last executing test programs:

1m8.521121538s ago: executing program 1 (id=112):
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, &(0x7f0000000200))
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81ffffffffb9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33)

1m7.836033094s ago: executing program 1 (id=119):
r0 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000))
fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5, r0})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a1c000000000a0104000000000000000002000000080001006e61740040000000400a0104"], 0x108}}, 0x0)

1m7.654284779s ago: executing program 1 (id=122):
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='task\x00')
fchdir(r0)
setfsgid(0xee00)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0)
r1 = syz_clone(0x20100000, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = syz_open_procfs(r1, &(0x7f0000000140)='io\x00')
pread64(r2, &(0x7f0000000100)=""/45, 0x2d, 0x40000000009)

1m7.263964548s ago: executing program 1 (id=124):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x18)
mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0])
mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x62000, 0xc1)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r1, r1)
setpgid(0x0, r1)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0xc0089364, &(0x7f0000000000))

1m6.987228424s ago: executing program 1 (id=126):
unshare(0x26020480)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x4, 0x8}, 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r3}, 0xc)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40485404, 0x0)

1m5.260946696s ago: executing program 1 (id=135):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffff97ffffe, 0x4031, 0xffffffffffffffff, 0x0)
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x715})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4})
syz_clone(0x21220100, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200))
mremap(&(0x7f0000580000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00007ff000/0x2000)=nil)
close_range(r0, 0xffffffffffffffff, 0x0)

1m4.869622875s ago: executing program 32 (id=135):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffff97ffffe, 0x4031, 0xffffffffffffffff, 0x0)
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x715})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4})
syz_clone(0x21220100, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200))
mremap(&(0x7f0000580000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00007ff000/0x2000)=nil)
close_range(r0, 0xffffffffffffffff, 0x0)

22.759404394s ago: executing program 3 (id=388):
unshare(0x28000600)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
setpgid(r0, r0)
setpgid(0x0, r0)
wait4(r0, 0x0, 0x2, 0x0)
setpgid(0x0, 0x0)

22.019796932s ago: executing program 3 (id=393):
r0 = socket$inet6(0xa, 0x1, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x200000, 0x0, 0x0, 0x0, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x9801)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
chroot(&(0x7f0000000440)='./file0\x00')
umount2(&(0x7f0000000080)='./file0\x00', 0x8)
setxattr$security_ima(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), &(0x7f00000002c0)=@v2={0x5, 0x1, 0x7, 0x10, 0xd4, "a08f25b44c1149d6e0cb466c963276e6f8fe0c7cfd918bb9e75e4ff81d32a37f0049e1f93288b627692f5838ee43815c830b0c52a5b6688b81deeb16117d79d930a538a79c254d9345f52a7fa8971adfb188963853fa9d9e257f07522973f6a84b4e9a26e4fda2b2507f9f7e4884a351702c7bd52a749f0bfa79870e41d6d131e22cb0ca1d391e7271da17c0da9863c21b6b4f45e6a6b034088caaeacae9450d52b97a2a09727c183609ae978a9fa7f6f17763c4612874d38a486c475e511c989f1306ba6aee23b62b5a946c7c947f94f898376a"}, 0xdd, 0x3)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0)

21.922283154s ago: executing program 3 (id=395):
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x8)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800000, &(0x7f0000000380)=ANY=[], 0x1, 0x14fd, &(0x7f0000002a80)="$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")
mount(0x0, &(0x7f0000000140)='./bus\x00', 0x0, 0x1084, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x8840, 0xa2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12)
write(r1, &(0x7f0000000100)='?', 0x1)
sendfile(r1, r0, 0x0, 0x3ffff)

20.83040456s ago: executing program 3 (id=401):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000100)={[{@noload}, {@quota}, {@lazytime}, {@errors_remount}, {@quota}, {@quota}]}, 0x3, 0x443, &(0x7f0000000940)="$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")
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_pidfd_open(r2, 0x0)
setns(r3, 0x24020000)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000000000)={0x0, 0x87}, 0x20)

19.501632302s ago: executing program 3 (id=411):
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r0)
r2 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r1)
r3 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, r2)
r4 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
r5 = add_key$fscrypt_v1(&(0x7f0000000340), &(0x7f00000008c0)={'fscrypt:', @desc4}, &(0x7f0000000900)={0x0, "5f461e4b0db96f83431ee681659e20bb1e12396f138ec898d6d9a71880f3cf57ec36491338b1cc0689b08dcdaedbc6014e9d37cc520645c0f8c5f46caeb79e66", 0x1e}, 0x48, r4)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000880)='asymmetric\x00', &(0x7f0000000380)=@chain={'key_or_keyring:', r5})
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f00000003c0)='asymmetric\x00', &(0x7f0000000640)=@chain={'key_or_keyring:', r4})

16.827733486s ago: executing program 3 (id=424):
r0 = syz_usb_connect(0x0, 0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040b90661400001010203010902320002010080320904000000ff0000000904010000ff00000009040101"], 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040040)
syz_usb_control_io(r0, &(0x7f0000003000)={0x2c, &(0x7f0000004000)={0x0, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000)={0x0, 0x0, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

16.590628142s ago: executing program 33 (id=424):
r0 = syz_usb_connect(0x0, 0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040b90661400001010203010902320002010080320904000000ff0000000904010000ff00000009040101"], 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040040)
syz_usb_control_io(r0, &(0x7f0000003000)={0x2c, &(0x7f0000004000)={0x0, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000)={0x0, 0x0, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

11.946933083s ago: executing program 2 (id=454):
socket$key(0xf, 0x3, 0x2)
socket$key(0xf, 0x3, 0x2)
socket$key(0xf, 0x3, 0x2)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in=@local, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x28c, 0x1}, {0x7}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x12}, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)

10.948904897s ago: executing program 2 (id=459):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56561, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x0, 0xfe7d, 0xd, 0x2, 0x4, 0x9, 0x1}}, {0x6, 0x2, [0xfffc]}}]}]}, 0x5c}}, 0x8014)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
syz_mount_image$btrfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x810, &(0x7f0000000140)={[{@enospc_debug}, {@nodatacow}, {@enospc_debug}, {@nossd}, {@nodatasum}, {@notreelog}, {@discard_async}, {@max_inline={'max_inline', 0x3d, [0x78, 0x33, 0x70, 0x34, 0x70, 0x36]}}]}, 0x1, 0x50f3, &(0x7f0000000880)="$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")
sendto$inet(r3, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10)

9.377539555s ago: executing program 2 (id=468):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3000007, 0x401d031, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000002bc0)='task\x00')
getdents64(r0, &(0x7f0000002c00)=""/79, 0x4f)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
getdents(r0, 0x0, 0x3b)

7.943924619s ago: executing program 2 (id=478):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18f)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x20000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x6000, 0x0)

7.616072157s ago: executing program 2 (id=480):
timer_create(0x0, &(0x7f00000001c0)={0x0, 0x21, 0x2}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = syz_create_resource$futex(&(0x7f0000000000)=0x1)
r1 = syz_create_resource$futex(&(0x7f0000000080)=0x1)
futex(r1, 0xb, 0x1, 0x0, r0, 0x403)

6.597464391s ago: executing program 2 (id=483):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0x13, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x200000, &(0x7f0000200000/0x200000)=nil})
ioctl$KVM_CLEAR_DIRTY_LOG(r2, 0xc018aec0, &(0x7f00000001c0)={0x0, 0x200, 0x0, 0x0})

6.597339822s ago: executing program 34 (id=483):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0x13, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x200000, &(0x7f0000200000/0x200000)=nil})
ioctl$KVM_CLEAR_DIRTY_LOG(r2, 0xc018aec0, &(0x7f00000001c0)={0x0, 0x200, 0x0, 0x0})

4.99834599s ago: executing program 4 (id=492):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x400, @empty}}, 0x3, 0x0, 0x800, 0x0, 0x32, 0x81}, 0x9c)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f00000000c0)=0x6, 0x4)
setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

3.832395578s ago: executing program 4 (id=501):
r0 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0xa)
fchdir(r1)
chdir(&(0x7f00000000c0)='./sys\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./debug\x00', 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000340)='./debug/tracing/options/context-info\x00', 0x800, 0x0)

3.553479995s ago: executing program 0 (id=503):
setresgid(0x0, 0xee01, 0x0)
setuid(0xee01)
r0 = semget$private(0x0, 0x6, 0x1b5)
semop(r0, &(0x7f0000000040)=[{0x0, 0xff43}], 0x1)
getgroups(0x2, &(0x7f0000000000)=[0x0, <r1=>0xffffffffffffffff])
setfsgid(r1)
semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000bc0)={{0x1, 0xee00, 0x0, 0x0, 0x0, 0x1, 0xc}, 0x4857, 0xa80d, 0x0, 0x0, 0x0, 0x0, 0x7ff})
semop(r0, &(0x7f00000000c0)=[{0x4}], 0x1)

3.542049465s ago: executing program 5 (id=504):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000a52000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000080)="67f2e00d64360fae8197530f00cf64f75dd72e3edb3b0f38f173882e64640f01c5baf80c66b866878a8566efbafc0ced0fc72ff30fc7b30000", 0x39}], 0xaaaaaaaaaaaad33, 0x58, 0x0, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)={0x1, 0x0, [{0x80000019, 0x8, 0x4, 0x4, 0x3, 0x6, 0xfffffff8}]})
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3.261716232s ago: executing program 4 (id=505):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0)
getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x60, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_BURST={0x8, 0x6, 0x58}]}}]}, 0x60}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x7}, {}, {0x0, 0x7}}}, 0x24}}, 0x800)

3.217545103s ago: executing program 5 (id=506):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x0)

2.993657598s ago: executing program 5 (id=507):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2200000, &(0x7f0000000180)={[{@discard}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@dioread_nolock}]}, 0xb, 0x572, &(0x7f00000006c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80342, 0xcc)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r1, &(0x7f00000000c0)='^', 0xb2b1, 0x8000c61)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
sendfile(r1, r2, 0x0, 0xe3aa6ea)
ftruncate(r2, 0x6)

2.990302578s ago: executing program 7 (id=485):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4)
sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000)

2.710610765s ago: executing program 4 (id=508):
openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
syz_emit_ethernet(0xd6, &(0x7f0000000500)=ANY=[], 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x4900, 0x0)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0)
ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x2)

2.710435085s ago: executing program 6 (id=426):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000009c0)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000a00)=[@text64={0x40, &(0x7f0000000bc0)="0f01d13e66400f3801ea0f019c9ff22f0000c4c37914338f430f01c8c7442400beeb1a46c74424029d000000c7442406000000000f011c240f009c9c0f000000f20f70a2c7400933d066ba610066ba2100ecc7442400ed000000c74424023d000000c7442406000000000f011424", 0x6e}], 0x1, 0x2, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000a80)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

2.463849001s ago: executing program 0 (id=509):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x2383, @loopback}, 0x10)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x2383, @loopback}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xf, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0x6, &(0x7f0000000540)=ANY=[@ANYBLOB="18120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000c00b704000000000000850000003400000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@map=r1, r2, 0x5, 0x0, 0x0, @void, @value=0x0}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f0000000340), &(0x7f0000000380)=@tcp=r0}, 0x20)
sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000640)={0x14, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4008050}, 0x40080)

2.416998862s ago: executing program 5 (id=510):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x476c, 0x4)
setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000040)=0x6, 0x4)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300)
setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0x40, 0x4)
recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0)

2.392927523s ago: executing program 7 (id=485):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4)
sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000)

2.108647599s ago: executing program 4 (id=511):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file0\x00', 0x8c0, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x5, 0x4467, &(0x7f0000004480)="$eJzs3U9oZHcdAPDvexvbZG3XpO6hguCARUUlJD1VUzCbzW6adOPKaot4mZ0k093oJLMkE/FQMOKl4EnwIB6KgrecSm6e6kXw6MVjPS/owYsgFEdm5k0y702myS4zmyZ8PrB5837/Z77zfvN7h7e/NNN4uLlb2twtVbZL9fV3dl8t/bRe29uqRlr0l76UoThz/5yrUcRJ7M/P3Zu3v//2qxF/3vj742az2YyWsTjRbM/r//z73fXeY1fae/LLTrsntzYsP4qI633jarkSEePZ6xvZcSE7TkTEtYhIIuLtd391vzSk0XzwUfX18ser7x3OvbJy8P7h4PeeRPyu9oVvPtj655evzP3j60PqHgAAAAAAAAAAAAAAAACAC27p3t23vjczGx8mMXaQ9D+vu5QdBz0f2xyaL43+zQIAAAAAAAAAAAAAAAAAAMCn1PHz/6XkpROe/1/MjvM9aeM9r5vfOVs/XxnCWBm+5e/eXbw1M5vt/5705b+WJf3rxpWY6u6v/tfB+7/fKNQ/ef/3/n6eVmd8zZ93zycjSad7xjEZaTo9HfGHbOP3l5Oraa2+2/jGO/W97Y2hDePCyse/s3t/LjrZhv65+H/C/v8LhfZHv///5/u+Ta3z+8P7il1q+fhfGVjuj79IPiH+zx2Vu1mo9yziz9PLx3+snTbRW2C+MwG04v/rsdOv/8VC+6OK/7WIKCWtsZZyM0BrDdNKnx9Fp5dQPv6faaflps7sgxx0/f+3EP9bhfbPa/7fL/4QHXtutOO5WPLx73w047kSx9f/VHr69X+70P55xL81/n2//2eSj//zncSxXJH2J3nW+X+p0P6o4v9Wmo3zWpL7BhwknfRB/18defn4j/flH9//pWda/79RqP9s7v+O++3e/3Wn/68lnfs/TnYU/8N43GxODCx31ut/uVBv1PP/fHv91+e166Ps9BLJX/9X22n5tfNk+++g+DcL8V8ptP8U8f/TwLvQnt+l9qpkvBv/4/nkf8930n8/eP1Hj3z8P9tJTHtL7Lf/ttd/yenr/zcL7Z/H+q81/v10tL1eFvn4vzCwXCv+fzvD7/+dQr3Rxz9ipvsF6F++cIp8/F8cWK59/Y+fHv/VQr1Rx/+ro2wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4AJYyI6TkaTTufM0nZ6OuJmdvxxXk7XKRnmtVl//yW7EYpZeipeSB7X6WqVW3tyub1TLlVqtvh5xK8u/HuPJbq3eKG9VHt0+amsieVit7DTWqpVGRCxl6V+MF7ttrW02tiqPIuKNo7zPpfWdRw8r2+WNzZ1vz8zMzMTy0RimkurPGtXtRqf3Tm7EylHdyaRncO3sN4/G8kLy4/reznal1k6/01OnVl+v1HrqrGZ5v4mppLGzt71eaVTLtfqDbn8R8cNhxuZJzGfHxeV7P7h3Z7Yv/37SOS4822EBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8IQ+nPvWbyNirHOWRkQpyV4k2b+cDz6qvl7+ePW9w7lXVg7eP3x8UhkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhl/5RGgiiOAC/GQvt9BhWi9vZriiihSuCJ9BjeBg9ipfIHVKkSJsiBJJZCPsHtkmq72sezI+Z92AeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzPf80X6+39URKa62lxH/34vlcf5a6u/D+P2LM8zI6by8tY9P13X59zTI78vRqsn7dLP++YqR2vnr7Ul/nw6Gffqm9m1qvq7vTaRcRURT8tuUc1XNewsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAduzAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhB44FAAAAAIT5W0fRtwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC/AgAA//8g9CKf")
syz_mount_image$exfat(0x0, &(0x7f0000000540)='./bus\x00', 0x38c180a, 0x0, 0x0, 0x0, &(0x7f0000000240))
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x20842, 0x4)
fcntl$setstatus(r0, 0x4, 0x8e000)
read$FUSE(r0, &(0x7f0000000c40)={0x2020}, 0x2020)
openat(0xffffffffffffff9c, 0x0, 0x101001, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

2.103281639s ago: executing program 0 (id=512):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20)
r1 = accept4$alg(r0, 0x0, 0x0, 0x80000)
io_setup(0x4, &(0x7f0000000380)=<r2=>0x0)
sendmmsg(r1, &(0x7f0000004840)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000003c0)="a65b", 0x2}], 0x1}}], 0x1, 0x200080c0)
sendmsg$alg(r1, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x4000840)
io_submit(r2, 0x27f, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0x41}])

2.102002189s ago: executing program 6 (id=426):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000009c0)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000a00)=[@text64={0x40, &(0x7f0000000bc0)="0f01d13e66400f3801ea0f019c9ff22f0000c4c37914338f430f01c8c7442400beeb1a46c74424029d000000c7442406000000000f011c240f009c9c0f000000f20f70a2c7400933d066ba610066ba2100ecc7442400ed000000c74424023d000000c7442406000000000f011424", 0x6e}], 0x1, 0x2, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000a80)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

1.715269158s ago: executing program 7 (id=485):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4)
sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000)

1.404894706s ago: executing program 0 (id=513):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000001a0)={'wlan1\x00', @ifru_flags})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r3=>0x0})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000001c0)={'wlan1\x00', @ifru_flags=0x1})

1.403254846s ago: executing program 6 (id=426):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000009c0)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000a00)=[@text64={0x40, &(0x7f0000000bc0)="0f01d13e66400f3801ea0f019c9ff22f0000c4c37914338f430f01c8c7442400beeb1a46c74424029d000000c7442406000000000f011c240f009c9c0f000000f20f70a2c7400933d066ba610066ba2100ecc7442400ed000000c74424023d000000c7442406000000000f011424", 0x6e}], 0x1, 0x2, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000a80)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

1.107379793s ago: executing program 5 (id=514):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mremap(&(0x7f0000d5d000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
ptrace(0x10, r0)
ptrace$setregs(0xd, r0, 0xfffffffffffffffc, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb")
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00002b3000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={0x0})

1.070905464s ago: executing program 7 (id=485):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4)
sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000)

871.554108ms ago: executing program 0 (id=515):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001240), 0x2702, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000012c0)={0x2})
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000001380)={0x0, 0x0, @pic={0x0, 0x3, 0x6, 0x10, 0x5, 0x6, 0x6, 0x7, 0x3, 0x9, 0xff, 0x7, 0x64, 0xf6, 0x3, 0x9}})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000015c0)={[0xcb, 0xd, 0x1, 0x6d, 0x2, 0x1002, 0xf1, 0x200, 0x7fffffffffffb, 0x8d, 0xffbffffffffffffe, 0x1, 0xfffffffffffffffe, 0x5, 0x3, 0xbde], 0x1000, 0x67a64fa265d09613})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

867.976049ms ago: executing program 6 (id=426):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000009c0)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000a00)=[@text64={0x40, &(0x7f0000000bc0)="0f01d13e66400f3801ea0f019c9ff22f0000c4c37914338f430f01c8c7442400beeb1a46c74424029d000000c7442406000000000f011c240f009c9c0f000000f20f70a2c7400933d066ba610066ba2100ecc7442400ed000000c74424023d000000c7442406000000000f011424", 0x6e}], 0x1, 0x2, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000a80)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

690.669013ms ago: executing program 4 (id=516):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000c00)=ANY=[], 0x1, 0x6e5, &(0x7f0000000680)="$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")
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1, 0x1)
syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x2a0000a, 0x0, 0x0, 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file0/file0\x00', 0xc0040, 0x2c)
unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x200)
close_range(r0, 0xffffffffffffffff, 0x0)

689.668743ms ago: executing program 7 (id=485):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4)
sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000)

418.45789ms ago: executing program 6 (id=426):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000009c0)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000a00)=[@text64={0x40, &(0x7f0000000bc0)="0f01d13e66400f3801ea0f019c9ff22f0000c4c37914338f430f01c8c7442400beeb1a46c74424029d000000c7442406000000000f011c240f009c9c0f000000f20f70a2c7400933d066ba610066ba2100ecc7442400ed000000c74424023d000000c7442406000000000f011424", 0x6e}], 0x1, 0x2, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000a80)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

195.525495ms ago: executing program 0 (id=517):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]})
close_range(r0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0)
r3 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)
ioctl$FE_SET_PROPERTY(r3, 0x40106f52, &(0x7f0000000380)={0xa, &(0x7f00000000c0)=[{0x20, '\x00', @data, 0xfff}]})

195.319645ms ago: executing program 7 (id=485):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4)
sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000)

8.863549ms ago: executing program 5 (id=518):
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)
rt_sigprocmask(0x2, &(0x7f0000000340)={[0xffffffffffffffff]}, 0x0, 0x8)
syz_clone3(&(0x7f0000000600)={0x100000000, 0x0, 0x0, 0x0, {0xe}, 0x0, 0x0, 0x0, 0x0}, 0x58)
rt_sigtimedwait(&(0x7f0000000040)={[0xfffffffffffffffb]}, 0x0, 0x0, 0x8)
fchdir(0xffffffffffffffff)
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000001900), 0x0, 0x0)
read$hidraw(r0, &(0x7f00000008c0)=""/257, 0x101)

0s ago: executing program 6 (id=426):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000009c0)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000a00)=[@text64={0x40, &(0x7f0000000bc0)="0f01d13e66400f3801ea0f019c9ff22f0000c4c37914338f430f01c8c7442400beeb1a46c74424029d000000c7442406000000000f011c240f009c9c0f000000f20f70a2c7400933d066ba610066ba2100ecc7442400ed000000c74424023d000000c7442406000000000f011424", 0x6e}], 0x1, 0x2, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000a80)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

kernel console output (not intermixed with test programs):

h parent 'hsr' already present!
[   65.610981][ T4190] Cannot create hsr debugfs directory
[   65.690497][ T4196] device hsr_slave_0 entered promiscuous mode
[   65.702123][ T4196] device hsr_slave_1 entered promiscuous mode
[   65.709046][ T4196] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   65.719610][ T4196] Cannot create hsr debugfs directory
[   65.742211][ T3850] infiniband rxe0: set active
[   65.766188][ T4184] chnl_net:caif_netlink_parms(): no params data found
[   65.777271][ T4191] rxe_eth0 speed is unknown, defaulting to 1000
[   65.967821][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.975071][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.982772][ T4184] device bridge_slave_0 entered promiscuous mode
[   65.991160][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.998700][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.007296][ T4184] device bridge_slave_1 entered promiscuous mode
[   66.044799][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.076341][ T4188] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   66.094422][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.110871][ T4188] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   66.132997][ T4188] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   66.143393][ T4184] team0: Port device team_slave_0 added
[   66.151418][ T4184] team0: Port device team_slave_1 added
[   66.164360][ T4188] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   66.190170][ T4195] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   66.203338][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.210861][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.237109][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.258493][ T4195] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   66.268227][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.275897][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.302100][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.318468][ T4195] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   66.331681][ T4195] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   66.387455][ T4184] device hsr_slave_0 entered promiscuous mode
[   66.395192][ T4184] device hsr_slave_1 entered promiscuous mode
[   66.401781][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   66.410518][ T4184] Cannot create hsr debugfs directory
[   66.418898][ T4190] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   66.434952][ T4190] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   66.444507][ T4190] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   66.485712][ T4190] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   66.576142][ T4196] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   66.598925][ T4196] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   66.608016][ T4196] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   66.635483][ T4196] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   66.660477][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.718299][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   66.727669][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   66.741074][ T4188] 8021q: adding VLAN 0 to HW filter on device team0
[   66.766898][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.781178][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.791532][ T4184] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   66.805728][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   66.815595][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   66.825370][  T144] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.832603][  T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.856679][ T4184] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   66.867929][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   66.876618][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   66.888254][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   66.897524][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   66.905454][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   66.918007][ T4195] 8021q: adding VLAN 0 to HW filter on device team0
[   66.926467][ T4184] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   66.937332][ T4190] 8021q: adding VLAN 0 to HW filter on device team0
[   66.947355][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   66.956339][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   66.966834][  T144] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.973935][  T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.982587][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   66.997589][ T4184] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   67.013375][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   67.022312][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   67.031258][  T144] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.038368][  T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.047304][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   67.056137][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   67.064945][  T144] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.072128][  T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.079842][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   67.089429][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   67.098318][  T144] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.105424][  T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.113541][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   67.122155][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   67.138722][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   67.148172][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   67.157204][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.164363][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.172153][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   67.187056][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   67.196418][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   67.222205][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.243414][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   67.252653][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   67.262553][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   67.273018][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   67.282400][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   67.292244][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   67.301487][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   67.310656][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   67.320142][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   67.330383][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   67.338776][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   67.349996][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   67.358935][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   67.367353][ T4279] Bluetooth: hci4: command 0x041b tx timeout
[   67.381126][ T4196] 8021q: adding VLAN 0 to HW filter on device team0
[   67.387871][ T4279] Bluetooth: hci2: command 0x041b tx timeout
[   67.393993][ T4279] Bluetooth: hci0: command 0x041b tx timeout
[   67.400558][ T4279] Bluetooth: hci3: command 0x041b tx timeout
[   67.407455][ T4279] Bluetooth: hci1: command 0x041b tx timeout
[   67.417405][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   67.426379][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   67.434944][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   67.443545][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   67.475961][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   67.485610][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   67.494866][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   67.503412][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   67.512700][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   67.521703][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   67.530856][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.537969][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.547432][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   67.556401][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   67.565054][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.572138][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.579963][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   67.588962][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   67.597941][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   67.606729][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   67.620067][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   67.638500][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   67.650408][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   67.667752][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   67.681099][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   67.692347][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   67.706758][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   67.719379][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   67.730613][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   67.744178][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   67.785776][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   67.813313][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   67.828597][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   67.840572][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   67.853405][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   67.864734][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   67.873462][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   67.888364][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   67.902733][ T4195] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   67.914673][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   67.926923][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   67.946133][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   67.954511][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   67.963035][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   67.988801][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0
[   68.001075][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   68.014167][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   68.032926][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.058749][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   68.080733][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   68.116914][ T4184] 8021q: adding VLAN 0 to HW filter on device team0
[   68.157156][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   68.175458][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   68.190650][  T154] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.197775][  T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.212015][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   68.221354][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   68.240086][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   68.253253][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   68.263422][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   68.309509][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   68.318481][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   68.336621][ T4290] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.343711][ T4290] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.357896][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   68.367164][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   68.376630][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   68.385480][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   68.393988][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   68.417735][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.439076][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   68.447808][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   68.457166][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   68.467917][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   68.476720][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   68.486140][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   68.494901][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   68.503257][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   68.512446][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   68.520175][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   68.527931][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   68.535774][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   68.543212][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   68.551705][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   68.570115][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.582188][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.601081][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   68.610497][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   68.626685][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   68.642265][ T4188] device veth0_vlan entered promiscuous mode
[   68.699846][ T4188] device veth1_vlan entered promiscuous mode
[   68.714007][ T4190] device veth0_vlan entered promiscuous mode
[   68.726979][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   68.739762][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   68.753582][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   68.770415][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   68.781852][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   68.790727][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   68.800106][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   68.828833][ T4190] device veth1_vlan entered promiscuous mode
[   68.867990][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   68.883528][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   68.892602][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   68.902193][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   68.911766][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   68.920966][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   68.936612][ T4195] device veth0_vlan entered promiscuous mode
[   68.947773][ T4188] device veth0_macvtap entered promiscuous mode
[   68.970069][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   68.979095][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   68.989658][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   68.999822][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   69.021091][ T4188] device veth1_macvtap entered promiscuous mode
[   69.040413][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   69.051332][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   69.065072][ T4195] device veth1_vlan entered promiscuous mode
[   69.083693][ T4190] device veth0_macvtap entered promiscuous mode
[   69.117406][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   69.133233][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   69.142232][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   69.158124][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   69.167093][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   69.177172][ T4190] device veth1_macvtap entered promiscuous mode
[   69.191940][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0
[   69.203637][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1
[   69.214309][ T4195] device veth0_macvtap entered promiscuous mode
[   69.232910][ T4188] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.241948][ T4188] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.250987][ T4188] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.260010][ T4188] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.271357][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   69.281246][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   69.289814][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   69.299477][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   69.309051][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   69.319039][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   69.332051][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0
[   69.349651][ T4195] device veth1_macvtap entered promiscuous mode
[   69.371863][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   69.383364][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.396363][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0
[   69.403708][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   69.414862][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   69.423668][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   69.444636][ T4277] Bluetooth: hci1: command 0x040f tx timeout
[   69.453222][ T4277] Bluetooth: hci3: command 0x040f tx timeout
[   69.459840][ T4277] Bluetooth: hci0: command 0x040f tx timeout
[   69.466389][ T4277] Bluetooth: hci2: command 0x040f tx timeout
[   69.472452][ T4277] Bluetooth: hci4: command 0x040f tx timeout
[   69.489187][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   69.498329][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   69.511819][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   69.521387][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   69.539767][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   69.550806][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.560728][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   69.571968][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.583625][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0
[   69.611447][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   69.627764][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   69.639444][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   69.650308][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.662832][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1
[   69.670682][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   69.681223][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.692422][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   69.703174][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.714747][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1
[   69.726436][ T4190] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.737312][ T4190] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.746497][ T4190] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.756117][ T4190] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.783860][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   69.793275][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   69.802487][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   69.812639][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   69.825344][ T4195] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.834694][ T4195] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.843433][ T4195] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.857324][ T4195] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.873087][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   69.882580][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   69.920724][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   69.929436][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   69.943512][ T4196] device veth0_vlan entered promiscuous mode
[   69.958700][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.971291][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   69.980518][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.989300][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   69.998827][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   70.007237][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   70.015595][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   70.023495][ T4184] device veth0_vlan entered promiscuous mode
[   70.082706][ T4196] device veth1_vlan entered promiscuous mode
[   70.101255][ T4184] device veth1_vlan entered promiscuous mode
[   70.120663][ T1403] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.134808][ T1403] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.164271][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   70.248404][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   70.274982][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   70.291049][ T4196] device veth0_macvtap entered promiscuous mode
[   70.304410][ T1403] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.312269][ T1403] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.335536][ T4184] device veth0_macvtap entered promiscuous mode
[   70.354590][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   70.363216][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   70.372332][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   70.381240][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   70.389560][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   70.420442][ T4184] device veth1_macvtap entered promiscuous mode
[   70.433591][ T4290] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.445753][ T4290] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.464923][ T4196] device veth1_macvtap entered promiscuous mode
[   70.478051][ T4290] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.492095][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   70.499615][ T4290] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.502976][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   70.523779][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   70.532501][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   70.580707][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   70.599011][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.609584][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   70.620201][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.630697][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   70.641917][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.661724][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0
[   70.673114][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.684541][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.695456][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.706288][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.717832][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.729889][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.741506][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1
[   70.751984][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.758275][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   70.771519][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.781684][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   70.792760][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.794915][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.804100][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   70.821910][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.842185][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   70.858554][ T4321] process 'syz.3.7' launched '/dev/fd/4' with NULL argv: empty string added
[   70.867402][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.883241][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0
[   70.900507][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   70.912178][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   70.930979][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   70.943404][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   70.953127][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   70.962556][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   70.972497][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   70.998049][ T4184] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   71.015644][ T4184] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   71.030336][ T4184] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   71.039787][ T4184] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   71.071352][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   71.087300][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.102970][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   71.119563][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.135434][ T1427] ieee802154 phy0 wpan0: encryption failed: -22
[   71.141945][ T1427] ieee802154 phy1 wpan1: encryption failed: -22
[   71.157843][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   71.168974][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.178985][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   71.189635][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.202940][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1
[   71.231636][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   71.253929][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   71.276285][ T4196] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   71.305976][ T4196] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   71.324103][ T4196] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   71.342851][ T4196] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   71.522652][ T1403] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.525780][ T4279] Bluetooth: hci4: command 0x0419 tx timeout
[   71.544468][ T1403] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.555866][ T4279] Bluetooth: hci2: command 0x0419 tx timeout
[   71.568572][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   71.583409][ T4279] Bluetooth: hci0: command 0x0419 tx timeout
[   71.589719][ T4290] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.617815][ T4279] Bluetooth: hci3: command 0x0419 tx timeout
[   71.630849][ T4279] Bluetooth: hci1: command 0x0419 tx timeout
[   71.636896][ T4290] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.671603][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   71.707132][ T1403] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.719369][ T4290] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.734172][ T4290] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.741812][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   71.756173][ T1403] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.793624][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   71.888957][ T4341] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   72.039928][ T4347] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'.
[   72.227431][ T4352] batman_adv: batadv0: Adding interface: syzkaller0
[   72.250688][ T4352] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.350345][ T4352] batman_adv: batadv0: Interface activated: syzkaller0
[   72.403996][ T4348] batman_adv: batadv0: Interface deactivated: syzkaller0
[   72.463811][ T4348] batman_adv: batadv0: Removing interface: syzkaller0
[   72.523379][ T4334] loop3: detected capacity change from 0 to 32768
[   73.212535][ T4368] netlink: 128 bytes leftover after parsing attributes in process `syz.2.19'.
[   74.034181][ T1108] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   74.449748][ T1108] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   74.481288][ T1108] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   74.531226][ T1108] usb 5-1: config 0 interface 0 has no altsetting 0
[   74.604763][ T1108] usb 5-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00
[   74.613848][ T1108] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   74.725338][ T1108] usb 5-1: config 0 descriptor??
[   74.883839][ T4400] loop3: detected capacity change from 0 to 512
[   74.922282][ T4400] =======================================================
[   74.922282][ T4400] WARNING: The mand mount option has been deprecated and
[   74.922282][ T4400]          and is ignored by this kernel. Remove the mand
[   74.922282][ T4400]          option from the mount to silence this warning.
[   74.922282][ T4400] =======================================================
[   75.251585][ T4402] loop3: detected capacity change from 0 to 128
[   75.401944][ T4398] loop0: detected capacity change from 0 to 32768
[   75.414405][ T1108] sony 0003:054C:0268.0001: failed to retrieve feature report 0xf2 with the Sixaxis MAC address
[   75.477114][ T4396] loop1: detected capacity change from 0 to 40427
[   75.480077][ T1108] sony 0003:054C:0268.0001: hiddev0,hidraw0: USB HID v80.00 Joystick [HID 054c:0268] on usb-dummy_hcd.4-1/input0
[   75.522482][ T4402] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   75.539142][ T4396] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504)
[   75.556199][ T4396] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   75.566169][ T4396] F2FS-fs (loop1): build fault injection attr: rate: 2, type: 0x1ffff
[   75.574544][ T4396] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x1f8
[   75.586080][ T4402] ext4 filesystem being mounted at /6/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   75.601609][ T4398] JBD2: Ignoring recovery information on journal
[   75.609264][ T4396] F2FS-fs (loop1): invalid crc value
[   75.636728][ T4396] F2FS-fs (loop1): Found nat_bits in checkpoint
[   75.638834][ T1108] sony 0003:054C:0268.0001: failed to claim input
[   75.667127][ T1108] usb 5-1: USB disconnect, device number 2
[   75.838638][ T4398] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[   75.987313][ T4396] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   76.024502][ T4396] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   76.056483][ T4411] fido_id[4411]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[   76.256951][   T26] audit: type=1804 audit(1792107335.141:2): pid=4398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.31" name="/newroot/2/bus/file1" dev="loop0" ino=17059 res=1 errno=0
[   76.353008][ T4418] overlayfs: upper fs does not support file handles, falling back to index=off.
[   76.369675][ T4416] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #0 has bad signature 
[   76.432735][ T4415] netlink: 4 bytes leftover after parsing attributes in process `syz.4.34'.
[   76.523408][ T4416] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[   76.546726][ T4416] OCFS2: File system is now read-only.
[   76.552830][ T4416] (syz.0.31,4416,0):_ocfs2_free_suballoc_bits:2511 ERROR: status = -30
[   76.569827][ T4416] (syz.0.31,4416,0):_ocfs2_free_clusters:2605 ERROR: status = -30
[   76.578042][ T4416] (syz.0.31,4416,0):ocfs2_sync_local_to_main:1001 ERROR: status = -30
[   76.588003][ T4416] (syz.0.31,4416,0):ocfs2_sync_local_to_main:1013 ERROR: status = -30
[   76.636218][ T4416] (syz.0.31,4416,0):ocfs2_local_alloc_slide_window:1295 ERROR: status = -30
[   76.647296][ T4416] (syz.0.31,4416,0):ocfs2_local_alloc_slide_window:1321 ERROR: status = -30
[   76.658140][ T4416] (syz.0.31,4416,0):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -30
[   76.669417][ T4416] (syz.0.31,4416,0):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30
[   76.710218][ T4416] (syz.0.31,4416,0):ocfs2_reserve_clusters_with_limit:1188 ERROR: status = -30
[   76.723829][ T4416] (syz.0.31,4416,0):ocfs2_reserve_clusters_with_limit:1237 ERROR: status = -30
[   76.739910][ T4416] (syz.0.31,4416,0):ocfs2_lock_refcount_allocators:2908 ERROR: status = -30
[   76.749115][ T4416] (syz.0.31,4416,0):ocfs2_make_clusters_writable:3254 ERROR: status = -30
[   76.813940][ T4416] (syz.0.31,4416,0):ocfs2_replace_cow:3414 ERROR: status = -30
[   76.833284][ T4416] (syz.0.31,4416,0):ocfs2_refcount_cow_hunk:3489 ERROR: status = -30
[   76.857177][ T4416] (syz.0.31,4416,0):ocfs2_refcount_cow:3533 ERROR: status = -30
[   76.885432][ T4416] (syz.0.31,4416,0):ocfs2_prepare_inode_for_write:2348 ERROR: status = -30
[   76.915298][ T4416] (syz.0.31,4416,0):ocfs2_file_write_iter:2457 ERROR: status = -30
[   77.008210][ T4427] loop2: detected capacity change from 0 to 2048
[   77.022809][ T4429] syz.4.39 uses obsolete (PF_INET,SOCK_PACKET)
[   77.062806][ T4190] ocfs2: Unmounting device (7,0) on (node local)
[   77.231482][ T4433] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   77.294247][ T4427] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   77.533870][ T4446] fuse: root generation should be zero
[   77.620107][ T4457] loop3: detected capacity change from 0 to 16
[   77.661737][ T4456] EXT4-fs error (device loop2): swap_inode_boot_loader:128: comm syz.2.38: inode #5: comm syz.2.38: iget: illegal inode #
[   77.759204][ T4457] erofs: (device loop3): mounted with root inode @ nid 36.
[   77.807838][ T4457] erofs: (device loop3): z_erofs_get_extent_decompressedlen: unknown type 3 @ lcn 1740 of nid 36
[   77.854697][ T4466] Illegal XDP return value 4294967262, expect packet loss!
[   78.168285][ T4474] loop3: detected capacity change from 0 to 512
[   78.216416][ T4280] rxe_eth0 speed is unknown, defaulting to 1000
[   78.270252][ T4474] EXT4-fs error (device loop3): ext4_get_journal_inode:5187: comm syz.3.46: inode #2147418112: comm syz.3.46: iget: illegal inode #
[   78.329283][ T4474] EXT4-fs (loop3): no journal found
[   78.364138][ T4474] EXT4-fs (loop3): can't get journal size
[   78.411980][ T4474] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended
[   78.435636][ T4474] EXT4-fs (loop3): Errors on filesystem, clearing orphan list.
[   78.474965][ T4474] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,resuid=0x0000000000000000,nodioread_nolock,noload,nobarrier,noinit_itable,,errors=continue. Quota mode: none.
[   78.564254][ T4278] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   78.627196][ T4474] EXT4-fs error (device loop3): __ext4_get_inode_loc:4334: comm syz.3.46: Invalid inode table block 3868918324 in block_group 0
[   78.657735][ T4484] kvm: MONITOR instruction emulated as NOP!
[   78.844972][ T4278] usb 1-1: Using ep0 maxpacket: 32
[   78.994625][ T4278] usb 1-1: config 0 has no interfaces?
[   79.184391][ T4278] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   79.194676][ T4278] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   79.202694][ T4278] usb 1-1: Product: syz
[   79.237464][ T4278] usb 1-1: Manufacturer: syz
[   79.242116][ T4278] usb 1-1: SerialNumber: syz
[   79.296669][ T4278] usb 1-1: config 0 descriptor??
[   79.447849][    C1] net_ratelimit: 67 callbacks suppressed
[   79.491158][ T4519] netlink: 'syz.1.58': attribute type 4 has an invalid length.
[   79.552345][ T4521] netlink: 'syz.1.58': attribute type 4 has an invalid length.
[   79.592314][ T1108] usb 1-1: USB disconnect, device number 2
[   80.324246][ T1108] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   80.714904][ T4278] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   80.736670][ T1108] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   80.756443][ T1108] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[   80.787272][ T1108] usb 2-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00
[   80.810162][ T1108] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   80.945659][ T4559] netlink: 24 bytes leftover after parsing attributes in process `syz.4.71'.
[   81.107629][ T4191] usb 2-1: USB disconnect, device number 2
[   81.164452][ T4278] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   81.184194][ T4278] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   81.195298][ T4278] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   81.215062][ T4278] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   81.244233][ T4278] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[   81.261421][ T4278] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   81.592691][ T4561] loop2: detected capacity change from 0 to 32768
[   81.785323][ T4561] XFS (loop2): Mounting V5 Filesystem
[   81.851996][ T4586] netlink: 24 bytes leftover after parsing attributes in process `syz.1.79'.
[   81.933104][ T4561] XFS (loop2): Ending clean mount
[   81.966209][ T4589] FAULT_INJECTION: forcing a failure.
[   81.966209][ T4589] name fail_futex, interval 1, probability 0, space 0, times 1
[   81.984121][ T4561] XFS (loop2): Quotacheck needed: Please wait.
[   82.022843][ T4592] capability: warning: `syz.1.81' uses 32-bit capabilities (legacy support in use)
[   82.056420][ T4589] CPU: 1 PID: 4589 Comm: syz.4.80 Not tainted syzkaller #0
[   82.063673][ T4589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   82.066579][ T4561] XFS (loop2): Quotacheck: Done.
[   82.073766][ T4589] Call Trace:
[   82.073776][ T4589]  <TASK>
[   82.073786][ T4589]  dump_stack_lvl+0x188/0x250
[   82.089685][ T4589]  ? show_regs_print_info+0x20/0x20
[   82.094923][ T4589]  ? load_image+0x410/0x410
[   82.099467][ T4589]  ? _raw_write_unlock+0x24/0x40
[   82.104567][ T4589]  ? keyring_instantiate+0x1c2/0x1f0
[   82.109913][ T4589]  should_fail+0x383/0x4b0
[   82.114375][ T4589]  get_futex_key+0x1a1/0x12d0
[   82.119091][ T4589]  ? __lock_acquire+0x13b3/0x7d40
[   82.124165][ T4589]  ? futex_wait_restart+0x250/0x250
[   82.129401][ T4589]  futex_wake+0x101/0x540
[   82.133765][ T4589]  ? futex_wait+0x680/0x680
[   82.138298][ T4589]  ? verify_lock_unused+0x140/0x140
[   82.143532][ T4589]  ? verify_lock_unused+0x140/0x140
[   82.148796][ T4589]  do_futex+0xd83/0x12b0
[   82.153071][ T4589]  ? __se_sys_keyctl+0x93e/0xa20
[   82.158061][ T4589]  ? __se_sys_keyctl+0x93e/0xa20
[   82.163048][ T4589]  ? futex_exit_release+0x1c0/0x1c0
[   82.168285][ T4589]  ? __context_tracking_exit+0x4c/0x80
[   82.173812][ T4589]  __se_sys_futex+0x389/0x420
[   82.178535][ T4589]  ? __x64_sys_futex+0xf0/0xf0
[   82.183339][ T4589]  ? __x64_sys_futex+0x1d/0xf0
[   82.188137][ T4589]  do_syscall_64+0x4c/0xa0
[   82.192580][ T4589]  ? clear_bhb_loop+0x30/0x80
[   82.197284][ T4589]  ? clear_bhb_loop+0x30/0x80
[   82.201995][ T4589]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   82.207971][ T4589] RIP: 0033:0x7f2f5e399559
[   82.212431][ T4589] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   82.232060][ T4589] RSP: 002b:00007f2f5c5f10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[   82.232090][ T4589] RAX: ffffffffffffffda RBX: 00007f2f5e620fa8 RCX: 00007f2f5e399559
[   82.232107][ T4589] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2f5e620fac
[   82.232122][ T4589] RBP: 00007f2f5e620fa0 R08: 0036b591ab342d58 R09: 0000000000000000
[   82.232137][ T4589] R10: 000000002a1b8677 R11: 0000000000000246 R12: 0000000000000000
[   82.232152][ T4589] R13: 00007f2f5e621038 R14: 00007fffe1a5d5e0 R15: 00007fffe1a5d6c8
[   82.232184][ T4589]  </TASK>
[   82.370137][ T4561] ODEBUG: Out of memory. ODEBUG disabled
[   82.533720][ T4278] [drm] Initialized gud 1.0.0 20200422 for 1-1:1.0 on minor 2
[   83.166376][ T4278] gud 1-1:1.0: [drm] Cannot find any crtc or sizes
[   83.226826][ T4278] usb 1-1: USB disconnect, device number 3
[   83.562361][ T4608] netlink: 'syz.1.88': attribute type 4 has an invalid length.
[   83.589982][ T4191] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   83.844425][ T4191] usb 4-1: Using ep0 maxpacket: 16
[   84.138486][ T4195] XFS (loop2): Unmounting Filesystem
[   84.144665][ T4191] usb 4-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85
[   84.153725][ T4191] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   84.166926][ T4614] Zero length message leads to an empty skb
[   84.224004][ T4191] usb 4-1: Product: syz
[   84.228947][ T4191] usb 4-1: Manufacturer: syz
[   84.233552][ T4191] usb 4-1: SerialNumber: syz
[   84.319813][ T4191] usb 4-1: config 0 descriptor??
[   84.399106][ T4191] usb 4-1: selecting invalid altsetting 1
[   84.424074][ T4191] technisat-usb2: could not set alternate setting to 0
[   84.617905][ T4191] technisat-usb2: firmware version: 0.0
[   84.625843][ T4191] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state.
[   84.814074][    C1] net_ratelimit: 60 callbacks suppressed
[   84.948339][ T4615] loop0: detected capacity change from 0 to 40427
[   85.043808][ T4615] F2FS-fs (loop0): Invalid SB checksum offset: 0
[   85.063837][ T4615] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[   85.079433][ T4191] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[   85.132421][ T4615] F2FS-fs (loop0): invalid crc_offset: 1
[   85.145194][ T4191] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2))
[   85.166377][ T4191] usb 4-1: media controller created
[   85.188566][ T4191] technisat-usb2: i2c-error: out failed 53 = -22
[   85.203817][ T4615] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[   85.234114][ T4191] dvb-usb: MAC address reading failed.
[   85.316119][ T4603] technisat-usb2: i2c TX buffer can't exceed 62 bytes (dev 0x00)
[   85.348039][ T4603] technisat-usb2: i2c RX buffer can't exceed 62 bytes (dev 0x00)
[   85.369399][ T4603] technisat-usb2: i2c-error: out failed 00 = -22
[   85.438236][ T4615] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0
[   85.449570][ T4615] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   85.521083][ T4191] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   85.797697][ T4615] attempt to access beyond end of device
[   85.797697][ T4615] loop0: rw=16812033, want=78672, limit=40427
[   85.827401][ T4191] DVB: Unable to find symbol stv090x_attach()
[   85.852308][ T4191] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)'
[   86.034415][ T4191] rc_core: IR keymap rc-technisat-usb2 not found
[   86.036478][ T4190] attempt to access beyond end of device
[   86.036478][ T4190] loop0: rw=2049, want=45104, limit=40427
[   86.040791][ T4191] Registered IR keymap rc-empty
[   86.139459][ T4191] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0
[   86.219290][ T4191] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input6
[   86.267906][ T4191] dvb-usb: schedule remote query interval to 100 msecs.
[   86.344410][ T4191] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected.
[   86.416748][ T4191] usb 4-1: USB disconnect, device number 2
[   86.488116][    T7] cfg80211: failed to load regulatory.db
[   86.508817][ T4668] netlink: 12 bytes leftover after parsing attributes in process `syz.2.108'.
[   86.810297][ T4191] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected.
[   86.894426][ T4668] netlink: 92 bytes leftover after parsing attributes in process `syz.2.108'.
[   87.142902][ T4681] netlink: 'syz.1.112': attribute type 1 has an invalid length.
[   87.238677][ T4681] netlink: 'syz.1.112': attribute type 4 has an invalid length.
[   87.274675][ T4681] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.112'.
[   87.355207][ T4685] netlink: 'syz.1.112': attribute type 1 has an invalid length.
[   87.362901][ T4685] netlink: 'syz.1.112': attribute type 4 has an invalid length.
[   87.442332][ T4685] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.112'.
[   88.264169][    T7] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   88.569542][ T4717] netlink: 'syz.3.127': attribute type 1 has an invalid length.
[   88.634485][    T7] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[   88.664180][    T7] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[   88.711673][    T7] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   88.752021][    T7] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[   88.780900][    T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   88.899358][    T7] usb 1-1: invalid MIDI out EP 0
[   89.091980][ T4718] device veth0_virt_wifi entered promiscuous mode
[   89.235936][    T7] snd-usb-audio: probe of 1-1:27.0 failed with error -22
[   89.313248][ T4177] udevd[4177]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   89.810159][ T1110] usb 1-1: USB disconnect, device number 4
[   90.005151][    C1] net_ratelimit: 38 callbacks suppressed
[   90.179646][ T4737] loop2: detected capacity change from 0 to 8192
[   90.217254][ T4184] syz-executor (4184) used greatest stack depth: 20912 bytes left
[   90.316340][ T4737] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal
[   90.378139][  T154] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.423843][ T4737] REISERFS (device loop2): using ordered data mode
[   90.447664][ T4737] reiserfs: using flush barriers
[   90.485280][ T4737] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   90.524783][ T4737] REISERFS (device loop2): checking transaction log (loop2)
[   90.639820][ T4741] loop0: detected capacity change from 0 to 128
[   90.774650][  T154] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.823232][   T26] audit: type=1800 audit(1792107349.701:3): pid=4741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.137" name="bus" dev="loop0" ino=1048630 res=0 errno=0
[   90.982187][  T154] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.073559][ T4737] REISERFS (device loop2): Using tea hash to sort names
[   91.129474][ T4737] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[   91.168248][  T154] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.289481][ T4747] netlink: 8 bytes leftover after parsing attributes in process `syz.4.139'.
[   91.450540][ T4749] fuse: Bad value for 'fd'
[   91.546588][ T4744] rxe_eth0 speed is unknown, defaulting to 1000
[   92.748477][ T4743] loop0: detected capacity change from 0 to 40427
[   92.811842][ T4743] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[   92.868888][ T4743] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   92.930028][ T4743] F2FS-fs (loop0): invalid crc value
[   93.000270][ T4743] F2FS-fs (loop0): Found nat_bits in checkpoint
[   93.171229][ T4744] chnl_net:caif_netlink_parms(): no params data found
[   93.182996][ T4743] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[   93.197013][ T4743] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   93.204977][ T4279] Bluetooth: hci0: command 0x0409 tx timeout
[   93.466894][ T4799] fuse: Bad value for 'fd'
[   93.536499][   T26] audit: type=1804 audit(1792107352.411:4): pid=4743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.138" name="/newroot/14/file0/bus" dev="loop0" ino=10 res=1 errno=0
[   94.081511][ T4744] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.096772][ T4744] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.139119][ T4744] device bridge_slave_0 entered promiscuous mode
[   94.212714][ T4744] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.242267][ T4744] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.289751][ T4744] device bridge_slave_1 entered promiscuous mode
[   94.555696][ T4744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   94.624835][ T4744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   94.936849][ T4744] team0: Port device team_slave_0 added
[   94.990019][ T4744] team0: Port device team_slave_1 added
[   95.072567][  T154] device hsr_slave_0 left promiscuous mode
[   95.112925][  T154] device hsr_slave_1 left promiscuous mode
[   95.156249][  T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   95.184282][  T154] batman_adv: batadv0: Removing interface: batadv_slave_0
[   95.204079][    C1] net_ratelimit: 66 callbacks suppressed
[   95.241177][  T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   95.264086][  T154] batman_adv: batadv0: Removing interface: batadv_slave_1
[   95.284169][    T7] Bluetooth: hci0: command 0x041b tx timeout
[   95.305061][  T154] device bridge_slave_1 left promiscuous mode
[   95.313035][  T154] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.383670][  T154] device bridge_slave_0 left promiscuous mode
[   95.405515][  T154] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.420766][ T4844] loop2: detected capacity change from 0 to 512
[   95.517226][  T154] device veth1_macvtap left promiscuous mode
[   95.533704][  T154] device veth0_macvtap left promiscuous mode
[   95.552366][  T154] device veth1_vlan left promiscuous mode
[   95.570306][  T154] device veth0_vlan left promiscuous mode
[   95.608213][ T4844] EXT4-fs (loop2): #blocks per group too big: 32768
[   96.530401][ T4848] loop0: detected capacity change from 0 to 32768
[   96.557207][  T154] team0 (unregistering): Port device team_slave_1 removed
[   96.606954][  T154] team0 (unregistering): Port device team_slave_0 removed
[   96.662253][ T4848] JBD2: Ignoring recovery information on journal
[   96.677508][  T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   96.717269][  T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   96.778708][ T4848] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[   96.816890][ T4437] (kworker/u4:6,4437,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len is smaller than minimal - offset=0, inode=72, rec_len=1, name_len=1
[   97.030349][ T4190] ocfs2: Unmounting device (7,0) on (node local)
[   97.329255][  T154] bond0 (unregistering): Released all slaves
[   97.369893][ T4279] Bluetooth: hci0: command 0x040f tx timeout
[   97.501581][ T4860] loop3: detected capacity change from 0 to 1024
[   97.693653][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   97.732401][ T4744] batman_adv: batadv0: Adding interface: batadv_slave_0
[   97.739672][ T4744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   97.811749][ T4744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   97.849812][ T4860] netlink: 20 bytes leftover after parsing attributes in process `syz.3.166'.
[   97.876714][ T4744] batman_adv: batadv0: Adding interface: batadv_slave_1
[   97.922225][ T4744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   98.044177][ T4744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   98.143272][ T4866] loop3: detected capacity change from 0 to 512
[   98.213818][ T4866] EXT4-fs (loop3): Ignoring removed mblk_io_submit option
[   98.316390][ T4744] device hsr_slave_0 entered promiscuous mode
[   98.326707][ T4744] device hsr_slave_1 entered promiscuous mode
[   98.343830][ T4744] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   98.399715][ T4744] Cannot create hsr debugfs directory
[   98.405504][ T4866] EXT4-fs error (device loop3): ext4_iget_extra_inode:4573: inode #15: comm syz.3.168: corrupted in-inode xattr
[   98.434451][ T4866] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.168: couldn't read orphan inode 15 (err -117)
[   98.483264][ T4866] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_dev=0x0000000000000003,inode_readahead_blks=0x0000000008000000,quota,noload,user_xattr,mblk_io_submit,noinit_itable,noblock_validity,nogrpid,init_itable=0x0000000000000fff,,errors=continue. Quota mode: writeback.
[   99.019926][ T4892] fuse: Bad value for 'fd'
[   99.058763][ T4894] FAULT_INJECTION: forcing a failure.
[   99.058763][ T4894] name fail_futex, interval 1, probability 0, space 0, times 0
[   99.139458][ T4894] CPU: 0 PID: 4894 Comm: syz.0.176 Not tainted syzkaller #0
[   99.146895][ T4894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   99.146910][ T4894] Call Trace:
[   99.146918][ T4894]  <TASK>
[   99.146926][ T4894]  dump_stack_lvl+0x188/0x250
[   99.146951][ T4894]  ? show_regs_print_info+0x20/0x20
[   99.146972][ T4894]  ? load_image+0x410/0x410
[   99.146996][ T4894]  ? kfree+0xef/0x2a0
[   99.147018][ T4894]  should_fail+0x383/0x4b0
[   99.186215][ T4894]  get_futex_key+0x1a1/0x12d0
[   99.190938][ T4894]  ? __lock_acquire+0x13b3/0x7d40
[   99.195988][ T4894]  ? futex_wait_restart+0x250/0x250
[   99.201218][ T4894]  futex_wake+0x101/0x540
[   99.205589][ T4894]  ? futex_wait+0x680/0x680
[   99.205613][ T4894]  ? verify_lock_unused+0x140/0x140
[   99.205638][ T4894]  ? verify_lock_unused+0x140/0x140
[   99.215610][ T4894]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[   99.215642][ T4894]  do_futex+0xd83/0x12b0
[   99.226819][ T4894]  ? futex_exit_release+0x1c0/0x1c0
[   99.236274][ T4894]  ? __context_tracking_exit+0x4c/0x80
[   99.241776][ T4894]  __se_sys_futex+0x389/0x420
[   99.246470][ T4894]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[   99.246499][ T4894]  ? __x64_sys_futex+0xf0/0xf0
[   99.257287][ T4894]  ? __x64_sys_futex+0x1d/0xf0
[   99.257320][ T4894]  do_syscall_64+0x4c/0xa0
[   99.257346][ T4894]  ? clear_bhb_loop+0x30/0x80
[   99.266520][ T4894]  ? clear_bhb_loop+0x30/0x80
[   99.266547][ T4894]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   99.275888][ T4894] RIP: 0033:0x7f5a142ea559
[   99.275911][ T4894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   99.286203][ T4894] RSP: 002b:00007f5a125420e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[   99.286229][ T4894] RAX: ffffffffffffffda RBX: 00007f5a14571fa8 RCX: 00007f5a142ea559
[   99.286245][ T4894] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f5a14571fac
[   99.286258][ T4894] RBP: 00007f5a14571fa0 R08: 0000781367913e26 R09: 0000000000000000
[   99.286271][ T4894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   99.314659][ T4894] R13: 00007f5a14572038 R14: 00007ffe42d8dd70 R15: 00007ffe42d8de58
[   99.314705][ T4894]  </TASK>
[   99.444254][    T7] Bluetooth: hci0: command 0x0419 tx timeout
[   99.887832][ T4911] netlink: 24 bytes leftover after parsing attributes in process `syz.3.182'.
[   99.914589][ T4912] loop2: detected capacity change from 0 to 512
[  100.041590][ T4918] FAULT_INJECTION: forcing a failure.
[  100.041590][ T4918] name failslab, interval 1, probability 0, space 0, times 1
[  100.170141][ T4912] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,stripe=0x000000000000f7b2,grpquota,. Quota mode: writeback.
[  100.236740][ T4918] CPU: 0 PID: 4918 Comm: syz.4.183 Not tainted syzkaller #0
[  100.244115][ T4918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  100.254214][ T4918] Call Trace:
[  100.257611][ T4918]  <TASK>
[  100.260565][ T4918]  dump_stack_lvl+0x188/0x250
[  100.265297][ T4918]  ? show_regs_print_info+0x20/0x20
[  100.270544][ T4918]  ? load_image+0x410/0x410
[  100.275086][ T4918]  ? __lock_acquire+0x7d40/0x7d40
[  100.280184][ T4918]  should_fail+0x383/0x4b0
[  100.284656][ T4918]  should_failslab+0x5/0x20
[  100.289192][ T4918]  slab_pre_alloc_hook+0x51/0xc0
[  100.294190][ T4918]  kmem_cache_alloc_trace+0x47/0x290
[  100.299523][ T4918]  ? x509_cert_parse+0x57/0x7a0
[  100.304422][ T4918]  ? read_lock_is_recursive+0x10/0x10
[  100.309841][ T4918]  x509_cert_parse+0x57/0x7a0
[  100.314560][ T4918]  x509_key_preparse+0x60/0x5d0
[  100.319447][ T4918]  ? down_read+0x1aa/0x2e0
[  100.323899][ T4918]  asymmetric_key_preparse+0xa5/0x140
[  100.329320][ T4918]  key_create_or_update+0x432/0xa40
[  100.334549][ T4918]  ? security_key_permission+0x7c/0xa0
[  100.340059][ T4918]  ? key_type_put+0x20/0x20
[  100.344610][ T4918]  ? lookup_user_key_possessed+0x40/0x40
[  100.350298][ T4918]  ? __might_fault+0xb3/0x110
[  100.355021][ T4918]  __se_sys_add_key+0x34b/0x410
[  100.359916][ T4918]  ? __x64_sys_add_key+0xc0/0xc0
[  100.364903][ T4918]  ? lockdep_hardirqs_on+0x94/0x140
[  100.370164][ T4918]  ? __x64_sys_add_key+0x1c/0xc0
[  100.375163][ T4918]  do_syscall_64+0x4c/0xa0
[  100.379617][ T4918]  ? clear_bhb_loop+0x30/0x80
[  100.384367][ T4918]  ? clear_bhb_loop+0x30/0x80
[  100.389083][ T4918]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  100.395018][ T4918] RIP: 0033:0x7f2f5e399559
[  100.399469][ T4918] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  100.419100][ T4918] RSP: 002b:00007f2f5c5f1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[  100.427565][ T4918] RAX: ffffffffffffffda RBX: 00007f2f5e620fa0 RCX: 00007f2f5e399559
[  100.435593][ T4918] RDX: 00002000000009c0 RSI: 0000000000000000 RDI: 00002000000003c0
[  100.440112][ T4912] ext4 filesystem being mounted at /39/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  100.443612][ T4918] RBP: 00007f2f5e4308b0 R08: ffffffffffffffff R09: 0000000000000000
[  100.454080][    C1] net_ratelimit: 47 callbacks suppressed
[  100.461741][ T4918] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000
[  100.475374][ T4918] R13: 00007f2f5e621038 R14: 00007f2f5e620fa0 R15: 00007fffe1a5d6c8
[  100.475411][ T4918]  </TASK>
[  100.527836][ T4744] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  100.585470][ T4744] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  100.628823][ T4744] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  100.639309][   T26] audit: type=1800 audit(1792107359.521:5): pid=4912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.180" name="file1" dev="loop2" ino=15 res=0 errno=0
[  100.716032][ T4744] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  100.823378][ T4934] syz.4.185 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  100.994967][ T4934] device ip6gre1 entered promiscuous mode
[  101.265245][ T4744] 8021q: adding VLAN 0 to HW filter on device bond0
[  101.318502][ T4854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  101.368109][ T4854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  101.426237][ T4744] 8021q: adding VLAN 0 to HW filter on device team0
[  101.570349][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  101.589707][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  101.665869][ T1403] bridge0: port 1(bridge_slave_0) entered blocking state
[  101.673028][ T1403] bridge0: port 1(bridge_slave_0) entered forwarding state
[  101.714592][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  101.747644][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  101.755887][ T4280] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  101.786444][ T1403] bridge0: port 2(bridge_slave_1) entered blocking state
[  101.793570][ T1403] bridge0: port 2(bridge_slave_1) entered forwarding state
[  101.965824][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  101.985469][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  102.026663][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  102.057599][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  102.098227][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  102.132095][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  102.144489][ T4280] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  102.184108][ T4280] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255
[  102.226316][ T4744] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  102.263958][ T4744] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  102.314749][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  102.329380][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  102.369994][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  102.409930][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  102.442748][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  102.450928][ T4280] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  102.460097][ T4280] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.484455][ T4280] usb 1-1: Product: syz
[  102.488686][ T4280] usb 1-1: Manufacturer: syz
[  102.500638][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  102.508467][ T4280] usb 1-1: SerialNumber: syz
[  102.542719][ T4280] usb 1-1: config 0 descriptor??
[  102.551426][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  102.584426][ T4960] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  102.592053][ T4960] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  102.651196][ T4979] netlink: 24 bytes leftover after parsing attributes in process `syz.4.198'.
[  102.872060][ T4960] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  102.924166][ T4960] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  103.180462][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  103.203088][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  103.257601][ T4744] 8021q: adding VLAN 0 to HW filter on device batadv0
[  103.404323][ T4280] Error reading MAC address
[  103.443403][ T4280] usb 1-1: USB disconnect, device number 5
[  104.066347][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  104.092253][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  104.105601][ T4311] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  104.204258][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  104.219866][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  104.246423][ T4744] device veth0_vlan entered promiscuous mode
[  104.273216][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  104.301706][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  104.328476][ T4744] device veth1_vlan entered promiscuous mode
[  104.369101][ T4311] usb 4-1: Using ep0 maxpacket: 8
[  104.585575][ T4311] usb 4-1: config 5 has an invalid interface number: 77 but max is 0
[  104.602390][ T4311] usb 4-1: config 5 has no interface number 0
[  104.622913][ T4311] usb 4-1: config 5 interface 77 has no altsetting 0
[  104.886805][ T4311] usb 4-1: string descriptor 0 read error: -22
[  104.898261][ T4311] usb 4-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice=e8.63
[  104.937942][ T4311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.008463][ T4311] kl5kusb105 4-1:5.77: KL5KUSB105D / PalmConnect converter detected
[  105.054551][ T4311] usb 4-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0
[  105.264278][ T5022] udc-core: couldn't find an available UDC or it's busy
[  105.271373][ T5022] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  105.454895][ T5032] bridge0: port 2(bridge_slave_1) entered disabled state
[  105.463415][ T5032] bridge0: port 1(bridge_slave_0) entered disabled state
[  105.511952][ T5022] udc-core: couldn't find an available UDC or it's busy
[  105.526039][ T5022] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  105.542481][ T4311] usb 4-1: USB disconnect, device number 3
[  105.572165][ T4311] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0
[  105.609680][ T4311] kl5kusb105 4-1:5.77: device disconnected
[  105.684089][    C1] net_ratelimit: 42 callbacks suppressed
[  106.521985][ T5049] loop0: detected capacity change from 0 to 32768
[  106.635114][ T5049] (syz.0.214,5049,1):ocfs2_parse_options:1447 ERROR: Unrecognized mount option "jourV�l_async_com" or missing value
[  106.717632][ T5049] (syz.0.214,5049,1):ocfs2_fill_super:1177 ERROR: status = -22
[  107.198104][ T5032] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  107.229662][ T5070] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input7
[  107.399495][ T5032] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  107.619277][ T5080] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  108.378713][ T5084] loop0: detected capacity change from 0 to 4096
[  108.648510][ T5032] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  108.677278][ T5032] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  108.734266][ T5032] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  108.760364][ T5032] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  109.180688][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  109.206019][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  109.240634][ T5058] netlink: 'syz.4.218': attribute type 39 has an invalid length.
[  109.271114][ T5032] syz.2.207 (5032) used greatest stack depth: 20496 bytes left
[  109.496230][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  109.506246][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  109.545341][ T4744] device veth0_macvtap entered promiscuous mode
[  109.597411][ T4744] device veth1_macvtap entered promiscuous mode
[  109.707566][ T4744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  109.761321][ T4744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  109.776636][ T4744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  109.796779][ T4744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  109.809482][ T4744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  109.824493][ T4744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  109.862080][ T4744] batman_adv: batadv0: Interface activated: batadv_slave_0
[  109.934288][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  109.955842][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  109.997941][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  110.017666][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  110.052830][ T4744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  110.090533][ T4744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  110.120100][ T4744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  110.140748][ T4744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  110.158796][ T4744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  110.196383][ T4744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  110.228037][ T4744] batman_adv: batadv0: Interface activated: batadv_slave_1
[  110.256591][ T1110] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  110.276217][ T4854] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  110.311033][ T4854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  110.339965][ T4744] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  110.362894][ T5133] loop0: detected capacity change from 0 to 128
[  110.374003][ T4744] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  110.390463][ T4744] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  110.437968][ T4744] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  110.440752][ T5133] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  110.634351][ T1110] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  110.670551][ T1110] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  110.726255][    C1] net_ratelimit: 63 callbacks suppressed
[  110.800150][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  110.808580][ T1110] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  110.832196][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  110.839878][ T1110] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  110.877575][ T1110] usb 4-1: SerialNumber: syz
[  110.909789][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  110.919089][ T5146] UDF-fs: error (device loop0): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  111.043990][ T4290] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  111.062146][ T4290] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  111.132041][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  111.198472][ T5151] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  111.237606][ T1110] usb 4-1: 0:2 : does not exist
[  111.246143][ T1110] usb 4-1: unit 5: unexpected type 0x09
[  111.262935][ T5151] bond1: (slave lo): Enslaving as an active interface with an up link
[  111.296116][ T1110] usb 4-1: USB disconnect, device number 4
[  111.348806][ T5154] bond1: (slave lo): Releasing backup interface
[  111.378271][ T5154] bond1: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  111.478642][ T5154] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  111.517616][ T5154] device bridge_slave_0 left promiscuous mode
[  111.546520][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  111.564260][ T5154] bridge0: port 1(bridge_slave_0) entered disabled state
[  111.590711][ T5154] device bridge_slave_1 left promiscuous mode
[  111.620501][ T5154] bridge0: port 2(bridge_slave_1) entered disabled state
[  111.673713][ T5154] bond0: (slave bond_slave_0): Releasing backup interface
[  111.718947][ T5154] bond0: (slave bond_slave_1): Releasing backup interface
[  111.827192][ T5154] team0: Port device team_slave_0 removed
[  111.899298][ T5154] team0: Port device team_slave_1 removed
[  111.951058][ T5154] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  111.989635][ T5154] batman_adv: batadv0: Removing interface: batadv_slave_0
[  112.056534][ T5154] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  112.063972][ T5154] batman_adv: batadv0: Removing interface: batadv_slave_1
[  112.496339][ T5188] netlink: 24 bytes leftover after parsing attributes in process `syz.2.251'.
[  112.521780][ T5190] loop0: detected capacity change from 0 to 128
[  112.709501][ T5190] attempt to access beyond end of device
[  112.709501][ T5190] loop0: rw=2049, want=144, limit=128
[  112.885581][ T5202] loop5: detected capacity change from 0 to 4096
[  112.913082][ T5202] EXT4-fs (loop5): Ignoring removed mblk_io_submit option
[  113.197692][ T5202] EXT4-fs (loop5): Test dummy encryption mode enabled
[  113.252101][ T5220] loop3: detected capacity change from 0 to 512
[  113.277866][ T5202] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpid,mblk_io_submit,noinit_itable,test_dummy_encryption,inode_readahead_blks=0x0000000000000040,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback.
[  113.377868][ T5224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.261'.
[  113.821228][ T5236] loop3: detected capacity change from 0 to 128
[  113.939856][ T4311] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  113.959183][ T4311] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  113.968524][ T4311] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  113.975712][ T1110] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  114.098205][ T5236] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  114.194919][ T5236] VFS: Lookup of 'file0' in vfat loop3 would have caused loop
[  114.247903][ T4311] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  114.255128][ T1110] usb 3-1: Using ep0 maxpacket: 16
[  114.270839][ T4311] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  114.414541][ T1110] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11
[  114.444125][ T1110] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  114.495324][ T1110] usb 3-1: config 0 interface 0 has no altsetting 0
[  114.502025][ T1110] usb 3-1: New USB device found, idVendor=046d, idProduct=c22d, bcdDevice= 0.00
[  114.540152][ T1110] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  114.612968][ T1110] usb 3-1: config 0 descriptor??
[  114.669257][ T5238] ceph: No mds server is up or the cluster is laggy
[  114.694234][ T5239] ceph: No mds server is up or the cluster is laggy
[  114.826176][ T4277] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  114.843922][ T4277] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  115.119998][ T5234] udc-core: couldn't find an available UDC or it's busy
[  115.158182][ T5234] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  115.200282][ T1110] hid (null): report_id 0 is invalid
[  115.214755][ T1110] lg-g15 0003:046D:C22D.0002: unknown main item tag 0x4
[  115.222007][ T1110] lg-g15 0003:046D:C22D.0002: unexpected long global item
[  115.273504][ T1110] lg-g15: probe of 0003:046D:C22D.0002 failed with error -22
[  115.654212][ T1110] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  115.681592][ T4311] usb 3-1: USB disconnect, device number 2
[  115.764063][    C0] net_ratelimit: 37 callbacks suppressed
[  116.207852][ T1110] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  116.223416][ T1110] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.257324][ T1110] usb 4-1: Product: syz
[  116.261517][ T1110] usb 4-1: Manufacturer: syz
[  116.261537][ T1110] usb 4-1: SerialNumber: syz
[  116.313008][ T1110] usb 4-1: config 0 descriptor??
[  116.484273][ T4633] syz.2.92 (4633) used greatest stack depth: 18352 bytes left
[  116.607313][ T1110] usb 4-1: USB disconnect, device number 5
[  117.174904][ T5307] netlink: 24 bytes leftover after parsing attributes in process `syz.0.282'.
[  117.250900][ T5309] loop3: detected capacity change from 0 to 256
[  117.288431][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory
[  117.327501][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory
[  117.349205][ T5309] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  117.549446][ T5309] netlink: 32 bytes leftover after parsing attributes in process `syz.3.283'.
[  117.602251][ T5323] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  117.756276][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory
[  117.787948][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory
[  117.797792][ T4311] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  117.912892][ T5314] loop5: detected capacity change from 0 to 32768
[  117.929608][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop5, 10) failed: No such file or directory
[  117.995448][ T5314] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by syz.5.286 (5314)
[  118.112422][ T5314] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm
[  118.143160][ T5314] BTRFS info (device loop5): using free space tree
[  118.161388][ T5314] BTRFS info (device loop5): has skinny extents
[  118.172309][ T4311] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  118.194857][ T4311] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  118.284858][ T4311] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  118.306671][ T4311] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  118.315260][ T5314] BTRFS info (device loop5): enabling ssd optimizations
[  118.357881][ T4311] usb 1-1: SerialNumber: syz
[  118.458941][   T26] audit: type=1800 audit(1792107377.341:6): pid=5314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.286" name="bus" dev="loop5" ino=263 res=0 errno=0
[  118.572001][ T5342] loop2: detected capacity change from 0 to 128
[  118.599832][ T4202] udevd[4202]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory
[  118.655360][ T5342] FAT-fs (loop2): Unrecognized mount option "uid=���@�޿�Nw�X>��#?���a��M�ۏ�$KK.h�?��o�^�Pl��*��K�˵�B�e��g'�%���o]�:�Cx�C{�3lǴ��3��%�7WvR	��0x000000000000ee00" or missing value
[  118.678019][ T4311] usb 1-1: 0:2 : does not exist
[  118.683031][ T4311] usb 1-1: unit 5: unexpected type 0x09
[  118.775284][ T4311] usb 1-1: USB disconnect, device number 6
[  118.833330][ T4202] udevd[4202]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory
[  118.900723][ T4202] udevd[4202]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory
[  119.034233][ T5376] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  119.058690][ T5376] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  119.070827][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  119.314235][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop5, 10) failed: No such file or directory
[  119.337621][ T5384] mmap: syz.3.299 (5384) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
[  119.805695][ T5385] loop2: detected capacity change from 0 to 32768
[  119.869631][ T5385] (syz.2.305,5385,0):ocfs2_parse_options:1447 ERROR: Unrecognized mount option "jourV�l_async_com" or missing value
[  119.923011][ T5385] (syz.2.305,5385,0):ocfs2_fill_super:1177 ERROR: status = -22
[  119.967185][ T5415] loop0: detected capacity change from 0 to 256
[  120.070091][ T5415] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d)
[  120.184116][ T5396] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  120.624535][ T5396] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  120.644875][ T5396] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  120.764479][ T5396] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  120.780312][ T5396] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  120.803090][ T5396] usb 6-1: SerialNumber: syz
[  120.847491][ T4311] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  121.044069][    C0] net_ratelimit: 29 callbacks suppressed
[  121.103073][ T5396] usb 6-1: 0:2 : does not exist
[  121.175635][ T5396] usb 6-1: USB disconnect, device number 2
[  121.214393][ T4311] usb 1-1: config 0 has too many interfaces: 253, using maximum allowed: 32
[  121.238905][ T4311] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 253
[  121.414820][ T4311] usb 1-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac
[  121.428287][ T4311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  121.454497][ T4311] usb 1-1: Product: syz
[  121.460882][ T4311] usb 1-1: Manufacturer: syz
[  121.465788][ T4311] usb 1-1: SerialNumber: syz
[  121.479233][ T4311] usb 1-1: config 0 descriptor??
[  121.527262][ T4311] gspca_main: sunplus-2.14.0 probing 055f:c630
[  121.648705][ T5475] loop5: detected capacity change from 0 to 1024
[  121.708663][ T5475] EXT4-fs (loop5): Ignoring removed orlov option
[  121.742852][ T5475] EXT4-fs (loop5): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nojournal_checksum,i_version,norecovery,,errors=continue. Quota mode: none.
[  121.765242][ T4311] gspca_sunplus: reg_r err -32
[  121.782912][ T4311] sunplus: probe of 1-1:0.0 failed with error -32
[  122.093614][ T5487] device vlan2 entered promiscuous mode
[  122.114353][ T5487] device bridge0 entered promiscuous mode
[  122.240889][ T5492] loop2: detected capacity change from 0 to 1024
[  122.274163][ T5396] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  122.328881][ T5492] netlink: 20 bytes leftover after parsing attributes in process `syz.2.332'.
[  122.428171][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory
[  122.457788][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory
[  122.689846][ T5396] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  122.702983][ T5396] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  122.718532][ T5396] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  122.728182][ T5396] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  122.745357][ T5396] usb 6-1: config 0 descriptor??
[  122.863363][ T5498] loop3: detected capacity change from 0 to 40427
[  122.872603][ T4202] udevd[4202]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory
[  122.894289][   T23] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  122.908954][ T5498] F2FS-fs (loop3): Small segment_count (9 < 1 * 24)
[  122.916570][ T5498] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  122.927267][ T5498] F2FS-fs (loop3): invalid crc value
[  122.937650][ T5498] F2FS-fs (loop3): Found nat_bits in checkpoint
[  122.986027][ T5498] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  122.993329][ T5498] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  123.013466][   T26] audit: type=1804 audit(1792107381.891:7): pid=5498 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.334" name="/newroot/72/bus/bus" dev="loop3" ino=10 res=1 errno=0
[  123.154173][   T23] usb 3-1: Using ep0 maxpacket: 8
[  123.256837][ T5396] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0
[  123.264634][ T5396] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0
[  123.273613][ T5396] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0
[  123.282320][ T5396] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0
[  123.290313][ T5396] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0
[  123.298110][ T5396] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0
[  123.315655][ T5396] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0
[  123.332325][ T5396] cp2112 0003:10C4:EA90.0003: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0
[  123.474553][ T5396] cp2112 0003:10C4:EA90.0003: Part Number: 0x00 Device Version: 0x00
[  123.484857][   T23] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  123.504287][   T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  123.523977][   T23] usb 3-1: Product: syz
[  123.530899][   T23] usb 3-1: Manufacturer: syz
[  123.543596][   T23] usb 3-1: SerialNumber: syz
[  123.550616][   T23] usb 3-1: config 0 descriptor??
[  123.589065][ T4188] attempt to access beyond end of device
[  123.589065][ T4188] loop3: rw=2049, want=45104, limit=40427
[  123.617229][   T23] gspca_main: se401-2.14.0 probing 047d:5003
[  123.640063][ T5082] usb 1-1: USB disconnect, device number 7
[  123.884712][ T4174] udevd[4174]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory
[  123.921651][ T4174] udevd[4174]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory
[  123.962791][ T5513] netlink: 128 bytes leftover after parsing attributes in process `syz.0.338'.
[  124.034446][   T23] gspca_se401: ExtraFeatures: 255
[  124.039556][   T23] gspca_se401: Frame size: 0x256 bayer
[  124.050795][   T23] gspca_se401: Frame size: 8x6 bayer
[  124.062059][   T23] gspca_se401: Frame size: 0x0 1/16th janggu
[  124.074920][   T23] gspca_se401: Frame size: 0x0 1/16th janggu
[  124.087774][   T23] gspca_se401: Frame size: 0x0 1/16th janggu
[  124.096454][ T5483] cp2112 0003:10C4:EA90.0003: Error starting transaction: -38
[  124.114421][   T23] gspca_se401: Frame size: 0x0 1/16th janggu
[  124.125061][ T5396] cp2112 0003:10C4:EA90.0003: error reading lock byte: -71
[  124.156827][ T5396] usb 6-1: USB disconnect, device number 3
[  124.251942][ T5517] udevd[5517]: open /dev/null failed: No such file or directory
[  124.261485][   T23] input: se401 as /devices/platform/dummy_hcd.2/usb3/3-1/input/input8
[  124.335708][   T23] usb 3-1: USB disconnect, device number 3
[  124.407812][ T5521] udevd[5521]: open /dev/null failed: No such file or directory
[  125.579736][ T5541] loop0: detected capacity change from 0 to 136
[  125.610404][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory
[  125.705051][ T5525] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.712671][ T5525] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.723281][ T5541] iso9660: Corrupted directory entry in block 2 of inode 1472
[  125.905532][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory
[  125.950483][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory
[  126.165879][ T4290] net_ratelimit: 36 callbacks suppressed
[  126.289398][   T23] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  126.382324][ T5555] loop2: detected capacity change from 0 to 128
[  126.452387][ T5555] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  126.831921][ T5525] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  126.918981][ T5525] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  126.939085][   T23] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  126.948253][   T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  126.956361][   T23] usb 1-1: Product: syz
[  126.960556][   T23] usb 1-1: Manufacturer: syz
[  126.984953][   T23] usb 1-1: SerialNumber: syz
[  126.991943][   T23] usb 1-1: config 0 descriptor??
[  127.271640][ T4279] usb 1-1: USB disconnect, device number 8
[  127.641960][ T5525] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  127.651314][ T5525] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  127.660598][ T5525] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  127.669638][ T5525] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  128.230908][ T5568] loop3: detected capacity change from 0 to 32768
[  128.244283][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory
[  128.298839][ T5568] JBD2: Ignoring recovery information on journal
[  128.341908][ T5566] loop0: detected capacity change from 0 to 32768
[  128.358062][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory
[  128.391602][ T5568] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  128.409554][ T5566] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.358 (5566)
[  128.488177][ T5566] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  128.498533][ T5549] bridge0: port 2(bridge_slave_1) entered disabled state
[  128.505939][ T5549] bridge0: port 1(bridge_slave_0) entered disabled state
[  128.513917][ T5566] BTRFS info (device loop0): using free space tree
[  128.521289][ T5566] BTRFS info (device loop0): has skinny extents
[  128.534826][   T26] audit: type=1804 audit(1792107387.421:8): pid=5571 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.357" name="/newroot/76/bus/file1" dev="loop3" ino=17059 res=1 errno=0
[  128.582309][ T5568] OCFS2: ERROR (device loop3): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #0 has bad signature 
[  128.619037][ T5568] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  128.640273][ T5568] OCFS2: File system is now read-only.
[  128.667463][ T5568] (syz.3.357,5568,1):_ocfs2_free_suballoc_bits:2511 ERROR: status = -30
[  128.684355][ T5568] (syz.3.357,5568,1):_ocfs2_free_clusters:2605 ERROR: status = -30
[  128.687149][ T5566] BTRFS info (device loop0): enabling ssd optimizations
[  128.716207][ T5568] (syz.3.357,5568,1):ocfs2_sync_local_to_main:1001 ERROR: status = -30
[  128.734133][ T5568] (syz.3.357,5568,0):ocfs2_sync_local_to_main:1013 ERROR: status = -30
[  128.742621][ T5568] (syz.3.357,5568,0):ocfs2_local_alloc_slide_window:1295 ERROR: status = -30
[  128.752937][ T5568] (syz.3.357,5568,0):ocfs2_local_alloc_slide_window:1321 ERROR: status = -30
[  128.764430][ T5568] (syz.3.357,5568,0):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -30
[  128.773158][ T5568] (syz.3.357,5568,0):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30
[  128.785185][ T5568] (syz.3.357,5568,0):ocfs2_reserve_clusters_with_limit:1188 ERROR: status = -30
[  128.795884][ T5568] (syz.3.357,5568,0):ocfs2_reserve_clusters_with_limit:1237 ERROR: status = -30
[  128.806442][ T5568] (syz.3.357,5568,0):ocfs2_lock_refcount_allocators:2908 ERROR: status = -30
[  128.815758][ T5568] (syz.3.357,5568,0):ocfs2_make_clusters_writable:3254 ERROR: status = -30
[  128.825997][ T5568] (syz.3.357,5568,0):ocfs2_replace_cow:3414 ERROR: status = -30
[  128.833671][ T5568] (syz.3.357,5568,0):ocfs2_refcount_cow_hunk:3489 ERROR: status = -30
[  128.842091][ T5568] (syz.3.357,5568,0):ocfs2_refcount_cow:3533 ERROR: status = -30
[  128.851191][ T5568] (syz.3.357,5568,0):ocfs2_prepare_inode_for_write:2348 ERROR: status = -30
[  128.860263][ T5568] (syz.3.357,5568,0):ocfs2_file_write_iter:2457 ERROR: status = -30
[  128.878806][   T26] audit: type=1800 audit(1792107387.761:9): pid=5566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.358" name="bus" dev="loop0" ino=263 res=0 errno=0
[  128.983583][ T4188] ocfs2: Unmounting device (7,3) on (node local)
[  129.081424][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory
[  129.112731][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory
[  129.248289][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory
[  129.270966][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory
[  129.308122][ T5591] netlink: 156 bytes leftover after parsing attributes in process `syz.3.359'.
[  129.690566][ T5549] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  129.743337][ T5549] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  130.216986][ T5549] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  130.226040][ T5549] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  130.235461][ T5549] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  130.244642][ T5549] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  130.353075][ T5559] netlink: 'syz.2.355': attribute type 4 has an invalid length.
[  130.373155][ T5562] bridge0: port 1(veth0) entered blocking state
[  130.403394][ T5562] bridge0: port 1(veth0) entered disabled state
[  130.433012][ T5562] device veth0 entered promiscuous mode
[  130.442889][ T5562] bridge0: port 1(veth0) entered blocking state
[  130.449233][ T5562] bridge0: port 1(veth0) entered forwarding state
[  130.542293][ T5607] loop2: detected capacity change from 0 to 256
[  130.583058][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory
[  130.609764][ T5607] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  130.702747][ T5607] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010364, chksum : 0x43f9f21b, utbl_chksum : 0xe619d30d)
[  130.760999][   T26] audit: type=1800 audit(1792107389.641:10): pid=5607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.366" name="file1" dev="loop2" ino=1048648 res=0 errno=0
[  130.840462][ T5623] netlink: 4 bytes leftover after parsing attributes in process `syz.3.368'.
[  130.939832][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory
[  130.964330][ T4185] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  130.996556][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory
[  131.239552][ T5637] loop0: detected capacity change from 0 to 2048
[  131.264867][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory
[  131.333691][ T5637] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  131.382355][ T5637] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  131.524608][ T4185] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  131.539392][ T4185] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  131.569626][ T4185] usb 6-1: Product: syz
[  131.573886][ T4185] usb 6-1: Manufacturer: syz
[  131.584533][ T4185] usb 6-1: SerialNumber: syz
[  131.620038][ T4185] usb 6-1: config 0 descriptor??
[  131.775962][ T5633] loop3: detected capacity change from 0 to 32768
[  131.861392][ T5633] JBD2: Ignoring recovery information on journal
[  131.931185][ T5633] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  131.949300][ T4185] usb 6-1: USB disconnect, device number 4
[  132.005390][ T5656] input: syz0 as /devices/virtual/input/input9
[  132.077990][   T26] audit: type=1804 audit(1792107390.961:11): pid=5662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.373" name="/newroot/80/file1/file1" dev="loop3" ino=17059 res=1 errno=0
[  132.174049][    C1] net_ratelimit: 31 callbacks suppressed
[  132.335962][ T4188] ocfs2: Unmounting device (7,3) on (node local)
[  132.569930][ T1427] ieee802154 phy0 wpan0: encryption failed: -22
[  132.576359][ T1427] ieee802154 phy1 wpan1: encryption failed: -22
[  132.624110][ T5592] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  132.884431][ T5592] usb 1-1: Using ep0 maxpacket: 32
[  133.004529][ T5592] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  133.034110][ T5592] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  133.044675][ T5592] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  133.053747][ T5592] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  133.091542][ T5592] usb 1-1: config 0 descriptor??
[  133.368871][ T5712] loop5: detected capacity change from 0 to 32768
[  133.389728][ T4202] udevd[4202]: inotify_add_watch(7, /dev/loop5, 10) failed: No such file or directory
[  133.472119][ T5712] XFS (loop5): Mounting V5 Filesystem
[  133.566811][ T5738] netlink: 12 bytes leftover after parsing attributes in process `syz.2.394'.
[  133.578799][ T5592] ft260 0003:0403:6030.0004: unknown main item tag 0x0
[  133.599774][ T5592] ft260 0003:0403:6030.0004: unknown main item tag 0x0
[  133.615866][ T5592] ft260 0003:0403:6030.0004: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0
[  133.616410][ T5712] XFS (loop5): Ending clean mount
[  133.679204][ T5742] loop3: detected capacity change from 0 to 256
[  133.718472][ T5712] XFS (loop5): Quotacheck needed: Please wait.
[  133.756993][ T4202] udevd[4202]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory
[  133.784341][ T5592] ft260 0003:0403:6030.0004: chip code: 0000 0000
[  133.846496][ T5742] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010321, chksum : 0x3a8a43f6, utbl_chksum : 0xe619d30d)
[  133.860527][ T5712] XFS (loop5): Quotacheck: Done.
[  133.896427][   T26] audit: type=1804 audit(1792107392.781:12): pid=5742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.395" name="/newroot/84/file0/bus" dev="loop3" ino=1048649 res=1 errno=0
[  134.214442][ T5592] ft260 0003:0403:6030.0004: failed to retrieve status: -32, no wakeup
[  134.290814][ T5592] ft260 0003:0403:6030.0004: failed to retrieve status: -32
[  134.552458][ T5770] udevd[5770]: open /dev/null failed: No such file or directory
[  134.605717][ T5592] usb 1-1: USB disconnect, device number 9
[  134.857390][ T4202] udevd[4202]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory
[  134.902318][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory
[  134.950481][ T5779] loop3: detected capacity change from 0 to 512
[  134.990286][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory
[  135.288682][ T5779] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  135.353400][ T5779] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  135.568084][ T5779] EXT4-fs (loop3): 1 truncate cleaned up
[  135.582228][ T5794] loop0: detected capacity change from 0 to 1024
[  135.611353][ T5779] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,quota,lazytime,errors=remount-ro,quota,quota,. Quota mode: writeback.
[  135.685369][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory
[  135.696531][ T4744] XFS (loop5): Unmounting Filesystem
[  135.768773][ T5794] EXT4-fs (loop0): Ignoring removed orlov option
[  135.857295][ T5794] EXT4-fs (loop0): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nojournal_checksum,i_version,norecovery,,errors=continue. Quota mode: none.
[  136.012804][ T4188] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  136.033784][ T5810] loop2: detected capacity change from 0 to 4096
[  136.045865][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory
[  136.056390][ T4188] EXT4-fs (loop3): Remounting filesystem read-only
[  136.092102][ T4188] EXT4-fs error (device loop3): ext4_inlinedir_to_tree:1465: inode #12: block 7: comm syz-executor: path /85/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0
[  136.120689][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop5, 10) failed: No such file or directory
[  136.160605][ T5810] EXT4-fs (loop2): Test dummy encryption mode enabled
[  136.181301][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop5, 10) failed: No such file or directory
[  136.199188][ T5810] EXT4-fs (loop2): Ignoring removed bh option
[  136.236133][ T5810] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,max_batch_time=0x000000000000000a,dioread_nolock,test_dummy_encryption,lazytime,nodioread_nolock,block_validity,bh,,errors=continue. Quota mode: writeback.
[  136.301946][ T4188] EXT4-fs (loop3): Remounting filesystem read-only
[  136.311169][ T4188] EXT4-fs error (device loop3): empty_inline_dir:1890: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0
[  136.339329][ T4188] EXT4-fs (loop3): Remounting filesystem read-only
[  136.364998][ T4188] EXT4-fs warning (device loop3): empty_inline_dir:1897: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60
[  136.394591][ T4188] EXT4-fs error (device loop3): ext4_inlinedir_to_tree:1465: inode #12: block 7: comm syz-executor: path /85/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0
[  136.499238][ T4188] EXT4-fs (loop3): Remounting filesystem read-only
[  136.522127][ T4188] EXT4-fs error (device loop3): empty_inline_dir:1890: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0
[  136.625476][ T5810] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  136.634485][ T4188] EXT4-fs (loop3): Remounting filesystem read-only
[  136.668219][ T4188] EXT4-fs warning (device loop3): empty_inline_dir:1897: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60
[  136.683863][ T4188] EXT4-fs error (device loop3): ext4_inlinedir_to_tree:1465: inode #12: block 7: comm syz-executor: path /85/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0
[  136.708129][ T4188] EXT4-fs (loop3): Remounting filesystem read-only
[  136.715243][ T4188] EXT4-fs error (device loop3): empty_inline_dir:1890: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0
[  136.756618][ T4188] EXT4-fs (loop3): Remounting filesystem read-only
[  136.801495][ T4188] EXT4-fs warning (device loop3): empty_inline_dir:1897: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60
[  136.884668][ T4188] EXT4-fs error (device loop3): ext4_inlinedir_to_tree:1465: inode #12: block 7: comm syz-executor: path /85/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0
[  136.996477][ T5839] user requested TSC rate below hardware speed
[  137.003748][ T4188] EXT4-fs (loop3): Remounting filesystem read-only
[  137.013706][ T5839] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer.
[  137.047759][ T4188] EXT4-fs error (device loop3): empty_inline_dir:1890: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0
[  137.152735][ T4188] EXT4-fs (loop3): Remounting filesystem read-only
[  137.178033][ T4188] EXT4-fs warning (device loop3): empty_inline_dir:1897: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60
[  137.254750][ T4188] EXT4-fs error (device loop3): ext4_inlinedir_to_tree:1465: inode #12: block 7: comm syz-executor: path /85/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0
[  137.286750][ T4188] EXT4-fs (loop3): Remounting filesystem read-only
[  137.298116][ T4188] EXT4-fs warning (device loop3): empty_inline_dir:1897: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60
[  137.314145][ T4279] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  137.369682][ T4188] EXT4-fs warning (device loop3): empty_inline_dir:1897: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60
[  137.392446][ T4188] EXT4-fs warning (device loop3): empty_inline_dir:1897: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60
[  137.414885][ T4188] EXT4-fs warning (device loop3): empty_inline_dir:1897: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60
[  137.453170][ T4188] EXT4-fs warning (device loop3): empty_inline_dir:1897: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60
[  137.499915][ T4188] EXT4-fs warning (device loop3): empty_inline_dir:1897: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60
[  137.684052][    C1] net_ratelimit: 7 callbacks suppressed
[  137.714516][ T4279] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  137.734326][ T4279] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  137.749865][ T4279] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  137.759386][ T4279] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  137.777336][ T4279] usb 3-1: config 0 descriptor??
[  138.223572][ T5856] bond0 speed is unknown, defaulting to 1000
[  138.240946][ T5856] bond0 speed is unknown, defaulting to 1000
[  138.256454][ T4279] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0
[  138.276371][ T4279] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0
[  138.283477][ T4279] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0
[  138.307446][ T5856] bond0 speed is unknown, defaulting to 1000
[  138.329868][ T5856] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  138.354166][ T4279] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0
[  138.371932][ T4279] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0
[  138.405117][ T4279] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0
[  138.428108][ T4279] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0
[  138.440885][ T5856] infiniband syz5: RDMA CMA: cma_listen_on_dev, error -98
[  138.491945][ T4279] cp2112 0003:10C4:EA90.0005: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0
[  138.552190][ T5856] bond0 speed is unknown, defaulting to 1000
[  138.586197][ T5856] bond0 speed is unknown, defaulting to 1000
[  138.593177][ T5856] bond0 speed is unknown, defaulting to 1000
[  138.600984][ T5856] bond0 speed is unknown, defaulting to 1000
[  138.608300][ T5856] bond0 speed is unknown, defaulting to 1000
[  138.633872][ T4202] udevd[4202]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory
[  138.665144][ T4279] cp2112 0003:10C4:EA90.0005: Part Number: 0x00 Device Version: 0x00
[  138.696856][ T4202] udevd[4202]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory
[  139.208706][   T26] audit: type=1326 audit(1792107398.091:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5875 comm="syz.4.429" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2f5e399559 code=0x0
[  139.255718][ T5842] cp2112 0003:10C4:EA90.0005: Error starting transaction: -38
[  139.275554][ T4279] cp2112 0003:10C4:EA90.0005: error reading lock byte: -71
[  139.301288][ T4279] usb 3-1: USB disconnect, device number 4
[  139.341955][ T5882] udevd[5882]: open /dev/null failed: No such file or directory
[  139.968801][  T154] device hsr_slave_0 left promiscuous mode
[  139.985669][  T154] device hsr_slave_1 left promiscuous mode
[  140.024671][  T154] batman_adv: batadv0: Removing interface: batadv_slave_0
[  140.055368][  T154] batman_adv: batadv0: Removing interface: batadv_slave_1
[  140.063566][  T154] device bridge_slave_1 left promiscuous mode
[  140.086860][  T154] bridge0: port 2(bridge_slave_1) entered disabled state
[  140.104143][ T4279] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  140.134972][  T154] device bridge_slave_0 left promiscuous mode
[  140.167662][  T154] bridge0: port 1(bridge_slave_0) entered disabled state
[  140.474423][ T4279] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  140.511717][ T4279] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  140.542950][ T4279] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  140.574757][ T4279] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  140.619871][ T4279] usb 6-1: config 0 descriptor??
[  140.743075][  T154] team0 (unregistering): Port device team_slave_1 removed
[  140.795861][  T154] team0 (unregistering): Port device team_slave_0 removed
[  140.842197][  T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  140.892718][  T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  141.106383][ T4279] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0
[  141.113501][ T4279] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0
[  141.163016][ T4279] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0
[  141.193722][ T4279] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0
[  141.230184][ T4279] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0
[  141.252300][  T154] bond0 (unregistering): Released all slaves
[  141.258200][ T4279] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0
[  141.295884][ T4279] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0
[  141.339049][ T4279] cp2112 0003:10C4:EA90.0006: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0
[  141.487453][ T4279] cp2112 0003:10C4:EA90.0006: Part Number: 0x00 Device Version: 0x00
[  141.830487][ T5931] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6)
[  141.837424][ T5931] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  141.850824][ T5935] device syzkaller0 entered promiscuous mode
[  141.865832][ T5931] vhci_hcd vhci_hcd.0: Device attached
[  141.895629][ T5936] vhci_hcd: connection closed
[  141.902665][ T4437] vhci_hcd: stop threads
[  141.918433][ T5935] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487
[  141.934538][ T4437] vhci_hcd: release socket
[  141.939027][ T4437] vhci_hcd: disconnect device
[  142.085490][ T5891] cp2112 0003:10C4:EA90.0006: Error starting transaction: -38
[  142.124395][ T4279] cp2112 0003:10C4:EA90.0006: error reading lock byte: -71
[  142.175711][ T4279] usb 6-1: USB disconnect, device number 5
[  142.205588][ T5943] loop2: detected capacity change from 0 to 2048
[  142.217706][ T5944] udevd[5944]: open /dev/null failed: No such file or directory
[  142.247832][ T4202] udevd[4202]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory
[  142.295673][ T5943] UDF-fs: bad mount option "se" or missing value
[  142.391078][ T4202] udevd[4202]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory
[  142.443190][ T4202] udevd[4202]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory
[  142.974043][    C1] net_ratelimit: 6 callbacks suppressed
[  143.861451][ T6006] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  144.661486][ T6026] netlink: 'syz.4.460': attribute type 16 has an invalid length.
[  144.692974][ T6026] netlink: 'syz.4.460': attribute type 17 has an invalid length.
[  144.803351][ T6034] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  144.942464][ T6026] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  144.982314][ T6026] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  145.010813][ T6026] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  145.333584][ T6022] loop2: detected capacity change from 0 to 32768
[  145.362661][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory
[  145.418376][ T6022] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.459 (6022)
[  145.496191][ T6022] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  145.510189][ T6022] BTRFS info (device loop2): setting nodatacow, compression disabled
[  145.523288][ T6022] BTRFS info (device loop2): disabling tree log
[  145.529961][ T6022] BTRFS info (device loop2): turning on async discard
[  145.537237][ T6022] BTRFS info (device loop2): max_inline at 0
[  145.543314][ T6022] BTRFS info (device loop2): using free space tree
[  145.550208][ T6022] BTRFS info (device loop2): has skinny extents
[  145.910322][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory
[  145.969041][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory
[  146.092154][ T6098] overlayfs: upper fs does not support file handles, falling back to index=off.
[  146.419887][   T26] audit: type=1326 audit(1792107405.301:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6115 comm="syz.2.468" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fed2d547559 code=0x0
[  146.759221][ T6114] loop0: detected capacity change from 0 to 32768
[  146.769160][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory
[  146.803301][ T6114] XFS (loop0): Mounting V5 Filesystem
[  146.831051][ T6114] XFS (loop0): Ending clean mount
[  146.902844][ T4190] XFS (loop0): Unmounting Filesystem
[  147.047398][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory
[  147.065459][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory
[  147.528357][ T6144] loop5: detected capacity change from 0 to 512
[  147.547227][ T6142] FAULT_INJECTION: forcing a failure.
[  147.547227][ T6142] name failslab, interval 1, probability 0, space 0, times 0
[  147.594578][ T6142] CPU: 1 PID: 6142 Comm: syz.0.476 Not tainted syzkaller #0
[  147.601909][ T6142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  147.611978][ T6142] Call Trace:
[  147.615278][ T6142]  <TASK>
[  147.618266][ T6142]  dump_stack_lvl+0x188/0x250
[  147.622979][ T6142]  ? show_regs_print_info+0x20/0x20
[  147.628202][ T6142]  ? load_image+0x410/0x410
[  147.632729][ T6142]  ? __might_sleep+0xf0/0xf0
[  147.637346][ T6142]  ? __lock_acquire+0x7d40/0x7d40
[  147.642413][ T6142]  ? __lock_acquire+0x7d40/0x7d40
[  147.647460][ T6142]  should_fail+0x383/0x4b0
[  147.651901][ T6142]  should_failslab+0x5/0x20
[  147.656411][ T6142]  slab_pre_alloc_hook+0x51/0xc0
[  147.661364][ T6142]  __kmalloc_node+0x6d/0x3a0
[  147.665959][ T6142]  ? kvmalloc_node+0x84/0x130
[  147.670650][ T6142]  kvmalloc_node+0x84/0x130
[  147.675166][ T6142]  map_update_elem+0x308/0x760
[  147.679952][ T6142]  __sys_bpf+0x46b/0x6f0
[  147.684220][ T6142]  ? bpf_link_show_fdinfo+0x380/0x380
[  147.689626][ T6142]  __x64_sys_bpf+0x78/0x90
[  147.694068][ T6142]  do_syscall_64+0x4c/0xa0
[  147.698504][ T6142]  ? clear_bhb_loop+0x30/0x80
[  147.703206][ T6142]  ? clear_bhb_loop+0x30/0x80
[  147.707915][ T6142]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  147.713826][ T6142] RIP: 0033:0x7f5a142ea559
[  147.718263][ T6142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  147.737904][ T6142] RSP: 002b:00007f5a12542028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  147.746336][ T6142] RAX: ffffffffffffffda RBX: 00007f5a14571fa0 RCX: 00007f5a142ea559
[  147.754318][ T6142] RDX: 0000000000000020 RSI: 0000200000000240 RDI: 0000000000000002
[  147.762324][ T6142] RBP: 00007f5a143818b0 R08: 0000000000000000 R09: 0000000000000000
[  147.770300][ T6142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  147.778307][ T6142] R13: 00007f5a14572038 R14: 00007f5a14571fa0 R15: 00007ffe42d8de58
[  147.786308][ T6142]  </TASK>
[  147.798979][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop5, 10) failed: No such file or directory
[  147.860119][ T6144] EXT4-fs (loop5): 1 truncate cleaned up
[  147.878651][ T6144] EXT4-fs (loop5): mounted filesystem without journal. Opts: bsdgroups,grpquota,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,nolazytime,discard,grpjquota=,errors=remount-ro,nobarrier,. Quota mode: writeback.
[  148.160745][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop5, 10) failed: No such file or directory
[  148.191646][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop5, 10) failed: No such file or directory
[  148.244057][    C1] net_ratelimit: 16 callbacks suppressed
[  149.018303][ T6167] loop0: detected capacity change from 0 to 512
[  149.083198][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory
[  150.448664][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory
[  150.499843][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory
[  150.841347][ T6205] netlink: 24 bytes leftover after parsing attributes in process `syz.0.495'.
[  151.128513][   T26] audit: type=1800 audit(1792107410.011:15): pid=6213 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.498" name="ipv4_address" dev="configfs" ino=39803 res=0 errno=0
[  151.194076][   T26] audit: type=1800 audit(1792107410.041:16): pid=6213 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.498" name="local" dev="configfs" ino=39804 res=0 errno=0
[  152.239513][ T6251] netlink: 24 bytes leftover after parsing attributes in process `syz.4.505'.
[  152.277650][ T6250] netlink: 12 bytes leftover after parsing attributes in process `syz.5.506'.
[  152.331888][ T6251] sch_tbf: burst 88 is lower than device veth5 mtu (1514) !
[  152.548762][ T6259] loop5: detected capacity change from 0 to 1024
[  152.600551][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop5, 10) failed: No such file or directory
[  152.640822][ T6259] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  152.702526][ T6259] EXT4-fs (loop5): mounted filesystem without journal. Opts: discard,journal_dev=0x0000000000000002,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,dioread_nolock,,errors=continue. Quota mode: writeback.
[  153.005386][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop5, 10) failed: No such file or directory
[  153.047744][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop5, 10) failed: No such file or directory
[  153.444061][    C1] net_ratelimit: 8 callbacks suppressed
[  154.698752][ T6299] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
SYZFAIL: open /dev/vhci failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open /dev/vhci failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open /dev/vhci failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open /dev/vhci failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open /dev/vhci failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open /dev/vhci failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open /dev/vhci failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open /dev/vhci failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open /dev/vhci failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open /dev/vhci failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open /dev/vhci failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open /dev/vhci failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open /dev/vhci failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open /dev/vhci failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open /dev/vhci failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open /dev/vhci failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open /dev/vhci failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open /dev/vhci failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open /dev/vhci failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open /dev/vhci failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open /dev/vhci failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: repeatedly failed to execute the program
proc=6 req=426 state=3 status=67 (errno 32: Broken pipe)
[  157.630648][    T9] device hsr_slave_0 left promiscuous mode
[  157.639982][    T9] device hsr_slave_1 left promiscuous mode
[  157.654997][    T9] batman_adv: batadv0: Removing interface: batadv_slave_0
[  157.674760][    T9] batman_adv: batadv0: Removing interface: batadv_slave_1
[  157.683798][    T9] device bridge_slave_1 left promiscuous mode
[  157.697108][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[  157.706716][    T9] device bridge_slave_0 left promiscuous mode
[  157.712902][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[  157.910925][    T9] team0 (unregistering): Port device team_slave_1 removed
[  157.965991][    T9] team0 (unregistering): Port device team_slave_0 removed
[  157.993294][    T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  158.023945][    T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  158.157940][    T9] bond0 (unregistering): Released all slaves
[  158.644057][    C1] net_ratelimit: 8 callbacks suppressed
[  160.413231][    T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.497562][    T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.588155][    T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.647195][    T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  161.674908][    T9] device hsr_slave_0 left promiscuous mode
[  161.741193][    T9] device hsr_slave_1 left promiscuous mode
[  161.751894][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  161.759432][    T9] batman_adv: batadv0: Removing interface: batadv_slave_0
[  161.775670][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  161.783217][    T9] batman_adv: batadv0: Removing interface: batadv_slave_1
[  161.808492][    T9] device bridge_slave_1 left promiscuous mode
[  161.823236][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[  161.835172][    T9] device bridge_slave_0 left promiscuous mode
[  161.841501][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[  161.863464][    T9] device veth1_macvtap left promiscuous mode
[  161.871887][    T9] device veth0_macvtap left promiscuous mode
[  161.879010][    T9] device veth1_vlan left promiscuous mode
[  161.886913][    T9] device veth0_vlan left promiscuous mode
[  162.238272][    T9] team0 (unregistering): Port device team_slave_1 removed
[  162.260595][    T9] team0 (unregistering): Port device team_slave_0 removed
[  162.283742][    T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  162.308853][    T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  162.453814][    T9] bond0 (unregistering): Released all slaves