bytes leftover after parsing attributes in process `syz.4.782'.
[  149.117767][ T7525] netlink: 'syz.4.783': attribute type 10 has an invalid length.
[  149.127762][ T7525] bridge0: port 2(bridge_slave_1) entered disabled state
[  149.128973][ T7525] bridge0: port 1(bridge_slave_0) entered disabled state
[  149.135455][ T5844] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9
[  149.157706][ T7506] netlink: 4 bytes leftover after parsing attributes in process `syz.5.779'.
[  149.159286][ T7506] device bridge_slave_1 left promiscuous mode
[  149.160327][ T7506] bridge0: port 2(bridge_slave_1) entered disabled state
[  149.466393][ T7506] device bridge_slave_0 left promiscuous mode
[  149.467571][ T7506] bridge0: port 1(bridge_slave_0) entered disabled state
[  149.592305][ T7506] bond0: (slave bridge0): Releasing backup interface
[  149.770704][ T7531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  149.773811][ T7531] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  150.376864][ T7552] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready
[  150.379942][ T7552] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  150.591220][ T7552] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  150.731441][ T7567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  150.733027][ T7567] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  150.757872][ T7567] batman_adv: batadv0: Adding interface: dummy0
[  150.758996][ T7567] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  150.780395][ T7567] batman_adv: batadv0: Interface activated: dummy0
[  150.829281][ T7569] batadv0: mtu less than device minimum
[  150.831954][ T7569] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  150.835121][ T7569] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  150.838092][ T7569] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  150.841089][ T7569] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  150.844090][ T7569] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  150.847073][ T7569] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  150.916429][ T7561] loop3: detected capacity change from 0 to 32768
[  150.922550][ T7561] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 12
[  150.925229][ T7575] netlink: 'syz.4.795': attribute type 10 has an invalid length.
[  151.027746][ T7564] loop6: detected capacity change from 0 to 32768
[  151.038499][ T7564] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 9
[  151.054166][ T4469] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 12
[  151.100832][ T5844] I/O error, dev loop6, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  151.954760][ T7590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  151.956283][ T7590] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  152.188570][ T7599] 9pnet_fd: Insufficient options for proto=fd
[  152.811794][ T7631] netlink: 'syz.3.807': attribute type 10 has an invalid length.
[  152.814575][ T7631] bridge0: port 2(bridge_slave_1) entered disabled state
[  152.815798][ T7631] bridge0: port 1(bridge_slave_0) entered disabled state
[  153.124278][ T7634] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready
[  153.125903][ T7634] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  153.171274][ T7634] net_ratelimit: 13 callbacks suppressed
[  153.171280][ T7634] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  153.185108][ T7640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  153.198343][ T7640] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  153.296375][ T7649] 9pnet_fd: Insufficient options for proto=fd
[  153.456935][ T7643] loop3: detected capacity change from 0 to 32768
[  153.746298][ T7643] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9
[  153.789375][ T7675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  153.790878][ T7675] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  153.849504][ T4469] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9
[  154.108653][ T7710] netlink: 'syz.5.821': attribute type 10 has an invalid length.
[  154.247525][ T7721] binder: 7720:7721 tried to acquire reference to desc 0, got 1 instead
[  154.586542][ T4366] binder: release 7720:7721 transaction 108 out, still active
[  154.600543][ T4366] binder: undelivered TRANSACTION_COMPLETE
[  154.612279][ T4366] binder: send failed reply for transaction 108, target dead
[  154.617915][ T7725] 9pnet_fd: Insufficient options for proto=fd
[  155.350250][ T7768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  155.358051][ T7768] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  155.485137][ T7760] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  155.499667][ T7777] netlink: 'syz.3.835': attribute type 10 has an invalid length.
[  155.593015][ T7733] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  155.614012][ T7785] binder: 7783:7785 tried to acquire reference to desc 0, got 1 instead
[  155.619224][ T4400] binder: release 7783:7785 transaction 113 out, still active
[  155.620441][ T4400] binder: undelivered TRANSACTION_COMPLETE
[  155.633866][ T4400] binder: send failed reply for transaction 113, target dead
[  155.709678][ T7793] 9pnet_fd: Insufficient options for proto=fd
[  155.758035][ T7799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  155.759584][ T7799] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  156.081218][ T7814] ubi31: attaching mtd0
[  156.086051][ T7814] ubi31: scanning is finished
[  156.086886][ T7814] ubi31: empty MTD device detected
[  156.336156][ T7814] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[  156.337347][ T7814] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  156.338357][ T7814] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[  156.339453][ T7814] ubi31: VID header offset: 64 (aligned 64), data offset: 128
[  156.340514][ T7814] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  156.341583][ T7814] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23
[  156.342894][ T7814] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1881416562
[  156.344524][ T7814] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  156.346663][ T7818] ubi31: background thread "ubi_bgt31d" started, PID 7818
[  156.726200][ T7848] netlink: 'syz.0.846': attribute type 10 has an invalid length.
[  156.745862][ T7848] bridge0: port 2(bridge_slave_1) entered disabled state
[  156.747255][ T7848] bridge0: port 1(bridge_slave_0) entered disabled state
[  156.764643][ T7848] bridge0: port 2(bridge_slave_1) entered blocking state
[  156.765873][ T7848] bridge0: port 2(bridge_slave_1) entered forwarding state
[  156.767099][ T7848] bridge0: port 1(bridge_slave_0) entered blocking state
[  156.768146][ T7848] bridge0: port 1(bridge_slave_0) entered forwarding state
[  156.782463][ T7848] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  156.883618][ T7862] binder: 7861:7862 tried to acquire reference to desc 0, got 1 instead
[  156.887852][ T4400] binder: release 7861:7862 transaction 118 out, still active
[  156.889191][ T4400] binder: undelivered TRANSACTION_COMPLETE
[  156.918296][ T4400] binder: send failed reply for transaction 118, target dead
[  156.988423][ T7869] 9pnet_fd: Insufficient options for proto=fd
[  157.894988][ T7892] loop4: detected capacity change from 0 to 32768
[  157.900821][ T7892] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 12
[  157.956958][ T4469] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 12
[  158.336215][ T7922] netlink: 4 bytes leftover after parsing attributes in process `syz.4.859'.
[  158.338208][ T7922] netlink: 'syz.4.859': attribute type 10 has an invalid length.
[  158.386859][ T7924] binder: 7923:7924 tried to acquire reference to desc 0, got 1 instead
[  158.389073][ T4366] binder: release 7923:7924 transaction 123 out, still active
[  158.536888][ T7929] 9pnet_fd: Insufficient options for proto=fd
[  158.561703][ T7931] binder: 7930:7931 tried to acquire reference to desc 0, got 1 instead
[  158.563526][ T7931] binder: 7930:7931 ioctl c0306201 0 returned -14
[  158.564872][ T7931] binder: 7930:7931 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  158.566779][ T7931] binder: 7931 RLIMIT_NICE not set
[  158.567443][ T7931] binder: 7930:7931 ioctl c0306201 20000240 returned -11
[  158.568839][ T7931] binder: 7930:7931 got reply transaction with no transaction stack
[  158.570450][ T7931] binder: 7930:7931 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  158.572460][ T7931] binder: 7931 RLIMIT_NICE not set
[  158.801769][ T4329] Bluetooth: hci0: command 0x1003 tx timeout
[  158.801931][ T4325] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  158.917888][ T7935] loop5: detected capacity change from 0 to 32768
[  158.932872][ T7935] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 12
[  159.027394][ T4469] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 12
[  159.321286][ T7948] ax25_connect(): syz.5.869 uses autobind, please contact jreuter@yaina.de
[  159.421267][ T7954] netlink: 4 bytes leftover after parsing attributes in process `syz.3.870'.
[  159.425620][ T7954] netlink: 'syz.3.870': attribute type 10 has an invalid length.
[  159.427627][ T7956] binder: 7955:7956 tried to acquire reference to desc 0, got 1 instead
[  159.964616][ T7970] loop4: detected capacity change from 0 to 32768
[  159.970862][ T7970] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 12
[  160.014071][ T4469] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 12
[  160.166859][ T7980] binder: 7979:7980 tried to acquire reference to desc 0, got 1 instead
[  160.168750][ T7980] binder: 7979:7980 ioctl c0306201 0 returned -14
[  160.170041][ T7980] binder: 7979:7980 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  160.176414][ T7980] binder: 7980 RLIMIT_NICE not set
[  160.177237][ T7980] binder: 7979:7980 ioctl c0306201 20000240 returned -11
[  160.180134][ T7980] binder: 7979:7980 got reply transaction with no transaction stack
[  160.188766][ T7980] binder_debug: 7 callbacks suppressed
[  160.188780][ T7980] binder: 7979:7980 transaction reply to 0:0 failed 138/29201/-71, size 0-0 line 2955
[  160.192406][ T7980] binder: 7979:7980 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  160.195532][ T7980] binder: 7980 RLIMIT_NICE not set
[  160.316175][ T7985] netlink: 4 bytes leftover after parsing attributes in process `syz.0.883'.
[  160.324842][ T7985] netlink: 'syz.0.883': attribute type 10 has an invalid length.
[  160.338747][ T7985] bridge0: port 2(bridge_slave_1) entered disabled state
[  160.340090][ T7985] bridge0: port 1(bridge_slave_0) entered disabled state
[  160.441929][ T7995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  160.444425][ T7995] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  160.998346][ T4366] binder: undelivered TRANSACTION_ERROR: 29201
[  161.016253][ T8006] ax25_connect(): syz.4.889 uses autobind, please contact jreuter@yaina.de
[  161.229477][ T8010] loop6: detected capacity change from 0 to 32768
[  161.529141][ T8010] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 12
[  161.555191][ T8019] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_team, syncid = 0, id = 0
[  161.620940][ T4469] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 12
[  162.640013][ T8042] binder: 8041:8042 tried to acquire reference to desc 0, got 1 instead
[  162.646056][ T8042] binder: 8041:8042 ioctl c0306201 0 returned -14
[  162.647283][ T8042] binder: 8041:8042 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  162.647516][ T8044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  162.649168][ T8042] binder: 8042 RLIMIT_NICE not set
[  162.652149][ T8042] binder: 8041:8042 ioctl c0306201 20000240 returned -11
[  162.653886][ T8044] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  162.661405][ T8042] binder: 8041:8042 transaction reply to 0:0 failed 143/29201/-71, size 0-0 line 2955
[  162.937166][ T8052] loop4: detected capacity change from 0 to 32768
[  162.945025][ T8052] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 12
[  162.948555][ T8054] ax25_connect(): syz.6.907 uses autobind, please contact jreuter@yaina.de
[  162.997886][ T4469] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 12
[  163.479552][ T4665] binder: undelivered TRANSACTION_ERROR: 29201
[  164.304562][ T8090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  164.309427][ T8090] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  164.357817][ T8085] loop3: detected capacity change from 0 to 32768
[  164.377225][ T8085] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 12
[  164.417722][ T8092] binder: 8091:8092 ioctl c0306201 20000240 returned -11
[  164.419137][ T8092] binder: 8091:8092 transaction reply to 0:0 failed 148/29201/-71, size 0-0 line 2955
[  164.464986][ T4469] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 12
[  164.640359][ T8098] ax25_connect(): syz.3.922 uses autobind, please contact jreuter@yaina.de
[  164.836869][ T8107] netlink: 8 bytes leftover after parsing attributes in process `syz.3.926'.
[  165.249710][ T4400] binder: undelivered TRANSACTION_ERROR: 29201
[  165.434751][ T8122] loop4: detected capacity change from 0 to 32768
[  165.448939][ T8122] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 12
[  165.614241][ T4469] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 12
[  165.707101][ T8131] ax25_connect(): syz.3.935 uses autobind, please contact jreuter@yaina.de
[  165.959613][ T8143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  165.962421][ T8143] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  166.629146][ T8155] binder_user_error: 9 callbacks suppressed
[  166.629155][ T8155] binder: 8153:8155 tried to acquire reference to desc 0, got 1 instead
[  166.632050][ T8155] binder: 8153:8155 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  166.633972][ T8155] binder: 8155 RLIMIT_NICE not set
[  166.634724][ T8155] binder: 8153:8155 ioctl c0306201 20000240 returned -11
[  166.635881][ T8155] binder: 8153:8155 got reply transaction with no transaction stack
[  166.637046][ T8155] binder: 8153:8155 transaction reply to 0:0 failed 153/29201/-71, size 0-0 line 2955
[  166.638629][ T8155] binder: 8153:8155 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  166.640434][ T8155] binder: 8155 RLIMIT_NICE not set
[  167.166367][ T8167] loop4: detected capacity change from 0 to 32768
[  167.173846][ T8167] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 12
[  167.214746][ T4469] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 12
[  167.423032][ T8171] ax25_connect(): syz.4.949 uses autobind, please contact jreuter@yaina.de
[  167.468640][ T4573] binder: undelivered TRANSACTION_ERROR: 29201
[  167.561901][ T8177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  167.564620][ T8177] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  167.922341][ T4331] Bluetooth: hci0: command 0x1003 tx timeout
[  167.922494][ T4325] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  168.393256][ T8198] loop0: detected capacity change from 0 to 32768
[  168.405134][ T8198] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 12
[  168.748472][ T8208] binder: 8205:8208 tried to acquire reference to desc 0, got 1 instead
[  168.755742][ T8208] binder: 8205:8208 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  168.759027][ T8208] binder: 8208 RLIMIT_NICE not set
[  168.759792][ T8208] binder: 8205:8208 ioctl c0306201 20000240 returned -11
[  168.766085][ T4469] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 12
[  168.767491][ T8208] binder: 8205:8208 got reply transaction with no transaction stack
[  168.772315][ T8208] binder: 8205:8208 transaction reply to 0:0 failed 158/29201/-71, size 0-0 line 2955
[  169.039377][ T8213] ax25_connect(): syz.3.964 uses autobind, please contact jreuter@yaina.de
[  169.285177][ T8231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  169.288218][ T8231] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  169.429293][ T8233] loop5: detected capacity change from 0 to 32768
[  169.432708][ T8233] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 12
[  169.485112][ T4469] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 12
[  169.631609][ T4366] binder: undelivered TRANSACTION_ERROR: 29201
[  169.767133][ T8243] ax25_connect(): syz.0.976 uses autobind, please contact jreuter@yaina.de
[  170.275345][ T8266] binder: 8265:8266 ioctl c0306201 20000240 returned -11
[  170.283571][ T8266] binder: 8265:8266 transaction reply to 0:0 failed 163/29201/-71, size 0-0 line 2955
[  170.397592][ T8264] loop5: detected capacity change from 0 to 32768
[  170.406876][ T8264] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 12
[  170.462271][ T4469] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 12
[  170.525456][ T8275] netlink: 'syz.5.988': attribute type 1 has an invalid length.
[  170.537488][ T8275] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  170.749544][ T8283] ax25_connect(): syz.5.991 uses autobind, please contact jreuter@yaina.de
[  170.811325][ T4490] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  170.991158][ T4490] usb 1-1: Using ep0 maxpacket: 32
[  170.993260][ T4490] usb 1-1: config 0 has an invalid interface number: 12 but max is 0
[  170.994609][ T4490] usb 1-1: config 0 has no interface number 0
[  170.995608][ T4490] usb 1-1: config 0 interface 12 has no altsetting 0
[  170.998154][ T4490] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=70.40
[  170.999586][ T4490] usb 1-1: New USB device strings: Mfr=231, Product=2, SerialNumber=3
[  171.000843][ T4490] usb 1-1: Product: syz
[  171.001666][ T4490] usb 1-1: Manufacturer: syz
[  171.002411][ T4490] usb 1-1: SerialNumber: syz
[  171.005655][ T4490] usb 1-1: config 0 descriptor??
[  171.114486][ T4366] binder: undelivered TRANSACTION_ERROR: 29201
[  171.615256][ T4490] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  171.616664][ T4490] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71
[  171.617913][ T4490] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  171.619177][ T4490] f81534: probe of 1-1:0.12 failed with error -71
[  171.622428][ T4490] usb 1-1: USB disconnect, device number 9
[  172.003479][ T4331] Bluetooth: hci0: command 0x1003 tx timeout
[  172.021378][ T4325] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  172.148939][ T8309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  172.151684][ T8309] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  172.186529][ T8313] device syzkaller0 entered promiscuous mode
[  172.278550][ T8319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  172.280298][ T8319] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  172.393090][ T8325] binder_user_error: 8 callbacks suppressed
[  172.393100][ T8325] binder: 8324:8325 tried to acquire reference to desc 0, got 1 instead
[  172.395916][ T8325] binder: 8324:8325 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  172.398116][ T8325] binder: 8325 RLIMIT_NICE not set
[  172.399072][ T8325] binder: 8324:8325 ioctl c0306201 20000240 returned -11
[  172.400403][ T8325] binder: 8324:8325 got reply transaction with no transaction stack
[  172.402323][ T8325] binder: 8324:8325 transaction reply to 0:0 failed 168/29201/-71, size 0-0 line 2955
[  172.404071][ T8325] binder: 8324:8325 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  172.406088][ T8325] binder: 8325 RLIMIT_NICE not set
[  172.469495][ T8323] loop0: detected capacity change from 0 to 32768
[  172.476122][ T8323] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 12
[  172.499483][ T4469] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 12
[  173.233653][ T4573] binder: undelivered TRANSACTION_ERROR: 29201
[  173.423902][ T8361] device syzkaller0 entered promiscuous mode
[  173.532298][ T8369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  173.538156][ T8369] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  173.630516][ T8367] loop5: detected capacity change from 0 to 32768
[  173.655082][ T8367] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 12
[  173.743399][ T4469] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 12
[  173.873243][ T8380] binder: 8379:8380 tried to acquire reference to desc 0, got 1 instead
[  173.874987][ T8380] binder: 8379:8380 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  173.887280][ T8380] binder: 8380 RLIMIT_NICE not set
[  173.888247][ T8380] binder: 8379:8380 ioctl c0306201 20000240 returned -11
[  173.889526][ T8380] binder: 8379:8380 got reply transaction with no transaction stack
[  173.890721][ T8380] binder: 8379:8380 transaction reply to 0:0 failed 173/29201/-71, size 0-0 line 2955
[  174.701126][ T4573] binder: undelivered TRANSACTION_ERROR: 29201
[  174.732648][ T8401] device syzkaller0 entered promiscuous mode
[  174.929736][ T8404] loop3: detected capacity change from 0 to 32768
[  174.936864][ T8404] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 12
[  175.018835][ T4469] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 12
[  175.087017][ T4663] kernel read not supported for file /usbmon9 (pid: 4663 comm: kworker/0:11)
[  175.273547][ T8430] binder: 8427:8430 ioctl c0306201 0 returned -14
[  175.274916][ T8430] binder: 8427:8430 transaction reply to 0:0 failed 179/29201/-71, size 0-0 line 2955
[  175.521114][ T4400] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  175.711097][ T4400] usb 1-1: Using ep0 maxpacket: 16
[  175.713797][ T4400] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  175.715600][ T4400] usb 1-1: config 0 interface 0 altsetting 1 has an invalid endpoint with address 0x0, skipping
[  175.717426][ T4400] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  175.719626][ T4400] usb 1-1: config 0 interface 0 has no altsetting 0
[  175.730306][ T4400] usb 1-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[  175.735486][ T4400] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  175.739418][ T4400] usb 1-1: Product: syz
[  175.744471][ T4400] usb 1-1: Manufacturer: syz
[  175.746745][ T4400] usb 1-1: SerialNumber: syz
[  175.750469][ T4400] usb 1-1: config 0 descriptor??
[  176.152032][ T4663] binder: release 8427:8430 transaction 178 out, still active
[  176.154346][ T4663] binder: undelivered TRANSACTION_COMPLETE
[  176.166059][ T4663] binder: undelivered TRANSACTION_ERROR: 29201
[  176.167118][ T4663] binder: send failed reply for transaction 178, target dead
[  176.167896][ T4400] usb 1-1: USB disconnect, device number 10
[  176.222557][ T8445] device syzkaller0 entered promiscuous mode
[  177.014454][ T8457] ax25_connect(): syz.3.1048 uses autobind, please contact jreuter@yaina.de
[  177.300156][ T8473] binder: 8472:8473 ioctl c0306201 0 returned -14
[  177.305138][ T8473] binder: 8472:8473 transaction reply to 0:0 failed 185/29201/-71, size 0-0 line 2955
[  178.124739][ T4665] binder: release 8472:8473 transaction 184 out, still active
[  178.128560][ T4665] binder: undelivered TRANSACTION_COMPLETE
[  178.136059][ T4665] binder: undelivered TRANSACTION_ERROR: 29201
[  178.137076][ T4665] binder: send failed reply for transaction 184, target dead
[  178.181561][ T8490] 9pnet_fd: Insufficient options for proto=fd
[  178.218420][ T8496] ax25_connect(): syz.5.1062 uses autobind, please contact jreuter@yaina.de
[  178.797997][ T8507] device syzkaller0 entered promiscuous mode
[  179.052076][ T8538] 9pnet_fd: Insufficient options for proto=fd
[  179.071359][ T4665] kernel read not supported for file /usbmon9 (pid: 4665 comm: kworker/0:13)
[  179.612035][ T8561] netlink: 'syz.5.1079': attribute type 10 has an invalid length.
[  179.781037][ T8565] device syzkaller0 entered promiscuous mode
[  179.943678][ T8571] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1082'.
[  180.019352][ T8573] 9pnet_fd: Insufficient options for proto=fd
[  180.111507][ T4490] kernel read not supported for file /usbmon9 (pid: 4490 comm: kworker/1:7)
[  180.193895][ T8594] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1090'.
[  180.219729][ T8594] netlink: 'syz.5.1090': attribute type 10 has an invalid length.
[  180.391378][ T8602] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1093'.
[  180.604490][ T8611] 9pnet_fd: Insufficient options for proto=fd
[  180.712341][ T8614] ax25_connect(): syz.0.1097 uses autobind, please contact jreuter@yaina.de
[  180.763834][ T8618] device syzkaller0 entered promiscuous mode
[  181.079461][ T4663] kernel read not supported for file /usbmon9 (pid: 4663 comm: kworker/0:11)
[  181.152681][ T8631] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1103'.
[  181.159939][ T8635] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1105'.
[  181.165162][ T8631] netlink: 'syz.4.1103': attribute type 10 has an invalid length.
[  181.332395][ T8642] fuse: Bad value for 'fd'
[  181.622344][ T8655] bridge0: port 2(bridge_slave_1) entered blocking state
[  181.623494][ T8655] bridge0: port 2(bridge_slave_1) entered forwarding state
[  181.624649][ T8655] bridge0: port 1(bridge_slave_0) entered blocking state
[  181.625705][ T8655] bridge0: port 1(bridge_slave_0) entered forwarding state
[  181.629763][ T8655] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  181.701364][ T8655] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  181.987668][ T8658] device syzkaller0 entered promiscuous mode
[  182.182951][ T4400] kernel read not supported for file /usbmon9 (pid: 4400 comm: kworker/1:6)
[  182.223171][ T8667] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1117'.
[  182.225105][ T8667] netlink: 'syz.0.1117': attribute type 10 has an invalid length.
[  182.225981][ T8665] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1116'.
[  182.265008][ T8671] fuse: Bad value for 'fd'
[  182.378556][ T8680] ------------[ cut here ]------------
[  182.379567][ T8680] WARNING: CPU: 1 PID: 8680 at net/sched/sch_taprio.c:1020 taprio_get_start_time+0x13c/0x16c
[  182.381004][ T8680] Modules linked in:
[  182.381587][ T8680] CPU: 1 PID: 8680 Comm: syz.6.1123 Not tainted syzkaller #0
[  182.382692][ T8680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025
[  182.384216][ T8680] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
[  182.385340][ T8680] pc : taprio_get_start_time+0x13c/0x16c
[  182.386164][ T8680] lr : taprio_get_start_time+0x13c/0x16c
[  182.386971][ T8680] sp : ffff800021ae6ba0
[  182.387618][ T8680] x29: ffff800021ae6ba0 x28: 0000000000000000 x27: ffff70000435cd94
[  182.388769][ T8680] x26: ffff0000cd52f700 x25: ffff0000dd715000 x24: dfff800000000000
[  182.389911][ T8680] x23: 0000000000000001 x22: 0000002a75f03582 x21: 0000000000000000
[  182.391283][ T8680] x20: 0000000000000000 x19: ffff800021ae6c98 x18: 0000000000000000
[  182.392619][ T8680] x17: ffff8000181f9000 x16: ffff8000082d22d4 x15: ffff800017cd9fc0
[  182.393935][ T8680] x14: ffff0000db398a98 x13: 1ffff00002a180b1 x12: 0000000000080000
[  182.395172][ T8680] x11: 00000000000067ce x10: ffff800036c7a000 x9 : ffff80000ffeda44
[  182.396289][ T8680] x8 : 00000000000067cf x7 : ffff80000ffed99c x6 : 0000000000000000
[  182.397466][ T8680] x5 : 0000000000000080 x4 : 0000000000000001 x3 : 0000000000000000
[  182.398613][ T8680] x2 : 0000000000000002 x1 : 0000000000000000 x0 : 0000000000000000
[  182.399918][ T8680] Call trace:
[  182.400458][ T8680]  taprio_get_start_time+0x13c/0x16c
[  182.401257][ T8680]  taprio_change+0x3670/0x4ca0
[  182.401934][ T8680]  taprio_init+0x498/0x520
[  182.402619][ T8680]  qdisc_create+0x6f0/0xe20
[  182.403312][ T8680]  tc_modify_qdisc+0x950/0x178c
[  182.404004][ T8680]  rtnetlink_rcv_msg+0x734/0xce4
[  182.404724][ T8680]  netlink_rcv_skb+0x208/0x3c4
[  182.405415][ T8680]  rtnetlink_rcv+0x28/0x38
[  182.406041][ T8680]  netlink_unicast+0x60c/0x824
[  182.406717][ T8680]  netlink_sendmsg+0x6e8/0x9b0
[  182.407412][ T8680]  ____sys_sendmsg+0x5b8/0x918
[  182.408100][ T8680]  __sys_sendmsg+0x25c/0x320
[  182.408739][ T8680]  __arm64_sys_sendmsg+0x80/0x94
[  182.409401][ T8680]  invoke_syscall+0x98/0x2bc
[  182.410076][ T8680]  el0_svc_common+0x138/0x258
[  182.410804][ T8680]  do_el0_svc+0x58/0x13c
[  182.411436][ T8680]  el0_svc+0x58/0x138
[  182.412013][ T8680]  el0t_64_sync_handler+0x84/0xf0
[  182.412758][ T8680]  el0t_64_sync+0x18c/0x190
[  182.413463][ T8680] irq event stamp: 423
[  182.414079][ T8680] hardirqs last  enabled at (422): [<ffff8000083ba150>] ktime_mono_to_any+0x14c/0x22c
[  182.415556][ T8680] hardirqs last disabled at (423): [<ffff800011956080>] el1_dbg+0x24/0x80
[  182.417010][ T8680] softirqs last  enabled at (294): [<ffff80000fd3e550>] local_bh_enable+0x10/0x34
[  182.418469][ T8680] softirqs last disabled at (414): [<ffff80000ffe61e8>] taprio_change+0x3500/0x4ca0
[  182.420012][ T8680] ---[ end trace 0000000000000000 ]---
[  187.361785][ T2061] ieee802154 phy0 wpan0: encryption failed: -22
[  187.362925][ T2061] ieee802154 phy1 wpan1: encryption failed: -22