last executing test programs:

3m8.320728453s ago: executing program 32 (id=69):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
syz_read_part_table(0x5d2, &(0x7f0000000000)="$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")
r0 = socket(0x2, 0x2, 0x1)
bind$unix(r0, &(0x7f0000000000)=@abs, 0x6e)
r1 = socket(0x2, 0x2, 0x1)
bind$unix(r1, &(0x7f0000000000)=@abs, 0x6e)
r2 = socket$inet(0x2, 0x2, 0x1)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYRESOCT], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r3}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_IIF={0x8, 0x12}]}, 0x24}}, 0x0)
sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00')
preadv(r4, &(0x7f0000000840)=[{&(0x7f0000000880)=""/192, 0xc0}], 0x1, 0x180, 0x0)

2m55.281053013s ago: executing program 4 (id=103):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10)
mkdirat(0xffffffffffffff9c, 0x0, 0x20)
pipe2$9p(0x0, 0x0)
write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x298)
r2 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r2, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x11}}}, 0x1e)
connect$pptp(r2, &(0x7f0000000040)={0x18, 0x2, {0x0, @multicast1}}, 0x1e)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x1a01, 0x0)
ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246)
writev(r3, &(0x7f0000000680)=[{&(0x7f00000002c0)="2614", 0xf00}], 0x1)

2m52.226337003s ago: executing program 4 (id=108):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x1, 0x0, 0x0)
openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000100)='cpu.pressure\x00', 0x2, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0x3}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sendmmsg(r0, &(0x7f0000006080)=[{{&(0x7f0000000240)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'blake2s-128-generic\x00'}, 0x80, &(0x7f0000002780)=[{0x0}, {&(0x7f0000000500)="45acb0af411228174e7b63dccb9f23a212e1ead50aab0b6aa74628979ff7af3b783e0da488982774e53d6f5babcd007e0ca96a517faa53b2230e031eec4fc5dfe383071db87851ee3246b243638134424090f9cc0a079588f03d14a234f26de3eb195c142b6ca2cee6a1a37719", 0x6d}, {&(0x7f0000000780)="991e3a925272212a8ff59cb257a3cbad26b57e519665bec71060f260ab757251c772500aaba244e0c1246ed36ebba0614dcdac848aa11f01da3c248866bcfc20211845dc40a76c4f95a48df03c8110c6e7a9774cd02d1291349640f87877501c2caf547e64240371f687f382fe02d3ffcceef1b125347575738170bd3863800cb4f8f58bf4429f0502b6809fd86ffe1ebf02f89eaf922efe4a67f1b6776252e94512f857cca0f788e68e7a9fc05f4bff69d5a1f154f28433e5b4a02f1abe6fbd80131647009433fc5a15c7a03e31360f9b59bd049e953a4332f25ee7fef5fcbb840760b7447419c22421a579753350081479a827a8719f579d86013b", 0xfc}, {0x0}, {&(0x7f0000000640)}, {&(0x7f0000001780)="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", 0x657}], 0x6}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000002980)="78f3808b7c915d4ac897fb3d7a0a3042d2dfbddc9916851bbd913a0f3ba140198ed907885a409fb371f823e949d76277ad6ec1c6c11cb15cdcf4fe82ed541306c0c1232c9e94b9e1165dd21c4b93e2e29467163b75cdbe6974ade8c19acf6aab9c", 0x61}, {&(0x7f00000000c0)="d7ff050fccf3786b17805cbd48f1ef76c0d48a5b3a3e156b3c84d4c9b2688f5d537635240cdfb4a24cc3d66b935b0cdcbfc31a875281f41d72c0657867e6", 0x3e}], 0x2, &(0x7f0000002a00)}}], 0x2, 0x80)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x80)
rseq(0x0, 0x0, 0x0, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
close_range(r4, 0xffffffffffffffff, 0x0)

2m51.803744642s ago: executing program 1 (id=111):
socket$netlink(0x10, 0x3, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1001f0)
fallocate(0xffffffffffffffff, 0x3, 0x401, 0x3)
lseek(0xffffffffffffffff, 0x1, 0x3)
socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = open_tree(0xffffffffffffff9c, 0x0, 0x89901)
fchdir(r1)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x80, &(0x7f0000000340)=ANY=[], 0x40, 0x2f5, &(0x7f0000000a40)="$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")

2m51.20929473s ago: executing program 4 (id=112):
syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20c006, &(0x7f0000000040), 0x41, 0x43d, &(0x7f0000000900)="$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")
r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x7a000}], 0x1, 0x33000, 0x0, 0x3)

2m49.465787755s ago: executing program 1 (id=115):
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x1, 0x6d0, &(0x7f0000001340)="$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")
open(&(0x7f0000000000)='./file0\x00', 0x143042, 0x0)
r0 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86)
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
munlock(&(0x7f0000000000/0xe000)=nil, 0xe000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)
pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc)
pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x1, 0x7800, 0x0, 0x3)

2m48.153744281s ago: executing program 4 (id=118):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x73)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000580)={0x41}, 0xe)
recvmmsg(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000940)=""/4092, 0xffc}], 0x1, &(0x7f00000003c0)=""/42, 0x2a}, 0x1ff}], 0xffc, 0x40000102, 0x0)

2m46.891887997s ago: executing program 1 (id=119):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)

2m44.48759098s ago: executing program 1 (id=123):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x804810, &(0x7f0000000140)={[{@noload}]}, 0x26, 0x77b, &(0x7f0000000b00)="$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")
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc7, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
chdir(&(0x7f0000000240)='./file0\x00')
r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
write$binfmt_register(r2, &(0x7f0000000100)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x7, 0x3a, 'ext4\x00', 0x3a, '', 0x3a, './file0', 0x3a, [0x46]}, 0x2d)

2m42.974613235s ago: executing program 1 (id=126):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2101, 0x0)
ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x4e00, 0x0, 0x730, 0xbdff, 0x10, "fdffffffffffffff"})
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0xff2e)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d4684fb, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x3, 0x0, 0x0, "0062ba7d82000000000000000000f7fffeff00"})
r3 = syz_open_pts(r0, 0x0)
r4 = dup3(r3, r0, 0x0)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0xff)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r5=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(r5, r5, 0x0)
getresgid(&(0x7f0000000140), &(0x7f0000000000), &(0x7f0000000240))

2m41.781968391s ago: executing program 2 (id=127):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$TCFLSH(r1, 0x400455c8, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x4)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000001c0))
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000240))

2m41.533757941s ago: executing program 1 (id=128):
lseek(0xffffffffffffffff, 0xffffffff, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xc8, 0x0, 0xc000000)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000000)={@val={0x4}, @void, @eth={@broadcast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "01d55e", 0x44, 0x29, 0x1, @local, @mcast2={0xff, 0x3}, {[], {{}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0xff88}}}}}}}}}, 0x7e)

2m41.23645654s ago: executing program 33 (id=128):
lseek(0xffffffffffffffff, 0xffffffff, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xc8, 0x0, 0xc000000)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000000)={@val={0x4}, @void, @eth={@broadcast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "01d55e", 0x44, 0x29, 0x1, @local, @mcast2={0xff, 0x3}, {[], {{}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0xff88}}}}}}}}}, 0x7e)

2m40.558647778s ago: executing program 4 (id=130):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000002c0)='./bus\x00', 0x3810888, &(0x7f0000000300)=ANY=[@ANYBLOB="646973636172643d3078303030303030303030303030303030342c71756f74612c6572726f72733d636f6e74696e75652c646973636172643d3078303030303030303030303030303030342c756d61736b3d303030372c75737271756f74612c6572726f72733d72656d6f756e742d726f006e6f646973636172642c726573697a653d3078303030303030303030303031303030302c756d61736b3d3078301030303030303030303030303030322c71756f74612c67695b3d00"/199, @ANYRESHEX=0x0, @ANYBLOB=',resize=0x0000000000008045,resize,uid>', @ANYRESDEC, @ANYBLOB=',fsmagic=0x00000000000003ff,fscontext=sysadm_u,smackfsroot=,\x00'], 0x1, 0x624e, &(0x7f000000ef40)="$eJzs3c1vHGcdB/DfvvqlNLV6qEqEkJsWaClN4qSEQIE2Bzhw6QHlihK5bhWRAkoCSitLceULB078BSAkuCHEEXHgitQDV26cOBHJRgL1xKCxnyee3exm7dreWXs+H8mZ+c0z633G3519yczsEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAfO+7319pRcSNn6UFSxGfiU5EO2KhrJcjYmF5Ka/fjYjnY6c5nouI3lxEefudf56JeD0iPj4TsbW9vlouvrTPfnznD3//zQ+eevtvv+9d+O8f73XeGLfe/fu/+M+fHhxumwEAAKBpiqIoWulj/tn0+b5dd6cAgKnIr/9Fkpef+vqX/3z7z7PUH7VarVarp1BXFaM9qBYRsVG9TfmeweF4ADhhNuKTurtAjeTfaN2IeKruTgAzrVV3BzgWW9vrq62Ub6v6erC8257PBRnIf6P16PqOcdNJhs8xmdbjazM68eyY/ixMqQ+zJOffHs7/xm57P6133PlPy7j8+7uXPjVOzr8znP+Q05N/e2T+TZXz7x4o/478AQAAAABghuX//1+q+fjv3OE3ZV+edPx3eUp9AAAAAAAAAICjdtjx/x4x/h8AAADMrPKzeulXZ/aWjfsutnL59VbE00PrAw2TLpZZrLsfAAAAAAAAAAAAANAk3d1zeK+3InoR8fTiYlEU5U/VcH1Qh739Sdf07Ycmq/tJHgAAdn18Zuha/lbEfERcT9/111tcXCyK+YXFYrFYmMvvZ/tz88VC5XNtnpbL5vr7eEPc7RflL5uv3K5q0uflSe3Dv6+8r37R2UfHjkgv/TXHNNcUNgAku69GW16RTpmieGbcmw8YYP8/hZZiqe7HFbOv7ocpAAAAcPyKoiha6eu8z6Zj/u26OwUATEV+/R8+LnCouj2mPeJofr9arVar1epPVVcVoz2oFhGxUb1N+Z7BcPwAcMJsxCd1d4Eayb/RuhHxfN2dAGZaq+4OcCy2ttdXWynfVvX1II3vns8FGch/o7Vzu3z7UdNJhs8xmdbjazM68eyY/jw3pT7Mkpx/ezj/G7vt/bTecec/LePy7+9cMtc8Of/OcP5DTk/+7ZH5N1XOv3ug/DvyBwAAAACAGZb//3/J8d+8yQAAAAAAAABw4mxtr6/m617z8f/PjVjP9Z+nU86/ddD8F9K8/E+0nH97KP+Xh9brVOYfXtvb//+9vb7623v/+mye7jf/uTzTSo+sVnpEtNI9tbppepite9xmr9Mv76nXane66Zyfovdu3IrbsRYXB9Ztp7/HXvvKQHvZ095A+6WB9u5j7ZcH2nvpeweKhdx+Plbjx3E73tlpL9vmJmz//IT2YkJ7zr/j+b+Rcv7dyk+Z/2Jqbw1NSw8/aj+231eno+7nrVuf//nF49+ciTaj82jbqsrtO1dDf3b+Jk/146d31+6cv3/z3r07K5EmA0svRZocsZx/b+dnbu/5/8Xd9vy8X91fH37UP3D+s2IzumPzf7EyX27vK1PuWx1y/v30k/N/J7WP3v8PlP/v/vrytSltzWRP2v9fraE/AAAAAAAAAAAAAAAA8CRFUexcIvpWRFxJ1//UdW0mADBd+fW/SPJytVqtVqvVp6+uKkZ7s1pExF8e3WBu1G8BAE6A/0XEP+ruBLWRf4Pl7/srpy/V3Rlgqu5+8OEPb96+vXbnbt09AQAAAAAAAAA+rTz+53Jl/OeXImJpaL2B8V+vxfJhx3/t5plHA4we8UDfY2y2+512ZbjxF2JnfO7z48b/PhePj/+dx8TtVLdjjN6E9v6E9kmXWMyPXLqX1sgLPSpy/i9Uxjsv8z87NPz6IcZ/nSlPGv91eMz7Jsj5n6s8nsv8vzS0XjX/4tczl//GflfcjPZA/hfuvf+TC3c/+PC1W+/ffG/tvbUfXV5ZuXj5ypWrV69eePfW7bWLu/8eT69nQM4/j33tPNBmyfnnzOXfLDn/L6Ra/s2S8/9iquXfLDn//H5P/s2S88+ffeTfLDn/V1It/2bJ+X851fJvlq3t9bky/1dTLf9myfv/V1It/2bJ+b+Wavk3S87/fKrl3yw5/wup3kf+vh7+FMn55yNc9v9myfmvpFr+zZLzv5Rq+TdLzv9yquXfLDn/11Mt/2bJ+X811fJvlpz/lVTLv1ly/l9L9T7zn3TaMydEzv9qqu3/zZLz/3qq5d8sOf9vpFr+zZLzfyPV8m+WnP83Uy3/Zsn5fyvV8m+WnP+3Uy3/Zsn5v5lq+TfL3vf/mzFjxkyeqfuZCQAAAAAAAAAAAAAYNo3TieveRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP7PDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1Eaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwd68xcp31/cDP7M1rhxADITj5G7J2jDHOkl1f4gv/upgQIE2gNFdIL7Fd79pZ8C1euyRpVJsGSiScFlVUpC/aAoraSFWFW/GCVinNi6qXV037gr6pqCohNapMFFCR2opmq5nzPM/OzM7O7Honu7PnfD6S/dudOWfOM2eec3Z+a3/nAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9TZ9aPKLlSzLqn9qf63PsjdVv147sr522/tXeoQAAADAUv1v7e/Xrks3HFzASnXL/O27/uFbMzMzM9mn+n9n8CszM+mOkSwbXJNltfuiy//2cKV+meDpbLjSV/d9X4fN93e4f6DD/YMd7h/qcP+aDvcPd7h/zg6YY23++5jag22pfbk+36XZ9dlg7b4tLdZ6urKmry/+LqemUltnZvBYNpWdyCaz8Ybl82UrteVf3FTd1l1Z3Fbf2tltbazOkB8+dTSOoRL28ZaGbc0+ZvSDD2YjP/rhU0f/8NyVG1vVjruh4fHycW7bXB3n58Mt+Vgr2Zq0T+I4++rGubHFa9LfMM5Kbb3q183jfG2B4+yfHeayan7Nh7O+2tcv1/bTQP2v9dJ+2hhu+69bsiy7ODvs5mXmbCvry9Y13NI3+/oM5zOy+hjVqfTWbGBR83TTAuZptU5saZynzcdEfP03hfUG5hlD/cv0g88NzXndFztPo+qznu9YaZ6D3T5WemUOxnnxcu1JP9NyDm4Jz/+prfPPwZZzp8UcTM+7bg5u7jQH+4b6a2NOL0Klts7sHNzRsHx/bUuVWn1la/s5OHbu5Jmx6SeefN/UySPHJ49Pntq1Y8f4rj179u3bN3Zs6sTkeP73Ve7t3rcu60vHwOaw7+Ix8J6mZeun6szXu3ccDrc5Dtc3Ldvt43Cg+clVlueAnDun82PjgepOH77Ul81zjNVen+1LPw7T8647DgfqjsOWP1NaHIcDCzgOq8uc2d70niVr/Z5loO5PqzG8UT8L1tfNweb3I81zsNvvR3plDg6HefEv2+f/WbAxjPeZ0cW+H+mfMwfT0w3nnuot6f3+8L5aaTUvb6recc1Qdn568uxtjx85d+7sjiyUZfG2urnSPF/X1T2nbM587Vv0fD049a5nbmpx+/qwr4bfV/1reN7XqrrM7tvav1a1n26t92fDrTuzULpsufdnq5/m1f2Zesk2+7O6zOfHlv5ePPWldeffwXnOv7Hvfz3fXnqop/sHB/Ljtz/tncGG83HjSzVQO3dVatt+bWxh5+PB8Ge5z8fXtzkfb2hattvn48HmJxfPx5VOv+1YmubXczjMkxPj7c/H1WU27FzsnBxoez6+JdRK2P/vDZ1C6ovq5s588zZta2BgMDyvgbiFxnm6q2H5wdCbVbf1ws6rm6fbbskfqz89u1nLNU9Hmpbt9jxN56v55mml02/frk7z6zkc5sX1u9rP0+oyL+1e+rlzbfyy7tw51GkODvYPVcc8mCZhfr6fWRvn4G3Z0ex0diKbqN07VJtPldq2Rm9f2BwcCn+W+1y5oc0c3Na0bLfnYPo5Nt/cqwzMffJd0Px6Dod58dzt7edgdZk793b3veu2cEtapu69a/Pv1+b7nddNTbvpjfydV3Wcf723/e9mq8uc2LfYPrP9fro13HJNi/3UfPzOd0xNZMuznzaEcV7ZN/9+qo6nusxX9i9wPh3MsuzCY3fUft8b/n3lz85/91sN/+7S6t90Ljx2x6vXHvubxYwfgNXv9bysy3/W1f3L1EL+/R8AAABYFWLf3xdqov8HAACAwoh9f/xf4Yn+HwAAAAoj9v0DoSYl6f833Hll6vULWUrmzwTx/rQb7s6XixnX8fD9yMys6u13PD/547+4sLBt92VZ9pO7f7Xl8hvujuPKjYRxXv5w4+1zV7ywoO0ffnB2ufr8+tfC48fns9Bp0CqCO55l2YvXPVvbzsjDl2r1pbsP1+p9F595urrMa/vz7+P6r7wtX/73Qvj34LEjDeu/EvbD90Mdv6f1/ojrffPSezfufWh2e3G9yuY31572c4/kjxs/J+fLT+fLx/083/j/8ksvfLO6/OPvbj3+C32tx/9CeNznQ/3vd+bL178G1e/jel8I44/bi+vd9o3vtBz/5S/my5/5SL7c4VDj9reF77d85MpU/f56vHKk4XllH82Xi9sf/+5v1e6Pjxcfv3n8w4cuNeyP5vnx0j/ljzPWtHy8PW4n+vOm7Vcfp35+xu2/8BuHG/Zzp+1fvu+Vd1Yft3n7tzYt19+0fvMnNv3+F55tub04noN/cqbh+Ry8NxzHYfvPPRLmY7j/fy4/27Dd6PC9jeefuPzX1l9oeD7RXT/Kt3/5A8dr9d9Hfvy717zp2jdfvLm677Ls5fvzx+u0/eN/cLph/F+/YXvt9Yj3x4x+8/bnE7d/9rOjp05Pn5+aqNurtc/O+Vg+njXDa9dVx3tdOLc2f3/o9LlHJ8+OjI+MZ9lIcT9C76p9I9RX83JxsetvfzC8njd99cV1W//xS/H2f34gv/3SPfnPrfeE5b4cbl+fv34zlSVu/7lNN9SO78pL+fcNOfYu2LjlP/YtaMHw/JvfF8T5fubtj9b2Q/W+2s+NeFwvcfzfm8gf59thv86ET2befMPs9uqXj5+NcOn+/Hhf8v4Lp7n4uv5ReL0//v388eO44vP9Xngf850Njee7OD++faGv+fFrn+JxMZxPsov5/XGpuL8vvXZDy+HFzyHJLt5Y+/630+PcuKinOZ/pJ6bHTkydOv/42LnJ6XNj0088eejk6fOnzh2qfZbnoU93Wn/2/LSudn6amNyzOxtfm2XZ6Wx8GU5Yb8z4q18tbPxnHjw6sXd868TksSPnj5178Mzk2eNHp6ePTk5Mbz1y7NjkZzutPzVxYMfO/bv27hw9PjVxYN/+/bv2j06dOl0dRj6oDvaMf2b01NlDtVWmD+zev+P223ePj548PTF5YO/4+Oj5TuvXfjaNVtf+ldGzkyeOnJs6OTk6PfXk5IEd+/fs2dnx0wBPnjk2PTJ29vypsfPTk2fH8ucycq52c/VnX6f1Kabpf83fzzar5B/El33i1j3p81mrnv/cvA+VL9L0AaJXwmfR/P1bzuxbyPex7x8MNSlJ/w8AAABlEPv+oVAT/T8AAAAURuz714Sa6P8BAACgMGLfPxxqUpL+X/5f/n9h+f/8fvn/cuX/zzyW50pXe/4/5ufl/8thhfP/S95+F/L/N7e7c5H5/9/8U/l/+f9lzM8vSd/Kj1/+X/6fuXot/x/7/rVZVsr+HwAAAMog9v3rQk30/wAAAFAYse+/JtRE/w8AAACFEfv+N4WalKT/l/9fUP5/Z6fAVfHz/67/L/+frc78f3xx5P9LY9H5+4ceaPi2APn/tlz/vwP5/9Wb/++B8cv/y//TbHDee1Yq/x/7/mtDTUrS/wMAAEAZxL7/zaEm+n8AAAAojNj3Xxdqov8HAACAwoh9//pQk5L0//L/rv8v/y//X+j8/1Kv/183GPn/1cH1/9uT/+/gqvP/w/L/qzH/P9jd8fd2/r/j8LuZ/x/K5P8Jeu36/7Hvf0uoSUn6fwAAACiD2Pe/NdRE/w8AAACFEfv+t4Wa6P8BAACgMGLff32oSUn6f/l/+X/5f/l/+f/W2+98/f/8K/n/3iL/3578fweu/1+u/H+Xx9/b+f9uX/9/8MPN67v+P630Wv4/9v1vDzUpSf8PAAAAZRD7/htCTfT/AAAAUBix739HqIn+HwAAAAoj9v0bQk1K0v/L/8v/y//L/8v/t95+5/x/Tv6/t8j/tyf/34H8v/y//P/C8v8t3vzK/9NKr+X/Y99/Y6hJSfp/AAAAKIPY998UaqL/BwAAgMKIff//CzXR/wMAAEBhxL5/Y6hJSfr/DXdeeeirta/k/zP5f/n/EuT/bx2S/5f/Lzb5//bk/zuQ/5f/l/9f4PX/51pM/n9NpwejMHot/x/7/neGmpSk/wcAAIAyiH3/u0JN9P8AAABQGLHvvznURP8PAAAAhRH7/pFQk9XX/3+y7ypWcv3/YuX///ivnrs5k/+X/++w/YLm/+M0kP8vOfn/9sqQ/68/J8n/L85K5+dX+/jl/13/n7l6Lf8f+/5NoSarr/8HAAAA5hH7/s2hJvp/AAAAKIzY998SaqL/BwAAgMKIff+WUJOS9P/y/8XK/0fy//L/7bZf0Px/Iv9fbvL/LdQdpKsk/z/i+v/y/6tx/MXI/8d3v/L/dEev5f9j3//uUJOS9P8AAABQBrHv3xpqov8HAACAwoh9/3tCTfT/AAAAUBix798WalKS/l/+X/5f/l/+f6Xy/0Py/2mvyv93j/x/e4vN/w+twuv/L2X78v/y//L/rv9Pd/Va/j/2/e8NNSlJ/w8AAABlEPv+7aEm+n8AAAAojPj/N/P/96r/BwAAgCKKff9oqElJ+v8l5P9n+uX/E/n/xvH3av6/Iv/fU/l/1/+f3avy/90j/9/eKrn+v/x/D+X/q7fL/8v/y/9ztXot/x/7/veFmpSk/wcAAIAyiH3/baEm+n8AAAAojNj3j4Wa6P8BAACgMGLfPx5qUpL+3/X/S5f/X1Pm/L/r/8v/y/8Xn/x/e/L/Hcj/u/5/0fL/WSb/z4rqtfx/7Pt3hJqUpP8HAACAMoh9/85QE/0/AAAAFEbs+3eFmuj/AQAAoDBi37871KQk/b/8f+ny/6W+/r/8v/y//H/xyf+3J//fgfy//H/R8v+u/88K67X8f+z7bw81KUn/DwAAAGUQ+/49oSb6fwAAACiM2PfvDTUJ/X+r/9cNAAAArC6x798XalKSf/+X/y9I/v/X/65h2/L/8v/ttt+d/P9a+f9Q5f97S0Hz/82HxVWT/+9A/l/+X/5f/p+u6rX8f+z794ealKT/BwAAgDKIff/7Q030/wAAAFAYse///6Em+n8AAAAojNj3/1SoSUn6f/n/guT/m8j/y/+3277r/8v/F1lB8/9dU6j8f5/8v/x/b41f/l/+n7ne+Px//Gph+f/Y9x8INSlJ/w8AAABlEPv+nw410f8DAABAYcS+/wOhJvp/AAAAKIzY9x8MNSlJ/y//L/8v/y///8bk/z+QNevF/H918ixb/n9Q/n85yP+3V6j8v+v/y//32Pjl/+X/mavXrv8f+/4PhpqUpP8HAACAMoh9/x2hJvp/AAAAKIzY938o1ET/DwAAAIUR+/47Q01K0v/L/8v/y//L/7v+f+vtu/7/6iT/3578fwfy//L/8v/y/3RVr+X/Y9//4VCTkvT/AAAAUAax7/9IqIn+HwAAAAoj9v0fDTXR/wMAAEBhxL7/rlCTkvT/8v/y//L/8v/y/623L/+/Osn/tyf/34H8v/y//L/8P13Va/n/2Pf/TKhJSfp/AAAAKIPY998daqL/BwAAgMKIff89oSb6fwAAACiM2Pd/LNSkJP2//L/8v/y//L/8f+vty/+vTvL/7cn/dyD/L/8v/y//T1f1Wv4/9v0fDzUpSf8PAAAAZRD7/p8NNdH/AwAAQGHEvv8ToSb6fwAAACiM2Pf/XKhJSfp/+X/5/97K/89cqF9P/l/+P+tW/r+6kvx/Kcj/tyf/30GL/P8a+X/5f/l/+X+uWq/l/2Pff2+oSUn6fwAAACiD2PffF2qi/wcAAIDCiH3//aEm+n8AAAAojNj3PxBqUpL+X/6/lPn/9JR7L//v+v/y/67/L/+/NPL/7cn/d+D6//L/8v/y/3RVr+X/Y9//YKhJSfp/AAAAKIPY9z8UaqL/BwAAgMKIff8nQ030/wAAAFAYse//VKhJSfp/+f9S5v97+Pr/K5f/rz6H7uf/BxrmR5ny/8N1r2eal/L/8v/LQP6/Pfn/DuT/Q34+65P/78H8f5jNa+dZX/6fXtRr+f/Y9z8calKS/h8AAADKIPb9Px9qov8HAACAwoh9/y+Emuj/AQAAoDBi3/+LoSYl6f/l/+X/5f9d/9/1/1tvX/5/dZL/b0/+v4MS5v9/re7rlc7PL9VKj9/1/+X/mavX8v+x7/+lUJN5G79X/3MBTxMAAADoIbHvfyTUpCT//g8AAABlEPv+Q6Em+n8AAAAojNj3Hw41KUn/L//fnP+PV1SV/5f/X3X5/wH5/5z8f7l1L///jmuzTP5f/r/4+f96K52fX+3jl/+X/2euXsv/x77/SKhJSfp/AAAAKIPY9/9yqIn+HwAAAAoj9v1HQ030/wAAAFAYse+fCDUpSf8v/+/6/93K//9E/n+l8/+u/x/I/5eb6/+3J//fgfy//L/8v/w/XdVr+f/Y90+GmpSk/wcAAIACS78Ojn3/sVAT/T8AAAAURuz7j4ea6P8BAACgMGLf/2ioSUn6f/l/+X/X/1+J/P9Aw/Ly/7mey/8PN45D/n91kP9vb+n5//z8Jf8v/9+K/L/8v/w/zXot/x/7/qlQk5L0/wAAAFAGse//dKiJ/h8AAAAKI/b9nwk10f8DAABAYcS+/0SoSUn6f/l/+f+y5/8rWXbR9f/l/1tt3/X//4+9+3iu6zzvOH5EsQBZJPoTss4qy2SlbLLPNrvMZK1UuRdK7t2Wqyx3ufde5SL33rvlIvde5Sp7hh6Bz/OQAC7OBYlD3HPe9/PZPCYjChcSk8zPnO+8y6T/H+f9/zX0//p//b/+n0nNrf/P3X9d3NLJ/gcAAIAe5O7/r7jF/gcAAIBm5O7/77jF/gcAAIBm5O7/n7ilk/2v/9f/997/Dxt5/3/3X6//P0//r/+fwr7+/uSl/foD+/9//Kfr/0P/r//X/4/S/+v/9f/sNbf+P3f//8Ytnex/AAAA6EHu/v+LW+x/AAAAaEbu/v+PW+x/AAAAaEbu/uvjlk72v/5f/99H/39y0P8fsv+/Xf+v/1827/+P0/+vof/X/+v/9f9Mam79f+7+e8Utnex/AAAA6EHu/nvHLfY/AAAANCN3/33iFvsfAAAAmpG7/75xSyf7X/+v/++j/2/h/f/T3v/f8/3o//X/q+j/x+n/19D/6//1//p/JjW3/j93//3ilk72PwAAAPQgd//94xb7HwAAAJqRu/8BcYv9DwAAAM3I3f/AuKWT/a//1//r/5fS/x/T+//6f/3/wt06XPi/Cfr//fT/a6zp/4dB/z/m0P386m9vOZ//APp//T/7za3/z93/oLjlX4bh9OV+kwAAAMCs5O5/cNzSyZ//AwAAQA9y95+NW+x/AAAAaEbu/hvilk72v/5f/6//1//r/1d/ff3/Mh2uvz9z4K/X/4cD+/9/uOa6/+y3//f+/zjv/+v/9f/sNbf+P3f/jXFLJ/sfAAAAepC7/yFxi/0PAAAAzcjd/9C4xf4HAACAZuTuf1jc0sn+1/+31v9fvevXXdT/79Qu+n/9/1T9/81bF/596f/1/3Ny1P5e/x+6fv9/u36o/9f/6//1/xzN3Pr/3P0Pj1s62f8AAADQg9z9j4hb7H8AAABoRu7+R8Yt9j8AAAA0I3f/o+KWTvb/ovr/c1fr/73/r/+fSf8/eP9f/z9T+v9x+v81Wnn//zJ/12y6nz+qTX9+/b/+n/3m1v/n7n903NLJ/gcAAIAe5O5/TNxi/wMAAEAzcvc/Nm6x/wEAAKAZufsfF7d0sv8X1f97/7/j/j+/gv5f/3/l+/+k/18m/f84/f8arfT/l2nT/fzSP7/+X//PfnPr/3P3Pz5u6WT/AwAAQA9y9z8hbrH/AQAAoBm5+58Yt9j/AAAA0Izc/U+KWzrZ//p//f8y+n/v/+v/vf+v/z8c/f84/f8a+n/9v/5f/8+k5tb/5+6/KW7pZP8DAABAD3L3Pzlusf8BAACgGbn7nxK32P8AAADQjNz9T41bOtn/+n/9v/5f/6//X/319f/LpP8fp/9fQ/+v/9f/6/+Z1Iz6/4t+1dbwtLilk/0PAAAAPcjd//S4xf4HAACAZuTuf0bcYv8DAABAM3L33xy3dLL/9f+z6f93cr62+v/tYRguu///V/3/svv/7Yv+fdbvS/2//v8Y6P/H6f/X0P/r//X/+n8mNaP+f+fHufufGbd0sv8BAACgB7n7b4lb7H8AAABoRu7+Z8Ut9j8AAAA0I3f/s+OWTva//n82/f+Otvp/7//v/f3RU//v/f/99P/HQ/8/Tv+/hv5f/6//1/8zqbn1/7n7nxM3nT512d8iAAAAMDO5+58bt3Ty5/8AAADQg9z9z4tb7H8AAABYqJv2/Uzu/ufHLZ3sf/3/tP3/6Yt+Tv+v/9/7+2O+/f9Vuypl/f95+v9l0v+P0/+vof/X/+v/9f9Mam79f+7+F8Qtnex/AAAA6EHu/lvjFvsfAAAAFuK2v133V+Tuf2HcYv8DAABAM3L3vyhu6WT/6/+9/6//1/97/3/119f/L5P+f5z+fw39v/5/s/3/mQv/Uf9PGy6h/z937tzZK97/5+5/cdzSyf4HAACAHuTuf0ncYv8DAABAM3L3vzRusf8BAACgGbn7Xxa3dLL/9f9Xov8/XyvOuv/P3+rL6v9vGIa59/9n9f/6/wPp/4+H/n+c/n8N/b/+3/v/+n8mNbf3/3P3vzxu6WT/AwAAQA9y978ibrH/AQAAoBm5+18Zt9j/AAAA0Izc/a+KWzrZ//p/7/8vqP/3/r/+f9f3s7D+/+5B/38sFtH/bx/89efe/9+o/9f/j+iu//+3f971Q/2//p/95tb/5+5/ddzSyf4HAACAHuTuf03cYv8DAABAM3L3vzZusf8BAACgGbn7Xxc3nexk/+v/9f/6f/2//n/11z/m9/9PD8Og/5/AIvr/EXPv/73/r/8f013/v4f+X//PfnPr/3P3vz5u6WT/AwAAQA9y978hbrH/AQAAoBm5+98Yt9j/AAAA0Izc/W+KWzrZ//p//b/+X//ffP9/4yL6f+//T0T/P07/v4b+X/+v/9f/cyw21f/n7n9z3NLJ/gcAAIAe5O5/S9xi/wMAAEAzcve/NW6x/wEAAKAZufvfFrd0sv/1//r/S+n/83Pq/9vq/8/Mrv/f2vX36+T9f/3/RPT/4/T/a+j/9f/6/5v0/0xpbu//5+5/e9zSyf4HAACAHuTuf0fc+q9u7X8AAABoRu7+2+IW+x8AAACakbv/nXFLJ/tf/6//9/6//r/59//1/13R/4/T/6+h/9f/6/+9/8+k5tb/5+5/V9zSyf4HAACAHuTuf3fcYv8DAABAM3L3vydusf8BAACgGbn7b49bOtn/+n/9v/5f/6//P//vUP/fBv3/uOPp/7f1//r/6ueviv8t0P/r/9f9eto0t/4/d/9745ZO9j8AAAD0IHf/++IW+x8AAACakbv//XGL/Q8AAACLdHLFz+Xu/0Dc0sn+1//r//X/+n/9/+qvr/9fJv3/OO//H+Rvbrn4R/r/w/bzf7/rR0t7/3/v///S/+v/md7c+v/c/R+MWzrZ/wAAANCD3P0filvsfwAAAGhG7v4Pxy32PwAAADQjd/9H4pZO9r/+X//fTP9/z4fQ/+v/9f/dW1D/v7XqJxfb/58ehmHR/X/o7f3/M7t/uOn3849q059f/6//Z7+59f+5+z8at3Sy/wEAAKAHufs/FrfY/wAAANCM3P0fj1vsfwAAAGjGzu7PuKzD/a//31j/v/P31/97/1//r//X/09rQf3/Sovt/xf//n/orf/fY9P9/NI/v/5f/89+c+v/P7Hzq7aGT8Ytnex/AAAA6EHu/k/FLfY/AAAANCN3/6fjFvsfAAAAmpG7/zNxSyf7X//v/f9l9P/nzp07q//X/+/+fi70/3fq/yn6/3H6/zX0//p//b/+n0nNrf/P3f/ZuKWT/Q8AAAA9yN3/ubjF/gcAAIBm5O7/fNxi/wMAAEAzcvefiFs62f/6/xn0/1v6f+//6/8H7//r/yei/19tO67+f40W+/+tw3/7m+7nj2rTn1//r/9nv7n1/1/Y+VVbwxfjlk72PwAAAPQgd/+X4pZ9+/+OY/xUAAAAwJRy9385bvHn/wAAANCM3P1fiVs62f/6/+Pr/+/5Z9fL+//bw+rPr//X/+v/9f9Xmv5/nP5/jRb7/0uw6X5+6Z9f/6//Z7+59f+5+78at+wefqcu7bsEAAAA5iR3/9filk7+/B8AAAB6kLv/jrjF/gcAAIBm5O7/etzSyf7X/8/g/f8G+//jef9/S/+v/5+y/z+h/2+D/n+c/n8N/b/+X/8/Uf+fv5v1/72bW/+fu/8bcUsn+x8AAAB6kLv/m3GL/Q8AAADNyN3/rbjF/gcAAIBm5O6/M265aP+vartbof/X/y+3/9/Q+/+n9f+psf7f+/+NaLv/3zrE32F79H962P7/zHC0/j/p//X/+v9e+3/v/3Pe3Pr/3P3fjlv8+T8AAAAszqkDfj53/3fiFvsfAAAAmpG7/7txi/0PAAAAzcjd/7245a4Tm/pIx0r/r//X/3v/X/+/+uvr/5ep7f7/6Lz/v4b+f4p+/lr9fxv9/zDo/zm6ufX/ufu/H7f4838AAABoRu7+H8Qt9j8AAAA0I3f/D+MW+x8AAACakbv/R3FLJ/tf/6//P2L/v5NmHqr/H64ZhgX2/9uD/l//f57+fxn0/+P0/2vo/73/r//3/j+Tmlv/n7v/x3FLJ/sfAAAAepC7/ydxi/0PAAAAzcjd/9O4xf4HAACAZuTu/1nc0sn+31j/H/+o9f+b7f9PeP9/h/f/9f+rvr7+f5n0/+P0/2vo//X/+n/9P5OaW/+fu//ncUsn+x8AAAB6kLv/F3GL/Q8AAADNyN3/y7jF/gcAAIBm5O7/VdzSyf73/n+X/f+p/LYneP9f/6//1//r/2dF/z9O/79a/YvS/+v/9f/6fyY1t/4/d/+v45ZO9j8AAAD0IHf/b+IW+x8AAACakbv/rrjF/gcAAIBm5O7/bdzSyf7X/3fZ/9f7/3Pu/+/5z7cPw6D/1//r//X/l0L/P26T/f+//936L+v9/433//kR9P/6f/0/k5hb/5+7/3dxSyf7HwAAAHqQu//3cYv9DwAAAM3I3f+HuMX+BwAAgGbk7v9j3NLJ/l/T/5+pv1D/P0r/v/vzb+z9//wg+v/Rr6//1/+3TP8/zvv/a+j/vf+v/9f/M6m59f+5+/8Ut3Sy/wEAAKAHufvvjlvsfwAAAGhG7v4/xy32PwAAADQjd/9f4pZO9r/3/5fU/1+r//f+v/5f/6//X0P/P07/v4b+X/+v/9f/M6m59f+5+/8aAAD//66mQrs=")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x206e)

2m39.576416745s ago: executing program 4 (id=133):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0)
r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80880, 0x0)
ioctl$PTP_EXTTS_REQUEST2(r3, 0x40103d0b, &(0x7f0000000040)={0x5, 0x1})

2m31.122305048s ago: executing program 2 (id=149):
socket$inet6(0xa, 0x3, 0x7)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$alg(0x26, 0x5, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r1=>0x0})
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x7, &(0x7f00000000c0)="fcffffff", 0x4)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r1, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r0], 0x40c}}, 0x0)

2m30.730277727s ago: executing program 2 (id=152):
r0 = socket$inet6(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4)
syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4000, 0x6, &(0x7f00000fd000/0x4000)=nil)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x3f1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000020000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000e44652367d2b2c6275ceebc3bd0afee60cc9bc83f43cb457bdc13c5c0354c221ce812d33e2c2803d390501a22c563bfcec8ad8421407dc7ef7c4017e84d5fd26c42353c1bd8c531036590840927b812ff71d2e7114f3ce098b2210f1caef977e2ef5"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000840)=ANY=[], 0x2, 0x1ea, &(0x7f00000003c0)="$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")
r5 = getuid()
lchown(&(0x7f0000000100)='./file0\x00', r5, 0xee00)

2m27.385415207s ago: executing program 2 (id=154):
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000080)='./bus\x00', 0x80d0, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,errors=continue,nodots,dmask=00000000000000000077777,nodots,dots,nodots,showexec,dots,sys_immutable,discard,dots,nodots,nodots,dots,nodots,dots,nfs,dots,dots,dots,dots,nodots,nodots,nodots,quiet,dots,nodots,gid=', @ANYRESHEX=0x0, @ANYBLOB=',allow_utime=00000000000000000O00000,erroRs=coe,uid<\x00\x00\x00\x00\x00', @ANYRESDEC, @ANYBLOB=',\x00', @ANYBLOB="68bac6041815ef37a6ec6c50a12b46fd36dcd88f680ea4ef3be66d10c2a041d4025f5f7591929a903689c268bc3a712942522105844eaa7d1b08da38b6a8878df85a5c85d8d89d179c3f5477e30f6ca1a096de9d2353ef3d158509118495a2d3b12d3a808bc40eab6d8523c4d2c651fe7d0d9276f2908b312d1497018ddc01f2be0dd3c3cff4de3d92a6c59b1b637d5a127327a6299754daeb73abadec85eb5864", @ANYRES64], 0xfd, 0x1bf, &(0x7f0000000640)="$eJzs3TGL02AYB/Cn9bzmnG4TRCHg4nSon+BEThADgtJBJ4XT5SqCt0SX9mP4Af0A0qmLRGrSxkaHWmxS6++39En/edvnHZp26ZNXN99dnL+/fPvl+udIkl70T+M0Zr04jn4sTAIA2CezooivRanrXgCAdqzx/f+t5ZYAgC17/uLlkwdZdvYsTZOI6SQf5sPyscwfPc7O7qY/HNerpnk+vLLM76XN3w7z/Gpcq/L75fp0NT+MO7fLfJ49fJo18kGcb3frAAAAAAAAAAAAAAAAAAAAAADQmVuRLvx2vs/JSTM/qvLy6Kf5QI35PQdx46A6rMcDFeM2NgUAAAAAAAAAAAAAAAAAAAD/mMuPny5ej0ZvPtTFICJWn/mTole98IbL2y76sRNtKP5qke5GG6MNPwWHEbGtxmZFUax1cn2NGHR1cQIAAAAAAAAAAAAAAAAAgP9M/affX7Oki4YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoAP1/f83KMYRscbJyzc76nSrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7LHvAQAA///DgjXa")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020)

2m26.840200365s ago: executing program 2 (id=157):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
close(0x3)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, 0x0, 0x0)
connect$inet(r0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x2, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r3, 0x0)
syz_emit_ethernet(0x4a, &(0x7f00000007c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\f\n5', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)
syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x10, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x4e21, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x7, 0xc2, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x6, 0xf989, "0454"}]}}}}}}}, 0x0)

2m26.546661424s ago: executing program 3 (id=158):
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x4000000000000001, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000008"], 0x50)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
socket(0x2c, 0x3, 0x0)
socket$kcm(0x2c, 0x3, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
epoll_create1(0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x5, 0x2})
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1)

2m26.079178453s ago: executing program 3 (id=161):
r0 = socket(0x10, 0x803, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff2}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0x100}]}}]}, 0x3c}}, 0x44800)

2m25.953828902s ago: executing program 2 (id=162):
openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$snapshot(0xffffff9c, &(0x7f00000001c0), 0x8001, 0x0)

2m25.772859471s ago: executing program 34 (id=162):
openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$snapshot(0xffffff9c, &(0x7f00000001c0), 0x8001, 0x0)

2m24.162049667s ago: executing program 35 (id=133):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0)
r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80880, 0x0)
ioctl$PTP_EXTTS_REQUEST2(r3, 0x40103d0b, &(0x7f0000000040)={0x5, 0x1})

2m23.196149484s ago: executing program 3 (id=166):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
mkdir(0x0, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
read$FUSE(r1, 0x0, 0x0)
syz_fuse_handle_req(r1, 0x0, 0x0, 0x0)
r2 = socket$inet6_dccp(0xa, 0x6, 0x0)
r3 = socket$inet6(0xa, 0x6, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
listen(r3, 0xc)
setsockopt$inet6_int(r2, 0x10d, 0xb, &(0x7f0000000080)=0xa, 0x4)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x9, @loopback, 0x20}, 0x1c)
close_range(r0, 0xffffffffffffffff, 0x0)

2m22.306609671s ago: executing program 3 (id=168):
sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0x40080)
syz_mount_image$fuse(0x0, &(0x7f0000000340)='./file0\x00', 0x2112018, 0x0, 0xff, 0x0, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000006, &(0x7f0000000480)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@jqfmt_vfsv1}, {@i_version}, {@minixdf}, {@data_err_abort}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@bsdgroups}, {@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@quota}]}, 0x1, 0x54f, &(0x7f0000000b00)="$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")
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00')
r2 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0)
mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x1217880, 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
sendfile(r2, r1, 0x0, 0x8000000d)

2m21.646756159s ago: executing program 3 (id=169):
unshare(0x2040400)
r0 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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")
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x0)
dup3(r3, r0, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000200)={@cgroup=r3, r1, 0x12, 0x6, 0x0, @void, @value}, 0x10)

2m16.189575932s ago: executing program 3 (id=175):
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x22, 0x4, 0x0, 0x0, 0x88, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x4}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x8, [{@dev}, {@multicast2}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0x0, [@private, @rand_addr, @multicast1]}, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private, @remote]}]}}}}})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0)
r3 = dup(r1)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000})
ioctl$KVM_NMI(r4, 0xae9a)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

2m15.904118471s ago: executing program 5 (id=176):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000004000000000000000fcffffff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file2\x00', 0x0, &(0x7f0000007540)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYRES32], 0x43, 0x5552, &(0x7f0000000580)="$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")
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
lseek(r1, 0x10000, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0)
getdents64(r1, 0x0, 0x0)

2m15.47630427s ago: executing program 36 (id=175):
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x22, 0x4, 0x0, 0x0, 0x88, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x4}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x8, [{@dev}, {@multicast2}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0x0, [@private, @rand_addr, @multicast1]}, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private, @remote]}]}}}}})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0)
r3 = dup(r1)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000})
ioctl$KVM_NMI(r4, 0xae9a)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

2m13.814607065s ago: executing program 5 (id=180):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'})
sendto$inet(r0, &(0x7f0000000300)="09268a927f1f6588b9ded8974895abeaf4b4834ff922b3f1e0b02bd67aa04959bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba5df97ed07c8381b8d2cfdca5983a23a47db5e25c8035dc283f3ad5a087e879a20403ff96d479b67d56c7809a9845f5", 0x6f, 0x11, 0x0, 0x0)

2m13.060520452s ago: executing program 5 (id=182):
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, &(0x7f0000000440), 0x10)
listen(r1, 0xfff)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000180)={0x5, 0xfffffffe}, 0x8)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
getdents64(0xffffffffffffffff, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

2m12.755975121s ago: executing program 5 (id=183):
openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0)
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYRES16=0x0, @ANYRES32, @ANYBLOB="54438609962818b171429bc16e1fc3fabad8da0aab06d29d1f1c8db5d398aee73986e4f2dfefb1fbb45b597a6cadb0208190bc01d9bcb508c680bfcf6394c9ec0a99e26bcd8e0b78a6b86f8edbbc8e536def7e177f4e1b52b4c16085066ec38a2b64bd54bbcc8d5f830f35d4bb2f28ad550f8fd257", @ANYRES64=0x0, @ANYRES64, @ANYRES64, @ANYRES8], 0xfd, 0x222, &(0x7f00000016c0)="$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")
chdir(&(0x7f0000004340)='./file0\x00')
creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x1c917e, 0x0)
mknod(&(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0)
write$binfmt_script(r0, &(0x7f0000000280), 0x208e24b)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents64(r1, &(0x7f0000000080)=""/165, 0xa5)

2m11.376189207s ago: executing program 5 (id=185):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_open_dev$evdev(0x0, 0x2, 0x862b01)
r2 = open(0x0, 0x64842, 0x21)
ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r2, 0xc0984124, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}]}, 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f00000004c0)={0x9, 0x0, 0x20, 0x9, "cbfea29368cc60a1ff856ae471fe261fdfb44a306ea8d6996bbcb8eb45d73158"})
sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x20000841)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d6163767461703002"], 0xe8}}, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0xe, 0xf, 0x4, 0x0, 0x2, 0x1, 0x8, 0x3, 0x7, 0x9, 0x0, 0x6, 0x0, 0x8, 0x1, 0xb, 0x8, 0xe, 0x2, '\x00', 0x2, 0x400})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

2m10.800996545s ago: executing program 5 (id=187):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x4000000e)
write$FUSE_CREATE_OPEN(0xffffffffffffffff, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7f03)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)

2m10.643624125s ago: executing program 37 (id=187):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x4000000e)
write$FUSE_CREATE_OPEN(0xffffffffffffffff, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7f03)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)

1m12.965193606s ago: executing program 6 (id=269):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)
truncate(0x0, 0xb73d)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0)
semget$private(0x0, 0x0, 0x408)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
r2 = eventfd(0x0)
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0})
ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000900))
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x1, r2})
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x20000)
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs/custom0\x00', 0x4, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
r6 = dup3(r5, r4, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000080)=[@acquire_done, @request_death], 0x0, 0x0, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000540)={0x1, 0x0, [{0x0, 0x80, &(0x7f0000000680)=""/128}]})
write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b)

1m8.354561712s ago: executing program 6 (id=277):
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
io_uring_setup(0x1362, &(0x7f0000000080)={0x0, 0x6d6c, 0x2000})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r3)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r4, 0x4000000)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r6 = accept(r3, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x80)
recvfrom(r5, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x0, 0x0, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000001c0)={0x9e0000, 0x400, 0xff, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x980900, 0x3, '\x00', @ptr=0x5}})
get_mempolicy(&(0x7f0000000100), &(0x7f0000000040), 0xda, &(0x7f0000133000/0x1000)=nil, 0x3)

1m7.341717389s ago: executing program 6 (id=278):
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000))
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff"], 0x15)
r2 = dup(r1)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="a8"], 0xa8)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000980)=ANY=[@ANYBLOB="6801"], 0x168)
write$FUSE_INIT(r2, &(0x7f0000000580)={0x50}, 0x50)
write$FUSE_CREATE_OPEN(r2, &(0x7f0000000440)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x7, 0xfffffff6, 0x0, {0x0, 0x5, 0x8000, 0x6b2, 0x1, 0x7, 0x80000001, 0x1, 0x2, 0x1000, 0x6, 0x0, 0xffffffffffffffff, 0x0, 0x6}}, {0x0, 0xc}}}, 0xa0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})
r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
getdents64(r3, 0x0, 0x0)

1m5.357194873s ago: executing program 6 (id=283):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0)
open(0x0, 0x8060, 0x20)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10)
unshare(0x62040200)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
readv(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
bpf$ITER_CREATE(0x22, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x80)

50.040517115s ago: executing program 6 (id=308):
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000280)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = syz_clone(0x0, 0x0, 0xfffffffffffffead, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
ptrace(0x8, r3)
syz_pidfd_open(r3, 0x0)

48.5376396s ago: executing program 6 (id=312):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0)
mq_unlink(&(0x7f0000000000)='eth0\x00')
close(0xffffffffffffffff)

30.369997665s ago: executing program 38 (id=312):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0)
mq_unlink(&(0x7f0000000000)='eth0\x00')
close(0xffffffffffffffff)

17.617372544s ago: executing program 8 (id=368):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
r3 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0)
mq_timedsend(r3, 0x0, 0x0, 0x6, 0x0)
mq_unlink(&(0x7f0000000000)='eth0\x00')

14.786977096s ago: executing program 8 (id=373):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
r1 = syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
ptrace$peek(0x2, r1, &(0x7f0000000000))
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000540)='./file0\x00', 0x204058, &(0x7f0000000100)=ANY=[@ANYBLOB='showassoc,nocompress,hide,overriderockperm,check=relaxed,mode=0x0000000000000b,nocompress,block=0x0000000000000400,\x00\x00\x00'], 0xff, 0x52c, &(0x7f0000000580)="$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")
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000280)={'team0\x00', <r6=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7000fddbdf250200000008000100", @ANYRES32=r6], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0)

11.123066135s ago: executing program 7 (id=377):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x3, 0x6, 0xfffa}, 0x1d, [0x8000, 0xc95a, 0xf, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x49, 0x39cc191b, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x24, 0x9, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x0, 0xe, 0x0, 0x71, 0x7, 0x7, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x8000012f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x2009, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f2e, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x7f, 0x9, 0x3, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x7, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x3, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x5, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xa2ed, 0x4, 0x25], [0x9, 0xbb31, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x8001, 0x2, 0x7, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x1000, 0xa1f, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

9.653884s ago: executing program 8 (id=381):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYRES8, @ANYRES32, @ANYRES32], 0x0, 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$vcsa(0xffffff9c, &(0x7f0000000240), 0x400, 0x0)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000002c0)={<r4=>0x0, 0xa1, "6700138f4cedc9b18e80e9305ed65522e083c9dfd02ae69396b8525541d5cf80c10c25492d5d75a1fe9a0154dee662a3710d6a376e7002957f745c7e9e5da2eece4bb9379099db894735ec4915917c67ce9fd946226de21c7825f0770f9b5080bfbe04c2560fe70cb10940c7c41882a5ac44c05deb9f9ee1114b7059d8ec1f0f6be314d7d7a9cf98acd367d5557eced09545ec7c03e4e9406fa5e13544eec668f7"}, &(0x7f0000000380)=0xa9)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000009c0)={r4, 0x4}, 0x8)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0)
preadv2(r5, 0x0, 0x0, 0x2b, 0x0, 0x0)
write$tun(r5, &(0x7f0000000480)={@val={0x0, 0x884c}, @val={0x5, 0x80, 0x7800, 0xc4, 0x40, 0xc}, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xb}, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @private0}}, 0x42)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
unshare(0x400)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)
syz_clone(0x10002000, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0<Q8\xbeX\xde\xd6 \xef\x0e\xc2.\x9c=1\x15d\xddIv\x0fh\xe6M(D\xad\xeb\xcfX8\xb9\x8d\xbe(\xd3\x16?x\xbd@\x0f\xf5\xdb\xeb\xd7i*\xea\x86JX\xff;\x96\xbb\xa7\xa8u5R\xa2,\xba\xbc\x01\x12\xb3q,\x9d\xf8\xbdb`\xb3\xc6\x0f\xb3\xac\xc7\xa4O@\x81\xfc\x1a4$\x885\x97\xa9|\x99\x86*.\xda\x96RQ\xe5\xb1\xef\xb7\x10\x99\xd4\xa7\b\xcd\xe9\xa5\xf6wR\xc1\xdfH).\a\x9a\xab\x9e&+\xc4#\x90\xc9%\xb9\xd7o\x86\x13\a\xc0\x01w9u6\xdd\x9fJ^o\x1d\xda\x11?\xc1\xf5\xf7\xff\xec\x916\xceQ\xcfU\x035\x96\x8f\xc7\x84\"2\xef\x02\xcf\a+\x8a\xd1\x11\xb5\xa8\x92\f\xb3R\",\xfc!_&pD\xeb5\xc6\xc8\xff2\xee\x14\x83\x14l\x04\x80\xaa7\x80\xf1\x18\xf5\xa5\xd23\xe5\b\x00\xe8\x9c\xd4\xd0\a\x93#\xb9Z\xc0y\x97<\xe5i\xe9\xe4\xb02Cu\xe1d\r\x0e\xc1\xf1\x81^\xa7\xffz)\x19U\xe5\xd4\xf5@O#W\x8a\xbb3c+\n\x97\xa6\xf7\x90$\xd6*\xd0\x1b\x10\xe4HM:XO\x1b\rx\xc7\x12|\x7fN\xc9\xf9i\xe4\xe5-\x9b\xe407\x9d\xe8\xc6\x90\x9f_Jf\x05\r\x1b\x9af\v\xbcv\x83\xf3j\xaf\xd0F', 0x1)
write$binfmt_script(r7, &(0x7f0000000280)={'#! ', './file0/file0'}, 0x11)
execveat(r7, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r8 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$6lowpan_control(r8, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b)

7.822473254s ago: executing program 0 (id=383):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCRYPT={0x5, 0xc, 0x1}]}}}]}, 0x3c}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r2 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x4})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
socket$kcm(0x29, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
ioperm(0x6, 0x8, 0xb42c)
prctl$PR_MPX_DISABLE_MANAGEMENT(0xe)
r5 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
r6 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, 0x0, &(0x7f0000000040))
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x7a, &(0x7f0000000080)={0x0, 0x4, "179da51e"}, &(0x7f00000000c0)=0xc)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x68}}, 0x0)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000dc0)={0x0, 0x6, 0x4, {0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x5}, {}, {}, {}, {}, {}, {}, {0x0, 0x4000}]}}})
clock_adjtime(0x3, &(0x7f00000003c0)={0x4, 0x48, 0x7fff, 0x3, 0x5, 0x1ff, 0x2, 0x7fff, 0x8, 0x0, 0x10, 0x3, 0x6, 0x81, 0x400, 0xfffffffffffffffc, 0xf, 0x7c22f3a, 0xffff, 0xffffffffffff5304, 0xa, 0x0, 0xd35c, 0x3, 0x0, 0x8})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

7.725254154s ago: executing program 7 (id=385):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280))
sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0)

7.385438973s ago: executing program 9 (id=386):
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000020c0)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x2}}, './file0\x00'})
bind$bt_l2cap(r0, 0x0, 0x0)
mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x4)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3)
syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
r3 = epoll_create1(0x0)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f00000000c0)={0x6000001f})
read$char_usb(r4, 0x0, 0x0)

7.299532203s ago: executing program 7 (id=387):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000540)='./file0\x00', 0x204058, &(0x7f0000000100)=ANY=[@ANYBLOB='showassoc,nocompress,hide,overriderockperm,check=relaxed,mode=0x0000000000000b,nocompress,block=0x0000000000000400,\x00\x00\x00'], 0xff, 0x52c, &(0x7f0000000580)="$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")
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000280)={'team0\x00', <r5=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000fddbdf250200000008000100", @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0)

6.21259533s ago: executing program 9 (id=388):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x34, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}], {0x14, 0x10}}, 0xc0}}, 0x0)

5.594888357s ago: executing program 0 (id=389):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
r3 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0)
mq_timedsend(r3, 0x0, 0x0, 0x6, 0x0)
mq_unlink(&(0x7f0000000000)='eth0\x00')
close(r3)

5.593716697s ago: executing program 7 (id=391):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='fsi_master_acf_cmd_rel_addr\x00', r1, 0x0, 0x7fff}, 0x18)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = socket$inet6(0xa, 0x3, 0x88)
syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff020000000000000000000000000001"], 0x0)
recvmmsg(r3, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x1a0682)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x24000041}, 0x4c014)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r2}, 0x10)
r4 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000080)={0x1, 0x1, 0x1, 0x0, 0x2}, 0xc)

5.265844407s ago: executing program 9 (id=392):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/schedstat\x00', 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
userfaultfd(0x80001)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000180), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3)
socket(0x10, 0x3, 0xfffffffd)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_procfs(0x0, &(0x7f00000021c0)='maps\x00')
sendmsg$key(0xffffffffffffffff, 0x0, 0x4000000)
r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r4, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2, 0xfffffffc}, 0x5, 0xfffffffc, &(0x7f0000000040)={{0x0, 0x2, 0x80, 0xfffffffe}}, 0x0, 0x0, 0x1}})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f00003c9000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0)

4.346788724s ago: executing program 0 (id=393):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='fsi_master_acf_cmd_rel_addr\x00', r1, 0x0, 0x7fff}, 0x18)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = socket$inet6(0xa, 0x3, 0x88)
syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff020000000000000000000000000001"], 0x0)
recvmmsg(r3, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r4, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x24000041}, 0x4c014)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r2}, 0x10)
r5 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000080)={0x1, 0x1, 0x1, 0x0, 0x2}, 0xc)

4.302663563s ago: executing program 9 (id=394):
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000020c0)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x2}}, './file0\x00'})
bind$bt_l2cap(r0, 0x0, 0x0)
mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x4)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3)
syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = epoll_create1(0x0)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f00000000c0)={0x6000001f})
read$char_usb(r4, 0x0, 0x0)
epoll_pwait(r3, &(0x7f0000000200)=[{}], 0x1, 0x0, 0x0, 0x0)

4.210401013s ago: executing program 9 (id=395):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
r0 = syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
ptrace$peek(0x2, r0, &(0x7f0000000000))
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000540)='./file0\x00', 0x204058, &(0x7f0000000100)=ANY=[@ANYBLOB='showassoc,nocompress,hide,overriderockperm,check=relaxed,mode=0x0000000000000b,nocompress,block=0x0000000000000400,\x00\x00\x00'], 0xff, 0x52c, &(0x7f0000000580)="$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")
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000280)={'team0\x00', <r5=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000fddbdf250200000008000100", @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0)

2.693311539s ago: executing program 9 (id=396):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
r3 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0)
mq_timedsend(r3, 0x0, 0x0, 0x6, 0x0)
mq_unlink(&(0x7f0000000000)='eth0\x00')
close(r3)

2.644673459s ago: executing program 0 (id=397):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x38, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x10}}, 0xc4}}, 0x0)

1.619639256s ago: executing program 8 (id=398):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
r1 = syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
ptrace$peek(0x2, r1, &(0x7f0000000000))
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000540)='./file0\x00', 0x204058, &(0x7f0000000100)=ANY=[@ANYBLOB='showassoc,nocompress,hide,overriderockperm,check=relaxed,mode=0x0000000000000b,nocompress,block=0x0000000000000400,\x00\x00\x00'], 0xff, 0x52c, &(0x7f0000000580)="$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")
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00', <r5=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000fddbdf250200000008000100", @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0)

1.577249595s ago: executing program 0 (id=399):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='fsi_master_acf_cmd_rel_addr\x00', r1, 0x0, 0x7fff}, 0x18)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = socket$inet6(0xa, 0x3, 0x88)
syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff020000000000000000000000000001"], 0x0)
recvmmsg(r3, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x1a0682)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x24000041}, 0x4c014)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r2}, 0x10)
r4 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000080)={0x1, 0x1, 0x1, 0x0, 0x2}, 0xc)

1.475382565s ago: executing program 8 (id=400):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='fsi_master_acf_cmd_rel_addr\x00', r1, 0x0, 0x7fff}, 0x18)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = socket$inet6(0xa, 0x3, 0x88)
syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff020000000000000000000000000001"], 0x0)
recvmmsg(r3, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x1a0682)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r4, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x24000041}, 0x4c014)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r2}, 0x10)
r5 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000080)={0x1, 0x1, 0x1, 0x0, 0x2}, 0xc)

215.892021ms ago: executing program 0 (id=401):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xb8}}, 0x0)

156.370211ms ago: executing program 7 (id=402):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', <r3=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0)

126.577161ms ago: executing program 8 (id=403):
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000280)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = syz_clone(0x0, 0x0, 0xfffffffffffffead, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
r4 = syz_pidfd_open(r3, 0x0)
process_mrelease(r4, 0x700000000000000)

0s ago: executing program 7 (id=404):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x2f)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
ioctl$SIOCGETMIFCNT_IN6(0xffffffffffffffff, 0x89e0, 0x0)
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)
bind$unix(r1, &(0x7f0000000680)=@abs={0x1, 0x0, 0x4e24}, 0x6e)
syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x20001f, &(0x7f0000000600)={[{@sb={'sb', 0x3d, 0x800}}, {@noauto_da_alloc}, {@sb={'sb', 0x3d, 0x278}}]}, 0x3, 0x532, &(0x7f0000000080)="$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")
syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b6e"], 0x0)

kernel console output (not intermixed with test programs):

mended to keep mac addresses unique to avoid problems!
[   69.924683][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   69.935167][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.946718][ T4171] batman_adv: batadv0: Interface activated: batadv_slave_0
[   69.959829][ T4177] device veth0_macvtap entered promiscuous mode
[   69.971489][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   69.980018][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   69.989275][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   70.015957][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.030707][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.040888][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.052467][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.062497][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.072977][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.084682][ T4171] batman_adv: batadv0: Interface activated: batadv_slave_1
[   70.096197][ T4171] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.105129][ T4171] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.113829][ T4171] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.120606][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.124413][ T4171] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.132038][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.149708][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.158972][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.167607][  T511] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   70.179373][  T511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   70.188710][  T511] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   70.198795][ T4177] device veth1_macvtap entered promiscuous mode
[   70.243517][  T511] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   70.276003][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   70.288286][  T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.297655][  T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.299622][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.315681][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   70.326423][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.336311][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   70.347630][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.357897][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   70.371659][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.383441][ T4177] batman_adv: batadv0: Interface activated: batadv_slave_0
[   70.409064][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   70.431964][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   70.441715][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   70.468316][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.481868][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.492186][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.502664][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.512773][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.523516][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.534500][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.545319][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.556851][ T4177] batman_adv: batadv0: Interface activated: batadv_slave_1
[   70.605056][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.613042][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.649329][  T511] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.661892][  T511] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.669961][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   70.716863][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   70.739769][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   70.753260][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   70.782594][ T4177] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   71.098683][ T4177] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   71.162236][ T4177] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   71.228521][ T4177] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   71.251777][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[   71.262453][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[   72.554111][    C0] sched: RT throttling activated
[   72.564036][ T4211] Bluetooth: hci0: command 0x0419 tx timeout
[   72.575531][ T4211] Bluetooth: hci1: command 0x0419 tx timeout
[   72.581583][ T4211] Bluetooth: hci4: command 0x0419 tx timeout
[   72.587896][ T4211] Bluetooth: hci2: command 0x0419 tx timeout
[   72.593939][ T4211] Bluetooth: hci3: command 0x0419 tx timeout
[   73.627562][  T511] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.689229][  T511] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.824049][  T511] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   73.934659][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.957578][  T511] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.465561][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.474812][  T511] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.828136][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   74.866141][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   75.189729][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.256715][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.348184][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   75.402418][ T4286] tc_dump_action: action bad kind
[   78.329332][ T4307] Zero length message leads to an empty skb
[   80.699208][ T4312] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   81.568416][    T7] cfg80211: failed to load regulatory.db
[   81.575366][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!!
[   81.586544][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!!
[   81.596448][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!!
[   81.813785][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!!
[   81.822829][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #308!!!
[   82.198063][ T4312] loop2: detected capacity change from 0 to 512
[   82.323279][ T4326] kvm: emulating exchange as write
[   82.352097][ T4312] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   82.772158][ T4312] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   83.196557][ T4312] EXT4-fs (loop2): 1 orphan inode deleted
[   83.288180][ T4312] EXT4-fs (loop2): 1 truncate cleaned up
[   83.298588][ T4312] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000010000,block_validity,quota,. Quota mode: writeback.
[   83.355982][ T4336] loop4: detected capacity change from 0 to 512
[   83.424125][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!!
[   83.434179][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!!
[   83.444135][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!!
[   83.454134][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!!
[   83.463162][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!!
[   84.755218][ T4336] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrquota,grpjquota=,nodelalloc,,errors=continue. Quota mode: writeback.
[   84.794316][ T4336] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   84.835589][ T4347] loop0: detected capacity change from 0 to 164
[   85.242663][ T4346] loop3: detected capacity change from 0 to 32768
[   86.079017][ T4347] rock: corrupted directory entry. extent=28, offset=0, size=16777216
[   86.118951][ T4347] rock: corrupted directory entry. extent=28, offset=0, size=16777216
[   86.211301][ T4347] iso9660: Corrupted directory entry in block 4 of inode 1792
[   86.238105][ T4346] JBD2: Ignoring recovery information on journal
[   86.247314][ T4346] jbd2_journal_bmap: journal block not found at offset 64 on loop3-27
[   86.255727][ T4346] JBD2: bad block at offset 64
[   86.276243][ T4346] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[   86.459392][ T4338] xt_CT: You must specify a L4 protocol and not use inversions on it
[   88.178322][ T4177] ocfs2: Unmounting device (7,3) on (node local)
[   88.369791][ T4371] loop2: detected capacity change from 0 to 512
[   88.563821][ T4371] EXT4-fs (loop2): Ignoring removed orlov option
[   88.584415][ T4371] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   88.653217][ T4375] netlink: 48 bytes leftover after parsing attributes in process `syz.0.33'.
[   89.470144][ T4371] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.32: casefold flag without casefold feature
[   89.580029][ T4371] EXT4-fs (loop2): Remounting filesystem read-only
[   89.600324][ T4371] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.32: couldn't read orphan inode 15 (err -117)
[   89.769746][ T4371] EXT4-fs (loop2): Remounting filesystem read-only
[   89.806087][ T4371] EXT4-fs (loop2): mounted filesystem without journal. Opts: orlov,nodelalloc,errors=remount-ro,grpquota,auto_da_alloc,dioread_nolock,quota,. Quota mode: writeback.
[   90.108021][   T13] usb 5-1: new low-speed USB device number 2 using dummy_hcd
[   91.059374][ T4393] syz.0.36 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   91.649915][ T4390] loop1: detected capacity change from 0 to 512
[   91.773750][ T4390] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   91.848499][ T4390] EXT4-fs (loop1): 1 orphan inode deleted
[   91.864638][ T4390] EXT4-fs (loop1): 1 truncate cleaned up
[   91.880661][ T1111] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   91.891061][ T4390] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000010000,block_validity,quota,. Quota mode: writeback.
[   91.923092][ T4400] kvm [4397]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x9b6
[   91.945523][ T4400] kvm [4397]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0xa36
[   92.030788][ T4400] kvm [4397]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x318
[   92.095875][ T4400] kvm [4397]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0xb1a
[   92.124338][ T1111] usb 1-1: Using ep0 maxpacket: 16
[   92.156209][ T4400] kvm [4397]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x358
[   92.215051][ T4400] kvm [4397]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x370
[   92.244640][ T1111] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   92.270966][ T1111] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   92.322572][ T1111] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   92.365793][ T1111] usb 1-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00
[   92.379784][ T1111] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   92.393955][ T1111] usb 1-1: config 0 descriptor??
[   92.433674][   T26] audit: type=1326 audit(1738037033.419:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4404 comm="syz.2.39" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8f194abd29 code=0x0
[   92.494178][   T13] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[   92.502528][   T13] usb 5-1: config 179 has no interface number 0
[   92.516968][   T13] usb 5-1: config 179 interface 65 altsetting 0 has an invalid endpoint with address 0xF7, skipping
[   92.528327][   T13] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[   92.553049][   T13] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[   92.596192][   T13] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[   92.606457][   T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   92.655373][   T13] usb 5-1: can't set config #179, error -71
[   92.729457][   T13] usb 5-1: USB disconnect, device number 2
[   92.911317][ T1111] uclogic 0003:5543:0064.0001: unknown main item tag 0x0
[   92.927092][ T1111] uclogic 0003:5543:0064.0001: No inputs registered, leaving
[   92.945896][ T1111] uclogic 0003:5543:0064.0001: hidraw0: USB HID v0.00 Device [HID 5543:0064] on usb-dummy_hcd.0-1/input0
[   93.191983][   T13] usb 1-1: USB disconnect, device number 2
[   94.663254][ T4430] loop0: detected capacity change from 0 to 8
[   94.844620][   T13] Bluetooth: hci3: command 0x0405 tx timeout
[   95.959947][ T4437] SQUASHFS error: Failed to read block 0x1ec: -5
[   95.966944][ T4437] SQUASHFS error: Unable to read metadata cache entry [1ea]
[   95.975465][   T26] audit: type=1800 audit(1738037036.969:3): pid=4437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.46" name="file1" dev="loop0" ino=5 res=0 errno=0
[   96.293725][ T4441] loop0: detected capacity change from 0 to 256
[   96.924263][ T4449] hub 9-0:1.0: USB hub found
[   96.939003][ T4449] hub 9-0:1.0: 1 port detected
[   97.023788][ T4441] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[   97.755748][ T4457] loop0: detected capacity change from 0 to 64
[   97.821619][ T4460] loop1: detected capacity change from 0 to 64
[   99.471776][ T4472] =======================================================
[   99.471776][ T4472] WARNING: The mand mount option has been deprecated and
[   99.471776][ T4472]          and is ignored by this kernel. Remove the mand
[   99.471776][ T4472]          option from the mount to silence this warning.
[   99.471776][ T4472] =======================================================
[   99.526553][ T4472] loop0: detected capacity change from 0 to 256
[   99.615663][ T4482] loop1: detected capacity change from 0 to 64
[  103.098521][ T4261] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.826668][ T4261] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.982559][ T4261] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.447538][ T4261] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.869496][ T4532] capability: warning: `syz.4.76' uses deprecated v2 capabilities in a way that may be insecure
[  106.088943][ T4532] loop4: detected capacity change from 0 to 512
[  106.281454][ T4532] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option
[  106.352172][ T4532] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[  106.384862][ T4532] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[  106.420126][ T4532] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[  106.469524][ T4532] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  106.487964][ T4532] [EXT4 FS bs=4096, gc=2, bpg=35, ipg=32, mo=c04ce01c, mo2=0000]
[  106.505477][ T4532] EXT4-fs (loop4): too many log groups per flexible block group
[  106.513516][ T4532] EXT4-fs (loop4): failed to initialize mballoc (-12)
[  106.521150][ T4532] EXT4-fs (loop4): mount failed
[  106.696145][ T4523] loop1: detected capacity change from 0 to 2048
[  106.732392][ T4532] loop4: detected capacity change from 0 to 512
[  106.761348][ T4523] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  106.985402][ T4523] attempt to access beyond end of device
[  106.985402][ T4523] loop1: rw=524288, want=33554432, limit=2048
[  107.008336][ T4555] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  107.115911][ T4558] loop3: detected capacity change from 0 to 512
[  107.142239][ T4532] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2219: inode #15: comm syz.4.76: corrupted in-inode xattr
[  107.365454][ T4558] EXT4-fs (loop3): 1 orphan inode deleted
[  107.371345][ T4558] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback.
[  107.394146][ T4558] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  108.184709][ T4532] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.76: couldn't read orphan inode 15 (err -117)
[  108.293406][ T4532] EXT4-fs (loop4): mounted filesystem without journal. Opts: nouid32,block_validity,,errors=continue. Quota mode: writeback.
[  108.350147][ T4528] chnl_net:caif_netlink_parms(): no params data found
[  108.576883][   T21] Bluetooth: hci1: command 0x0409 tx timeout
[  108.924824][ T4528] bridge0: port 1(bridge_slave_0) entered blocking state
[  108.959113][ T4528] bridge0: port 1(bridge_slave_0) entered disabled state
[  108.992705][ T4528] device bridge_slave_0 entered promiscuous mode
[  109.028901][ T4528] bridge0: port 2(bridge_slave_1) entered blocking state
[  109.070661][ T4528] bridge0: port 2(bridge_slave_1) entered disabled state
[  109.105949][ T4528] device bridge_slave_1 entered promiscuous mode
[  109.228457][ T4528] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  109.275792][ T4528] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  109.449879][ T4528] team0: Port device team_slave_0 added
[  109.478885][ T4528] team0: Port device team_slave_1 added
[  109.716043][ T4589] loop1: detected capacity change from 0 to 64
[  109.728216][ T4583] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  110.034802][ T4528] batman_adv: batadv0: Adding interface: batadv_slave_0
[  110.041943][ T4528] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  110.104189][ T4528] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  110.510459][ T4528] batman_adv: batadv0: Adding interface: batadv_slave_1
[  110.964125][ T4528] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  111.019573][   T21] Bluetooth: hci1: command 0x041b tx timeout
[  111.049333][ T4528] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  111.201817][ T4603] loop4: detected capacity change from 0 to 1024
[  111.360539][ T4606] binder: BINDER_SET_CONTEXT_MGR already set
[  111.366987][ T4606] binder: 4598:4606 ioctl 4018620d 20004a80 returned -16
[  112.179216][ T4528] device hsr_slave_0 entered promiscuous mode
[  112.220916][ T4528] device hsr_slave_1 entered promiscuous mode
[  112.256123][ T4528] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  112.274987][ T4528] Cannot create hsr debugfs directory
[  112.317186][   T21] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  112.342037][ T4611] netlink: 'syz.1.86': attribute type 10 has an invalid length.
[  112.350079][ T4611] netlink: 40 bytes leftover after parsing attributes in process `syz.1.86'.
[  112.365890][ T4611] bridge0: port 3(macvlan1) entered blocking state
[  112.372540][ T4611] bridge0: port 3(macvlan1) entered disabled state
[  112.384837][ T4611] device macvlan1 entered promiscuous mode
[  112.398365][ T4611] bridge0: port 3(macvlan1) entered blocking state
[  112.405367][ T4611] bridge0: port 3(macvlan1) entered forwarding state
[  112.588217][ T4261] device hsr_slave_0 left promiscuous mode
[  112.682994][ T4261] device hsr_slave_1 left promiscuous mode
[  112.725052][   T21] usb 4-1: Using ep0 maxpacket: 8
[  112.772021][ T4615] ubi0: attaching mtd0
[  112.777171][ T4615] ubi0 error: ubi_attach_mtd_dev: bad VID header (8454144) or data offsets (8454208)
[  112.791129][ T4261] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  112.814213][ T4261] batman_adv: batadv0: Removing interface: batadv_slave_0
[  112.875696][   T21] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  112.888469][ T4261] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  112.950615][   T21] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  112.965471][ T4261] batman_adv: batadv0: Removing interface: batadv_slave_1
[  113.189319][   T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  113.220760][ T4261] device bridge_slave_1 left promiscuous mode
[  113.227809][ T1111] Bluetooth: hci1: command 0x040f tx timeout
[  113.293372][   T21] usb 4-1: config 0 descriptor??
[  113.307016][ T4261] bridge0: port 2(bridge_slave_1) entered disabled state
[  113.332559][ T4261] device bridge_slave_0 left promiscuous mode
[  113.381833][   T21] gspca_main: vc032x-2.14.0 probing 046d:0892
[  113.477021][ T4261] bridge0: port 1(bridge_slave_0) entered disabled state
[  113.775053][   T21] gspca_vc032x: reg_r err -32
[  113.782474][   T21] vc032x: probe of 4-1:0.0 failed with error -32
[  114.899806][ T4638] loop4: detected capacity change from 0 to 4096
[  114.912943][ T4261] device veth1_macvtap left promiscuous mode
[  114.920709][ T4261] device veth0_macvtap left promiscuous mode
[  114.927638][ T4261] device veth1_vlan left promiscuous mode
[  114.933754][ T4261] device veth0_vlan left promiscuous mode
[  114.999147][ T4640] loop1: detected capacity change from 0 to 128
[  115.017448][ T4642] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  115.083776][   T26] audit: type=1800 audit(1738037056.069:4): pid=4638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.94" name="file1" dev="loop4" ino=15 res=0 errno=0
[  115.137241][ T4246] usb 4-1: USB disconnect, device number 2
[  115.181412][   T26] audit: type=1800 audit(1738037056.069:5): pid=4638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.94" name="file1" dev="loop4" ino=15 res=0 errno=0
[  115.244877][ T4636] Bluetooth: hci1: command 0x0419 tx timeout
[  115.265124][ T4640] EXT4-fs (loop1): Test dummy encryption mode enabled
[  115.292960][ T4640] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none.
[  115.312939][ T4640] ext4 filesystem being mounted at /19/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  115.491025][ T4653] loop4: detected capacity change from 0 to 8192
[  115.583306][ T4655] loop3: detected capacity change from 0 to 4096
[  115.619372][ T4653] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal
[  115.644426][ T4653] REISERFS (device loop4): using ordered data mode
[  115.651109][ T4653] reiserfs: using flush barriers
[  115.665916][ T4653] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  115.685733][ T4653] REISERFS (device loop4): checking transaction log (loop4)
[  115.756140][ T4655] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  115.756476][ T4653] REISERFS (device loop4): Using r5 hash to sort names
[  115.787195][ T4653] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  115.826212][ T4261] team0 (unregistering): Port device team_slave_1 removed
[  115.867954][ T4261] team0 (unregistering): Port device team_slave_0 removed
[  115.931683][ T4261] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  115.942513][ T4653] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 4029, free_space(entry_count) 2
[  115.967238][ T4653] REISERFS error (device loop4): vs-5150 search_by_key: invalid format found in block 540. Fsck?
[  115.979186][ T4261] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  115.980063][ T4653] REISERFS (device loop4): Remounting filesystem read-only
[  115.999975][ T4653] REISERFS error (device loop4): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 2 0x0 SD] stat data
[  116.018357][ T4177] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22.
[  116.046379][ T4653] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 4029, free_space(entry_count) 2
[  116.064397][ T4653] REISERFS error (device loop4): vs-5150 search_by_key: invalid format found in block 540. Fsck?
[  116.082180][ T4653] REISERFS error (device loop4): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 2 0x0 SD] stat data
[  116.201576][ T4261] bond0 (unregistering): Released all slaves
[  117.334638][ T4246] Bluetooth: hci1: command 0x0405 tx timeout
[  120.188091][ T4528] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  120.216983][ T4528] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  120.269340][ T4528] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  120.371758][ T4528] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  120.402532][ T4698] loop2: detected capacity change from 0 to 512
[  120.584959][ T4696] hfs: can't find a HFS filesystem on dev nullb0
[  120.708571][ T4698] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,barrier,max_dir_size_kb=0x0000000000000022,noinit_itable,errors=remount-ro,auto_da_alloc,. Quota mode: writeback.
[  120.742088][ T4698] ext4 filesystem being mounted at /25/wÅü5ÔTÕÔ)­`)Y�Fæ¾nA­½@T<Ÿ3»Ú‚$¢ó×rçcnH³<¿pƒrèñ¹“>ÅwC¾" žð-ùËòöè€Ó8 supports timestamps until 2038-01-19 (0x7fffffff)
[  121.968382][ T4714] loop4: detected capacity change from 0 to 512
[  121.977276][ T4709] loop1: detected capacity change from 0 to 128
[  122.041747][ T4709] FAT-fs (loop1): bogus sectors per cluster 0
[  122.054932][ T4709] FAT-fs (loop1): Can't find a valid FAT filesystem
[  122.080003][ T4714] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  122.138170][ T4714] EXT4-fs (loop4): 1 truncate cleaned up
[  122.147926][ T4714] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  122.703481][ T4717] device syzkaller0 entered promiscuous mode
[  122.746037][   T26] audit: type=1800 audit(1738037063.739:6): pid=4714 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.112" name="bus" dev="loop4" ino=18 res=0 errno=0
[  122.824706][ T4528] 8021q: adding VLAN 0 to HW filter on device bond0
[  122.907963][ T4528] 8021q: adding VLAN 0 to HW filter on device team0
[  122.951432][ T4727] loop1: detected capacity change from 0 to 1024
[  122.958615][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  122.967630][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  124.064229][ T4727] hfsplus: xattr searching failed
[  124.127724][ T4736] hfsplus: xattr searching failed
[  124.132974][   T26] audit: type=1800 audit(1738037065.119:7): pid=4736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.115" name="file1" dev="loop1" ino=3 res=0 errno=0
[  124.172404][ T4727] hfsplus: xattr searching failed
[  124.218785][ T4727] hfsplus: xattr searching failed
[  124.319911][ T4736] hfsplus: b-tree write err: -5, ino 3
[  125.453038][  T511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  125.493642][  T511] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  125.523015][  T511] bridge0: port 1(bridge_slave_0) entered blocking state
[  125.530178][  T511] bridge0: port 1(bridge_slave_0) entered forwarding state
[  125.539534][  T511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  125.553715][  T511] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  125.563273][  T511] bridge0: port 2(bridge_slave_1) entered blocking state
[  125.570414][  T511] bridge0: port 2(bridge_slave_1) entered forwarding state
[  125.579411][  T511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  125.588497][  T511] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  126.620554][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  126.630204][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  126.639953][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  126.659250][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  126.667838][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  126.676851][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  126.694992][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  126.761398][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  126.834743][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  126.843389][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  127.001494][ T4767] loop2: detected capacity change from 0 to 16
[  127.695069][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  127.846427][ T4767] erofs: (device loop2): mounted with root inode @ nid 36.
[  128.023151][ T4772] loop1: detected capacity change from 0 to 2048
[  128.271214][ T4772] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,,errors=continue. Quota mode: none.
[  128.904439][ T4772] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  129.010666][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  129.026326][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  129.090684][ T4528] 8021q: adding VLAN 0 to HW filter on device batadv0
[  129.272843][ T4171] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /26/file0: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0
[  130.598661][ T4184] Bluetooth: hci2: sending frame failed (-49)
[  130.671993][ T4184] Bluetooth: hci2: Received unexpected HCI Event 00000000
[  130.695438][ T4171] syz-executor (4171) used greatest stack depth: 19936 bytes left
[  130.715155][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  130.716895][ T4777] loop3: detected capacity change from 0 to 32768
[  130.758110][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  130.843490][ T4777] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.124 (4777)
[  130.861853][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  130.886914][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  130.926455][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  130.962901][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  130.994719][ T4777] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  131.007122][ T4528] device veth0_vlan entered promiscuous mode
[  131.024300][ T4777] BTRFS info (device loop3): setting nodatacow, compression disabled
[  131.048727][ T4777] BTRFS info (device loop3): force clearing of disk cache
[  131.065899][ T4528] device veth1_vlan entered promiscuous mode
[  131.092559][ T4777] BTRFS info (device loop3): enabling ssd optimizations
[  131.104116][ T4777] BTRFS info (device loop3): using spread ssd allocation scheme
[  131.111796][ T4777] BTRFS info (device loop3): doing ref verification
[  131.194192][ T4777] BTRFS info (device loop3): disabling free space tree
[  131.194503][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  131.201111][ T4777] BTRFS info (device loop3): not using ssd optimizations
[  131.229884][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  131.256649][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  131.275842][ T4777] BTRFS info (device loop3): not using spread ssd allocation scheme
[  131.295047][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  131.304209][ T4777] BTRFS info (device loop3): has skinny extents
[  131.337466][ T4528] device veth0_macvtap entered promiscuous mode
[  131.382737][ T4528] device veth1_macvtap entered promiscuous mode
[  131.534280][ T4777] BTRFS error (device loop3): open_ctree failed
[  131.542903][ T4528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  131.594206][ T4528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.628365][ T4528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  131.681393][ T4528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.743993][ T4528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  131.794794][ T4528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.847935][ T4528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  131.893718][ T4528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.964320][ T4528] batman_adv: batadv0: Interface activated: batadv_slave_0
[  131.994617][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  132.013628][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  132.062095][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  132.111343][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  132.142568][ T4528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  132.193647][ T4528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  132.231383][ T4528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  132.244449][ T4528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  132.255163][ T4528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  132.266047][ T4528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  132.276435][ T4528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  132.294802][ T4528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  132.325635][ T4528] batman_adv: batadv0: Interface activated: batadv_slave_1
[  132.333089][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  132.361844][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  132.381083][ T4844] loop4: detected capacity change from 0 to 32768
[  132.409775][ T4528] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  132.419524][ T4528] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  132.428639][ T4528] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  132.444671][ T4528] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  132.690233][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  132.696602][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  132.704306][ T4636] Bluetooth: hci2: command 0x1003 tx timeout
[  132.714697][ T4183] Bluetooth: hci2: sending frame failed (-49)
[  133.065159][ T4251] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  133.161480][ T4251] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  133.574951][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  133.666611][ T4251] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  133.683902][ T4251] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  133.762384][    T7] Bluetooth: hci5: command 0x0409 tx timeout
[  133.813665][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  133.891521][ T4837] chnl_net:caif_netlink_parms(): no params data found
[  134.155730][ T4261] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.187691][ T4837] bridge0: port 1(bridge_slave_0) entered blocking state
[  134.233687][ T4837] bridge0: port 1(bridge_slave_0) entered disabled state
[  134.253126][ T4837] device bridge_slave_0 entered promiscuous mode
[  134.276076][ T4837] bridge0: port 2(bridge_slave_1) entered blocking state
[  134.283770][ T4837] bridge0: port 2(bridge_slave_1) entered disabled state
[  135.023756][ T4214] Bluetooth: hci2: command 0x1001 tx timeout
[  135.030147][ T4183] Bluetooth: hci2: sending frame failed (-49)
[  135.041213][ T4837] device bridge_slave_1 entered promiscuous mode
[  135.129298][ T4261] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  135.298799][ T4837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  135.357890][ T4900] loop3: detected capacity change from 0 to 2048
[  135.367243][ T4261] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  135.402632][ T4837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  135.466764][ T4900] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  135.502466][ T4261] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  135.614180][ T4837] team0: Port device team_slave_0 added
[  135.627796][ T4837] team0: Port device team_slave_1 added
[  135.742365][ T4837] batman_adv: batadv0: Adding interface: batadv_slave_0
[  135.769891][ T4837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  135.814175][ T4215] Bluetooth: hci5: command 0x041b tx timeout
[  135.840407][ T4837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  135.863328][ T4909] loop3: detected capacity change from 0 to 736
[  135.933742][ T4261] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  135.958450][ T4837] batman_adv: batadv0: Adding interface: batadv_slave_1
[  135.969174][ T4837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  136.005249][ T4837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  136.086711][ T4261] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.250702][ T4261] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.359596][ T4837] device hsr_slave_0 entered promiscuous mode
[  136.376430][ T4837] device hsr_slave_1 entered promiscuous mode
[  136.564520][ T4837] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  136.576405][ T4837] Cannot create hsr debugfs directory
[  136.630062][ T4261] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.655908][ T4923] loop3: detected capacity change from 0 to 1024
[  136.704929][ T4923] JBD2: no valid journal superblock found
[  136.710851][ T4923] EXT4-fs (loop3): error loading journal
[  137.084367][    T7] Bluetooth: hci2: command 0x1009 tx timeout
[  138.203797][ T4212] Bluetooth: hci5: command 0x040f tx timeout
[  138.658215][ T4837] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  138.709083][ T4837] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  138.810699][ T4837] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  138.858590][ T4837] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  139.329901][ T4837] 8021q: adding VLAN 0 to HW filter on device bond0
[  139.417997][  T511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  139.433006][  T511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  139.487488][ T4837] 8021q: adding VLAN 0 to HW filter on device team0
[  139.566827][ T4837] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  139.580374][ T4837] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  139.744679][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  139.753479][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  140.061519][  T144] bridge0: port 1(bridge_slave_0) entered blocking state
[  140.068701][  T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[  140.212852][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  140.601037][ T4215] Bluetooth: hci5: command 0x0419 tx timeout
[  140.612008][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  140.642296][  T144] bridge0: port 2(bridge_slave_1) entered blocking state
[  140.649446][  T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[  140.688066][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  140.729770][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  140.742941][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  140.754036][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  140.762907][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  140.790794][   T26] audit: type=1804 audit(1738037081.779:8): pid=4971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.145" name="/newroot/3/bus/file0" dev="overlay" ino=40 res=1 errno=0
[  140.817502][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  140.826970][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  140.836868][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  140.872707][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  140.899933][ T4975] loop5: detected capacity change from 0 to 2048
[  140.907038][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  140.925811][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  140.950691][ T4975] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024)
[  140.953648][ T4412] udevd[4412]: incorrect nilfs2 checksum on /dev/loop5
[  140.960499][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  140.961550][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  141.019197][ T4976] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  141.029745][ T4974] program syz.3.147 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  141.312217][ T4985] netlink: 136 bytes leftover after parsing attributes in process `syz.2.149'.
[  141.378861][ T4985] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  141.431026][ T4837] 8021q: adding VLAN 0 to HW filter on device batadv0
[  141.457708][ T4985] syz.2.149 (4985) used greatest stack depth: 18968 bytes left
[  141.479746][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  141.564653][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  143.113984][ T5003] loop2: detected capacity change from 0 to 16
[  143.226395][ T5003] erofs: (device loop2): mounted with root inode @ nid 36.
[  143.289558][ T5003] attempt to access beyond end of device
[  143.289558][ T5003] loop2: rw=0, want=24, limit=16
[  144.306154][ T5013] loop5: detected capacity change from 0 to 2048
[  144.894910][ T5013] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024)
[  144.904585][ T5013] NILFS (loop5): unrecognized mount option "cp=0x000000000000002"
[  145.014428][ T5017] loop2: detected capacity change from 0 to 256
[  145.471130][ T5024] loop3: detected capacity change from 0 to 16
[  145.612672][ T5024] erofs: (device loop3): mounted with root inode @ nid 36.
[  145.700560][  T511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  145.723747][  T511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  146.078491][ T4837] device veth0_vlan entered promiscuous mode
[  146.101823][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  146.115178][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  146.158922][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  146.176065][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  146.220033][ T4837] device veth1_vlan entered promiscuous mode
[  146.266438][ T4174] syz-executor (4174) used greatest stack depth: 18776 bytes left
[  146.541226][ T4261] device hsr_slave_0 left promiscuous mode
[  146.574767][ T4261] device hsr_slave_1 left promiscuous mode
[  146.701042][ T4261] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  146.831375][ T4261] batman_adv: batadv0: Removing interface: batadv_slave_0
[  146.978617][ T4261] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  147.383110][ T4261] batman_adv: batadv0: Removing interface: batadv_slave_1
[  147.431988][ T4261] device bridge_slave_1 left promiscuous mode
[  147.441555][ T4261] bridge0: port 2(bridge_slave_1) entered disabled state
[  147.470926][ T4261] device bridge_slave_0 left promiscuous mode
[  147.487440][ T4261] bridge0: port 1(bridge_slave_0) entered disabled state
[  147.563111][ T4261] device hsr_slave_0 left promiscuous mode
[  147.571906][ T4261] device hsr_slave_1 left promiscuous mode
[  147.582737][ T4261] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  147.590319][ T4261] batman_adv: batadv0: Removing interface: batadv_slave_0
[  147.598439][ T4261] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  147.606668][ T4261] batman_adv: batadv0: Removing interface: batadv_slave_1
[  147.614580][ T4261] device macvlan1 left promiscuous mode
[  147.620370][ T4261] bridge0: port 3(macvlan1) entered disabled state
[  147.629507][ T4261] device bridge_slave_1 left promiscuous mode
[  147.635834][ T4261] bridge0: port 2(bridge_slave_1) entered disabled state
[  147.646363][ T4261] device bridge_slave_0 left promiscuous mode
[  147.652556][ T4261] bridge0: port 1(bridge_slave_0) entered disabled state
[  147.670491][ T4261] device veth1_macvtap left promiscuous mode
[  147.676704][ T4261] device veth0_macvtap left promiscuous mode
[  147.682968][ T4261] device veth1_vlan left promiscuous mode
[  147.690414][ T4261] device veth0_vlan left promiscuous mode
[  147.705699][ T4261] device veth1_macvtap left promiscuous mode
[  147.711761][ T4261] device veth0_macvtap left promiscuous mode
[  147.719015][ T4261] device veth1_vlan left promiscuous mode
[  147.725062][ T4261] device veth0_vlan left promiscuous mode
[  148.283089][ T4261] team0 (unregistering): Port device team_slave_1 removed
[  148.344882][ T4261] team0 (unregistering): Port device team_slave_0 removed
[  148.366873][ T4261] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  148.393110][ T4261] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  148.486615][ T4261] bond0 (unregistering): Released all slaves
[  148.653984][ T4261] team0 (unregistering): Port device team_slave_1 removed
[  148.671817][ T4261] team0 (unregistering): Port device team_slave_0 removed
[  148.699279][ T4261] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  148.715864][ T4261] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  148.810145][ T4261] bond0 (unregistering): Released all slaves
[  148.930222][ T5064] loop5: detected capacity change from 0 to 131072
[  148.961733][  T511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  148.993211][ T5064] F2FS-fs (loop5): Wrong CP boundary, start(512) end(1536) blocks(0)
[  149.005391][  T511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  149.013503][ T5064] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  149.027910][ T4837] device veth0_macvtap entered promiscuous mode
[  149.093899][ T5064] F2FS-fs (loop5): Found nat_bits in checkpoint
[  149.112258][ T4837] device veth1_macvtap entered promiscuous mode
[  149.191674][ T4837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  149.210947][ T4837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  149.221541][ T4837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  149.232435][ T4837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  149.242687][ T4837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  149.253458][ T4837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  149.268155][ T4837] batman_adv: batadv0: Interface activated: batadv_slave_0
[  149.278118][ T5064] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  149.292639][ T5064] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  149.297263][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  149.335833][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  149.348086][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  149.357051][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  149.378062][ T4837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  149.397990][ T4837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  149.416766][ T4837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  149.432179][ T4837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  149.442402][ T4837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  149.453158][ T4837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  149.464996][ T4837] batman_adv: batadv0: Interface activated: batadv_slave_1
[  149.484373][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  149.496282][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  149.544425][ T4837] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  149.560328][ T4837] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  149.570590][ T4836] Bluetooth: hci0: command 0x0409 tx timeout
[  149.584389][ T4837] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  149.607559][ T4837] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  149.913037][ T4251] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  149.946099][ T5066] chnl_net:caif_netlink_parms(): no params data found
[  149.969355][ T4251] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  150.018380][ T5061] chnl_net:caif_netlink_parms(): no params data found
[  150.105159][ T5088] loop3: detected capacity change from 0 to 1024
[  150.114692][ T4198] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  150.122853][ T4198] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  150.131684][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  150.164658][ T5088] EXT4-fs (loop3): Ignoring removed orlov option
[  150.257855][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  150.295260][ T5088] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000010000,orlov,barrier=0x0000000000000002,jqfmt=vfsv1,i_version,minixdf,data_err=abort,max_batch_time=0x0000000000000002,bsdgroups,min_batch_time=0x0000000000000002,quota,,errors=continue. Quota mode: writeback.
[  150.365706][ T4215] Bluetooth: hci2: command 0x0409 tx timeout
[  150.515308][ T5061] bridge0: port 1(bridge_slave_0) entered blocking state
[  150.522411][ T5061] bridge0: port 1(bridge_slave_0) entered disabled state
[  150.555173][ T5061] device bridge_slave_0 entered promiscuous mode
[  150.578465][ T5066] bridge0: port 1(bridge_slave_0) entered blocking state
[  150.592090][ T5066] bridge0: port 1(bridge_slave_0) entered disabled state
[  150.634391][ T5066] device bridge_slave_0 entered promiscuous mode
[  150.668936][ T5061] bridge0: port 2(bridge_slave_1) entered blocking state
[  150.678471][ T5061] bridge0: port 2(bridge_slave_1) entered disabled state
[  150.708609][ T5061] device bridge_slave_1 entered promiscuous mode
[  150.725862][ T5066] bridge0: port 2(bridge_slave_1) entered blocking state
[  150.732951][ T5066] bridge0: port 2(bridge_slave_1) entered disabled state
[  150.780103][ T5066] device bridge_slave_1 entered promiscuous mode
[  150.896802][ T5066] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  150.934865][ T5066] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  151.006560][ T5061] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  151.116451][ T5061] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  151.507353][ T5119] sock: sock_set_timeout: `syz.5.167' (pid 5119) tries to set negative timeout
[  153.091168][ T4212] Bluetooth: hci0: command 0x041b tx timeout
[  153.125028][ T5066] team0: Port device team_slave_0 added
[  153.180007][ T4212] Bluetooth: hci2: command 0x041b tx timeout
[  156.016308][ T4216] Bluetooth: hci2: command 0x040f tx timeout
[  156.028737][ T4216] Bluetooth: hci0: command 0x040f tx timeout
[  156.406983][ T5066] team0: Port device team_slave_1 added
[  156.504440][ T5061] team0: Port device team_slave_0 added
[  156.672708][ T5061] team0: Port device team_slave_1 added
[  156.703748][ T5066] batman_adv: batadv0: Adding interface: batadv_slave_0
[  156.718809][ T5066] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  156.824462][ T5066] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  156.899270][ T5147] loop6: detected capacity change from 0 to 2048
[  156.906912][ T5066] batman_adv: batadv0: Adding interface: batadv_slave_1
[  156.924188][ T5066] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  157.011065][ T5066] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  157.054031][ T5061] batman_adv: batadv0: Adding interface: batadv_slave_0
[  157.062273][ T5061] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  157.107153][ T5147] EXT4-fs (loop6): mounted filesystem without journal. Opts: dioread_lock,usrjquota=,errors=remount-ro,norecovery,auto_da_alloc,noquota,grpquota,barrier=0x0000000000000000,grpjquota=,jqfmt=vfsold,. Quota mode: writeback.
[  157.179115][ T5061] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  157.267308][ T5061] batman_adv: batadv0: Adding interface: batadv_slave_1
[  157.304450][ T5061] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  157.362749][ T5147] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.178: bg 0: block 234: padding at end of block bitmap is not set
[  157.374112][ T5061] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  157.441146][ T5147] EXT4-fs (loop6): Remounting filesystem read-only
[  157.472138][ T5066] device hsr_slave_0 entered promiscuous mode
[  157.529455][ T5066] device hsr_slave_1 entered promiscuous mode
[  157.573033][ T5066] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  157.591549][ T5066] Cannot create hsr debugfs directory
[  157.629623][ T5139] loop5: detected capacity change from 0 to 40427
[  157.688208][ T5139] F2FS-fs (loop5): Invalid log blocks per segment (4278190089)
[  157.721963][ T5139] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  157.765829][ T5139] F2FS-fs (loop5): invalid crc value
[  157.813326][ T5139] F2FS-fs (loop5): Found nat_bits in checkpoint
[  157.816990][ T5061] device hsr_slave_0 entered promiscuous mode
[  157.835442][ T5061] device hsr_slave_1 entered promiscuous mode
[  157.842394][ T5061] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  157.870921][ T5061] Cannot create hsr debugfs directory
[  158.013238][ T5139] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  158.044389][ T4216] Bluetooth: hci0: command 0x0419 tx timeout
[  158.050504][ T4216] Bluetooth: hci2: command 0x0419 tx timeout
[  158.062464][ T5139] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  158.455508][ T4528] attempt to access beyond end of device
[  158.455508][ T4528] loop5: rw=2049, want=45104, limit=40427
[  158.468059][ T5066] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  158.568898][ T5066] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  158.594030][ T5066] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  158.615230][ T5066] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  158.665865][ T5155] chnl_net:caif_netlink_parms(): no params data found
[  158.762437][ T5061] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  158.800549][ T5061] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  158.897907][ T5061] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  159.025511][ T5061] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  159.256598][ T5155] bridge0: port 1(bridge_slave_0) entered blocking state
[  159.263701][ T5155] bridge0: port 1(bridge_slave_0) entered disabled state
[  159.284821][ T5155] device bridge_slave_0 entered promiscuous mode
[  159.331645][ T5155] bridge0: port 2(bridge_slave_1) entered blocking state
[  159.354152][ T5155] bridge0: port 2(bridge_slave_1) entered disabled state
[  159.390300][ T5155] device bridge_slave_1 entered promiscuous mode
[  159.537107][ T5066] 8021q: adding VLAN 0 to HW filter on device bond0
[  159.575148][ T4212] Bluetooth: hci3: command 0x0409 tx timeout
[  160.215759][ T5155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  160.254490][ T5200] loop5: detected capacity change from 0 to 128
[  160.261783][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  160.324971][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  160.346209][ T5066] 8021q: adding VLAN 0 to HW filter on device team0
[  160.366430][ T5155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  160.393747][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  160.427828][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  160.436785][  T154] bridge0: port 1(bridge_slave_0) entered blocking state
[  160.444036][  T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[  160.488707][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  160.503871][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  160.521164][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  160.542420][  T154] bridge0: port 2(bridge_slave_1) entered blocking state
[  160.543997][ T5200] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 82)
[  160.549858][  T154] bridge0: port 2(bridge_slave_1) entered forwarding state
[  160.567667][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  160.584633][ T5200] FAT-fs (loop5): Filesystem has been set read-only
[  160.609542][ T5200] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 82)
[  160.631016][ T5155] team0: Port device team_slave_0 added
[  160.646306][ T5200] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 82)
[  160.667046][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  160.676528][ T5200] FAT-fs (loop5): error, clusters badly computed (1 != 2)
[  160.719471][ T5212] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 82)
[  160.739842][ T5155] team0: Port device team_slave_1 added
[  160.757743][ T5061] 8021q: adding VLAN 0 to HW filter on device bond0
[  160.775819][ T1447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  160.806335][ T1447] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  160.864290][ T1447] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  160.874932][ T1447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  160.886349][ T1447] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  160.904706][ T1447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  160.913617][ T1447] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  160.923356][ T1447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  160.933858][ T1447] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  161.058997][ T5066] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  161.067321][ T1447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  161.076182][ T1447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  161.090662][ T5061] 8021q: adding VLAN 0 to HW filter on device team0
[  161.106092][ T5155] batman_adv: batadv0: Adding interface: batadv_slave_0
[  161.113065][ T5155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  161.138998][    C1] vkms_vblank_simulate: vblank timer overrun
[  161.155870][ T5155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  161.180538][ T5155] batman_adv: batadv0: Adding interface: batadv_slave_1
[  161.188605][ T5155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  161.218844][ T5155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  161.257438][ T4261] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  161.299318][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  161.318610][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  161.337489][  T154] bridge0: port 1(bridge_slave_0) entered blocking state
[  161.344671][  T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[  161.353117][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  161.362144][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  161.376101][  T154] bridge0: port 2(bridge_slave_1) entered blocking state
[  161.383231][  T154] bridge0: port 2(bridge_slave_1) entered forwarding state
[  161.395362][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  161.447997][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  161.458935][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  161.517896][ T4261] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  161.557538][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  161.586484][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  161.596623][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  161.615653][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  161.638193][ T5155] device hsr_slave_0 entered promiscuous mode
[  161.654367][ T4215] Bluetooth: hci3: command 0x041b tx timeout
[  161.655552][ T5155] device hsr_slave_1 entered promiscuous mode
[  161.664114][ T4212] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  161.674887][ T5155] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  161.691083][ T5155] Cannot create hsr debugfs directory
[  161.714605][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  161.725634][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  161.755417][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  161.767363][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  161.784917][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  161.807517][ T5061] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  161.839705][ T4261] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  161.944366][ T4212] usb 7-1: Using ep0 maxpacket: 16
[  161.973033][ T4261] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.039641][  T511] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  162.048164][  T511] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  162.060350][ T5066] 8021q: adding VLAN 0 to HW filter on device batadv0
[  162.074745][ T4212] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  162.094692][ T4212] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  162.105868][ T4212] usb 7-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00
[  162.117673][ T4212] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  162.147995][ T4212] usb 7-1: config 0 descriptor??
[  162.248731][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  162.264517][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  162.342433][ T5061] 8021q: adding VLAN 0 to HW filter on device batadv0
[  162.447175][ T4261] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.607931][ T4261] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.714449][ T4212] usbhid 7-1:0.0: can't add hid device: -71
[  162.715514][ T4261] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.720511][ T4212] usbhid: probe of 7-1:0.0 failed with error -71
[  162.727084][ T4212] usb 7-1: USB disconnect, device number 2
[  162.760324][ T5238] chnl_net:caif_netlink_parms(): no params data found
[  162.782436][  T511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  162.791970][  T511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  162.837525][ T4261] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.868654][ T1447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  162.878464][ T1447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  162.899628][ T1447] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  162.914400][ T1447] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  162.922668][ T1447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  162.942815][ T1447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  162.961701][ T5066] device veth0_vlan entered promiscuous mode
[  163.009226][ T5066] device veth1_vlan entered promiscuous mode
[  163.066634][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  163.082638][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  163.096284][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  163.105876][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  163.116148][ T5061] device veth0_vlan entered promiscuous mode
[  163.180047][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  163.197826][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  163.239613][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  163.260109][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  163.278916][ T5061] device veth1_vlan entered promiscuous mode
[  163.297552][ T5066] device veth0_macvtap entered promiscuous mode
[  163.341001][ T5287] loop6: detected capacity change from 0 to 16
[  163.367614][ T5066] device veth1_macvtap entered promiscuous mode
[  163.386995][ T5238] bridge0: port 1(bridge_slave_0) entered blocking state
[  163.395039][ T5238] bridge0: port 1(bridge_slave_0) entered disabled state
[  163.403533][ T5238] device bridge_slave_0 entered promiscuous mode
[  163.417851][ T5155] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  163.436417][ T5287] erofs: (device loop6): mounted with root inode @ nid 36.
[  163.458867][ T5155] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  163.544438][ T5238] bridge0: port 2(bridge_slave_1) entered blocking state
[  163.552451][ T5238] bridge0: port 2(bridge_slave_1) entered disabled state
[  163.656377][ T5238] device bridge_slave_1 entered promiscuous mode
[  163.725811][ T4212] Bluetooth: hci3: command 0x040f tx timeout
[  163.908729][ T5292] ptrace attach of "./syz-executor exec"[5293] was attempted by "./syz-executor exec"[5292]
[  163.946821][ T5292] erofs: (device loop6): z_erofs_readahead: readahead error at page 78 @ nid 36
[  163.956602][ T5292] erofs: (device loop6): z_erofs_readahead: readahead error at page 77 @ nid 36
[  163.965909][ T5292] erofs: (device loop6): z_erofs_readahead: readahead error at page 76 @ nid 36
[  163.975057][ T5292] erofs: (device loop6): z_erofs_map_blocks_iter: unknown type 3 @ offset 311295 of nid 36
[  163.985133][ T5292] erofs: (device loop6): z_erofs_readahead: readahead error at page 75 @ nid 36
[  163.994440][ T5292] erofs: (device loop6): z_erofs_map_blocks_iter: unknown type 3 @ offset 307199 of nid 36
[  164.004519][ T5292] erofs: (device loop6): z_erofs_readahead: readahead error at page 74 @ nid 36
[  164.013755][ T5292] erofs: (device loop6): z_erofs_readahead: readahead error at page 72 @ nid 36
[  164.023330][ T5292] erofs: (device loop6): z_erofs_readahead: readahead error at page 68 @ nid 36
[  164.086535][ T5292] erofs: (device loop6): z_erofs_readahead: readahead error at page 66 @ nid 36
[  164.095908][ T5292] erofs: (device loop6): z_erofs_readahead: readahead error at page 64 @ nid 36
[  164.105031][ T5292] erofs: (device loop6): z_erofs_map_blocks_iter: unknown type 3 @ offset 262143 of nid 36
[  164.115124][ T5292] erofs: (device loop6): z_erofs_readahead: readahead error at page 63 @ nid 36
[  164.124276][ T5292] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  164.133803][ T5292] erofs: (device loop6): z_erofs_readahead: readahead error at page 62 @ nid 36
[  164.142934][ T5292] erofs: (device loop6): z_erofs_map_blocks_iter: unknown type 3 @ offset 253951 of nid 36
[  164.153024][ T5292] erofs: (device loop6): z_erofs_readahead: readahead error at page 61 @ nid 36
[  164.162176][ T5292] erofs: (device loop6): z_erofs_map_blocks_iter: unknown type 3 @ offset 249855 of nid 36
[  164.172248][ T5292] erofs: (device loop6): z_erofs_readahead: readahead error at page 60 @ nid 36
[  164.181377][ T5292] erofs: (device loop6): z_erofs_map_blocks_iter: unknown type 3 @ offset 245759 of nid 36
[  164.314106][ T5292] erofs: (device loop6): z_erofs_readahead: readahead error at page 59 @ nid 36
[  164.323240][ T5292] erofs: (device loop6): z_erofs_map_blocks_iter: unknown type 3 @ offset 241663 of nid 36
[  164.333306][ T5292] erofs: (device loop6): z_erofs_readahead: readahead error at page 58 @ nid 36
[  164.344983][ T5292] erofs: (device loop6): z_erofs_readahead: readahead error at page 57 @ nid 36
[  164.354093][ T5292] erofs: (device loop6): z_erofs_map_blocks_iter: unknown type 3 @ offset 233471 of nid 36
[  164.364127][ T5292] erofs: (device loop6): z_erofs_readahead: readahead error at page 56 @ nid 36
[  164.373276][ T5292] erofs: (device loop6): z_erofs_extent_lookback: unknown type 3 @ lcn 54 of nid 36
[  164.382875][ T5292] erofs: (device loop6): z_erofs_readahead: readahead error at page 55 @ nid 36
[  164.392080][ T5292] erofs: (device loop6): z_erofs_map_blocks_iter: unknown type 3 @ offset 225279 of nid 36
[  164.402124][ T5292] erofs: (device loop6): z_erofs_readahead: readahead error at page 54 @ nid 36
[  164.411317][ T5292] erofs: (device loop6): z_erofs_readahead: readahead error at page 53 @ nid 36
[  164.420413][ T5292] erofs: (device loop6): z_erofs_readahead: readahead error at page 52 @ nid 36
[  164.429518][ T5292] erofs: (device loop6): z_erofs_readahead: readahead error at page 51 @ nid 36
[  164.438714][ T5292] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  164.448826][ T5292] erofs: (device loop6): z_erofs_readahead: readahead error at page 50 @ nid 36
[  164.454825][ T5155] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  164.458038][ T5292] erofs: (device loop6): z_erofs_extent_lookback: unknown type 3 @ lcn 47 of nid 36
[  164.474889][ T4216] Bluetooth: hci1: command 0x0409 tx timeout
[  164.483197][ T5292] erofs: (device loop6): z_erofs_readahead: readahead error at page 49 @ nid 36
[  164.492088][ T5155] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  164.492344][ T5292] erofs: (device loop6): z_erofs_readahead: readahead error at page 48 @ nid 36
[  164.508250][ T5292] erofs: (device loop6): z_erofs_map_blocks_iter: unknown type 3 @ offset 196607 of nid 36
[  164.518423][ T5292] erofs: (device loop6): z_erofs_readahead: readahead error at page 47 @ nid 36
[  164.521322][ T5066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  164.527511][ T5292] erofs: (device loop6): z_erofs_readahead: readahead error at page 46 @ nid 36
[  164.527543][ T5292] erofs: (device loop6): z_erofs_readahead: readahead error at page 45 @ nid 36
[  164.527566][ T5292] erofs: (device loop6): z_erofs_readahead: readahead error at page 44 @ nid 36
[  164.527584][ T5292] erofs: (device loop6): z_erofs_map_blocks_iter: unknown type 3 @ offset 180223 of nid 36
[  164.527606][ T5292] erofs: (device loop6): z_erofs_readahead: readahead error at page 43 @ nid 36
[  164.527624][ T5292] erofs: (device loop6): z_erofs_map_blocks_iter: unknown type 3 @ offset 176127 of nid 36
[  164.527645][ T5292] erofs: (device loop6): z_erofs_readahead: readahead error at page 42 @ nid 36
[  164.527663][ T5292] erofs: (device loop6): z_erofs_map_blocks_iter: unknown type 3 @ offset 172031 of nid 36
[  164.527683][ T5292] erofs: (device loop6): z_erofs_readahead: readahead error at page 41 @ nid 36
[  164.527701][ T5292] erofs: (device loop6): z_erofs_map_blocks_iter: unknown type 3 @ offset 167935 of nid 36
[  164.527721][ T5292] erofs: (device loop6): z_erofs_readahead: readahead error at page 40 @ nid 36
[  164.527739][ T5292] erofs: (device loop6): z_erofs_readahead: readahead error at page 39 @ nid 36
[  164.527758][ T5292] erofs: (device loop6): z_erofs_map_blocks_iter: unknown type 3 @ offset 159743 of nid 36
[  164.550901][ T5066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.556485][ T5292] erofs: (device loop6): z_erofs_readahead: readahead error at page 38 @ nid 36
[  164.556533][ T5292] erofs: (device loop6): z_erofs_readahead: readahead error at page 36 @ nid 36
[  164.556551][ T5292] erofs: (device loop6): z_erofs_map_blocks_iter: unknown type 3 @ offset 147455 of nid 36
[  164.556572][ T5292] erofs: (device loop6): z_erofs_readahead: readahead error at page 35 @ nid 36
[  164.556590][ T5292] erofs: (device loop6): z_erofs_map_blocks_iter: unknown type 3 @ offset 143359 of nid 36
[  164.556611][ T5292] erofs: (device loop6): z_erofs_readahead: readahead error at page 34 @ nid 36
[  164.556814][ T5292] erofs: (device loop6): z_erofs_readahead: readahead error at page 28 @ nid 36
[  164.577118][ T5066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  164.584946][ T5292] erofs: (device loop6): z_erofs_map_blocks_iter: unknown type 3 @ offset 114687 of nid 36
[  164.584973][ T5292] erofs: (device loop6): z_erofs_readahead: readahead error at page 27 @ nid 36
[  164.584992][ T5292] erofs: (device loop6): z_erofs_readahead: readahead error at page 26 @ nid 36
[  164.585010][ T5292] erofs: (device loop6): z_erofs_readahead: readahead error at page 25 @ nid 36
[  164.585028][ T5292] erofs: (device loop6): z_erofs_map_blocks_iter: unknown type 3 @ offset 102399 of nid 36
[  164.585049][ T5292] erofs: (device loop6): z_erofs_readahead: readahead error at page 24 @ nid 36
[  164.585156][ T5292] erofs: (device loop6): z_erofs_readahead: readahead error at page 21 @ nid 36
[  164.585177][ T5292] erofs: (device loop6): z_erofs_readahead: readahead error at page 20 @ nid 36
[  164.585210][ T5292] erofs: (device loop6): z_erofs_readahead: readahead error at page 18 @ nid 36
[  164.585241][ T5292] erofs: (device loop6): z_erofs_readahead: readahead error at page 16 @ nid 36
[  164.585374][ T5292] erofs: (device loop6): z_erofs_readahead: readahead error at page 12 @ nid 36
[  164.610267][ T5066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.614505][ T5292] erofs: (device loop6): z_erofs_readahead: readahead error at page 11 @ nid 36
[  164.627959][ T5066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  164.633677][ T5292] erofs: (device loop6): z_erofs_map_blocks_iter: unknown type 3 @ offset 45055 of nid 36
[  164.653113][ T5066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.661745][ T5292] erofs: (device loop6): z_erofs_readahead: readahead error at page 10 @ nid 36
[  164.661907][ T5292] erofs: (device loop6): z_erofs_readahead: readahead error at page 6 @ nid 36
[  164.661931][ T5292] erofs: (device loop6): z_erofs_readahead: readahead error at page 5 @ nid 36
[  164.661955][ T5292] erofs: (device loop6): z_erofs_readahead: readahead error at page 4 @ nid 36
[  164.683200][ T5066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  164.690014][ T5292] erofs: (device loop6): z_erofs_readahead: readahead error at page 1 @ nid 36
[  164.690044][ T5292] erofs: (device loop6): z_erofs_readahead: readahead error at page 0 @ nid 36
[  164.690172][ T5292] attempt to access beyond end of device
[  164.690172][ T5292] loop6: rw=524288, want=1049280, limit=16
[  164.690256][ T5292] attempt to access beyond end of device
[  164.690256][ T5292] loop6: rw=524288, want=6536, limit=16
[  164.690317][ T5292] attempt to access beyond end of device
[  164.690317][ T5292] loop6: rw=524288, want=34359736344, limit=16
[  164.713750][ T5066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.719493][ T5292] attempt to access beyond end of device
[  164.719493][ T5292] loop6: rw=524288, want=736, limit=16
[  164.719560][ T5292] attempt to access beyond end of device
[  164.719560][ T5292] loop6: rw=524288, want=536576872, limit=16
[  164.719634][ T5292] attempt to access beyond end of device
[  164.719634][ T5292] loop6: rw=524288, want=13478624040, limit=16
[  164.719709][ T5292] attempt to access beyond end of device
[  164.719709][ T5292] loop6: rw=524288, want=790400, limit=16
[  164.746045][ T5066] batman_adv: batadv0: Interface activated: batadv_slave_0
[  164.748345][ T5292] attempt to access beyond end of device
[  164.748345][ T5292] loop6: rw=524288, want=88, limit=16
[  164.772647][ T5066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  164.776538][ T5292] attempt to access beyond end of device
[  164.776538][ T5292] loop6: rw=524288, want=1183616, limit=16
[  164.776626][ T5292] attempt to access beyond end of device
[  164.776626][ T5292] loop6: rw=524288, want=312, limit=16
[  165.111501][ T5066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.121546][ T5066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  165.132000][ T5066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.141992][ T5066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  165.152475][ T5066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.162343][ T5066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  165.173659][ T5066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.185614][ T5066] batman_adv: batadv0: Interface activated: batadv_slave_1
[  165.205225][ T5238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  165.215521][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  165.229739][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  165.238931][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  165.248245][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  165.266100][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  165.283382][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  165.298544][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  165.311106][ T5061] device veth0_macvtap entered promiscuous mode
[  165.324924][ T5066] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  165.333677][ T5066] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  165.365948][ T5066] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  165.380515][ T5066] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  165.424469][ T5299] loop6: detected capacity change from 0 to 512
[  165.460115][ T5238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  165.504571][ T5061] device veth1_macvtap entered promiscuous mode
[  165.532297][ T5299] EXT4-fs error (device loop6): ext4_orphan_get:1401: inode #15: comm syz.6.191: casefold flag without casefold feature
[  165.547208][ T5299] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.191: couldn't read orphan inode 15 (err -117)
[  165.566396][ T5238] team0: Port device team_slave_0 added
[  165.580778][ T5299] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  165.585887][ T5238] team0: Port device team_slave_1 added
[  165.701877][ T5238] batman_adv: batadv0: Adding interface: batadv_slave_0
[  165.713253][ T5238] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  165.740821][ T5238] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  165.760665][ T5238] batman_adv: batadv0: Adding interface: batadv_slave_1
[  165.773122][ T5238] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  165.804641][ T4216] Bluetooth: hci3: command 0x0419 tx timeout
[  165.817075][ T5238] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  165.863173][ T5061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  165.889121][ T5061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.910499][ T5061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  165.931715][ T5061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.950848][ T5061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  165.971770][ T5061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.992190][ T5061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  166.012741][ T5061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.023294][ T5061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  166.044905][ T5061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.065942][ T5061] batman_adv: batadv0: Interface activated: batadv_slave_0
[  166.135560][   T13] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  166.157816][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  166.178575][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  166.197577][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  166.236901][ T5238] device hsr_slave_0 entered promiscuous mode
[  166.243903][ T5238] device hsr_slave_1 entered promiscuous mode
[  166.251135][ T5238] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  166.259045][ T5238] Cannot create hsr debugfs directory
[  166.272945][ T5061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  166.288460][ T5061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.298552][ T5061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  166.309306][ T5061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.319236][ T5061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  166.329896][ T5061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.340059][ T5061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  166.350760][ T5061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.360874][ T5061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  166.371979][ T5061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.382007][   T13] usb 7-1: Using ep0 maxpacket: 8
[  166.383933][ T5061] batman_adv: batadv0: Interface activated: batadv_slave_1
[  166.395063][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  166.403737][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  166.447788][ T5061] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  166.459309][ T5061] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  166.469919][ T5061] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  166.478995][ T5061] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  166.526411][ T4251] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  166.538180][ T4251] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  166.544344][ T4212] Bluetooth: hci1: command 0x041b tx timeout
[  166.551850][   T13] usb 7-1: config 162 has an invalid interface number: 97 but max is 0
[  166.566170][   T13] usb 7-1: config 162 has no interface number 0
[  166.572571][   T13] usb 7-1: config 162 interface 97 has no altsetting 0
[  166.612284][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  166.704776][ T5155] 8021q: adding VLAN 0 to HW filter on device bond0
[  166.761231][ T4251] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  166.780020][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  166.784169][   T13] usb 7-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=e1.3b
[  166.789769][ T4251] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  166.811149][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  166.814128][   T13] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  166.829576][   T13] usb 7-1: Product: syz
[  166.833771][   T13] usb 7-1: Manufacturer: syz
[  166.839020][   T13] usb 7-1: SerialNumber: syz
[  166.883827][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  166.945898][ T5155] 8021q: adding VLAN 0 to HW filter on device team0
[  167.149312][   T13] metro_usb 7-1:162.97: interrupt-out endpoint missing
[  167.199101][   T13] usb 7-1: USB disconnect, device number 3
[  167.303752][ T4279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  167.332897][ T4279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  167.604800][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  167.615261][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  167.653004][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  167.684685][ T4250] bridge0: port 1(bridge_slave_0) entered blocking state
[  167.691792][ T4250] bridge0: port 1(bridge_slave_0) entered forwarding state
[  167.757128][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  167.768053][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  167.777515][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  167.786494][ T4250] bridge0: port 2(bridge_slave_1) entered blocking state
[  167.793619][ T4250] bridge0: port 2(bridge_slave_1) entered forwarding state
[  167.890634][ T5338] netlink: 4 bytes leftover after parsing attributes in process `syz.8.193'.
[  168.105932][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  168.271466][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  168.616199][ T4215] Bluetooth: hci1: command 0x040f tx timeout
[  169.956031][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  169.997619][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  170.006486][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  170.021080][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  170.029912][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  170.063171][ T5343] netlink: 24 bytes leftover after parsing attributes in process `syz.8.195'.
[  170.101758][ T5155] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  170.157572][ T5155] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  170.176407][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  170.201176][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  170.212170][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  170.221593][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  170.274654][ T4563] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  170.306194][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  170.339922][ T4563] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  170.695245][ T4267] Bluetooth: hci1: command 0x0419 tx timeout
[  170.741547][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  170.966782][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  170.979192][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  171.150873][ T5371] loop6: detected capacity change from 0 to 8
[  171.200457][ T5155] 8021q: adding VLAN 0 to HW filter on device batadv0
[  171.745434][ T5238] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  171.760811][ T5238] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  171.777243][ T5238] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  172.191138][ T4261] device hsr_slave_0 left promiscuous mode
[  172.689704][ T5376] SQUASHFS error: Failed to read block 0x1ec: -5
[  172.696140][ T5376] SQUASHFS error: Unable to read metadata cache entry [1ea]
[  172.703665][   T26] audit: type=1800 audit(1738037113.689:9): pid=5376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.200" name="file1" dev="loop6" ino=5 res=0 errno=0
[  172.838680][ T4261] device hsr_slave_1 left promiscuous mode
[  172.848355][ T4261] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  172.875689][ T4261] batman_adv: batadv0: Removing interface: batadv_slave_0
[  172.890512][ T4261] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  172.907689][ T5379] loop6: detected capacity change from 0 to 512
[  172.916554][ T4261] batman_adv: batadv0: Removing interface: batadv_slave_1
[  172.930995][ T4261] device bridge_slave_1 left promiscuous mode
[  172.939976][ T4261] bridge0: port 2(bridge_slave_1) entered disabled state
[  172.960625][ T4261] device bridge_slave_0 left promiscuous mode
[  172.982126][ T5379] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  172.994882][ T4261] bridge0: port 1(bridge_slave_0) entered disabled state
[  173.033083][ T4261] device hsr_slave_0 left promiscuous mode
[  173.038464][ T5379] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2816: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  173.066815][ T4261] device hsr_slave_1 left promiscuous mode
[  173.075188][ T4261] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  173.082663][ T4261] batman_adv: batadv0: Removing interface: batadv_slave_0
[  173.090591][ T5379] EXT4-fs (loop6): 1 truncate cleaned up
[  173.096427][ T5379] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,resgid=0x0000000000000000,mb_optimize_scan=0x0000000000000001,quota,. Quota mode: writeback.
[  173.191522][ T4261] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  173.211087][ T4261] batman_adv: batadv0: Removing interface: batadv_slave_1
[  173.280907][ T4261] device bridge_slave_1 left promiscuous mode
[  173.287586][ T4261] bridge0: port 2(bridge_slave_1) entered disabled state
[  173.307022][ T4261] device bridge_slave_0 left promiscuous mode
[  173.313470][ T4261] bridge0: port 1(bridge_slave_0) entered disabled state
[  175.219717][ T5381] loop8: detected capacity change from 0 to 8192
[  175.271237][ T4261] device veth1_macvtap left promiscuous mode
[  175.285628][ T5381] REISERFS (device loop8): found reiserfs format "3.6" with non-standard journal
[  175.296957][ T5381] REISERFS (device loop8): using ordered data mode
[  175.303487][ T5381] reiserfs: using flush barriers
[  175.316972][ T4261] device veth0_macvtap left promiscuous mode
[  175.321702][ T5381] REISERFS (device loop8): journal params: device loop8, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  175.341401][ T4261] device veth1_vlan left promiscuous mode
[  175.351739][ T5381] REISERFS (device loop8): checking transaction log (loop8)
[  175.360993][ T4261] device veth0_vlan left promiscuous mode
[  175.378184][ T5381] REISERFS (device loop8): Using r5 hash to sort names
[  175.386545][ T5381] REISERFS warning (device loop8): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  175.403798][ T5381] REISERFS (device loop8): Created .reiserfs_priv - reserved for xattr storage.
[  175.853607][ T4261] device veth1_macvtap left promiscuous mode
[  175.860087][ T4261] device veth0_macvtap left promiscuous mode
[  175.868296][ T4261] device veth1_vlan left promiscuous mode
[  175.874369][ T4261] device veth0_vlan left promiscuous mode
[  176.535426][ T5398] REISERFS warning (device loop8): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  176.613643][ T5398] REISERFS warning (device loop8): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block
[  176.637817][ T5398] REISERFS warning (device loop8): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block
[  176.658199][ T5398] REISERFS warning (device loop8): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block
[  177.570782][ T5400] loop7: detected capacity change from 0 to 256
[  177.646738][ T5400] exfat: Deprecated parameter 'utf8'
[  177.652087][ T5400] exfat: Deprecated parameter 'namecase'
[  177.658558][ T5400] exfat: Deprecated parameter 'utf8'
[  177.764806][ T5400] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[  180.778342][ T4261] team0 (unregistering): Port device team_slave_1 removed
[  180.905110][ T4261] team0 (unregistering): Port device team_slave_0 removed
[  180.944632][ T4261] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  180.976836][ T4261] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  181.092066][ T4261] bond0 (unregistering): Released all slaves
[  181.400824][ T4261] team0 (unregistering): Port device team_slave_1 removed
[  181.435591][ T4261] team0 (unregistering): Port device team_slave_0 removed
[  181.472618][ T4261] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  181.494464][ T4261] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  182.629406][ T4261] bond0 (unregistering): Released all slaves
[  182.747558][ T5238] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  182.778070][ T5405] netlink: 32 bytes leftover after parsing attributes in process `syz.7.206'.
[  184.221203][ T5441] loop7: detected capacity change from 0 to 1024
[  186.295618][ T5238] 8021q: adding VLAN 0 to HW filter on device bond0
[  186.312095][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  186.321825][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  186.334650][ T5238] 8021q: adding VLAN 0 to HW filter on device team0
[  186.378917][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  186.389888][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  186.398964][  T154] bridge0: port 1(bridge_slave_0) entered blocking state
[  186.406111][  T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[  186.452471][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  186.467881][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  186.498513][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  186.516892][  T154] bridge0: port 2(bridge_slave_1) entered blocking state
[  186.524093][  T154] bridge0: port 2(bridge_slave_1) entered forwarding state
[  186.744670][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  187.535703][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  187.566717][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  187.594718][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  187.837512][ T5454] loop7: detected capacity change from 0 to 512
[  188.612370][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  188.655668][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  188.677777][ T5454] EXT4-fs (loop7): mounted filesystem without journal. Opts: usrquota,grpjquota=,nodelalloc,,errors=continue. Quota mode: writeback.
[  188.736642][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  188.755502][ T5454] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  188.775211][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  188.835100][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  189.062560][ T5238] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  189.080118][ T5238] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  189.126312][ T1447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  190.942537][ T1447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  191.187391][ T5478] overlayfs: failed to clone upperpath
[  191.585614][ T1447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  191.619205][ T1447] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  191.648617][ T5155] device veth0_vlan entered promiscuous mode
[  191.683936][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  191.721162][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  191.782144][ T5155] device veth1_vlan entered promiscuous mode
[  191.794708][ T5473] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  191.837412][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  191.878307][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  191.891920][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  191.992471][ T5155] device veth0_macvtap entered promiscuous mode
[  192.059808][  T511] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  192.171891][  T511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  192.194253][  T511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  192.227340][  T511] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  192.285177][ T5155] device veth1_macvtap entered promiscuous mode
[  192.356573][ T5155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  192.367922][ T5155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  192.613154][ T5155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  192.647598][ T5155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  192.694614][ T5155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  192.730130][ T5155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  192.762886][ T5155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  192.786898][ T5155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  192.809986][ T5155] batman_adv: batadv0: Interface activated: batadv_slave_0
[  192.928478][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  192.954555][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  192.995222][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  193.001723][ T5506] netlink: 152 bytes leftover after parsing attributes in process `syz.6.232'.
[  193.022646][ T5501] xt_CT: You must specify a L4 protocol and not use inversions on it
[  193.056005][ T5155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  193.093662][ T5506] loop6: detected capacity change from 0 to 64
[  193.095148][ T5155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  193.124088][ T5155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  193.136181][ T5155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  193.153483][ T5155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  193.166732][ T5155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  193.182654][ T5155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  193.198362][ T5155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  193.282546][ T5155] batman_adv: batadv0: Interface activated: batadv_slave_1
[  193.318925][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  193.320606][ T5506] hfs: unable to parse mount options
[  193.338792][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  194.217279][ T1447] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  194.224779][ T1447] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  194.291698][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  194.302532][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  194.474381][ T5516] loop7: detected capacity change from 0 to 512
[  194.505076][ T5516] EXT4-fs (loop7): Ignoring removed mblk_io_submit option
[  194.530199][ T5516] EXT4-fs (loop7): Unrecognized mount option "seclabel" or missing value
[  194.553013][ T5238] 8021q: adding VLAN 0 to HW filter on device batadv0
[  195.074012][ T5155] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  195.105618][ T5155] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  195.125509][ T5155] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  195.323199][ T5155] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  198.611482][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  198.622673][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  199.433092][ T5540] loop7: detected capacity change from 0 to 32768
[  200.061574][ T5238] device veth0_vlan entered promiscuous mode
[  200.085402][ T5540] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop7 scanned by syz.7.240 (5540)
[  200.135272][ T5238] device veth1_vlan entered promiscuous mode
[  200.178381][ T5540] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm
[  200.187187][ T5540] BTRFS info (device loop7): using free space tree
[  200.193783][ T5540] BTRFS info (device loop7): has skinny extents
[  200.230300][  T511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  200.251485][  T511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  200.311244][  T511] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  200.380864][  T511] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  200.451277][ T5540] BTRFS info (device loop7): enabling ssd optimizations
[  200.470533][  T511] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  200.611236][ T4198] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  200.633924][  T511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  200.637640][ T4198] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  200.652059][  T511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  200.697857][ T5571] netlink: 20 bytes leftover after parsing attributes in process `syz.6.241'.
[  200.999757][  T511] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  201.063080][ T5238] device veth0_macvtap entered promiscuous mode
[  201.143805][ T5238] device veth1_macvtap entered promiscuous mode
[  201.196297][ T4198] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  201.234156][ T4198] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  201.256075][ T5238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  201.315296][ T5238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  201.347415][ T5238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  201.357901][ T5238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  201.410413][ T5238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  201.467875][ T5238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  201.479276][ T5238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  201.676046][ T5238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  201.720647][ T5238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  202.474553][ T5238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  202.523005][ T5238] batman_adv: batadv0: Interface activated: batadv_slave_0
[  202.545444][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  202.559120][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  202.577599][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  202.598620][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  202.644591][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  202.687332][ T5238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  202.746620][ T5238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  202.779953][ T5238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  202.790424][ T5238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  202.791882][ T5578] mmap: syz.7.244 (5578) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
[  202.824696][ T5579] loop6: detected capacity change from 0 to 64
[  202.886888][ T5238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  202.919317][ T5238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  202.961635][ T5238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  202.991571][ T5238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  203.140187][ T5238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  203.367974][ T5238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  203.444219][ T5238] batman_adv: batadv0: Interface activated: batadv_slave_1
[  203.521820][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  203.787315][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  204.602947][ T5238] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  204.660118][ T5238] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  204.704366][ T5238] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  204.713117][ T5238] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  205.293559][ T5593] ax25_connect(): syz.7.248 uses autobind, please contact jreuter@yaina.de
[  205.412990][ T4251] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  206.019289][ T4251] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  206.252024][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  206.278827][ T4279] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  206.291542][ T4279] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  207.308985][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  217.348316][ T4167] jfs_flush_journal: synclist not empty
[  217.424402][ T4167] metapage: ffff8880628c93e0: 00001000 00000000 00003aec 00000000
[  217.501040][ T4167] metapage: ffff8880628c93f0: 026a1120 ffffc900 7dd47228 ffff8880
[  217.633807][ T4167] metapage: ffff8880628c9400: 00000004 00000000 00000000 00000000
[  217.671965][ T4167] metapage: ffff8880628c9410: 69e68000 ffff8880 0000001c 00000000
[  217.741602][ T4167] metapage: ffff8880628c9420: 00000000 dead4ead ffffffff 00000000
[  217.782407][ T5664] netlink: 68 bytes leftover after parsing attributes in process `syz.9.264'.
[  217.810964][ T4167] metapage: ffff8880628c9430: ffffffff ffffffff 96bd20c0 ffffffff
[  218.322772][ T4167] metapage: ffff8880628c9440: 903ae880 ffffffff 00000000 00000000
[  218.334109][ T5661] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  218.356356][ T4167] metapage: ffff8880628c9450: 8ae250a0 ffffffff 00000200 00000000
[  218.364269][ T4167] metapage: ffff8880628c9460: 628c9460 ffff8880 628c9460 ffff8880
[  218.420371][ T4167] metapage: ffff8880628c9470: 01a79a00 ffffea00 77ce4000 ffff8880
[  218.445168][ T4167] metapage: ffff8880628c9480: 00001000 00000000 00000001 00000000
[  218.478098][ T4167] metapage: ffff8880628c9490: 7dd47000 ffff8880
[  218.519442][ T4167] page: ffffea0001a79a00: 00fff00000002034 ffffea00007c0808
[  218.566020][ T4167] page: ffffea0001a79a10: ffffea000166ad48 ffff88805fbf8658
[  218.610074][ T4167] page: ffffea0001a79a20: 000000000000001c ffff8880628c93e0
[  218.653727][ T4167] page: ffffea0001a79a30: 00000002ffffffff ffff8880784e4000
[  218.719764][ T4167] tblock:ffffc900026a1110: 03040910 00000000 00003aec 00000000
[  218.751562][ T4167] tblock:ffffc900026a1120: 7dd47228 ffff8880 628c93f0 ffff8880
[  218.759313][ T4167] tblock:ffffc900026a1130: 77ce4000 ffff8880 00030001 00000000
[  218.847992][ T4167] tblock:ffffc900026a1140: 00000000 dead4ead ffffffff 00000000
[  218.912053][ T4167] tblock:ffffc900026a1150: ffffffff ffffffff 96bd22c0 ffffffff
[  218.943254][ T4167] tblock:ffffc900026a1160: 903afd80 ffffffff 00000000 00000000
[  219.112860][ T4167] tblock:ffffc900026a1170: 8ae26580 ffffffff 00000200 00000000
[  219.125844][ T4167] tblock:ffffc900026a1180: 026a1180 ffffc900 026a1180 ffffc900
[  219.133659][ T4167] tblock:ffffc900026a1190: 00000001 00000000 00000100 dead0000
[  219.144729][ T4167] tblock:ffffc900026a11a0: 00000122 dead0000 00003cbc 00000000
[  219.152769][ T4167] tblock:ffffc900026a11b0: 2af68600 ffff8880 00000003 00000cbc
[  219.162462][ T4167] tblock:ffffc900026a11c0: 00000000 dead4ead ffffffff 00000000
[  219.173279][ T4167] tblock:ffffc900026a11d0: ffffffff ffffffff 96bd22a0 ffffffff
[  219.981490][ T4167] tblock:ffffc900026a11e0: 00000000 00000000 00000000 00000000
[  219.990572][ T4167] tblock:ffffc900026a11f0: 8ae26540 ffffffff 00000200 00000000
[  220.112804][ T4167] tblock:ffffc900026a1200: 026a1200 ffffc900 026a1200 ffffc900
[  220.130425][ T4167] tblock:ffffc900026a1210: 5fb58d70 ffff8880 00000000 00000000
[  221.288035][ T5697] netlink: 4 bytes leftover after parsing attributes in process `syz.9.271'.
[  222.387922][ T5698] netlink: 68 bytes leftover after parsing attributes in process `syz.8.272'.
[  224.080837][   T26] audit: type=1326 audit(1738041257.993:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5720 comm="syz.8.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa110319d29 code=0x7ffc0000
[  224.157877][   T26] audit: type=1326 audit(1738041258.012:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5720 comm="syz.8.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa110319d29 code=0x7ffc0000
[  224.941518][   T26] audit: type=1326 audit(1738041258.012:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5720 comm="syz.8.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa110319d29 code=0x7ffc0000
[  225.020488][   T26] audit: type=1326 audit(1738041258.012:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5720 comm="syz.8.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa110319d29 code=0x7ffc0000
[  226.625040][   T26] audit: type=1326 audit(1738041258.012:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5720 comm="syz.8.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa110319d29 code=0x7ffc0000
[  226.708308][   T26] audit: type=1326 audit(1738041258.012:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5720 comm="syz.8.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa110319d29 code=0x7ffc0000
[  226.817395][ T5751] bridge0: port 2(bridge_slave_1) entered disabled state
[  226.826161][ T5751] bridge0: port 1(bridge_slave_0) entered disabled state
[  227.369861][   T26] audit: type=1326 audit(1738041258.031:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5720 comm="syz.8.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa110319d29 code=0x7ffc0000
[  229.132841][ T5769] Cannot find add_set index 0 as target
[  229.573848][ T5764] IPVS: Error connecting to the multicast addr
[  230.182178][   T26] audit: type=1326 audit(1738041263.522:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5761 comm="syz.0.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda3bc88d29 code=0x7ffc0000
[  231.245896][   T26] audit: type=1326 audit(1738041263.522:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5761 comm="syz.0.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda3bc88d29 code=0x7ffc0000
[  231.547024][   T26] audit: type=1326 audit(1738041263.522:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5761 comm="syz.0.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda3bc88d29 code=0x7ffc0000
[  231.693821][   T26] audit: type=1326 audit(1738041263.522:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5761 comm="syz.0.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fda3bc87690 code=0x7ffc0000
[  231.727041][   T26] audit: type=1326 audit(1738041263.522:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5761 comm="syz.0.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fda3bc87690 code=0x7ffc0000
[  231.891370][ T5787] netlink: 96 bytes leftover after parsing attributes in process `syz.9.289'.
[  231.910076][   T26] audit: type=1326 audit(1738041263.522:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5761 comm="syz.0.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda3bc88d29 code=0x7ffc0000
[  233.313630][   T26] audit: type=1326 audit(1738041263.522:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5761 comm="syz.0.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7fda3bc88d29 code=0x7ffc0000
[  233.536822][   T26] audit: type=1326 audit(1738041263.522:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5761 comm="syz.0.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda3bc88d29 code=0x7ffc0000
[  233.579580][ T5810] netlink: 'syz.9.294': attribute type 1 has an invalid length.
[  233.616314][   T26] audit: type=1326 audit(1738041263.522:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5761 comm="syz.0.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fda3bc88d29 code=0x7ffc0000
[  233.842939][   T26] audit: type=1326 audit(1738041263.522:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5761 comm="syz.0.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda3bc88d29 code=0x7ffc0000
[  235.434829][ T5828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  235.448982][ T5828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  235.463945][ T5828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  256.271027][ T5966] process 'syz.9.329' launched '/dev/fd/8' with NULL argv: empty string added
[  257.120253][ T5985] 9pnet: Insufficient options for proto=fd
[  257.142297][ T5985] 9pnet: Insufficient options for proto=fd
[  260.084211][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  260.696576][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  262.519174][ T2320] Bluetooth: hci5: command 0x0406 tx timeout
[  263.488250][ T6025] netlink: 4 bytes leftover after parsing attributes in process `syz.7.344'.
[  264.683369][ T6037] 9pnet: Insufficient options for proto=fd
[  264.701366][ T6037] 9pnet: Insufficient options for proto=fd
[  265.898238][ T6054] netlink: 4 bytes leftover after parsing attributes in process `syz.7.352'.
[  266.119911][ T6058] netlink: 4 bytes leftover after parsing attributes in process `syz.8.353'.
[  268.118928][ T4839] Bluetooth: hci4: command 0x0409 tx timeout
[  268.601475][ T6045] chnl_net:caif_netlink_parms(): no params data found
[  269.525920][ T6093] 9pnet: Insufficient options for proto=fd
[  269.588213][ T6093] 9pnet: Insufficient options for proto=fd
[  270.312575][   T13] Bluetooth: hci4: command 0x041b tx timeout
[  274.091598][ T6130] Cannot find add_set index 0 as target
[  274.200104][ T6130] IPVS: Error connecting to the multicast addr
[  274.631833][   T13] Bluetooth: hci4: command 0x040f tx timeout
[  277.325155][ T4246] Bluetooth: hci4: command 0x0419 tx timeout
[  277.479977][ T6045] bridge0: port 1(bridge_slave_0) entered blocking state
[  278.547040][ T6045] bridge0: port 1(bridge_slave_0) entered disabled state
[  278.842288][ T6045] device bridge_slave_0 entered promiscuous mode
[  278.887085][ T6045] bridge0: port 2(bridge_slave_1) entered blocking state
[  278.957389][ T6045] bridge0: port 2(bridge_slave_1) entered disabled state
[  279.557897][ T4836] Bluetooth: hci0: command 0x0406 tx timeout
[  279.567915][ T6045] device bridge_slave_1 entered promiscuous mode
[  280.642800][ T4213] Bluetooth: hci2: command 0x0406 tx timeout
[  281.423977][ T6045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  281.758981][ T6164] netlink: 4 bytes leftover after parsing attributes in process `syz.8.373'.
[  281.876937][ T6179] Cannot find add_set index 0 as target
[  282.596884][ T6045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  282.794665][ T6045] team0: Port device team_slave_0 added
[  282.823183][ T6045] team0: Port device team_slave_1 added
[  283.036760][ T6045] batman_adv: batadv0: Adding interface: batadv_slave_0
[  283.043742][ T6045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  283.173449][ T6045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  283.224718][ T4250] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  283.281143][ T6045] batman_adv: batadv0: Adding interface: batadv_slave_1
[  283.288112][ T6045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  283.387378][ T6045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  283.450976][ T4250] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  283.554949][ T6045] device hsr_slave_0 entered promiscuous mode
[  283.601403][ T6045] device hsr_slave_1 entered promiscuous mode
[  283.967128][ T4250] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  284.572831][ T4250] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  286.222971][ T6230] loop7: detected capacity change from 0 to 164
[  286.482645][ T6230] netlink: 4 bytes leftover after parsing attributes in process `syz.7.387'.
[  289.197222][ T6255] netlink: 4 bytes leftover after parsing attributes in process `syz.9.395'.
[  289.555925][ T4850] Bluetooth: hci3: command 0x0406 tx timeout
[  290.730048][ T6269] netlink: 4 bytes leftover after parsing attributes in process `syz.8.398'.
[  292.184631][ T6045] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  292.240135][ T6045] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  293.344341][   T27] INFO: task jfsCommit:277 blocked for more than 144 seconds.
[  293.381095][   T27]       Not tainted 5.15.177-syzkaller #0
[  294.217537][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  294.275698][   T27] task:jfsCommit       state:D stack:26360 pid:  277 ppid:     2 flags:0x00004000
[  294.303290][   T27] Call Trace:
[  294.306624][   T27]  <TASK>
[  294.309571][   T27]  __schedule+0x12c4/0x45b0
[  294.349834][   T27]  ? mark_lock+0x98/0x340
[  294.372967][   T27]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  294.379105][   T27]  ? release_firmware_map_entry+0x190/0x190
[  294.385033][   T27]  ? do_raw_spin_unlock+0x137/0x8b0
[  294.390322][   T27]  ? lockdep_hardirqs_on+0x94/0x130
[  294.395548][   T27]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[  294.401598][   T27]  schedule+0x11b/0x1f0
[  294.405781][   T27]  io_schedule+0x88/0x100
[  294.410197][   T27]  __lock_metapage+0x1ec/0x3c0
[  294.414991][   T27]  ? last_read_complete+0x1d0/0x1d0
[  294.420286][   T27]  ? sched_dynamic_update+0x240/0x240
[  294.425683][   T27]  ? __might_sleep+0xc0/0xc0
[  294.430366][   T27]  ? do_read_cache_page+0xcb3/0x1040
[  294.435764][   T27]  __get_metapage+0x495/0x1070
[  294.440571][   T27]  ? __get_metapage+0xb82/0x1070
[  294.445662][   T27]  diIAGRead+0xcb/0x130
[  294.449848][   T27]  diFree+0xa7a/0x2fb0
[  294.460045][   T27]  ? diWrite+0x19b0/0x19b0
[  294.465914][   T27]  ? jfs_free_zero_link+0x46a/0x6e0
[  294.471144][   T27]  ? jfs_write_failed+0x190/0x190
[  294.485187][   T27]  ? bit_waitqueue+0x30/0x30
[  294.489836][   T27]  jfs_evict_inode+0x329/0x440
[  294.503526][   T27]  ? jfs_write_inode+0x210/0x210
[  294.508808][   T27]  evict+0x529/0x930
[  294.512740][   T27]  ? mode_strip_sgid+0x210/0x210
[  294.518384][   T27]  ? _raw_spin_unlock+0x24/0x40
[  294.523265][   T27]  ? iput+0x6f5/0x8b0
[  294.527522][   T27]  txUpdateMap+0x825/0x9e0
[  294.532074][   T27]  ? txCommit+0x6ba0/0x6ba0
[  294.536737][   T27]  jfs_lazycommit+0x470/0xc30
[  294.553293][   T27]  ? _raw_spin_unlock_irqrestore+0x8b/0x130
[  294.566725][   T27]  ? lockdep_hardirqs_on+0x94/0x130
[  294.573420][   T27]  ? txFreelock+0x580/0x580
[  294.578086][   T27]  ? sched_dynamic_update+0x240/0x240
[  294.592059][   T27]  kthread+0x3f6/0x4f0
[  294.598357][   T27]  ? txFreelock+0x580/0x580
[  294.609165][   T27]  ? kthread_blkcg+0xd0/0xd0
[  294.621472][   T27]  ret_from_fork+0x1f/0x30
[  294.632152][   T27]  </TASK>
[  294.639069][   T27] 
[  294.639069][   T27] Showing all locks held in the system:
[  294.652436][ T6045] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  294.652574][   T27] 1 lock held by khungtaskd/27:
[  294.679840][   T27]  #0: ffffffff8cb1fce0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30
[  294.696613][   T27] 2 locks held by jfsCommit/277:
[  294.704892][   T27]  #0: ffff888075f60920 (&(imap->im_aglock[index])){+.+.}-{3:3}, at: diFree+0x378/0x2fb0
[  294.721632][   T27]  #1: ffff88805fbfa638 (&jfs_ip->rdwrlock/1){.+.+}-{3:3}, at: diFree+0x394/0x2fb0
[  294.738429][   T27] 2 locks held by getty/3928:
[  294.746974][   T27]  #0: ffff88802c398098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70
[  294.763116][   T27]  #1: ffffc900025c62e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6af/0x1db0
[  294.773796][   T27] 1 lock held by syz-executor/4157:
[  294.779034][   T27]  #0: ffff8880b8f3a318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140
[  294.789504][   T27] 2 locks held by syz-executor/4167:
[  294.795309][   T27]  #0: ffff888077ce40e0 (&type->s_umount_key#86){+.+.}-{3:3}, at: deactivate_super+0xa9/0xe0
[  294.805929][   T27]  #1: ffffffff8cecbbe8 (jfs_log_mutex){+.+.}-{3:3}, at: lmLogClose+0xae/0x530
[  294.816104][   T27] 2 locks held by kworker/0:5/4212:
[  294.821415][   T27]  #0: ffff888017472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0
[  294.832457][   T27]  #1: ffffc900035afd20 ((work_completion)(&rew.rew_work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0
[  294.845756][   T27] 4 locks held by kworker/u4:7/4250:
[  294.852159][   T27]  #0: ffff8880175cd938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0
[  294.862924][   T27]  #1: ffffc900046ffd20 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0
[  294.873254][   T27]  #2: ffffffff8dc36a90 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x166/0xc90
[  294.883084][   T27]  #3: ffffffff8cb241b0 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x9c/0x4e0
[  294.893509][   T27] 2 locks held by syz-executor/6045:
[  294.898923][   T27]  #0: ffffffff8dc42708 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x94c/0xee0
[  294.908879][   T27]  #1: ffffffff8cb242a8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x280/0x740
[  294.920921][   T27] 1 lock held by dhcpcd-run-hook/6319:
[  294.929398][ T6045] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  294.930296][   T27] 
[  294.942021][   T27] =============================================
[  294.942021][   T27] 
[  294.959449][   T27] NMI backtrace for cpu 1
[  294.963807][   T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 5.15.177-syzkaller #0
[  294.971814][   T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  294.981885][   T27] Call Trace:
[  294.985181][   T27]  <TASK>
[  294.988131][   T27]  dump_stack_lvl+0x1e3/0x2d0
[  294.992841][   T27]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  294.998499][   T27]  ? panic+0x860/0x860
[  295.002597][   T27]  ? nmi_cpu_backtrace+0x23b/0x4a0
[  295.007740][   T27]  nmi_cpu_backtrace+0x46a/0x4a0
[  295.012713][   T27]  ? __wake_up_klogd+0xd5/0x100
[  295.017589][   T27]  ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0
[  295.023764][   T27]  ? _printk+0xd1/0x120
[  295.027947][   T27]  ? panic+0x860/0x860
[  295.032040][   T27]  ? __wake_up_klogd+0xcc/0x100
[  295.036915][   T27]  ? panic+0x860/0x860
[  295.041017][   T27]  ? __rcu_read_unlock+0x92/0x100
[  295.046079][   T27]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[  295.052184][   T27]  nmi_trigger_cpumask_backtrace+0x181/0x2a0
[  295.058200][   T27]  watchdog+0xe72/0xeb0
[  295.062395][   T27]  kthread+0x3f6/0x4f0
[  295.066496][   T27]  ? hungtask_pm_notify+0x50/0x50
[  295.071546][   T27]  ? kthread_blkcg+0xd0/0xd0
[  295.076161][   T27]  ret_from_fork+0x1f/0x30
[  295.080615][   T27]  </TASK>
[  295.084799][   T27] Sending NMI from CPU 1 to CPUs 0:
[  295.090043][    C0] NMI backtrace for cpu 0
[  295.090055][    C0] CPU: 0 PID: 6337 Comm: sed Not tainted 5.15.177-syzkaller #0
[  295.090073][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  295.090083][    C0] RIP: 0010:kasan_check_range+0x7b/0x290
[  295.090105][    C0] Code: 00 00 00 00 fc ff df 4f 8d 34 1a 4c 89 f5 4c 29 cd 48 83 fd 10 7f 26 48 85 ed 0f 84 3a 01 00 00 49 f7 d2 49 01 da 41 80 39 00 <0f> 85 c4 01 00 00 49 ff c1 49 ff c2 75 ee e9 1d 01 00 00 45 89 cf
[  295.090131][    C0] RSP: 0018:ffffc90002f9f710 EFLAGS: 00000246
[  295.090146][    C0] RAX: ffffffff81d11701 RBX: 1ffff1100330a6f8 RCX: ffffffff81d117dd
[  295.090160][    C0] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffff8880198537c0
[  295.090171][    C0] RBP: 0000000000000001 R08: dffffc0000000000 R09: ffffed100330a6f8
[  295.090184][    C0] R10: ffffffffffffffff R11: dffffc0000000001 R12: dffffc0000000000
[  295.090197][    C0] R13: 0000000000000000 R14: ffffed100330a6f9 R15: 1ffffffff1981b1c
[  295.090210][    C0] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  295.090225][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  295.090237][    C0] CR2: 00007f938716a378 CR3: 0000000073b76000 CR4: 00000000003506f0
[  295.090253][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  295.090263][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  295.090273][    C0] Call Trace:
[  295.090278][    C0]  <NMI>
[  295.090284][    C0]  ? nmi_cpu_backtrace+0x39f/0x4a0
[  295.090303][    C0]  ? read_lock_is_recursive+0x10/0x10
[  295.090323][    C0]  ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0
[  295.090345][    C0]  ? unknown_nmi_error+0xd0/0xd0
[  295.090372][    C0]  ? nmi_cpu_backtrace_handler+0x8/0x10
[  295.090390][    C0]  ? nmi_handle+0xf7/0x370
[  295.090408][    C0]  ? kasan_check_range+0x7b/0x290
[  295.090424][    C0]  ? default_do_nmi+0x62/0x150
[  295.090444][    C0]  ? exc_nmi+0xa8/0x100
[  295.090460][    C0]  ? end_repeat_nmi+0x16/0x31
[  295.090480][    C0]  ? init_page_owner+0x711/0x730
[  295.090496][    C0]  ? __reset_page_owner+0xbd/0x180
[  295.090513][    C0]  ? kasan_check_range+0x7b/0x290
[  295.090530][    C0]  ? kasan_check_range+0x7b/0x290
[  295.090547][    C0]  ? kasan_check_range+0x7b/0x290
[  295.090570][    C0]  </NMI>
[  295.090575][    C0]  <TASK>
[  295.090581][    C0]  __reset_page_owner+0xbd/0x180
[  295.090601][    C0]  free_unref_page_prepare+0xc34/0xcf0
[  295.090624][    C0]  free_unref_page_list+0x1f7/0x8e0
[  295.090640][    C0]  ? uncharge_page+0x1f7/0x400
[  295.090661][    C0]  ? free_unref_page_commit+0x500/0x500
[  295.090677][    C0]  ? __mem_cgroup_uncharge_list+0xf8/0x150
[  295.090697][    C0]  ? uncharge_batch+0x490/0x490
[  295.090716][    C0]  ? _raw_spin_unlock+0x40/0x40
[  295.090737][    C0]  ? __mod_zone_page_state+0x8a/0xc0
[  295.090759][    C0]  release_pages+0x1bb9/0x1f40
[  295.090784][    C0]  ? lru_cache_disable+0x30/0x30
[  295.090802][    C0]  ? free_swap_cache+0x1a4/0x2d0
[  295.090826][    C0]  tlb_finish_mmu+0x177/0x320
[  295.090846][    C0]  exit_mmap+0x3cd/0x620
[  295.090865][    C0]  ? vm_brk+0x20/0x20
[  295.090888][    C0]  ? uprobe_clear_state+0x304/0x460
[  295.090911][    C0]  __mmput+0x112/0x3b0
[  295.090929][    C0]  exit_mm+0x688/0x7f0
[  295.090947][    C0]  ? _raw_spin_unlock_irq+0x2a/0x40
[  295.090970][    C0]  ? do_exit+0x2480/0x2480
[  295.090988][    C0]  ? rcu_is_watching+0x11/0xa0
[  295.091005][    C0]  ? hrtimer_try_to_cancel+0x3c9/0x410
[  295.091021][    C0]  ? taskstats_exit+0x491/0xa10
[  295.091039][    C0]  ? tty_audit_exit+0x150/0x1f0
[  295.091059][    C0]  do_exit+0x626/0x2480
[  295.091082][    C0]  ? put_task_struct+0x80/0x80
[  295.091102][    C0]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  295.091122][    C0]  ? vtime_user_exit+0x2d1/0x400
[  295.091144][    C0]  do_group_exit+0x144/0x310
[  295.091166][    C0]  __x64_sys_exit_group+0x3b/0x40
[  295.091185][    C0]  do_syscall_64+0x3b/0xb0
[  295.091201][    C0]  ? clear_bhb_loop+0x15/0x70
[  295.091216][    C0]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  295.091236][    C0] RIP: 0033:0x7fcc4f448a90
[  295.091249][    C0] Code: Unable to access opcode bytes at RIP 0x7fcc4f448a66.
[  295.091257][    C0] RSP: 002b:00007ffffd609618 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  295.091274][    C0] RAX: ffffffffffffffda RBX: 00007fcc4f539860 RCX: 00007fcc4f448a90
[  295.091286][    C0] RDX: 00000000000000e7 RSI: 000000000000003c RDI: 0000000000000000
[  295.091297][    C0] RBP: 00007fcc4f539860 R08: 00007ffffd609490 R09: 00007ffffd609570
[  295.091309][    C0] R10: 00007ffffd6094d0 R11: 0000000000000246 R12: 0000000000000000
[  295.091321][    C0] R13: 0000000000000000 R14: 00007fcc4f53d658 R15: 0000000000000001
[  295.091341][    C0]  </TASK>
[  295.111462][   T27] Kernel panic - not syncing: hung_task: blocked tasks
[  295.214603][ T6045] 8021q: adding VLAN 0 to HW filter on device bond0
[  295.219537][   T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 5.15.177-syzkaller #0
[  295.219569][   T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  295.244301][ T6169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  295.250377][   T27] Call Trace:
[  295.250388][   T27]  <TASK>
[  295.250398][   T27]  dump_stack_lvl+0x1e3/0x2d0
[  295.250427][   T27]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  295.250449][   T27]  ? panic+0x860/0x860
[  295.250483][   T27]  panic+0x318/0x860
[  295.250505][   T27]  ? schedule_preempt_disabled+0x20/0x20
[  295.250530][   T27]  ? nmi_trigger_cpumask_backtrace+0x221/0x2a0
[  295.250555][   T27]  ? fb_is_primary_device+0xd0/0xd0
[  295.250581][   T27]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[  295.250608][   T27]  ? nmi_trigger_cpumask_backtrace+0x221/0x2a0
[  295.250630][   T27]  ? nmi_trigger_cpumask_backtrace+0x281/0x2a0
[  295.250655][   T27]  ? nmi_trigger_cpumask_backtrace+0x286/0x2a0
[  295.250681][   T27]  watchdog+0xeb0/0xeb0
[  295.250716][   T27]  kthread+0x3f6/0x4f0
[  295.250738][   T27]  ? hungtask_pm_notify+0x50/0x50
[  295.250760][   T27]  ? kthread_blkcg+0xd0/0xd0
[  295.250782][   T27]  ret_from_fork+0x1f/0x30
[  295.250818][   T27]  </TASK>
[  295.250932][   T27] Kernel Offset: disabled
[  295.677308][   T27] Rebooting in 86400 seconds..