last executing test programs:

19.515784281s ago: executing program 3 (id=1502):
stat(0x0, 0x0)
chown(&(0x7f0000000040)='./file0\x00', 0x0, 0xee00)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYRESDEC, @ANYRESHEX=0x0, @ANYRES32], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000800)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000001600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x29, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x90)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="c0000000190001000000000000000000e0000002000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000008001f0003"], 0xc0}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000c0000000000fc0100000000000000000000000000c02ca84723f6c93b000a"], 0xb8}}, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0))
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x4208, r2)
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='blkio.bfq.sectors\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f0000000540)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000008, 0x12, r3, 0x0)

15.881874849s ago: executing program 3 (id=1517):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = socket(0xa, 0x3, 0xff)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x20000004)
close_range(r3, 0xffffffffffffffff, 0x0)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100), 0x18)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newspdinfo={0x1c, 0x24, 0x21, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}}, 0x0)
sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="b80000001900674c000000000000000000000000000000000000000000000000e000000200000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
socket$igmp(0x2, 0x3, 0x2)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000e80)=ANY=[@ANYBLOB="c40000001900674c0000000000000000fc0100000000000000000000000000010000900000000007000000000000000000000000000002000a0000000000000048adf62fda246279fe71fe3af1ef4de01ee649264d3d6abfa15af1359894a76a30782a22e2bf352bc128c65a9d9112ab77eccb25ee4384a790e7cb39214fd7fb6cb7e31cb5d6abd5f866f21b91945bcba20fbfc846fd731ed15037ae0e51f025d14c", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0010000100000000000000"], 0xc4}, 0x1, 0x0, 0x0, 0x2000c855}, 0x0)
connect$can_j1939(r4, &(0x7f0000000140), 0x18)
writev(r4, &(0x7f0000000240)=[{&(0x7f00000001c0), 0xfffffef1}], 0x1)

14.436941458s ago: executing program 3 (id=1521):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
getpid()
r0 = socket$inet6(0xa, 0x0, 0x7)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x35, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480))
syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x1000a05, &(0x7f0000000e00)=ANY=[@ANYBLOB='fileset=00000000000000001025,uid=ignore,partition=00001000000000000003,gid=forget\x00adinicb,gid=forget,lastblock=0\'000000000000000000,gid=ignore,\x00'], 0x0, 0xc5a, &(0x7f0000000ec0)="$eJzs3UFsHNd9B+D/Gy61pNJUTJwqdhu367ZIZcVyZUkxFatwVhXNNoAsC6GYWwCuREpZmCIJkmpkI22ZXnroIUBR9JATgdYokKKBURdBj2zrAsnFhyCnnogWNoKiB7YIEKCAwWJm30orirJYUqQo+fts6rc7897smzfDGYrQmxcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQMTvvnL2+AvpYbcCANhLF8a+evxE7/2/7yE2BgDYE5f8/R8AAAAAAAAAAAAAAPa7FEU8ESnmLqyliep9x8D59syNm+Mjo5tXG0xVzb6qfPk18MKJk6e++OLw6W5+dP0H7al4bezS2ca52etz81MLC1OTjfGZ9pXZyWLLW9i8/tS2W3S07IB6RNyYvHp1oXHi+ZN3rL459EH9E4eHzgw/e+zpTtmbjfGR0dGxnjK1/m1/+l3uNcLjQBRxLFI89/2fplZEVB22w764z7mz2warnTha7cT4yGi1I9Pt1sxiufJityOKiEZPpWa3j/bgWOxIM2KpbH7Z4KPl7o3NteZbl6enGhdb84vtxfbszMXUaW25P40o4nSKWI6I1frdm+uPImqR4ruH1tLlPPq36ocvVAOD792OrX9n7YqynY3+iOXiEThm+1g9ing1Uvzs3SNxpeyz/BWfj3i1zB9EvFXmyxGpPDFORby/yXnEo6kWRfxZefzPrKXJ6nrQva6c/1rjKzNXZ3vKdq8rO7s/rOezZ8/vD4Mbcm/s82vTQBTRqq74a2n7P+wAAAAAAAAAAAAAAAAA8KANRhFPRYpXfvwH1bjiqMalHzoz/HtDn7w1ZjxFPHmf7aT433g+IpaKrY3JPZCHEF9MF1N6yGOJP84Goog/zOP/vv2wGwMAAAAAAAAAAAAAAAAAAPCxVsRPIsVL7x1Jy9E7p3h75lrjUuvydGdW2O7cv90509fX19cbqZPNnBM5l3Iu51zJuZozilw/ZzPnRM6lnMtFRD0iVvL71ZzRl+vnbOacyLmUcznnSs7VnFHL9XM2c07kXMq5nHMl52rO2Cdz9wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPE6KKOLDSPGdb66lSBHRjJiITq7UN6/z5T1uIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB83NVTEe9EisbvN28tq0VEqv7vOFL+cSqaB8r8dDSHy3w5mmdztqqsNb/9ENrPzvSnIn4UKeoDb9864J/sHP/+zrtbp0G89a3b7365FufK7OuuHPqg/onDh84Mj/7qk/d6nTZrwNHz7ZkbNxvjI6OjYz2La/nTP92zbKjzuVE8qJ0nFt548/XW9PTU/PZflKfADqrv/xc/rnX66qG358Dj3c+792I9tncEo7YPGv+QXjzMqxJ7pbz/vx8pfvu9f+ve8Ls///1C592tO3z8/I9u3/9f2rihj7j/f6MvYrv3/yd6lr2Ufxrpr0UMLF6f6z8cMbDwxpvH2tdb16auTc2cOn78S8PDXzp5vP9AxMDV9q9FROfV9NTxHXcVAAAAAAAAAAAAAAAAwN5KRXw5UrR+tJYaEXGzGrs1dGb42WNP90VfNd7qjnFbr41dOts4N3t9bn5qYWFqsjE+074yOzm11Y8bqIZ7jY+M7srO3NfgLrd/cODc7Nwb8+1r31jcdP3BgbOXFxbnW1c2Xx2DUUQ0e5ccrRo8PjJaNXq63Zqpql7cdDDd/19/KuLfI8WVU430TF6Wx//lUc+3x//1jv9f2rihXRr//6meZeVnplTEzyPFb/35k/FM1c6DcVef5XJ/HSmOnv5cLhcHynLdNnSeK9AZGViW/e9I8fcf3lm2Ox7yidtlX9hyxz4iyuN/KFK886ffi1/Py2p3PP9h8+N/cOOGtnj81/94Q737HP/P9Cw7eMfzCh7M/n/clcf/WKR4+Ym34zfystpHPP+j++yNI7nwredz7NL3/3pPpaH8ub/5gPYdAAAAAAAAAADgUdafivibSPH0aC29mJdt5d//TW7c0C79+6/P9iybfDDzFd33RZhiCgAAAIDHRH8q4ieR4tri27fGUN85/rtn/Ofv3P7F2EjasLb6Pd8vVs8NeJC//+s1lD93Yue7DQAAAAAAAAAAAAAAAAAAAPtKSkW8mOdTn9hkPvXBnnIrkeKV/3wul0uHy3LdeeCHqj8HLszOHDs7PT17pbXYujw91Riba12ZKut+JlKs/dXnct2iml/9mQ1t6c7FPh8pRv/2VtlqXXdu8s584J252Muyn4oU//F33bKdedu781j/0u2yJ8qyfxkpvv6Pm5c9HD0PM0hFfC9S/PDrjW7Zg2XZ7vNRP3t7u89fmfWoUAAAAAAAAAAAAAAAAAAAAHauPxXxJ5Hiv64v3xrLn+f/7+95W3nrWz3z/W9ws5rnf6ia//9er7cz///Q3TU+XO+IWD+0zb0GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID9LUURb0aKuQtraaVevu8YON+euXFzfGR082qDqarZV5UvvwZeOHHy1BdfHD7dzY+u/6A9Fa+NXTrbODd7fW5+amFharIxPtO+Mjs5teUt7LT+RkerDmhcf/3G5NWrC40Tz5+8Y/XNoQ/qnzg8dGb42WNPd8uOj4yOjvWUqfVv+9Pvku6x/EAU8ReR4rnv/zT9Uz2iiJ33xX3Ond02WO3E0WonxkdGqx2ZbrdmFsuVF7sdUUQ0eio1u320B8diR5oRS2XzywYfLXdvbK4137o8PdW42JpfbC+2Z2cupk5ry/1pRBGnU8RyRKzW795cfxTxeqT47qG19M/1iL5uP3zhwthXj5+4dzuKXdzHLSjb2eiPWC4egWO2j9WjiH+IFD9790j8Sz2iFp2v+HzEq2X+IOKt6BzvVJ4YpyLe3+Q84tFUiyL+pzz+Z9bSu/XyetC9rpz/WuMri+/0lu1eVx75+8Ne2ufXpoEo4ofVFX8t/avvawAAAAAAAAAAAAAAAIB9pIhfiRQvvXckVeODu4Oi59sz1xqXWpenO8P6umP/uqvX19fXG6mTzZwTOZdyLudcybmaM4pcP2ezzIH19Yn8finncs6VnKs5oy/Xz9nMOZFzKedyzpWcqzmjluvnbOacyLmUcznnSs7VnLFPxu4BAAAAAAAAAAAAAAAAAACPl6L6L8V3vrmW1uud+aUnopMr5gN97P1fAAAA//96jvT7")
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)
syz_usb_connect(0x0, 0xb, &(0x7f0000000000)=ANY=[], 0x0)
ioctl$BTRFS_IOC_ADD_DEV(r2, 0xc0085504, &(0x7f00000010c0)={{r2}, "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"})
mount(&(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='udf\x00', 0x3, 0x0)

13.898566652s ago: executing program 4 (id=1528):
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x141, 0x0)
write$sequencer(r0, &(0x7f0000000080)=[@s={0x5, @SEQ_MIDIPUTC=0xfd}], 0x4)

13.833423167s ago: executing program 4 (id=1530):
r0 = socket$inet6(0xa, 0x3, 0x5)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'macvlan0\x00', <r2=>0x0})
r3 = socket$netlink(0x10, 0x3, 0x0)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r4 = socket(0x2, 0x80805, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a010400000000000000000200000034000480300001800e000100696d6d6564696174650000001c0002800800014000000000100002800c00028008000180000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x88}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000016c40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a05000000000000000000020000000900010073797a30000000000900030073797a32"], 0xa908}}, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x6d, &(0x7f0000000080), &(0x7f00000000c0)=0x18)
r6 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0)
mmap(&(0x7f0000ff4000/0x9000)=nil, 0x9000, 0x1000000, 0x1010, r6, 0x143e000)
syz_usb_connect$cdc_ecm(0x0, 0x5c, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x4a, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x19, 0x2, 0x2, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x0, "9e0b0100b872"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x0, 0x40}}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff}}]}}}]}}]}}, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4080)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r7=>0x0})
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0)
r8 = socket$l2tp6(0xa, 0x2, 0x73)
r9 = dup2(r8, r0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2, 0x9}, 0x20)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r9, 0x29, 0x37, &(0x7f0000000100)=ANY=[], 0x30)
ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, &(0x7f0000000080)=0x5)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)

13.152380443s ago: executing program 1 (id=1533):
chdir(0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
fanotify_init(0x200, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r0, 0x0, 0x0)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000083ef0840e07d6e67db77000000a40902120001000000000904000000ef0101"], 0x0)

11.83811486s ago: executing program 3 (id=1534):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x88700a, 0x0)
syz_mount_image$fuse(&(0x7f0000000180), &(0x7f00000001c0)='./file0/file0\x00', 0x84000, &(0x7f0000000540)={{}, 0x2c, {}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}}, 0x0, 0x0, 0x0)

11.661920135s ago: executing program 3 (id=1536):
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1})
r1 = dup(r0)
mmap(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x2, 0x11, r1, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

10.649909908s ago: executing program 3 (id=1539):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x18, 0x1, 0x2, 0x101, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x4}]}, 0x18}}, 0x0)

10.176086047s ago: executing program 1 (id=1542):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000016c0), 0x2, 0x0)
io_setup(0x8, &(0x7f0000000000)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000001f80)=[&(0x7f0000001800)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}])
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0)
sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000007c0)={0x34, r3, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_IPV4MASK={0x5, 0x8, @multicast1}, @NLBL_MGMT_A_FAMILY={0x6}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x34}}, 0x0)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x3, 0x0, &(0x7f0000000280))
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r6, 0xc048aec8, &(0x7f00000004c0)={0x80000002, 0x0, 0x0, 0x0})
r7 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r8=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000100)={0x0, 0x0, r8, <r9=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f0000000440)={r9, 0x0, 0x0, 0x0, 0x0, [<r10=>0x0]})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc00c642d, &(0x7f0000000080)={r10})
syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00')
setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, 0xffffffffffffffff, 0x38)

10.092870503s ago: executing program 4 (id=1544):
io_uring_setup(0x253d, &(0x7f0000000200))
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r0 = syz_open_dev$radio(&(0x7f0000000040), 0x0, 0x2)
syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="043e751d7029f063dd8e2d6bf7da997e6509e8"], 0x24)
syz_emit_vhci(0x0, 0x102)
fcntl$lock(0xffffffffffffffff, 0x0, 0x0)
ioctl$VIDIOC_G_INPUT(r0, 0x80045626, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='mm_page_alloc\x00', r1}, 0x10)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x9, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x2, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xd, 0x8, &(0x7f00000000c0)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x90}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
syz_emit_vhci(&(0x7f00000006c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x11d}, @l2cap_cid_signaling={{0x119}, [@l2cap_disconn_rsp={{0x7, 0x5, 0x4}, {0x1ff, 0x845}}, @l2cap_conn_req={{0x2, 0x0, 0x4}, {0x3, 0xefe}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x7}}, @l2cap_info_rsp={{0xb, 0x2, 0xff}, {0x40, 0xff, "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"}}]}}, 0x122)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000003380)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl(r4, 0x8b2c, &(0x7f0000000040))
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
landlock_restrict_self(0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r5=>0xffffffffffffffff}, './file0/../file0\x00'})
openat$cgroup_ro(r5, 0x0, 0x26e1, 0x0)
creat(0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0xc0, 0x0)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x77359400}, {0x77359400}}, 0x0)
msgget$private(0x0, 0x0)
msgrcv(0x0, 0x0, 0x0, 0x0, 0x0)

9.816369666s ago: executing program 1 (id=1545):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x16, &(0x7f00000000c0), 0x1, 0x510c, &(0x7f0000005180)="$eJzs3U+IVWUfB/Dnzp1x5lVw7isEtsoikGrh4CYioqtMUFF0y8VgBE4tgnThJEi0EMQW/Vt4S4paSK6kFsksjKA2LqQwArehYS7cKAaSi3Yac8957pz7HO+5d0ZtTD8fmTnnOb/zPOe5l7O43+uccwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACEEF74/bNDVfVT16bPnJtp7jywZebyvul1p0OodbbX8vqOrc++8ua2HS9OxA6zL2fLRqPfkFnX81ljVc/GhX69P6+HEMaSAer58pk1pVGLq3vKA1a6fnH30U17mxuPH27Xr146e7L80lkwsdITWCn5eXVh8Vxqdn6PJHt024VTr9Zzimb90xPuX3kRAMCSTLU6i+7H0fwjbre9P60n7WbSbift+AmhXWwsRzbuqn7z3JDWV2iezSwqjPedZ1LP3/9uu5X2T9pJ1FjCPHt3zSPNRL95ziX1lZonAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ3kkbdHH6qqn7o2febcTHPngS0zl/dNrzsdQqOzvZaVa6vfP9z869utxw78uPmr4xeef6ye94vL0cLO4be48sRkCG8UKhfisBfXhtDqLXSa4cty4a3OynOxAAAAwN3k/s7vkW47i4NjPe1aJ03WOv+iLCxev7j76Ka9zY3HD7frVy+dPbn88Vp9xmvecLxuu7H4UysE4xh/0/EW63HXPaVxqqUjpnn+8fNTf1f1L+X/RnX+j++c/A8AAMDNkP/TcaoNyv/fvfbHJ1X9S/l/Q88hS/k/zjjm/5GwvPwPAAAAd7Lbnf+bpXGqDcr/4y+NfV3Vv5T/p4bL/6PFaceNv8YJ75oMYWrQ1AEAAIA+4v+7L361EPN69s1BmtefevTguarxSvm/OVz+H7ulrwoAAAC4GUe+2P5wVb2U/1vD5f/x2zprAAAAYCne+XDig6p6Kf/PDpf/V+fL/MqHrNNP8a8QDk2GMLGwMpcVfg7tp7sFAAAA4BaJOf3PT3f+ULVfKf/PVd//P97pIF7/33P/v9L1/4VCdte/J90YAAAAgHtR+Xr+eHv87MkF/Z6/P+z1/w/87+CrVccv5f/9w+X/enF5K5//BwAAAMvwX3v+3/bSONUG3f//vo/e/aWqfyn/t4fL/3G5pvjyTsT3573JENYvrOR3E/wmHm5XUpgfKxQ6WkmPbbFHXpgfLxQ65pIemydDeHBhZX/jei4r/D8W2kmPK2vzwpGkcDoW8vOhWziWFE7EM+3ztfl008L3sZBfYDEfr6BY070kIulxtV+PhcINe5ztHhwAAOCeEsNznmXHepshjbLztUE7rB60w8igHeqDdhhNdkh37Lc9zPYW4vb2mY1Le/7/keHyf3wrVmWLftf/h3j9f/5cw+71/7Ox0EgK87HQSu8Y0IrHyMLux/EYjVbe48r6bgEAAADuavF7gfoKzwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+Ye/eY+Sq7sOBn32O9+H1QvJTCL8o2SQ1jpt4vbbJQy1V1pSqEWmadUODqiiNjb0mixfs2KbEKETGJqIRgtIGKfmjCKMoqvkDagUikgLCRYojVB4RVVEAgUJriIJIKUlEmiDF1ey9Z/bOuTuPtb3GSz4fyTtn5nuedx6ec++dcwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgN8Nh79y1d82iz/82wuefu7i8cv2rb/45WsuOPPxECZmHu/Iwh391986/vM7z79r331rb7vn6IXv783L5fEwUP3Tmd+5LtZ6dGkI93aE0J0GVg1mgZ78/mCs7x2DIZwRZgO1EpP9WYm04fD9vhAOhNlArarv9YUwWAhc9MRDD95YTdzSF8LyEEIlbePZStZGXxo4pzcL9KeB7d1Z4FfHMrXAdzuzAJyw+GaovegPTdRnGJ67XIPXX89J69gbKx1eV0wMN873s/UL3KmC3vSBiRN62krVsSBKb4/D3m2L4N1W2s43e9qKX6TybyjHZkOV0LllcuumK6d3x0c6w+hoV6OaFuh5furVL22eT3rRvA5jB4ZPyuvwpseW39m18hOP3rNq+YsHP7D/pRPt5o8Km7SYXmiVkL/mFs3zGI37PFkEb7/St6QRX7pCCFs//3ufbBYvzf+Hm8//48s53nbW5Y61vj6Uzc3jI4Mx8cpQNjcHAACARWMx7DXdPvrAR5rVV5r/j7R3/D8e8s8n89loD4cwPpPYvyyEs2YezwJ3xOYuWRbCu2dSE/WB9UngcAhvn0msrFWVlFgSS4wkgZ8M5YHxJHAkBiaSwLdi4OYkcF0MHEoCm2PgcBI4PwbCVP04fn8oH0fbgb4Y2JhtxEPxLIRfDMXWkm31TK0qAACAkySfHfbU3y2c63CiGeL08lBfqwzxDOyGGSpJDekMtjatalhDd6saOlvVUBv33ubDL9Xc0arm0mkYHfUZbv3l33wqNFGa/481n/9X5uhIR+n4fwgbZv7G3J15ZLoW3zhRlwEAAAA4AQP/+/w3m8VL8//x9s7/j/tEugqZwyNxN8S2ZSGM1Qeyav+wHMiOeg/kAQAAAFgMasfja8fCp/Lb7BTtdD5dzj8xz/zxwP/4nPl7D9+/sVl/S/P/ifbO/++vv806cST24mvLQlhSCPwg9rIamDESAz/+aH0gH/+RuAFuiFXlJybUqrohltgYA2NJ4ECjEj+slTirPpA/WbXG99fGMZWXKAQAAADglIu7A+Jx+Xj+/3t+s/aqZuVK8/+N8zv/f2YeXDq9f3oghNXdIXSlPwx4pD9bGDAGBjvyxAP9WV1daVXX9odwXnVgaVXP5+v/d6drDD7Rl1UVA2e95+Cr51QT3+wLYXUx8ORnbv9gNbE7CdQa/8u+EN5VHW3a+HeWZI33pI1/fUkI7ywEalVdsiSEamO9aVUPVfLrGKRV/XMlhLcUArWqPlQJYU8AYJGK/5VuKT64a8/V2zZNT0/uXMBE3IffF7ZOTU+Obt4+vaXSoE9bkj7XLWN0bXlM7V755pl8iaJP371hsJ107XeCY8W28v34pRMH8/vxu1DPzDjX9tTdXZcO+X3vLTcRCt+kGg25c4GH3F+sZPZJLNUf8/eGgbDkyl2TO0e/uGn37p1rsr/tZl+b/Y2HmbJttSbdVv1z9a2Nl0fD1bISx7utVhQrWb378h2rd+25etXU5Zsunbx08oo1H1o7du7YurEPn7u6Oqqx7G+Loa6Yq+pkqMdub3NcJ3GoZ3cXKjkVnxoSEhKLLbF9YEXT/5NL8/8dzef/8VMnfvLn6zM0Ov4/HA/zZ4/PHubfGAMHysf/6/6XqB3/H250NL92YsBIEtgbA3sd5gcAAODNIU7y49w57pX+6crvvNisXGn+v7e93/+fpPX/a0vXX9homf+VscRYo/X/02X+a+v/7220/n+6zH9t/f8Db8D6/1fWAskm+YX1/wEAgDeDU7f+f8vl/dMLBJQytFzeP71AQClDy2X8271AwLzX/3/2P//qv0MTpfn/ze3N/y3cDwAAAKePL//ZVf+vWbw0/z/Q3vz/1K//Fxqd/z/SKDDRaGFA6/8BAACwSDVa/2/4+v7PNStXmv8fam/+H0+76KzLHWt9fShb0y6ka9q9MlT7yQAAAAAsDp1hdLSnzbx1K6OuP/42n8qXAm2WLnr+T47O7/z/w+3N/+t+l3HTY8vv7Fr5iUdfv2fV8hcPfmD/S7PH/wEAAICF0+5+CQAAAAAAAAAAAAAA4I33/H/sW9csXvr9f9gw83ij3//H6/7F3xe8tS53rLX1+n/5/Ys+fteemSULHxkK4b3FwLZ9284I+bX5VxQDD3525duqiX1pifufO/+FauJzaeBjq858rZo4LwlsjIskvj0NxKsqvrY0CcTlFf89DcTtcSgN9OaBry7NxtGRbqufDmbbqiPdVk8PhrCsEKhtq3sHszY60gHekgRqA/xCGogD/PM80Jn26q6BrFcxMBiL3jaQ9QoAgNNW/BbYE7ZOTU+Oxa/w8fbs7vrbqG7JsmvL1Xa02fwz+dJkn757w2A76a70u+jstcZ7QqU6hDWlr6vFLB0zozw5tbTYdG9tMORWq711NiiXmu+m6208or5sRKObt09v6Wk58HWts6ztbpllTWmyU8zSObNJ26iljb60MaI2t00bXY73O8PoaFeS6w9icDjUafWKaPf3+sV1/hq9Cop5rji6/1fN6ivN/4fbm/9XiuN6Lb8YwN54Zb2/W2aZfwAAAFhYX13/62/Ef5+6/uEnm+Utzf9H2pv/xz1Y+aHgbG/H4Xj9//3LQpi5tP5wFrgjNnfJshDePZOaiCWyC+pfGEuMZYE74g6TlbHExon6qpbEwKEk8JOhPHA4CRyJgXwvxcGQ78r5+6EQPjiT2lBfYkcsMZwEPhkDI0lgNAbGksDSGBhPAi8vzQMTSeDfYiBM1W+ru5fm2woAAGA+8nlWT/3dkM7zDnW3ytDRKkN/qwydrTJUWmVoNIp4/9sxQ09y8kpHIVNPWmtfUkspQ7wY/rz7VcoQflifMy1Yajqef1A736CjPsN9H+muhCZK8/+x9ub/2ZN5rL71I3H+P3v9vyzwg9i9r8VTx0di4McfrQ/kOwaOxMnuDbWqJvIS+aT9hlhiPAZGksCOGBhPAhs35IEDb6sP5DPtWuP7a41P5SUKAQAAADjl4g6CuJsmzv9v2/WVgWblSvP/8fbm/7G9gWJj18Vajy4N4d6O2d7UAqsGs0DcjzEYfx7/jsEQzijs4KiVmOzPSvQmDYfv92W/UO9Nq/peX/bjg3j/oiceevDGauKWvhCWF/a+1Np4tpK10ZcGzunNAv1pYHt3Foh7fmqB73ZmAThhtb2C8QWVn+pSMzx3uQavvzfLNUHT4ZX2gc6Rb67fXC2U0g7XfJ9qzfyetqb7bzlpSm+Pw95ti/HdNuzdVvwilX9DOTYbqoTOLZNbN105vTs+Uvwla8kCPc/FX6m2kz4Jr8O9x9/b1ippB8aSj4+xucvN/TrsiNXd9NjyO7tWfuLRe1Ytf/HgB/a/1HY3Gog/FH7omn8d/FFh8y60Sshfc4vu82TC58li/G9gxNMWQtjw8tdvaBYvzf8n2pv/dye3M34dN+auZSG8r7BxH4mb/4+XZZ+DhUD2KfmWciA75P5fQw0/OQEAAOBkq+3uqO0vmMpvsxPC03lyOf/EPPPH/RXjc+Zvt9/9f/3Z5c3ipfn/xubz/yVJNx3/d/yfBeL4/5xO913RS9IH9p7QruhSdSwIx//ndLq/2xz/n5Pj/47/z8Xx/xYc/5/T6f60lb4l7fClK4Tw4h898HSzeGn+v6O9+b/1/+ZetK+2/t/GRuv/7Wi0/t9e6/8BAAALqsFCc+k8r7R6XylDunpfKUPLBQJbLjFo/b95r//3wtnP/iY0UZr/721v/h9fDgPF1hfL+n8jGxpUdXMM7LAwIAAAAKejRjsIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeGPd9w//s6VZ/OHfXvD0cxePX7Zv/cUvX3PBmY+HMDXzeEcW7ui//tbxn995/l377lt72z1HL3x/JS/Xk9/+/7rcsdbXh0I4UHhkMCZeGaremQ1c9PG79nRXE48MhfDeYmDbvm1nVBPfGgphRTHw4GdXvq2a2JeWuP+581+oJj6XBj626szXqonzNnVm3Uy7+49Ls+52pN29cWkIywqBWncvW5q10ZG28ad5oDNt458GszZiYDAW/cZg1kYMTMcSU0tCWN0dQlda1cOVrKqutKp/qWRVdaVVfbkSwnkhhO60qud6s6q605E/3ptVFQNnvefgq+dUEwd6Q1hdDDz5mds/WE18IQnUGv+L3hDeVX3JpI1/uydrvCdt/JaeEN4ZQuhNS/yyOyvRm5Z4vjuEtxQCtcY/3x3CnsCbQvzwqftE27Xn6m2bpqcndy5gojdvqy9snZqeHN28fXpLJelTIx2F9LFrj3/sz7z6pc3V20/fvWGwnXR3Xq5npstre+rurjvdex/71V+sZPb5KNUf8/eGgbDkyl2TO0e/uGn37p1rsr/tZl+b/e3Ko9m2WtNkW3UV77zR22pFsZLVuy/fsXrXnqtXTV2+6dLJSyevWPOhtWPnjq0b+/C5q6ujGsv+tj/U0HCot5/6oZ7dXajkVHwAzC8RN8/p0h8Jid/FRGfdp9vY6f6fXumL/mxHe0Jl5gO6NK0oZumYGeXJGPT64xzx8XxPaTmiNaWJQynL2tZZ1pUmE7NZ+rIsM9/rSpPDYk2dM5s03u8Mo6NdjbbDcP3d4ub92Qls3qfyTdduGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4P3bgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04FgAAAAAQ5m8dRs8GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMClAAAA///9yyc9")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x0, 0xffffffff})

9.210791956s ago: executing program 4 (id=1546):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x88700a, 0x0)
syz_mount_image$fuse(&(0x7f0000000180), &(0x7f00000001c0)='./file0/file0\x00', 0x84000, &(0x7f0000000540)={{}, 0x2c, {}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}}, 0x0, 0x0, 0x0)

9.080549126s ago: executing program 4 (id=1547):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000004c0)='qdisc_create\x00', r0}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendto$inet6(r2, &(0x7f0000000240)='p', 0x1, 0x0, 0x0, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x883}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r3}]}}}]}, 0x38}}, 0x0)
sendto$inet6(r2, &(0x7f0000000280)="a431785ae033038224523d772b5e8aa8588a10b50352f59ce383de717fde1765eca11a3a63cbc8ae1e9874b70aa81a5ae0dd1c5aedf727b276ce28404a9e46588b9b30301f3af7f2d30792f4848eb4715e7b39c836081f479618bddecfcae5de89ff70dc32508d55d6fe3fbef7a2e55e2427be016981a751a2e159b22e94a2c1992833f582caf09273c5ef2cd881a6df3b06dbcae6b7afdda3693ea9a118f94f88d7360c4b3a3558e816099c87edd61d96fe4db968ee71356281db2ccaa09a83c5c94988b9ce003ae240c1ae3ab17c298d613f1c60c068968f69f988", 0xdc, 0x40095, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x3d, 0xa}, [@ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xff00}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d)
r7 = accept(r1, &(0x7f0000000440)=@ethernet={0x0, @remote}, &(0x7f0000000140)=0x80)
setsockopt$IP_VS_SO_SET_EDITDEST(r7, 0x0, 0x489, &(0x7f0000000800)={{0x2c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0x3, 'dh\x00', 0x10, 0x2, 0x1a}, {@multicast2, 0x4e23, 0x10000, 0x4, 0x1, 0x120000}}, 0x44)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001540)={r6, 0x123, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r8=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x2, &(0x7f0000000080)=@raw=[@map_val], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r9, r4}, 0x80)
r10 = syz_open_dev$vcsa(&(0x7f0000000400), 0x8, 0x0)
r11 = fsmount(0xffffffffffffffff, 0x0, 0x70)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_lsm={0x1d, 0x0, &(0x7f00000005c0), &(0x7f0000000600)='syzkaller\x00', 0xffff8000, 0x93, &(0x7f0000000640)=""/147, 0x41100, 0xa, '\x00', r8, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000740)={0x3, 0xf, 0x2, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[r10, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r11]}, 0x80)
dup2(r1, r2)
r12 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r12, 0x40286608, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x2, 0x0, 0x1000})
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000140), 0x1, 0x4e2, &(0x7f0000000b80)="$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")
read$FUSE(0xffffffffffffffff, &(0x7f0000006700)={0x2020}, 0x2020)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1000000201005)

8.67685597s ago: executing program 4 (id=1548):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x44, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x5, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xf2}}, 0x0)

7.739837276s ago: executing program 1 (id=1555):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f0000000400)=""/69, &(0x7f0000000180)=0x45)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x175}, 0x1c)
bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
r4 = socket$netlink(0x10, 0x3, 0x4)
writev(r4, &(0x7f00000000c0)=[{0x0}], 0x1)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0)
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
quotactl$Q_GETNEXTQUOTA(0xffffffff80000902, &(0x7f00000002c0)=@nullb, 0xee01, &(0x7f0000000380))
move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
umount2(&(0x7f00000000c0)='./file0/file0\x00', 0x1)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r6, 0xc02c564a, &(0x7f0000000140)={0x0, 0x47524247, 0x0, @stepwise})

6.629327687s ago: executing program 1 (id=1556):
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000400)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f00000000c0)=0x1)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

5.790185876s ago: executing program 1 (id=1559):
syz_init_net_socket$ax25(0x3, 0x3, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$inet_sctp(0x2, 0x0, 0x84)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="0000000000000000000016000000"], 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)=""/156, 0x9c}], 0x1}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009240)={&(0x7f0000001340)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {}, {0xb}}, [@filter_kind_options=@f_fw={{0x7}, {0x44, 0x2, [@TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x20000000}}]}]}}]}, 0x70}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

2.966782727s ago: executing program 0 (id=1566):
openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000f00)={'filter\x00', 0x7, 0x4, 0x410, 0x218, 0x110, 0x0, 0x328, 0x328, 0x110, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev, @rand_addr, @multicast2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x460)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
readv(r1, &(0x7f00000004c0)=[{&(0x7f0000000240)=""/18, 0x12}], 0x1)
ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xffffffff, 0x0, "f7ef9ffbd8e6700354ce0000000000e5ff00"})
ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x7, 0x0, "ffffde00"})
ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0))
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
socket$igmp6(0xa, 0x3, 0x3a)
shmget(0x2, 0x1000, 0x100, &(0x7f0000ffc000/0x1000)=nil)
shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x0)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000030000004c0001800d0001007564703a73797a310000020038000400200001000a00000000000000ff05000000000000000000000000000103000000140002000a"], 0x60}}, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x3, &(0x7f0000000140)={[{@nogrpid}, {@noload}, {@noload}]}, 0x1, 0x612, &(0x7f0000000740)="$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")

2.218552998s ago: executing program 0 (id=1568):
syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file1\x00', 0x4208, &(0x7f0000003240)=ANY=[], 0x2, 0x377, &(0x7f0000000840)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x105042, 0x0)
r1 = open(&(0x7f0000000180)='./bus\x00', 0xa37e, 0x0)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x46342, 0x0)
ftruncate(r2, 0x2088002)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8088e3ad122bc192, 0x4002011, r1, 0x0)
write$binfmt_aout(r2, &(0x7f0000001540), 0x20)
read(r0, &(0x7f0000000000), 0x2000)

2.068268851s ago: executing program 0 (id=1570):
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x71, 0x0)
ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0585605, &(0x7f0000000100)={0x1, 0x1, @raw_data=[0x0, 0x0, 0x1011]})

1.996209437s ago: executing program 0 (id=1571):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x2, 0x4, 0x4, 0x5, 0x1100}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)

1.921003703s ago: executing program 0 (id=1572):
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000040)=0x1000, 0x4)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0x80000039f8, 0x4)
sendto$inet6(r0, &(0x7f0000000000)="8d", 0x1, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=""/185, 0x10}}], 0x1, 0x12040, 0x0)

985.85608ms ago: executing program 0 (id=1576):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000082b6fe8e00000000008040008500000050000000a50000009700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x40)
r1 = dup2(r0, r0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0)
close(0xffffffffffffffff)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000540)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="0000050000"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0003020000000003"], 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000000280)={0x24, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000312"], 0x0, 0x0}, 0x0)

968.824661ms ago: executing program 2 (id=1577):
syz_mount_image$minix(&(0x7f0000000040), &(0x7f0000000140)='./file1\x00', 0x42, &(0x7f0000000540)=ANY=[], 0xd, 0x1a4, &(0x7f0000000640)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000080)=0x2000800)

841.315471ms ago: executing program 2 (id=1578):
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x71, 0x0)
ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0585605, &(0x7f0000000100)={0x1, 0x1, @raw_data=[0x0, 0x0, 0x1011]})

751.068039ms ago: executing program 2 (id=1579):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x2, 0x4, 0x4, 0x5, 0x1100}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)

590.923652ms ago: executing program 2 (id=1580):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x15}, 0x48)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'wg0\x00', <r3=>0x0})
sendto$packet(r2, &(0x7f0000000180)="0b03feffe0ff020002004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14)

242.28645ms ago: executing program 2 (id=1581):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000))
mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000000)={[{@huge_advise}]})
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0)
ftruncate(r0, 0x8001)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000001300), 0x4)

0s ago: executing program 2 (id=1582):
unshare(0x20000400)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000069122400000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x4000)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$tipc(r0, &(0x7f0000000540)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
pselect6(0x40, &(0x7f00000001c0)={0x9}, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", "4617a9f6040839230fb7fead776dd8dc", "a83370a1", "a435889722b66244"}, 0x28)
poll(0x0, 0x0, 0xf49)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000004c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="00000000bd4cd6b4f3969924218e83cb90d215ba2839632bb70662205903a3a1dde2cd956dd5e6eea729d1cd986d9e3ca28c7aef116e4ddd8fa94d36227d65db2c2d143d2b44d17b90f048795c06100e8861382ba79bf1362a5d9cea74af8b480ef1f32c15cf41a6c59b185e893a9fcd5f364abd748a9198e9f4c1db001fcee48629017bb91daf0d302bcb3284d2bfdbc0cb01a12c", @ANYRES16, @ANYBLOB="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"], 0x1c4}, 0x1, 0x0, 0x0, 0x4040884}, 0x20000040)
setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000580)={0x4000, {{0x2, 0x4e24, @loopback}}, {{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x108)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$alg(0x26, 0x5, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r0, &(0x7f0000000140)="6b32843b92c113892bb3ecbee91537c694ff2c4c30bab3442d209d5b2da4553bd526ee6fd8de867201935da6bd61fdd2b073f569c1beef", 0x37, 0x1, &(0x7f0000000500)={0xa, 0x4e21, 0x800, @remote, 0x3}, 0x1c)
getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x8, 0x0, 0x7}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYRESOCT=r3, @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

kernel console output (not intermixed with test programs):

T4016] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  275.646020][ T8069] EXT4-fs (loop3): free_blocks=0
[  275.661079][ T8069] EXT4-fs (loop3): dirty_blocks=48
[  275.673315][ T7954] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  275.686581][ T8069] EXT4-fs (loop3): Block reservation details
[  275.738613][ T8069] EXT4-fs (loop3): i_reserved_data_blocks=3
[  276.032184][ T8001] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  276.191662][ T8084] loop4: detected capacity change from 0 to 1764
[  276.271261][ T3823] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  276.282259][ T8001] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  276.541862][ T8001] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  276.755898][ T8001] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  276.792610][ T1077] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  276.810372][ T1077] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  276.932412][ T7954] 8021q: adding VLAN 0 to HW filter on device batadv0
[  276.951239][ T3823] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  276.974008][ T3823] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  277.010660][ T1077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  277.031683][ T1077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  277.045570][ T3823] usb 1-1: Product: syz
[  277.068936][ T3823] usb 1-1: Manufacturer: syz
[  277.094121][ T3823] usb 1-1: SerialNumber: syz
[  277.241724][ T3823] usb 1-1: config 0 descriptor??
[  277.263191][ T7954] device veth0_vlan entered promiscuous mode
[  277.271257][ T1077] Bluetooth: hci7: command 0x0419 tx timeout
[  277.292737][ T3823] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 008
[  277.302897][ T4613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  277.311778][ T4613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  277.432360][ T8093] binder: 8090:8093 ioctl 4018620d 0 returned -22
[  277.504172][ T8093] loop4: detected capacity change from 0 to 1024
[  278.006466][ T8095] loop3: detected capacity change from 0 to 512
[  278.009289][ T8001] 8021q: adding VLAN 0 to HW filter on device bond0
[  278.064174][ T1077] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  278.098597][ T8093] hfsplus: invalid attributes max_key_len 768
[  278.101260][ T8095] EXT4-fs (loop3): Ignoring removed nobh option
[  278.105045][ T8093] hfsplus: failed to load attributes file
[  278.113449][ T1077] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  278.157139][ T8095] fscrypt (loop3, inode 2): Error -61 getting encryption context
[  278.170476][ T7954] device veth1_vlan entered promiscuous mode
[  278.198090][ T4613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  278.254473][ T4613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  278.308571][ T8095] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -61
[  278.311640][ T8001] 8021q: adding VLAN 0 to HW filter on device team0
[  278.327188][ T8095] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #13: comm syz.3.1007: casefold flag without casefold feature
[  278.404966][ T8001] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  278.439762][ T8095] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #13: comm syz.3.1007: unexpected EA_INODE flag
[  278.451572][ T8001] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  278.474708][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  278.502366][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  278.518702][ T8095] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.1007: couldn't read orphan inode 13 (err -117)
[  278.551693][ T3617] bridge0: port 1(bridge_slave_0) entered blocking state
[  278.558806][ T3617] bridge0: port 1(bridge_slave_0) entered forwarding state
[  278.579013][ T8095] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,nouid32,nobh,bsdgroups,block_validity,grpjquota=",errors=continue. Quota mode: writeback.
[  278.606141][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  278.644192][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  278.679898][ T8095] fscrypt (loop3, inode 2): Error -61 getting encryption context
[  278.680736][ T3617] bridge0: port 2(bridge_slave_1) entered blocking state
[  278.694787][ T3617] bridge0: port 2(bridge_slave_1) entered forwarding state
[  278.750291][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  278.772615][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  278.801294][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  278.831611][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  278.850444][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  278.869278][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  278.888056][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  278.908241][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  278.928711][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  278.937301][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  278.960212][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  278.989096][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  278.997038][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  279.020124][ T7954] device veth0_macvtap entered promiscuous mode
[  279.026596][ T3823]  (null): failure reading functionality
[  279.064972][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  279.074118][ T3823] i2c i2c-1: failure reading functionality
[  279.082625][ T3823] i2c i2c-1: connected i2c-tiny-usb device
[  279.099438][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  279.126116][ T3823] usb 1-1: USB disconnect, device number 8
[  279.144249][ T7954] device veth1_macvtap entered promiscuous mode
[  279.203659][ T3822] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  279.224553][ T8105] loop3: detected capacity change from 0 to 256
[  279.233304][ T7954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  279.270969][ T7954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  279.300519][ T7954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  279.321043][ T8108] loop4: detected capacity change from 0 to 2048
[  279.332074][ T7954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  279.352715][ T7954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  279.381349][ T7954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  279.400976][ T7954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  279.422286][ T7954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  279.440973][ T7954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  279.471049][ T7954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  279.491059][ T7954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  279.511008][ T7954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  279.533100][ T7954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  279.551031][ T7954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  279.573115][ T7954] batman_adv: batadv0: Interface activated: batadv_slave_0
[  279.582562][ T8105] exfat: Deprecated parameter 'utf8'
[  279.594717][ T7954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  279.609710][ T8105] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xc61f63e4, utbl_chksum : 0xe619d30d)
[  279.640973][ T7954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  279.677827][ T8108] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  279.691377][ T7954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  279.762707][ T7954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  279.840475][ T7954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  280.501007][ T7954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  280.537136][ T7954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  280.554417][ T7954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  280.575900][ T7954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  280.596398][ T7954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  280.619315][ T7954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  280.639894][ T7954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  280.649919][ T7954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  280.670767][ T7954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  280.697498][ T7954] batman_adv: batadv0: Interface activated: batadv_slave_1
[  280.792122][ T3823] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  280.800888][ T3823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  280.806045][ T8114] loop4: detected capacity change from 0 to 128
[  280.835992][ T3823] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  280.861921][ T3823] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  280.975223][ T7954] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  281.041666][ T7954] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  281.050383][ T7954] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  281.073171][ T7954] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  281.148529][ T4613] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  281.159014][ T4613] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  281.191070][ T3823] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  281.235097][ T8001] 8021q: adding VLAN 0 to HW filter on device batadv0
[  281.356737][ T4613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  281.372483][ T4613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  281.420640][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  281.446083][ T4613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  281.472181][ T4613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  281.483818][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  281.503226][ T8001] device veth0_vlan entered promiscuous mode
[  281.531778][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  281.543048][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  281.577626][ T8001] device veth1_vlan entered promiscuous mode
[  281.600371][ T3764] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  281.601191][ T4613] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  281.641227][ T3823] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  281.641268][ T3764] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  281.649914][ T3823] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  281.661756][ T4613] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  281.721825][ T4613] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  281.745708][ T3823] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[  281.781739][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  281.789880][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  281.791017][ T3823] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  281.850376][ T3823] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  281.851513][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  282.001155][ T3823] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  282.040116][ T8001] device veth0_macvtap entered promiscuous mode
[  282.056330][ T3823] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  282.071284][ T4613] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  282.101037][ T3823] usb 1-1: Product: syz
[  282.110975][ T3823] usb 1-1: Manufacturer: syz
[  282.150132][ T8123] netlink: 12 bytes leftover after parsing attributes in process `syz.2.962'.
[  282.811924][ T3823] cdc_wdm 1-1:1.0: skipping garbage
[  282.817166][ T3823] cdc_wdm 1-1:1.0: skipping garbage
[  282.829639][ T8001] device veth1_macvtap entered promiscuous mode
[  282.900232][ T8001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  282.902400][ T3823] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[  282.916674][ T3823] cdc_wdm 1-1:1.0: Unknown control protocol
[  282.925844][ T3823] usb 1-1: USB disconnect, device number 9
[  283.025744][ T8001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  283.062852][ T8001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  283.091616][ T8001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  283.120993][ T8001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  283.162222][ T8001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  283.201009][ T8001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  283.237534][ T8001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  283.301048][ T8001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  283.331488][ T8001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  283.361011][ T8001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  283.401683][ T8001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  283.450984][ T8001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  283.491601][ T8001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  283.522362][ T8001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  283.551096][ T8001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  283.583548][ T8001] batman_adv: batadv0: Interface activated: batadv_slave_0
[  283.592879][ T3823] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  283.611774][ T3823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  283.653814][ T8001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  283.701098][ T8001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  283.741202][ T8001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  283.792241][ T8001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  283.820995][ T8001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  283.861022][ T8001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  283.870847][ T8001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  283.943254][ T8001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  283.976747][ T8001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  284.015297][ T8001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  284.045696][ T8001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  284.081066][ T8001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  284.118315][ T8001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  284.151089][ T8001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  284.196600][ T8001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  284.218272][ T8001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  284.242618][ T8001] batman_adv: batadv0: Interface activated: batadv_slave_1
[  284.281709][ T4613] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  284.329571][ T4613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  284.365626][ T8001] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  284.430022][ T8001] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  284.475210][ T8001] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  284.510979][ T8001] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  285.441673][ T8125] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  285.449968][ T8125] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  285.511297][ T3823] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  285.585982][ T1244] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  285.632629][ T1244] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  285.671888][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  285.679849][ T4016] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  286.312165][ T4016] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  286.428407][ T4016] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  286.463234][ T4016] usb 5-1: Product: syz
[  286.473160][ T4016] usb 5-1: Manufacturer: syz
[  286.483217][ T4016] usb 5-1: SerialNumber: syz
[  286.532796][ T4016] usb 5-1: config 0 descriptor??
[  286.582664][ T4016] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 015
[  286.879523][ T3823] hid-generic 0000:0000:0000.0008: unknown main item tag 0xe
[  286.918000][ T3823] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  286.970695][ T3823] hid-generic 0000:0000:0000.0008: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  287.186688][ T8191] netlink: 'syz.1.1032': attribute type 4 has an invalid length.
[  288.082224][ T4016]  (null): failure reading functionality
[  288.153505][ T4016] i2c i2c-1: failure reading functionality
[  288.183127][ T4016] i2c i2c-1: connected i2c-tiny-usb device
[  288.201245][ T4016] usb 5-1: USB disconnect, device number 15
[  289.048769][ T3823] hid-generic 0000:0000:0000.0009: unknown main item tag 0xe
[  289.072454][ T8219] loop4: detected capacity change from 0 to 2048
[  289.078979][ T3823] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  289.106040][ T3823] hid-generic 0000:0000:0000.0009: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  289.139664][ T8219] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  289.186354][ T8219] 9pnet: Insufficient options for proto=fd
[  291.151070][ T3613] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  291.167295][ T8246] loop4: detected capacity change from 0 to 32768
[  291.287109][ T8246] XFS (loop4): Mounting V5 Filesystem
[  291.411171][ T3613] usb 1-1: Using ep0 maxpacket: 32
[  291.499011][ T8246] XFS (loop4): Ending clean mount
[  291.556947][ T8246] XFS (loop4): Quotacheck needed: Please wait.
[  291.655857][ T3613] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7
[  291.668301][ T3613] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  292.104074][ T8246] XFS (loop4): Quotacheck: Done.
[  292.212598][ T3613] usb 1-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=d2.a2
[  292.230566][ T3613] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  292.251038][ T3613] usb 1-1: Product: syz
[  292.255239][ T3613] usb 1-1: Manufacturer: syz
[  292.259984][ T3613] usb 1-1: SerialNumber: syz
[  292.373421][ T7004] XFS (loop4): Unmounting Filesystem
[  292.473911][ T3613] usb 1-1: config 0 descriptor??
[  292.524441][ T3613] keyspan 1-1:0.0: Keyspan 1 port adapter converter detected
[  292.923681][ T8270] chnl_net:caif_netlink_parms(): no params data found
[  293.313508][ T3613] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 87
[  293.324653][ T3613] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 7
[  293.333568][ T3613] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 81
[  293.341766][ T3613] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 1
[  293.349327][ T3613] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 2
[  293.391159][ T3613] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 85
[  293.411542][ T3617] Bluetooth: hci8: command 0x0409 tx timeout
[  293.437953][ T3613] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[  293.507623][ T3613] usb 1-1: USB disconnect, device number 10
[  293.560348][ T3613] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[  293.584773][ T3613] keyspan 1-1:0.0: device disconnected
[  293.644998][ T8270] bridge0: port 1(bridge_slave_0) entered blocking state
[  293.692322][ T8270] bridge0: port 1(bridge_slave_0) entered disabled state
[  293.735269][ T8270] device bridge_slave_0 entered promiscuous mode
[  293.782522][ T8270] bridge0: port 2(bridge_slave_1) entered blocking state
[  293.811642][ T8270] bridge0: port 2(bridge_slave_1) entered disabled state
[  293.866892][ T8270] device bridge_slave_1 entered promiscuous mode
[  293.976235][ T8270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  294.051815][ T8270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  294.219378][ T8270] team0: Port device team_slave_0 added
[  294.282738][ T8270] team0: Port device team_slave_1 added
[  294.381383][ T8270] batman_adv: batadv0: Adding interface: batadv_slave_0
[  294.388340][ T8270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  294.511084][ T8270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  294.576186][ T8270] batman_adv: batadv0: Adding interface: batadv_slave_1
[  294.592905][ T8270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  294.680983][ T8270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  294.799221][ T8270] device hsr_slave_0 entered promiscuous mode
[  294.811173][ T3729] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  294.852000][ T8270] device hsr_slave_1 entered promiscuous mode
[  294.877773][ T8270] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  294.903272][ T8270] Cannot create hsr debugfs directory
[  295.361391][ T3729] usb 3-1: config 0 has an invalid interface number: 32 but max is 0
[  295.380367][ T3729] usb 3-1: config 0 has no interface number 0
[  295.481222][ T3729] usb 3-1: config 0 interface 32 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  295.571193][ T3729] usb 3-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  295.620591][ T3617] Bluetooth: hci8: command 0x041b tx timeout
[  295.662605][ T3729] usb 3-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00
[  295.691567][ T3729] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  295.728232][ T3729] usb 3-1: config 0 descriptor??
[  296.324482][ T8270] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  296.421747][ T3729] logitech-djreceiver 0003:046D:C71B.000A: unknown main item tag 0x0
[  296.654402][ T3729] logitech-djreceiver 0003:046D:C71B.000A: unknown main item tag 0x0
[  296.671012][ T3729] logitech-djreceiver 0003:046D:C71B.000A: unknown main item tag 0x0
[  296.689408][ T3729] logitech-djreceiver 0003:046D:C71B.000A: unknown main item tag 0x0
[  296.709681][ T3729] logitech-djreceiver 0003:046D:C71B.000A: unknown main item tag 0x0
[  296.729960][ T3729] logitech-djreceiver 0003:046D:C71B.000A: unknown main item tag 0x0
[  296.761025][ T3729] logitech-djreceiver 0003:046D:C71B.000A: unknown main item tag 0x0
[  296.789959][ T3729] logitech-djreceiver 0003:046D:C71B.000A: hidraw0: USB HID v0.00 Device [HID 046d:c71b] on usb-dummy_hcd.2-1/input32
[  296.798881][ T8344] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1081'.
[  296.832375][ T3729] usb 3-1: USB disconnect, device number 7
[  297.022514][ T8339] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1078'.
[  297.196928][ T8270] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  297.316911][ T8270] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  297.362564][ T3576] Bluetooth: Wrong link type (-22)
[  297.383202][ T8358] netlink: 'syz.4.1087': attribute type 1 has an invalid length.
[  297.462246][ T8358] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1087'.
[  297.553292][ T8270] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  297.589169][ T8355] netlink: 'syz.1.1083': attribute type 4 has an invalid length.
[  297.598506][ T8355] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1083'.
[  297.651094][ T3822] Bluetooth: hci8: command 0x040f tx timeout
[  297.852834][ T8373] delete_channel: no stack
[  298.042234][ T8270] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  298.093919][ T8270] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  298.139410][ T8270] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  298.192738][ T8270] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  298.421296][ T8270] 8021q: adding VLAN 0 to HW filter on device bond0
[  298.474672][ T3823] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  298.502207][ T3823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  298.514482][ T8270] 8021q: adding VLAN 0 to HW filter on device team0
[  298.531731][ T1077] Bluetooth: hci4: command 0x0406 tx timeout
[  298.533604][ T3823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  298.564414][ T3823] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  298.594911][ T3823] bridge0: port 1(bridge_slave_0) entered blocking state
[  298.602047][ T3823] bridge0: port 1(bridge_slave_0) entered forwarding state
[  298.639210][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  298.648682][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  298.685454][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  298.716350][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  298.723597][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  298.771941][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  298.824896][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  298.862714][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  298.899361][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  298.953224][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  299.609237][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  299.699926][ T8270] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  299.738122][ T4016] Bluetooth: hci8: command 0x0419 tx timeout
[  299.754911][ T8270] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  299.789019][ T8405] loop4: detected capacity change from 0 to 1764
[  299.848502][ T8407] delete_channel: no stack
[  299.866375][ T3823] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  299.887721][ T3823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  299.936133][ T3823] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  299.979639][ T3823] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  300.118545][ T3823] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  300.148953][ T4171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  300.166280][ T8415] exFAT-fs (nullb0): invalid boot record signature
[  300.172830][ T8415] exFAT-fs (nullb0): failed to read boot sector
[  300.179085][ T8415] exFAT-fs (nullb0): failed to recognize exfat type
[  300.455519][ T4171] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  300.491871][ T4171] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  300.505158][ T8270] 8021q: adding VLAN 0 to HW filter on device batadv0
[  300.644568][ T4171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  300.662014][ T4171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  300.704274][ T3823] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  300.712643][ T3823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  300.731858][ T8270] device veth0_vlan entered promiscuous mode
[  300.741102][ T4171] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  300.761741][ T4171] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  300.791605][ T8270] device veth1_vlan entered promiscuous mode
[  300.894368][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  300.983694][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  301.014811][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  301.047331][ T8270] device veth0_macvtap entered promiscuous mode
[  301.089820][ T8270] device veth1_macvtap entered promiscuous mode
[  301.147493][ T8270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  301.194285][ T8270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  301.231098][ T8270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  301.281071][ T8270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  301.300968][ T8270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  301.311571][ T3613] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  301.312996][ T8270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  301.350097][ T8270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  301.363490][ T8270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  301.389298][ T8270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  301.419050][ T8270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  301.451241][ T8270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  301.469068][ T8270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  301.509414][ T8270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  301.542660][ T8270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  301.584871][ T8270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  301.621145][ T8270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  301.660972][ T8270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  301.671209][ T3613] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  301.680956][ T8270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  301.689933][ T3613] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9
[  301.711448][ T8270] batman_adv: batadv0: Interface activated: batadv_slave_0
[  301.719427][ T3613] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  301.724342][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  301.761882][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  301.781768][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  301.785682][ T3613] usb 1-1: config 0 descriptor??
[  301.821585][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  301.834163][ T8270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  301.862897][ T3613] gspca_main: spca561-2.14.0 probing abcd:cdee
[  301.869907][ T8270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  301.901146][ T8270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  301.921426][ T8270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  301.951754][ T8270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  301.980962][ T8270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  302.002467][ T8270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  302.025702][ T8270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  302.041559][ T8270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  302.061095][ T8270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  302.087259][ T8270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  302.112708][ T8270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  302.135213][ T8270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  302.155414][ T8270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  302.176178][ T8270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  302.227549][ T8270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  302.248618][ T8270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  302.270285][ T8270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  302.307178][ T8270] batman_adv: batadv0: Interface activated: batadv_slave_1
[  302.336754][ T4171] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  302.372471][ T4171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  302.399413][ T8270] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  302.417365][ T8270] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  302.451133][ T3613] spca561: probe of 1-1:0.0 failed with error -22
[  302.460213][ T3613] usb 1-1: MIDIStreaming interface descriptor not found
[  302.586694][ T8270] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  302.606511][ T8270] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  302.638781][ T8462] exFAT-fs (nullb0): invalid boot record signature
[  302.645472][ T8462] exFAT-fs (nullb0): failed to read boot sector
[  302.651906][ T8462] exFAT-fs (nullb0): failed to recognize exfat type
[  302.728639][   T13] usb 1-1: USB disconnect, device number 11
[  303.075168][ T5842] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  303.155755][ T8469] trusted_key: encrypted_key: key user:syz not found
[  303.161393][ T8469] kernel read not supported for file / 
 (pid: 8469 comm: syz.0.1123)
[  303.701100][   T25] audit: type=1800 audit(1722472196.035:169): pid=8469 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1123" name=2001 dev="mqueue" ino=54856 res=0 errno=0
[  303.744066][ T5842] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  303.775142][ T8467] bridge0: port 2(bridge_slave_1) entered disabled state
[  303.786453][ T8467] bridge0: port 1(bridge_slave_0) entered disabled state
[  303.982689][ T3823] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  304.026845][ T8478] binder: BINDER_SET_CONTEXT_MGR already set
[  304.043936][ T8478] binder: 8477:8478 ioctl 4018620d 20000040 returned -16
[  304.050172][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  304.119978][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  304.198959][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  305.467671][ T1077] hid-generic 0000:0000:0000.000B: unknown main item tag 0xe
[  305.499611][ T1077] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  305.604535][ T1077] hid-generic 0000:0000:0000.000B: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  305.767091][ T8493] netlink: 'syz.3.1062': attribute type 4 has an invalid length.
[  306.055057][ T8507] overlayfs: missing 'workdir'
[  306.459151][ T8511] exFAT-fs (nullb0): invalid boot record signature
[  306.465699][ T8511] exFAT-fs (nullb0): failed to read boot sector
[  306.472032][ T8511] exFAT-fs (nullb0): failed to recognize exfat type
[  308.498841][ T8536] loop4: detected capacity change from 0 to 32768
[  308.546870][ T8536] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  308.555134][ T8536] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  308.567252][ T8536] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms
[  308.576106][ T3617] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  308.582980][ T3617] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  308.708829][ T3617] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 125ms
[  308.728905][ T3617] gfs2: fsid=syz:syz.0: jid=0: Done
[  308.736796][ T8536] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  308.899147][ T8536] ODEBUG: Out of memory. ODEBUG disabled
[  309.412277][ T8536] syz.4.1142 (8536): drop_caches: 2
[  309.419870][ T8536] syz.4.1142 (8536): drop_caches: 2
[  309.906582][ T3822] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  310.118885][ T8547] [U] V�3��Fپ"S��/��4:�XTZ�W�T��LW��=
[  310.173665][ T8547] [U] J"�E:��"


[  310.178645][ T8547] [U] ���
[  310.221525][ T3822] usb 1-1: Using ep0 maxpacket: 16
[  310.231115][ T3729] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  310.351357][ T3822] usb 1-1: config 0 has too many interfaces: 98, using maximum allowed: 32
[  310.371145][ T3822] usb 1-1: config 0 has an invalid interface number: 153 but max is 97
[  310.454808][ T3822] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 98
[  310.491676][ T3822] usb 1-1: config 0 has no interface number 0
[  310.791241][ T3729] usb 4-1: config 0 has an invalid interface number: 32 but max is 0
[  310.847545][ T3729] usb 4-1: config 0 has no interface number 0
[  310.997683][ T3729] usb 4-1: config 0 interface 32 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  311.175744][ T8557] overlayfs: failed to resolve './file0': -2
[  311.188540][ T3729] usb 4-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  311.242300][ T8567] loop4: detected capacity change from 0 to 164
[  311.261787][ T3729] usb 4-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00
[  311.293656][ T3729] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  311.330669][ T3027] udevd[3027]: worker [3811] terminated by signal 33 (Unknown signal 33)
[  311.356469][ T3729] usb 4-1: config 0 descriptor??
[  311.371326][ T3027] udevd[3027]: worker [3811] failed while handling '/devices/virtual/block/loop4'
[  311.372176][ T3822] usb 1-1: New USB device found, idVendor=1199, idProduct=0025, bcdDevice=1e.64
[  311.428351][ T3822] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  311.461004][ T3822] usb 1-1: Product: syz
[  311.465219][ T3822] usb 1-1: Manufacturer: syz
[  311.469813][ T3822] usb 1-1: SerialNumber: syz
[  311.527877][ T3822] usb 1-1: config 0 descriptor??
[  311.582089][ T3822] sierra 1-1:0.153: Sierra USB modem converter detected
[  311.723056][ T3822] usb 1-1: USB disconnect, device number 12
[  311.729341][ T3822] sierra 1-1:0.153: device disconnected
[  311.871012][   T13] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  311.987970][ T3729] logitech-djreceiver 0003:046D:C71B.000C: unknown main item tag 0x0
[  311.996350][ T3729] logitech-djreceiver 0003:046D:C71B.000C: unknown main item tag 0x0
[  312.004596][ T3729] logitech-djreceiver 0003:046D:C71B.000C: unknown main item tag 0x0
[  312.013142][ T3729] logitech-djreceiver 0003:046D:C71B.000C: unknown main item tag 0x0
[  312.021270][ T3729] logitech-djreceiver 0003:046D:C71B.000C: unknown main item tag 0x0
[  312.029343][ T3729] logitech-djreceiver 0003:046D:C71B.000C: unknown main item tag 0x0
[  312.037720][ T3729] logitech-djreceiver 0003:046D:C71B.000C: unknown main item tag 0x0
[  312.088653][ T3729] logitech-djreceiver 0003:046D:C71B.000C: hidraw0: USB HID v0.00 Device [HID 046d:c71b] on usb-dummy_hcd.3-1/input32
[  312.727794][ T3729] usb 4-1: USB disconnect, device number 13
[  312.984063][   T13] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  313.055563][ T8597] tmpfs: Cannot retroactively limit inodes
[  313.081233][   T13] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  313.109358][ T8599] loop4: detected capacity change from 0 to 164
[  313.121056][   T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  313.146169][   T13] usb 3-1: SerialNumber: syz
[  313.222011][   T13] usb 3-1: bad CDC descriptors
[  313.357180][ T8608] netlink: 'syz.1.1168': attribute type 4 has an invalid length.
[  313.432905][ T8611] netlink: 'syz.1.1168': attribute type 4 has an invalid length.
[  313.462056][   T13] usb 3-1: USB disconnect, device number 8
[  313.631124][ T4016] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  313.991185][ T4016] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  314.000866][ T4016] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9
[  314.071009][ T4016] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  314.101730][ T4016] usb 1-1: config 0 descriptor??
[  314.143589][ T4016] gspca_main: spca561-2.14.0 probing abcd:cdee
[  314.492245][ T4171] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  314.657855][ T8610] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1169'.
[  314.721201][ T4016] spca561: probe of 1-1:0.0 failed with error -22
[  314.802427][ T4016] usb 1-1: MIDIStreaming interface descriptor not found
[  314.961165][ T4016] usb 1-1: USB disconnect, device number 13
[  314.981113][ T4171] usb 3-1: config 0 has an invalid interface number: 32 but max is 0
[  314.999496][ T4171] usb 3-1: config 0 has no interface number 0
[  315.623391][ T4171] usb 3-1: config 0 interface 32 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  315.635832][ T4171] usb 3-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  315.646077][ T4171] usb 3-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00
[  315.657912][ T4171] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  315.742735][ T4171] usb 3-1: config 0 descriptor??
[  315.916330][ T8663] loop4: detected capacity change from 0 to 256
[  315.970400][ T8663] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  316.004515][ T8663] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe622a5da, utbl_chksum : 0xe619d30d)
[  316.061310][ T8663] vhci_hcd: invalid port number 0
[  316.151131][ T3613] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  316.243782][ T4171] logitech-djreceiver 0003:046D:C71B.000D: unknown main item tag 0x0
[  316.272223][ T4171] logitech-djreceiver 0003:046D:C71B.000D: unknown main item tag 0x0
[  316.291376][ T4171] logitech-djreceiver 0003:046D:C71B.000D: unknown main item tag 0x0
[  316.334835][ T4171] logitech-djreceiver 0003:046D:C71B.000D: unknown main item tag 0x0
[  316.341243][ T8673] hfs: can't find a HFS filesystem on dev nullb0
[  316.361096][ T4171] logitech-djreceiver 0003:046D:C71B.000D: unknown main item tag 0x0
[  316.400859][ T4171] logitech-djreceiver 0003:046D:C71B.000D: unknown main item tag 0x0
[  316.431024][ T4171] logitech-djreceiver 0003:046D:C71B.000D: unknown main item tag 0x0
[  316.460613][ T4171] logitech-djreceiver 0003:046D:C71B.000D: hidraw0: USB HID v0.00 Device [HID 046d:c71b] on usb-dummy_hcd.2-1/input32
[  316.502813][ T4171] usb 3-1: USB disconnect, device number 9
[  316.880431][ T3613] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  317.093310][ T1389] ieee802154 phy0 wpan0: encryption failed: -22
[  317.124549][ T1389] ieee802154 phy1 wpan1: encryption failed: -22
[  317.701201][ T3613] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  317.710503][ T3613] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  317.718920][ T3613] usb 4-1: SerialNumber: syz
[  317.777409][ T3613] usb 4-1: bad CDC descriptors
[  318.386629][ T3609] usb 4-1: USB disconnect, device number 14
[  319.231921][ T8704] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1202'.
[  319.552822][ T8714] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  319.648626][ T8723] loop4: detected capacity change from 0 to 512
[  319.780628][ T8723] EXT4-fs (loop4): 1 truncate cleaned up
[  319.802689][ T8723] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,,errors=continue. Quota mode: none.
[  319.821754][ T8728] netlink: 'syz.1.1210': attribute type 7 has an invalid length.
[  321.297802][ T8757] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1217'.
[  323.631112][ T3822] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  323.805259][ T8796] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  323.891078][ T3822] usb 4-1: Using ep0 maxpacket: 16
[  324.004634][ T8802] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1228'.
[  324.021280][ T3822] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0
[  324.044898][ T3822] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  324.062161][ T8802] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1228'.
[  324.084288][ T8802] netlink: 'syz.0.1228': attribute type 1 has an invalid length.
[  324.241330][ T3822] usb 4-1: New USB device found, idVendor=0742, idProduct=2009, bcdDevice=ec.06
[  324.254693][ T3822] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  324.272926][ T3822] usb 4-1: Product: syz
[  324.282839][ T3822] usb 4-1: Manufacturer: syz
[  324.310211][ T3822] usb 4-1: SerialNumber: syz
[  324.325261][ T3822] usb 4-1: config 0 descriptor??
[  324.403056][ T3822] HFC-S_USB: probe of 4-1:0.0 failed with error -5
[  324.451249][ T4016] Bluetooth: hci1: command 0x0406 tx timeout
[  324.637461][ T3822] usb 4-1: USB disconnect, device number 15
[  325.983297][ T3823] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  326.183518][ T8832] tmpfs: Unknown parameter 'usrquota'
[  326.266189][ T3823] usb 5-1: Using ep0 maxpacket: 32
[  326.483401][ T8838] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1240'.
[  326.548750][ T8838] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1240'.
[  326.581276][ T3823] usb 5-1: New USB device found, idVendor=0979, idProduct=0280, bcdDevice=89.a5
[  326.602628][ T3823] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  326.618395][ T3823] usb 5-1: Product: syz
[  326.631016][ T8838] netlink: 'syz.3.1240': attribute type 1 has an invalid length.
[  326.636835][ T3823] usb 5-1: Manufacturer: syz
[  326.655889][ T3823] usb 5-1: SerialNumber: syz
[  326.676619][ T3823] usb 5-1: config 0 descriptor??
[  326.732939][ T3823] gspca_main: jeilinj-2.14.0 probing 0979:0280
[  326.982132][ T3823] usb 5-1: USB disconnect, device number 16
[  327.269825][ T8851] netlink: 'syz.1.1244': attribute type 25 has an invalid length.
[  327.921768][ T8854] x_tables: duplicate entry at hook 1
[  328.094678][ T8860] loop4: detected capacity change from 0 to 256
[  328.156671][ T8861] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  328.169336][ T8860] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d)
[  328.475520][ T8866] loop4: detected capacity change from 0 to 2048
[  328.531252][ T8866] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  329.057743][ T8881] loop4: detected capacity change from 0 to 2048
[  329.163412][ T8881] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  329.986925][ T8895] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1261'.
[  330.103768][ T8897] netlink: 'syz.3.1257': attribute type 25 has an invalid length.
[  331.782812][ T8915] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1266'.
[  332.101078][ T2988] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  332.361022][ T2988] usb 3-1: Using ep0 maxpacket: 16
[  332.511196][ T3617] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  332.751109][ T2988] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  332.751142][ T2988] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  332.751162][ T2988] usb 3-1: Product: syz
[  332.751176][ T2988] usb 3-1: Manufacturer: syz
[  332.751191][ T2988] usb 3-1: SerialNumber: syz
[  332.752939][ T2988] usb 3-1: config 0 descriptor??
[  332.771224][ T3617] usb 1-1: Using ep0 maxpacket: 16
[  332.812686][ T2988] visor 3-1:0.0: Sony Clie 3.5 converter detected
[  333.111288][ T3617] usb 1-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice= 8.e8
[  333.111318][ T3617] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  333.111343][ T3617] usb 1-1: Product: syz
[  333.111357][ T3617] usb 1-1: Manufacturer: syz
[  333.111371][ T3617] usb 1-1: SerialNumber: syz
[  333.114129][ T3617] usb 1-1: config 0 descriptor??
[  333.281098][ T2988] usb 3-1: clie_3_5_startup: get interface number failed: -71
[  333.281191][ T2988] visor: probe of 3-1:0.0 failed with error -71
[  333.283110][ T2988] usb 3-1: USB disconnect, device number 10
[  333.368970][ T3617] usb 1-1: USB disconnect, device number 14
[  333.702683][ T8930] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1273'.
[  334.281080][ T4016] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  334.621784][ T8958] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1286'.
[  334.641264][ T4016] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  334.641297][ T4016] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  334.641323][ T4016] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  334.641357][ T4016] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  334.641379][ T4016] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  334.643029][ T4016] usb 4-1: config 0 descriptor??
[  334.661329][ T8944] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  334.886606][ T8936] udc-core: couldn't find an available UDC or it's busy
[  334.886626][ T8936] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  335.162692][ T4016] plantronics 0003:047F:FFFF.000E: unknown main item tag 0xd
[  335.163087][ T4016] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving
[  335.166673][ T4016] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  335.464071][ T4016] usb 4-1: USB disconnect, device number 16
[  336.411247][ T9000] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1300'.
[  336.524743][ T9000] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1300'.
[  336.646499][ T9000] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1300'.
[  337.026647][ T9012] hub 9-0:1.0: USB hub found
[  337.044013][ T9012] hub 9-0:1.0: 8 ports detected
[  339.711193][ T4016] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  339.731631][ T9036] device batadv0 entered promiscuous mode
[  339.731825][ T9036] device vlan2 entered promiscuous mode
[  339.791326][ T9036] device batadv0 left promiscuous mode
[  340.071404][ T4016] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  340.071437][ T4016] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  340.071462][ T4016] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  340.071496][ T4016] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  340.071519][ T4016] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  340.073169][ T4016] usb 5-1: config 0 descriptor??
[  340.091406][ T9033] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  340.316876][ T9033] udc-core: couldn't find an available UDC or it's busy
[  340.352750][ T9033] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  340.652905][ T4016] plantronics 0003:047F:FFFF.000F: unknown main item tag 0xd
[  340.670898][ T4016] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving
[  340.682042][ T4016] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  340.744294][ T9057] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1317'.
[  340.808328][ T9057] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1317'.
[  340.962167][ T3822] usb 5-1: USB disconnect, device number 17
[  341.720697][ T9075] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  341.811439][ T3617] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  342.061907][ T9086] tmpfs: Unknown parameter 'usrquota'
[  342.201539][ T3617] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  342.201570][ T3617] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  342.201602][ T3617] usb 3-1: New USB device found, idVendor=056a, idProduct=0101, bcdDevice= 0.00
[  342.201625][ T3617] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  342.203498][ T3617] usb 3-1: config 0 descriptor??
[  342.714563][ T3617] wacom 0003:056A:0101.0010: unknown main item tag 0x0
[  342.717490][ T3617] wacom 0003:056A:0101.0010: hidraw0: USB HID v0.00 Device [HID 056a:0101] on usb-dummy_hcd.2-1/input0
[  343.942829][ T3617] usb 3-1: USB disconnect, device number 11
[  344.495718][ T9106] "syz.1.1323" (9106) uses obsolete ecb(arc4) skcipher
[  344.612497][ T4100] Bluetooth: hci2: command 0x0406 tx timeout
[  345.244517][   T25] audit: type=1326 audit(1722472238.095:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9108 comm="syz.3.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff99b0443b9 code=0x7ffc0000
[  345.301280][ T4100] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  345.379930][   T25] audit: type=1326 audit(1722472238.125:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9108 comm="syz.3.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff99b0443b9 code=0x7ffc0000
[  345.402257][    C1] vkms_vblank_simulate: vblank timer overrun
[  345.721693][ T4100] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  345.878327][ T4100] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  345.960200][   T25] audit: type=1326 audit(1722472238.125:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9108 comm="syz.3.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7ff99b0443b9 code=0x7ffc0000
[  346.081067][ T4100] usb 5-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00
[  346.113534][   T25] audit: type=1326 audit(1722472238.125:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9108 comm="syz.3.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff99b0443b9 code=0x7ffc0000
[  346.125868][ T9123] netlink: 'syz.0.1334': attribute type 1 has an invalid length.
[  346.153030][ T4100] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  346.165206][   T25] audit: type=1326 audit(1722472238.125:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9108 comm="syz.3.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff99b0443b9 code=0x7ffc0000
[  346.194014][ T4100] usb 5-1: config 0 descriptor??
[  346.267149][ T9127] overlayfs: failed to clone upperpath
[  346.377021][ T9130] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1338'.
[  346.674015][ T4100] hid-led 0003:0FC5:B080.0011: unknown main item tag 0x0
[  346.891183][ T4100] hid-led: probe of 0003:0FC5:B080.0011 failed with error -71
[  346.892657][ T4100] usb 5-1: USB disconnect, device number 18
[  347.591727][ T3617] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  347.772201][ T9145] loop4: detected capacity change from 0 to 16
[  347.852471][ T3617] usb 3-1: Using ep0 maxpacket: 8
[  348.374999][ T9145] erofs: (device loop4): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 125300)
[  348.571125][ T3617] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  348.611069][ T3617] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  348.668430][ T3617] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  348.729466][ T3617] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  348.774531][ T3617] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  348.793119][ T3617] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  349.121120][ T3617] usb 3-1: usb_control_msg returned -32
[  349.126742][ T3822] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  349.134459][ T3617] usbtmc 3-1:16.0: can't read capabilities
[  349.411098][ T3822] usb 1-1: Using ep0 maxpacket: 8
[  349.538470][ T9165] loop4: detected capacity change from 0 to 32768
[  349.545259][ T3822] usb 1-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01
[  349.558682][ T3822] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  349.571578][ T4100] Bluetooth: hci8: command 0x0405 tx timeout
[  349.585059][ T3822] usb 1-1: config 0 descriptor??
[  349.643902][ T3822] gspca_main: xirlink-cit-2.14.0 probing 0545:8080
[  349.660354][ T3822] input: xirlink-cit as /devices/platform/dummy_hcd.0/usb1/1-1/input/input24
[  349.780789][ T9165] XFS (loop4): Mounting V5 Filesystem
[  349.816956][ T4100] Bluetooth: hci0: command 0x0406 tx timeout
[  349.824544][ T4100] Bluetooth: hci3: command 0x0406 tx timeout
[  349.920671][ T9165] XFS (loop4): Ending clean mount
[  350.026007][ T4100] usb 1-1: USB disconnect, device number 15
[  350.187498][ T7004] XFS (loop4): Unmounting Filesystem
[  350.689673][ T3822] usb 3-1: USB disconnect, device number 12
[  350.734637][   T25] audit: type=1326 audit(1722472243.585:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9180 comm="syz.0.1354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a570423b9 code=0x7ffc0000
[  350.802985][ T9189] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1356'.
[  350.815405][   T25] audit: type=1326 audit(1722472243.615:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9180 comm="syz.0.1354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a570423b9 code=0x7ffc0000
[  350.895856][   T25] audit: type=1326 audit(1722472243.615:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9180 comm="syz.0.1354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7f3a570423b9 code=0x7ffc0000
[  350.973632][   T25] audit: type=1326 audit(1722472243.615:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9180 comm="syz.0.1354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a570423b9 code=0x7ffc0000
[  351.042945][   T25] audit: type=1326 audit(1722472243.615:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9180 comm="syz.0.1354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a570423b9 code=0x7ffc0000
[  351.216934][ T9202] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1362'.
[  351.305278][ T9206] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  351.702157][ T9219] tmpfs: Bad value for 'mpol'
[  351.750736][ T9220] netlink: 'syz.3.1367': attribute type 13 has an invalid length.
[  352.601157][   T13] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  352.991208][   T13] usb 5-1: config 0 has no interfaces?
[  352.997517][   T13] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00
[  353.031017][   T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  353.063266][   T13] usb 5-1: config 0 descriptor??
[  353.267921][ T9234] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1371'.
[  353.339503][   T13] usb 5-1: USB disconnect, device number 19
[  353.769211][ T9241] netlink: 4156 bytes leftover after parsing attributes in process `syz.1.1375'.
[  355.582245][ T9275] netlink: 4156 bytes leftover after parsing attributes in process `syz.4.1387'.
[  355.724967][   T25] audit: type=1804 audit(1722472248.575:180): pid=9281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1389" name="/newroot/162/bus/bus" dev="overlay" ino=889 res=1 errno=0
[  356.765918][ T9254] chnl_net:caif_netlink_parms(): no params data found
[  356.870284][ T3763] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  356.954818][ T3763] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  357.011266][ T3729] Bluetooth: hci9: command 0x0409 tx timeout
[  357.084927][ T3763] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  357.138192][ T9254] bridge0: port 1(bridge_slave_0) entered blocking state
[  357.151487][ T9254] bridge0: port 1(bridge_slave_0) entered disabled state
[  357.175057][ T9254] device bridge_slave_0 entered promiscuous mode
[  357.197685][ T3763] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  357.220740][ T9254] bridge0: port 2(bridge_slave_1) entered blocking state
[  357.231183][ T9254] bridge0: port 2(bridge_slave_1) entered disabled state
[  357.272345][ T9254] device bridge_slave_1 entered promiscuous mode
[  357.322458][ T9310] netlink: 4156 bytes leftover after parsing attributes in process `syz.4.1399'.
[  357.417407][ T9254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  357.472739][ T9254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  357.474441][   T25] audit: type=1804 audit(1722472250.325:181): pid=9312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1400" name="/newroot/169/bus/bus" dev="overlay" ino=934 res=1 errno=0
[  357.654634][ T9254] team0: Port device team_slave_0 added
[  357.688959][ T9254] team0: Port device team_slave_1 added
[  357.723691][ T9320] vivid-000: disconnect
[  357.783526][ T9317] vivid-000: reconnect
[  357.831829][ T9254] batman_adv: batadv0: Adding interface: batadv_slave_0
[  357.838784][ T9254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  357.951038][ T9254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  358.007419][ T9254] batman_adv: batadv0: Adding interface: batadv_slave_1
[  358.019808][ T9254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  358.066605][ T9254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  358.290387][ T3729] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  358.311690][ T9254] device hsr_slave_0 entered promiscuous mode
[  358.346471][ T9254] device hsr_slave_1 entered promiscuous mode
[  358.356820][ T9254] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  358.423003][ T9337] netlink: 'syz.0.1410': attribute type 25 has an invalid length.
[  358.673759][ T9254] Cannot create hsr debugfs directory
[  358.971092][ T3729] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  359.000969][ T3729] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  359.051135][ T3729] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  359.091205][ T3729] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  359.124129][ T3729] usb 3-1: config 0 descriptor??
[  359.131137][ T4100] Bluetooth: hci9: command 0x041b tx timeout
[  360.133345][ T3729] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving
[  360.151671][ T3729] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  360.188776][ T9254] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  360.241348][ T9254] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  360.262546][ T9254] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  360.348792][ T3763] device hsr_slave_0 left promiscuous mode
[  360.361700][ T3763] device hsr_slave_1 left promiscuous mode
[  360.398176][ T3763] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  360.411063][ T3763] batman_adv: batadv0: Removing interface: batadv_slave_0
[  360.431854][ T3763] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  360.459649][ T3763] batman_adv: batadv0: Removing interface: batadv_slave_1
[  360.491298][ T3763] device bridge_slave_1 left promiscuous mode
[  360.507789][ T3763] bridge0: port 2(bridge_slave_1) entered disabled state
[  360.564312][ T3763] device bridge_slave_0 left promiscuous mode
[  360.570526][ T3763] bridge0: port 1(bridge_slave_0) entered disabled state
[  360.638131][ T3763] device veth1_macvtap left promiscuous mode
[  360.651265][ T3763] device veth0_macvtap left promiscuous mode
[  360.657325][ T3763] device veth1_vlan left promiscuous mode
[  360.663540][ T4100] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  360.666592][ T9345] loop4: detected capacity change from 0 to 32768
[  360.696409][ T3763] device veth0_vlan left promiscuous mode
[  360.775378][ T9345] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1413 (9345)
[  360.853989][ T9345] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  360.879317][ T9345] BTRFS info (device loop4): using free space tree
[  360.904924][ T9345] BTRFS info (device loop4): has skinny extents
[  360.921261][ T4100] usb 2-1: Using ep0 maxpacket: 8
[  361.051451][ T4100] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[  361.071069][ T4100] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  361.134465][ T9345] BTRFS info (device loop4): enabling ssd optimizations
[  361.150504][ T3763] team0 (unregistering): Port device team_slave_1 removed
[  361.171433][ T4013] Bluetooth: hci9: command 0x040f tx timeout
[  361.226250][ T3763] team0 (unregistering): Port device team_slave_0 removed
[  361.291118][ T4100] usb 2-1: New USB device found, idVendor=0499, idProduct=5005, bcdDevice= 8.ff
[  361.307605][ T4100] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  361.323401][ T4100] usb 2-1: Product: syz
[  361.333099][ T4100] usb 2-1: Manufacturer: syz
[  361.342358][ T4100] usb 2-1: SerialNumber: syz
[  361.354376][ T4100] usb 2-1: config 0 descriptor??
[  361.372903][ T3763] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  361.443082][ T4100] snd-usb-audio: probe of 2-1:0.0 failed with error -2
[  361.713563][ T2988] usb 2-1: USB disconnect, device number 11
[  361.790815][ T3763] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  362.059984][ T3763] bond0 (unregistering): Released all slaves
[  362.144678][   T25] audit: type=1804 audit(1722472254.995:182): pid=9385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1421" name="/newroot/177/bus/bus" dev="overlay" ino=984 res=1 errno=0
[  362.175092][ T9254] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  362.471435][ T9254] 8021q: adding VLAN 0 to HW filter on device bond0
[  362.510162][ T4013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  362.528685][ T4013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  362.572656][ T9254] 8021q: adding VLAN 0 to HW filter on device team0
[  362.598636][ T4013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  362.618025][ T4013] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  362.644984][ T4013] bridge0: port 1(bridge_slave_0) entered blocking state
[  362.652169][ T4013] bridge0: port 1(bridge_slave_0) entered forwarding state
[  362.785076][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  362.801916][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  362.832889][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  362.871833][ T3609] bridge0: port 2(bridge_slave_1) entered blocking state
[  362.878901][ T3609] bridge0: port 2(bridge_slave_1) entered forwarding state
[  362.907139][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  362.928370][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  362.972155][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  363.024108][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  363.058117][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  363.083622][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  363.105650][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  363.141839][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  363.186653][ T9254] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  363.219699][ T9387] loop4: detected capacity change from 0 to 40427
[  363.233623][ T9254] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  363.261471][ T3609] Bluetooth: hci9: command 0x0419 tx timeout
[  363.263261][ T9400] device wlan1 entered promiscuous mode
[  363.297674][ T9387] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504)
[  363.297710][ T9400] device macvlan2 entered promiscuous mode
[  363.327333][ T9387] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  363.337708][ T9400] device wlan1 left promiscuous mode
[  363.357679][ T9387] F2FS-fs (loop4): Unrecognized mount option "�" or missing value
[  363.392152][ T4013] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  363.412563][ T4013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  363.448101][ T4013] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  363.588668][ T9404] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1428'.
[  363.868631][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  363.883805][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  363.927085][ T9254] 8021q: adding VLAN 0 to HW filter on device batadv0
[  364.017588][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  364.055128][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  364.549882][ T3822] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  364.558295][ T3822] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  364.567819][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  364.576314][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  364.621828][ T9254] device veth0_vlan entered promiscuous mode
[  364.632552][ T9425] netlink: 'syz.1.1434': attribute type 1 has an invalid length.
[  364.652299][ T9254] device veth1_vlan entered promiscuous mode
[  364.725412][ T4100] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  364.736538][ T4100] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  364.756348][ T9254] device veth0_macvtap entered promiscuous mode
[  364.782851][ T9254] device veth1_macvtap entered promiscuous mode
[  364.831133][ T3609] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  364.844767][ T9254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  364.908228][ T9254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  364.937708][ T9254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  364.960338][ T9254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  365.027166][ T9254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  365.087532][ T9254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  365.111246][ T3609] usb 1-1: Using ep0 maxpacket: 8
[  365.129943][ T9254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  365.166281][ T9254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  365.197638][ T9254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  365.250875][ T9254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  365.261696][ T3609] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  365.279812][ T3609] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  365.304355][ T9254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  365.323852][ T3609] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  365.342827][ T9254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  365.357223][ T3609] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  365.376954][ T9254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  365.403465][ T3609] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  365.418216][ T9254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  365.440302][ T3609] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  365.461162][ T9254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  365.558659][ T9254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  365.589162][ T9254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  365.630277][ T9254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  365.689955][ T9254] batman_adv: batadv0: Interface activated: batadv_slave_0
[  365.741601][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  365.749880][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  365.758217][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  365.768237][ T3609] usb 1-1: usb_control_msg returned -32
[  365.773869][ T3609] usbtmc 1-1:16.0: can't read capabilities
[  365.780573][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  365.823298][ T9254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  365.894530][ T9254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  365.941602][ T9254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  365.942141][ T9442] loop4: detected capacity change from 0 to 512
[  365.984405][ T9254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  366.030400][   T25] audit: type=1326 audit(1722472258.875:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9443 comm="syz.1.1438" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f02cf13a3b9 code=0x0
[  366.053422][ T9254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  366.081053][ T9254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  366.090885][ T9254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  366.150990][ T9254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  366.160828][ T9254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  366.211258][ T9254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  366.241014][ T9254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  366.270984][ T9254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  366.280819][ T9254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  366.330993][ T9254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  366.340833][ T9254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  366.390989][ T9254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  366.400830][ T9254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  366.460984][ T9254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  366.492549][ T9254] batman_adv: batadv0: Interface activated: batadv_slave_1
[  366.498008][ T9442] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  366.510089][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  366.534671][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  366.547522][ T9442] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002]
[  366.558911][ T9442] System zones: 1-12
[  366.618977][ T9254] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  366.661074][ T9442] EXT4-fs (loop4): 1 truncate cleaned up
[  366.674281][ T9254] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  366.703248][ T9442] EXT4-fs (loop4): mounted filesystem without journal. Opts: nogrpid,jqfmt=vfsv0,debug_want_extra_isize=0x0000000000000068,debug,nombcache,quota,,errors=continue. Quota mode: writeback.
[  366.737521][ T9254] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  366.775452][ T9254] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  366.974220][ T3734] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  366.992283][ T3734] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  367.052378][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  367.073418][ T8125] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  367.092158][ T8125] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  367.122418][ T4100] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  367.143965][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  367.501576][ T4100] usb 5-1: Using ep0 maxpacket: 32
[  368.140687][ T3613] usb 1-1: USB disconnect, device number 16
[  368.181448][ T4100] usb 5-1: config 0 has an invalid descriptor of length 112, skipping remainder of the config
[  368.231502][ T4100] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  368.275173][ T4100] usb 5-1: New USB device found, idVendor=0421, idProduct=00a0, bcdDevice=c8.e1
[  368.293243][ T9461] netlink: 'syz.1.1444': attribute type 1 has an invalid length.
[  368.305512][ T4100] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  368.337506][ T4100] usb 5-1: config 0 descriptor??
[  368.407244][ T4100] usb 5-1: bad CDC descriptors
[  368.417241][ T4100] usb 5-1: bad CDC descriptors
[  368.650815][ T4100] usb 5-1: USB disconnect, device number 20
[  368.671426][ T9470] device syzkaller1 entered promiscuous mode
[  368.959387][ T9467] chnl_net:caif_netlink_parms(): no params data found
[  369.302194][ T9467] bridge0: port 1(bridge_slave_0) entered blocking state
[  369.309300][ T9467] bridge0: port 1(bridge_slave_0) entered disabled state
[  369.371078][ T9467] device bridge_slave_0 entered promiscuous mode
[  369.457442][ T9467] bridge0: port 2(bridge_slave_1) entered blocking state
[  369.471148][ T9467] bridge0: port 2(bridge_slave_1) entered disabled state
[  369.480242][ T9467] device bridge_slave_1 entered promiscuous mode
[  369.594739][ T9467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  369.633955][ T9467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  369.722726][ T9467] team0: Port device team_slave_0 added
[  369.730802][ T9467] team0: Port device team_slave_1 added
[  369.761021][   T13] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  369.817705][ T9467] batman_adv: batadv0: Adding interface: batadv_slave_0
[  369.835928][ T9467] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  369.881129][ T9467] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  369.910802][ T9467] batman_adv: batadv0: Adding interface: batadv_slave_1
[  369.921054][ T2988] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  369.931865][ T9467] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  370.021194][ T9467] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  370.131362][   T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  370.153600][   T13] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  370.171018][ T2988] usb 2-1: Using ep0 maxpacket: 8
[  370.227912][   T13] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  370.301593][   T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  370.751998][ T9329] plantronics 0003:047F:FFFF.0012: timeout initializing reports
[  370.899021][ T2988] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  370.909562][ T2988] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  370.922127][   T13] usb 1-1: config 0 descriptor??
[  370.927217][ T2988] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  370.947696][ T9499] loop4: detected capacity change from 0 to 256
[  370.961229][ T2988] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  371.010431][ T9499] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d)
[  371.011034][ T2988] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  371.060219][ T2988] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  371.080623][ T3823] Bluetooth: hci8: command 0x0409 tx timeout
[  371.253005][ T9467] device hsr_slave_0 entered promiscuous mode
[  371.503865][ T9467] device hsr_slave_1 entered promiscuous mode
[  371.526017][ T9467] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  371.668531][ T2988] usb 2-1: usb_control_msg returned -32
[  371.676765][   T13] plantronics 0003:047F:FFFF.0013: No inputs registered, leaving
[  371.684887][ T2988] usbtmc 2-1:16.0: can't read capabilities
[  371.692680][ T9467] Cannot create hsr debugfs directory
[  371.693296][   T13] plantronics 0003:047F:FFFF.0013: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  371.796241][ T9510] loop4: detected capacity change from 0 to 512
[  371.910016][ T9510] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  372.001143][ T9510] ext4 filesystem being mounted at /185/file1 supports timestamps until 2038 (0x7fffffff)
[  372.267663][ T3613] usb 3-1: USB disconnect, device number 13
[  372.422696][ T3763] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  373.014288][ T3763] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  373.107039][ T3613] usb 1-1: USB disconnect, device number 17
[  373.128322][ T3763] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  373.191262][ T9531] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1461'.
[  373.235708][ T9531] tipc: Started in network mode
[  373.252756][   T13] Bluetooth: hci8: command 0x041b tx timeout
[  373.272143][ T9531] tipc: Node identity , cluster identity 8
[  373.298639][   T13] usb 2-1: USB disconnect, device number 12
[  373.328155][ T3763] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  373.374208][ T9536] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1463'.
[  373.452494][ T9537] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  375.326352][ T9555] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1467'.
[  375.335801][    T7] Bluetooth: hci8: command 0x040f tx timeout
[  375.418425][   T25] audit: type=1326 audit(1722472268.265:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9543 comm="syz.4.1465" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fda649c73b9 code=0x0
[  376.528984][ T9467] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  376.571320][ T9467] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  376.609770][ T9467] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  376.666579][ T9467] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  376.908365][ T9467] 8021q: adding VLAN 0 to HW filter on device bond0
[  376.915152][   T26] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  376.982509][ T9467] 8021q: adding VLAN 0 to HW filter on device team0
[  377.001599][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  377.009851][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  377.049451][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  377.067258][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  377.089062][ T3609] bridge0: port 1(bridge_slave_0) entered blocking state
[  377.096156][ T3609] bridge0: port 1(bridge_slave_0) entered forwarding state
[  377.123586][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  377.142243][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  377.161003][    T7] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  377.161329][ T3609] bridge0: port 2(bridge_slave_1) entered blocking state
[  377.175620][ T3609] bridge0: port 2(bridge_slave_1) entered forwarding state
[  377.294502][ T3763] device hsr_slave_0 left promiscuous mode
[  377.301274][ T3763] device hsr_slave_1 left promiscuous mode
[  377.325366][ T3763] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  377.333268][   T26] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  377.351070][ T3763] batman_adv: batadv0: Removing interface: batadv_slave_0
[  377.358225][   T26] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  377.393393][ T3763] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  377.401047][ T3763] batman_adv: batadv0: Removing interface: batadv_slave_1
[  377.411115][ T3823] Bluetooth: hci8: command 0x0419 tx timeout
[  377.412463][ T3763] device bridge_slave_1 left promiscuous mode
[  377.417191][    T7] usb 5-1: Using ep0 maxpacket: 32
[  377.437381][ T3763] bridge0: port 2(bridge_slave_1) entered disabled state
[  377.453648][ T3763] device bridge_slave_0 left promiscuous mode
[  377.471482][ T3763] bridge0: port 1(bridge_slave_0) entered disabled state
[  377.482684][ T9582] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  377.491384][   T26] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  377.535156][   T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  377.559680][   T26] usb 2-1: SerialNumber: syz
[  377.561179][    T7] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  377.604978][    T7] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1596, setting to 1024
[  377.790801][    T7] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  377.928335][    T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  378.172671][ T9576] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  378.233102][    T7] hub 5-1:4.0: USB hub found
[  378.246665][ T3763] device veth1_macvtap left promiscuous mode
[  378.253473][ T3763] device veth0_macvtap left promiscuous mode
[  378.260000][ T3763] device veth1_vlan left promiscuous mode
[  378.271285][ T3763] device veth0_vlan left promiscuous mode
[  378.293238][ T9571] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1472'.
[  378.423364][ T1389] ieee802154 phy0 wpan0: encryption failed: -22
[  378.429735][ T1389] ieee802154 phy1 wpan1: encryption failed: -22
[  378.461129][    T7] hub 5-1:4.0: 2 ports detected
[  378.491630][    T7] hub 5-1:4.0: insufficient power available to use all downstream ports
[  379.180409][    T7] hub 5-1:4.0: hub_hub_status failed (err = -71)
[  379.202296][    T7] hub 5-1:4.0: config failed, can't get hub status (err -71)
[  379.272316][    T7] usb 5-1: USB disconnect, device number 21
[  380.131061][ T3617] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  380.183723][ T3763] team0 (unregistering): Port device team_slave_1 removed
[  380.253731][ T3763] team0 (unregistering): Port device team_slave_0 removed
[  380.302450][ T3763] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  380.360892][ T3763] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  380.531370][ T3617] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x31, skipping
[  380.551954][ T3617] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  380.601291][ T3617] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  380.630789][ T3617] usb 1-1: config 0 descriptor??
[  380.634486][ T3763] bond0 (unregistering): Released all slaves
[  380.746923][ T3729] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  380.766997][ T3729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  380.807232][ T3729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  380.842510][ T3729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  380.890874][ T3729] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  381.007595][ T4013] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  381.042474][ T4013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  381.062809][   T26] usb 2-1: 0:2 : does not exist
[  381.067672][   T26] usb 2-1: unit 5 not found!
[  381.206750][ T4013] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  381.234128][   T26] usb 2-1: USB disconnect, device number 13
[  381.237312][ T9609] loop4: detected capacity change from 0 to 8192
[  381.240700][ T4013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  381.785348][ T4013] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  381.801347][ T3617] ath6kl: Failed to submit usb control message: -110
[  381.808062][ T3617] ath6kl: unable to send the bmi data to the device: -110
[  381.809522][ T4013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  381.826261][ T9609] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal
[  381.835509][ T3617] ath6kl: Unable to send get target info: -110
[  381.842056][ T9609] REISERFS (device loop4): using ordered data mode
[  381.849917][ T9609] reiserfs: using flush barriers
[  381.858791][ T9609] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  381.860772][ T4013] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  381.876749][ T9609] REISERFS (device loop4): checking transaction log (loop4)
[  381.979246][ T9467] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  382.009400][ T3617] ath6kl: Failed to init ath6kl core: -110
[  382.145315][ T9609] REISERFS (device loop4): Using tea hash to sort names
[  382.181525][ T9609] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2)
[  382.222579][ T9609] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  382.358434][ T9609] REISERFS error (device loop4): vs-7000 search_by_entry_key: search_by_key returned item position == 0
[  382.410218][ T3617] ath6kl_usb: probe of 1-1:0.0 failed with error -110
[  382.432087][ T9609] REISERFS (device loop4): Remounting filesystem read-only
[  382.455834][ T9467] 8021q: adding VLAN 0 to HW filter on device batadv0
[  382.462948][ T3617] usb 1-1: USB disconnect, device number 18
[  382.494761][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  382.509702][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  382.558540][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  382.597045][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  382.673623][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  382.699526][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  382.791268][ T9467] device veth0_vlan entered promiscuous mode
[  382.798555][ T3822] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  382.821814][ T3822] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  382.864247][ T9467] device veth1_vlan entered promiscuous mode
[  382.952448][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  382.973489][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  383.008444][ T9637] loop4: detected capacity change from 0 to 256
[  383.016135][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  383.051933][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  383.073831][ T9467] device veth0_macvtap entered promiscuous mode
[  383.084035][ T4100] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  383.125103][ T9637] exFAT-fs (loop4): failed to load upcase table (idx : 0x00017f3e, chksum : 0x84cb8d72, utbl_chksum : 0xe619d30d)
[  383.132440][ T9467] device veth1_macvtap entered promiscuous mode
[  383.161072][ T3822] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  383.222721][ T9467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  383.256748][ T9467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  383.289949][ T9467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  383.324828][ T9467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  383.365859][ T9467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  383.399623][ T9467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  383.409813][ T3822] usb 1-1: Using ep0 maxpacket: 32
[  383.439283][ T9467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  383.472944][ T9467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  383.508996][ T9467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  383.531234][ T3822] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  383.553338][ T3822] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1596, setting to 1024
[  383.568952][ T9467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  383.596508][ T3822] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  383.606862][ T9467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  383.634133][ T3822] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  383.644503][ T9467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  383.674450][ T9467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  383.685395][ T9632] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  383.701844][ T3822] hub 1-1:4.0: USB hub found
[  383.715401][ T9467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  383.761639][ T9467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  383.801989][ T9467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  383.830915][ T9467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  383.852997][ T9467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  383.885194][ T9467] batman_adv: batadv0: Interface activated: batadv_slave_0
[  383.921153][ T3822] hub 1-1:4.0: 2 ports detected
[  383.934557][ T3823] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  383.942826][ T3822] hub 1-1:4.0: insufficient power available to use all downstream ports
[  383.963804][ T3823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  383.993835][ T9467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  384.017819][ T9467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  384.053130][ T9467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  384.195626][ T9467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  384.209599][ T3822] hub 1-1:4.0: hub_hub_status failed (err = -71)
[  384.216459][ T3822] hub 1-1:4.0: config failed, can't get hub status (err -71)
[  384.251650][ T3822] usb 1-1: USB disconnect, device number 19
[  384.394086][ T9467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  384.635131][ T9467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  384.862926][ T9467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  384.873649][ T9467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  384.972270][ T9467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  385.025065][ T9467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  385.054295][ T9467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  385.085283][ T9467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  385.125014][ T9467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  385.160957][ T9467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  385.192939][ T9467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  385.230954][ T9467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  385.253467][   T25] audit: type=1326 audit(1722472278.105:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9648 comm="syz.3.1497" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0f4a8a83b9 code=0x0
[  385.258437][ T9467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  385.348522][ T9467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  385.398698][ T9467] batman_adv: batadv0: Interface activated: batadv_slave_1
[  385.433550][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  385.449992][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  385.484817][ T9655] netlink: 'syz.4.1499': attribute type 2 has an invalid length.
[  385.484921][ T9467] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  385.521638][ T9655] netlink: 'syz.4.1499': attribute type 9 has an invalid length.
[  385.532030][ T9467] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  385.569128][ T9467] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  385.598957][ T9467] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  388.289103][ T7394] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  388.351771][ T3735] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  388.360135][ T3735] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  388.391051][ T7394] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  388.429546][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  388.458997][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  388.852961][ T9675] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1506'.
[  388.952177][ T9675] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1506'.
[  389.403536][ T9687] netlink: 'syz.2.1510': attribute type 2 has an invalid length.
[  389.453092][ T9687] netlink: 'syz.2.1510': attribute type 9 has an invalid length.
[  389.611009][   T13] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  389.724270][ T9696] binder: 9695:9696 ioctl c0306201 0 returned -14
[  389.891830][   T13] usb 5-1: Using ep0 maxpacket: 16
[  390.691306][ T2988] Bluetooth: hci5: command 0x0406 tx timeout
[  390.697475][   T13] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  390.759233][   T13] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  390.788550][   T13] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  390.808780][   T13] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  390.849272][   T13] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  390.869460][   T13] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 25
[  390.991266][   T13] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  391.010988][   T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  391.039413][   T13] usb 5-1: SerialNumber: syz
[  391.092151][   T13] cdc_acm 5-1:1.0: Control and data interfaces are not separated!
[  391.102909][   T13] cdc_acm: probe of 5-1:1.0 failed with error -12
[  391.349841][ T9670] device batadv0 entered promiscuous mode
[  391.421370][ T9670] device macsec1 entered promiscuous mode
[  391.441572][ T9670] device batadv0 left promiscuous mode
[  391.616169][ T3609] usb 5-1: USB disconnect, device number 22
[  393.273579][ T9727] netlink: 'syz.4.1524': attribute type 2 has an invalid length.
[  393.309630][ T9727] netlink: 'syz.4.1524': attribute type 9 has an invalid length.
[  393.750973][ T9743] binder: 9742:9743 ioctl c0306201 0 returned -14
[  394.671096][ T2988] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  394.771091][   T26] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  394.931033][ T2988] usb 5-1: Using ep0 maxpacket: 16
[  395.051239][ T2988] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  395.089355][ T2988] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  395.101118][   T26] usb 2-1: too many configurations: 164, using maximum allowed: 8
[  395.130097][ T2988] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  395.180984][ T2988] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  395.221045][ T2988] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  395.251870][ T2988] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 25
[  395.371238][ T2988] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  395.410898][ T2988] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  395.419585][ T2988] usb 5-1: SerialNumber: syz
[  395.491862][ T2988] cdc_acm 5-1:1.0: Control and data interfaces are not separated!
[  395.531488][ T2988] cdc_acm: probe of 5-1:1.0 failed with error -12
[  395.751761][ T9745] device batadv0 entered promiscuous mode
[  395.757550][ T9745] device macsec1 entered promiscuous mode
[  395.811485][    T7] Bluetooth: hci7: command 0x0406 tx timeout
[  395.852267][ T9745] device batadv0 left promiscuous mode
[  395.921210][   T26] usb 2-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db
[  395.950601][   T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  395.972581][   T26] usb 2-1: config 0 descriptor??
[  396.004687][   T13] usb 5-1: USB disconnect, device number 23
[  396.041397][   T26] usb 2-1: bad CDC descriptors
[  396.060528][   T26] usb 2-1: bad CDC descriptors
[  396.284863][   T26] usb 2-1: USB disconnect, device number 14
[  398.050090][ T9778] chnl_net:caif_netlink_parms(): no params data found
[  398.251427][ T9778] bridge0: port 1(bridge_slave_0) entered blocking state
[  398.297168][ T9778] bridge0: port 1(bridge_slave_0) entered disabled state
[  398.352738][ T9778] device bridge_slave_0 entered promiscuous mode
[  398.397508][ T9778] bridge0: port 2(bridge_slave_1) entered blocking state
[  398.433606][ T9778] bridge0: port 2(bridge_slave_1) entered disabled state
[  398.464938][ T9778] device bridge_slave_1 entered promiscuous mode
[  398.725598][ T9778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  398.766479][ T9778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  398.883976][ T9778] team0: Port device team_slave_0 added
[  398.933525][ T9778] team0: Port device team_slave_1 added
[  399.021234][ T9778] batman_adv: batadv0: Adding interface: batadv_slave_0
[  399.028237][ T9778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  399.135137][ T9778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  399.209589][ T9778] batman_adv: batadv0: Adding interface: batadv_slave_1
[  399.237310][ T9778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  399.263267][    C0] vkms_vblank_simulate: vblank timer overrun
[  399.293384][ T9778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  399.564125][ T9778] device hsr_slave_0 entered promiscuous mode
[  399.592231][ T9778] device hsr_slave_1 entered promiscuous mode
[  399.600642][ T9778] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  399.618444][ T9778] Cannot create hsr debugfs directory
[  399.811039][ T3617] Bluetooth: hci6: command 0x0409 tx timeout
[  399.963638][ T9792] chnl_net:caif_netlink_parms(): no params data found
[  400.873801][ T9778] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  401.168578][ T9778] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  401.341339][    T7] Bluetooth: hci2: command 0x0409 tx timeout
[  401.607868][ T9778] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  401.683340][ T9792] bridge0: port 1(bridge_slave_0) entered blocking state
[  401.702022][ T9792] bridge0: port 1(bridge_slave_0) entered disabled state
[  401.731301][ T9792] device bridge_slave_0 entered promiscuous mode
[  401.753527][ T9792] bridge0: port 2(bridge_slave_1) entered blocking state
[  401.791250][ T9792] bridge0: port 2(bridge_slave_1) entered disabled state
[  401.818735][ T9792] device bridge_slave_1 entered promiscuous mode
[  401.883144][ T9778] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  401.898175][   T13] Bluetooth: hci6: command 0x041b tx timeout
[  402.094737][ T9792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  402.122386][ T9792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  402.331155][ T9792] team0: Port device team_slave_0 added
[  402.396446][ T9792] team0: Port device team_slave_1 added
[  402.463606][ T9778] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  402.566858][ T9778] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  402.595778][ T9830] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  402.629828][ T9792] batman_adv: batadv0: Adding interface: batadv_slave_0
[  402.652543][ T9792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  402.957288][ T9792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  403.061769][ T9778] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  403.089980][ T9792] batman_adv: batadv0: Adding interface: batadv_slave_1
[  403.106192][ T9792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  403.251061][ T9792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  403.312721][ T9778] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  403.411082][    T7] Bluetooth: hci2: command 0x041b tx timeout
[  403.497228][ T9792] device hsr_slave_0 entered promiscuous mode
[  403.524201][ T9792] device hsr_slave_1 entered promiscuous mode
[  403.582949][ T9792] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  403.621018][ T9792] Cannot create hsr debugfs directory
[  403.971750][ T9826] chnl_net:caif_netlink_parms(): no params data found
[  403.980614][ T3617] Bluetooth: hci6: command 0x040f tx timeout
[  404.044823][ T9778] 8021q: adding VLAN 0 to HW filter on device bond0
[  404.133102][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  404.153988][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  404.197819][ T9778] 8021q: adding VLAN 0 to HW filter on device team0
[  404.268602][ T9792] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  404.291182][ T2988] Bluetooth: hci7: command 0x0409 tx timeout
[  404.332500][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  404.420760][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  404.581310][ T2988] bridge0: port 1(bridge_slave_0) entered blocking state
[  404.588398][ T2988] bridge0: port 1(bridge_slave_0) entered forwarding state
[  404.726104][ T9792] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  404.813461][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  404.843592][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  404.872971][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  404.911996][ T3617] bridge0: port 2(bridge_slave_1) entered blocking state
[  404.919086][ T3617] bridge0: port 2(bridge_slave_1) entered forwarding state
[  404.980247][ T9839] tipc: Started in network mode
[  404.985792][ T9839] tipc: Node identity ff050000000000000000000000000001, cluster identity 8
[  405.029960][ T9839] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  405.147521][ T9792] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  405.194056][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  405.203754][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  405.337713][ T9792] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  405.391354][ T9826] bridge0: port 1(bridge_slave_0) entered blocking state
[  405.398462][ T9826] bridge0: port 1(bridge_slave_0) entered disabled state
[  405.410706][ T9826] device bridge_slave_0 entered promiscuous mode
[  405.432863][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  405.452241][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  405.464950][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  405.492149][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  405.521996][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  405.561642][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  405.603978][ T9826] bridge0: port 2(bridge_slave_1) entered blocking state
[  405.611657][ T3617] Bluetooth: hci2: command 0x040f tx timeout
[  405.630148][ T9826] bridge0: port 2(bridge_slave_1) entered disabled state
[  405.669583][ T9826] device bridge_slave_1 entered promiscuous mode
[  405.733411][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  405.761988][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  405.781806][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  405.825782][ T9778] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  405.874585][ T9826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  405.930302][ T9826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  406.028053][ T3763] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  406.051575][   T13] Bluetooth: hci6: command 0x0419 tx timeout
[  406.090455][ T9826] team0: Port device team_slave_0 added
[  406.124447][ T9826] team0: Port device team_slave_1 added
[  406.177071][ T3763] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  406.233143][ T9826] batman_adv: batadv0: Adding interface: batadv_slave_0
[  406.240104][ T9826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  406.321083][ T9826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  406.373192][ T2988] Bluetooth: hci7: command 0x041b tx timeout
[  406.388690][ T3763] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  406.413504][ T9826] batman_adv: batadv0: Adding interface: batadv_slave_1
[  406.420454][ T9826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  406.481056][ T9826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  406.510779][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  406.521244][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  406.560154][ T3763] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  406.598297][ T9778] 8021q: adding VLAN 0 to HW filter on device batadv0
[  406.661872][ T9826] device hsr_slave_0 entered promiscuous mode
[  406.685504][ T9826] device hsr_slave_1 entered promiscuous mode
[  406.704859][ T9826] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  406.721717][ T9826] Cannot create hsr debugfs directory
[  406.742359][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  406.762016][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  406.833156][ T3822] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  406.851825][ T3822] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  406.861370][   T13] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  406.899184][ T9778] device veth0_vlan entered promiscuous mode
[  406.943718][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  406.959018][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  407.022265][ T9778] device veth1_vlan entered promiscuous mode
[  407.038149][ T9792] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  407.195181][ T9792] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  407.222065][   T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  407.233249][ T9792] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  407.251076][   T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  407.271094][   T13] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  407.291148][   T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  407.311869][   T13] usb 1-1: config 0 descriptor??
[  407.374358][ T3822] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  407.391901][ T3822] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  407.410376][ T9792] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  407.451103][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  407.459670][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  407.494147][ T9778] device veth0_macvtap entered promiscuous mode
[  407.526788][ T9778] device veth1_macvtap entered promiscuous mode
[  407.620712][ T9778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  407.651102][ T3823] Bluetooth: hci2: command 0x0419 tx timeout
[  407.657161][ T9778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  407.680988][ T9778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  407.701110][ T9778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  407.718475][ T9778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  407.741114][ T9778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  407.761240][ T9778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  407.786424][ T9778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  407.810519][ T9778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  407.842235][ T9778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  407.861020][ T9778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  407.888842][ T9778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  407.909295][ T9778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  407.930324][ T9778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  407.950615][ T9778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  407.972239][ T9778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  407.993520][ T9778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  408.017224][ T9778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  408.027757][   T13] usb 1-1: string descriptor 0 read error: -22
[  408.048200][ T9778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  408.072496][ T9778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  408.106743][ T9778] batman_adv: batadv0: Interface activated: batadv_slave_0
[  408.144241][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  408.157032][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  408.182019][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  408.202452][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  408.235688][ T9778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  408.264976][ T9778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  408.294298][   T13] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0014/input/input27
[  408.306325][ T9778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  408.330958][ T9778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  408.361040][ T9778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  408.393474][   T13] uclogic 0003:256C:006D.0014: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.0-1/input0
[  408.400966][ T9778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  408.435452][ T9778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  408.451908][   T13] Bluetooth: hci7: command 0x040f tx timeout
[  408.461487][   T27] INFO: task syz.0.910:7772 blocked for more than 143 seconds.
[  408.471759][ T9778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  408.490980][   T27]       Not tainted 5.15.164-syzkaller #0
[  408.495302][   T13] usb 1-1: USB disconnect, device number 20
[  408.505840][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  408.519346][ T9778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  408.540232][   T27] task:syz.0.910       state:D stack:23872 pid: 7772 ppid:  6237 flags:0x00004004
[  408.557623][ T9778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  408.575438][   T27] Call Trace:
[  408.584388][   T27]  <TASK>
[  408.590743][ T9778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  408.602447][   T27]  __schedule+0x12c4/0x45b0
[  408.613866][   T27]  ? release_firmware_map_entry+0x190/0x190
[  408.625927][ T9778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  408.638145][   T27]  ? __mutex_trylock_common+0x8d/0x2e0
[  408.650375][   T27]  ? do_raw_spin_unlock+0x137/0x8b0
[  408.658069][ T9778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  408.671970][   T27]  schedule+0x11b/0x1f0
[  408.680615][   T27]  schedule_preempt_disabled+0xf/0x20
[  408.691396][ T9778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  408.703978][   T27]  __mutex_lock_common+0xe34/0x25a0
[  408.716943][   T27]  ? exfat_sync_fs+0x67/0x100
[  408.723991][ T9778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  408.739444][   T27]  ? mutex_lock_io_nested+0x60/0x60
[  408.751406][   T27]  ? __lock_acquire+0x1ff0/0x1ff0
[  408.758773][ T9778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  408.772098][   T27]  ? do_raw_spin_lock+0x14a/0x370
[  408.782734][   T27]  mutex_lock_nested+0x17/0x20
[  408.789331][ T9778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  408.804429][   T27]  exfat_sync_fs+0x67/0x100
[  408.814701][   T27]  iterate_supers+0x127/0x1e0
[  408.823883][ T9778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  408.834985][   T27]  ? sync_inodes_one_sb+0x60/0x60
[  408.845728][   T27]  ksys_sync+0xd7/0x1c0
[  408.855691][ T9778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  408.868528][   T27]  ? sync_filesystem+0x220/0x220
[  408.879118][   T27]  ? syscall_enter_from_user_mode+0x2e/0x240
[  408.889668][ T9778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  408.901862][   T27]  ? syscall_enter_from_user_mode+0x2e/0x240
[  408.917372][   T27]  __do_sys_sync+0xa/0x10
[  408.927957][ T9778] batman_adv: batadv0: Interface activated: batadv_slave_1
[  408.936603][   T27]  do_syscall_64+0x3b/0xb0
[  408.945824][   T27]  ? clear_bhb_loop+0x15/0x70
[  408.960579][   T27]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  408.974863][   T27] RIP: 0033:0x7f1927ce73b9
[  408.981470][ T9886] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1583'.
[  408.983810][   T27] RSP: 002b:00007f1926166048 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2
[  409.021191][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  409.032621][   T27] RAX: ffffffffffffffda RBX: 00007f1927e75f80 RCX: 00007f1927ce73b9
[  409.044834][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  409.059716][   T27] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  409.074696][ T9778] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  409.089175][   T27] RBP: 00007f1927d548e6 R08: 0000000000000000 R09: 0000000000000000
[  409.102301][ T9778] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  409.123843][ T9778] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  409.132984][   T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  409.149906][   T27] R13: 000000000000000b R14: 00007f1927e75f80 R15: 00007ffd4702f308
[  409.158624][ T9778] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  409.176283][   T27]  </TASK>
[  409.185212][   T27] 
[  409.185212][   T27] Showing all locks held in the system:
[  409.218146][   T27] 3 locks held by kworker/0:1/13:
[  409.239134][   T27]  #0: ffff8881417c3938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0
[  409.263109][   T27]  #1: ffffc90000d27d20 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0
[  409.286650][   T27]  #2: ffff888148490220 (&dev->mutex){....}-{3:3}, at: hub_event+0x208/0x54c0
[  409.305645][   T27] 3 locks held by kworker/1:1/26:
[  409.318120][   T27]  #0: ffff8880b9a3a358 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xa8/0x140
[  409.351754][   T27]  #1: ffffffff8c91fb20 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30
[  409.377887][   T27]  #2: ffff8880b9b28098 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x120/0x260
[  409.395204][   T27] 1 lock held by khungtaskd/27:
[  409.404735][   T27]  #0: ffffffff8c91fb20 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30
[  409.422033][   T27] 3 locks held by kworker/1:2/1077:
[  409.437112][   T27]  #0: ffff888011c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0
[  409.456516][   T27]  #1: ffffc90004957d20 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0
[  409.494305][   T27]  #2: ffff88804f34a240 (&data->fib_lock){+.+.}-{3:3}, at: nsim_fib_event_work+0x2cd/0x4120
[  409.516047][   T27] 2 locks held by getty/3329:
[  409.528273][   T27]  #0: ffff8880240ee098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70
[  409.548340][   T27]  #1: ffffc9000249c2e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6af/0x1db0
[  409.588918][   T27] 3 locks held by kworker/1:4/3609:
[  409.605477][   T27]  #0: ffff88814b314938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0
[  409.641071][   T27]  #1: ffffc90002ff7d20 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0
[  409.691014][   T27]  #2: ffffffff8da308c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xcc/0x1720
[  409.700478][   T27] 5 locks held by kworker/u4:11/3763:
[  409.731708][   T27]  #0: ffff888011dd5138 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0
[  409.761001][   T27]  #1: ffffc90003077d20 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0
[  409.782103][   T27]  #2: ffffffff8da24d10 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xf1/0xb60
[  409.801022][   T27]  #3: ffffffff8da308c8 (rtnl_mutex){+.+.}-{3:3}, at: ip6_tnl_exit_batch_net+0xc0/0x5e0
[  409.810811][   T27]  #4: ffffffff8c9240e8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x280/0x740
[  409.845514][   T27] 3 locks held by kworker/0:10/3823:
[  409.856456][   T27]  #0: ffff88814b314938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0
[  409.878722][   T27]  #1: ffffc90003187d20 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0
[  409.920427][   T27]  #2: ffffffff8da308c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xcc/0x1720
[  409.943104][   T27] 2 locks held by kworker/1:11/4013:
[  409.955127][   T27]  #0: ffff888011c72138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0
[  409.978573][   T27]  #1: ffffc90003197d20 ((work_completion)(&rew.rew_work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0
[  410.005560][   T27] 1 lock held by kworker/u4:15/5842:
[  410.019326][   T27] 3 locks held by syz-executor/6167:
[  410.031002][   T27] 3 locks held by syz-executor/7040:
[  410.043743][   T27] 3 locks held by syz-executor/7082:
[  410.058273][   T27] 2 locks held by syz.0.910/7772:
[  410.068944][   T27]  #0: ffff8880227e20e0 (&type->s_umount_key#81){++++}-{3:3}, at: iterate_supers+0xac/0x1e0
[  410.093201][   T27]  #1: ffff8880227e00e0 (&sbi->s_lock#2){+.+.}-{3:3}, at: exfat_sync_fs+0x67/0x100
[  410.114334][   T27] 4 locks held by kworker/u4:17/7812:
[  410.128130][   T27]  #0: ffff8880b9a3a358 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xa8/0x140
[  410.166347][   T27]  #1: ffffc900013cfd20 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0
[  410.206676][   T27]  #2: ffffffff8c91fb20 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30
[  410.237670][   T27]  #3: ffffffff8c91fb20 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30
[  410.269987][   T27] 1 lock held by syz-executor/9778:
[  410.299319][   T27]  #0: ffffffff8da308c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x94c/0xee0
[  410.329640][   T27] 1 lock held by syz-executor/9792:
[  410.336287][   T27]  #0: ffffffff8da308c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x94c/0xee0
[  410.372289][   T27] 6 locks held by syz-executor/9826:
[  410.381241][   T27]  #0: ffff88807f282460 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x29a/0xe50
[  410.400337][   T27]  #1: ffff888048a5fc88 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1e7/0x4f0
[  410.420545][   T27]  #2: ffff8881482b83a8 (kn->active#233){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20b/0x4f0
[  410.461081][   T27]  #3: ffffffff8d372948 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: new_device_store+0x1b0/0x910
[  410.491812][   T27]  #4: ffff888059af9178 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8a/0x570
[  410.521210][   T27]  #5: ffffffff8da308c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x80/0x270
[  410.531691][   T13] Bluetooth: hci7: command 0x0419 tx timeout
[  410.552167][   T27] 2 locks held by syz.2.1583/9884:
[  410.557299][   T27]  #0: ffff888072a34410 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x98/0x230
[  410.588353][   T27]  #1: ffffffff8c9240e8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x350/0x740
[  410.610411][   T27] 
[  410.630611][   T27] =============================================
[  410.630611][   T27] 
[  410.662320][   T27] NMI backtrace for cpu 0
[  410.666683][   T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 5.15.164-syzkaller #0
[  410.674664][   T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  410.684866][   T27] Call Trace:
[  410.688147][   T27]  <TASK>
[  410.691073][   T27]  dump_stack_lvl+0x1e3/0x2d0
[  410.695755][   T27]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  410.701396][   T27]  ? panic+0x860/0x860
[  410.705475][   T27]  ? nmi_cpu_backtrace+0x23b/0x4a0
[  410.710595][   T27]  nmi_cpu_backtrace+0x46a/0x4a0
[  410.715530][   T27]  ? __wake_up_klogd+0xd5/0x100
[  410.720380][   T27]  ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0
[  410.726528][   T27]  ? _printk+0xd1/0x120
[  410.730684][   T27]  ? panic+0x860/0x860
[  410.734746][   T27]  ? __wake_up_klogd+0xcc/0x100
[  410.739591][   T27]  ? panic+0x860/0x860
[  410.743661][   T27]  ? __rcu_read_unlock+0x92/0x100
[  410.748682][   T27]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[  410.754747][   T27]  nmi_trigger_cpumask_backtrace+0x181/0x2a0
[  410.760731][   T27]  watchdog+0xe72/0xeb0
[  410.764897][   T27]  kthread+0x3f6/0x4f0
[  410.769101][   T27]  ? hungtask_pm_notify+0x50/0x50
[  410.774135][   T27]  ? kthread_blkcg+0xd0/0xd0
[  410.778736][   T27]  ret_from_fork+0x1f/0x30
[  410.783170][   T27]  </TASK>
[  410.787315][   T27] Sending NMI from CPU 0 to CPUs 1:
[  410.793051][    C1] NMI backtrace for cpu 1
[  410.793062][    C1] CPU: 1 PID: 8162 Comm: kworker/u4:21 Not tainted 5.15.164-syzkaller #0
[  410.793078][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  410.793088][    C1] Workqueue: phy55 ieee80211_iface_work
[  410.793120][    C1] RIP: 0010:deref_stack_reg+0x34/0x110
[  410.793139][    C1] Code: 49 89 d6 49 89 f7 48 89 fb 49 bc 00 00 00 00 00 fc ff df 48 83 c7 08 48 89 f8 48 c1 e8 03 42 80 3c 20 00 74 05 e8 7c 8d 91 00 <4c> 8b 6b 08 48 8d 7b 10 48 89 f8 48 c1 e8 03 42 80 3c 20 00 74 05
[  410.793163][    C1] RSP: 0018:ffffc90003667630 EFLAGS: 00000246
[  410.793175][    C1] RAX: 1ffff920006ccee5 RBX: ffffc90003667720 RCX: 0000000000000000
[  410.793187][    C1] RDX: ffffc90003667760 RSI: ffffc90003667b70 RDI: ffffc90003667728
[  410.793198][    C1] RBP: ffffffff8e6a4a4e R08: ffffc90003667b70 R09: ffffc90003667770
[  410.793209][    C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000
[  410.793220][    C1] R13: 1ffffffff1cd4949 R14: ffffc90003667760 R15: ffffc90003667b70
[  410.793231][    C1] FS:  0000000000000000(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000
[  410.793243][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  410.793254][    C1] CR2: 00007ff75c70eab8 CR3: 00000000650d8000 CR4: 00000000003506e0
[  410.793267][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  410.793276][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  410.793285][    C1] Call Trace:
[  410.793289][    C1]  <NMI>
[  410.793295][    C1]  ? nmi_cpu_backtrace+0x39f/0x4a0
[  410.793312][    C1]  ? read_lock_is_recursive+0x10/0x10
[  410.793329][    C1]  ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0
[  410.793345][    C1]  ? unknown_nmi_error+0xd0/0xd0
[  410.793366][    C1]  ? nmi_cpu_backtrace_handler+0x8/0x10
[  410.793381][    C1]  ? nmi_handle+0xf7/0x370
[  410.793397][    C1]  ? deref_stack_reg+0x34/0x110
[  410.793411][    C1]  ? default_do_nmi+0x62/0x150
[  410.793428][    C1]  ? exc_nmi+0xa8/0x100
[  410.793442][    C1]  ? end_repeat_nmi+0x16/0x31
[  410.793464][    C1]  ? deref_stack_reg+0x34/0x110
[  410.793479][    C1]  ? deref_stack_reg+0x34/0x110
[  410.793494][    C1]  ? deref_stack_reg+0x34/0x110
[  410.793510][    C1]  </NMI>
[  410.793514][    C1]  <TASK>
[  410.793521][    C1]  unwind_next_frame+0x12f1/0x1fa0
[  410.793540][    C1]  ? slab_free_freelist_hook+0xdd/0x160
[  410.793559][    C1]  ? stack_trace_save+0x1c0/0x1c0
[  410.793575][    C1]  arch_stack_walk+0x10d/0x140
[  410.793593][    C1]  ? kmem_cache_free+0x91/0x1f0
[  410.793611][    C1]  stack_trace_save+0x113/0x1c0
[  410.793626][    C1]  ? stack_trace_snprint+0xe0/0xe0
[  410.793640][    C1]  ? kasan_set_track+0x62/0x80
[  410.793656][    C1]  ? slab_free_freelist_hook+0xdd/0x160
[  410.793672][    C1]  ? kfree+0xf1/0x270
[  410.793684][    C1]  ? skb_release_data+0x73a/0x8a0
[  410.793703][    C1]  ? kfree_skb_reason+0xb3/0x170
[  410.793717][    C1]  ? ieee80211_iface_work+0x251/0xcc0
[  410.793732][    C1]  ? worker_thread+0xaca/0x1280
[  410.793748][    C1]  ? kthread+0x3f6/0x4f0
[  410.793760][    C1]  ? ret_from_fork+0x1f/0x30
[  410.793776][    C1]  ? kmem_cache_free+0x91/0x1f0
[  410.793791][    C1]  kasan_set_track+0x4b/0x80
[  410.793806][    C1]  ? kasan_set_track+0x4b/0x80
[  410.793821][    C1]  ? kasan_set_free_info+0x1f/0x40
[  410.793834][    C1]  ? ____kasan_slab_free+0xd8/0x120
[  410.793847][    C1]  ? slab_free_freelist_hook+0xdd/0x160
[  410.793883][    C1]  ? skb_release_data+0x73a/0x8a0
[  410.793899][    C1]  kasan_set_free_info+0x1f/0x40
[  410.793912][    C1]  ____kasan_slab_free+0xd8/0x120
[  410.793927][    C1]  slab_free_freelist_hook+0xdd/0x160
[  410.793944][    C1]  ? ieee80211_iface_work+0x251/0xcc0
[  410.793961][    C1]  kmem_cache_free+0x91/0x1f0
[  410.793979][    C1]  ieee80211_iface_work+0x251/0xcc0
[  410.793999][    C1]  process_one_work+0x8a1/0x10c0
[  410.794022][    C1]  ? worker_detach_from_pool+0x260/0x260
[  410.794039][    C1]  ? _raw_spin_lock_irqsave+0x120/0x120
[  410.794055][    C1]  ? kthread_data+0x4e/0xc0
[  410.794068][    C1]  ? wq_worker_running+0x97/0x170
[  410.794084][    C1]  worker_thread+0xaca/0x1280
[  410.794117][    C1]  kthread+0x3f6/0x4f0
[  410.794130][    C1]  ? rcu_lock_release+0x20/0x20
[  410.794145][    C1]  ? kthread_blkcg+0xd0/0xd0
[  410.794159][    C1]  ret_from_fork+0x1f/0x30
[  410.794181][    C1]  </TASK>
[  411.081004][   T27] Kernel panic - not syncing: hung_task: blocked tasks
[  411.096770][ T9792] 8021q: adding VLAN 0 to HW filter on device bond0
[  411.098231][   T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 5.15.164-syzkaller #0
[  411.111883][ T9792] 8021q: adding VLAN 0 to HW filter on device team0
[  411.112612][   T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  411.139122][ T9792] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  411.143560][   T27] Call Trace:
[  411.143569][   T27]  <TASK>
[  411.143575][   T27]  dump_stack_lvl+0x1e3/0x2d0
[  411.143600][   T27]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  411.148938][ T9792] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  411.153583][   T27]  ? panic+0x860/0x860
[  411.153612][   T27]  panic+0x318/0x860
[  411.170202][ T1077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  411.174891][   T27]  ? schedule_preempt_disabled+0x20/0x20
[  411.174917][   T27]  ? nmi_trigger_cpumask_backtrace+0x221/0x2a0
[  411.179961][ T1077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  411.184387][   T27]  ? fb_is_primary_device+0xd0/0xd0
[  411.184411][   T27]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[  411.184432][   T27]  ? nmi_trigger_cpumask_backtrace+0x221/0x2a0
[  411.184448][   T27]  ? nmi_trigger_cpumask_backtrace+0x281/0x2a0
[  411.184468][   T27]  ? nmi_trigger_cpumask_backtrace+0x286/0x2a0
[  411.184489][   T27]  watchdog+0xeb0/0xeb0
[  411.184518][   T27]  kthread+0x3f6/0x4f0
[  411.184535][   T27]  ? hungtask_pm_notify+0x50/0x50
[  411.184552][   T27]  ? kthread_blkcg+0xd0/0xd0
[  411.184570][   T27]  ret_from_fork+0x1f/0x30
[  411.184601][   T27]  </TASK>
[  411.184796][   T27] Kernel Offset: disabled
[  411.378110][   T27] Rebooting in 86400 seconds..