last executing test programs:

8m0.746811124s ago: executing program 4 (id=529):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x24, 0x0, 0x9, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFCTH_TUPLE={0x4}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000044}, 0x4040)

7m56.022864618s ago: executing program 4 (id=532):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0})
close_range(r3, 0xffffffffffffffff, 0x200000000000000)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
r5 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r5, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001500add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac7102d000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)

7m52.952096083s ago: executing program 4 (id=538):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="f8ff0040048d"})

7m49.286065669s ago: executing program 3 (id=549):
openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
socket(0x10, 0x803, 0x0)
getpgid(0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000000140)=ANY=[@ANYRES8=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r0, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x541c, &(0x7f0000000000))

7m47.191313871s ago: executing program 3 (id=551):
r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x57)
ioctl$FIBMAP(r0, 0x1, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000d40)={[{@nojournal_checksum}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xe6}}, {@oldalloc}, {@nobarrier}, {@auto_da_alloc}, {@nodioread_nolock}], [{@audit}, {@func={'func', 0x3d, 'MODULE_CHECK'}}, {@euid_lt={'euid<', 0xee00}}, {@euid_eq}, {@euid_eq}, {@appraise_type}]}, 0x41, 0x5b3, &(0x7f0000000780)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
prctl$PR_SET_PTRACER(0x59616d61, 0x0)

7m43.2518627s ago: executing program 4 (id=554):
pipe(&(0x7f0000000000))
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
socket$inet6(0xa, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6(0xa, 0x2, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r0 = epoll_create1(0x0)
dup(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080))
socket$packet(0x11, 0x2, 0x300)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet(0xa, 0x1, 0x0)
socket$inet6_icmp(0xa, 0x2, 0x3a)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="140000"], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r2, &(0x7f0000000000), 0xd)

7m40.771172742s ago: executing program 3 (id=557):
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x1000002, 0x5, 0x0, 'queue1\x00', 0x10000})
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f})
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0, 0xc000})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x3fb, 0x7fff})
getpid()

7m40.272369017s ago: executing program 4 (id=560):
r0 = syz_open_procfs(0x0, &(0x7f0000002340)='fdinfo\x00')
getdents(r0, &(0x7f0000000040)=""/62, 0x3e)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
getdents(r0, &(0x7f00000000c0)=""/180, 0xb4)

7m39.488356142s ago: executing program 3 (id=563):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040))
close_range(r3, 0xffffffffffffffff, 0x200000000000000)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
r5 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r5, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001500add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac7102d000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)

7m27.568359729s ago: executing program 3 (id=566):
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000)
r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket(0x10, 0x3, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
listen(r3, 0x90004)
accept(r3, &(0x7f0000000280)=@can, 0x0)

7m26.8802108s ago: executing program 4 (id=569):
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x109040)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000))
openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x15, &(0x7f00000005c0), 0x2, 0x3}}, 0x20)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x111, 0x3}}, 0x20)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)

7m24.993776086s ago: executing program 3 (id=570):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x80)
r6 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r6, 0x0, 0x0)
r7 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r7, 0x0, 0x0)
r8 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r8, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
setsockopt$SO_TIMESTAMP(r7, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffffaf, 0x4000280, 0x0, 0xffffffffffffffe1)

7m10.785156393s ago: executing program 32 (id=569):
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x109040)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000))
openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x15, &(0x7f00000005c0), 0x2, 0x3}}, 0x20)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x111, 0x3}}, 0x20)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)

7m5.346819326s ago: executing program 33 (id=570):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x80)
r6 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r6, 0x0, 0x0)
r7 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r7, 0x0, 0x0)
r8 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r8, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
setsockopt$SO_TIMESTAMP(r7, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffffaf, 0x4000280, 0x0, 0xffffffffffffffe1)

7m0.722189864s ago: executing program 0 (id=587):
r0 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0)
setsockopt$inet_int(r0, 0x0, 0xa, &(0x7f0000000040)=0x7, 0x4)

7m0.641893475s ago: executing program 2 (id=588):
setfsuid(0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000480)='./file0\x00', 0x2018008, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="2f93edc77863113d68e33456dfe3c025878b46bc73df14f991a8f7a341a10f44c05fc1c37ad73b0239a18733e7436f3b54758b4ce59af971d50e53c14277216c0bba6ad052fa7a6d77f0b19c8b2381abc46dfa7e4bc6c37bbab3f908f48d1a6055a6457c5d503502300a69dc517cc08b955df0d19ae4c120c512eceffbf3fc154e4ba08f2497b14e95cfdef1c26e8623eab9941404ca9d84df9a2c44e453a0cfffbf23e5bf1e872ee040a582eda3d84714e82dde4c02836e5f66775f4df1bdcfbc28eb5ced2b332944d3ab2b9efe3cbb2111fe"], 0xfe, 0x4b1, &(0x7f0000001d00)="$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")
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
fallocate(0xffffffffffffffff, 0x1, 0x460e, 0x3)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
r2 = syz_open_procfs(0x0, 0x0)
preadv(r2, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000})

6m59.345969671s ago: executing program 2 (id=589):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3cd2e7b3d6526bf5}}}, 0x68}}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @broadcast})
write$tun(r1, &(0x7f0000000140)={@val={0x8, 0x800}, @val={0x5, 0x0, 0x6, 0x0, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x3, 0x2f, 0x28, 0x64, 0x0, 0x8, 0x6, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0x101, 0x0, 0x401}}}}, 0x36)

6m57.59563031s ago: executing program 0 (id=590):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x19, 0x0, 0x0)
sendmmsg$inet(r0, &(0x7f0000006800)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000280)='|', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000003300)=[{&(0x7f0000000600)='a', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000004440)=[{&(0x7f0000000100)="96c4df", 0x3}], 0x1, &(0x7f0000000840)=ANY=[], 0xd0}}, {{0x0, 0x0, &(0x7f0000004840)=[{&(0x7f00000045c0)="14", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000005d80)=[{&(0x7f00000049c0)='{', 0x1}], 0x1}}], 0x5, 0x448c0)

6m57.546821325s ago: executing program 2 (id=591):
syz_open_dev$dvb_frontend(&(0x7f00000015c0), 0x0, 0x400)
syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010002000008404c05cc090000000000010902"], 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200800, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200))
r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48640)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[<r1=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff], 0x0, 0x1})
bind$inet6(0xffffffffffffffff, 0x0, 0x0)

6m57.417239703s ago: executing program 0 (id=593):
r0 = socket(0x28, 0x801, 0x0)
connect$bt_sco(r0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xc40a, &(0x7f0000000180)={[{@noblock_validity}, {@dioread_lock}, {@nobh}, {@oldalloc}, {@acl}, {@usrjquota, 0x2e}, {@noacl}, {@nodiscard}, {@jqfmt_vfsv0}, {@usrquota}], [], 0x2c}, 0x1, 0x45e, &(0x7f0000000480)="$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")
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRESDEC, @ANYBLOB='E'], 0x31)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$int_in(r4, 0x5452, &(0x7f0000000000)=0x6)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x48)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x31000000, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x15\x00'}]}, 0x1c}}, 0x0)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), r5)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.bfq.io_wait_time\x00', 0x0, 0x0)

6m55.160504837s ago: executing program 2 (id=596):
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4b)
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[<r2=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000680)={r3, 0x1ff, 0x0, 0x1, 0x3, [<r4=>0x0, 0x0, 0x0, <r5=>0x0], [0x2c5e, 0x0, 0x0, 0x4], [0x0, 0xc, 0x1], [0x0, 0x0, 0xfffffffffefffffc, 0x9]})
ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r4, r4, 0x0, r5], [0x2b8], [0x0, 0x4, 0x1], [0x40000000000000, 0x0, 0x0, 0x20000]})

6m54.332325807s ago: executing program 2 (id=597):
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040), 0x0)
syz_mount_image$vfat(&(0x7f0000000880), &(0x7f0000000400)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYRES64=0x0, @ANYRES32=0x0, @ANYRESDEC], 0x0, 0x2d5, &(0x7f0000000440)="$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")
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
write$tcp_mem(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x400000, 0x0, 0xfffffeb6, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
setpriority(0x2, 0x0, 0xd2f4)

6m53.993192475s ago: executing program 0 (id=598):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000380)={"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"})
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000780)={0x2, 0x0, @ioapic={0x6000, 0x3, 0x0, 0xeffffdff, 0x0, [{0x2, 0x0, 0xfc, '\x00', 0xfb}, {0x0, 0x9, 0x82, '\x00', 0x7c}, {0xfc, 0x12, 0x4, '\x00', 0xb9}, {0x11, 0xb, 0x0, '\x00', 0x7d}, {0xfe, 0x9, 0x4}, {0x0, 0x0, 0xfe, '\x00', 0x2}, {0xfd, 0x0, 0x6}, {0x0, 0x7a}, {0x1, 0x8f, 0x40, '\x00', 0x4}, {0xa8, 0x6, 0x0, '\x00', 0x1}, {0x4b, 0x0, 0x0, '\x00', 0x6}, {0x3, 0x99, 0x2, '\x00', 0xff}, {0x0, 0x0, 0x2, '\x00', 0x3}, {0x2, 0x7f, 0x6}, {0xc3, 0x9, 0x0, '\x00', 0x49}, {0x0, 0x21, 0x80}, {0x3}, {0x7, 0x2, 0x5, '\x00', 0x10}, {0x48, 0x2, 0xd}, {0x0, 0x80}, {0x0, 0x2, 0x0, '\x00', 0x37}, {0xfd, 0x9, 0x0, '\x00', 0x5}, {0x0, 0x4, 0x6}, {0x7f, 0x1, 0x4, '\x00', 0x7}]}})

6m46.787617927s ago: executing program 2 (id=599):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3cd2e7b3d6526bf5}}}, 0x68}}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @broadcast})
write$tun(r1, &(0x7f0000000140)={@val={0x8, 0x800}, @val={0x5, 0x0, 0x6, 0x0, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x3, 0x2f, 0x28, 0x64, 0x0, 0x8, 0x6, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0x101, 0x0, 0x401}}}}, 0x36)

6m45.711076086s ago: executing program 0 (id=602):
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000002140)={0x50, 0x0, 0x0, {0x7, 0x27, 0x0, 0x4000}}, 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
write$tcp_congestion(r0, &(0x7f00000000c0)='bbr\x00', 0x4)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019c80)=""/102400, 0x19000)
read$alg(0xffffffffffffffff, &(0x7f0000000e80)=""/4096, 0x1000)
listen(0xffffffffffffffff, 0x0)
io_setup(0x5, &(0x7f0000000140)=<r4=>0x0)
r5 = eventfd2(0x0, 0x0)
io_submit(r4, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, r5}])
io_submit(r4, 0x1, &(0x7f00000005c0)=[&(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x10001}])
io_pgetevents(r4, 0x1, 0x1, &(0x7f0000000240)=[{}], 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_opts(r6, 0x29, 0x39, 0x0, &(0x7f0000000080))

6m40.573688313s ago: executing program 0 (id=603):
r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$unix(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="ea", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="140000000000"], 0x18}, 0xc800)
setsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000000), 0x4)
r3 = getpgrp(0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f00000000c0)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000001140), 0x700, 0x2, 0x0)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x2b, 0x0, 0x504c0210, 0x0, 0x61c6, 0x4007, 0xa15, 0x0, 0x0, 0x10, 0x5}}, 0x50)

6m26.055554504s ago: executing program 34 (id=599):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3cd2e7b3d6526bf5}}}, 0x68}}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @broadcast})
write$tun(r1, &(0x7f0000000140)={@val={0x8, 0x800}, @val={0x5, 0x0, 0x6, 0x0, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x3, 0x2f, 0x28, 0x64, 0x0, 0x8, 0x6, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0x101, 0x0, 0x401}}}}, 0x36)

6m24.733748982s ago: executing program 35 (id=603):
r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$unix(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="ea", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="140000000000"], 0x18}, 0xc800)
setsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000000), 0x4)
r3 = getpgrp(0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f00000000c0)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000001140), 0x700, 0x2, 0x0)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x2b, 0x0, 0x504c0210, 0x0, 0x61c6, 0x4007, 0xa15, 0x0, 0x0, 0x10, 0x5}}, 0x50)

4m26.907204364s ago: executing program 1 (id=679):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x3)
ioctl$TCSETSW2(r4, 0x80047456, 0x0)
syz_usb_connect(0x3, 0x2d, 0x0, 0x0)
rmdir(&(0x7f00000001c0)='./file0\x00')
eventfd(0x0)
io_setup(0x6, &(0x7f0000000080))
syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x2014000, &(0x7f0000000580)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000102,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000011,fileset=00000000000000000011,uid=', @ANYBLOB="d6d84c0df937ed4a0cd30000f2e9ea9568eab74a46c525dc386983eade0b0ce5f1dd911706cf7d32d7d508d1823b8871e001000000eb4ce0a008f5cdea622fc6675e5486860a752ed0298a948efa72b2c8d8525181644a3124f3544a50f192b98f055ad125fd4674534413c6044136ea5aefac5267e43739626ea9391d8f346c4694f70400000000000000cee1f628d1cec3462830606bb612bfed91181cdc107bb91a2e86de2ad5", @ANYBLOB="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"], 0x12, 0xc49, &(0x7f0000001cc0)="$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")
setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff})
truncate(&(0x7f0000000080)='./file1\x00', 0x400000f007)
truncate(&(0x7f0000000080)='./file1\x00', 0x400000f008)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x25)
pwrite64(r5, &(0x7f0000000140)="c1", 0x1, 0x8000c61)

4m22.240415528s ago: executing program 1 (id=680):
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x1b, 0x4)

4m18.228791142s ago: executing program 1 (id=681):
unshare(0xa020480)
r0 = gettid()
syz_open_procfs$namespace(r0, &(0x7f0000000080)='ns/cgroup\x00')
unshare(0x6020400)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x2000c015}, 0x2404c8c0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x2, 0x200006, 0xfff, 0xfc6}, 0x10, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r1], 0x4c}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

4m17.429997011s ago: executing program 1 (id=682):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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")
setxattr$system_posix_acl(&(0x7f00000002c0)='.\x00', &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="020000000100000000000000040003000000000010000100000000002000000000000000"], 0x24, 0x0)
r0 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, 0x0}, 0x0)
r3 = getpgrp(0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r4 = getpid()
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {0x1}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x2000, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0)
process_vm_readv(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x2)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.parent_freezing\x00', 0x275a, 0x0)
write$binfmt_script(r7, &(0x7f0000000040), 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r7, 0x0)

4m12.953998354s ago: executing program 1 (id=683):
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xa, 0x0, 0x0)
r0 = timerfd_create(0x0, 0x0)
timerfd_settime(r0, 0x3, &(0x7f00000001c0)={{0x77359400}, {0x77359400}}, 0x0)
clock_adjtime(0x0, &(0x7f0000000340)={0x2925, 0x0, 0x0, 0x3, 0x40, 0x0, 0x0, 0x81f, 0x0, 0x1, 0x0, 0x40000000, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffd, 0x200000004, 0xffffffffffffffff, 0x2000800, 0x0, 0x0, 0x59, 0xb})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000000900000100000028"], 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r1, 0x0, 0x0}, 0x20)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
unshare(0x44040200)
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000001e40), 0x1, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffffe39}]})
getuid()
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0)
syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00')
r4 = getpid()
r5 = signalfd4(r2, 0x0, 0x0, 0x80800)
r6 = syz_pidfd_open(r4, 0x0)
setns(r6, 0x24020000)
open_tree(0xffffffffffffff9c, &(0x7f0000000280)='\x00', 0x89901)
umount2(&(0x7f0000000040)='.\x00', 0x2)
close_range(r3, 0xffffffffffffffff, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
timerfd_settime(r0, 0x3, &(0x7f0000000000)={{}, {0x77359400}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r5)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000638fc40078066c8b1781d513defdce743602f195d3c362fd618a2110adf45a28b641b7497fc902b0491721d5ba18b1934a473547f7b4d6aa27ffffffffffffff", @ANYRES16=r7, @ANYBLOB="010000000000fddbdf250200000008000300", @ANYRES32=r9], 0x48}}, 0x20000000)

4m12.035241799s ago: executing program 1 (id=684):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0, <r1=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

4m11.095793681s ago: executing program 36 (id=684):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0, <r1=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

3m32.308039566s ago: executing program 8 (id=610):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000380)={"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"})
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000780)={0x2, 0x0, @ioapic={0x6000, 0x3, 0x0, 0xeffffdff, 0x0, [{0x2, 0x0, 0xfc, '\x00', 0xfb}, {0x0, 0x9, 0x82, '\x00', 0x7c}, {0xfc, 0x12, 0x4, '\x00', 0xb9}, {0x11, 0xb, 0x0, '\x00', 0x7d}, {0xfe, 0x9, 0x4}, {0x0, 0x0, 0xfe, '\x00', 0x2}, {0xfd, 0x0, 0x6}, {0x0, 0x7a}, {0x1, 0x8f, 0x40, '\x00', 0x4}, {0xa8, 0x6, 0x0, '\x00', 0x1}, {0x4b, 0x0, 0x0, '\x00', 0x6}, {0x3, 0x99, 0x2, '\x00', 0xff}, {0x0, 0x0, 0x2, '\x00', 0x3}, {0x2, 0x7f, 0x6}, {0xc3, 0x9, 0x0, '\x00', 0x49}, {0x0, 0x21, 0x80}, {0x3}, {0x7, 0x2, 0x5, '\x00', 0x10}, {0x48, 0x2, 0xd}, {0x0, 0x80}, {0x0, 0x2, 0x0, '\x00', 0x37}, {0xfd, 0x9, 0x0, '\x00', 0x5}, {0x0, 0x4, 0x6}, {0x7f, 0x1, 0x4, '\x00', 0x7}]}})

3m31.427905615s ago: executing program 8 (id=688):
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x4000, &(0x7f00000004c0)=ANY=[@ANYBLOB='mode=00000000000000000000177,mode=00000000000000000000005,shortad,utf8,shortad,shortad,session=00000000000016777223,umask=00000000000000000000250,uid=ignore,shortad,dmode=00000000000000000170430,gid=ignore,adinicb,gid=forget,mode=00000000000000000002000,lastblock=00000000000000001024,shortad,euid>', @ANYBLOB="2c66736d616769633d3078303030303030303030303030303030322c736d61636b6673665e6f6f723d736d61636b66737472616e732d7574652c666f776e65723ee913b6e7858b459aea76a61374d95a5ba0ea131492042d59ca3669979b6c1e1ec7d9bb6c99ec974795d51b342596c4a62342a4d28a02f68f2ee922c8041f11fad6b3d4a0518253955e447f57f4d4dc2acad3457c75d1861af156d552fb5c05e042d5b09427d15fea177d488b", @ANYRES64, @ANYRESDEC=0x0, @ANYBLOB="10af9b9320e74f2badb1d4f1bf657d6e613c701d8c5846d8803fc0d4f31e0c79e44ce9044721ca748ec42f07aea4364f36ff75c213c05cfcae7d9a22289f08efffb486ace97445aaf1541ba1fc8a8f20a31dfd675975db1599d3b57a2c97d8598d7729eddf33ea3504f1779e77a3ac0655cd593e710b8f5b076c38a60ee40c06bb60956c6bd72b80348f70ccb438f549f555d0567cbbf840569f1102d47be18af8b21f48c88dcc9ad10e24f851a3642197ab2acbb330d969d01a7bc3977faf2c369f47a693654742ab", @ANYBLOB="f9c1eb3e827127e08d98faa9d0c71b0e9140cd349baa"], 0xa, 0xc35, &(0x7f0000001c40)="$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")
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x1aa)
getdents64(r0, &(0x7f0000004440)=""/4096, 0x1000)

3m29.925339296s ago: executing program 8 (id=691):
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='\n\x00\x00\x00\v\x00\x00\x00B\x00\x00\x00>\x00\x00\x00B\x00\x00\x00', @ANYRES32, @ANYBLOB="fdffffff000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000e8ffffff00eaff000000000000000000000800"], 0x50)
r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r4, 0xc05c5340, 0x0)
gettid()
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNIMAP(r5, 0x4b67, 0x0)
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r6, &(0x7f0000000000)={0x1f, @none}, 0x8)
setsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0x7, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r7 = fsmount(r0, 0x0, 0x0)
getsockopt$inet6_mreq(r7, 0x29, 0x1b, 0x0, &(0x7f0000000180))

3m24.653222743s ago: executing program 8 (id=693):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480), 0x50)
syz_read_part_table(0x403a, &(0x7f0000004040)="$eJzs0D1KA2EQBuBZQbCxsBAs5wiyspZ6AQ+hrAsKi40/mCLN5l6BXCNFjpArJLAJSbtFElI8T/O98DHDy7x8fv3+Zz1qs8y39ifv8+M9y6rK76bOx4c4gWKXrmISRXRxE5dDBl+vF8tjFjsXt3dxsY1Fn1bxvP99mm1u2L8RMe6G7p1Pm79DdwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYM0OHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADByQAAAAAgv6/bkegAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC8FAAD//8QZE0c=")
socketpair$unix(0x1, 0x3, 0x0, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)

3m10.913120744s ago: executing program 6 (id=581):
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000009040)=[{{0x0, 0x0, &(0x7f0000002d80)=[{&(0x7f00000018c0)="beb679d565f2131a01ef0d2d710d18d6c57fc8f2a559b0f983c2", 0x1a}, {0x0}], 0x2, 0x0, 0x68, 0x20004080}}], 0x1, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000500)={0x7, 0xd, 0x0, 0xffdffffc, 0x6, "00001000"})
write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x2, 0x0, 0x83, "00000000000000000000ffff00000000000002"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x0, 0xfffffffd, 0x0, 0x6, 0x12, "e315bc1cc24ff7b7cdb242e1ff0aa6905446b3"})
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
read$FUSE(r2, &(0x7f0000003f80)={0x2020}, 0x2020)
read$watch_queue(r2, &(0x7f0000000340)=""/133, 0x85)

3m9.823710821s ago: executing program 8 (id=702):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x80000)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000380)={{0x3, 0x2}})
socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000001c40)='net/ip_tables_targets\x00')
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[], 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
futex(&(0x7f0000000140)=0x1, 0xd, 0x0, &(0x7f0000000180)={0x0, 0x989680}, 0x0, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
getpid()
r2 = fcntl$getown(r1, 0x9)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0)
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000)
r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0xc8, 0x401)
ioctl$EVIOCGKEY(r5, 0x80404518, &(0x7f0000000200)=""/100)
read$FUSE(r1, 0x0, 0x0)
preadv(r1, &(0x7f0000000440)=[{&(0x7f0000000340)=""/255, 0xff}], 0x1, 0x7, 0x7)
syz_usb_connect(0x0, 0x3e, 0x0, 0x0)
r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000280), 0x1c9601, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000080)={0x1, "0600000000000000c64c3b6e6ff82a75e5318fca4288c2ffbdbec772020acd2c", <r7=>0xffffffffffffffff})
ppoll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x2}, {r7, 0x894}, {0xffffffffffffffff, 0x84e1}], 0x3, 0x0, 0x0, 0x0)
dup3(r7, r6, 0x0)

3m8.259470369s ago: executing program 6 (id=704):
socket$inet6(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000)
r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000)
rseq(&(0x7f00000001c0), 0x20, 0x0, 0x0)
futex(0x0, 0x0, 0x2, &(0x7f0000000100)={0x0, 0x989680}, 0x0, 0x2)
getdents64(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect$uac1(0x5, 0x72, &(0x7f0000003fc0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0xdba, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x8, 0x20, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x80, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x5, 0x8, 0x16, {0x7, 0x25, 0x1, 0x0, 0x7, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x8, 0xb, 0x5, {0x7, 0x25, 0x1, 0x4, 0xc, 0x7}}}}}}}}]}}, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x344)
ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x0, &(0x7f0000000540))

3m3.505875604s ago: executing program 8 (id=706):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x6, 0x4, 0x200000000000043, 0x2000004, 0x0, 0x2004cb, 0x0, 0xa7c, 0x9, 0x8, 0x8000000009, 0x803, 0x0, 0x9, 0x9], 0xeeee8000, 0x202})
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0xeeee3001, 0x8, 0x8, 0xb, 0xe6, 0x40, 0x0, 0x0, 0x81, 0x80}, {0x5000, 0x33000, 0x3, 0x0, 0x42, 0x5, 0x9, 0x6, 0x36, 0xd, 0x6, 0x89}, {0x0, 0xd000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x0, 0xeeee0000, 0x9, 0x6, 0x5, 0x42, 0xb, 0x0, 0x8, 0x7, 0xe}, {0xf000, 0x1000, 0xf, 0x3, 0x16, 0x7, 0x9, 0x8, 0x7, 0x9, 0xf7, 0x97}, {0xeeefa000, 0xdddd0000, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x2f, 0x1, 0x7}, {0x54000, 0x3000, 0xf, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xdddd0000, 0x4000, 0xa, 0x5, 0xcd, 0x7, 0xff, 0x9, 0x2, 0xc, 0xb0, 0x83}, {0xeeee0000, 0x30}, {0xf000, 0x7}, 0x80000021, 0x0, 0x3000, 0x2024, 0x2, 0x0, 0x100000, [0x6800000000000000, 0x5, 0x2, 0x20008]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r3, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000000bc0)=""/4073, 0xff4}, {&(0x7f0000000000)=""/15, 0xf}, {&(0x7f0000000140)=""/54, 0x36}, {&(0x7f0000000080)=""/24, 0x18}], 0x4}, 0x8}], 0x4000000000001b6, 0x180, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
syz_open_dev$dri(0x0, 0x1ff, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)="2e00000011008b10000f80ee59acbc04130800480f0000005ef5c62900421803001825800000000000000280000c", 0x2e}], 0x1}, 0x0)

2m55.732796962s ago: executing program 6 (id=708):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_mount_image$squashfs(&(0x7f0000000940), &(0x7f0000000640)='./file0\x00', 0x10090c6, &(0x7f0000000980)=ANY=[@ANYBLOB="00bc7811e943bbb3bc31a70c81525069e4320000000000f11fac5b600346a3cf2dc67c5bf96eefd90802c528f84db5e3fc53e166dfc62a0d50ae803645e5d16182a2681f3849384200268bfa5c4991d8ef3c2679ce26a969c0d9046fc4e1ca6999c39077bd2c8cd6cab448c9c880591bb4e20c350915203da8e126912d9df6847dee13e1c99fe1999a7b66331fd2447fc60d6e06e2ce393943ae07f22346d6901708f493c5ec64ff21318445692e7c4cbd1c3360"], 0x9, 0x1a1, &(0x7f00000001c0)="$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")
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x400000, 0x0, 0xfffffeb6, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
pipe(0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r5 = gettid()
rt_sigqueueinfo(r5, 0x21, &(0x7f00000002c0))

2m47.317844166s ago: executing program 37 (id=706):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x6, 0x4, 0x200000000000043, 0x2000004, 0x0, 0x2004cb, 0x0, 0xa7c, 0x9, 0x8, 0x8000000009, 0x803, 0x0, 0x9, 0x9], 0xeeee8000, 0x202})
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0xeeee3001, 0x8, 0x8, 0xb, 0xe6, 0x40, 0x0, 0x0, 0x81, 0x80}, {0x5000, 0x33000, 0x3, 0x0, 0x42, 0x5, 0x9, 0x6, 0x36, 0xd, 0x6, 0x89}, {0x0, 0xd000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x0, 0xeeee0000, 0x9, 0x6, 0x5, 0x42, 0xb, 0x0, 0x8, 0x7, 0xe}, {0xf000, 0x1000, 0xf, 0x3, 0x16, 0x7, 0x9, 0x8, 0x7, 0x9, 0xf7, 0x97}, {0xeeefa000, 0xdddd0000, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x2f, 0x1, 0x7}, {0x54000, 0x3000, 0xf, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xdddd0000, 0x4000, 0xa, 0x5, 0xcd, 0x7, 0xff, 0x9, 0x2, 0xc, 0xb0, 0x83}, {0xeeee0000, 0x30}, {0xf000, 0x7}, 0x80000021, 0x0, 0x3000, 0x2024, 0x2, 0x0, 0x100000, [0x6800000000000000, 0x5, 0x2, 0x20008]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r3, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000000bc0)=""/4073, 0xff4}, {&(0x7f0000000000)=""/15, 0xf}, {&(0x7f0000000140)=""/54, 0x36}, {&(0x7f0000000080)=""/24, 0x18}], 0x4}, 0x8}], 0x4000000000001b6, 0x180, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
syz_open_dev$dri(0x0, 0x1ff, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)="2e00000011008b10000f80ee59acbc04130800480f0000005ef5c62900421803001825800000000000000280000c", 0x2e}], 0x1}, 0x0)

2m39.024799236s ago: executing program 38 (id=708):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_mount_image$squashfs(&(0x7f0000000940), &(0x7f0000000640)='./file0\x00', 0x10090c6, &(0x7f0000000980)=ANY=[@ANYBLOB="00bc7811e943bbb3bc31a70c81525069e4320000000000f11fac5b600346a3cf2dc67c5bf96eefd90802c528f84db5e3fc53e166dfc62a0d50ae803645e5d16182a2681f3849384200268bfa5c4991d8ef3c2679ce26a969c0d9046fc4e1ca6999c39077bd2c8cd6cab448c9c880591bb4e20c350915203da8e126912d9df6847dee13e1c99fe1999a7b66331fd2447fc60d6e06e2ce393943ae07f22346d6901708f493c5ec64ff21318445692e7c4cbd1c3360"], 0x9, 0x1a1, &(0x7f00000001c0)="$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")
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x400000, 0x0, 0xfffffeb6, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
pipe(0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r5 = gettid()
rt_sigqueueinfo(r5, 0x21, &(0x7f00000002c0))

2m22.207947772s ago: executing program 7 (id=754):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00', @ANYRES16=r1, @ANYBLOB="31031d000000000000000900000008000300", @ANYRES32=r2, @ANYBLOB="080006"], 0x24}}, 0x0)

2m19.084639971s ago: executing program 7 (id=757):
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001500)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "c569f01e", {0x3, 0x100, 0x0, 0x1, 0xffc0, 0x2, 0xfe}})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000080)=@conn_svc_rsp={0x0, 0x0, 0xa, "115e4ecd", {0x3, 0x100, 0x0, 0x4, 0x3, 0x0, 0xd}})

2m14.804893777s ago: executing program 7 (id=762):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000000500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x28, 0x0, &(0x7f0000000b40)="c1188619b95d02ff4284860186dd4b2b88a8", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2m13.621913358s ago: executing program 7 (id=765):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00', @ANYRES16=r1, @ANYBLOB="31031d000000000000000900000008000300", @ANYRES32=r2, @ANYBLOB="080006"], 0x24}}, 0x0)

2m11.047955958s ago: executing program 7 (id=767):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040000)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x80890a, &(0x7f0000000400), 0x1, 0x7c0, &(0x7f0000000680)="$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")
r0 = open(&(0x7f0000000140)='.\x00', 0x0, 0x112)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000300)={0x6, 0xffffffff, 0x4, 0x610})

2m8.983836401s ago: executing program 7 (id=774):
syz_emit_ethernet(0x67, &(0x7f0000000500)={@empty, @remote, @void, {@generic={0x93f6, "60111247c828203c0dda3b6de5f059569fc896f232bcdaf40d1a799d66adb60a39eeddf3bb38246d98c299376ae0b041e1b928efa141aeaa0ff18d833f5aea4fdafb953178d66024790a2425a3478a8e3cec5ecc83293d022f"}}}, &(0x7f00000005c0)={0x0, 0x1, [0x34b, 0x848, 0x25b, 0xb5a]})
socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f00000000c0)='./file0\x00', 0xa00010, &(0x7f0000000840)=ANY=[], 0x6, 0x635, &(0x7f00000012c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002240)='blkio.bfq.io_serviced\x00', 0x275a, 0x0)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)={0x29}, 0x8)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x1000040, &(0x7f00000004c0)={[{@nojournal_checksum}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xe6}}, {@oldalloc}, {@nobarrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x41, 0x5b3, &(0x7f0000000780)="$eJzs3T9sG9UfAPDvne2mf/L7pUggAepQAVKRqjpJ/0BhaldEpUodkFggctyoihNXcQJNFKnpXiE68E9dygYDI4iBAbGwwcoCYkaqaARS04EaObaTNHWCE+q4xJ+PdPF7dxd/3zv7++x7upMD6FmHa3/SiGci4nwSMbBmWzYaGw/X91tanC/cW5wvJFGtXvg9iSQi7i7OF5r7J43HAxGxEBFPR8R3uYij6cpT7mkWKrNz4yOlUnGqUR+cnrg8WJmdO3ZpYmSsOFacPPHyK6dOnzw1fHx4bXPvVdfWclvr6/Vfbrx3/cfXbt34/ItDC4UPRpI4E/2NbWv78SjVj0kuzqxbf7ITwboo6XYD2JZMI89rqfRUDESmkfWtVNcODn070jygg6p9EVWgRyXyH3pU83tA7fy3uezk94/bZ+snILW4S4vzhavRjJ+tz03E3uVzk/1/JA+cmdTONw/uZEPZlRauRcRQNvvw+z9pvP/WzlptzdCjaiQd8+3Z+gv18Oufrow/0WL86W/Onf5LzfFvqTH+LbWIn9lg/DvfZoy/3vz1kw3jX+uLZ7MR9x+Kn6zET1rETyPi7Tbj33zj69Mbbat+GnEkWvV/dUYx2Xx+ePDipVJxqP63ZYxvjhx6deP+R+zfIH59znbv8sfM2v7vabQpbbP/X33/5XMLm8R/8fnNX/9Wx39fRLzfZvwn7n72+kbbbl9L7tS+BbTq/2bxk8jFrTbjv3Tm8M+NollDAAAAAAAAAAB4hNLla9mSNL9STtN8vn4P75OxPy2VK9NHL5ZnJkfr17wdjFzavNJqoF5PavXhxvW4zfrxdfUTmUbAzL7ler5QLo12ue8AAAAAAAAAAAAAAAAAAADwuDiw7v7/PzPL9/+v/7lqYLfa+Ce/gd1O/kPvejD/k661A9h5Pv+hZ1XlP/SuVvlvTIDeINehd8l/6F3yH3qX/IfeJf8BAAAAAAAAAAAAAAAAAAAAAAAAAKAjzp87V1uq9xbnC7X6aHZ2Zrz8zrHRYmU8PzFTyBfKU5fzY+XyWKmYL5Qn/un5knL58lBMzlwZnC5Wpgcrs3NvTZRnJpu/KVrMdbxHAAAAAAAAAAAAAAAAAAAA8N/Tv7wkaT4iV6+naT4f8b+IOJhEcvFSqTgUEf+PiJ8yub5afbjbjQYAAAAAAAAAAAAAAAAAAIBdpjI7Nz5SKhWnOlfINkJ1MET7hexWdo6IhTZ2vtp+M2rPuOU25xoHsMuHbvuFu9W6bjXjhw9X12Qej/fh41/o4qAEAAAAAAAAAAAAAAAAAAA9avWm33b/435nGwQAAAAAAAAAAAAAAAAAAAA9Kf0tiYjacmTghf71W/ckS5nlx4h49+aFj66MTE9PDdfW31lZP/1xY/3xbrQfaFczT9OIqOUxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsKoyOzc+UioVp7ZZ6Gtjn273EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGA7/g4AAP//5TrUlQ==")
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
read$FUSE(r2, 0x0, 0x0)
getdents64(r1, &(0x7f0000002280)=""/4096, 0x1000)

1m47.402152557s ago: executing program 39 (id=774):
syz_emit_ethernet(0x67, &(0x7f0000000500)={@empty, @remote, @void, {@generic={0x93f6, "60111247c828203c0dda3b6de5f059569fc896f232bcdaf40d1a799d66adb60a39eeddf3bb38246d98c299376ae0b041e1b928efa141aeaa0ff18d833f5aea4fdafb953178d66024790a2425a3478a8e3cec5ecc83293d022f"}}}, &(0x7f00000005c0)={0x0, 0x1, [0x34b, 0x848, 0x25b, 0xb5a]})
socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f00000000c0)='./file0\x00', 0xa00010, &(0x7f0000000840)=ANY=[], 0x6, 0x635, &(0x7f00000012c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002240)='blkio.bfq.io_serviced\x00', 0x275a, 0x0)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)={0x29}, 0x8)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x1000040, &(0x7f00000004c0)={[{@nojournal_checksum}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xe6}}, {@oldalloc}, {@nobarrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x41, 0x5b3, &(0x7f0000000780)="$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")
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
read$FUSE(r2, 0x0, 0x0)
getdents64(r1, &(0x7f0000002280)=""/4096, 0x1000)

7.917469502s ago: executing program 9 (id=862):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000000c0)=0x3, 0x4)
sendmmsg$inet(r0, &(0x7f0000006800)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000280)='|', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000003300)=[{&(0x7f0000000600)='a', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000004840)=[{&(0x7f00000045c0)="14", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000005d80)=[{&(0x7f00000049c0)='{', 0x1}], 0x1}}], 0x4, 0x448c0)

7.196435207s ago: executing program 9 (id=863):
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYRES64=0x0], 0x1, 0x1ad, &(0x7f00000006c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x40)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_link_settings={0x4c, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, [0x9, 0x0, 0x7]}})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x4000)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f00000040c0)={0x2020}, 0x2020)

4.839886183s ago: executing program 5 (id=865):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000004e80)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_GETXATTR(r0, &(0x7f0000000040)={0x18, 0x0, r1, {0x7}}, 0x18)
write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000000)={0x28, 0x4, 0x0, {0x4, 0x1}}, 0x28)

4.420920213s ago: executing program 9 (id=866):
socket(0xa, 0x5, 0x0)
socket$kcm(0x2, 0x3, 0x2)
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0))
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100"], 0x1c}}, 0x4008054)
r3 = socket(0x1e, 0x4, 0x0)
write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16=r3], 0x14)

3.634510381s ago: executing program 9 (id=867):
syz_open_dev$video4linux(&(0x7f0000000200), 0x308000, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$tty1(0xc, 0x4, 0x1)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200800, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_dev$vim2m(&(0x7f0000000100), 0x7ff, 0x2)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200))
r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48640)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[<r1=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1})

3.626444562s ago: executing program 5 (id=868):
chdir(&(0x7f0000000000)='./cgroup\x00')
munmap(&(0x7f0000001000/0x4000)=nil, 0x4000)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000)

3.147631515s ago: executing program 5 (id=869):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11}})
ioctl(r1, 0x8b18, &(0x7f0000000040))

2.837519872s ago: executing program 5 (id=870):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000000c0)=0x3, 0x4)
sendmmsg$inet(r0, &(0x7f0000006800)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000280)='|', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000003300)=[{&(0x7f0000000600)='a', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000004840)=[{&(0x7f00000045c0)="14", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000005d80)=[{&(0x7f00000049c0)='{', 0x1}], 0x1}}], 0x4, 0x448c0)

2.803279476s ago: executing program 9 (id=871):
ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000140)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x7, 0x2, 0x80}]})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f00000000c0)={0x10000000000000ad, 0x0, [{0xc0010005, 0x0, 0x4}]})
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
select(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x2})
msgget$private(0x0, 0x240)
msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x2000, 0x0)

2.425895909s ago: executing program 5 (id=872):
futex(0x0, 0x81, 0xfffffffb, 0x0, 0x0, 0x0)
mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, 0x0, 0x410, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$nl_sock_diag(0x10, 0x3, 0x4)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04022420"], 0x7)
io_setup(0x56fc, &(0x7f0000000040)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x7, 0xc, 0xffffffffffffffff, &(0x7f0000000240)="f7503e47c34021dd690ffd8a196e75b7ba808d065f8aebc69f84f43872c7abe5bbe814f5f69cfe6db45beb60a1cf8b1d0b6ed20b35", 0x35, 0x8000, 0x0, 0x1}])

164.463211ms ago: executing program 5 (id=873):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23)

0s ago: executing program 9 (id=874):
socket(0xa, 0x5, 0x0)
socket$kcm(0x2, 0x3, 0x2)
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0))
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100"], 0x1c}}, 0x4008054)
r3 = socket(0x1e, 0x4, 0x0)
write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16=r3], 0x14)

kernel console output (not intermixed with test programs):

6942.766:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7925 comm="syz.1.645" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7feb83959bbb code=0x7ffc0000
[  484.935252][   T29] audit: type=1326 audit(1778696942.766:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7925 comm="syz.1.645" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb8399ce59 code=0x7ffc0000
[  485.084776][   T29] audit: type=1326 audit(1778696942.766:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7925 comm="syz.1.645" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb8399ce59 code=0x7ffc0000
[  485.250036][ T7666] veth0_vlan: entered promiscuous mode
[  485.305569][   T48] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  485.315440][   T48] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  485.327624][   T48] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  485.354801][   T48] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  485.369198][   T48] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  485.566285][ T7666] veth1_vlan: entered promiscuous mode
[  486.191920][ T5587] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  486.201895][ T5587] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  486.218237][ T5587] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  486.232115][ T5587] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  486.261899][ T5587] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  487.487074][ T5587] Bluetooth: hci5: command tx timeout
[  488.287218][ T7666] veth0_macvtap: entered promiscuous mode
[  488.356128][ T5587] Bluetooth: hci6: command tx timeout
[  488.589086][ T7666] veth1_macvtap: entered promiscuous mode
[  489.153305][ T7666] batman_adv: batadv0: Interface activated: batadv_slave_0
[  489.244232][ T7692] veth0_vlan: entered promiscuous mode
[  489.376599][ T7666] batman_adv: batadv0: Interface activated: batadv_slave_1
[  489.556433][ T5587] Bluetooth: hci5: command tx timeout
[  489.681663][ T7527] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  489.739196][ T7527] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  489.784645][ T7527] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  489.844174][ T7527] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  489.893968][ T7692] veth1_vlan: entered promiscuous mode
[  490.162632][ T5228] 8021q: adding VLAN 0 to HW filter on device eth9
[  490.436979][ T5587] Bluetooth: hci6: command tx timeout
[  490.525319][ T6742] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  490.806972][ T6742] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  491.049118][ T6742] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  491.068200][ T5587] Bluetooth: hci2: unexpected event for opcode 0x2041
[  494.729420][ T5587] Bluetooth: hci5: command tx timeout
[  494.735169][ T5587] Bluetooth: hci6: command tx timeout
[  496.855659][   T48] Bluetooth: hci6: command tx timeout
[  496.861424][ T4872] Bluetooth: hci5: command tx timeout
[  499.669796][ T6742] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  499.937057][ T7692] veth0_macvtap: entered promiscuous mode
[  500.371565][ T7692] veth1_macvtap: entered promiscuous mode
[  501.159212][   T48] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  501.168510][   T48] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  501.183005][   T48] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  501.200426][   T48] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  501.211381][   T48] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  501.857880][ T6742] bridge_slave_1: left allmulticast mode
[  501.860237][ T8014] loop1: detected capacity change from 0 to 512
[  501.885212][ T6742] bridge_slave_1: left promiscuous mode
[  501.906136][ T6742] bridge0: port 2(bridge_slave_1) entered disabled state
[  501.958126][ T8014] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e018, mo2=0002]
[  502.001876][ T6742] bridge_slave_0: left allmulticast mode
[  502.007443][ T8014] System zones: 1-12
[  502.033874][ T8014] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #12: comm syz.1.651: missing EA_INODE flag
[  502.046049][ T6742] bridge_slave_0: left promiscuous mode
[  502.076509][ T8014] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  502.084998][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  502.100921][    C1] EXT4-fs (loop1): initial error at time 1778696961: ext4_xattr_inode_iget:441: inode 12
[  502.111245][    C1] EXT4-fs (loop1): last error at time 1778696961: ext4_xattr_inode_iget:441: inode 12
[  502.124229][ T8014] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.651: error while reading EA inode 12 err=-117
[  502.142004][ T6742] bridge0: port 1(bridge_slave_0) entered disabled state
[  502.164002][ T8014] loop1: lost filesystem error report for type 5 error -117
[  502.169562][ T8014] EXT4-fs (loop1): 1 orphan inode deleted
[  502.304693][ T8014] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  502.404035][   T29] kauditd_printk_skb: 18 callbacks suppressed
[  502.404103][   T29] audit: type=1800 audit(1778696961.606:33): pid=8014 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.651" name="file1" dev="loop1" ino=15 res=0 errno=0
[  502.681118][ T5585] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  503.127766][ T8023] loop1: detected capacity change from 0 to 764
[  503.154772][ T6742] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  503.215179][ T6742] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  503.248524][ T6742] bond0 (unregistering): Released all slaves
[  503.302360][ T7692] batman_adv: batadv0: Interface activated: batadv_slave_0
[  503.315456][   T48] Bluetooth: hci3: command tx timeout
[  503.733315][ T7692] batman_adv: batadv0: Interface activated: batadv_slave_1
[  504.028989][ T6742] hsr_slave_0: left promiscuous mode
[  504.067995][ T6742] hsr_slave_1: left promiscuous mode
[  504.092568][ T6742] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  504.125482][ T6742] batman_adv: batadv0: Removing interface: batadv_slave_0
[  504.142380][ T6742] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  504.159496][ T6742] batman_adv: batadv0: Removing interface: batadv_slave_1
[  504.228678][ T6742] veth1_macvtap: left promiscuous mode
[  504.245914][ T6742] veth0_macvtap: left promiscuous mode
[  504.262247][ T6742] veth1_vlan: left promiscuous mode
[  504.271003][ T6742] veth0_vlan: left promiscuous mode
[  504.559224][ T5587] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  504.570918][ T5587] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  504.581594][ T5587] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  504.600688][ T5587] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  504.617486][ T5587] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  505.408233][ T5587] Bluetooth: hci3: command tx timeout
[  505.483844][ T6742] team0 (unregistering): Port device team_slave_1 removed
[  505.582880][ T6742] team0 (unregistering): Port device team_slave_0 removed
[  506.679151][ T5587] Bluetooth: hci0: command tx timeout
[  507.475018][ T5587] Bluetooth: hci3: command tx timeout
[  508.755243][ T5587] Bluetooth: hci0: command tx timeout
[  509.535812][ T7942] bridge0: port 1(bridge_slave_0) entered blocking state
[  509.554009][ T7942] bridge0: port 1(bridge_slave_0) entered disabled state
[  509.565162][ T5587] Bluetooth: hci3: command tx timeout
[  509.581102][ T7942] bridge_slave_0: entered allmulticast mode
[  509.591610][ T7942] bridge_slave_0: entered promiscuous mode
[  509.693851][ T8081] binder: 8080:8081 ioctl c0306201 200000000080 returned -14
[  509.757360][ T7955] bridge0: port 1(bridge_slave_0) entered blocking state
[  509.772639][ T7955] bridge0: port 1(bridge_slave_0) entered disabled state
[  509.781431][ T8081] binder: 8080:8081 ioctl c0306201 2000000003c0 returned -14
[  509.790258][ T7955] bridge_slave_0: entered allmulticast mode
[  509.803359][ T7955] bridge_slave_0: entered promiscuous mode
[  509.816934][ T7942] bridge0: port 2(bridge_slave_1) entered blocking state
[  509.831295][ T7942] bridge0: port 2(bridge_slave_1) entered disabled state
[  509.839428][ T7942] bridge_slave_1: entered allmulticast mode
[  509.849357][ T7942] bridge_slave_1: entered promiscuous mode
[  509.916364][ T5228] 8021q: adding VLAN 0 to HW filter on device eth10
[  509.992715][ T7955] bridge0: port 2(bridge_slave_1) entered blocking state
[  510.022513][ T7955] bridge0: port 2(bridge_slave_1) entered disabled state
[  510.062872][ T7955] bridge_slave_1: entered allmulticast mode
[  510.096342][ T7955] bridge_slave_1: entered promiscuous mode
[  510.250009][ T8086] loop1: detected capacity change from 0 to 256
[  510.288301][ T8086] exfat: Deprecated parameter 'utf8'
[  510.314103][ T8086] exfat: Bad value for 'umask'
[  510.468362][ T1142] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  510.835110][ T5587] Bluetooth: hci0: command tx timeout
[  511.247375][ T1308] ieee802154 phy0 wpan0: encryption failed: -22
[  511.256193][ T1308] ieee802154 phy1 wpan1: encryption failed: -22
[  512.158920][ T7942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  512.925705][ T5587] Bluetooth: hci0: command tx timeout
[  513.242296][ T7955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  513.543245][ T7942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  513.718163][ T1142] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  513.914342][ T7955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  517.562080][ T7942] team0: Port device team_slave_0 added
[  517.623699][ T1142] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  517.689988][ T7955] team0: Port device team_slave_0 added
[  517.727726][ T7955] team0: Port device team_slave_1 added
[  517.750272][ T7942] team0: Port device team_slave_1 added
[  518.006823][ T7942] batman_adv: batadv0: Adding interface: batadv_slave_0
[  518.025056][ T7942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  518.065142][ T7942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  518.105223][ T1142] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  518.264606][ T7942] batman_adv: batadv0: Adding interface: batadv_slave_1
[  518.298779][ T7942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  518.336367][ T7942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  518.405982][ T7955] batman_adv: batadv0: Adding interface: batadv_slave_0
[  518.415329][ T7955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  518.446609][ T7955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  518.547698][ T7955] batman_adv: batadv0: Adding interface: batadv_slave_1
[  518.570212][ T7955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  518.600243][ T7955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  519.380756][ T7942] hsr_slave_0: entered promiscuous mode
[  519.418101][ T7942] hsr_slave_1: entered promiscuous mode
[  519.447920][ T7942] debugfs: 'hsr0' already exists in 'hsr'
[  519.453827][ T7942] Cannot create hsr debugfs directory
[  519.713787][ T7955] hsr_slave_0: entered promiscuous mode
[  519.743224][ T7955] hsr_slave_1: entered promiscuous mode
[  519.772962][ T7955] debugfs: 'hsr0' already exists in 'hsr'
[  519.785236][ T7955] Cannot create hsr debugfs directory
[  520.513928][ T1142] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  520.611067][ T8007] bridge0: port 1(bridge_slave_0) entered blocking state
[  520.629661][ T8007] bridge0: port 1(bridge_slave_0) entered disabled state
[  520.655403][ T8007] bridge_slave_0: entered allmulticast mode
[  520.664705][ T8007] bridge_slave_0: entered promiscuous mode
[  520.872449][ T8007] bridge0: port 2(bridge_slave_1) entered blocking state
[  520.903130][ T8007] bridge0: port 2(bridge_slave_1) entered disabled state
[  520.932374][ T8007] bridge_slave_1: entered allmulticast mode
[  520.955764][ T8007] bridge_slave_1: entered promiscuous mode
[  521.093822][ T1142] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  521.159961][ T5228] 8021q: adding VLAN 0 to HW filter on device eth11
[  521.364187][ T8007] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  521.569538][ T1142] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  521.610946][ T8007] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  522.178023][ T1142] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  522.220069][ T8007] team0: Port device team_slave_0 added
[  522.341744][ T8032] bridge0: port 1(bridge_slave_0) entered blocking state
[  522.354027][ T8032] bridge0: port 1(bridge_slave_0) entered disabled state
[  522.377815][ T8032] bridge_slave_0: entered allmulticast mode
[  522.398785][ T8032] bridge_slave_0: entered promiscuous mode
[  522.424763][ T8032] bridge0: port 2(bridge_slave_1) entered blocking state
[  522.434592][ T8032] bridge0: port 2(bridge_slave_1) entered disabled state
[  522.456149][ T8032] bridge_slave_1: entered allmulticast mode
[  522.482168][ T8032] bridge_slave_1: entered promiscuous mode
[  522.539136][ T8007] team0: Port device team_slave_1 added
[  523.044445][ T8032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  523.180241][ T8032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  523.323617][ T8007] batman_adv: batadv0: Adding interface: batadv_slave_0
[  523.359019][ T8007] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  523.420779][ T8007] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  523.466080][ T8007] batman_adv: batadv0: Adding interface: batadv_slave_1
[  523.485159][ T8007] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  523.535262][ T8007] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  523.866156][ T8032] team0: Port device team_slave_0 added
[  523.899461][ T8032] team0: Port device team_slave_1 added
[  524.323156][ T8032] batman_adv: batadv0: Adding interface: batadv_slave_0
[  524.342329][ T8032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  524.405494][ T8032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  524.506103][ T8007] hsr_slave_0: entered promiscuous mode
[  524.516621][ T8007] hsr_slave_1: entered promiscuous mode
[  524.525687][ T8007] debugfs: 'hsr0' already exists in 'hsr'
[  524.531650][ T8007] Cannot create hsr debugfs directory
[  524.555556][ T8032] batman_adv: batadv0: Adding interface: batadv_slave_1
[  524.562972][ T8032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  524.635347][ T8032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  524.666618][ T1142] bridge_slave_1: left allmulticast mode
[  524.677689][ T1142] bridge_slave_1: left promiscuous mode
[  524.690565][ T1142] bridge0: port 2(bridge_slave_1) entered disabled state
[  524.735318][ T1142] bridge_slave_0: left allmulticast mode
[  524.743142][ T1142] bridge_slave_0: left promiscuous mode
[  524.774302][ T1142] bridge0: port 1(bridge_slave_0) entered disabled state
[  524.792954][ T1142] bridge_slave_1: left allmulticast mode
[  524.804743][ T1142] bridge_slave_1: left promiscuous mode
[  524.811640][ T1142] bridge0: port 2(bridge_slave_1) entered disabled state
[  524.830062][ T1142] bridge_slave_0: left allmulticast mode
[  524.838853][ T1142] bridge_slave_0: left promiscuous mode
[  524.845406][ T1142] bridge0: port 1(bridge_slave_0) entered disabled state
[  524.860171][ T1142] bridge_slave_1: left allmulticast mode
[  524.866138][ T1142] bridge_slave_1: left promiscuous mode
[  524.872646][ T1142] bridge0: port 2(bridge_slave_1) entered disabled state
[  524.890099][ T1142] bridge_slave_0: left allmulticast mode
[  524.904472][ T1142] bridge_slave_0: left promiscuous mode
[  524.910929][ T1142] bridge0: port 1(bridge_slave_0) entered disabled state
[  525.482510][ T1142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  525.516125][ T1142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  525.534489][ T1142] bond0 (unregistering): Released all slaves
[  525.544663][ T8136] loop1: detected capacity change from 0 to 512
[  525.563698][ T8136] EXT4-fs: Ignoring removed oldalloc option
[  525.573597][ T8136] EXT4-fs: old and new quota format mixing
[  525.932815][ T1142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  525.952048][ T1142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  525.982240][ T1142] bond0 (unregistering): Released all slaves
[  526.085368][ T8140] loop1: detected capacity change from 0 to 512
[  526.160672][ T8140] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  526.203281][ T8140] ext4 filesystem being mounted at /181/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  526.358626][ T1142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  526.392705][ T1142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  526.413756][ T1142] bond0 (unregistering): Released all slaves
[  526.806890][ T5585] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  527.096218][ T8145] loop1: detected capacity change from 0 to 1024
[  527.126372][ T8145] EXT4-fs (loop1): bad geometry: bigalloc file system with non-zero first_data_block
[  527.126372][ T8145] 
[  527.219457][ T8032] hsr_slave_0: entered promiscuous mode
[  527.251389][ T8032] hsr_slave_1: entered promiscuous mode
[  527.275859][ T8032] debugfs: 'hsr0' already exists in 'hsr'
[  527.288708][ T8032] Cannot create hsr debugfs directory
[  527.362101][ T1142] hsr_slave_0: left promiscuous mode
[  527.387619][ T1142] hsr_slave_1: left promiscuous mode
[  527.404763][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  527.425246][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_0
[  527.451617][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  527.475407][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_1
[  527.505962][ T1142] hsr_slave_0: left promiscuous mode
[  527.526577][ T1142] hsr_slave_1: left promiscuous mode
[  527.534702][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  527.543787][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_0
[  527.558200][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  527.566341][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_1
[  527.591030][ T1142] hsr_slave_0: left promiscuous mode
[  527.600624][ T1142] hsr_slave_1: left promiscuous mode
[  527.623343][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  527.641220][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_0
[  527.651363][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  527.664572][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_1
[  527.742159][ T1142] veth1_macvtap: left promiscuous mode
[  527.750450][ T1142] veth0_macvtap: left promiscuous mode
[  527.761384][ T1142] veth1_vlan: left promiscuous mode
[  527.767711][ T1142] veth0_vlan: left promiscuous mode
[  527.783604][ T1142] veth1_macvtap: left promiscuous mode
[  527.790942][ T1142] veth0_macvtap: left promiscuous mode
[  527.797300][ T1142] veth1_vlan: left promiscuous mode
[  527.815590][ T1142] veth0_vlan: left promiscuous mode
[  527.827518][ T1142] veth1_macvtap: left promiscuous mode
[  527.833681][ T1142] veth0_macvtap: left promiscuous mode
[  527.845624][ T1142] veth1_vlan: left promiscuous mode
[  527.852049][ T1142] veth0_vlan: left promiscuous mode
[  529.597606][ T1142] team0 (unregistering): Port device team_slave_1 removed
[  529.682293][ T1142] team0 (unregistering): Port device team_slave_0 removed
[  529.875949][ T8130] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  530.070377][ T8130] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  530.092917][ T8130] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  530.115616][ T8130] usb 2-1: Product: syz
[  530.135211][ T8130] usb 2-1: Manufacturer: syz
[  530.141807][ T8130] usb 2-1: SerialNumber: syz
[  530.163580][ T1142] team0 (unregistering): Port device team_slave_1 removed
[  530.168207][ T8130] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  530.223135][ T1142] team0 (unregistering): Port device team_slave_0 removed
[  530.313537][ T8129] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  530.977784][ T1142] team0 (unregistering): Port device team_slave_1 removed
[  531.019868][ T1142] team0 (unregistering): Port device team_slave_0 removed
[  531.152155][   T24] usb 2-1: USB disconnect, device number 26
[  531.451328][ T7942] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  531.493278][ T7942] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  531.621527][ T7942] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  531.655464][ T7942] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  531.879158][ T7942] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  531.928274][ T7942] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  531.943975][ T7942] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  531.969143][ T8129] usb 2-1: Service connection timeout for: 258
[  531.979196][ T8129] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services
[  531.993241][ T8129] ath9k_htc: Failed to initialize the device
[  531.994702][ T7942] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  532.011819][   T24] usb 2-1: ath9k_htc: USB layer deinitialized
[  532.218715][ T8159] loop1: detected capacity change from 0 to 512
[  532.303211][ T8159] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  532.317375][ T8159] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  532.482112][ T8159] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082]
[  532.492495][ T8159] System zones: 1-12
[  532.588464][ T8159] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  532.622201][ T8159] EXT4-fs (loop1): 1 truncate cleaned up
[  532.640814][ T8159] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  534.650680][ T5585] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  535.404875][ T7955] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  535.434000][ T7955] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  535.458632][ T7955] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  535.507409][ T7955] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  535.531013][ T7955] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  535.564533][ T7955] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  535.668939][ T7955] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  535.725224][ T7955] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  536.131915][ T7942] 8021q: adding VLAN 0 to HW filter on device bond0
[  536.447336][ T8007] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  536.498621][ T8007] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  536.567188][ T7942] 8021q: adding VLAN 0 to HW filter on device team0
[  536.591463][ T8007] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  536.631766][ T8007] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  536.746080][ T8007] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  536.803290][ T8007] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  536.828128][ T8007] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  536.872113][ T8007] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  537.031727][ T6742] bridge0: port 1(bridge_slave_0) entered blocking state
[  537.039364][ T6742] bridge0: port 1(bridge_slave_0) entered forwarding state
[  537.251516][   T94] bridge0: port 2(bridge_slave_1) entered blocking state
[  537.259069][   T94] bridge0: port 2(bridge_slave_1) entered forwarding state
[  537.461015][ T5228] 8021q: adding VLAN 0 to HW filter on device eth12
[  537.915370][ T8032] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  537.939246][ T8032] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  537.984258][ T8032] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  538.023825][ T8032] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  538.045813][ T8032] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  538.078470][ T8032] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  538.115405][ T8032] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  538.152808][ T8032] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  538.337631][ T7955] 8021q: adding VLAN 0 to HW filter on device bond0
[  538.629248][ T7955] 8021q: adding VLAN 0 to HW filter on device team0
[  538.783381][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state
[  538.790959][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state
[  538.925675][   T94] bridge0: port 2(bridge_slave_1) entered blocking state
[  538.933164][   T94] bridge0: port 2(bridge_slave_1) entered forwarding state
[  538.972458][ T8007] 8021q: adding VLAN 0 to HW filter on device bond0
[  539.310545][ T8007] 8021q: adding VLAN 0 to HW filter on device team0
[  539.479234][   T94] bridge0: port 1(bridge_slave_0) entered blocking state
[  539.486805][   T94] bridge0: port 1(bridge_slave_0) entered forwarding state
[  539.720467][ T1112] bridge0: port 2(bridge_slave_1) entered blocking state
[  539.728014][ T1112] bridge0: port 2(bridge_slave_1) entered forwarding state
[  540.101014][ T8032] 8021q: adding VLAN 0 to HW filter on device bond0
[  540.327519][ T8032] 8021q: adding VLAN 0 to HW filter on device team0
[  540.497212][ T6742] bridge0: port 1(bridge_slave_0) entered blocking state
[  540.504995][ T6742] bridge0: port 1(bridge_slave_0) entered forwarding state
[  540.658789][  T140] bridge0: port 2(bridge_slave_1) entered blocking state
[  540.666398][  T140] bridge0: port 2(bridge_slave_1) entered forwarding state
[  541.950989][ T8220] loop1: detected capacity change from 0 to 2048
[  542.085125][ T8220] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found!
[  542.289278][ T8220] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  543.893468][ T7942] 8021q: adding VLAN 0 to HW filter on device batadv0
[  544.481732][   T29] audit: type=1800 audit(1778697003.686:34): pid=8222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.679" name="file1" dev="loop1" ino=1346 res=0 errno=0
[  546.516001][   T48] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  546.535219][   T48] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  546.547550][   T48] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  546.567345][   T48] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  546.600330][   T48] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  547.138362][ T5587] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  547.161623][ T5587] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  547.170842][ T5587] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  547.185979][ T5587] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  547.198865][ T5587] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  548.675597][ T5587] Bluetooth: hci1: command tx timeout
[  548.746744][ T8007] 8021q: adding VLAN 0 to HW filter on device batadv0
[  549.317530][ T5587] Bluetooth: hci4: command tx timeout
[  549.613456][ T8032] 8021q: adding VLAN 0 to HW filter on device batadv0
[  549.794318][ T8277] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  549.801892][ T8277] IPv6: NLM_F_CREATE should be set when creating new route
[  550.581861][ T8288] loop1: detected capacity change from 0 to 512
[  550.755819][ T5587] Bluetooth: hci1: command tx timeout
[  550.789317][ T8288] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  550.812287][ T8288] ext4 filesystem being mounted at /196/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  550.849172][ T8288] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #2: comm syz.1.682: corrupted inode contents
[  550.869638][ T8288] EXT4-fs error (device loop1): ext4_dirty_inode:6587: inode #2: comm syz.1.682: mark_inode_dirty error
[  550.929085][ T8288] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #2: comm syz.1.682: corrupted inode contents
[  551.094706][ T7527] bridge_slave_1: left allmulticast mode
[  551.125141][ T7527] bridge_slave_1: left promiscuous mode
[  551.146433][ T7527] bridge0: port 2(bridge_slave_1) entered disabled state
[  551.175158][ T7527] bridge_slave_0: left allmulticast mode
[  551.191699][ T8298] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #2: comm syz.1.682: corrupted inode contents
[  551.197685][ T7527] bridge_slave_0: left promiscuous mode
[  551.225860][ T7527] bridge0: port 1(bridge_slave_0) entered disabled state
[  551.260253][ T8298] EXT4-fs error (device loop1): ext4_dirty_inode:6587: inode #2: comm syz.1.682: mark_inode_dirty error
[  551.286125][ T8298] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #2: comm syz.1.682: corrupted inode contents
[  551.741685][ T5587] Bluetooth: hci4: command tx timeout
[  551.796510][ T8298] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #2: comm syz.1.682: mark_inode_dirty error
[  552.835349][ T5587] Bluetooth: hci1: command tx timeout
[  552.936057][ T8295] EXT4-fs warning (device loop1): ext4_es_cache_extent:1082: inode #2: comm syz.1.682: ES cache extent failed: add [0,1,21,0x1] conflict with existing [0,8,576460752303423487,0x18]
[  552.936057][ T8295] 
[  552.961227][ T8295] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #2: comm syz.1.682: corrupted inode contents
[  552.979921][ T8295] EXT4-fs error (device loop1): ext4_append:88: inode #2: comm syz.1.682: mark_inode_dirty error
[  553.004096][ T8295] EXT4-fs error (device loop1) in ext4_append:100: Corrupt filesystem
[  553.798503][ T5587] Bluetooth: hci4: command tx timeout
[  555.003917][ T5587] Bluetooth: hci1: command tx timeout
[  555.129682][ T7527] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  555.154558][ T7527] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  555.173460][ T7527] bond0 (unregistering): Released all slaves
[  555.445775][ T5585] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  555.509990][ T7527] hsr_slave_0: left promiscuous mode
[  555.522336][ T7527] hsr_slave_1: left promiscuous mode
[  555.535035][ T7527] batman_adv: batadv0: Removing interface: batadv_slave_0
[  555.552968][ T7527] batman_adv: batadv0: Removing interface: batadv_slave_1
[  555.880410][ T5587] Bluetooth: hci4: command tx timeout
[  556.154170][ T7527] team0 (unregistering): Port device team_slave_1 removed
[  556.201350][ T7527] team0 (unregistering): Port device team_slave_0 removed
[  556.993263][   T48] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  557.003629][   T48] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  557.021950][   T48] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  557.036830][   T48] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  557.049823][   T48] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  557.230440][ T7527] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  557.568071][ T7527] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  557.889201][ T7527] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  558.202756][ T8007] veth0_vlan: entered promiscuous mode
[  558.267313][ T7527] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  558.865521][ T8032] veth0_vlan: entered promiscuous mode
[  559.029251][ T8007] veth1_vlan: entered promiscuous mode
[  559.078536][   T48] Bluetooth: hci2: command tx timeout
[  559.581687][ T8032] veth1_vlan: entered promiscuous mode
[  559.605552][ T8239] bridge0: port 1(bridge_slave_0) entered blocking state
[  559.614140][ T8239] bridge0: port 1(bridge_slave_0) entered disabled state
[  559.623378][ T8239] bridge_slave_0: entered allmulticast mode
[  559.637780][ T8239] bridge_slave_0: entered promiscuous mode
[  559.678968][ T5228] 8021q: adding VLAN 0 to HW filter on device eth13
[  559.733031][ T8239] bridge0: port 2(bridge_slave_1) entered blocking state
[  559.754555][ T8239] bridge0: port 2(bridge_slave_1) entered disabled state
[  559.774157][ T8239] bridge_slave_1: entered allmulticast mode
[  559.790853][ T8239] bridge_slave_1: entered promiscuous mode
[  559.979141][ T8246] bridge0: port 1(bridge_slave_0) entered blocking state
[  559.987132][ T8246] bridge0: port 1(bridge_slave_0) entered disabled state
[  559.994758][ T8246] bridge_slave_0: entered allmulticast mode
[  560.003581][ T8246] bridge_slave_0: entered promiscuous mode
[  560.053220][ T8239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  560.099804][ T8246] bridge0: port 2(bridge_slave_1) entered blocking state
[  560.109160][ T8246] bridge0: port 2(bridge_slave_1) entered disabled state
[  560.119724][ T8246] bridge_slave_1: entered allmulticast mode
[  560.130286][ T8246] bridge_slave_1: entered promiscuous mode
[  560.202762][ T8239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  560.442037][ T8246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  560.551521][ T8246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  560.578967][ T8239] team0: Port device team_slave_0 added
[  560.759832][ T8239] team0: Port device team_slave_1 added
[  560.949131][ T8246] team0: Port device team_slave_0 added
[  561.155433][   T48] Bluetooth: hci2: command tx timeout
[  561.178554][ T8246] team0: Port device team_slave_1 added
[  561.350641][ T8239] batman_adv: batadv0: Adding interface: batadv_slave_0
[  561.366936][ T8239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  561.436655][ T8239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  561.635764][ T8246] batman_adv: batadv0: Adding interface: batadv_slave_0
[  561.654099][ T8246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  561.681097][ T5587] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  561.689533][ T8246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  561.690192][ T5587] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  561.715310][ T5587] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  561.732261][ T5587] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  561.743834][ T5587] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  561.801699][ T8239] batman_adv: batadv0: Adding interface: batadv_slave_1
[  561.833389][ T8239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  561.870629][ T8239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  561.940570][ T8246] batman_adv: batadv0: Adding interface: batadv_slave_1
[  561.956766][ T8246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  561.990795][ T8246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  562.171743][ T7527] veth0_to_team: left allmulticast mode
[  562.186413][ T7527] veth0_to_team: left promiscuous mode
[  562.206137][ T7527] bridge0: port 3(veth0_to_team) entered disabled state
[  562.233277][ T7527] bridge_slave_1: left allmulticast mode
[  562.265123][ T7527] bridge_slave_1: left promiscuous mode
[  562.286092][ T7527] bridge0: port 2(bridge_slave_1) entered disabled state
[  562.299724][ T7527] bridge_slave_0: left allmulticast mode
[  562.306149][ T7527] bridge_slave_0: left promiscuous mode
[  562.312661][ T7527] bridge0: port 1(bridge_slave_0) entered disabled state
[  562.337441][ T7527] bridge_slave_1: left allmulticast mode
[  562.366607][ T7527] bridge_slave_1: left promiscuous mode
[  562.390523][ T7527] bridge0: port 2(bridge_slave_1) entered disabled state
[  562.415968][ T7527] bridge_slave_0: left allmulticast mode
[  562.427298][ T7527] bridge_slave_0: left promiscuous mode
[  562.441323][ T7527] bridge0: port 1(bridge_slave_0) entered disabled state
[  563.131067][ T7527] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  563.159524][   T94] smbdirect: ib_dev[syz1] removed
[  563.196473][ T7527] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  563.220608][ T7527] bond0 (unregistering): Released all slaves
[  563.235067][ T5587] Bluetooth: hci2: command tx timeout
[  563.548018][ T7527] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  563.614959][ T7527] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  563.629436][ T7527] bond0 (unregistering): Released all slaves
[  563.795134][ T5587] Bluetooth: hci5: command tx timeout
[  564.070892][ T8239] hsr_slave_0: entered promiscuous mode
[  564.090349][ T8239] hsr_slave_1: entered promiscuous mode
[  564.492673][ T8246] hsr_slave_0: entered promiscuous mode
[  564.519079][ T8246] hsr_slave_1: entered promiscuous mode
[  564.548121][ T8246] debugfs: 'hsr0' already exists in 'hsr'
[  564.554033][ T8246] Cannot create hsr debugfs directory
[  564.600548][   T48] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  564.610362][   T48] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  564.621969][   T48] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  564.637520][   T48] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  564.650322][   T48] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  565.315174][   T48] Bluetooth: hci2: command tx timeout
[  565.612779][ T7527] hsr_slave_0: left promiscuous mode
[  565.621753][ T7527] hsr_slave_1: left promiscuous mode
[  565.631276][ T7527] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  565.641333][ T7527] batman_adv: batadv0: Removing interface: batadv_slave_0
[  565.662527][ T7527] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  565.671636][ T7527] batman_adv: batadv0: Removing interface: batadv_slave_1
[  565.704335][ T7527] hsr_slave_0: left promiscuous mode
[  565.712054][ T7527] hsr_slave_1: left promiscuous mode
[  565.719965][ T7527] batman_adv: batadv0: Removing interface: batadv_slave_0
[  565.728948][ T7527] batman_adv: batadv0: Removing interface: batadv_slave_1
[  565.754722][ T7527] veth1_macvtap: left promiscuous mode
[  565.760546][ T7527] veth0_macvtap: left promiscuous mode
[  565.768397][ T7527] veth1_vlan: left promiscuous mode
[  565.773897][ T7527] veth0_vlan: left promiscuous mode
[  565.885110][   T48] Bluetooth: hci5: command tx timeout
[  566.339215][ T7527] team0 (unregistering): Port device team_slave_1 removed
[  566.370510][ T7527] team0 (unregistering): Port device team_slave_0 removed
[  566.762057][ T7527] team0 (unregistering): Port device team_slave_1 removed
[  566.770643][   T48] Bluetooth: hci3: command tx timeout
[  566.812813][ T7527] team0 (unregistering): Port device team_slave_0 removed
[  567.871812][ T8310] bridge0: port 1(bridge_slave_0) entered blocking state
[  567.879709][ T8310] bridge0: port 1(bridge_slave_0) entered disabled state
[  567.889035][ T8310] bridge_slave_0: entered allmulticast mode
[  567.898663][ T8310] bridge_slave_0: entered promiscuous mode
[  567.955902][   T48] Bluetooth: hci5: command tx timeout
[  567.995900][ T8310] bridge0: port 2(bridge_slave_1) entered blocking state
[  568.004082][ T8310] bridge0: port 2(bridge_slave_1) entered disabled state
[  568.016715][ T8310] bridge_slave_1: entered allmulticast mode
[  568.029912][ T8310] bridge_slave_1: entered promiscuous mode
[  568.297075][ T8310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  568.427490][ T8310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  568.663893][ T8310] team0: Port device team_slave_0 added
[  568.741267][ T8310] team0: Port device team_slave_1 added
[  568.835555][   T48] Bluetooth: hci3: command tx timeout
[  569.002967][ T8310] batman_adv: batadv0: Adding interface: batadv_slave_0
[  569.011449][ T8310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  569.043985][ T8310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  569.205175][ T8310] batman_adv: batadv0: Adding interface: batadv_slave_1
[  569.221634][ T8310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  569.264378][ T8310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  569.761616][ T8310] hsr_slave_0: entered promiscuous mode
[  569.773156][ T8310] hsr_slave_1: entered promiscuous mode
[  569.781804][ T8310] debugfs: 'hsr0' already exists in 'hsr'
[  569.791188][ T8310] Cannot create hsr debugfs directory
[  570.039222][   T48] Bluetooth: hci5: command tx timeout
[  570.854277][ T8246] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  570.874255][ T8246] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  570.885739][ T8246] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  570.906956][ T8246] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  570.915336][   T48] Bluetooth: hci3: command tx timeout
[  570.922592][ T8365] bridge0: port 1(bridge_slave_0) entered blocking state
[  570.937711][ T8365] bridge0: port 1(bridge_slave_0) entered disabled state
[  570.945941][ T8365] bridge_slave_0: entered allmulticast mode
[  570.955642][ T8365] bridge_slave_0: entered promiscuous mode
[  570.974314][ T8246] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  570.998851][ T8246] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  571.011479][ T8246] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  571.030562][ T8246] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  571.043413][ T8365] bridge0: port 2(bridge_slave_1) entered blocking state
[  571.052550][ T8365] bridge0: port 2(bridge_slave_1) entered disabled state
[  571.060934][ T8365] bridge_slave_1: entered allmulticast mode
[  571.071055][ T8365] bridge_slave_1: entered promiscuous mode
[  571.344747][ T8394] bridge0: port 1(bridge_slave_0) entered blocking state
[  571.352751][ T8394] bridge0: port 1(bridge_slave_0) entered disabled state
[  571.361576][ T8394] bridge_slave_0: entered allmulticast mode
[  571.376936][ T8394] bridge_slave_0: entered promiscuous mode
[  571.421338][ T8365] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  571.449029][ T8365] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  571.492076][ T8394] bridge0: port 2(bridge_slave_1) entered blocking state
[  571.507697][ T8394] bridge0: port 2(bridge_slave_1) entered disabled state
[  571.517456][ T8394] bridge_slave_1: entered allmulticast mode
[  571.532404][ T8394] bridge_slave_1: entered promiscuous mode
[  571.901901][ T8365] team0: Port device team_slave_0 added
[  571.964481][ T8394] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  572.003866][ T8365] team0: Port device team_slave_1 added
[  572.141318][ T8394] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  572.240061][ T8239] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  572.264666][ T8239] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  572.274151][ T7527] bridge_slave_1: left allmulticast mode
[  572.285561][ T7527] bridge_slave_1: left promiscuous mode
[  572.292250][ T7527] bridge0: port 2(bridge_slave_1) entered disabled state
[  572.309268][ T7527] bridge_slave_0: left allmulticast mode
[  572.315914][ T7527] bridge_slave_0: left promiscuous mode
[  572.322435][ T7527] bridge0: port 1(bridge_slave_0) entered disabled state
[  572.341857][ T7527] bridge_slave_1: left allmulticast mode
[  572.357232][ T7527] bridge_slave_1: left promiscuous mode
[  572.363731][ T7527] bridge0: port 2(bridge_slave_1) entered disabled state
[  572.381190][ T7527] bridge_slave_0: left allmulticast mode
[  572.399172][ T7527] bridge_slave_0: left promiscuous mode
[  572.408658][ T7527] bridge0: port 1(bridge_slave_0) entered disabled state
[  572.617866][ T1308] ieee802154 phy0 wpan0: encryption failed: -22
[  572.624534][ T1308] ieee802154 phy1 wpan1: encryption failed: -22
[  572.807406][ T7527] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  572.823806][ T7527] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  572.842752][ T7527] bond0 (unregistering): Released all slaves
[  572.995456][   T48] Bluetooth: hci3: command tx timeout
[  573.003293][ T7527] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  573.018666][ T7527] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  573.032143][ T7527] bond0 (unregistering): Released all slaves
[  573.083074][ T8365] batman_adv: batadv0: Adding interface: batadv_slave_0
[  573.091777][ T8365] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  573.119742][ T8365] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  573.151083][ T8239] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  573.183184][ T8239] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  573.197934][ T5228] 8021q: adding VLAN 0 to HW filter on device eth15
[  573.240734][ T8394] team0: Port device team_slave_0 added
[  573.248927][ T8365] batman_adv: batadv0: Adding interface: batadv_slave_1
[  573.258762][ T8365] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  573.286172][ T8365] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  573.303777][ T8239] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  573.324446][ T8239] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  573.359728][ T8394] team0: Port device team_slave_1 added
[  573.384520][ T8239] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  573.404282][ T8239] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  573.442736][ T7527] hsr_slave_0: left promiscuous mode
[  573.452247][ T7527] hsr_slave_1: left promiscuous mode
[  573.463418][ T7527] batman_adv: batadv0: Removing interface: batadv_slave_0
[  573.473238][ T7527] batman_adv: batadv0: Removing interface: batadv_slave_1
[  573.511268][ T7527] hsr_slave_0: left promiscuous mode
[  573.519101][ T7527] hsr_slave_1: left promiscuous mode
[  573.528288][ T7527] batman_adv: batadv0: Removing interface: batadv_slave_0
[  573.547659][ T7527] batman_adv: batadv0: Removing interface: batadv_slave_1
[  573.576474][ T7527] veth1_vlan: left promiscuous mode
[  573.581903][ T7527] veth0_vlan: left promiscuous mode
[  573.589334][ T7527] veth1_vlan: left promiscuous mode
[  573.597767][ T7527] veth0_vlan: left promiscuous mode
[  574.241592][ T7527] team0 (unregistering): Port device team_slave_1 removed
[  574.268446][ T7527] team0 (unregistering): Port device team_slave_0 removed
[  574.698550][ T7527] team0 (unregistering): Port device team_slave_1 removed
[  574.741478][ T7527] team0 (unregistering): Port device team_slave_0 removed
[  575.237981][ T8394] batman_adv: batadv0: Adding interface: batadv_slave_0
[  575.253834][ T8394] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  575.284148][ T8394] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  575.306909][ T8394] batman_adv: batadv0: Adding interface: batadv_slave_1
[  575.314238][ T8394] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  575.356886][ T8394] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  575.596076][ T8365] hsr_slave_0: entered promiscuous mode
[  575.606238][ T8365] hsr_slave_1: entered promiscuous mode
[  575.614634][ T8365] debugfs: 'hsr0' already exists in 'hsr'
[  575.621677][ T8365] Cannot create hsr debugfs directory
[  575.803064][ T8310] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  575.830643][ T8310] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  575.948334][ T8310] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  575.983290][ T8310] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  576.063505][ T8394] hsr_slave_0: entered promiscuous mode
[  576.074580][ T8394] hsr_slave_1: entered promiscuous mode
[  576.083516][ T8394] debugfs: 'hsr0' already exists in 'hsr'
[  576.098996][ T8394] Cannot create hsr debugfs directory
[  576.118089][ T8310] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  576.149405][ T8310] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  576.272292][ T8310] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  576.312165][ T8310] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  577.569983][ T8246] 8021q: adding VLAN 0 to HW filter on device bond0
[  577.910495][ T8246] 8021q: adding VLAN 0 to HW filter on device team0
[  578.009295][ T8239] 8021q: adding VLAN 0 to HW filter on device bond0
[  578.043671][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  578.051242][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  578.191012][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state
[  578.198600][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state
[  578.383968][ T8239] 8021q: adding VLAN 0 to HW filter on device team0
[  578.458650][ T8310] 8021q: adding VLAN 0 to HW filter on device bond0
[  578.557346][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  578.564997][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  578.685730][   T94] bridge0: port 2(bridge_slave_1) entered blocking state
[  578.693236][   T94] bridge0: port 2(bridge_slave_1) entered forwarding state
[  578.884694][ T8310] 8021q: adding VLAN 0 to HW filter on device team0
[  578.921946][ T8365] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  578.955613][ T8365] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  578.971459][ T8365] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  579.008873][ T8365] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  579.019686][ T8365] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  579.063963][ T8365] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  579.104200][ T8246] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  579.169930][ T8365] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  579.194569][ T8365] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  579.302367][ T1168] bridge0: port 1(bridge_slave_0) entered blocking state
[  579.309921][ T1168] bridge0: port 1(bridge_slave_0) entered forwarding state
[  579.483889][ T1168] bridge0: port 2(bridge_slave_1) entered blocking state
[  579.491507][ T1168] bridge0: port 2(bridge_slave_1) entered forwarding state
[  579.820070][ T8394] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  579.859129][ T8394] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  579.894190][ T8394] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  579.942498][ T8394] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  580.007270][ T8394] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  580.056630][ T8394] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  580.111170][ T8394] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  580.144048][ T8394] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  581.227248][ T8365] 8021q: adding VLAN 0 to HW filter on device bond0
[  581.527897][ T8365] 8021q: adding VLAN 0 to HW filter on device team0
[  581.681427][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  581.689081][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  581.851766][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state
[  581.859336][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state
[  581.993819][ T8394] 8021q: adding VLAN 0 to HW filter on device bond0
[  582.339460][ T8246] 8021q: adding VLAN 0 to HW filter on device batadv0
[  582.450211][ T8394] 8021q: adding VLAN 0 to HW filter on device team0
[  582.634211][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  582.641752][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  582.830092][ T7297] bridge0: port 2(bridge_slave_1) entered blocking state
[  582.837637][ T7297] bridge0: port 2(bridge_slave_1) entered forwarding state
[  583.106741][ T8239] 8021q: adding VLAN 0 to HW filter on device batadv0
[  584.725833][ T8310] 8021q: adding VLAN 0 to HW filter on device batadv0
[  585.379587][ T8246] veth0_vlan: entered promiscuous mode
[  585.571616][ T8246] veth1_vlan: entered promiscuous mode
[  586.220477][ T8239] veth0_vlan: entered promiscuous mode
[  586.387528][ T8246] veth0_macvtap: entered promiscuous mode
[  586.482540][ T8239] veth1_vlan: entered promiscuous mode
[  586.519822][ T8246] veth1_macvtap: entered promiscuous mode
[  586.751574][ T8365] 8021q: adding VLAN 0 to HW filter on device batadv0
[  586.933791][ T8246] batman_adv: batadv0: Interface activated: batadv_slave_0
[  587.090126][ T8246] batman_adv: batadv0: Interface activated: batadv_slave_1
[  587.223303][ T8394] 8021q: adding VLAN 0 to HW filter on device batadv0
[  587.271847][ T8239] veth0_macvtap: entered promiscuous mode
[  587.348022][ T1142] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  587.375277][ T1142] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  587.430406][ T1142] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  587.449633][ T1142] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  587.549834][ T8239] veth1_macvtap: entered promiscuous mode
[  587.871572][ T8310] veth0_vlan: entered promiscuous mode
[  587.941238][ T8239] batman_adv: batadv0: Interface activated: batadv_slave_0
[  588.100833][ T8239] batman_adv: batadv0: Interface activated: batadv_slave_1
[  588.180416][ T8310] veth1_vlan: entered promiscuous mode
[  588.313838][   T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  588.346768][   T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  588.472167][   T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  588.509977][   T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  589.052826][ T8310] veth0_macvtap: entered promiscuous mode
[  589.196870][ T8310] veth1_macvtap: entered promiscuous mode
[  589.412806][ T8365] veth0_vlan: entered promiscuous mode
[  589.619628][ T8310] batman_adv: batadv0: Interface activated: batadv_slave_0
[  589.749361][ T8365] veth1_vlan: entered promiscuous mode
[  589.820066][ T8310] batman_adv: batadv0: Interface activated: batadv_slave_1
[  589.866326][ T8394] veth0_vlan: entered promiscuous mode
[  589.964352][   T34] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  589.986197][   T34] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  590.028057][ T1142] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  590.058716][ T1142] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  590.160212][ T8394] veth1_vlan: entered promiscuous mode
[  590.504043][ T8365] veth0_macvtap: entered promiscuous mode
[  590.642396][ T8365] veth1_macvtap: entered promiscuous mode
[  590.879952][ T8394] veth0_macvtap: entered promiscuous mode
[  590.987786][ T8394] veth1_macvtap: entered promiscuous mode
[  591.081318][ T8365] batman_adv: batadv0: Interface activated: batadv_slave_0
[  591.216236][ T8365] batman_adv: batadv0: Interface activated: batadv_slave_1
[  591.358698][ T1168] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  591.401347][ T1168] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  591.451296][ T8394] batman_adv: batadv0: Interface activated: batadv_slave_0
[  591.481224][ T1168] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  591.509647][ T1168] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  591.690415][ T8394] batman_adv: batadv0: Interface activated: batadv_slave_1
[  591.922608][   T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  591.953840][   T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  592.003259][ T1145] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  592.050960][ T1145] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  593.576245][ T1112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  593.638329][ T1112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  593.847077][ T7297] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  593.894576][ T7297] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  594.165252][ T1112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  594.219221][ T1112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  594.584033][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  594.630022][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  596.810243][ T8718] loop8: detected capacity change from 0 to 2048
[  596.885887][ T8718] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=3932051, location=3932051
[  597.028354][ T8718] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  597.121063][  T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  597.163187][  T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  597.544512][  T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  597.604005][  T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  602.967741][ T8744] loop7: detected capacity change from 0 to 1024
[  603.846289][   T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  603.895037][   T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  612.746004][  T140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  612.793068][  T140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  613.215245][  T140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  613.283877][  T140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  614.857691][ T7527] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  614.950944][ T7527] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  618.669715][ T8793] loop7: detected capacity change from 0 to 128
[  631.676407][ T5680] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  632.996785][ T8818] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  633.165857][ T8821] netlink: 14 bytes leftover after parsing attributes in process `syz.8.706'.
[  633.275993][ T8818] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  633.662228][ T8818] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  633.969116][ T8821] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  634.058189][ T1308] ieee802154 phy0 wpan0: encryption failed: -22
[  634.067341][ T1308] ieee802154 phy1 wpan1: encryption failed: -22
[  634.865360][ T8821] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  635.168807][ T8818] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  635.231700][ T8821] bond0 (unregistering): Released all slaves
[  638.963039][ T5680] syz1: Port: 1 Link DOWN
[  639.371838][   T13] smbdirect: ib_dev[syz1] removed
[  641.117607][ T5195] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  641.313011][ T5195] usb 10-1: device descriptor read/64, error -71
[  643.391598][ T5195] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  643.545065][ T5195] usb 10-1: device descriptor read/64, error -71
[  643.708736][ T5195] usb usb10-port1: attempt power cycle
[  643.967824][ T5587] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  643.978115][ T5587] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  643.990571][ T5587] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  644.022611][ T5587] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  644.050783][ T5587] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  644.167170][ T5195] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  644.344599][ T5195] usb 10-1: device descriptor read/8, error -71
[  646.115214][ T5587] Bluetooth: hci0: command tx timeout
[  648.205037][ T5587] Bluetooth: hci0: command tx timeout
[  649.207499][ T5673] usb 6-1: new full-speed USB device number 2 using dummy_hcd
[  649.301690][ T8902] loop9: detected capacity change from 0 to 1024
[  649.410334][ T8902] hfsplus: failed to load extents file
[  649.471258][ T5673] usb 6-1: config 0 has an invalid interface number: 133 but max is 0
[  649.549707][ T5673] usb 6-1: config 0 has no interface number 0
[  649.670688][ T5673] usb 6-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d
[  649.751976][ T5673] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  649.795599][ T5587] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  649.804563][ T5587] Bluetooth: hci2: Injecting HCI hardware error event
[  649.812332][   T48] Bluetooth: hci2: hardware error 0x00
[  649.823817][ T5673] usb 6-1: Product: syz
[  649.900881][ T5673] usb 6-1: Manufacturer: syz
[  649.902043][ T1168] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  649.958679][ T5673] usb 6-1: SerialNumber: syz
[  650.084189][ T5673] usb 6-1: config 0 descriptor??
[  650.276880][ T5587] Bluetooth: hci0: command tx timeout
[  650.321554][ T1168] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  650.521229][ T5673] keyspan 6-1:0.133: Keyspan 1 port adapter converter detected
[  650.639937][ T5673] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 81
[  650.722720][ T5673] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 1
[  650.794387][ T5673] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 2
[  650.797150][ T1168] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  650.913382][ T5673] usb 6-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[  651.035927][ T8912] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  651.052089][ T8912] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  651.073879][ T8912] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  651.118915][ T8912] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  651.127178][ T5673] usb 6-1: USB disconnect, device number 2
[  651.145880][ T8912] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  651.349165][ T5673] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[  651.395314][ T8305] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[  651.455950][ T5673] keyspan 6-1:0.133: device disconnected
[  651.579709][ T8305] usb 10-1: device descriptor read/64, error -71
[  651.739683][ T1168] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  651.922329][ T8305] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[  652.115077][   T48] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  652.129334][ T8305] usb 10-1: device descriptor read/64, error -71
[  652.265879][ T8305] usb usb10-port1: attempt power cycle
[  652.356825][   T48] Bluetooth: hci0: command tx timeout
[  652.663041][ T8305] usb 10-1: new high-speed USB device number 8 using dummy_hcd
[  652.717111][ T8305] usb 10-1: device descriptor read/8, error -71
[  653.004330][ T8305] usb 10-1: new high-speed USB device number 9 using dummy_hcd
[  653.060961][ T8305] usb 10-1: device descriptor read/8, error -71
[  653.212873][ T8305] usb usb10-port1: unable to enumerate USB device
[  653.238545][ T8912] Bluetooth: hci1: command tx timeout
[  653.430723][ T1168] bridge_slave_1: left allmulticast mode
[  653.464004][ T1168] bridge_slave_1: left promiscuous mode
[  653.511631][ T1168] bridge0: port 2(bridge_slave_1) entered disabled state
[  653.587255][ T1168] bridge_slave_0: left allmulticast mode
[  653.628321][ T1168] bridge_slave_0: left promiscuous mode
[  653.655547][ T1168] bridge0: port 1(bridge_slave_0) entered disabled state
[  654.101288][ T8940] loop5: detected capacity change from 0 to 512
[  654.174195][ T8940] EXT4-fs (loop5): Test dummy encryption mode enabled
[  654.226992][ T8940] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  654.313593][ T8940] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.735: bad orphan inode 131083
[  654.431662][ T8940] loop5: lost filesystem error report for type 5 error -117
[  654.436320][    C1] EXT4-fs (loop5): error count since last fsck: 1
[  654.450597][    C1] EXT4-fs (loop5): initial error at time 1778697113: ext4_orphan_get:1423
[  654.459516][    C1] EXT4-fs (loop5): last error at time 1778697113: ext4_orphan_get:1423
[  654.565872][ T8940] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  655.317357][   T48] Bluetooth: hci1: command tx timeout
[  655.687907][ T8305] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  655.738834][ T8940] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-lib)))"
[  655.818344][ T5228] 8021q: adding VLAN 0 to HW filter on device eth17
[  655.955097][ T8305] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  655.993669][ T8305] usb 8-1: config 0 has no interfaces?
[  656.018044][ T8305] usb 8-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00
[  656.063639][ T8305] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  656.165155][ T8940] fscrypt (loop5): Error allocating 'xts(aes)' transform: -4
[  656.174072][ T8305] usb 8-1: config 0 descriptor??
[  656.239013][ T8959] fscrypt (loop5): Missing crypto API support for AES-256-XTS (API name: "xts(aes)")
[  656.973425][    T9] usb 8-1: USB disconnect, device number 2
[  657.018078][ T8365] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  657.211795][ T8973] bridge0: port 2(bridge_slave_1) entered disabled state
[  657.221382][ T8973] bridge0: port 1(bridge_slave_0) entered disabled state
[  657.395302][   T48] Bluetooth: hci1: command tx timeout
[  657.421237][ T8973] bridge0: entered promiscuous mode
[  657.571190][ T8973] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  657.927772][ T1168] hsr_slave_0: left promiscuous mode
[  657.990961][ T1168] hsr_slave_1: left promiscuous mode
[  658.037242][ T1168] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  658.065614][ T1168] batman_adv: batadv0: Removing interface: batadv_slave_0
[  658.126545][ T1168] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  658.171242][ T1168] batman_adv: batadv0: Removing interface: batadv_slave_1
[  658.314356][ T1168] veth1_macvtap: left promiscuous mode
[  658.342408][ T1168] veth0_macvtap: left promiscuous mode
[  658.377040][ T1168] veth1_vlan: left promiscuous mode
[  658.411940][ T8983] loop9: detected capacity change from 0 to 764
[  658.413756][ T1168] veth0_vlan: left promiscuous mode
[  659.477217][   T48] Bluetooth: hci1: command tx timeout
[  660.042714][ T8305] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  660.218534][ T8305] usb 8-1: device descriptor read/64, error -71
[  660.891625][ T8305] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  661.076917][ T8305] usb 8-1: device descriptor read/64, error -71
[  661.383694][ T8305] usb usb8-port1: attempt power cycle
[  661.568602][ T1168] team0 (unregistering): Port device team_slave_1 removed
[  661.684529][ T1168] team0 (unregistering): Port device team_slave_0 removed
[  661.797425][ T8305] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  661.838547][ T8305] usb 8-1: device descriptor read/8, error -71
[  662.107219][ T8305] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  662.163077][ T8305] usb 8-1: device descriptor read/8, error -71
[  662.296963][ T8305] usb usb8-port1: unable to enumerate USB device
[  662.409444][ T5228] 8021q: adding VLAN 0 to HW filter on device eth18
[  663.878114][ T1168] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  664.068776][   T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  664.334076][   T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  664.337447][ T1168] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  664.411422][   T10] usb 6-1: config 0 has no interfaces?
[  664.444331][   T10] usb 6-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00
[  664.493163][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  664.581470][   T10] usb 6-1: config 0 descriptor??
[  664.950872][ T8865] bridge0: port 1(bridge_slave_0) entered blocking state
[  664.981658][ T8305] usb 6-1: USB disconnect, device number 3
[  665.009293][ T8865] bridge0: port 1(bridge_slave_0) entered disabled state
[  665.066871][ T8865] bridge_slave_0: entered allmulticast mode
[  665.119371][ T8865] bridge_slave_0: entered promiscuous mode
[  665.289768][ T1168] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  665.388679][ T8865] bridge0: port 2(bridge_slave_1) entered blocking state
[  665.457724][ T8865] bridge0: port 2(bridge_slave_1) entered disabled state
[  665.496991][ T8865] bridge_slave_1: entered allmulticast mode
[  665.541860][ T8865] bridge_slave_1: entered promiscuous mode
[  668.500923][ T1168] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  668.659181][ T8865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  668.796906][ T8865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  669.349578][ T8865] team0: Port device team_slave_0 added
[  669.461745][ T8865] team0: Port device team_slave_1 added
[  669.597622][ T5673] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  669.912914][ T5673] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  669.958646][ T5673] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  669.990513][ T5673] usb 8-1: Product: syz
[  670.007631][ T5673] usb 8-1: Manufacturer: syz
[  670.031479][ T5673] usb 8-1: SerialNumber: syz
[  670.149984][ T5228] 8021q: adding VLAN 0 to HW filter on device eth19
[  670.207808][ T8865] batman_adv: batadv0: Adding interface: batadv_slave_0
[  670.216704][ T5673] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  670.281592][ T8865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  670.458469][   T10] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  670.461167][ T8865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  671.030213][ T8305] usb 10-1: new high-speed USB device number 10 using dummy_hcd
[  671.041261][ T9060] loop5: detected capacity change from 0 to 1024
[  671.145863][ T8865] batman_adv: batadv0: Adding interface: batadv_slave_1
[  671.202137][ T8865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  671.242546][ T8305] usb 10-1: Using ep0 maxpacket: 8
[  671.298684][ T8305] usb 10-1: no configurations
[  671.336652][ T8305] usb 10-1: can't read configurations, error -22
[  671.399237][ T8865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  671.515423][ T8305] usb 10-1: new high-speed USB device number 11 using dummy_hcd
[  671.613431][ T8192] usb 8-1: USB disconnect, device number 7
[  671.735120][ T8305] usb 10-1: Using ep0 maxpacket: 8
[  671.751916][ T8305] usb 10-1: no configurations
[  671.760629][ T8305] usb 10-1: can't read configurations, error -22
[  671.800522][   T10] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive
[  671.809361][ T8305] usb usb10-port1: attempt power cycle
[  671.878654][   T10] ath9k_htc: Failed to initialize the device
[  671.938621][ T8192] usb 8-1: ath9k_htc: USB layer deinitialized
[  671.960041][ T8912] Bluetooth: hci4: command 0x0406 tx timeout
[  672.117814][ T1168] bridge_slave_1: left allmulticast mode
[  672.141380][ T1168] bridge_slave_1: left promiscuous mode
[  672.161697][ T1168] bridge0: port 2(bridge_slave_1) entered disabled state
[  672.192641][ T8305] usb 10-1: new high-speed USB device number 12 using dummy_hcd
[  672.236668][ T1168] bridge_slave_0: left allmulticast mode
[  672.266700][ T1168] bridge_slave_0: left promiscuous mode
[  672.274544][ T8305] usb 10-1: Using ep0 maxpacket: 8
[  672.289093][ T1168] bridge0: port 1(bridge_slave_0) entered disabled state
[  672.312921][ T8305] usb 10-1: no configurations
[  672.321748][ T8305] usb 10-1: can't read configurations, error -22
[  672.496233][ T8305] usb 10-1: new high-speed USB device number 13 using dummy_hcd
[  672.569788][ T8305] usb 10-1: Using ep0 maxpacket: 8
[  672.600481][ T8305] usb 10-1: no configurations
[  672.626631][ T8305] usb 10-1: can't read configurations, error -22
[  672.658123][ T8305] usb usb10-port1: unable to enumerate USB device
[  673.449476][ T8305] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  673.656985][ T8305] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  673.686691][ T8305] usb 6-1: config 0 has no interfaces?
[  673.707768][ T8305] usb 6-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00
[  673.735106][ T8305] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  673.768483][ T1168] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  673.810859][ T8305] usb 6-1: config 0 descriptor??
[  673.918044][ T1168] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  673.983285][ T1168] bond0 (unregistering): Released all slaves
[  674.091490][ T8910] bridge0: port 1(bridge_slave_0) entered blocking state
[  674.145206][ T8910] bridge0: port 1(bridge_slave_0) entered disabled state
[  674.183890][ T8910] bridge_slave_0: entered allmulticast mode
[  675.933167][ T8910] bridge_slave_0: entered promiscuous mode
[  675.958922][   T40] usb 6-1: USB disconnect, device number 4
[  676.227803][ T8910] bridge0: port 2(bridge_slave_1) entered blocking state
[  676.259341][ T8910] bridge0: port 2(bridge_slave_1) entered disabled state
[  676.300283][ T8910] bridge_slave_1: entered allmulticast mode
[  676.361257][ T8910] bridge_slave_1: entered promiscuous mode
[  677.051134][ T9093] binder_alloc: 9092: binder_alloc_buf, no vma
[  677.054697][ T8865] hsr_slave_0: entered promiscuous mode
[  677.096235][ T8865] hsr_slave_1: entered promiscuous mode
[  677.153025][ T5228] 8021q: adding VLAN 0 to HW filter on device eth20
[  677.249006][ T8910] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  677.559976][ T9095] loop7: detected capacity change from 0 to 2048
[  677.658320][ T8910] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  677.871191][ T9095] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  678.101938][ T9095] EXT4-fs error (device loop7): ext4_ext_precache:631: inode #2: comm syz.7.767: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5)
[  678.589673][ T1168] hsr_slave_0: left promiscuous mode
[  678.625320][ T1168] hsr_slave_1: left promiscuous mode
[  678.651304][ T1168] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  678.682015][ T8246] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  678.696938][ T1168] batman_adv: batadv0: Removing interface: batadv_slave_0
[  678.722981][ T1168] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  678.733258][ T1168] batman_adv: batadv0: Removing interface: batadv_slave_1
[  678.745715][   T10] usb 10-1: new high-speed USB device number 14 using dummy_hcd
[  678.842174][ T1168] veth1_macvtap: left promiscuous mode
[  678.859836][ T1168] veth0_macvtap: left promiscuous mode
[  678.871605][ T1168] veth1_vlan: left promiscuous mode
[  678.899301][ T1168] veth0_vlan: left promiscuous mode
[  678.935396][   T10] usb 10-1: Using ep0 maxpacket: 8
[  678.953357][   T10] usb 10-1: no configurations
[  678.967577][   T10] usb 10-1: can't read configurations, error -22
[  679.028325][ T8305] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  679.141495][   T10] usb 10-1: new high-speed USB device number 15 using dummy_hcd
[  679.247597][ T8305] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  679.283755][ T8305] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  679.311353][ T8305] usb 6-1: Product: syz
[  679.325855][ T8305] usb 6-1: Manufacturer: syz
[  679.328107][   T10] usb 10-1: Using ep0 maxpacket: 8
[  679.333040][ T8305] usb 6-1: SerialNumber: syz
[  679.372143][   T10] usb 10-1: no configurations
[  679.399417][ T8305] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  679.437771][   T10] usb 10-1: can't read configurations, error -22
[  679.465865][   T10] usb usb10-port1: attempt power cycle
[  679.474210][   T40] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  679.821952][ T9116] loop7: detected capacity change from 0 to 1024
[  679.854559][   T10] usb 10-1: new high-speed USB device number 16 using dummy_hcd
[  679.901891][   T10] usb 10-1: Using ep0 maxpacket: 8
[  679.937465][   T10] usb 10-1: no configurations
[  679.967364][   T10] usb 10-1: can't read configurations, error -22
[  680.137711][   T10] usb 10-1: new high-speed USB device number 17 using dummy_hcd
[  680.202767][   T10] usb 10-1: Using ep0 maxpacket: 8
[  680.236758][   T10] usb 10-1: no configurations
[  680.253628][   T10] usb 10-1: can't read configurations, error -22
[  680.308918][   T10] usb usb10-port1: unable to enumerate USB device
[  680.450359][   T10] usb 6-1: USB disconnect, device number 5
[  681.238764][   T40] usb 6-1: Service connection timeout for: 257
[  681.257335][   T40] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services
[  681.269658][   T40] ath9k_htc: Failed to initialize the device
[  681.279245][   T10] usb 6-1: ath9k_htc: USB layer deinitialized
[  681.287038][ T1168] team0 (unregistering): Port device team_slave_1 removed
[  681.418798][ T1168] team0 (unregistering): Port device team_slave_0 removed
[  687.670926][   T48] Bluetooth: hci5: command 0x0406 tx timeout
[  690.648584][ T8910] team0: Port device team_slave_0 added
[  690.811135][ T8910] team0: Port device team_slave_1 added
[  691.297934][ T8910] batman_adv: batadv0: Adding interface: batadv_slave_0
[  691.308049][ T8910] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  691.373774][ T8910] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  691.513058][ T8910] batman_adv: batadv0: Adding interface: batadv_slave_1
[  691.548936][ T8910] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  695.629566][ T1308] ieee802154 phy0 wpan0: encryption failed: -22
[  695.640786][ T1308] ieee802154 phy1 wpan1: encryption failed: -22
[  696.685607][ T8910] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  700.785030][   T40] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  700.944049][ T8910] hsr_slave_0: entered promiscuous mode
[  700.975092][   T10] usb 10-1: new high-speed USB device number 18 using dummy_hcd
[  701.036641][ T8910] hsr_slave_1: entered promiscuous mode
[  701.070461][   T40] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  701.073285][ T8910] debugfs: 'hsr0' already exists in 'hsr'
[  701.079960][ T8910] Cannot create hsr debugfs directory
[  701.207432][   T40] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  701.235187][   T10] usb 10-1: Using ep0 maxpacket: 8
[  701.253181][   T40] usb 6-1: Product: syz
[  701.283677][   T10] usb 10-1: no configurations
[  701.285212][   T40] usb 6-1: Manufacturer: syz
[  701.327939][   T10] usb 10-1: can't read configurations, error -22
[  701.375029][   T40] usb 6-1: SerialNumber: syz
[  701.463167][   T40] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  701.515435][   T10] usb 10-1: new high-speed USB device number 19 using dummy_hcd
[  701.622285][ T8192] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  701.741700][   T10] usb 10-1: Using ep0 maxpacket: 8
[  701.784470][   T10] usb 10-1: no configurations
[  701.831210][   T10] usb 10-1: can't read configurations, error -22
[  701.892663][   T10] usb usb10-port1: attempt power cycle
[  702.265488][   T48] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  702.280834][   T48] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  702.306515][   T48] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  702.336821][   T48] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  702.364056][   T10] usb 10-1: new high-speed USB device number 20 using dummy_hcd
[  702.365932][   T48] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  702.481635][   T10] usb 10-1: Using ep0 maxpacket: 8
[  702.542733][   T10] usb 10-1: no configurations
[  702.579998][   T10] usb 10-1: can't read configurations, error -22
[  702.642884][   T40] usb 6-1: USB disconnect, device number 6
[  702.875083][   T10] usb 10-1: new high-speed USB device number 21 using dummy_hcd
[  702.930943][   T10] usb 10-1: Using ep0 maxpacket: 8
[  702.957463][   T10] usb 10-1: no configurations
[  702.999383][   T10] usb 10-1: can't read configurations, error -22
[  703.046958][   T10] usb usb10-port1: unable to enumerate USB device
[  703.075300][ T8912] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  703.086117][ T8912] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  703.096709][ T8912] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  703.123913][ T8912] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  703.143785][ T8912] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  703.396414][ T8192] usb 6-1: Service connection timeout for: 257
[  703.445071][ T8192] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services
[  703.496546][ T8192] ath9k_htc: Failed to initialize the device
[  703.554164][   T40] usb 6-1: ath9k_htc: USB layer deinitialized
[  703.860839][ T8910] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  704.180706][ T9165] netlink: 136 bytes leftover after parsing attributes in process `syz.5.785'.
[  704.296850][ T8910] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  704.516773][   T48] Bluetooth: hci3: command tx timeout
[  704.554343][ T8910] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  704.777677][ T8910] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  704.785104][ T8192] usb 10-1: new high-speed USB device number 22 using dummy_hcd
[  705.034063][ T8192] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  705.115437][ T8192] usb 10-1: config 0 has no interfaces?
[  705.166286][ T8192] usb 10-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00
[  708.790944][   T48] Bluetooth: hci6: command tx timeout
[  708.796758][ T8912] Bluetooth: hci3: command tx timeout
[  708.833399][ T8192] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  710.856513][ T8912] Bluetooth: hci3: command tx timeout
[  710.862523][   T48] Bluetooth: hci6: command tx timeout
[  710.935462][ T8192] usb 10-1: config 0 descriptor??
[  712.954921][   T48] Bluetooth: hci6: command tx timeout
[  712.963955][ T8912] Bluetooth: hci3: command tx timeout
[  714.751348][ T8192] usb 10-1: can't set config #0, error -71
[  714.867592][ T8192] usb 10-1: USB disconnect, device number 22
[  714.995058][ T8912] Bluetooth: hci6: command tx timeout
[  715.492594][   T34] bridge_slave_1: left allmulticast mode
[  715.549457][   T34] bridge_slave_1: left promiscuous mode
[  715.602081][   T34] bridge0: port 2(bridge_slave_1) entered disabled state
[  715.684235][   T34] bridge_slave_0: left allmulticast mode
[  715.740953][   T34] bridge_slave_0: left promiscuous mode
[  715.793121][   T34] bridge0: port 1(bridge_slave_0) entered disabled state
[  716.485433][   T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  716.565451][   T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  716.616880][   T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  716.626624][   T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  716.650617][   T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  716.673358][   T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  716.685506][   T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  716.773098][   T34] bond0 (unregistering): Released all slaves
[  717.385275][   T34] hsr_slave_0: left promiscuous mode
[  717.390993][ T5673] usb 10-1: new high-speed USB device number 23 using dummy_hcd
[  717.457233][   T34] hsr_slave_1: left promiscuous mode
[  717.521346][   T34] batman_adv: batadv0: Removing interface: batadv_slave_0
[  717.591428][   T40] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  717.635460][   T34] batman_adv: batadv0: Removing interface: batadv_slave_1
[  717.692668][ T5673] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  717.736580][ T5673] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  717.779123][   T40] usb 6-1: Using ep0 maxpacket: 8
[  717.795307][ T5673] usb 10-1: Product: syz
[  717.812647][   T40] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  717.864108][   T40] usb 6-1: config 0 has no interfaces?
[  717.872028][ T5673] usb 10-1: Manufacturer: syz
[  717.901266][ T5673] usb 10-1: SerialNumber: syz
[  717.901878][   T40] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  717.957511][   T40] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  718.058055][   T40] usb 6-1: config 0 descriptor??
[  718.074239][ T5673] usb 10-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  718.196117][   T10] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  718.756206][   T48] Bluetooth: hci0: command tx timeout
[  719.112843][   T40] usb 10-1: USB disconnect, device number 23
[  719.296583][   T34] team0 (unregistering): Port device team_slave_1 removed
[  719.392978][   T34] team0 (unregistering): Port device team_slave_0 removed
[  719.971589][   T10] usb 10-1: Service connection timeout for: 257
[  719.998079][   T10] ath9k_htc 10-1:1.0: ath9k_htc: Unable to initialize HTC services
[  720.038504][   T10] ath9k_htc: Failed to initialize the device
[  720.074312][   T40] usb 10-1: ath9k_htc: USB layer deinitialized
[  720.592394][ T5228] 8021q: adding VLAN 0 to HW filter on device eth21
[  720.678192][   T10] usb 10-1: new high-speed USB device number 24 using dummy_hcd
[  720.789964][ T5673] usb 6-1: USB disconnect, device number 7
[  720.835338][   T48] Bluetooth: hci0: command tx timeout
[  720.886419][   T10] usb 10-1: Using ep0 maxpacket: 8
[  720.955436][   T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  721.051433][   T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  721.139179][   T10] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  721.193760][   T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[  721.249159][   T10] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  721.289332][   T10] usb 10-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  721.318614][   T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  721.496985][   T10] usb 10-1: config 0 descriptor??
[  721.513764][ T9220] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  727.859632][ T8912] Bluetooth: hci0: command tx timeout
[  727.867387][   T48] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  729.874985][   T48] Bluetooth: hci0: command tx timeout
[  733.298088][   T10] usb 10-1: USB disconnect, device number 24
[  733.515151][   T24] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  733.770097][   T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  733.845345][   T24] usb 6-1: config 0 has no interfaces?
[  733.903519][   T24] usb 6-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00
[  733.943144][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  734.010358][   T24] usb 6-1: config 0 descriptor??
[  734.435268][   T10] usb 6-1: USB disconnect, device number 8
[  736.677283][   T34] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  737.102918][   T34] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  737.225317][   T24] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  737.335609][   T40] usb 10-1: new high-speed USB device number 25 using dummy_hcd
[  737.477599][   T34] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  737.481986][   T24] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  737.545257][   T40] usb 10-1: Using ep0 maxpacket: 8
[  737.553722][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  737.593333][   T24] usb 6-1: Product: syz
[  737.605995][   T40] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  737.619661][   T24] usb 6-1: Manufacturer: syz
[  737.630509][   T24] usb 6-1: SerialNumber: syz
[  737.645102][   T40] usb 10-1: config 0 has no interfaces?
[  737.652944][   T40] usb 10-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  737.662891][   T40] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  737.692050][   T24] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  737.732557][   T40] usb 10-1: config 0 descriptor??
[  737.780000][ T8304] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  737.783524][   T34] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  738.513796][ T9153] bridge0: port 1(bridge_slave_0) entered blocking state
[  738.532882][ T9153] bridge0: port 1(bridge_slave_0) entered disabled state
[  738.542305][ T9153] bridge_slave_0: entered allmulticast mode
[  738.559394][ T9153] bridge_slave_0: entered promiscuous mode
[  738.609730][ T9156] bridge0: port 1(bridge_slave_0) entered blocking state
[  738.625249][ T9156] bridge0: port 1(bridge_slave_0) entered disabled state
[  738.633443][ T9156] bridge_slave_0: entered allmulticast mode
[  738.670508][ T9156] bridge_slave_0: entered promiscuous mode
[  738.680233][    T9] usb 6-1: USB disconnect, device number 9
[  738.761109][ T9153] bridge0: port 2(bridge_slave_1) entered blocking state
[  738.784477][ T9153] bridge0: port 2(bridge_slave_1) entered disabled state
[  738.802250][ T9153] bridge_slave_1: entered allmulticast mode
[  738.812680][ T9153] bridge_slave_1: entered promiscuous mode
[  738.922742][ T9156] bridge0: port 2(bridge_slave_1) entered blocking state
[  738.944594][ T9156] bridge0: port 2(bridge_slave_1) entered disabled state
[  738.975617][ T9156] bridge_slave_1: entered allmulticast mode
[  738.986247][ T9156] bridge_slave_1: entered promiscuous mode
[  739.193736][ T9153] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  739.315363][ T8304] usb 6-1: Service connection timeout for: 257
[  739.351291][ T8304] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services
[  739.390912][ T8304] ath9k_htc: Failed to initialize the device
[  739.412400][    T9] usb 6-1: ath9k_htc: USB layer deinitialized
[  739.554265][ T9153] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  739.621064][ T9156] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  739.839924][ T9156] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  739.947416][   T34] bridge_slave_1: left allmulticast mode
[  739.964684][   T34] bridge_slave_1: left promiscuous mode
[  739.979645][   T34] bridge0: port 2(bridge_slave_1) entered disabled state
[  739.996790][   T34] bridge_slave_0: left allmulticast mode
[  740.006352][   T34] bridge_slave_0: left promiscuous mode
[  740.013572][   T34] bridge0: port 1(bridge_slave_0) entered disabled state
[  740.033467][   T34] bridge_slave_1: left allmulticast mode
[  740.057823][   T34] bridge_slave_1: left promiscuous mode
[  740.077732][   T34] bridge0: port 2(bridge_slave_1) entered disabled state
[  740.111199][   T34] bridge_slave_0: left allmulticast mode
[  740.123999][   T34] bridge_slave_0: left promiscuous mode
[  740.139724][   T34] bridge0: port 1(bridge_slave_0) entered disabled state
[  740.246195][ T5673] usb 10-1: USB disconnect, device number 25
[  741.520250][ T9304] loop9: detected capacity change from 0 to 512
[  741.625217][ T9304] EXT4-fs (loop9): blocks per group (95) and clusters per group (32768) inconsistent
[  743.418240][   T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  743.501728][   T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  743.536750][   T40] usb 10-1: new high-speed USB device number 26 using dummy_hcd
[  743.571892][   T34] bond0 (unregistering): Released all slaves
[  743.726641][   T40] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  743.769340][   T40] usb 10-1: config 0 has no interfaces?
[  743.780150][   T40] usb 10-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00
[  743.796037][   T40] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  743.857836][   T40] usb 10-1: config 0 descriptor??
[  744.066910][   T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  744.095196][   T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  744.112846][   T34] bond0 (unregistering): Released all slaves
[  744.181713][   T40] usb 10-1: USB disconnect, device number 26
[  744.381461][ T9315] loop5: detected capacity change from 0 to 512
[  744.485083][ T9153] team0: Port device team_slave_0 added
[  744.488693][ T9315] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  744.586757][ T9156] team0: Port device team_slave_0 added
[  744.611644][ T9156] team0: Port device team_slave_1 added
[  744.616900][ T8365] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  744.643481][ T9153] team0: Port device team_slave_1 added
[  745.118522][   T24] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  745.279184][ T9156] batman_adv: batadv0: Adding interface: batadv_slave_0
[  745.305521][ T9156] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  745.353712][   T24] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  745.365973][ T9156] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  745.377091][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  745.392272][   T24] usb 6-1: Product: syz
[  745.409757][   T24] usb 6-1: Manufacturer: syz
[  745.416011][   T24] usb 6-1: SerialNumber: syz
[  745.481386][   T24] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  745.521358][ T9153] batman_adv: batadv0: Adding interface: batadv_slave_0
[  745.531034][ T9153] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  745.536381][   T40] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  745.570779][ T9153] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  745.779540][ T9156] batman_adv: batadv0: Adding interface: batadv_slave_1
[  745.817798][ T9156] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  745.864947][ T9156] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  745.891336][ T9153] batman_adv: batadv0: Adding interface: batadv_slave_1
[  745.905961][ T9153] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  745.933395][ T9153] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  746.376767][ T9192] bridge0: port 1(bridge_slave_0) entered blocking state
[  746.406837][ T9192] bridge0: port 1(bridge_slave_0) entered disabled state
[  746.422690][ T9192] bridge_slave_0: entered allmulticast mode
[  746.454441][ T8129] usb 6-1: USB disconnect, device number 10
[  746.479005][ T9192] bridge_slave_0: entered promiscuous mode
[  746.569976][   T34] hsr_slave_0: left promiscuous mode
[  746.578357][   T34] hsr_slave_1: left promiscuous mode
[  746.586835][   T34] batman_adv: batadv0: Removing interface: batadv_slave_0
[  746.602349][   T34] batman_adv: batadv0: Removing interface: batadv_slave_1
[  746.640473][   T34] hsr_slave_0: left promiscuous mode
[  746.660057][   T34] hsr_slave_1: left promiscuous mode
[  746.665127][   T24] usb 10-1: new high-speed USB device number 27 using dummy_hcd
[  746.670918][   T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  746.683391][   T34] batman_adv: batadv0: Removing interface: batadv_slave_0
[  746.699120][   T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  746.708080][   T34] batman_adv: batadv0: Removing interface: batadv_slave_1
[  746.746717][   T34] veth1_macvtap: left promiscuous mode
[  746.753110][   T34] veth0_macvtap: left promiscuous mode
[  746.779324][   T34] veth1_vlan: left promiscuous mode
[  746.789987][   T34] veth0_vlan: left promiscuous mode
[  746.839503][   T24] usb 10-1: Using ep0 maxpacket: 8
[  746.864495][   T24] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  746.894624][   T24] usb 10-1: config 0 has no interfaces?
[  746.911666][   T24] usb 10-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  746.935424][   T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  746.972993][   T24] usb 10-1: config 0 descriptor??
[  747.078862][   T40] usb 6-1: Service connection timeout for: 257
[  747.099053][   T40] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services
[  747.136546][   T40] ath9k_htc: Failed to initialize the device
[  747.176569][ T8129] usb 6-1: ath9k_htc: USB layer deinitialized
[  747.423152][ T9342] loop5: detected capacity change from 0 to 512
[  747.458854][ T9342] EXT4-fs (loop5): blocks per group (95) and clusters per group (32768) inconsistent
[  747.757986][ T9346] loop5: detected capacity change from 0 to 512
[  747.773701][ T9346] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  747.820580][ T9346] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082]
[  747.829753][ T9346] System zones: 1-12
[  747.854901][ T9346] EXT4-fs (loop5): 1 truncate cleaned up
[  747.884601][ T9346] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  748.933815][   T34] team0 (unregistering): Port device team_slave_1 removed
[  748.985852][   T34] team0 (unregistering): Port device team_slave_0 removed
[  749.713585][ T8129] usb 10-1: USB disconnect, device number 27
[  750.098372][ T9354] loop6: detected capacity change from 0 to 8
[  750.163304][    C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  750.173983][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  750.225488][    C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  750.236070][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  750.244917][    C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  750.255521][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  750.270806][    C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  750.281453][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  750.295757][    C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  750.306405][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  750.316356][    C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  750.326956][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  750.336097][    C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  750.346815][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  750.377262][    C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  750.387933][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  750.398907][ T9354] ldm_validate_partition_table(): Disk read failed.
[  750.416002][    C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  750.426773][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  750.440063][    C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  750.450797][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  750.470848][ T9354] Dev loop6: unable to read RDB block 0
[  750.502769][ T9354]  loop6: unable to read partition table
[  750.549777][ T9354] loop6: partition table beyond EOD, truncated
[  750.562545][ T9354] loop_reread_partitions: partition scan of loop6 (ÄNùh*h‘…ÿìžÝ×pਸ਼ "ýo§æ?<í¯ÊºöÙXDˆÚ
bÔÌp0ìO{š¸›>.) failed (rc=-5)
[  750.785321][ T8365] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  750.807793][   T34] team0 (unregistering): Port device team_slave_1 removed
[  750.873287][   T34] team0 (unregistering): Port device team_slave_0 removed
[  751.137026][ T8129] usb 10-1: new high-speed USB device number 28 using dummy_hcd
[  751.328678][ T8129] usb 10-1: Using ep0 maxpacket: 8
[  751.370393][ T8129] usb 10-1: config 179 has an invalid interface number: 65 but max is 0
[  751.395163][ T8129] usb 10-1: config 179 has no interface number 0
[  751.401822][ T8129] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  751.429274][ T8129] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  751.456198][ T8129] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  751.473033][ T8129] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  751.503849][ T8129] usb 10-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  751.526322][ T8129] usb 10-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  751.541940][ T8129] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  751.572797][ T9357] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  751.594651][ T9192] bridge0: port 2(bridge_slave_1) entered blocking state
[  751.605766][ T9192] bridge0: port 2(bridge_slave_1) entered disabled state
[  751.650696][ T9192] bridge_slave_1: entered allmulticast mode
[  751.727503][ T9192] bridge_slave_1: entered promiscuous mode
[  751.737421][   T40] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  751.848124][ T9363] usb 10-1: USB disconnect, device number 28
[  751.848556][    C0] xpad 10-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  751.862969][    C0] xpad 10-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  751.923254][   T40] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  751.979892][   T40] usb 6-1: config 0 has no interfaces?
[  751.995718][   T40] usb 6-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00
[  752.016718][   T40] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  752.047109][   T40] usb 6-1: config 0 descriptor??
[  752.204063][ T9192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  752.312051][ T9156] hsr_slave_0: entered promiscuous mode
[  752.322543][ T9156] hsr_slave_1: entered promiscuous mode
[  752.335754][ T9363] usb 6-1: USB disconnect, device number 11
[  752.416751][ T9192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  752.574490][ T9153] hsr_slave_0: entered promiscuous mode
[  752.603020][ T9153] hsr_slave_1: entered promiscuous mode
[  752.623015][ T9153] debugfs: 'hsr0' already exists in 'hsr'
[  752.640610][ T9153] Cannot create hsr debugfs directory
[  752.782009][ T9192] team0: Port device team_slave_0 added
[  752.922928][ T9192] team0: Port device team_slave_1 added
[  753.534838][ T9192] batman_adv: batadv0: Adding interface: batadv_slave_0
[  753.560217][ T9192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  753.588336][ T9192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  753.630576][ T9192] batman_adv: batadv0: Adding interface: batadv_slave_1
[  753.648419][ T9383] loop5: detected capacity change from 0 to 512
[  753.658835][ T9192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  753.708766][ T9383] EXT4-fs (loop5): blocks per group (95) and clusters per group (32768) inconsistent
[  753.739827][ T9192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  755.260905][ T9192] hsr_slave_0: entered promiscuous mode
[  755.278901][ T9401] 9p: Bad value for 'trans'
[  755.307406][ T9192] hsr_slave_1: entered promiscuous mode
[  755.340092][ T9192] debugfs: 'hsr0' already exists in 'hsr'
[  755.359071][ T9192] Cannot create hsr debugfs directory
[  756.125499][ T9406] loop5: detected capacity change from 0 to 764
[  756.778295][ T9407] ------------[ cut here ]------------
[  756.783861][ T9407] WARNING: kernel/signal.c:2174 at do_notify_parent+0x1d9/0xf30, CPU#1: syz.5.826/9407
[  756.793679][ T9407] Modules linked in:
[  756.797720][ T9407] CPU: 1 UID: 0 PID: 9407 Comm: syz.5.826 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  756.808606][ T9407] Tainted: [L]=SOFTLOCKUP
[  756.812992][ T9407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  756.823142][ T9407] RIP: 0010:do_notify_parent+0x1d9/0xf30
[  756.828949][ T9407] Code: e9 4c 31 f1 48 f7 d0 48 21 c8 0f 84 3b 0d 00 00 4d 39 f5 4c 8b 7d b8 0f 85 58 0d 00 00 e8 5f 09 5f 00 eb 60 e8 58 09 5f 00 90 <0f> 0b 90 31 c0 45 31 ed 45 31 ff e9 56 0c 00 00 44 89 ef e8 7f 28
[  756.848670][ T9407] RSP: 0018:ffff88804d3dfcf8 EFLAGS: 00010093
[  756.854853][ T9407] RAX: ffffffff81a17068 RBX: ffff88805abfce40 RCX: ffff88805abfc280
[  756.863011][ T9407] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000000000040
[  756.871074][ T9407] RBP: ffff88804d3dfdc0 R08: ffffea000000000f R09: 0000000000000000
[  756.879225][ T9407] R10: ffff88804cbdfd08 R11: 0000000000000000 R12: 0000000000000000
[  756.887300][ T9407] R13: ffff88805abfc280 R14: 0000000000000080 R15: ffff88805abfc280
[  756.895369][ T9407] FS:  0000000000000000(0000) GS:ffff8881aa711000(0000) knlGS:0000000000000000
[  756.904400][ T9407] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  756.911075][ T9407] CR2: 00007f32b2e2b000 CR3: 0000000107d84000 CR4: 00000000003526f0
[  756.919154][ T9407] Call Trace:
[  756.922503][ T9407]  <TASK>
[  756.925509][ T9407]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  756.931579][ T9407]  ? kill_orphaned_pgrp+0x273/0xa70
[  756.937002][ T9407]  ? kmsan_get_metadata+0xf1/0x160
[  756.937177][ T1308] ieee802154 phy0 wpan0: encryption failed: -22
[  756.942329][ T9407]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  756.954475][ T9407]  do_exit+0x2430/0x3c30
[  756.958863][ T9407]  __x64_sys_exit+0x35/0x40
[  756.963477][ T9407]  x64_sys_call+0x3e96/0x3ea0
[  756.968280][ T9407]  do_syscall_64+0x134/0xf80
[  756.973081][ T9407]  ? clear_bhb_loop+0x50/0xa0
[  756.977873][ T9407]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  756.983879][ T9407] RIP: 0033:0x7f7a5859ce59
[  756.988396][ T9407] Code: Unable to access opcode bytes at 0x7f7a5859ce2f.
[  756.995491][ T9407] RSP: 002b:00007f7a594a1fd8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c
[  757.004040][ T9407] RAX: ffffffffffffffda RBX: 00007f7a58815fa0 RCX: 00007f7a5859ce59
[  757.012102][ T9407] RDX: 00007f7a594a29c8 RSI: 0000000000000000 RDI: 0000000000000000
[  757.020158][ T9407] RBP: 00007f7a58632d6f R08: 0000000000000000 R09: 0000000000000000
[  757.028208][ T9407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  757.036260][ T9407] R13: 00007f7a58816038 R14: 00007f7a58815fa0 R15: 00007ffe5b5c9458
[  757.044343][ T9407]  </TASK>
[  757.047439][ T9407] ---[ end trace 0000000000000000 ]---
[  757.060084][ T1308] ieee802154 phy1 wpan1: encryption failed: -22
[  757.777920][ T9363] usb 10-1: new high-speed USB device number 29 using dummy_hcd
[  757.953078][ T9363] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  757.977950][ T9363] usb 10-1: config 0 has no interfaces?
[  757.997856][ T9363] usb 10-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00
[  758.014973][ T9363] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  758.046399][ T9363] usb 10-1: config 0 descriptor??
[  758.173769][ T9153] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  758.214050][ T9153] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  758.287680][ T9153] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  758.348197][ T9153] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  758.382934][ T9363] usb 10-1: USB disconnect, device number 29
[  758.388857][ T9153] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  758.473642][ T9153] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  758.582421][ T9153] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  758.629126][ T9153] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  759.386466][ T9156] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  759.408518][ T9429] loop9: detected capacity change from 0 to 512
[  759.422615][ T9429] EXT4-fs (loop9): blocks per group (95) and clusters per group (32768) inconsistent
[  759.463887][ T9156] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  759.530509][ T9156] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  759.605807][ T9156] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  759.733382][ T9156] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  759.811918][ T9156] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  759.905029][ T9156] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  766.035303][ T9156] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  766.397832][ T5228] 8021q: adding VLAN 0 to HW filter on device eth22
[  766.442816][ T9192] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  766.537285][ T9192] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  766.621075][ T9192] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  766.734036][ T9192] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  766.779035][ T9192] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  766.886828][ T9192] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  766.959447][ T9192] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  767.081079][ T9192] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  767.855708][ T5587] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  767.865627][ T5587] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  767.874619][ T5587] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  767.891908][ T5587] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  767.906220][ T5587] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  768.057569][   T48] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  768.067442][   T48] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  768.078253][   T48] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  768.091144][   T48] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  768.103264][   T48] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  768.737010][ T9192] 8021q: adding VLAN 0 to HW filter on device bond0
[  769.023355][ T9192] 8021q: adding VLAN 0 to HW filter on device team0
[  769.184356][ T1112] bridge0: port 1(bridge_slave_0) entered blocking state
[  769.191962][ T1112] bridge0: port 1(bridge_slave_0) entered forwarding state
[  770.101687][   T48] Bluetooth: hci1: command tx timeout
[  770.198611][   T48] Bluetooth: hci4: command tx timeout
[  770.317763][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[  770.325291][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[  770.811903][ T9482] fuse: Unknown parameter 'user_i00000000000000000000'
[  772.115762][   T48] Bluetooth: hci1: command tx timeout
[  772.277766][   T48] Bluetooth: hci4: command tx timeout
[  774.197307][   T48] Bluetooth: hci1: command tx timeout
[  774.426959][   T48] Bluetooth: hci4: command tx timeout
[  776.285087][   T48] Bluetooth: hci1: command tx timeout
[  776.515797][   T48] Bluetooth: hci4: command tx timeout
[  777.139680][ T9516] loop5: detected capacity change from 0 to 1024
[  777.211854][ T9516] EXT4-fs: Ignoring removed orlov option
[  777.361888][ T9516] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  777.489785][ T8742] bridge_slave_1: left allmulticast mode
[  777.527213][ T8742] bridge_slave_1: left promiscuous mode
[  777.585602][ T8742] bridge0: port 2(bridge_slave_1) entered disabled state
[  777.681797][ T8742] bridge_slave_0: left allmulticast mode
[  777.723273][ T8742] bridge_slave_0: left promiscuous mode
[  777.752681][ T8742] bridge0: port 1(bridge_slave_0) entered disabled state
[  778.211988][ T8365] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  778.472143][ T5587] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  778.486455][ T5587] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  778.496528][ T5587] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  778.516397][ T5587] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  778.529231][ T5587] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  778.661907][ T8742] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  778.820053][ T8742] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  778.893116][ T8742] bond0 (unregistering): Released all slaves
[  779.144332][ T5228] 8021q: adding VLAN 0 to HW filter on device eth23
[  779.479525][ T8742] hsr_slave_0: left promiscuous mode
[  779.524397][ T8742] hsr_slave_1: left promiscuous mode
[  779.542885][ T8742] batman_adv: batadv0: Removing interface: batadv_slave_0
[  779.554276][ T9542] fuse: Unknown parameter 'user_i00000000000000000000'
[  779.568196][ T8742] batman_adv: batadv0: Removing interface: batadv_slave_1
[  780.635259][ T5587] Bluetooth: hci3: command tx timeout
[  782.663959][ T8742] team0 (unregistering): Port device team_slave_1 removed
[  782.681077][ T5587] Bluetooth: hci3: command tx timeout
[  783.698917][ T8742] team0 (unregistering): Port device team_slave_0 removed
[  784.755168][ T5587] Bluetooth: hci3: command tx timeout
[  786.837079][ T5587] Bluetooth: hci3: command tx timeout
[  790.721396][ T9578] loop5: detected capacity change from 0 to 8
[  791.688431][ T9585] fuse: Unknown parameter 'user_id00000000000000000000'
[  792.569707][ T5587] Bluetooth: hci5: unexpected event for opcode 0x2024
[  798.613302][ T9453] bridge0: port 1(bridge_slave_0) entered blocking state
[  798.640578][ T9453] bridge0: port 1(bridge_slave_0) entered disabled state
[  798.662581][ T9453] bridge_slave_0: entered allmulticast mode
[  798.687346][ T9453] bridge_slave_0: entered promiscuous mode
[  798.723085][ T9453] bridge0: port 2(bridge_slave_1) entered blocking state
[  798.745673][ T9453] bridge0: port 2(bridge_slave_1) entered disabled state
[  798.765839][ T9453] bridge_slave_1: entered allmulticast mode
[  798.798043][ T9453] bridge_slave_1: entered promiscuous mode
[  798.831148][ T9457] bridge0: port 1(bridge_slave_0) entered blocking state
[  798.857975][ T9457] bridge0: port 1(bridge_slave_0) entered disabled state
[  798.888485][ T9457] bridge_slave_0: entered allmulticast mode
[  798.907978][ T9457] bridge_slave_0: entered promiscuous mode
[  799.140814][ T9457] bridge0: port 2(bridge_slave_1) entered blocking state
[  799.160306][ T9457] bridge0: port 2(bridge_slave_1) entered disabled state
[  799.176739][ T9457] bridge_slave_1: entered allmulticast mode
[  799.203324][ T9457] bridge_slave_1: entered promiscuous mode
[  799.702046][ T9453] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  799.916267][ T5587] Bluetooth: hci5: unexpected event for opcode 0x1004
[  799.947632][ T9453] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  800.133263][ T9457] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  800.304607][ T9457] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  800.423981][ T8742] bridge_slave_1: left allmulticast mode
[  800.457085][ T8742] bridge_slave_1: left promiscuous mode
[  800.485559][ T8742] bridge0: port 2(bridge_slave_1) entered disabled state
[  800.525817][ T8742] bridge_slave_0: left allmulticast mode
[  800.545997][ T8742] bridge_slave_0: left promiscuous mode
[  800.560707][ T8742] bridge0: port 1(bridge_slave_0) entered disabled state
[  800.629043][ T8742] bridge_slave_1: left allmulticast mode
[  800.649472][ T8742] bridge_slave_1: left promiscuous mode
[  800.684825][ T8742] bridge0: port 2(bridge_slave_1) entered disabled state
[  800.733653][ T8742] bridge_slave_0: left allmulticast mode
[  800.760388][ T8742] bridge_slave_0: left promiscuous mode
[  800.777831][ T8742] bridge0: port 1(bridge_slave_0) entered disabled state
[  801.230517][ T9622] loop9: detected capacity change from 0 to 16
[  801.416558][ T5587] Bluetooth: hci5: unexpected event for opcode 0x2024
[  802.233141][ T9622] erofs (device loop9): mounted with root inode @ nid 36.
[  802.828264][ T9622] erofs (device loop9): compressed inode (nid 89) is invalid in a plain filesystem
[  803.027569][ T9626] fuse: Unknown parameter 'user_id00000000000000000000'
[  803.436067][ T8742] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  803.479503][ T8742] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  803.513629][ T8742] bond0 (unregistering): Released all slaves
[  803.874486][ T8742] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  803.911756][ T8742] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  803.941935][ T8742] bond0 (unregistering): Released all slaves
[  804.019948][ T9453] team0: Port device team_slave_0 added
[  804.251924][ T9453] team0: Port device team_slave_1 added
[  804.576859][ T9457] team0: Port device team_slave_0 added
[  804.601106][ T9457] team0: Port device team_slave_1 added
[  804.672256][ T8742] hsr_slave_0: left promiscuous mode
[  804.714000][ T8742] hsr_slave_1: left promiscuous mode
[  804.736707][ T8742] batman_adv: batadv0: Removing interface: batadv_slave_0
[  804.772551][ T8742] batman_adv: batadv0: Removing interface: batadv_slave_1
[  804.893090][ T8742] hsr_slave_0: left promiscuous mode
[  804.914541][ T8742] hsr_slave_1: left promiscuous mode
[  804.957285][ T8742] batman_adv: batadv0: Removing interface: batadv_slave_0
[  804.989578][ T8742] batman_adv: batadv0: Removing interface: batadv_slave_1
[  806.039607][ T5587] Bluetooth: hci5: unexpected event for opcode 0x2024
[  807.738609][ T9652] =====================================================
[  807.746018][ T9652] BUG: KMSAN: uninit-value in eth_type_trans+0x68f/0xae0
[  807.753236][ T9652]  eth_type_trans+0x68f/0xae0
[  807.758198][ T9652]  __dev_forward_skb2+0x4b1/0x940
[  807.763383][ T9652]  dev_forward_skb_nomtu+0x3b/0xe0
[  807.768662][ T9652]  __bpf_redirect+0x14d7/0x1760
[  807.773606][ T9652]  bpf_clone_redirect+0x4a6/0x6c0
[  807.778800][ T9652]  ___bpf_prog_run+0x13e8/0xea90
[  807.783855][ T9652]  __bpf_prog_run512+0xc5/0x100
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  807.789075][ T9652]  bpf_test_run+0x493/0xdf0
[  807.793821][ T9652]  bpf_prog_test_run_skb+0x2988/0x35f0
[  807.799589][ T9652]  bpf_prog_test_run+0x5bb/0x9f0
[  807.804831][ T9652]  __sys_bpf+0x925/0xee0
[  807.809300][ T9652]  __x64_sys_bpf+0xa4/0xf0
[  807.813855][ T9652]  x64_sys_call+0x13d0/0x3ea0
[  807.818784][ T9652]  do_syscall_64+0x134/0xf80
[  807.823477][ T9652]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  807.829550][ T9652] 
[  807.831904][ T9652] Uninit was created at:
[  807.836331][ T9652]  kmem_cache_alloc_node_noprof+0x3cd/0x12c0
[  807.842431][ T9652]  pskb_expand_head+0x2f3/0x1a40
[  807.847536][ T9652]  skb_ensure_writable+0x44e/0x510
[  807.852747][ T9652]  bpf_clone_redirect+0x301/0x6c0
[  807.857919][ T9652]  ___bpf_prog_run+0x13e8/0xea90
[  807.863000][ T9652]  __bpf_prog_run512+0xc5/0x100
[  807.868004][ T9652]  bpf_test_run+0x493/0xdf0
[  807.872603][ T9652]  bpf_prog_test_run_skb+0x2988/0x35f0
[  807.878298][ T9652]  bpf_prog_test_run+0x5bb/0x9f0
[  807.883417][ T9652]  __sys_bpf+0x925/0xee0
[  807.887838][ T9652]  __x64_sys_bpf+0xa4/0xf0
[  807.893114][ T9652]  x64_sys_call+0x13d0/0x3ea0
[  807.897983][ T9652]  do_syscall_64+0x134/0xf80
[  807.902659][ T9652]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  807.908691][ T9652] 
[  807.911114][ T9652] CPU: 0 UID: 0 PID: 9652 Comm: syz.5.873 Tainted: G        W    L      syzkaller #0 PREEMPT(full) 
[  807.922037][ T9652] Tainted: [W]=WARN, [L]=SOFTLOCKUP
[  807.927375][ T9652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  807.937626][ T9652] =====================================================
[  807.944629][ T9652] Disabling lock debugging due to kernel taint
[  807.950929][ T9652] Kernel panic - not syncing: kmsan.panic set ...
[  807.957401][ T9652] CPU: 0 UID: 0 PID: 9652 Comm: syz.5.873 Tainted: G    B   W    L      syzkaller #0 PREEMPT(full) 
[  807.968271][ T9652] Tainted: [B]=BAD_PAGE, [W]=WARN, [L]=SOFTLOCKUP
[  807.974732][ T9652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  807.984876][ T9652] Call Trace:
[  807.988236][ T9652]  <TASK>
[  807.991242][ T9652]  __dump_stack+0x26/0x30
[  807.995664][ T9652]  dump_stack_lvl+0x50/0x1c0
[  808.000341][ T9652]  ? dump_stack+0x12/0x25
[  808.004792][ T9652]  dump_stack+0x1e/0x25
[  808.009171][ T9652]  vpanic+0x7b4/0x1430
[  808.013347][ T9652]  panic+0x15d/0x160
[  808.017353][ T9652]  kmsan_report+0x31a/0x320
[  808.021963][ T9652]  ? bpf_clone_redirect+0x301/0x6c0
[  808.027250][ T9652]  ? __msan_warning+0x1b/0x30
[  808.032025][ T9652]  ? eth_type_trans+0x68f/0xae0
[  808.036997][ T9652]  ? __dev_forward_skb2+0x4b1/0x940
[  808.042300][ T9652]  ? dev_forward_skb_nomtu+0x3b/0xe0
[  808.047687][ T9652]  ? __bpf_redirect+0x14d7/0x1760
[  808.052818][ T9652]  ? bpf_clone_redirect+0x4a6/0x6c0
[  808.058105][ T9652]  ? ___bpf_prog_run+0x13e8/0xea90
[  808.063310][ T9652]  ? __bpf_prog_run512+0xc5/0x100
[  808.068519][ T9652]  ? bpf_test_run+0x493/0xdf0
[  808.073293][ T9652]  ? bpf_prog_test_run_skb+0x2988/0x35f0
[  808.079022][ T9652]  ? bpf_prog_test_run+0x5bb/0x9f0
[  808.084245][ T9652]  ? __sys_bpf+0x925/0xee0
[  808.088866][ T9652]  ? __x64_sys_bpf+0xa4/0xf0
[  808.093551][ T9652]  ? x64_sys_call+0x13d0/0x3ea0
[  808.098496][ T9652]  ? do_syscall_64+0x134/0xf80
[  808.103344][ T9652]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  808.109499][ T9652]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  808.115434][ T9652]  ? kmsan_get_metadata+0xf1/0x160
[  808.120710][ T9652]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  808.126644][ T9652]  ? should_fail_ex+0x45/0x8c0
[  808.131511][ T9652]  ? stack_depot_save_flags+0x35/0x790
[  808.137066][ T9652]  ? kmsan_get_metadata+0xf1/0x160
[  808.142299][ T9652]  ? kmsan_get_metadata+0xf1/0x160
[  808.147507][ T9652]  ? kmsan_internal_set_shadow_origin+0x7a/0x110
[  808.153937][ T9652]  ? kmsan_get_metadata+0xf1/0x160
[  808.159141][ T9652]  ? kmsan_get_metadata+0xf1/0x160
[  808.164349][ T9652]  ? kmsan_get_metadata+0xf1/0x160
[  808.169587][ T9652]  __msan_warning+0x1b/0x30
[  808.174188][ T9652]  eth_type_trans+0x68f/0xae0
[  808.178974][ T9652]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  808.184928][ T9652]  __dev_forward_skb2+0x4b1/0x940
[  808.190147][ T9652]  dev_forward_skb_nomtu+0x3b/0xe0
[  808.195382][ T9652]  __bpf_redirect+0x14d7/0x1760
[  808.200328][ T9652]  ? kmsan_get_metadata+0xf1/0x160
[  808.205662][ T9652]  bpf_clone_redirect+0x4a6/0x6c0
[  808.210796][ T9652]  ___bpf_prog_run+0x13e8/0xea90
[  808.215884][ T9652]  __bpf_prog_run512+0xc5/0x100
[  808.220854][ T9652]  ? kmsan_internal_poison_memory+0x78/0x90
[  808.226864][ T9652]  ? kmsan_internal_poison_memory+0x4a/0x90
[  808.232858][ T9652]  ? kmsan_slab_alloc+0xdc/0x160
[  808.237907][ T9652]  ? kmem_cache_alloc_noprof+0x373/0x1250
[  808.243737][ T9652]  ? slab_build_skb+0x5c/0x5b0
[  808.248572][ T9652]  ? bpf_prog_test_run_skb+0x818/0x35f0
[  808.254228][ T9652]  ? kmsan_get_metadata+0xf1/0x160
[  808.259461][ T9652]  ? kmsan_internal_set_shadow_origin+0x7a/0x110
[  808.265898][ T9652]  ? kmsan_internal_unpoison_memory+0x14/0x20
[  808.272061][ T9652]  ? _raw_spin_unlock_irqrestore+0x3f/0x60
[  808.277956][ T9652]  ? kmsan_get_metadata+0xf1/0x160
[  808.283260][ T9652]  ? kmsan_get_metadata+0xf1/0x160
[  808.288469][ T9652]  ? kmsan_get_metadata+0xf1/0x160
[  808.293680][ T9652]  ? kmsan_internal_set_shadow_origin+0x7a/0x110
[  808.300105][ T9652]  ? kmsan_get_metadata+0x146/0x160
[  808.305408][ T9652]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  808.311327][ T9652]  ? __pfx___bpf_prog_run512+0x10/0x10
[  808.316896][ T9652]  ? __pfx___bpf_prog_run512+0x10/0x10
[  808.322484][ T9652]  bpf_test_run+0x493/0xdf0
[  808.327176][ T9652]  ? kmsan_get_metadata+0xf1/0x160
[  808.332395][ T9652]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  808.338341][ T9652]  ? bpf_test_run+0x2f4/0xdf0
[  808.343141][ T9652]  bpf_prog_test_run_skb+0x2988/0x35f0
[  808.348701][ T9652]  ? futex_unqueue+0x22d/0x2c0
[  808.353582][ T9652]  ? kmsan_get_metadata+0xf1/0x160
[  808.358807][ T9652]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  808.364751][ T9652]  ? kmsan_internal_set_shadow_origin+0x7a/0x110
[  808.371216][ T9652]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  808.377125][ T9652]  bpf_prog_test_run+0x5bb/0x9f0
[  808.382181][ T9652]  __sys_bpf+0x925/0xee0
[  808.386561][ T9652]  __x64_sys_bpf+0xa4/0xf0
[  808.391069][ T9652]  x64_sys_call+0x13d0/0x3ea0
[  808.395842][ T9652]  do_syscall_64+0x134/0xf80
[  808.400570][ T9652]  ? clear_bhb_loop+0x50/0xa0
[  808.405352][ T9652]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  808.411350][ T9652] RIP: 0033:0x7f7a5859ce59
[  808.415836][ T9652] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  808.435637][ T9652] RSP: 002b:00007f7a594a2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  808.444139][ T9652] RAX: ffffffffffffffda RBX: 00007f7a58815fa0 RCX: 00007f7a5859ce59
[  808.452171][ T9652] RDX: 0000000000000023 RSI: 0000200000000240 RDI: 000000000000000a
[  808.460201][ T9652] RBP: 00007f7a58632d6f R08: 0000000000000000 R09: 0000000000000000
[  808.468233][ T9652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  808.476255][ T9652] R13: 00007f7a58816038 R14: 00007f7a58815fa0 R15: 00007ffe5b5c9458
[  808.484309][ T9652]  </TASK>
[  808.487543][ T9652] Kernel Offset: disabled
[  808.491918][ T9652] Rebooting in 86400 seconds..