last executing test programs:

3m10.512906987s ago: executing program 2 (id=270):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {}, {@nomblk_io_submit}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x469, &(0x7f0000002480)="$eJzs3MtvVFUYAPDv3r54tyo+QNAqJhIfLS3PhRuMJi40MdEFxlVtC0EGqrQmQkhAF7g0JO6NSxP/Ale6MerKxMSV7g0JMWxEE5Mx9869nXE6Uzt0YID5/ZIL58w9wznfnHPmPs5cAuhb49kfScSWiPg1IjbUsv8tMF7768b1C7N/Xb8wm0S1+sYfSV7uz+sXZsui5fs21zLVapEfaVHv5bcjZiqV+bNFfnLp9HuTi+fOP3/y9MyJ+RPzZ6aPHDmwf/fwoemDXYlzNGvrSCzs2vHKW1demz125Z0fvsrau6XY3xhHt4zXPt2VBrpdU+9tbUgngz1sCB3JhmLWXUP5/B+Ngdi4vG80Xv64p40DbqlqtVptdXwuXKoC97Aket0CoDfKA312/Vtut+nU445w7WjE+4dr8d8ottqewUiLMkNN17fdNB4Rxy79/Xm2xS26DwEA0OiboxHxXKvzvzQeaii3rVhDGYuI+yLi/oh4ICK2R8SDEXnZhyPikQ7rb14hWXn+k169qcDWKDv/e6FY21o+//unmsdfGBsoclvz+IeS4ycr8/uKz2RvDI1k+alV6vj2pZ8/bbev8fwv27L6y3PBmvTqYNMNurmZpZl1hr3s2kcROweb4s8lUS7jJBGxIyJ2dvQv168wTj7z5a52perxb4yIVvGvogvrTNUvIp6u9f+laIq/lLRdn5w6fGj64OSGqMzvmyxHxUo//nT59Xb1/3//31pZ/29qHv/13ruYDflkQ8TiufOn8vXaxc7ruPzbJy2vaTatY/wPJ2/m6eHitQ9nlpbOTkUMJ6+ufH26/t4yX5bP4t+7p9X4T/PvuCj6/9GIyAbx7oh4LCIeL9r+REQ8GRF7Von/+xeferfdvvbxr3JXvouy+Oda9H/D+B/LUvX+7zwxcOq7rzuPv5T1/4E8tbd4ZS3ff2tt4Ho+OwAAALhbpPlv4JN0YjmdphMTtd/wb49NaWVhcenZ4wsfnJmr/VZ+LIbS8k7XaMP90Kni3nCZn27K7y/uG382sDHPT8wuVOZ6HTz0uc1t5n/m93vwORWgiee1oH+Z/9C/zH/oX/X5f6in7QBuP8d/6F+t5v/FHrQDuP0c/6F/mf/Qv8x/6F/mP/Slts/Gp+t65P+uTfyy7Y5oxl2QiLTzdw1GL9s83NPabzoxuOb/zOImEyMtd/X6mwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA7/g0AAP//hh/x1w==")
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000300)='./bus\x00', 0x2010414, &(0x7f0000000c00)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRESOCT, @ANYBLOB="b58208b37a58446284048f26b79953e521b27c3a5dbc8e7fcd644e2caaa1acc91237f4447b548c7caab7ede0f978d175cd8108db49a660493d3511a7f6d67dba109d4f769a1cddfc97c554c8d7c38ecae48c95955fb02bcd2da02935ab9658f576b9d2526dd40f73035883f2f7d388f9cb004bcef6c90d011afc4849d7d7ee3abdf4dfa36378701a61a8f83187960881d90cf42cae6384fa916f5df9e11d2546c01011f28c9be1a2a5aa2139ef29be6d87c8d93fce5239580e58fe24d4304f196fa0d43d7aeb4dc3da644ba32b1e61734c4211811d81d78f283d637a78b107898d59c7048fa04ea6e0ebe491f42f2f32bd531eeb8e2659d2", @ANYRESHEX, @ANYRES64], 0x1, 0x2d3, &(0x7f00000010c0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0xffffffffffffffe2, &(0x7f00000002c0)=0x20000002)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getpeername(0xffffffffffffffff, 0x0, &(0x7f0000000e40))
sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10002004}, 0xc, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
rt_sigqueueinfo(0x0, 0x13, 0x0)
fsopen(0x0, 0x0)
r3 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_udp_int(r3, 0x11, 0x65, &(0x7f0000000180)=0x82, 0x4)
connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @empty, 0x3}, 0x1c)
r4 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, 0x0, 0x0)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x4e21, 0x80, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty, 0xfffffff7}}}, 0x108)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
write(r3, &(0x7f0000000300), 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, 0x0}, 0x0)

3m8.957462016s ago: executing program 2 (id=277):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newlink={0x60, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, [@IFLA_IFNAME={0x14, 0x3, 'ip6gretap0\x00'}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}}]}, 0x60}}, 0x0)

3m8.4206755s ago: executing program 2 (id=281):
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000a40)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000a80)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000bc0)={'syzkaller0\x00', <r5=>0x0})
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c00)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000cc0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x4}, {}, {0x6, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20000000)
sendmsg$nl_route_sched(r6, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000d80)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffdfdfc, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xffff, 0xfff2}}}, 0x24}}, 0x44840)

3m8.103236033s ago: executing program 2 (id=284):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/partitions\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f00000001c0)=0x7)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002680)=ANY=[@ANYBLOB="580000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800e00010069703665727370616e00000014000280083000000008001f000500000008000400c200000000000000000000007566b31caa74046d87b18b2034395bfdb7a9100d66afca1150e97cd9211d2d111bfe0854f1cdbd1729df2dc5d8a1a54964e56bf7677537d90b2e783ca1020f31f12ab88467b8139fcf325c67511da7efd13657ea4058f400677bf6ccbf5a14d8fff299c038375301d39aeeeb0e015ed1cccf239f4d8725643517f94acbdc55284118edb824a6", @ANYRES64=r3, @ANYRESDEC=r2, @ANYBLOB="ada57ef7589c1dd64339f9ae6a304b1f4383ed226ed0f6b4ed278722524593cfb5b1ba7b02fcd3a3b22e55660da09a804e77c03aeb2324b126768fd4fced4567a4549c4fdd52a19612b6ad981d85b1bd89eb21968aa03883c241b3b5f533179c981b1894b32a8b49af26c58b637f86ff315db20601bf6e135afa31e2e98fc34135223bdbcbffc3c4ee368b43c43018b6994056538d56932df4f87271a25c2d28f9b090db8d691fc39c7ca39f867a802ce28a337788d5", @ANYRES8=r3, @ANYRES16=r1, @ANYRESHEX=r0], 0x58}, 0x1, 0x0, 0x0, 0x4040880}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1279000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r6, &(0x7f00000024c0)={0x1f, 0xffff, 0x3}, 0x6)
write(r6, &(0x7f0000002900)="34000000070000000000000006", 0xd)
connect$unix(r4, &(0x7f0000000240)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000002c0), 0x651, 0x0)
recvmmsg(r4, &(0x7f0000000300), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6)
read$FUSE(r1, &(0x7f0000000380)={0x2020}, 0x2020)
r7 = accept$alg(r0, 0x0, 0x0)
getrlimit(0x6, &(0x7f00000023c0))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000025c0)={0x0, 0x0, 0x0}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000002600), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r8, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000028c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="2087042689c806d859a6c2d47170"], 0xffffffffffffff9b}, 0x1, 0x0, 0x0, 0x20048895}, 0x890)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
sendmmsg$alg(r7, &(0x7f0000002400)=[{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000002480)='{', 0x1}], 0x1, 0x0, 0x0, 0x4048170}], 0x1, 0x20008004)
accept(r7, 0x0, 0x0)

3m4.371396454s ago: executing program 2 (id=291):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x1a0001)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x183c81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000300)={0x750, 0x0, 0x0, 'queue0\x00', 0x5})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
r5 = openat(0xffffffffffffff9c, 0x0, 0x20002, 0x80)
ioctl(r5, 0x40104d04, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000240)='./config\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/functions/hid.usb0/no_out_endpoint\x00', 0x2, 0x0)
symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00')
pwrite64(r6, &(0x7f0000000600)="1bd6c8", 0x3, 0x8)

3m0.472775464s ago: executing program 2 (id=299):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000340)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000003c0), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000400), 0x4000087, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000540)='syzkaller\x00', 0x4, 0xc3, &(0x7f0000000580)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x6}, 0x94)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0)
r4 = socket(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6gretap0\x00', <r5=>0x0})
bind$packet(r4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14)
setsockopt$packet_int(r4, 0x107, 0xf, 0x0, 0x0)
sendmsg$netlink(r4, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000002f00)}, 0x20040890)
write$uinput_user_dev(r3, &(0x7f00000006c0)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x3, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0xfffffc01, 0x0, 0x6, 0x1, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x1, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x482, 0x4800, 0x4, 0x3, 0xe, 0x4623f, 0x0, 0x10001, 0x9, 0x8000, 0x0, 0x3, 0x0, 0x3, 0xa, 0x8da8, 0x2, 0x200, 0x2, 0x5, 0xe, 0x4, 0x2, 0x6f, 0xe, 0x7, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0xffffffff, 0x9, 0x25, 0x6, 0xfffffff9, 0x3, 0x7fff, 0x72c, 0x1c32, 0x2, 0x8, 0x10000, 0x3fe, 0x7ffd, 0x3, 0x3, 0x297, 0x5, 0x0, 0x8, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000003, 0xd3e, 0xfffffff9, 0xffffffff, 0xc, 0x1, 0xffffffff, 0x6, 0x2000008, 0x800, 0xfdff, 0x2, 0x96, 0xfffffffb, 0x2, 0x0, 0x2, 0x401, 0xc, 0x2, 0xb, 0x9, 0xe, 0x5, 0x7, 0x9, 0x2, 0x1, 0x9, 0x8, 0x4, 0x1fe, 0x3], [0x401, 0x8000e584, 0xffff, 0xcd3, 0xb, 0x1f, 0x404, 0x7a, 0x4008, 0xc, 0x7, 0x9, 0x81e86, 0x5, 0x80000001, 0x8, 0x3f92, 0x6, 0x2, 0x14, 0xfffffffe, 0xfffffff9, 0x0, 0x1000, 0xb, 0x5, 0x4, 0x5, 0x200003, 0x100, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x3, 0x400004, 0x3, 0x6d7e, 0x9, 0x8, 0x3, 0xbf23, 0x9, 0x9, 0x956, 0x0, 0x5, 0xe, 0x6, 0x100fffd, 0x93, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0x80, 0x0, 0x5, 0x401, 0x5], [0x108f, 0x10003, 0x3, 0x0, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x406, 0x1, 0x5, 0x4, 0x7f, 0x5, 0x3fa6, 0x2, 0x0, 0x5, 0x8000, 0x4, 0xe47, 0x4, 0x3, 0x4000004, 0x0, 0x2851, 0x3b, 0x20000001, 0x4, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x8b, 0x46, 0x409, 0x8003, 0x4, 0x168, 0x800, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0xf, 0x3, 0x200, 0x7, 0xd4, 0xfffffffd, 0xa, 0xe, 0x101, 0xfff, 0xf, 0x136, 0x6]}, 0x45c)
ioctl$UI_DEV_CREATE(r3, 0x5501)
mount(0x0, 0x0, 0x0, 0x20400, 0x0)
ioctl(0xffffffffffffffff, 0xc138fd0f, 0x0)

2m47.435203537s ago: executing program 4 (id=339):
syz_usb_connect(0x6, 0x371, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141102)
writev(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x14, 0x8, 0x0, 0x0, 0x0, 0x0, 0x10000}, [@FRA_SRC={0x8, 0x2, @multicast2}, @FRA_FLOW={0x8}]}, 0x2c}}, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff)
ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
mkdir(&(0x7f0000000300)='./sys\x00', 0x0)
syz_open_dev$sndctrl(&(0x7f0000000340), 0x0, 0x0)
getpid()
r2 = syz_open_dev$usbfs(0x0, 0x80, 0x113201)
read$usbfs(r2, &(0x7f0000000380)=""/234, 0xea)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000540)='ping', 0x4, 0x8000, &(0x7f0000000580)={0xa, 0x1f90, 0x0, @dev={0xfe, 0x80, '\x00', 0x21}}, 0x1c)
openat$sndtimer(0xffffff9c, 0x0, 0x20480)
write(r3, &(0x7f00000005c0)='1\x00', 0x1)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x11, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000008000000000000000fdffffff85000000ae000000b7080000000000007b8af8ff00000000b7080000161300007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018030000", @ANYRES32=0x0, @ANYBLOB="0000000000000001b705000008000000850000002d00000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15)
openat(0xffffffffffffff9c, &(0x7f0000000840)='./sys/bus/pci/rescan\x00', 0x1, 0x0)

2m44.894411516s ago: executing program 32 (id=299):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000340)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000003c0), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000400), 0x4000087, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000540)='syzkaller\x00', 0x4, 0xc3, &(0x7f0000000580)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x6}, 0x94)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0)
r4 = socket(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6gretap0\x00', <r5=>0x0})
bind$packet(r4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14)
setsockopt$packet_int(r4, 0x107, 0xf, 0x0, 0x0)
sendmsg$netlink(r4, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000002f00)}, 0x20040890)
write$uinput_user_dev(r3, &(0x7f00000006c0)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x3, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0xfffffc01, 0x0, 0x6, 0x1, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x1, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x482, 0x4800, 0x4, 0x3, 0xe, 0x4623f, 0x0, 0x10001, 0x9, 0x8000, 0x0, 0x3, 0x0, 0x3, 0xa, 0x8da8, 0x2, 0x200, 0x2, 0x5, 0xe, 0x4, 0x2, 0x6f, 0xe, 0x7, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0xffffffff, 0x9, 0x25, 0x6, 0xfffffff9, 0x3, 0x7fff, 0x72c, 0x1c32, 0x2, 0x8, 0x10000, 0x3fe, 0x7ffd, 0x3, 0x3, 0x297, 0x5, 0x0, 0x8, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000003, 0xd3e, 0xfffffff9, 0xffffffff, 0xc, 0x1, 0xffffffff, 0x6, 0x2000008, 0x800, 0xfdff, 0x2, 0x96, 0xfffffffb, 0x2, 0x0, 0x2, 0x401, 0xc, 0x2, 0xb, 0x9, 0xe, 0x5, 0x7, 0x9, 0x2, 0x1, 0x9, 0x8, 0x4, 0x1fe, 0x3], [0x401, 0x8000e584, 0xffff, 0xcd3, 0xb, 0x1f, 0x404, 0x7a, 0x4008, 0xc, 0x7, 0x9, 0x81e86, 0x5, 0x80000001, 0x8, 0x3f92, 0x6, 0x2, 0x14, 0xfffffffe, 0xfffffff9, 0x0, 0x1000, 0xb, 0x5, 0x4, 0x5, 0x200003, 0x100, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x3, 0x400004, 0x3, 0x6d7e, 0x9, 0x8, 0x3, 0xbf23, 0x9, 0x9, 0x956, 0x0, 0x5, 0xe, 0x6, 0x100fffd, 0x93, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0x80, 0x0, 0x5, 0x401, 0x5], [0x108f, 0x10003, 0x3, 0x0, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x406, 0x1, 0x5, 0x4, 0x7f, 0x5, 0x3fa6, 0x2, 0x0, 0x5, 0x8000, 0x4, 0xe47, 0x4, 0x3, 0x4000004, 0x0, 0x2851, 0x3b, 0x20000001, 0x4, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x8b, 0x46, 0x409, 0x8003, 0x4, 0x168, 0x800, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0xf, 0x3, 0x200, 0x7, 0xd4, 0xfffffffd, 0xa, 0xe, 0x101, 0xfff, 0xf, 0x136, 0x6]}, 0x45c)
ioctl$UI_DEV_CREATE(r3, 0x5501)
mount(0x0, 0x0, 0x0, 0x20400, 0x0)
ioctl(0xffffffffffffffff, 0xc138fd0f, 0x0)

2m44.195700328s ago: executing program 4 (id=347):
r0 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x294, 0x8, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf1, 0xa, 0x80ffa, 0x2, 0x0, 0x7, 0x0, 0x1000004, 0x1, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ef, 0x200009ea, 0x20000010, 0x55, 0xc, 0x4008, 0x746f, 0x8, 0x6, 0x4, 0xee, 0x4, 0x7ffd]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040))
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000884, &(0x7f0000000600)={[{@fat=@nfs}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@rodir}, {@uni_xlate}, {@shortname_mixed}, {@uni_xlate}, {@shortname_winnt}, {@uni_xlate}, {@utf8}, {@fat=@codepage={'codepage', 0x3d, '1255'}}, {@shortname_lower}, {@uni_xlate}, {@shortname_lower}, {@rodir}, {@fat=@fmask={'fmask', 0x3d, 0x5}}, {@utf8no}]}, 0x2, 0x289, &(0x7f00000001c0)="$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")
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r2 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r6 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@private0, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@empty}, 0x0, @in=@remote}}, &(0x7f0000000380)=0xe8)
r8 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, <r9=>0x0}, 0x0)
r10 = getuid()
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r1, {0xee01, <r11=>0xee00}}, './file0\x00'})
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000400)={{0x2, r7, r9, r10, r11, 0x2, 0x409}, 0x4, 0x7, 0x800, 0x4, r3, r3, 0xf})
sendmsg$nl_route_sched(r6, 0x0, 0x8058)

2m43.079580242s ago: executing program 4 (id=350):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7)
syz_open_dev$tty20(0xc, 0x4, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0)
setns(0xc9, 0x0)
r3 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f00000002c0)={@nfc_llcp={0x27, 0x0, 0x1, 0x1, 0x9, 0x8, "bcfcb22cca4176f812940c68705ba2654eb46d955b84e97139305d358eccd2191ee88cfd109ab05885591e7859499899dcd529718d619218d5952d69f21a30", 0x20}, {&(0x7f0000000380)=""/150, 0x96}, 0x0, 0x5d}, 0xa0)

2m41.848232588s ago: executing program 4 (id=353):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/partitions\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f00000001c0)=0x7)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002680)=ANY=[@ANYBLOB="580000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800e00010069703665727370616e00000014000280083000000008001f000500000008000400c200000000000000000000007566b31caa74046d87b18b2034395bfdb7a9100d66afca1150e97cd9211d2d111bfe0854f1cdbd1729df2dc5d8a1a54964e56bf7677537d90b2e783ca1020f31f12ab88467b8139fcf325c67511da7efd13657ea4058f400677bf6ccbf5a14d8fff299c038375301d39aeeeb0e015ed1cccf239f4d8725643517f94acbdc55284118edb824a6", @ANYRES64=r3, @ANYRESDEC=r2, @ANYBLOB="ada57ef7589c1dd64339f9ae6a304b1f4383ed226ed0f6b4ed278722524593cfb5b1ba7b02fcd3a3b22e55660da09a804e77c03aeb2324b126768fd4fced4567a4549c4fdd52a19612b6ad981d85b1bd89eb21968aa03883c241b3b5f533179c981b1894b32a8b49af26c58b637f86ff315db20601bf6e135afa31e2e98fc34135223bdbcbffc3c4ee368b43c43018b6994056538d56932df4f87271a25c2d28f9b090db8d691fc39c7ca39f867a802ce28a337788d5", @ANYRES8=r3, @ANYRES16=r1, @ANYRESHEX=r0], 0x58}, 0x1, 0x0, 0x0, 0x4040880}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1279000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r6, &(0x7f00000024c0)={0x1f, 0xffff, 0x3}, 0x6)
write(r6, &(0x7f0000002900)="34000000070000000000000006", 0xd)
connect$unix(r4, &(0x7f0000000240)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000002c0), 0x651, 0x0)
recvmmsg(r4, &(0x7f0000000300), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6)
read$FUSE(r1, &(0x7f0000000380)={0x2020}, 0x2020)
r7 = accept$alg(r0, 0x0, 0x0)
getrlimit(0x6, &(0x7f00000023c0))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000025c0)={0x0, 0x0, 0x0}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000002600), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r8, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000028c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="2087042689c806d859a6c2d47170"], 0xffffffffffffff9b}, 0x1, 0x0, 0x0, 0x20048895}, 0x890)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
accept(r7, 0x0, 0x0)

2m40.770173418s ago: executing program 4 (id=355):
write$tun(0xffffffffffffffff, &(0x7f00000014c0)=ANY=[@ANYBLOB="d200444ac97574ad8e73f5414719af69fd9c2c7dfe63e625b9db0633fe54b4b4ec111454152f93b79637e9e893ad9c5a02b774c1290c4d6ecb6634c385b9c4953814a3fb7ff123f5c47b1bc282a6b24791836bb0c048458373fa26d3cdb2301b4d5bb7cf16914c02b89e3996fdf1a1cfbfe5cc8c419ac984e0e7de23205853525de47318f067a6a3b11fd8013ac024822f41d65c6de8461811a45162a4485008cd30089334dd99c00b3a37eb3be11bcf0e7db97e28a1e2d3ce6767db9ecb331c400de7a76072db193c1e5fb1ee830ee29ce64d720ac62285960d9bc53aaf32ac5a2c370def6558f1cb8531161df649f34b1d2814cdf240dfb2d8484597ae07c152d9fd0882848e0d48e11398bb2004de71cc25da731e9e263791da7ea33b4ce1700437bfc71df2b6871dd509156bad5ff97e588fd70ca3dd0eece45b73bedf9aacdf5caafc186c4871e2029db831e90d93cdc545a2ec793ad223ba4e3d32b8617dfd2f30d5c5836a7f221e3af714862fac8f6db37f54aa275698cd2e0f8445d6c180259753146624c00937baa6fa83e7958028667ff7814c4994c0533d804dbccd75a7e75c7bece906ec46db8badb70379d09def91a1bec84d4efa72db6c4923a26941631688a44425fc6c4950f3d4378b40a25ff629865507059abfd29a6d1211a7480e91d89b8de13579bebbdbba122b0758845414942c9fc7d310d5e7cc49728095588e01fb59cbfdeb539681ac36ecc1e1f530b0c9de98284fe9879f24c4bec780146333299b0f383d8ee374c416dacf72a33aa45a9fba771a8e4d3a0fd730ed67a20ff60ddbfbb7410636b85ad6a3826712750c1c054c4f8565f6e7c1bc0ed8188eba179a07adc8640168ec9bb6fda97b2e93bcea3c4585561d8fabc97241c0e382e2130c405e408161dbacdf478d36414ea3a083328af4ccbc736a90bbfc397ca758a2ed46c8655642faefc8df403825672fa2fe60e42dbf148ebbc8055e30a0b480dea4766787e4f8647c3c08096ef682fee00d842b031f8da1a445321bff5992c79dcc3874e007d47ff71c9d54e804b6f7d8f0ac3133971d060ce48743339b8c62edd59f67d7b20ff1f0b7dac62cfebef970d4c9c132d8891eca9ded44d36942680cc906fcf7da3d6d9681c0ab0c3a8ada86b9bfa8abfd773d15201f4311dc620893962625ec8d3784972d5af5580135944fd5bfb444fdd8b43e7aadafa18bea97041a64e760e84186fac6338833b28cad593dd1998846083db5ce0bbb3569424b8672725a1a8f6b883c0ac3f09950bb8f86f11b2c439bf41fbb468b27e9e13e6610e9f4158d9284ed5d782389c17e1e94d1dcbf6982b39474b35045dc6f68fa2db20c7e830367b62914eb7594cce31f092a05fa0f34b5f37ca953fd892e0549976504cd8e63bec688248cdbb34365d98a48ea16cc34344555cdb3e912fbcf6031e3c2f698780e23cabd105d57e1232d2e20b623ee624a8d7c3a145943089015479eb5fac62d7b297df301292ee732606bee61d10c97b6acd8dba89368f31bcb6275139af52169b953f7274b269b9631769cbf36edf9fc621e50e09fdb8bb18f3690a9a0bca097935a6175676f9197bb9a60e2b28d364a70e0aabf85fb084716c0d6f44d0ad716297c02cba8da2dd9a4e7a6262de974a9dda597143bb0583b60b19c62ecd36d49d2ad7991e90e8ffc564a831536449af3886caf1a86fca25039362ed98a88ce841c810f694eef579dfcb617ef5203d920f662f3872d36784ec632156a633b9096919f5bf1e133ca7ca9ea1a978fc15a1f323019df88152febbe7b778eb27b22772e341eacf3223762ff033044a623588d9ddf93c36f8ef795a30bd2971daad25aae0ab8431dc8398a8ef65423e0fee5bb1ccec3261d288879fafd3826d6b1146b36a4f478fd7c6caa12a4522245cd8c3f70c5377f6b7fc228f81e4b3c270da009ee53d62ba7ccd949ab000b5a6ad3952ab65ef74fba3ad8d3ffc76467dfaa6874b806626b6a913593229c79969df8074f543e9d210ebab78fe1377ecd4b1976ac2e74d3f20994b18dd0af875b1731d046fe102727418b9979935a65e8fc972cdb798333e2a2baae2ffe9274007313ced6c1d14f1b2484589ae98229894a6d9344a9336cb678c68633de4d233097a7d684b54ce6e719ca1409e2bad40fad1d53df0d90a83d694a944e808f5837f7342fb6ece2846489638a3290b20faec7a98b0fb7b2cb08573b72179ece11cda65260c6d7585eb6cc4bce8322f3fa22b143bcac44415a9fd9618d610442e74ef30be559c10457de8af84ccddcf66749bbbedcb0092ed695d6", @ANYRES32, @ANYRESOCT, @ANYRES32], 0x1043)
r0 = syz_usb_connect(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000ac0)={0x44, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
getsockname(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001380), r1)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000001480)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)

2m39.618407296s ago: executing program 4 (id=359):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5000000002060108000034e4000000000000000805000400000000000900020073797a3100000000050005000200000016000300686173683a6e65742c706f72742c6e65740000000500010007"], 0x50}, 0x1, 0x0, 0x0, 0x20044000}, 0x8042)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80)

2m24.506213691s ago: executing program 33 (id=359):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5000000002060108000034e4000000000000000805000400000000000900020073797a3100000000050005000200000016000300686173683a6e65742c706f72742c6e65740000000500010007"], 0x50}, 0x1, 0x0, 0x0, 0x20044000}, 0x8042)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80)

2m5.193254946s ago: executing program 1 (id=436):
prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000100)='./file1\x00', 0x40, &(0x7f0000000440)={[{@compress_algo={'compress', 0x3d, 'zstd'}}, {@clear_cache}, {@space_cache_v1}]}, 0xff, 0x50d4, &(0x7f00000051c0)="$eJzs3U+IVWUfB/Dnzjg6KDjXnbp48QW3wiQKRURDaFaYc82CosVMLYIQYVAwFy3EgpIWDgha4cJgWmR/nFVFC3GVBEEQBcEgzEKQdkIxGC6Ke8957pz7HO+5dyZ1TD+fmDnnOb/zPOeZy1nc783n3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAhhJNz585V1bdemTm7Y2DP1Us3T+w8NTE6H0KtdbyW1yeeeuaFNw5MPD8cO0zuz7b1erchs67zWWN1x8Fmv86f10IIQ8kAg/l292Bp1OLu4fKAlfZfXNh25NbeXTPHxg9dOLp5qvyn0zS80hNYKfl9dW3xXhpr/R5Izmi3C7dereMWzfqnN9w9+SMAgCUZbbQ27bej+Vvcdvt4Wk/aY0l7OmnHdwjTxcZyZOOu7jbPLWl9heY5lkWFNd3mWU/q+evfbjeSekjbnVFjCfPsPDWPNMPd5jmV1FdqngAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD3k6c/+eJ6VX3rlZmzOwb2XL1088TOUxOj8yHUW8drWbn2xMLcwqa3dj/63e4vP/6zPn5yMO8Xt6sKJ4ff4s5jIyG8Xqhci8P+vj6ERmeh1QwflQtvtnaejQUAAAAeJJtavwfa7SwODnW0a600WWv9F2Vhcf/FhW1Hbu3dNXNs/NCFo5unlj9eo8t4Y7cdr92uL/7UCsE4xt90vMV6PPVwaZxq6Yhpnn959MPtVf1L+b9enf/jKyf/AwAA8G/I/+k41Xrl//nPX91X1b+U/7d0XLKU/+OMY/4fCMvL/wAAAHA/u9v5f6w0TrVe+f/r9/edrupfyv+j/eX/VcVpx4M/xgkfHAlhtNfUAQAAgC7i/3df/Ggh5vXsk4M0r7+49fpQ1Xil/D/WX/6vHBQAAAC4p34488jfVfVS/m/0l//X3NVZAwAAAEvxv/cmD1TVS/l/sr/8vzbf5isfsk7fx3+FcHokhOHmzlRWuBKmn2wXAAAAgDsk5vSXvt18tOq8Uv6fqn7+f3zSQVz/3/H8v9L6/0Ihe+rf4x4MAAAAwMOovJ4/Ph4/++aCbt+/3+/6/09//nVD1fVL+f94f/l/sLi9k9//BwAAAMvwX/v+v1dK41Tr9fz/t9/dsLT8P91f/o/bdcU/73J8fd4ZCWFjcyd/muBn8XIHk8LsUKHQ0kh6HIg98sLsmkKhZSrpsX0khP83d44nhQ2xMJ0UbqzPC+eTwk+xkN8P7cJXSeFyvNPOrM+nmxa+iYV8gcVsXEGxrr0kIunxR7cezcJte8y1Lw4AAPBQieE5z7JDnc2QRtnZWq8T1vY6YaDXCYO9TliVnJCe2O14mOwsxON//TL+XKhQyv/n+8v/8aVYnW26rf8Pcf1//r2G7fX/k7FQTwqzsdBInxjQiNfIwu4H8Rr1Rt7jxsZ2AQAAAB5o8XOBwRWeBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAPe/ceY8dVHw787PN61+vdDUHKQxYxL0N+ktdrOw7WLyCcVBEIpGQtov6DQtbYm9TxBhs/Co4s1RhUlCKEC66IQh+2RFSnEsgqbXmEEosqQVUtGoU2fziPpgWEKkGjFNclSiRX986c2bln9j78WNsbPh/Je8+933POzDn33vGcmblnAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgt8PV373hy+3i7/jR1796U+8HXvjBbw6u/9I9ky+FMNV4vScL97zvzHNnrvvU7Ru+d/s3Hjk9fudDg3m5PB6W1v/05k8+F2v92bIQvt0TQn8aWDWSBQby5yOxvuUjIVwV5gJFiZnhrES64PDkUAhHwlygqOq7QyGMlAJ3PfPDJ75YTxweCuGdIYRauowXatkyhtLAysEsMJwGdvRngf89mykC3+nNAnDB4peh+NAfn2rOMD5/uRafv4GLtmKXV9q8vpgYb53vV7cu8EqVDKYvTF3Q21apjgVR+Xqc8G1bBN+2Sj8f8raVd6TyPZSzc6Fa6N06c+/mvbN74iu9YWKir1VNC/Q+n3pl/5ZzSS+az2FcgfGL8jm8//DNzw5+7I4XH3n98f2na19bfqGr2ap7F1ot5J+5RfM+RhttTxbB16+yl7TCTlcI4fSJk/vbxSvj//H24//4cY6PvU25Y62vjWZj8/jKSEy8PJqNzQEAAGDRWAxHTQdX/OtP29VXGf+v6O78fzzlnw/ms9aeCGFjI/HZsRCubbyeBR6Li/v4WAhvbaSmmgO3JoETIVzXSNxYVJWUWBJLrEgCvxjNAxuTwFMxMJUEHo2BQ0ngczFwPAlsiYETSeC2GAjbmtvx/0bzdnQdGIqB6awTj8erEH49GpeW9NVzRVUAAAAXST46HGh+WrrW4UIzxOHl8aFOGeIV2C0z1JIa0hFsMaxqWUN/pxp6O9VQtPtA++ZXau7pVHPlMoye5gz/c+qaHaGNyvh/sv34vzbPivRUzv+HyU2Nh5i7N4/MFhmmp5oyAAAAABfg9948vbldvDL+39jd9f/xmEhfKXM4GQ9DbB8LYbI5kFV7SzWQnfVemgcAAABgMSjOxxfnwrflj9kl2ul4upp/6hzzxxP/G+fNv+PH//J4u/WtjP+nurv+f7j5MVuJp+JafGUshCWlwI/iWtYDDSti4KX3Nwfy9j8VO+ALsar8woSiqi/EEtMxMJkEjrQq8XRR4trmQP5mFQv/bNGObXmJUgAAAAAuuXg4IJ6Xj9f/r/nbP3yyXbnK+H/63K7/b4yDK5f3zy4NYXV/CH3pDwNODmcTA8bASE+e+PvhrK6+tKqDwyHcUm9YWtV/5PP/96dzDP5kKKsqBq5927FXVtYTXx8KYXU58OxHj66vJ/YmgWLhvzsUwg311qYL/7sl2cIH0oU/vCSEt5QCRVVbloRQX9hgWtU/1PL7GKRVHa+FcHUpUFT1nloI+wIAi1X8v3Rr+cXd+x7cvnl2dmbXAibiQfyhcO+22ZmJLTtmt9ZarNPWZJ2b5jH6TLVN3d765vk4R9Hdx8a6SRc/FJwsLys/kF+5cjB/HneGBhrtXDvQ9HRd2uR3v726iFDalWrV5N4FbvJwuZK5N7FSf8w/GJaGJXt3z+ya+PTmPXt2rcn+dpt9bfY3nmfK+mpN2lfD861bFx+PltNlJc63r1aWK1m954Gdq3fve3DVtgc23zdz38wnNkyuW7vh5sn171ldb9Rk9rdDS1fOV3PS0rNHu2zWRWzp9f2lSi7FRkNCQmKxJQYH7jzVbvNTGf/vbD/+j1uduOHP52dodf5/PJ7mz16fO80/HQNHuj3/P97qbH5xYcCKJHAgBg44zQ8AAMAbQzwcGY9mxoPSB971wvvalauM/w909/v/izT/fzF1/YdaTfN/Yywx2Wr+/3Sa/2L+/wOt5v9Pp/kv5v8/chnm/99bBJIu+bX5/wEAgDeCSzf/f8fp/dMbBFQydJzeP71BQCVDx2n8u71BwDnP//83v1yzPrRRGf8f6m78b+J+AAAAuHJcc9sNP24Xr4z/j3Q3/r/08/+FVtf/r2gVmGo1MaD5/wAAAFikWs3/98xHdr6/XbnK+P94d+P/eNlFb1PuWOtro9mcdiGd0+7l0eInAwAAALA49IaJiYEu8zZNjHrr+S/zVJwKtE267NDnj53b7/9PdDf+b/pdxv2Hb3528GN3vPjaI68/vv907WvL587/AwAAAAun2+MSAAAAAAAAAAAAAADA5ffo1d+ad16AqPL7/7Cp8Xqr3//H+/413TTxTD4Z4IE4s/6XxkzzBwAAAAvroVtffTj+u+/Lf/Rf7fJWxv/j3Y3/4/0F8vvgZbfeOxHv//fZsRAat9YbzwKPxcV9fCyEtzZSU7FEdkO9D8USk1ngsThh4o2xxPRUc1VLYuB4EvjFaB44kQSeioH8KMWxeGPAPx4NYX0jtam5xM5YYjwJ3BkDK5LARAxMJoFlMbAxCfxyWR6YSgL/FAP5zQeLvvrWsryvAAAAzkU+zhpofhrScd7x/k4Zejpl6LiI4U4ZejtlqLXIEJ//dVyHgfJ8/HmG+NJAWutQUkslQ7wZ3vk3vZiu7+nmnGnByqL7YsHx5pwxw85/vukroY3K+H9Fd+P/y3j///Ru/htjYEUS2BkDG5PA9KY8cOSa5oD7/wMAAHBla3X//9G3/NWhduUq4//J7sb/8UDEm5tyx1o73/8/f37Xh7+5r7HKJ0dDeHs5sP3g9qvqiUdHQ3hXOfDE3Tc2Ru0H0xLff/G2n9cT96SBD65605l64r1JYDp20nVpIB5VObMsCcTu/UkaiP1xPA0M5oGHlmXt6En76j9Hsr7qSfvq1Eh2eUVP2lffHsmW0ZM28HASKBr4yTQQG3hHHuhN1+qbS7O1ioGRWPQvlhYXfQAAcGWKe4ED4d5tszOT6U94r+9vfoyabln+mWq1PV0u/vl4a/K7j411k+5L90VrRVUDoVZvwprK7mo5S0+jlRenlg5d9+YWTe50t/feFuVS59p1g61bNJS1aGLLjtmtAx0bvq5zlrX9HbOsqQx2yll6G13aRS1drEsXLeqyb7pY5fi8N0xM9CW5/n8MjocmnT4R3d6vr3yf/1afgnKeo5//91fb1VcZ/2/sbvwf27M0lD7On4u1/mxZCN/umTsaUQRWjWSB2NyRODxePhLCVaV+KErMDGclBpMFhyeHshHqYFrVd4eyYwzx+V3P/PCJL9YTh4dCeGfpvSqW8UItW8ZQGlg5mAWG08CO/iwQr/woAt/pzQJwwYqNQvxA5T91KYzPX67F5++Nck/QtHmVa6DmyTffNneh1NIX8muqCuf2tlWqY0FUvh4nfNsW47ct+LaVd6TyPZSzc6Fa6N06c+/mvbN74ivlPdmKBXqfy3up3aQvwufwwPmvbWe1dAUmk83H5Pzl5v8c9sTq7j9887ODH7vjxUdef3z/6drXlne9Gi3EgcKT//2mq8rdu9BqIf/MLbrtyZTtyWL8b2Dc2xZCOPTnQ59sF6+M/6e6G//3J48Nr8bO3D0WwrtLnXsydv/vjGXbwVIg20peXQ1kl9z/dLTllhMAAAAutuJwR3G8YFv+mP0gPB0nV/NPnWP+eLxi47z5u13v/U/+/mPt4pXx/3T78f+SZDWd/3f+nwXi/P+8rvRD0UvSFw5c0KHoSnUsCOf/53Wlf9uc/5+X8//O/8/H+f8OnP+f15X+tlX2knba6QohnL1+4OF28cr4f2d34//fsvn/09n8i/n/00n7i/n/p1vN/7+z1fz/B8z/DwAALKgWE82n47zK5PyVDOnk/JUMPUmGc7/FQMdp9M3/n87/f/DPbtkT2qiM/w90N/6PH4eR8tIXy/z/45talNi4qXl1i8ChGNjpjgEAAABcRvEAQbzovdsZJgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFhYd7x6ZnO7+Dt+9PWv3tT7gRd+8JuD6790z+RLIWxrvN6ThXved+a5M9d96vYN37v9G4+cHr/zoVpebiB/XN6UO9b62mgIR0qvjMTEy6P1J3OBuz78zX399cTJ0RDeXg5sP7j9qnri0dEQ3lUOPHH3jdfUEwfTEt9/8baf1xP3pIEPrnrTmXrivXmgJ13dP12WrW5PurpfXBbCWClQrO79y5qrKpbxgTzQmy7jL0eyZcTASCz68Ei2jBiYjSW2LQlhdX8IfWlV/1jLqupLq/peLauqL63qD2oh3BJC6E+r+rfBrKr+tOVPD2ZVxcC1bzv2ysp64uhgCKvLgWc/enR9PbErCRQL/8hgCDfUPzLpwr81kC18IF34nwyE8JZSoKhqeiCE+sIG06pO9GdVDaZVfaM/hKtLgaKqm/pD2Be4XOKGZGv5xd37Hty+eXZ2ZtcCJgbzZQ2Fe7fNzkxs2TG7tZasUys9pfTZz5x/259/Zf+WRuLuY2PdpIv1miyvy9NTlRfLz/vzpwONdq4daHq6brE0ebhcydybWKk/5h8MS8OSvbtndk18evOePbvWZH+7zb42+9uXR7O+WrNY+mpluZLVex7YuXr3vgdXbXtg830z9818YsPkurUbbp5c/57V9UZNZn8vRkuPXvqWXt9fquRSbDQkJCQWW6K3aes2eaVvxys7+nMrOhBqjQ10ZVhRztLTaOXFaPSt59Ha3Lk2ujIkqbRoTWXgUMmytnOWdZUxw1yWoSxLY1+wMjgs19Tb6NL4vDdMTPS16ofx5qfl7v3VBXTvqdh1XaYBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4P3bgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04FgAAAAAQ5m8dRs8GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXAoAAP//Qczu7Q==")
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
getpid()
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
fallocate(r3, 0x0, 0x0, 0x90001)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000005fc0)={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x7, 0x8000, 0x3d, 0x500, 0x5, 0x18d0010})
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x6, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000fffffff300000000ffffff80e500020000000000e500fcff00000000850000001e0000009500000000000000d1a2ace4e64100b55e7ffa1b66e605851c3059d81e6866e10d1f153ceb9fdf50e1f61ebca907c32c226d7e6c7b7c9d3ba0519da548a00360f19e394d8a3fbc89066790fb2d8152e0b77c1cbaaa1042cacb8398db5e816770a5b75396cfa3f981df101f24e98b44892eb161c3775daaa6b8"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)

1m57.549803488s ago: executing program 1 (id=455):
socket$kcm(0x29, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0, 0x0, 0x56074974}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)

1m55.403550458s ago: executing program 1 (id=463):
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0)

1m54.574147543s ago: executing program 1 (id=465):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/partitions\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f00000001c0)=0x7)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002680)=ANY=[@ANYBLOB="580000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800e00010069703665727370616e00000014000280083000000008001f000500000008000400c200000000000000000000007566b31caa74046d87b18b2034395bfdb7a9100d66afca1150e97cd9211d2d111bfe0854f1cdbd1729df2dc5d8a1a54964e56bf7677537d90b2e783ca1020f31f12ab88467b8139fcf325c67511da7efd13657ea4058f400677bf6ccbf5a14d8fff299c038375301d39aeeeb0e015ed1cccf239f4d8725643517f94acbdc55284118edb824a6", @ANYRES64=r3, @ANYRESDEC=r2, @ANYBLOB="ada57ef7589c1dd64339f9ae6a304b1f4383ed226ed0f6b4ed278722524593cfb5b1ba7b02fcd3a3b22e55660da09a804e77c03aeb2324b126768fd4fced4567a4549c4fdd52a19612b6ad981d85b1bd89eb21968aa03883c241b3b5f533179c981b1894b32a8b49af26c58b637f86ff315db20601bf6e135afa31e2e98fc34135223bdbcbffc3c4ee368b43c43018b6994056538d56932df4f87271a25c2d28f9b090db8d691fc39c7ca39f867a802ce28a337788d5", @ANYRES8=r3, @ANYRES16=r1, @ANYRESHEX=r0], 0x58}, 0x1, 0x0, 0x0, 0x4040880}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1279000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r6, &(0x7f00000024c0)={0x1f, 0xffff, 0x3}, 0x6)
write(r6, &(0x7f0000002900)="34000000070000000000000006", 0xd)
connect$unix(r4, &(0x7f0000000240)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000002c0), 0x651, 0x0)
recvmmsg(r4, &(0x7f0000000300), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6)
read$FUSE(r1, &(0x7f0000000380)={0x2020}, 0x2020)
r7 = accept$alg(r0, 0x0, 0x0)
getrlimit(0x6, &(0x7f00000023c0))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000025c0)={0x0, 0x0, 0x0}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RELOAD(r8, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000028c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="2087042689c806d859a6c2d47170"], 0xffffffffffffff9b}, 0x1, 0x0, 0x0, 0x20048895}, 0x890)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
sendmmsg$alg(r7, &(0x7f0000002400)=[{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000002480)='{', 0x1}], 0x1, 0x0, 0x0, 0x4048170}], 0x1, 0x20008004)
accept(r7, 0x0, 0x0)

1m48.390865305s ago: executing program 1 (id=477):
userfaultfd(0x801)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x80, @any, 0x0, 0x1}, 0x10)
listen(r0, 0x5)
syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xfffffffffffffed0}, @l2cap_cid_le_signaling={{0xe}, @l2cap_ecred_conn_req={{0x17, 0x42, 0xa}, {0x80, 0x200, 0x200, 0xa, [0x40]}}}}, 0x17)

1m47.175520009s ago: executing program 1 (id=481):
socket$pppoe(0x18, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r2, 0x40786e88, &(0x7f0000000800)={{&(0x7f0000000300)=[{0xfffffffffffffff5, 0x1, 0xffffe00000000000, {0x2, 0x4}, 0x200, 0x4, 0x8}, {0x400, 0x100000000, 0x3, {0xcd}, 0x7, 0x3, 0x9}, {0x0, 0x2, 0x8, {0x3, 0x4}, 0x1, 0x80000001, 0x4a8}, {0x89a, 0x1, 0x9, {0x6, 0x3a37341d}, 0x4, 0x6, 0x8}], 0x4, 0x40, 0x7}, {&(0x7f0000000400)=[{0x401, 0xfffffffffffffffc}], 0x1, 0x10, 0x6, 0x4}, {&(0x7f0000000440)=[0x80000000], 0x1, 0x8, 0x4, 0xb823}, {&(0x7f00000005c0)=[{0x262, 0x8, 0x3, 0x4, 0xd7}, {0x600000, 0x1, 0x0, 0x7ff, 0xf}, {0xfffffffffffffffb, 0x5, 0xffff, 0x1df63092, 0xf663}, {0x2, 0x2, 0x5a2, 0x7fff, 0x1}, {0x1, 0x80000000, 0x81, 0xfffffffffffffffc, 0x2}, {0x2e8, 0x5, 0xc5be, 0x1, 0x6}, {0x1, 0x9, 0x2, 0x9, 0x2}, {0xb1, 0x8001, 0x2579, 0x4, 0x41}, {0x4, 0x11f, 0x1, 0x4, 0x6a}, {0x6, 0xfffffffffffffff9, 0x0, 0xfffffffffffffff2, 0x464}], 0xa, 0x28, 0x8, 0x5}, {&(0x7f0000000780)=[0xe, 0x68a6, 0x2, 0x65f, 0x1, 0x2c4], 0x6, 0x8, 0x10, 0x6}})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28)
connect$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c)
socketpair$tipc(0x1e, 0x2, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
r4 = fcntl$dupfd(r3, 0x406, r3)
setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
write$binfmt_elf64(r4, &(0x7f00000004c0)=ANY=[], 0xfffffdcf)

1m31.842391648s ago: executing program 34 (id=481):
socket$pppoe(0x18, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r2, 0x40786e88, &(0x7f0000000800)={{&(0x7f0000000300)=[{0xfffffffffffffff5, 0x1, 0xffffe00000000000, {0x2, 0x4}, 0x200, 0x4, 0x8}, {0x400, 0x100000000, 0x3, {0xcd}, 0x7, 0x3, 0x9}, {0x0, 0x2, 0x8, {0x3, 0x4}, 0x1, 0x80000001, 0x4a8}, {0x89a, 0x1, 0x9, {0x6, 0x3a37341d}, 0x4, 0x6, 0x8}], 0x4, 0x40, 0x7}, {&(0x7f0000000400)=[{0x401, 0xfffffffffffffffc}], 0x1, 0x10, 0x6, 0x4}, {&(0x7f0000000440)=[0x80000000], 0x1, 0x8, 0x4, 0xb823}, {&(0x7f00000005c0)=[{0x262, 0x8, 0x3, 0x4, 0xd7}, {0x600000, 0x1, 0x0, 0x7ff, 0xf}, {0xfffffffffffffffb, 0x5, 0xffff, 0x1df63092, 0xf663}, {0x2, 0x2, 0x5a2, 0x7fff, 0x1}, {0x1, 0x80000000, 0x81, 0xfffffffffffffffc, 0x2}, {0x2e8, 0x5, 0xc5be, 0x1, 0x6}, {0x1, 0x9, 0x2, 0x9, 0x2}, {0xb1, 0x8001, 0x2579, 0x4, 0x41}, {0x4, 0x11f, 0x1, 0x4, 0x6a}, {0x6, 0xfffffffffffffff9, 0x0, 0xfffffffffffffff2, 0x464}], 0xa, 0x28, 0x8, 0x5}, {&(0x7f0000000780)=[0xe, 0x68a6, 0x2, 0x65f, 0x1, 0x2c4], 0x6, 0x8, 0x10, 0x6}})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28)
connect$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c)
socketpair$tipc(0x1e, 0x2, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
r4 = fcntl$dupfd(r3, 0x406, r3)
setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
write$binfmt_elf64(r4, &(0x7f00000004c0)=ANY=[], 0xfffffdcf)

17.177692023s ago: executing program 3 (id=764):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000002600), 0x2200, 0x0)
ioctl$PTP_PEROUT_REQUEST(r0, 0xc0403d11, 0x0)

17.072721094s ago: executing program 3 (id=766):
socket$inet_icmp(0x2, 0x2, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
dup(r0)
prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000480)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000004c0)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000005c0), 0x318, 0x0)
recvmmsg(r2, &(0x7f0000000600), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000640)=0x2)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, 0x0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)

15.93599851s ago: executing program 5 (id=769):
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{}]}, 0x82, 0x499, &(0x7f0000000840)="$eJzs3M1vVFUfAODfvf3gffmsigpItEqMjR8tLags3Gg0cYFRowvUVW0LIRRqaE0sIVCNwY2JIdG1ujTxL3DnxqgrExNXujckRNmAxsWYe+demE47dFqnM4V5nmSYc+acO+ecOffMPfccpgF0rcHsnyRia0T8GhE7qtHFGQarT9eunJ3468rZiSQqldf+SPJ8V6+cnSizlsdtKSJDaUT6YVIUstjs/JkT49PTU6eL+MjcyXdGZufPPHH85PixqWNTp8YOHTp4YPTpp8aebEk7s3Zd3XNuZu/uF9+4+NLEkYtv//B1Vt+tRXptO9akf+lLg1nD/6zk6tMejv//p+I2mm014aS3gxVhVXoiIuuuvmz8VyqV8zVpO+KFD1Y4fMs6Vw9YR9m1adMyrxfXxYVKQ8lNU4FbQRKdrgHQGeX1Prv/LR9tnH503OVnqzdAWbuvFY9qSm+kRZ6+uvvbVhqMiCMLf3+ePaIV6xAAACv4eOKzw/H4cvO/NO6pybe92EMZiIg7IuLOiLgrInZGxN0Red57I2JXM4XWbBDUbw0tnf+kl+qytHR3IZv/PVPsbS2e/5WzvxjoKWLb8vb3JUePT0/tLz6ToejblMVHb1LGt8///EmjtNr5X/bIyi/ngkU9LvXWLdBNjs+N55PSFrj8fsSe3vinUqnUtT+5/kEnEbE7Ivas7q23l4Hjj361t1Gmldu/5O1uaMGZUPky4pFq/y9EXftLydL9yf5tN/YnR/4X01P7R8qzYqkff7rwSqPym2//+sj6f/Pi879I+WK+CAy8VbtfOxsNdi63Nizjwm8fNbynWev535+8nn8flduu743PzZ0ejehPDufxRa+P3Ti2jJf5s/YP7ctSyvaXR6b5d1wU/X9fROwt9svuj4gHiro/GBEPRcS+hq2P+P65xmkbof8na/o/ifrzf9e56nPZ//OrDvSc+O6bRuU31/8H89BQ8Ur+/beCZiu49k8OAAAAbh1pvnKTpMPXw2k6PFz9j707Y3M6PTM799jRmXdPTVZXeAaiLy1XunbUrIeOJgvFO1bjY8VacZl+oFg3/rQn8vjwxMz0ZIfbDt1uS4Pxn/m9p9O1A9bdcvtoY8v8oA24/dSP/3Rx9PzL7awM0FZ+rw3da4Xxn7arHkD7uf5D91pu/J+vi9sLgNuT6z90L+MfupfxD92rbvz3xC+dqgnQRmv4Ob/Ahgm8OryaozZFK0uPdIN8CE0Emv97EOsdeHNjVKOJQKe/mQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFrj3wAAAP//dNXrDA==")
syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@block_validity}, {@nodiscard}, {@data_err_ignore}, {@mb_optimize_scan}, {@dioread_nolock}], [{@dont_measure}, {@audit}]}, 0x3, 0x4fe, &(0x7f0000000dc0)="$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")
socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2)
keyctl$unlink(0x9, 0x0, 0xfffffffffffffffd)
ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000680)={0x1f, 0xffff, 0x3}, 0x6)
write(r3, &(0x7f0000000d00)="1100000010000000000e00"/22, 0x16)

14.800839856s ago: executing program 5 (id=771):
mknodat(0xffffffffffffff9c, &(0x7f0000000580)='./file7\x00', 0xc1c0, 0x0)
renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7)
sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000001c0)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000240), 0x651, 0x0)
recvmmsg(r0, &(0x7f0000000280), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x6)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0), 0x4)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000480)='status\x00')
setgroups(0x400000000000026f, &(0x7f00000004c0)=[0x0, 0xee00])

11.464851458s ago: executing program 0 (id=776):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0xff, 0x1, 0x480}, 0x20)

11.2394807s ago: executing program 0 (id=778):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7)
syz_open_dev$tty20(0xc, 0x4, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0)
setns(0xc9, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f00000002c0)={@nfc_llcp={0x27, 0x0, 0x1, 0x1, 0x9, 0x8, "bcfcb22cca4176f812940c68705ba2654eb46d955b84e97139305d358eccd2191ee88cfd109ab05885591e7859499899dcd529718d619218d5952d69f21a30", 0x20}, {&(0x7f0000000380)=""/150, 0x96}, 0x0, 0x5d}, 0xa0)

10.945530651s ago: executing program 0 (id=780):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000340)=@abs, 0x6e)
recvmmsg(r1, &(0x7f0000000400), 0x4000087, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000540)='syzkaller\x00', 0x4, 0xc3, &(0x7f0000000580)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x6}, 0x94)
ptrace$setsig(0x4203, r0, 0x4, 0x0)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0)
r3 = socket(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6gretap0\x00'})
sendmsg$netlink(r3, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000002f00)}, 0x20040890)
write$uinput_user_dev(r2, &(0x7f00000006c0)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x3, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0xfffffc01, 0x0, 0x6, 0x1, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x1, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x482, 0x4800, 0x4, 0x3, 0xe, 0x4623f, 0x0, 0x10001, 0x9, 0x8000, 0x0, 0x3, 0x0, 0x3, 0xa, 0x8da8, 0x2, 0x200, 0x2, 0x5, 0xe, 0x4, 0x2, 0x6f, 0xe, 0x7, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0xffffffff, 0x9, 0x25, 0x6, 0xfffffff9, 0x3, 0x7fff, 0x72c, 0x1c32, 0x2, 0x8, 0x10000, 0x3fe, 0x7ffd, 0x3, 0x3, 0x297, 0x5, 0x0, 0x8, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000003, 0xd3e, 0xfffffff9, 0xffffffff, 0xc, 0x1, 0xffffffff, 0x6, 0x2000008, 0x800, 0xfdff, 0x2, 0x96, 0xfffffffb, 0x2, 0x0, 0x2, 0x401, 0xc, 0x2, 0xb, 0x9, 0xe, 0x5, 0x7, 0x9, 0x2, 0x1, 0x9, 0x8, 0x4, 0x1fe, 0x3], [0x401, 0x8000e584, 0xffff, 0xcd3, 0xb, 0x1f, 0x404, 0x7a, 0x4008, 0xc, 0x7, 0x9, 0x81e86, 0x5, 0x80000001, 0x8, 0x3f92, 0x6, 0x2, 0x14, 0xfffffffe, 0xfffffff9, 0x0, 0x1000, 0xb, 0x5, 0x4, 0x5, 0x200003, 0x100, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x3, 0x400004, 0x3, 0x6d7e, 0x9, 0x8, 0x3, 0xbf23, 0x9, 0x9, 0x956, 0x0, 0x5, 0xe, 0x6, 0x100fffd, 0x93, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0x80, 0x0, 0x5, 0x401, 0x5], [0x108f, 0x10003, 0x3, 0x0, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x406, 0x1, 0x5, 0x4, 0x7f, 0x5, 0x3fa6, 0x2, 0x0, 0x5, 0x8000, 0x4, 0xe47, 0x4, 0x3, 0x4000004, 0x0, 0x2851, 0x3b, 0x20000001, 0x4, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x8b, 0x46, 0x409, 0x8003, 0x4, 0x168, 0x800, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0xf, 0x3, 0x200, 0x7, 0xd4, 0xfffffffd, 0xa, 0xe, 0x101, 0xfff, 0xf, 0x136, 0x6]}, 0x45c)
ioctl$UI_DEV_CREATE(r2, 0x5501)
write$input_event(r2, &(0x7f0000000bc0)={{0x77359400}, 0x15}, 0xfe4f)

6.512887444s ago: executing program 3 (id=792):
r0 = socket$inet(0x2, 0xa, 0x1642ef26)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10)

6.433902972s ago: executing program 3 (id=794):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, 0x0)

6.404058545s ago: executing program 3 (id=795):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {}, {@nomblk_io_submit}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x469, &(0x7f0000002480)="$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")
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000300)='./bus\x00', 0x2010414, &(0x7f0000000c00)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRESOCT, @ANYBLOB="b58208b37a58446284048f26b79953e521b27c3a5dbc8e7fcd644e2caaa1acc91237f4447b548c7caab7ede0f978d175cd8108db49a660493d3511a7f6d67dba109d4f769a1cddfc97c554c8d7c38ecae48c95955fb02bcd2da02935ab9658f576b9d2526dd40f73035883f2f7d388f9cb004bcef6c90d011afc4849d7d7ee3abdf4dfa36378701a61a8f83187960881d90cf42cae6384fa916f5df9e11d2546c01011f28c9be1a2a5aa2139ef29be6d87c8d93fce5239580e58fe24d4304f196fa0d43d7aeb4dc3da644ba32b1e61734c4211811d81d78f283d637a78b107898d59c7048fa04ea6e0ebe491f42f2f32bd531eeb8e2659d2", @ANYRESHEX, @ANYRES64], 0x1, 0x2d3, &(0x7f00000010c0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getpeername(0xffffffffffffffff, 0x0, &(0x7f0000000e40))
sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10002004}, 0xc, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
rt_sigqueueinfo(0x0, 0x13, 0x0)
fsopen(0x0, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000540)={'team_slave_0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x46, 0xdd, 0x7ff, 0x7, 0x1, 0x5, 0x40, 0xa, 0x81, 0x4, 0x53b6, 0xfffffffa, 0x4, 0x7, 0x8, 0xab, [0x1ff, 0xcbde]}})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_udp_int(r4, 0x11, 0x65, &(0x7f0000000180)=0x82, 0x4)
connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @empty, 0x3}, 0x1c)
r5 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, 0x0, 0x0)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x4e21, 0x80, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty, 0xfffffff7}}}, 0x108)
write(r4, &(0x7f0000000300), 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000037c0)={0x0, 0x0, 0x0}, 0x0)

6.338288762s ago: executing program 0 (id=796):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x6)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x9, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a, 0x3}, 0x9c)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_DEST(r4, 0x0, 0x0)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
listen(r5, 0xfffffffe)

6.169044749s ago: executing program 7 (id=797):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
mmap(&(0x7f000038e000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x1000)

6.083192708s ago: executing program 5 (id=798):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000200)="b805000000b9fa0000000f01d9660f78c4020a3ef32e650f09b805000000b90000c0fe0fae41d901000000b87f8b7f26ba000000000f30660fc775022e0fba600c980f320f3566b857000f20c035000000800f22c0", 0x55}], 0xaaaaaaaaaaaaaf6, 0x10, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fd6000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000300)={0x1, 0x0, [{0x7, 0x9, 0x4, 0xffffff52, 0x362, 0x2, 0x10000}]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

5.110844557s ago: executing program 7 (id=801):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1})
write$tun(r0, &(0x7f0000000c00)={@void, @val={0x2, 0x3, 0x1b, 0x30, 0x14, 0x6}, @ipv6=@gre_packet={0x3, 0x6, "32c5ab", 0x48, 0x2f, 0xff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x19}}, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88a8, 0x0, 0x3}, {0x1}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [0x8, 0x4]}, {0x8, 0x88be, 0x4, {{0x8, 0x1, 0x7, 0x0, 0x0, 0x1, 0x7, 0x7}, 0x1, {0x1ff}}}, {0x8, 0x22eb, 0x4, {{0xc, 0x2, 0x95, 0x3, 0x1, 0x2, 0x1, 0x7}, 0x2, {0x0, 0x8, 0x3, 0x7, 0x0, 0x1, 0x2, 0x1, 0x1}}}}}}}, 0x7a)

4.39710315s ago: executing program 3 (id=802):
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f00000002c0)="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", 0x2c12, 0x1}, 0x38)
mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000680)='./proc/mtrr\x00', 0x2, 0x2)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
fchownat(0xffffffffffffff9c, 0x0, 0x0, 0xffffffffffffffff, 0x100)
ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f00000000c0)=0x1)
ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000080)={0x2, 0x7, 0x4, 0x2000000, 0xb, "4b94b89fc43c3328eae4cae1f5eba329e6f216"})
splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x7ffff000, 0x1)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000003000008000000180001801400020073797a5f74756e00000000000000000024000280040001001c0003800c0001800800"], 0x50}}, 0x0)

4.215920679s ago: executing program 7 (id=804):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000200)=0x10)
r2 = socket$inet(0x2, 0xa, 0xf)
setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f00000006c0), 0x4)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000001e80)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000001ec0)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000001f00)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001f40)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000001f80)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000002000), 0x651, 0x0)
recvmmsg(r5, &(0x7f0000002040), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000002080)=0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000020c0)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYRES16=r0, @ANYRES16, @ANYRESOCT=r4, @ANYRES8=r1, @ANYRES64], &(0x7f00000021c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000002200)={0x0, 0x1, 0x0, 0x9})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f0000002240), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_SERVICE(r7, &(0x7f0000002280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24044894}, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000240)=@assoc_value, &(0x7f0000000280)=0x8)

4.151718345s ago: executing program 5 (id=805):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r1, 0x4068aea3, &(0x7f0000000000)={0x8f, 0x0, 0x400000000009db})

3.193216283s ago: executing program 5 (id=807):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000340)=@abs, 0x6e)
recvmmsg(r1, &(0x7f0000000400), 0x4000087, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000540)='syzkaller\x00', 0x4, 0xc3, &(0x7f0000000580)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x6}, 0x94)
ptrace$setsig(0x4203, r0, 0x4, 0x0)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0)
r3 = socket(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6gretap0\x00'})
sendmsg$netlink(r3, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000002f00)}, 0x20040890)
write$uinput_user_dev(r2, &(0x7f00000006c0)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x3, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0xfffffc01, 0x0, 0x6, 0x1, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x1, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x482, 0x4800, 0x4, 0x3, 0xe, 0x4623f, 0x0, 0x10001, 0x9, 0x8000, 0x0, 0x3, 0x0, 0x3, 0xa, 0x8da8, 0x2, 0x200, 0x2, 0x5, 0xe, 0x4, 0x2, 0x6f, 0xe, 0x7, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0xffffffff, 0x9, 0x25, 0x6, 0xfffffff9, 0x3, 0x7fff, 0x72c, 0x1c32, 0x2, 0x8, 0x10000, 0x3fe, 0x7ffd, 0x3, 0x3, 0x297, 0x5, 0x0, 0x8, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000003, 0xd3e, 0xfffffff9, 0xffffffff, 0xc, 0x1, 0xffffffff, 0x6, 0x2000008, 0x800, 0xfdff, 0x2, 0x96, 0xfffffffb, 0x2, 0x0, 0x2, 0x401, 0xc, 0x2, 0xb, 0x9, 0xe, 0x5, 0x7, 0x9, 0x2, 0x1, 0x9, 0x8, 0x4, 0x1fe, 0x3], [0x401, 0x8000e584, 0xffff, 0xcd3, 0xb, 0x1f, 0x404, 0x7a, 0x4008, 0xc, 0x7, 0x9, 0x81e86, 0x5, 0x80000001, 0x8, 0x3f92, 0x6, 0x2, 0x14, 0xfffffffe, 0xfffffff9, 0x0, 0x1000, 0xb, 0x5, 0x4, 0x5, 0x200003, 0x100, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x3, 0x400004, 0x3, 0x6d7e, 0x9, 0x8, 0x3, 0xbf23, 0x9, 0x9, 0x956, 0x0, 0x5, 0xe, 0x6, 0x100fffd, 0x93, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0x80, 0x0, 0x5, 0x401, 0x5], [0x108f, 0x10003, 0x3, 0x0, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x406, 0x1, 0x5, 0x4, 0x7f, 0x5, 0x3fa6, 0x2, 0x0, 0x5, 0x8000, 0x4, 0xe47, 0x4, 0x3, 0x4000004, 0x0, 0x2851, 0x3b, 0x20000001, 0x4, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x8b, 0x46, 0x409, 0x8003, 0x4, 0x168, 0x800, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0xf, 0x3, 0x200, 0x7, 0xd4, 0xfffffffd, 0xa, 0xe, 0x101, 0xfff, 0xf, 0x136, 0x6]}, 0x45c)
ioctl$UI_DEV_CREATE(r2, 0x5501)
write$input_event(r2, &(0x7f0000000bc0)={{0x77359400}, 0x15}, 0xfe4f)

3.101157223s ago: executing program 7 (id=808):
mknodat(0xffffffffffffff9c, &(0x7f0000000580)='./file7\x00', 0xc1c0, 0x0)
renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000140)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000001c0)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000240), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000280), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x6)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0), 0x4)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000480)='status\x00')
setgroups(0x400000000000026f, &(0x7f00000004c0)=[0x0, 0xee00])

1.399670127s ago: executing program 7 (id=811):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x129902, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000080)={0x1, 0x0, [{0x40000001, 0x0, 0x0, 0xc3b, 0x9, 0x2, 0x1c}]})

1.243570333s ago: executing program 7 (id=812):
r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000b40)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000300)={0x20, 0x18, 0x6, "d6d0723a963e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000600)=ANY=[@ANYBLOB="001606"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)={0x40, 0x9, 0x1, 0xa1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac2(r0, 0x0, 0x0)

772.410111ms ago: executing program 6 (id=816):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0001, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15)
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000200)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x16, 0x5, 0xb05, 0x8502, 0x0, 0x0, "05010902a10185030901150026ff00750895088102c0"}}, 0x12e)
r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x40042, 0x1)
close(r2)
epoll_create1(0x80000)
setns(0xc9, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000600)={0x0, 0x7c}}, 0x4028800)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x54}, 0x20008000)
write$UHID_INPUT2(r1, &(0x7f0000000580)={0xc, {0x2, "0300"}}, 0x8)

615.767887ms ago: executing program 6 (id=817):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="020300091b11"], 0xd8}}, 0x0)

427.508817ms ago: executing program 6 (id=818):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={<r2=>0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000200)=0x10)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000001f00)=0x7)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000020c0)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYRES16=r0, @ANYRES16, @ANYRESOCT=r4, @ANYRES8=r1, @ANYRES64], &(0x7f00000021c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000240)=@assoc_value={<r5=>0x0}, &(0x7f0000000280)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f00000002c0)={r2, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000380)={r5, @in6={{0xa, 0x4e24, 0x5, @empty, 0x2800}}, 0xb, 0x1000, 0x20000, 0x0, 0x2e, 0x1000, 0x4}, 0x9c)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000440)={r5, 0x24, "bb075b9719d3f5733ec5ad96eb3893573d1b6667d03a07247e7c7b44093e29149143b502"}, &(0x7f0000000480)=0x2c)

345.105935ms ago: executing program 6 (id=819):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f00000002c0)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./mnt\x00', 0x0)
mount(&(0x7f0000000380)=@filename='./dev/sda1\x00', &(0x7f00000003c0)='./mnt\x00', &(0x7f0000000400)='ext4\x00', 0x8410, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0xa0000, 0x14)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000480)=ANY=[@ANYBLOB="000000004c9002fcba9b2600220001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000ce0000000000000006000000000000000000000000000000ffffff"])

228.665957ms ago: executing program 6 (id=820):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1020, 0x1, 0x11, r0, 0x2000)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)

175.627212ms ago: executing program 0 (id=821):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000003c0), 0x80001, 0x0)
ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f0000000400)=""/4096)

84.876731ms ago: executing program 5 (id=822):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/devices/system/cpu/cpu1/firmware_node/eject\x00', 0x1, 0x0)
write(r0, &(0x7f0000000280)='1', 0x1)

69.163743ms ago: executing program 0 (id=823):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000017c0), 0x2, 0x0)
ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, 0x0)

0s ago: executing program 6 (id=824):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x34, r1, 0x1, 0x4, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE_ASSOC_RESP={0x18, 0xe, [@link_id={0x65, 0x12, {@initial, @device_b, @broadcast}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044804}, 0xc0)

kernel console output (not intermixed with test programs):

ready exists on: batadv_slave_0
[   74.078573][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.094613][   T26] audit: type=1326 audit(1792759600.381:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4324 comm="syz.1.9" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f76cffc51eb code=0x7ffc0000
[   74.126616][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0
[   75.896111][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #92!!!
[   75.906125][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #192!!!
[   76.279712][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   76.806115][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[   76.826104][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[   76.846101][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[   76.866103][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[   76.886099][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[   76.906100][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[   76.926098][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[   76.956099][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[   77.008347][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   77.022401][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   77.041856][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.055882][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   77.066528][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.085230][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   77.095831][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.105710][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   77.117885][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.138703][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1
[   77.164622][ T4361] asus 0005:0B05:8502.0001: No inputs registered, leaving
[   77.175711][ T4361] asus 0005:0B05:8502.0001: hidraw0: BLUETOOTH HID v0.00 Mouse [syz0] on syz0
[   77.346511][ T4367] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[   77.377888][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   77.391759][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   77.418703][ T4189] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   77.446661][ T4373] loop2: detected capacity change from 0 to 256
[   77.489612][ T4189] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   77.541015][ T4189] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   77.585760][ T4189] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   77.703240][ T4373] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xdd63664a, utbl_chksum : 0xe619d30d)
[   77.751138][ T4373] IPv6: sit1: Disabled Multicast RS
[   77.785669][ T4373] rxe_eth0 speed is unknown, defaulting to 1000
[   78.038587][ T4384] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19'.
[   78.067864][ T1258] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.075745][ T1258] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.118388][ T1258] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   78.249466][ T1258] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.291849][ T1258] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.318308][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   79.571933][ T4406] input: syz1 as /devices/virtual/input/input6
[   81.276883][ T4266] Bluetooth: hci5: command 0x1003 tx timeout
[   81.289622][ T4201] Bluetooth: hci5: sending frame failed (-49)
[   81.318279][ T4266] rxe_eth0 speed is unknown, defaulting to 1000
[   81.404784][ T4416] loop3: detected capacity change from 0 to 512
[   81.511118][ T4416] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   81.603332][ T4416] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   81.776537][ T4416] EXT4-fs (loop3): 1 truncate cleaned up
[   81.782348][ T4416] EXT4-fs (loop3): mounted filesystem without journal. Opts: nojournal_checksum,jqfmt=vfsold,lazytime,usrquota,usrquota,,errors=continue. Quota mode: writeback.
[   82.663339][ T4439] loop3: detected capacity change from 0 to 512
[   82.947344][ T4439] EXT4-fs (loop3): Test dummy encryption mode enabled
[   82.976311][ T4439] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   83.042752][ T4439] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #16: comm syz.3.27: invalid indirect mapped block 4294967295 (level 0)
[   83.085158][ T4439] EXT4-fs (loop3): Remounting filesystem read-only
[   83.098436][ T4439] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #16: comm syz.3.27: invalid indirect mapped block 4294967295 (level 1)
[   83.120342][ T4439] EXT4-fs (loop3): Remounting filesystem read-only
[   83.131116][ T4439] EXT4-fs (loop3): 1 orphan inode deleted
[   83.140576][ T4439] EXT4-fs (loop3): 1 truncate cleaned up
[   83.150728][ T4439] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,lazytime,block_validity,test_dummy_encryption,block_validity,quota,jqfmt=vfsv0,. Quota mode: writeback.
[   83.369616][ T2241] Bluetooth: hci5: command 0x1001 tx timeout
[   83.382076][ T4201] Bluetooth: hci5: sending frame failed (-49)
[   83.762520][ T4290] asus 0005:0B05:8502.0002: No inputs registered, leaving
[   83.783120][ T4290] asus 0005:0B05:8502.0002: hidraw0: BLUETOOTH HID v0.00 Mouse [syz0] on syz0
[   85.629851][ T4472] input: syz1 as /devices/virtual/input/input8
[   86.620627][ T4466] sched: RT throttling activated
[   86.623322][ T4361] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   86.639289][ T2305] Bluetooth: hci5: command 0x1009 tx timeout
[   87.368388][   T23] cfg80211: failed to load regulatory.db
[   87.656284][ T4361] usb 4-1: Using ep0 maxpacket: 32
[   87.777046][ T4361] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   87.834915][ T4361] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   88.037087][ T4361] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[   88.105445][ T4361] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[   88.603266][ T4482] loop4: detected capacity change from 0 to 32768
[   88.636135][ T4361] usb 4-1: Product: syz
[   88.640358][ T4361] usb 4-1: Manufacturer: syz
[   88.667946][ T4482] =======================================================
[   88.667946][ T4482] WARNING: The mand mount option has been deprecated and
[   88.667946][ T4482]          and is ignored by this kernel. Remove the mand
[   88.667946][ T4482]          option from the mount to silence this warning.
[   88.667946][ T4482] =======================================================
[   88.708015][ T4361] usb 4-1: can't set config #4, error -71
[   88.717171][ T4361] usb 4-1: USB disconnect, device number 2
[   88.790849][ T4482] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz.4.38 (4482)
[   88.826328][ T4482] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[   88.836229][ T4482] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[   88.845971][ T4482] BTRFS info (device loop4): use zstd compression, level 3
[   88.853406][ T4482] BTRFS info (device loop4): force clearing of disk cache
[   88.860680][ T4482] BTRFS info (device loop4): enabling disk space caching
[   88.867875][ T4482] BTRFS info (device loop4): disk space caching is enabled
[   88.877538][ T4482] BTRFS info (device loop4): has skinny extents
[   88.905364][ T4486] block device autoloading is deprecated and will be removed.
[   88.949170][ T4485] nvmet_tcp: address family 255 not supported
[   89.159732][ T2241] asus 0005:0B05:8502.0003: No inputs registered, leaving
[   89.173754][ T4482] BTRFS info (device loop4): enabling ssd optimizations
[   89.185876][ T2241] asus 0005:0B05:8502.0003: hidraw0: BLUETOOTH HID v0.00 Mouse [syz0] on syz0
[   89.194377][ T4482] BTRFS info (device loop4): clearing free space tree
[   89.202192][ T4482] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   89.212364][ T4482] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   90.441045][ T4524] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   91.466420][ T4539] input: syz1 as /devices/virtual/input/input10
[   93.331563][ T4543] loop4: detected capacity change from 0 to 4096
[   93.483097][ T4552] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   93.598456][ T4549] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[   93.753202][ T4554] loop2: detected capacity change from 0 to 32768
[   93.806340][ T4557] loop1: detected capacity change from 0 to 512
[   93.816514][ T4554] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.55 (4554)
[   93.845005][ T4282] asus 0005:0B05:8502.0004: No inputs registered, leaving
[   93.869950][ T4557] EXT4-fs (loop1): Test dummy encryption mode enabled
[   93.891907][ T4282] asus 0005:0B05:8502.0004: hidraw0: BLUETOOTH HID v0.00 Mouse [syz0] on syz0
[   93.901053][ T4554] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[   93.910354][ T4554] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[   93.917699][ T4557] EXT4-fs (loop1): Test dummy encryption mode enabled
[   93.919938][ T4554] BTRFS info (device loop2): use zstd compression, level 3
[   93.934220][ T4554] BTRFS info (device loop2): force clearing of disk cache
[   93.941474][ T4554] BTRFS info (device loop2): enabling disk space caching
[   93.948567][ T4554] BTRFS info (device loop2): disk space caching is enabled
[   93.955801][ T4554] BTRFS info (device loop2): has skinny extents
[   93.962262][ T4557] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   94.035429][ T4557] EXT4-fs (loop1): 1 truncate cleaned up
[   94.051730][ T4557] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,nojournal_checksum,nogrpid,init_itable=0x0000000000000000,nogrpid,jqfmt=vfsv1,test_dummy_encryption,nodioread_nolock,,errors=continue. Quota mode: none.
[   94.155158][   T26] kauditd_printk_skb: 1 callbacks suppressed
[   94.155174][   T26] audit: type=1800 audit(1792759621.851:13): pid=4574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.60" name="report_desc" dev="configfs" ino=34310 res=0 errno=0
[   94.198617][   T26] audit: type=1800 audit(1792759621.901:14): pid=4574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.60" name="UDC" dev="configfs" ino=34311 res=0 errno=0
[   94.275514][ T4557] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[   94.300897][ T4554] BTRFS info (device loop2): enabling ssd optimizations
[   94.309482][ T4554] BTRFS info (device loop2): clearing free space tree
[   94.316725][ T4554] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   94.326554][ T4554] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   94.516222][ T4595] netlink: 8 bytes leftover after parsing attributes in process `syz.0.61'.
[   95.076270][ T4603] Zero length message leads to an empty skb
[   95.527521][ T4629] netlink: 'syz.2.65': attribute type 1 has an invalid length.
[   95.622899][ T4635] rxe_eth0 speed is unknown, defaulting to 1000
[   95.831215][ T4640] xt_hashlimit: size too large, truncated to 1048576
[   95.838568][ T4640] xt_hashlimit: max too large, truncated to 1048576
[   96.617485][ T4647] tc_dump_action: action bad kind
[   98.113976][ T4625] asus 0005:0B05:8502.0005: No inputs registered, leaving
[   98.352883][ T4650] loop0: detected capacity change from 0 to 32768
[   98.377571][ T4625] asus 0005:0B05:8502.0005: hidraw0: BLUETOOTH HID v0.00 Mouse [syz0] on syz0
[   98.452660][ T4650] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.77 (4650)
[   99.127000][ T4650] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[   99.135791][ T4650] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[   99.145235][ T4650] BTRFS info (device loop0): use zstd compression, level 3
[   99.153176][ T4650] BTRFS info (device loop0): force clearing of disk cache
[   99.160327][ T4650] BTRFS info (device loop0): enabling disk space caching
[   99.167476][ T4650] BTRFS info (device loop0): disk space caching is enabled
[   99.174759][ T4650] BTRFS info (device loop0): has skinny extents
[   99.227194][ T4657] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xc138fd15
[   99.370804][ T4672] fido_id[4672]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   99.842180][ T4650] BTRFS error (device loop0): open_ctree failed: -12
[  101.175368][ T4181] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by udevd (4181)
[  101.205750][ T4697] netlink: 12 bytes leftover after parsing attributes in process `syz.1.87'.
[  101.466487][ T4698] loop3: detected capacity change from 0 to 32768
[  101.589007][ T4622] asus 0005:0B05:8502.0006: No inputs registered, leaving
[  101.597042][ T4622] asus 0005:0B05:8502.0006: hidraw0: BLUETOOTH HID v0.00 Mouse [syz0] on syz0
[  101.800570][ T4716] tc_dump_action: action bad kind
[  102.435239][ T4698] XFS (loop3): Mounting V5 Filesystem
[  103.231770][ T4698] XFS (loop3): Ending clean mount
[  103.247486][ T4698] XFS (loop3): Quotacheck needed: Please wait.
[  103.385259][ T4698] XFS (loop3): Quotacheck: Done.
[  104.644479][ T4198] XFS (loop3): Unmounting Filesystem
[  104.741569][ T4761] loop1: detected capacity change from 0 to 512
[  104.889836][ T4761] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option
[  104.974354][ T4761] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  105.104518][ T4761] EXT4-fs (loop1): 1 truncate cleaned up
[  105.160477][ T4761] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000007,bsddf,nomblk_io_submit,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none.
[  105.225534][ T4262] asus 0005:0B05:8502.0007: No inputs registered, leaving
[  105.283985][ T4262] asus 0005:0B05:8502.0007: hidraw0: BLUETOOTH HID v0.00 Mouse [syz0] on syz0
[  106.078888][ T4769] fido_id[4769]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  106.595748][ T4786] loop3: detected capacity change from 0 to 2048
[  106.925064][ T4786] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option
[  107.422776][ T4786] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,grpquota,nomblk_io_submit,stripe=0x000000000004ffff,norecovery,errors=remount-ro,max_batch_time=0x000000000000186b,. Quota mode: writeback.
[  107.628423][    T7] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  108.006136][ T4262] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  108.986255][    T7] usb 2-1: config index 0 descriptor too short (expected 39, got 27)
[  109.016165][ T4262] usb 5-1: Using ep0 maxpacket: 16
[  110.326448][ T4262] usb 5-1: unable to get BOS descriptor or descriptor too short
[  110.527820][    T7] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  110.537802][    T7] usb 2-1: config 0 interface 0 has no altsetting 0
[  110.576278][    T7] usb 2-1: string descriptor 0 read error: -71
[  110.582644][    T7] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  110.606125][    T7] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  110.628221][    T7] usb 2-1: config 0 descriptor??
[  110.644653][ T4815] loop1: detected capacity change from 0 to 512
[  110.655547][    T7] usb 2-1: can't set config #0, error -71
[  110.664592][    T7] usb 2-1: USB disconnect, device number 3
[  110.682608][ T4815] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option
[  110.712707][ T2241] asus 0005:0B05:8502.0008: No inputs registered, leaving
[  110.744237][ T2241] asus 0005:0B05:8502.0008: hidraw0: BLUETOOTH HID v0.00 Mouse [syz0] on syz0
[  110.764499][ T4815] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  110.776280][ T4262] usb 5-1: unable to read config index 0 descriptor/all
[  110.785841][ T4262] usb 5-1: can't read configurations, error -71
[  110.801869][ T4815] EXT4-fs (loop1): 1 truncate cleaned up
[  110.823281][ T4815] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000007,bsddf,nomblk_io_submit,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none.
[  113.386766][ T4842] loop3: detected capacity change from 0 to 512
[  113.517095][ T4842] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  113.556190][ T4842] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  113.636203][ T4721] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[  114.176431][ T4721] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65
[  114.204922][ T4721] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.249564][ T4721] usb 3-1: Product: syz
[  114.253804][ T4721] usb 3-1: Manufacturer: syz
[  114.299260][ T4721] usb 3-1: SerialNumber: syz
[  114.387780][ T4721] usb 3-1: config 0 descriptor??
[  114.426411][ T4856] capability: warning: `syz.3.127' uses deprecated v2 capabilities in a way that may be insecure
[  114.528361][ T4856] sctp: Failed to create the SCTP UDP tunneling v4 sock
[  114.697055][ T4721] cx82310_eth: probe of 3-1:0.0 failed with error -22
[  114.796669][ T4721] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19!
[  114.836604][ T4721] usb 3-1: USB disconnect, device number 2
[  115.340738][ T4867] loop2: detected capacity change from 0 to 512
[  115.412769][ T4622] asus 0005:0B05:8502.0009: No inputs registered, leaving
[  115.420862][ T4622] asus 0005:0B05:8502.0009: hidraw0: BLUETOOTH HID v0.00 Mouse [syz0] on syz0
[  115.488438][ T4867] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option
[  115.506008][ T4348] nci: nci_rsp_packet: unknown rsp opcode 0x23
[  115.529292][ T4867] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  115.571836][ T4867] EXT4-fs (loop2): 1 truncate cleaned up
[  115.605002][ T4867] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000007,bsddf,nomblk_io_submit,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none.
[  116.016662][ T4625] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  116.530554][   T26] audit: type=1800 audit(1700000023.020:15): pid=4897 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.142" name="no_out_endpoint" dev="configfs" ino=35866 res=0 errno=0
[  116.586447][ T4625] usb 5-1: Using ep0 maxpacket: 8
[  116.736495][ T4625] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  116.753334][ T4625] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  116.947123][ T4625] usb 5-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40
[  116.961709][ T4625] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.974124][ T4625] usb 5-1: Product: syz
[  116.978827][ T4625] usb 5-1: Manufacturer: syz
[  116.983657][ T4625] usb 5-1: SerialNumber: syz
[  117.168071][ T4899] loop2: detected capacity change from 0 to 32768
[  117.191487][ T4899] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.143 (4899)
[  117.237238][ T4899] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  117.265284][ T4899] BTRFS info (device loop2): using free space tree
[  117.303697][ T4899] BTRFS info (device loop2): has skinny extents
[  117.357177][ T4625] usb 5-1: unit 6 not found!
[  117.551725][ T4899] BTRFS info (device loop2): enabling ssd optimizations
[  117.628938][ T4899] BTRFS info (device loop2): balance: start -svrange=2147483649..1025,stripes=2147483648..65537
[  117.647172][ T4899] BTRFS info (device loop2): balance: ended with status: 0
[  118.811903][ T4871] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  119.013616][ T4625] usb 5-1: USB disconnect, device number 4
[  119.240729][ T4711] asus 0005:0B05:8502.000A: No inputs registered, leaving
[  119.292926][ T4711] asus 0005:0B05:8502.000A: hidraw0: BLUETOOTH HID v0.00 Mouse [syz0] on syz0
[  120.664664][ T4948] fido_id[4948]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  122.473517][ T4943] input: syz1 as /devices/virtual/input/input18
[  125.465142][ T4971] input: syz1 as /devices/virtual/input/input19
[  126.218713][   T26] audit: type=1800 audit(1700000032.720:16): pid=4980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.155" name="no_out_endpoint" dev="configfs" ino=35940 res=0 errno=0
[  126.406424][ T4622] usb 3-1: new full-speed USB device number 3 using dummy_hcd
[  126.731035][ T4994] device veth1_to_bond entered promiscuous mode
[  127.036890][ T4622] usb 3-1: unable to get BOS descriptor or descriptor too short
[  127.107611][ T4622] usb 3-1: not running at top speed; connect to a high speed hub
[  127.310811][ T4983] device veth1_to_bond left promiscuous mode
[  127.344448][ T4622] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10
[  127.597337][ T4622] usb 3-1: New USB device found, idVendor=0a67, idProduct=5011, bcdDevice= 0.40
[  127.622342][ T4622] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  128.007318][ T5005] input: syz1 as /devices/virtual/input/input20
[  128.868972][ T5004] orangefs_mount: mount request failed with -4
[  129.649763][ T4622] usb 3-1: Product: syz
[  129.653987][ T4622] usb 3-1: Manufacturer: syz
[  129.659016][ T4622] usb 3-1: SerialNumber: syz
[  130.666333][ T4622] usb 3-1: can't set config #1, error -71
[  130.916380][ T4622] usb 3-1: USB disconnect, device number 3
[  131.304566][ T5021] input: syz1 as /devices/virtual/input/input21
[  132.259291][ T5017] sctp: failed to load transform for md5: -2
[  132.644651][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  132.653173][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  133.123630][ T5013] loop4: detected capacity change from 0 to 32768
[  133.233037][ T5013] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop4 scanned by syz.4.171 (5013)
[  133.342889][ T5013] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  133.443513][ T5013] BTRFS info (device loop4): turning on async discard
[  133.481696][ T5013] BTRFS info (device loop4): using free space tree
[  133.506376][ T5013] BTRFS info (device loop4): has skinny extents
[  133.722708][ T5044] block device autoloading is deprecated and will be removed.
[  133.726676][ T5057] block device autoloading is deprecated and will be removed.
[  133.739188][ T4361] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  133.860068][ T5066] input: syz1 as /devices/virtual/input/input22
[  135.276752][ T5013] BTRFS error (device loop4): open_ctree failed: -12
[  137.388727][ T4361] usb 4-1: device not accepting address 3, error -71
[  137.424068][ T5096] loop1: detected capacity change from 0 to 256
[  139.178009][ T5117] loop2: detected capacity change from 0 to 128
[  139.307303][ T5120] device syzkaller0 entered promiscuous mode
[  139.396592][ T4263] Bluetooth: hci5: command 0x1003 tx timeout
[  139.402785][ T4201] Bluetooth: hci5: sending frame failed (-49)
[  139.516099][ T5123] input: syz1 as /devices/virtual/input/input23
[  140.657351][ T5117] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodiscard,,errors=continue. Quota mode: none.
[  141.388404][ T5117] ext4 filesystem being mounted at /29/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  141.435538][ T5128] loop0: detected capacity change from 0 to 512
[  141.442620][ T5072] Bluetooth: hci5: command 0x1001 tx timeout
[  141.452045][ T4201] Bluetooth: hci5: sending frame failed (-49)
[  141.466957][ T5128] EXT4-fs (loop0): 1 truncate cleaned up
[  141.472730][ T5128] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none.
[  142.146586][   T26] audit: type=1800 audit(1700000048.650:17): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.201" name="no_out_endpoint" dev="configfs" ino=36149 res=0 errno=0
[  142.426319][ T2305] usb 3-1: new full-speed USB device number 5 using dummy_hcd
[  142.779024][ T5072] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  142.951541][ T2305] usb 3-1: not running at top speed; connect to a high speed hub
[  143.036494][ T5072] usb 5-1: Using ep0 maxpacket: 16
[  143.060434][ T2305] usb 3-1: config 1 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  143.082075][ T2305] usb 3-1: config 1 interface 0 altsetting 4 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  143.101524][ T2305] usb 3-1: config 1 interface 0 has no altsetting 0
[  143.226416][ T5072] usb 5-1: unable to get BOS descriptor or descriptor too short
[  143.266299][ T2305] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  143.275412][ T2305] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  143.284764][ T2305] usb 3-1: Product: 洍筑꼥띫闷⇭㴋䦲σﲒ瞌ꌘޔữ씼ꂨ㫂䟏儚潘Ŏ␥꤄뚻๛䞓∎鐿祑ɥ꫼ꊄ쫥봇㴔಩嬞顖渼觷첧廬⮒后䲆䱚駗媮峿㞛꣌ⴏ珴谐骍姣෇鵟魤ɨ渂倪⓾侐雰旚鋫禽멠憊邩瘪ꣳ⊜鷼큡ⓦ噫퍽櫽▪荧ꯔ㣊䏨̙럖瘆웿쁺ꓙ㜰֚괒뺅숝斧算
[  143.316822][ T2305] usb 3-1: Manufacturer: 䐊
[  143.321482][ T2305] usb 3-1: SerialNumber: а
[  143.336333][ T5072] usb 5-1: config 9 has an invalid interface number: 57 but max is 0
[  143.344466][ T5072] usb 5-1: config 9 has no interface number 0
[  143.352030][ T5072] usb 5-1: config 9 interface 57 has no altsetting 0
[  143.366440][ T5143] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  143.373973][ T5143] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  143.519180][ T4266] Bluetooth: hci5: command 0x1009 tx timeout
[  143.616755][ T5072] usb 5-1: string descriptor 0 read error: -22
[  143.628189][ T5072] usb 5-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=61.f7
[  143.686642][ T5072] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  143.967069][ T5143] netlink: 'syz.2.200': attribute type 1 has an invalid length.
[  143.994973][ T5143] netlink: 'syz.2.200': attribute type 2 has an invalid length.
[  144.056972][ T5072]  (null): keene_cmd_main failed (-71)
[  144.136658][ T5072] video4linux radio48: keene_cmd_main failed (-71)
[  144.192952][ T5072] radio-keene 5-1:9.57: V4L2 device registered as radio48
[  144.266410][ T2305] cdc_ether: probe of 3-1:1.0 failed with error -71
[  144.273981][ T5072] usb 5-1: USB disconnect, device number 5
[  144.302968][ T2305] usb 3-1: USB disconnect, device number 5
[  145.397395][ T5176] loop4: detected capacity change from 0 to 256
[  145.537801][ T5176] exfat: Deprecated parameter 'utf8'
[  145.612348][ T5176] exfat: Deprecated parameter 'utf8'
[  145.682370][ T5176] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  145.704025][ T5183] loop1: detected capacity change from 0 to 512
[  145.906228][ T5183] EXT4-fs (loop1): 1 truncate cleaned up
[  145.911936][ T5183] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none.
[  146.526140][ T5188] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set
[  146.559558][ T5192] loop4: detected capacity change from 0 to 512
[  146.645713][ T5192] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option
[  146.660926][ T5192] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  146.730551][ T5192] EXT4-fs (loop4): 1 truncate cleaned up
[  146.770917][ T5192] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000007,bsddf,nomblk_io_submit,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none.
[  148.293213][ T5207] batman_adv: batadv0: Adding interface: syzkaller0
[  148.421506][ T5207] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  148.540187][ T5207] batman_adv: batadv0: Interface activated: syzkaller0
[  148.572037][ T5206] batman_adv: batadv0: Interface deactivated: syzkaller0
[  148.712890][ T5223] loop2: detected capacity change from 0 to 512
[  148.786260][ T4361] usb 4-1: new full-speed USB device number 5 using dummy_hcd
[  148.805318][ T5206] batman_adv: batadv0: Removing interface: syzkaller0
[  148.931752][ T5227] input: syz1 as /devices/virtual/input/input24
[  149.217310][ T5223] EXT4-fs (loop2): 1 truncate cleaned up
[  149.224743][ T5223] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none.
[  150.951582][ T5242] loop1: detected capacity change from 0 to 512
[  150.966750][ T4361] usb 4-1: not running at top speed; connect to a high speed hub
[  150.989683][ T5238] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  151.065538][ T5238] syz.4.231 (5238) used greatest stack depth: 20880 bytes left
[  151.073661][ T4361] usb 4-1: config 1 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  151.087550][ T5242] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option
[  151.106504][ T4361] usb 4-1: config 1 interface 0 altsetting 4 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  151.120319][ T5248] jffs2: notice: (5248) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  151.145482][ T4361] usb 4-1: config 1 interface 0 has no altsetting 0
[  151.196204][ T5242] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  151.209072][ T5242] EXT4-fs (loop1): 1 truncate cleaned up
[  151.214762][ T5242] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000007,bsddf,nomblk_io_submit,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none.
[  151.254045][ T5239] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.316413][ T4361] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  151.338772][ T4361] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  151.366921][ T4361] usb 4-1: Product: 洍筑꼥띫闷⇭㴋䦲σﲒ瞌ꌘޔữ씼ꂨ㫂䟏儚潘Ŏ␥꤄뚻๛䞓∎鐿祑ɥ꫼ꊄ쫥봇㴔಩嬞顖渼觷첧廬⮒后䲆䱚駗媮峿㞛꣌ⴏ珴谐骍姣෇鵟魤ɨ渂倪⓾侐雰旚鋫禽멠憊邩瘪ꣳ⊜鷼큡ⓦ噫퍽櫽▪荧ꯔ㣊䏨̙럖瘆웿쁺ꓙ㜰֚괒뺅숝斧算
[  151.442772][ T4361] usb 4-1: Manufacturer: 䐊
[  151.447705][ T4361] usb 4-1: SerialNumber: а
[  151.486453][ T5214] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  151.516209][ T4361] usb 4-1: can't set config #1, error -71
[  151.544631][ T4361] usb 4-1: USB disconnect, device number 5
[  151.916929][ T5239] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.099831][ T5239] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.123286][ T5271] loop3: detected capacity change from 0 to 512
[  152.191792][ T5271] EXT4-fs (loop3): 1 truncate cleaned up
[  152.202883][ T5271] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none.
[  152.274705][ T5239] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  152.402071][ T5239] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  152.448480][ T4282] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  152.465664][ T5239] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  152.480210][ T5239] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  153.471535][ T4282] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  153.642119][ T4282] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  153.825335][ T4282] usb 3-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00
[  154.022950][ T4282] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  154.246533][ T5255] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  154.270956][ T4282] ims_pcu 3-1:1.0: Incorrect number of endpoints on data interface (0)
[  154.319931][ T4282] ims_pcu: probe of 3-1:1.0 failed with error -22
[  154.464909][ T4282] usb 3-1: USB disconnect, device number 6
[  154.946148][ T4282] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[  155.805029][ T5316] loop2: detected capacity change from 0 to 512
[  155.865678][ T5319] tc_dump_action: action bad kind
[  156.126348][ T5316] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option
[  156.174521][ T5316] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  156.186363][ T4282] usb 1-1: not running at top speed; connect to a high speed hub
[  156.233909][ T5316] EXT4-fs (loop2): 1 truncate cleaned up
[  156.240325][ T5316] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000007,bsddf,nomblk_io_submit,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none.
[  156.286427][ T4282] usb 1-1: config 1 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  156.297530][ T4282] usb 1-1: config 1 interface 0 altsetting 4 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  156.308585][ T4282] usb 1-1: config 1 interface 0 has no altsetting 0
[  156.424106][ T5329] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3838270764 (30706166112 ns) > initial count (15986925640 ns). Using initial count to start timer.
[  156.470465][ T5329] kvm [5328]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc2 data 0x9d00
[  156.500804][ T4282] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  156.512659][ T5329] kvm [5328]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc1 data 0x9d00
[  156.537162][ T4282] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  156.545433][ T4282] usb 1-1: Product: 洍筑꼥띫闷⇭㴋䦲σﲒ瞌ꌘޔữ씼ꂨ㫂䟏儚潘Ŏ␥꤄뚻๛䞓∎鐿祑ɥ꫼ꊄ쫥봇㴔಩嬞顖渼觷첧廬⮒后䲆䱚駗媮峿㞛꣌ⴏ珴谐骍姣෇鵟魤ɨ渂倪⓾侐雰旚鋫禽멠憊邩瘪ꣳ⊜鷼큡ⓦ噫퍽櫽▪荧ꯔ㣊䏨̙럖瘆웿쁺ꓙ㜰֚괒뺅숝斧算
[  156.677710][ T2305] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  156.869747][ T5329] APIC base relocation is unsupported by KVM
[  157.173439][ T4282] usb 1-1: Manufacturer: 䐊
[  157.185780][ T4282] usb 1-1: SerialNumber: а
[  157.206612][ T5299] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  157.213712][ T5299] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  157.294596][ T5340] loop4: detected capacity change from 0 to 4096
[  157.386276][ T2305] usb 2-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00
[  157.397675][ T2305] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  157.407602][ T5340] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  157.407894][ T2305] usb 2-1: Product: syz
[  157.451812][ T2305] usb 2-1: Manufacturer: syz
[  157.474996][ T2305] usb 2-1: SerialNumber: syz
[  157.515210][   T26] audit: type=1800 audit(1700000064.000:18): pid=5353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.262" name="no_out_endpoint" dev="configfs" ino=36427 res=0 errno=0
[  158.838294][ T2305] usb 2-1: USB2VGA dongle found at address 4
[  158.852396][ T2305] usb 2-1: Allocated 8 output buffers
[  158.891030][ T5340] ntfs3: loop4: Failed to load $Extend.
[  159.657597][ T4282] cdc_ether: probe of 1-1:1.0 failed with error -71
[  159.908695][ T5373] loop2: detected capacity change from 0 to 512
[  159.987421][ T5373] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option
[  160.065789][ T5373] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  160.135731][ T5373] EXT4-fs (loop2): 1 truncate cleaned up
[  160.145746][ T5373] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000007,bsddf,nomblk_io_submit,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none.
[  160.165259][ T4282] usb 1-1: USB disconnect, device number 2
[  160.267704][ T5384] FAULT_INJECTION: forcing a failure.
[  160.267704][ T5384] name failslab, interval 1, probability 0, space 0, times 1
[  160.373749][ T5384] CPU: 0 PID: 5384 Comm: syz.3.274 Not tainted syzkaller #0
[  160.381124][ T5384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  160.391226][ T5384] Call Trace:
[  160.394536][ T5384]  <TASK>
[  160.397489][ T5384]  dump_stack_lvl+0x188/0x250
[  160.402215][ T5384]  ? show_regs_print_info+0x20/0x20
[  160.407452][ T5384]  ? load_image+0x410/0x410
[  160.412032][ T5384]  ? __lock_acquire+0x7d40/0x7d40
[  160.417092][ T5384]  should_fail+0x383/0x4b0
[  160.421544][ T5384]  should_failslab+0x5/0x20
[  160.426072][ T5384]  slab_pre_alloc_hook+0x51/0xc0
[  160.431041][ T5384]  kmem_cache_alloc_trace+0x47/0x290
[  160.436489][ T5384]  ? __list_lru_init+0x535/0xac0
[  160.441478][ T5384]  __list_lru_init+0x535/0xac0
[  160.446378][ T5384]  alloc_super+0x7b6/0x970
[  160.450839][ T5384]  ? kill_litter_super+0xa0/0xa0
[  160.455810][ T5384]  sget_fc+0x2d4/0x6f0
[  160.459913][ T5384]  ? kill_litter_super+0xa0/0xa0
[  160.464886][ T5384]  ? fuse_reconfigure+0xb0/0xb0
[  160.469780][ T5384]  get_tree_nodev+0x26/0x160
[  160.474412][ T5384]  fuse_get_tree+0x2d7/0x4d0
[  160.479044][ T5384]  vfs_get_tree+0x88/0x270
[  160.483504][ T5384]  do_new_mount+0x247/0xa40
[  160.488055][ T5384]  __se_sys_mount+0x2e3/0x3d0
[  160.492775][ T5384]  ? __x64_sys_mount+0xc0/0xc0
[  160.497566][ T5384]  ? lockdep_hardirqs_on+0x94/0x140
[  160.502782][ T5384]  ? __x64_sys_mount+0x1c/0xc0
[  160.507573][ T5384]  do_syscall_64+0x4c/0xa0
[  160.512010][ T5384]  ? clear_bhb_loop+0x30/0x80
[  160.516707][ T5384]  ? clear_bhb_loop+0x30/0x80
[  160.521500][ T5384]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  160.527540][ T5384] RIP: 0033:0x7fce2fc3b7ca
[  160.531983][ T5384] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  160.551618][ T5384] RSP: 002b:00007fce2de90e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  160.560063][ T5384] RAX: ffffffffffffffda RBX: 00007fce2de90ee0 RCX: 00007fce2fc3b7ca
[  160.568063][ T5384] RDX: 00002000000002c0 RSI: 0000200000000300 RDI: 0000000000000000
[  160.576074][ T5384] RBP: 00002000000002c0 R08: 00007fce2de90ee0 R09: 0000000000000000
[  160.584097][ T5384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000300
[  160.592124][ T5384] R13: 00007fce2de90ea0 R14: 0000000000000000 R15: 0000200000000340
[  160.600132][ T5384]  </TASK>
[  161.293024][   T26] audit: type=1800 audit(1700000067.780:19): pid=5393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.276" name="no_out_endpoint" dev="configfs" ino=36567 res=0 errno=0
[  162.257685][ T5412] netlink: 16 bytes leftover after parsing attributes in process `syz.2.284'.
[  162.266800][ T5412] netlink: 16 bytes leftover after parsing attributes in process `syz.2.284'.
[  162.529205][ T5422] loop4: detected capacity change from 0 to 512
[  163.633275][ T5421] device syzkaller0 entered promiscuous mode
[  164.643733][ T5422] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option
[  164.656804][ T5422] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  165.647314][ T5422] EXT4-fs: failed to create workqueue
[  165.652909][ T5422] EXT4-fs (loop4): mount failed
[  165.896160][ T2305] usb 2-1: Failed to early initialize device
[  165.916552][ T2305] usb 2-1: USB disconnect, device number 4
[  169.619488][   T26] audit: type=1800 audit(1700000075.450:20): pid=5444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.291" name="no_out_endpoint" dev="configfs" ino=36714 res=0 errno=0
[  170.081332][ T5464] jffs2: notice: (5464) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  170.254828][   T26] audit: type=1800 audit(1700000076.710:21): pid=5469 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.296" name="c_chmask" dev="configfs" ino=36758 res=0 errno=0
[  170.564986][   T26] audit: type=1800 audit(1700000076.750:22): pid=5469 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.296" name="UDC" dev="configfs" ino=36760 res=0 errno=0
[  171.099152][ T5472] loop3: detected capacity change from 0 to 512
[  171.170476][ T5473] netlink: 16 bytes leftover after parsing attributes in process `syz.0.304'.
[  171.224300][ T5472] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option
[  171.343255][ T5472] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  171.399241][ T5473] netlink: 16 bytes leftover after parsing attributes in process `syz.0.304'.
[  171.564797][ T5482] input: syz1 as /devices/virtual/input/input25
[  171.678452][ T5472] EXT4-fs (loop3): 1 truncate cleaned up
[  171.769891][ T5472] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000007,bsddf,nomblk_io_submit,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none.
[  174.870830][ T5509] jffs2: notice: (5509) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  175.560453][ T5515] netlink: 16 bytes leftover after parsing attributes in process `syz.3.318'.
[  175.569639][ T5515] netlink: 16 bytes leftover after parsing attributes in process `syz.3.318'.
[  176.047493][ T5524] loop4: detected capacity change from 0 to 2048
[  176.070378][ T5526] loop1: detected capacity change from 0 to 256
[  176.136943][ T5524] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  176.147806][ T5524] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  181.062440][ T5552] jffs2: notice: (5552) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  181.236301][ T5557] netlink: 16 bytes leftover after parsing attributes in process `syz.4.330'.
[  181.245235][ T5557] netlink: 16 bytes leftover after parsing attributes in process `syz.4.330'.
[  181.343955][ T5559] ip_tables: iptables: counters copy to user failed while replacing table
[  181.594177][ T5564] loop1: detected capacity change from 0 to 256
[  183.297019][ T5585] loop0: detected capacity change from 0 to 32768
[  183.602529][ T5587] netlink: 16 bytes leftover after parsing attributes in process `syz.1.341'.
[  183.611493][ T5587] netlink: 16 bytes leftover after parsing attributes in process `syz.1.341'.
[  184.710175][ T5585] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  184.719003][ T5585] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  184.728440][ T5585] BTRFS info (device loop0): use zstd compression, level 3
[  184.735646][ T5585] BTRFS info (device loop0): force clearing of disk cache
[  184.742780][ T5585] BTRFS info (device loop0): enabling disk space caching
[  184.749837][ T5585] BTRFS info (device loop0): disk space caching is enabled
[  184.757581][ T5585] BTRFS info (device loop0): has skinny extents
[  184.791049][ T5591] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.342'.
[  184.937746][   T26] audit: type=1800 audit(1700000091.430:23): pid=5597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.343" name="idVendor" dev="configfs" ino=37983 res=0 errno=0
[  185.172263][ T5585] BTRFS info (device loop0): enabling ssd optimizations
[  185.181247][ T5585] BTRFS info (device loop0): clearing free space tree
[  185.188120][ T5585] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  185.197829][ T5585] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  185.990424][ T5618] jffs2: notice: (5618) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  186.224024][ T5623] loop4: detected capacity change from 0 to 256
[  186.476308][ T2305] Bluetooth: hci1: command 0x0406 tx timeout
[  186.482624][ T2305] Bluetooth: hci4: command 0x0406 tx timeout
[  186.547855][ T4361] Bluetooth: hci0: command 0x0406 tx timeout
[  186.574329][ T2305] Bluetooth: hci3: command 0x0406 tx timeout
[  186.600426][ T2305] Bluetooth: hci2: command 0x0406 tx timeout
[  187.588738][ T5631] rxe_eth0 speed is unknown, defaulting to 1000
[  187.712268][ T5640] device-mapper: raid: Choosing default region size of 4MiB
[  188.534994][ T5640] mdX: WARNING: ram0 appears to be on the same physical disk as ram0.
[  188.548877][ T5646] netlink: 16 bytes leftover after parsing attributes in process `syz.4.353'.
[  188.559012][ T5646] netlink: 16 bytes leftover after parsing attributes in process `syz.4.353'.
[  188.568899][ T5640] True protection against single-disk failure might be compromised.
[  188.699251][ T5640] md/raid10:mdX: unsupported raid10 layout: 0x       2
[  188.761833][ T5640] md: pers->run() failed ...
[  188.806872][ T5640] device-mapper: table: 248:1: raid: Failed to run raid array
[  188.966451][ T5640] device-mapper: ioctl: error adding target to table
[  189.360242][ T4347] Bluetooth: hci5: command 0x0409 tx timeout
[  189.661069][ T5652] netlink: 1624 bytes leftover after parsing attributes in process `syz.4.355'.
[  190.978690][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  191.031092][ T5631] chnl_net:caif_netlink_parms(): no params data found
[  191.436137][ T4266] Bluetooth: hci5: command 0x041b tx timeout
[  192.831790][ T5676] jffs2: notice: (5676) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  193.523087][ T4266] Bluetooth: hci5: command 0x040f tx timeout
[  193.864913][ T5631] bridge0: port 1(bridge_slave_0) entered blocking state
[  193.930463][ T5631] bridge0: port 1(bridge_slave_0) entered disabled state
[  193.965412][ T5631] device bridge_slave_0 entered promiscuous mode
[  194.200002][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  194.206486][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  194.213058][ T5631] bridge0: port 2(bridge_slave_1) entered blocking state
[  194.231499][ T5631] bridge0: port 2(bridge_slave_1) entered disabled state
[  194.343376][ T5631] device bridge_slave_1 entered promiscuous mode
[  194.658732][ T5693] netlink: 16 bytes leftover after parsing attributes in process `syz.1.364'.
[  194.667960][ T5693] netlink: 16 bytes leftover after parsing attributes in process `syz.1.364'.
[  194.834290][ T4348] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.896819][ T5710] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.368'.
[  194.931535][ T5631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  194.956638][ T5631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  195.021635][ T5631] team0: Port device team_slave_0 added
[  195.170097][ T4348] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  195.227432][ T5631] team0: Port device team_slave_1 added
[  195.414988][ T5721] loop3: detected capacity change from 0 to 2048
[  195.563391][ T4181]  loop3: p1 < > p4
[  195.563391][ T4181]  p4: <netbsd: >
[  195.752057][ T4348] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  195.829033][ T4181] loop3: p4 size 722688 extends beyond EOD, truncated
[  195.877553][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_0
[  195.884554][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  196.637705][   T23] Bluetooth: hci5: command 0x0419 tx timeout
[  196.651199][ T5631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  196.663625][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_1
[  196.673335][ T5721]  loop3: p1 < > p4
[  196.673335][ T5721]  p4: <netbsd: >
[  196.682550][ T5721] loop3: p4 size 722688 extends beyond EOD, truncated
[  196.826904][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  197.251564][ T4203] udevd[4203]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  197.298797][ T5631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  197.382791][ T4181] udevd[4181]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  197.703928][ T4348] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.878864][ T4203] udevd[4203]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  197.972283][ T4181] udevd[4181]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  198.752184][ T5631] device hsr_slave_0 entered promiscuous mode
[  198.873261][ T5631] device hsr_slave_1 entered promiscuous mode
[  198.997023][ T5631] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  199.016197][ T5631] Cannot create hsr debugfs directory
[  199.050676][ T5739] netlink: 12 bytes leftover after parsing attributes in process `syz.3.373'.
[  199.113134][ T5742] loop1: detected capacity change from 0 to 512
[  199.193975][ T5742] EXT4-fs (loop1): 1 truncate cleaned up
[  199.276515][ T5742] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none.
[  199.377128][ T5750] loop3: detected capacity change from 0 to 512
[  199.440949][ T5750] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option
[  199.546392][ T5750] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  199.609513][ T5750] EXT4-fs (loop3): 1 truncate cleaned up
[  199.615225][ T5750] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000007,bsddf,nomblk_io_submit,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none.
[  199.877763][ T5760] netlink: 16 bytes leftover after parsing attributes in process `syz.1.377'.
[  199.886817][ T5760] netlink: 16 bytes leftover after parsing attributes in process `syz.1.377'.
[  199.909786][ T5631] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  200.622875][ T5631] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  200.873503][ T5631] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  200.966570][ T5631] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  202.004769][ T5780] netlink: 16 bytes leftover after parsing attributes in process `syz.3.381'.
[  202.013736][ T5780] netlink: 16 bytes leftover after parsing attributes in process `syz.3.381'.
[  202.126454][ T5631] 8021q: adding VLAN 0 to HW filter on device bond0
[  202.866699][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  202.880280][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  202.890415][ T5782] netlink: 8 bytes leftover after parsing attributes in process `syz.1.382'.
[  202.938595][ T5631] 8021q: adding VLAN 0 to HW filter on device team0
[  203.012527][ T1258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  203.031858][ T1258] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  203.071112][ T1258] bridge0: port 1(bridge_slave_0) entered blocking state
[  203.078313][ T1258] bridge0: port 1(bridge_slave_0) entered forwarding state
[  203.098139][ T5793] netlink: 12 bytes leftover after parsing attributes in process `syz.0.384'.
[  203.185314][ T1258] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  203.222350][ T1258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  203.262413][ T1258] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  203.304206][ T1258] bridge0: port 2(bridge_slave_1) entered blocking state
[  203.311446][ T1258] bridge0: port 2(bridge_slave_1) entered forwarding state
[  203.322290][ T1258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  203.330491][   T23] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  203.339163][ T1258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  203.358476][ T1258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  203.459804][ T1258] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  203.546514][ T1258] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  203.702080][ T5801] netlink: 16 bytes leftover after parsing attributes in process `syz.1.387'.
[  203.711292][ T5801] netlink: 16 bytes leftover after parsing attributes in process `syz.1.387'.
[  203.739182][ T5809] loop0: detected capacity change from 0 to 512
[  203.788845][ T5809] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option
[  203.886287][ T5809] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  203.959843][ T5809] EXT4-fs (loop0): 1 truncate cleaned up
[  203.965648][ T5809] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000007,bsddf,nomblk_io_submit,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none.
[  204.137152][ T1258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  204.171212][ T1258] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  204.211921][ T1258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  204.242671][ T1258] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  204.368721][ T5631] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  204.406394][   T23] usb 4-1: Using ep0 maxpacket: 8
[  204.417272][ T5631] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  204.425540][ T5819] loop1: detected capacity change from 0 to 4096
[  204.686183][   T23] usb 4-1: config 0 has an invalid interface number: 55 but max is 0
[  204.721255][ T1258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  204.746482][   T23] usb 4-1: config 0 has no interface number 0
[  204.765240][ T1258] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  204.800652][   T23] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping
[  204.954416][   T23] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping
[  205.066736][   T23] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  205.106118][   T23] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  205.115389][   T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  205.162299][   T23] usb 4-1: config 0 descriptor??
[  205.207756][   T23] ldusb 4-1:0.55: Interrupt in endpoint not found
[  205.269405][ T5819] ntfs3: loop1: Failed to load $Extend.
[  205.322214][ T4348] device hsr_slave_0 left promiscuous mode
[  205.334047][ T4348] device hsr_slave_1 left promiscuous mode
[  205.381023][ T4348] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  205.388600][ T4348] batman_adv: batadv0: Removing interface: batadv_slave_0
[  205.401477][ T4348] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  205.436300][ T4348] batman_adv: batadv0: Removing interface: batadv_slave_1
[  205.452701][   T23] usb 4-1: USB disconnect, device number 6
[  205.485129][ T4348] device bridge_slave_1 left promiscuous mode
[  205.493682][ T4348] bridge0: port 2(bridge_slave_1) entered disabled state
[  205.518465][ T4348] device bridge_slave_0 left promiscuous mode
[  205.524742][ T4348] bridge0: port 1(bridge_slave_0) entered disabled state
[  205.650064][ T4348] device veth1_macvtap left promiscuous mode
[  205.664277][ T4348] device veth0_macvtap left promiscuous mode
[  205.679927][ T4348] device veth1_vlan left promiscuous mode
[  205.690578][ T4348] device veth0_vlan left promiscuous mode
[  205.805088][ T4188] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22.
[  205.817955][ T4188] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  206.962182][ T5667] Set syz1 is full, maxelem 65536 reached
[  207.042580][ T5840] netlink: 12 bytes leftover after parsing attributes in process `syz.1.395'.
[  207.525627][ T5849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.396'.
[  207.635966][ T4348] team0 (unregistering): Port device team_slave_1 removed
[  207.684710][ T4348] team0 (unregistering): Port device team_slave_0 removed
[  207.712735][ T4348] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  207.751443][ T4348] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  207.913974][ T4348] bond0 (unregistering): Released all slaves
[  207.974849][ T5835] netlink: 16 bytes leftover after parsing attributes in process `syz.3.393'.
[  207.984554][ T5835] netlink: 16 bytes leftover after parsing attributes in process `syz.3.393'.
[  208.165895][ T5843] rxe_eth0 speed is unknown, defaulting to 1000
[  208.188180][ T5859] syz.3.400 uses obsolete (PF_INET,SOCK_PACKET)
[  208.256420][ T4290] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  208.286496][ T5631] 8021q: adding VLAN 0 to HW filter on device batadv0
[  208.303876][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  208.316075][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  208.531722][ T4290] usb 2-1: Using ep0 maxpacket: 32
[  208.686559][ T4290] usb 2-1: config 0 has an invalid interface number: 12 but max is 0
[  208.745739][ T4290] usb 2-1: config 0 has no interface number 0
[  208.889693][ T4290] usb 2-1: config 0 interface 12 has no altsetting 0
[  209.276865][ T4290] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  209.294785][ T4290] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  209.330452][ T4290] usb 2-1: Product: syz
[  209.347075][ T4290] usb 2-1: Manufacturer: syz
[  209.355149][ T4290] usb 2-1: SerialNumber: syz
[  209.357456][   T23] Bluetooth: hci2: command 0x0409 tx timeout
[  209.377478][ T4290] usb 2-1: config 0 descriptor??
[  209.490055][ T5843] chnl_net:caif_netlink_parms(): no params data found
[  209.589620][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state
[  209.597340][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state
[  209.605507][ T5843] device bridge_slave_0 entered promiscuous mode
[  209.616622][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state
[  209.623917][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state
[  209.638262][ T5843] device bridge_slave_1 entered promiscuous mode
[  209.663518][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  209.675488][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  209.707729][ T5843] team0: Port device team_slave_0 added
[  209.715804][ T5843] team0: Port device team_slave_1 added
[  210.225331][ T5899] netlink: 12 bytes leftover after parsing attributes in process `syz.3.404'.
[  210.293128][ T4290] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  210.302548][ T4290] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71
[  210.317966][ T4290] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  210.325671][ T4290] f81534: probe of 2-1:0.12 failed with error -71
[  211.367056][ T4290] usb 2-1: USB disconnect, device number 5
[  211.448350][ T4347] Bluetooth: hci2: command 0x041b tx timeout
[  211.763290][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  211.788460][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  212.319793][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0
[  212.331039][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  214.004247][   T23] Bluetooth: hci2: command 0x040f tx timeout
[  214.112545][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  214.184794][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1
[  214.215065][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  214.302603][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  214.345375][ T5909] tc_dump_action: action bad kind
[  214.371761][ T5631] device veth0_vlan entered promiscuous mode
[  214.479327][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  214.497445][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  214.599218][ T5921] jffs2: notice: (5921) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  214.673093][ T5631] device veth1_vlan entered promiscuous mode
[  214.840376][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  214.915012][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  215.079970][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  215.409097][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  215.823232][ T5843] device hsr_slave_0 entered promiscuous mode
[  215.842646][ T5930] netlink: 12 bytes leftover after parsing attributes in process `syz.1.413'.
[  215.858714][ T5843] device hsr_slave_1 entered promiscuous mode
[  215.895770][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  215.914426][ T5843] Cannot create hsr debugfs directory
[  215.965983][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  215.987056][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  216.024693][ T5631] device veth0_macvtap entered promiscuous mode
[  216.065578][ T5631] device veth1_macvtap entered promiscuous mode
[  216.076836][ T4347] Bluetooth: hci2: command 0x0419 tx timeout
[  216.126305][ T4263] usb 1-1: new full-speed USB device number 3 using dummy_hcd
[  216.234448][ T5631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  216.266106][ T5631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  216.286301][ T5631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  216.313563][ T5631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  216.337298][ T5631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  216.358230][ T5631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  216.381168][ T5631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  216.413225][ T5631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  216.435484][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_0
[  216.456880][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  216.473010][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  216.503031][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  216.534018][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  216.542878][ T4263] usb 1-1: not running at top speed; connect to a high speed hub
[  216.578799][ T5631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  216.602309][ T5631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  216.621286][ T5631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  216.635204][ T5631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  216.656353][ T4263] usb 1-1: config 1 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  216.671041][ T5631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  216.698262][ T4263] usb 1-1: config 1 interface 0 altsetting 4 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  216.740149][ T5631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  216.769418][ T4263] usb 1-1: config 1 interface 0 has no altsetting 0
[  216.866853][ T5631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  217.047096][ T5631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.066353][ T4263] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  217.121961][ T4263] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  217.241882][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_1
[  217.255850][ T4263] usb 1-1: Product: 洍筑꼥띫闷⇭㴋䦲σﲒ瞌ꌘޔữ씼ꂨ㫂䟏儚潘Ŏ␥꤄뚻๛䞓∎鐿祑ɥ꫼ꊄ쫥봇㴔಩嬞顖渼觷첧廬⮒后䲆䱚駗媮峿㞛꣌ⴏ珴谐骍姣෇鵟魤ɨ渂倪⓾侐雰旚鋫禽멠憊邩瘪ꣳ⊜鷼큡ⓦ噫퍽櫽▪荧ꯔ㣊䏨̙럖瘆웿쁺ꓙ㜰֚괒뺅숝斧算
[  217.428267][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  217.479868][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  217.522518][ T5631] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  217.543456][ T5631] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  217.556720][ T5631] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  217.565683][ T5631] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  217.581905][ T4263] usb 1-1: Manufacturer: 䐊
[  217.588085][ T4263] usb 1-1: SerialNumber: а
[  217.616451][ T5928] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  217.624293][ T5928] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  218.229269][ T5928] netlink: 'syz.0.412': attribute type 1 has an invalid length.
[  218.281649][ T5928] netlink: 'syz.0.412': attribute type 2 has an invalid length.
[  218.416292][ T4263] cdc_ether: probe of 1-1:1.0 failed with error -71
[  218.464085][ T4263] usb 1-1: USB disconnect, device number 3
[  218.711111][ T5968] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  218.732741][ T5968] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  218.816507][ T5968] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  218.964183][  T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  219.028637][ T5973] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  219.063065][  T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  219.176543][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  220.070672][ T5843] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  220.287955][ T5982] loop1: detected capacity change from 0 to 32768
[  220.306173][ T5983] netlink: 12 bytes leftover after parsing attributes in process `syz.3.422'.
[  220.320251][ T5843] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  220.328302][ T4345] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  220.341263][ T5982] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.421 (5982)
[  220.359533][ T4345] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  220.368837][ T5982] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  220.377880][ T5982] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  220.387391][ T5982] BTRFS info (device loop1): use zstd compression, level 3
[  220.395079][ T5982] BTRFS info (device loop1): force clearing of disk cache
[  220.402311][ T5982] BTRFS info (device loop1): enabling disk space caching
[  220.410066][ T5982] BTRFS info (device loop1): disk space caching is enabled
[  220.417417][ T5982] BTRFS info (device loop1): has skinny extents
[  220.479973][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  220.494766][ T5843] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  220.568075][ T5843] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  221.397683][ T5982] BTRFS info (device loop1): enabling ssd optimizations
[  221.407792][ T5982] BTRFS info (device loop1): clearing free space tree
[  221.415549][ T5982] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  221.425593][ T5982] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  221.583659][ T6012] crypto_alloc_aead failed rc=-2
[  222.263402][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0
[  222.643355][ T6049] loop3: detected capacity change from 0 to 256
[  222.694211][ T6042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  222.718216][ T6042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  222.749376][ T5843] 8021q: adding VLAN 0 to HW filter on device team0
[  222.799966][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  222.847126][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  222.886101][ T4708] usb 6-1: new full-speed USB device number 2 using dummy_hcd
[  222.917484][  T145] bridge0: port 1(bridge_slave_0) entered blocking state
[  222.924670][  T145] bridge0: port 1(bridge_slave_0) entered forwarding state
[  223.093833][ T6049] : Can't open blockdev
[  223.296489][ T4708] usb 6-1: not running at top speed; connect to a high speed hub
[  223.350708][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  223.478999][ T4708] usb 6-1: config 1 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  223.580655][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  223.653016][ T4708] usb 6-1: config 1 interface 0 altsetting 4 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  223.716619][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  223.763183][ T4708] usb 6-1: config 1 interface 0 has no altsetting 0
[  223.780987][  T145] bridge0: port 2(bridge_slave_1) entered blocking state
[  223.788192][  T145] bridge0: port 2(bridge_slave_1) entered forwarding state
[  223.822921][ T6055] netlink: 12 bytes leftover after parsing attributes in process `syz.3.431'.
[  223.976393][ T4708] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  223.995853][ T4708] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  224.022429][ T4708] usb 6-1: Product: 洍筑꼥띫闷⇭㴋䦲σﲒ瞌ꌘޔữ씼ꂨ㫂䟏儚潘Ŏ␥꤄뚻๛䞓∎鐿祑ɥ꫼ꊄ쫥봇㴔಩嬞顖渼觷첧廬⮒后䲆䱚駗媮峿㞛꣌ⴏ珴谐骍姣෇鵟魤ɨ渂倪⓾侐雰旚鋫禽멠憊邩瘪ꣳ⊜鷼큡ⓦ噫퍽櫽▪荧ꯔ㣊䏨̙럖瘆웿쁺ꓙ㜰֚괒뺅숝斧算
[  224.055127][ T4708] usb 6-1: Manufacturer: 䐊
[  224.069646][ T4708] usb 6-1: SerialNumber: а
[  225.033832][ T4348] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  225.044740][ T6047] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  225.059406][ T6047] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  225.083816][ T5843] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  225.131165][ T5843] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  225.344487][ T6079] loop1: detected capacity change from 0 to 32768
[  225.353656][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  225.362832][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  225.371853][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  225.381010][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  225.391109][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  225.400267][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  225.411440][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  225.427393][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  225.438627][ T6079] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.436 (6079)
[  225.455502][ T6079] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  225.464457][ T6079] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  225.474056][ T6079] BTRFS info (device loop1): use zstd compression, level 3
[  225.481394][ T6079] BTRFS info (device loop1): force clearing of disk cache
[  225.488885][ T6079] BTRFS info (device loop1): enabling disk space caching
[  225.492730][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  225.495946][ T6079] BTRFS info (device loop1): disk space caching is enabled
[  225.511436][ T6079] BTRFS info (device loop1): has skinny extents
[  225.518125][ T6047] netlink: 'syz.5.428': attribute type 1 has an invalid length.
[  225.524093][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  225.551410][ T6047] netlink: 'syz.5.428': attribute type 2 has an invalid length.
[  225.573798][ T4348] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  225.606318][ T4708] cdc_ether: probe of 6-1:1.0 failed with error -71
[  225.623388][ T4708] usb 6-1: USB disconnect, device number 2
[  225.635398][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  225.667747][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  225.714538][ T4348] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.836635][   T26] audit: type=1800 audit(1700000133.330:24): pid=6116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.440" name="no_out_endpoint" dev="configfs" ino=39158 res=0 errno=0
[  226.958601][ T4348] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.981330][ T6079] BTRFS info (device loop1): enabling ssd optimizations
[  226.989586][ T6079] BTRFS info (device loop1): clearing free space tree
[  226.996840][ T6079] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  227.007105][ T6079] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  227.177796][ T6122] netlink: 12 bytes leftover after parsing attributes in process `syz.5.442'.
[  227.224303][ T6119] device vlan0 entered promiscuous mode
[  227.486996][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  227.498606][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  227.545077][ T6130] netlink: 16 bytes leftover after parsing attributes in process `syz.5.443'.
[  227.554239][ T6130] netlink: 16 bytes leftover after parsing attributes in process `syz.5.443'.
[  227.571030][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0
[  230.533116][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  230.556975][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  230.794617][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  231.029047][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  231.231305][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  231.466709][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  231.508239][ T6174] netlink: 12 bytes leftover after parsing attributes in process `syz.3.452'.
[  231.540961][ T5843] device veth0_vlan entered promiscuous mode
[  231.576839][ T5843] device veth1_vlan entered promiscuous mode
[  231.716759][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  231.735929][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  231.749773][ T5843] device veth0_macvtap entered promiscuous mode
[  231.776466][   T23] usb 6-1: new full-speed USB device number 3 using dummy_hcd
[  231.820080][ T5843] device veth1_macvtap entered promiscuous mode
[  231.876800][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  231.887329][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  231.897237][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  231.907699][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  232.056439][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  232.216825][   T23] usb 6-1: not running at top speed; connect to a high speed hub
[  232.328805][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  232.357166][   T23] usb 6-1: config 1 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  232.479358][   T23] usb 6-1: config 1 interface 0 altsetting 4 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  232.531876][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  232.586067][   T23] usb 6-1: config 1 interface 0 has no altsetting 0
[  232.597798][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  232.658647][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  232.715519][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  232.776709][   T23] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  232.803776][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0
[  232.814496][   T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  232.833921][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  232.843354][   T23] usb 6-1: Product: 洍筑꼥띫闷⇭㴋䦲σﲒ瞌ꌘޔữ씼ꂨ㫂䟏儚潘Ŏ␥꤄뚻๛䞓∎鐿祑ɥ꫼ꊄ쫥봇㴔಩嬞顖渼觷첧廬⮒后䲆䱚駗媮峿㞛꣌ⴏ珴谐骍姣෇鵟魤ɨ渂倪⓾侐雰旚鋫禽멠憊邩瘪ꣳ⊜鷼큡ⓦ噫퍽櫽▪荧ꯔ㣊䏨̙럖瘆웿쁺ꓙ㜰֚괒뺅숝斧算
[  232.921577][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  232.976395][ T6188] kAFS: unable to lookup cell '.'
[  232.987347][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  233.029384][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  233.602269][   T23] usb 6-1: Manufacturer: 䐊
[  233.607011][   T23] usb 6-1: SerialNumber: а
[  233.634886][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  233.666631][ T6175] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  233.673816][ T6175] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  233.683176][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  233.694592][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  233.705618][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  233.715649][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  233.728912][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  233.738915][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  233.753012][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  233.764033][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  233.774606][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  233.787324][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1
[  233.874253][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  233.887893][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  233.912794][ T5843] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  233.986074][ T5843] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  234.001197][ T5843] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  234.021332][ T5843] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  234.519964][ T6175] netlink: 'syz.5.451': attribute type 1 has an invalid length.
[  234.542450][ T6175] netlink: 'syz.5.451': attribute type 2 has an invalid length.
[  234.701851][   T23] cdc_ether: probe of 6-1:1.0 failed with error -71
[  234.744157][   T23] usb 6-1: USB disconnect, device number 3
[  234.865157][  T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  234.897121][  T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  235.427169][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  235.873138][ T4348] device hsr_slave_0 left promiscuous mode
[  235.890258][ T4348] device hsr_slave_1 left promiscuous mode
[  236.380853][ T6252] kAFS: unable to lookup cell '.'
[  237.603187][ T4348] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  237.619144][ T4348] batman_adv: batadv0: Removing interface: batadv_slave_0
[  237.719912][ T4348] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  237.799483][ T4348] batman_adv: batadv0: Removing interface: batadv_slave_1
[  237.976436][ T4348] device bridge_slave_1 left promiscuous mode
[  238.427513][ T4348] bridge0: port 2(bridge_slave_1) entered disabled state
[  238.457438][ T4348] device bridge_slave_0 left promiscuous mode
[  238.475549][ T4348] bridge0: port 1(bridge_slave_0) entered disabled state
[  238.518065][ T4348] device veth1_macvtap left promiscuous mode
[  238.524113][ T4348] device veth0_macvtap left promiscuous mode
[  239.355184][ T4348] device veth1_vlan left promiscuous mode
[  239.371256][ T4348] device veth0_vlan left promiscuous mode
[  240.405153][ T4348] team0 (unregistering): Port device team_slave_1 removed
[  240.479647][ T4348] team0 (unregistering): Port device team_slave_0 removed
[  241.472119][ T4348] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  241.497595][ T4348] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  241.765523][ T4348] bond0 (unregistering): Released all slaves
[  241.834600][ T6239] netlink: 16 bytes leftover after parsing attributes in process `syz.1.465'.
[  241.843701][ T6239] netlink: 16 bytes leftover after parsing attributes in process `syz.1.465'.
[  241.937952][ T4343] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  241.985266][ T4343] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  242.022446][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  242.062213][ T4201] Bluetooth: Wrong link type (-22)
[  242.231007][ T6302] kAFS: unable to lookup cell '.'
[  242.986794][ T6305] netlink: 4 bytes leftover after parsing attributes in process `syz.5.479'.
[  243.258029][ T6305] netlink: 12 bytes leftover after parsing attributes in process `syz.5.479'.
[  243.596124][ T6315] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  244.053887][ T4708] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  244.366101][ T4708] usb 6-1: Using ep0 maxpacket: 8
[  245.164338][ T4708] usb 6-1: config 0 has an invalid interface number: 143 but max is 0
[  245.185601][ T4708] usb 6-1: config 0 has no interface number 0
[  245.209933][ T4708] usb 6-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b
[  245.227657][ T4708] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  245.261294][ T4708] usb 6-1: config 0 descriptor??
[  245.656237][ T4708] usb 6-1: can't set config #0, error -71
[  245.741425][ T6332] netlink: 16 bytes leftover after parsing attributes in process `syz.5.486'.
[  245.750448][ T6332] netlink: 16 bytes leftover after parsing attributes in process `syz.5.486'.
[  246.116369][ T4708] usb 6-1: USB disconnect, device number 4
[  251.507675][ T6354] loop0: detected capacity change from 0 to 512
[  251.655083][ T6354] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option
[  251.684442][ T6354] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  251.709183][ T6367] tc_dump_action: action bad kind
[  251.742497][ T6369] netlink: 16 bytes leftover after parsing attributes in process `syz.5.495'.
[  251.751735][ T6369] netlink: 16 bytes leftover after parsing attributes in process `syz.5.495'.
[  251.759951][ T6354] EXT4-fs (loop0): 1 truncate cleaned up
[  251.891641][ T6354] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000007,bsddf,nomblk_io_submit,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none.
[  253.163001][ T6393] netlink: 16 bytes leftover after parsing attributes in process `syz.6.499'.
[  253.172031][ T6393] netlink: 16 bytes leftover after parsing attributes in process `syz.6.499'.
[  255.667495][ T6408] loop6: detected capacity change from 0 to 32768
[  255.679398][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  255.685731][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  255.710471][ T6408] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop6 scanned by syz.6.502 (6408)
[  256.387966][ T6408] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm
[  256.396835][ T6408] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  256.406287][ T6408] BTRFS info (device loop6): use zstd compression, level 3
[  256.413659][ T6408] BTRFS info (device loop6): force clearing of disk cache
[  256.420900][ T6408] BTRFS info (device loop6): enabling disk space caching
[  256.428106][ T6408] BTRFS info (device loop6): disk space caching is enabled
[  256.435661][ T6408] BTRFS info (device loop6): has skinny extents
[  257.397650][ T6434] netlink: 16 bytes leftover after parsing attributes in process `syz.0.508'.
[  257.406800][ T6434] netlink: 16 bytes leftover after parsing attributes in process `syz.0.508'.
[  258.360347][ T6408] BTRFS info (device loop6): enabling ssd optimizations
[  258.368650][ T6408] BTRFS info (device loop6): clearing free space tree
[  258.375582][ T6408] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  258.385745][ T6408] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  258.756768][ T6454] netlink: 16 bytes leftover after parsing attributes in process `syz.0.513'.
[  258.765696][ T6454] netlink: 16 bytes leftover after parsing attributes in process `syz.0.513'.
[  259.784150][ T6461] loop5: detected capacity change from 0 to 512
[  259.929640][ T6461] EXT4-fs (loop5): 1 truncate cleaned up
[  259.945555][ T6461] EXT4-fs (loop5): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none.
[  260.252310][ T6470] rxe_eth0 speed is unknown, defaulting to 1000
[  260.493780][ T5931] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 10 /dev/loop6 scanned by udevd (5931)
[  261.559947][ T4613] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  261.625654][ T6470] chnl_net:caif_netlink_parms(): no params data found
[  261.806104][ T4613] usb 4-1: Using ep0 maxpacket: 32
[  261.926315][ T4613] usb 4-1: config 0 has an invalid interface number: 85 but max is 0
[  261.936956][ T4613] usb 4-1: config 0 has no interface number 0
[  261.943259][ T4613] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  261.954589][ T4613] usb 4-1: config 0 interface 85 has no altsetting 0
[  262.294522][ T4612] Bluetooth: hci1: command 0x0409 tx timeout
[  262.306247][ T4613] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  262.321880][ T4613] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  262.336876][ T4613] usb 4-1: Product: syz
[  262.341281][ T4613] usb 4-1: Manufacturer: syz
[  262.348178][ T4613] usb 4-1: SerialNumber: syz
[  262.359848][ T4613] usb 4-1: config 0 descriptor??
[  262.448147][ T6470] bridge0: port 1(bridge_slave_0) entered blocking state
[  262.455609][ T6470] bridge0: port 1(bridge_slave_0) entered disabled state
[  262.468586][ T6470] device bridge_slave_0 entered promiscuous mode
[  262.484895][ T6470] bridge0: port 2(bridge_slave_1) entered blocking state
[  262.591909][ T6465] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set
[  262.636318][ T6470] bridge0: port 2(bridge_slave_1) entered disabled state
[  263.326178][ T4613] appletouch 4-1:0.85: Geyser mode initialized.
[  263.335713][ T4613] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input26
[  263.385318][ T6470] device bridge_slave_1 entered promiscuous mode
[  263.596472][ T6470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  263.645438][ T4258] usb 4-1: USB disconnect, device number 7
[  263.863910][ T6524] loop0: detected capacity change from 0 to 32768
[  263.875917][ T6470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  263.959982][ T6470] team0: Port device team_slave_0 added
[  263.991358][ T6470] team0: Port device team_slave_1 added
[  264.061699][ T6470] batman_adv: batadv0: Adding interface: batadv_slave_0
[  264.090179][ T6470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  264.142516][ T4258] appletouch 4-1:0.85: input: appletouch disconnected
[  264.367333][ T6470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  264.396192][ T4612] Bluetooth: hci1: command 0x041b tx timeout
[  264.421291][ T6470] batman_adv: batadv0: Adding interface: batadv_slave_1
[  264.448625][ T6470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  264.716182][ T6470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  265.821565][ T6470] device hsr_slave_0 entered promiscuous mode
[  265.883008][ T6470] device hsr_slave_1 entered promiscuous mode
[  265.886669][   T23] usb 4-1: new full-speed USB device number 8 using dummy_hcd
[  265.960556][ T6470] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  266.002629][ T6470] Cannot create hsr debugfs directory
[  266.316574][   T23] usb 4-1: not running at top speed; connect to a high speed hub
[  266.406454][   T23] usb 4-1: config 1 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  266.437908][   T23] usb 4-1: config 1 interface 0 altsetting 4 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  266.558309][   T23] usb 4-1: config 1 interface 0 has no altsetting 0
[  266.568326][ T4613] Bluetooth: hci1: command 0x040f tx timeout
[  267.007898][   T23] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  267.047573][ T6564] netlink: 'syz.5.528': attribute type 72 has an invalid length.
[  267.055521][   T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  267.095708][ T6518] ODEBUG: Out of memory. ODEBUG disabled
[  267.141115][   T23] usb 4-1: Product: 洍筑꼥띫闷⇭㴋䦲σﲒ瞌ꌘޔữ씼ꂨ㫂䟏儚潘Ŏ␥꤄뚻๛䞓∎鐿祑ɥ꫼ꊄ쫥봇㴔಩嬞顖渼觷첧廬⮒后䲆䱚駗媮峿㞛꣌ⴏ珴谐骍姣෇鵟魤ɨ渂倪⓾侐雰旚鋫禽멠憊邩瘪ꣳ⊜鷼큡ⓦ噫퍽櫽▪荧ꯔ㣊䏨̙럖瘆웿쁺ꓙ㜰֚괒뺅숝斧算
[  267.228942][ T6470] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  267.266057][   T23] usb 4-1: Manufacturer: 䐊
[  267.270935][   T23] usb 4-1: SerialNumber: а
[  267.297003][ T6470] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  267.336357][ T6548] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  267.353080][ T6548] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  267.372645][ T6470] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  267.409616][ T6470] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  267.727263][ T6470] 8021q: adding VLAN 0 to HW filter on device bond0
[  267.795509][ T6470] 8021q: adding VLAN 0 to HW filter on device team0
[  267.894135][ T6548] netlink: 'syz.3.525': attribute type 1 has an invalid length.
[  268.641014][ T5071] Bluetooth: hci1: command 0x0419 tx timeout
[  268.663419][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  268.666998][ T6548] netlink: 'syz.3.525': attribute type 2 has an invalid length.
[  268.687831][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  268.743565][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  269.067587][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  269.233995][ T4343] bridge0: port 1(bridge_slave_0) entered blocking state
[  269.241150][ T4343] bridge0: port 1(bridge_slave_0) entered forwarding state
[  269.696249][   T23] cdc_ether: probe of 4-1:1.0 failed with error -71
[  269.718393][   T23] usb 4-1: USB disconnect, device number 8
[  269.775932][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  269.823661][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  269.873961][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  269.908955][ T4343] bridge0: port 2(bridge_slave_1) entered blocking state
[  269.916172][ T4343] bridge0: port 2(bridge_slave_1) entered forwarding state
[  269.988907][ T6596] loop5: detected capacity change from 0 to 512
[  270.022964][ T6598] loop0: detected capacity change from 0 to 512
[  270.027759][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  270.071880][ T6596] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option
[  270.104681][ T6596] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  270.127000][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  270.167479][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  270.178869][ T6598] EXT4-fs (loop0): 1 truncate cleaned up
[  270.184525][ T6598] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none.
[  270.255418][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  270.264728][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  270.274791][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  270.280624][ T6596] EXT4-fs (loop5): 1 truncate cleaned up
[  270.286810][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  270.298005][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  270.307094][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  270.315206][ T6596] EXT4-fs (loop5): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000007,bsddf,nomblk_io_submit,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none.
[  270.352388][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  270.500526][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  270.521378][ T6470] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  271.698032][ T6614] netlink: 'syz.3.538': attribute type 72 has an invalid length.
[  273.154628][ T6632] netlink: 'syz.6.541': attribute type 1 has an invalid length.
[  273.162430][ T6632] netlink: 'syz.6.541': attribute type 2 has an invalid length.
[  274.313569][ T6353] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  274.466292][ T6353] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  274.514628][ T6470] 8021q: adding VLAN 0 to HW filter on device batadv0
[  274.549382][ T6656] input: syz1 as /devices/virtual/input/input27
[  274.558946][ T6603] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set
[  276.548620][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  276.576815][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  277.228082][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  277.277374][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  277.348549][ T6470] device veth0_vlan entered promiscuous mode
[  277.382672][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  277.416873][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  277.474937][ T6470] device veth1_vlan entered promiscuous mode
[  277.592615][ T6353] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  277.610763][ T6353] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  277.682124][ T6470] device veth0_macvtap entered promiscuous mode
[  277.743090][ T6353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  277.797095][ T6353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  277.841633][ T6703] loop3: detected capacity change from 0 to 512
[  277.848466][ T6353] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  278.006455][ T6470] device veth1_macvtap entered promiscuous mode
[  278.091865][ T6470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  278.123816][ T6703] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option
[  278.166475][ T6470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  278.226017][ T6470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  278.291804][ T6470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  278.312360][ T6470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  278.345115][ T6470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  278.388479][ T6470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  278.423903][ T6470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  278.455766][ T6470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  278.496319][ T6470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  278.523735][ T6703] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  278.538852][ T6470] batman_adv: batadv0: Interface activated: batadv_slave_0
[  278.556653][ T1258] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  278.567125][ T1258] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  278.587373][ T1258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  278.603730][ T6470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  278.622644][ T6703] EXT4-fs (loop3): 1 truncate cleaned up
[  278.630658][ T6703] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000007,bsddf,nomblk_io_submit,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none.
[  278.655845][ T6470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  278.675222][ T6470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  278.702092][ T6470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  278.713272][ T6470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  278.724869][ T6470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  278.734948][ T6470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  279.119688][ T6470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  279.130135][ T6470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  279.141104][ T6470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  279.156182][ T6470] batman_adv: batadv0: Interface activated: batadv_slave_1
[  280.086090][ T1258] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  280.095248][ T1258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  280.159897][ T6470] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  280.169320][ T6470] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  280.179504][ T6470] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  280.188481][ T6470] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  280.398335][ T4297] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  280.416467][ T4297] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  280.430800][ T6745] loop3: detected capacity change from 0 to 512
[  280.437781][ T1258] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  280.513344][ T6745] EXT4-fs (loop3): 1 truncate cleaned up
[  280.548435][ T6745] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none.
[  280.576306][ T4345] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  280.662363][ T4345] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  281.463121][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  281.878675][ T6771] loop7: detected capacity change from 0 to 512
[  281.921812][ T6771] EXT4-fs (loop7): Ignoring removed nomblk_io_submit option
[  281.972965][ T6771] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem
[  282.047074][ T6771] EXT4-fs (loop7): 1 truncate cleaned up
[  282.066240][ T6771] EXT4-fs (loop7): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000007,bsddf,nomblk_io_submit,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none.
[  282.359451][ T6778] loop5: detected capacity change from 0 to 512
[  282.383526][ T6778] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option
[  282.417604][ T6778] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  282.454353][ T6778] EXT4-fs (loop5): 1 truncate cleaned up
[  282.477217][ T6778] EXT4-fs (loop5): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000007,bsddf,nomblk_io_submit,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none.
[  285.738263][ T6831] loop0: detected capacity change from 0 to 512
[  285.769743][ T6837] loop5: detected capacity change from 0 to 512
[  285.981431][ T6831] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option
[  286.097954][ T6831] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  286.245560][ T6837] EXT4-fs (loop5): 1 truncate cleaned up
[  286.385506][ T6837] EXT4-fs (loop5): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none.
[  286.644400][ T6831] EXT4-fs (loop0): 1 truncate cleaned up
[  286.691899][ T6831] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000007,bsddf,nomblk_io_submit,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none.
[  286.902524][ T6856] tc_dump_action: action bad kind
[  288.340386][ T6891] netlink: 16 bytes leftover after parsing attributes in process `syz.3.601'.
[  288.349371][ T6891] netlink: 16 bytes leftover after parsing attributes in process `syz.3.601'.
[  288.563089][ T6892] kAFS: unable to lookup cell '.'
[  289.517569][ T6844] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set
[  289.721556][ T6906] loop0: detected capacity change from 0 to 512
[  289.844270][ T6908] tc_dump_action: action bad kind
[  290.054265][ T6906] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option
[  290.339377][ T6906] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  290.471120][ T6906] EXT4-fs (loop0): 1 truncate cleaned up
[  290.477691][ T6906] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000007,bsddf,nomblk_io_submit,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none.
[  291.538291][ T6936] netlink: 16 bytes leftover after parsing attributes in process `syz.6.613'.
[  291.547337][ T6936] netlink: 16 bytes leftover after parsing attributes in process `syz.6.613'.
[  292.928200][ T6941] kAFS: unable to lookup cell '.'
[  293.319872][ T6950] tc_dump_action: action bad kind
[  293.436320][ T6921] loop5: detected capacity change from 0 to 32768
[  293.503737][ T6957] loop3: detected capacity change from 0 to 512
[  293.732815][ T6957] EXT4-fs (loop3): 1 truncate cleaned up
[  293.773817][ T6957] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none.
[  295.247395][ T7003] kAFS: unable to lookup cell '.'
[  295.642784][   T26] audit: type=1800 audit(1700000202.140:25): pid=7022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.635" name="no_out_endpoint" dev="configfs" ino=41823 res=0 errno=0
[  296.316239][ T6914] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set
[  298.589733][ T7049] loop5: detected capacity change from 0 to 512
[  298.753204][ T7049] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option
[  298.850731][ T7049] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  299.075577][ T7049] EXT4-fs (loop5): 1 truncate cleaned up
[  299.160098][ T7049] EXT4-fs (loop5): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000007,bsddf,nomblk_io_submit,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none.
[  300.047222][ T7064] kAFS: unable to lookup cell '.'
[  300.784900][ T7073] netlink: 16 bytes leftover after parsing attributes in process `syz.0.646'.
[  300.793946][ T7073] netlink: 16 bytes leftover after parsing attributes in process `syz.0.646'.
[  301.743606][ T7092] No source specified
[  301.811144][ T7091] tc_dump_action: action bad kind
[  301.818285][ T7093] loop3: detected capacity change from 0 to 512
[  301.876373][ T7093] EXT4-fs (loop3): 1 truncate cleaned up
[  301.896134][ T7093] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none.
[  302.184388][   T26] audit: type=1800 audit(1700000208.680:26): pid=7110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.653" name="no_out_endpoint" dev="configfs" ino=43013 res=0 errno=0
[  302.884031][ T7099] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set
[  303.224078][ T7128] kAFS: unable to lookup cell '.'
[  304.036250][ T4526] asus 0005:0B05:8502.000B: unbalanced collection at end of report description
[  304.087269][ T4526] asus 0005:0B05:8502.000B: Asus hid parse failed: -22
[  304.140576][ T4526] asus: probe of 0005:0B05:8502.000B failed with error -22
[  304.284591][ T7140] netlink: 16 bytes leftover after parsing attributes in process `syz.5.662'.
[  304.293564][ T7140] netlink: 16 bytes leftover after parsing attributes in process `syz.5.662'.
[  304.496109][ T7144] tc_dump_action: action bad kind
[  306.269569][ T7169] loop7: detected capacity change from 0 to 512
[  306.347488][ T7169] EXT4-fs (loop7): Ignoring removed nomblk_io_submit option
[  306.395825][ T7169] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem
[  306.506210][ T7169] EXT4-fs (loop7): 1 truncate cleaned up
[  306.511935][ T7169] EXT4-fs (loop7): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000007,bsddf,nomblk_io_submit,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none.
[  306.553328][ T7177] kAFS: unable to lookup cell '.'
[  306.822032][ T7194] netlink: 16 bytes leftover after parsing attributes in process `syz.6.675'.
[  306.831378][ T7194] netlink: 16 bytes leftover after parsing attributes in process `syz.6.675'.
[  307.791113][ T7204] tc_dump_action: action bad kind
[  308.319235][ T4612] usb 8-1: new full-speed USB device number 2 using dummy_hcd
[  308.746559][ T4612] usb 8-1: not running at top speed; connect to a high speed hub
[  308.877017][ T4612] usb 8-1: config 1 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  308.976262][ T4612] usb 8-1: config 1 interface 0 altsetting 4 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  309.016061][ T4612] usb 8-1: config 1 interface 0 has no altsetting 0
[  309.206182][ T4612] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  309.235930][ T4612] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  309.285133][ T4612] usb 8-1: Product: 洍筑꼥띫闷⇭㴋䦲σﲒ瞌ꌘޔữ씼ꂨ㫂䟏儚潘Ŏ␥꤄뚻๛䞓∎鐿祑ɥ꫼ꊄ쫥봇㴔಩嬞顖渼觷첧廬⮒后䲆䱚駗媮峿㞛꣌ⴏ珴谐骍姣෇鵟魤ɨ渂倪⓾侐雰旚鋫禽멠憊邩瘪ꣳ⊜鷼큡ⓦ噫퍽櫽▪荧ꯔ㣊䏨̙럖瘆웿쁺ꓙ㜰֚괒뺅숝斧算
[  309.319237][ T7230] loop5: detected capacity change from 0 to 512
[  309.381876][ T7230] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option
[  309.410568][ T7230] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  309.566413][ T7230] EXT4-fs (loop5): 1 truncate cleaned up
[  309.573526][ T7230] EXT4-fs (loop5): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000007,bsddf,nomblk_io_submit,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none.
[  309.616101][ T4612] usb 8-1: Manufacturer: 䐊
[  309.620787][ T4612] usb 8-1: SerialNumber: а
[  309.644165][ T4361] asus 0005:0B05:8502.000C: No inputs registered, leaving
[  309.655290][ T4361] asus 0005:0B05:8502.000C: hidraw0: BLUETOOTH HID v0.00 Mouse [syz0] on syz0
[  309.665290][ T7213] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  309.674396][ T7213] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  310.081323][ T7255] loop5: detected capacity change from 0 to 512
[  310.092693][ T7249] fido_id[7249]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  310.107282][ T7256] netlink: 16 bytes leftover after parsing attributes in process `syz.0.687'.
[  310.116307][ T7256] netlink: 16 bytes leftover after parsing attributes in process `syz.0.687'.
[  310.305681][ T7255] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option
[  310.315004][ T4612] cdc_ether: probe of 8-1:1.0 failed with error -71
[  310.359588][ T4612] usb 8-1: USB disconnect, device number 2
[  310.564609][ T7255] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  310.928917][ T7255] EXT4-fs (loop5): 1 truncate cleaned up
[  310.957719][ T7255] EXT4-fs (loop5): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000007,bsddf,nomblk_io_submit,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none.
[  311.272126][ T4361] asus 0005:0B05:8502.000D: No inputs registered, leaving
[  312.031060][ T7292] kAFS: unable to lookup cell '.'
[  312.044694][ T4361] asus 0005:0B05:8502.000D: hidraw0: BLUETOOTH HID v0.00 Mouse [syz0] on syz0
[  312.309563][ T7297] loop0: detected capacity change from 0 to 256
[  312.324318][ T7294] fido_id[7294]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  313.219921][ T4258] usb 8-1: new full-speed USB device number 3 using dummy_hcd
[  313.385726][ T7316] netlink: 16 bytes leftover after parsing attributes in process `syz.0.703'.
[  313.394793][ T7316] netlink: 16 bytes leftover after parsing attributes in process `syz.0.703'.
[  313.667252][ T4258] usb 8-1: not running at top speed; connect to a high speed hub
[  313.786719][ T4258] usb 8-1: config 1 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  313.968869][ T4258] usb 8-1: config 1 interface 0 altsetting 4 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  314.154235][ T4258] usb 8-1: config 1 interface 0 has no altsetting 0
[  314.406667][ T4258] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  314.419023][ T5071] Bluetooth: hci5: command 0x0406 tx timeout
[  314.461271][ T4258] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  314.500193][ T4258] usb 8-1: Product: 洍筑꼥띫闷⇭㴋䦲σﲒ瞌ꌘޔữ씼ꂨ㫂䟏儚潘Ŏ␥꤄뚻๛䞓∎鐿祑ɥ꫼ꊄ쫥봇㴔಩嬞顖渼觷첧廬⮒后䲆䱚駗媮峿㞛꣌ⴏ珴谐骍姣෇鵟魤ɨ渂倪⓾侐雰旚鋫禽멠憊邩瘪ꣳ⊜鷼큡ⓦ噫퍽櫽▪荧ꯔ㣊䏨̙럖瘆웿쁺ꓙ㜰֚괒뺅숝斧算
[  314.573168][ T4258] usb 8-1: Manufacturer: 䐊
[  314.585084][ T4258] usb 8-1: SerialNumber: а
[  314.686451][ T7302] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  314.694953][ T7302] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  315.217066][ T7302] netlink: 'syz.7.701': attribute type 1 has an invalid length.
[  315.231733][ T7302] netlink: 'syz.7.701': attribute type 2 has an invalid length.
[  315.263701][ T7358] kAFS: unable to lookup cell '.'
[  315.296234][ T4258] cdc_ether: probe of 8-1:1.0 failed with error -71
[  315.587060][ T4258] usb 8-1: USB disconnect, device number 3
[  315.610370][ T7366] loop0: detected capacity change from 0 to 512
[  316.390706][ T7370] loop5: detected capacity change from 0 to 2048
[  316.412649][ T7366] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option
[  316.631097][ T7366] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  316.704381][ T7370] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  316.715189][ T7370] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  316.972528][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  316.978901][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  317.018714][ T7366] EXT4-fs (loop0): 1 truncate cleaned up
[  317.024426][ T7366] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000007,bsddf,nomblk_io_submit,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none.
[  317.057056][ T7382] tipc: Enabling of bearer <Eth:d> rejected, media not registered
[  317.161976][ T7390] loop7: detected capacity change from 0 to 512
[  317.207808][ T7383] netlink: 16 bytes leftover after parsing attributes in process `syz.3.717'.
[  317.216778][ T7383] netlink: 16 bytes leftover after parsing attributes in process `syz.3.717'.
[  317.232429][ T7390] EXT4-fs (loop7): Ignoring removed nomblk_io_submit option
[  317.409628][ T7390] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem
[  317.551673][ T7390] EXT4-fs (loop7): 1 truncate cleaned up
[  317.567371][ T7390] EXT4-fs (loop7): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000007,bsddf,nomblk_io_submit,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none.
[  317.951292][ T7402] device-mapper: table: 248:2: striped: Target length not divisible by chunk size
[  318.014778][ T7402] device-mapper: ioctl: error adding target to table
[  319.581151][ T7438] loop7: detected capacity change from 0 to 256
[  320.422973][ T7441] loop5: detected capacity change from 0 to 512
[  320.456156][ T4711] usb 4-1: new full-speed USB device number 9 using dummy_hcd
[  320.640320][ T7441] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option
[  320.757470][ T7441] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  320.826332][ T7441] EXT4-fs (loop5): 1 truncate cleaned up
[  320.863159][ T7441] EXT4-fs (loop5): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000007,bsddf,nomblk_io_submit,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none.
[  320.946394][ T4711] usb 4-1: not running at top speed; connect to a high speed hub
[  321.066400][ T4711] usb 4-1: config 1 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  321.126013][ T4711] usb 4-1: config 1 interface 0 altsetting 4 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  321.216097][ T4711] usb 4-1: config 1 interface 0 has no altsetting 0
[  321.426296][ T4711] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  321.445511][ T4711] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  321.484598][ T4711] usb 4-1: Product: 洍筑꼥띫闷⇭㴋䦲σﲒ瞌ꌘޔữ씼ꂨ㫂䟏儚潘Ŏ␥꤄뚻๛䞓∎鐿祑ɥ꫼ꊄ쫥봇㴔಩嬞顖渼觷첧廬⮒后䲆䱚駗媮峿㞛꣌ⴏ珴谐骍姣෇鵟魤ɨ渂倪⓾侐雰旚鋫禽멠憊邩瘪ꣳ⊜鷼큡ⓦ噫퍽櫽▪荧ꯔ㣊䏨̙럖瘆웿쁺ꓙ㜰֚괒뺅숝斧算
[  321.642412][ T7460] netlink: 16 bytes leftover after parsing attributes in process `syz.7.734'.
[  321.651449][ T7460] netlink: 16 bytes leftover after parsing attributes in process `syz.7.734'.
[  321.662110][ T4711] usb 4-1: Manufacturer: 䐊
[  321.686352][ T4711] usb 4-1: SerialNumber: а
[  321.736419][ T7432] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  321.743674][ T7432] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  322.274075][ T7432] netlink: 'syz.3.729': attribute type 1 has an invalid length.
[  322.347752][ T7432] netlink: 'syz.3.729': attribute type 2 has an invalid length.
[  322.506334][ T4711] cdc_ether: probe of 4-1:1.0 failed with error -71
[  322.569576][ T4711] usb 4-1: USB disconnect, device number 9
[  324.203542][ T7488] kAFS: unable to lookup cell '.'
[  324.298188][ T7495] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  324.443017][ T7501] loop0: detected capacity change from 0 to 256
[  325.517162][ T7513] tc_dump_action: action bad kind
[  325.722959][ T7519] fuse: Bad value for 'user_id'
[  325.766355][ T7524] netlink: 16 bytes leftover after parsing attributes in process `syz.0.746'.
[  325.775306][ T7524] netlink: 16 bytes leftover after parsing attributes in process `syz.0.746'.
[  329.085838][ T7545] kAFS: unable to lookup cell '.'
[  330.868815][ T7567] loop7: detected capacity change from 0 to 512
[  330.926291][ T7566] netlink: 16 bytes leftover after parsing attributes in process `syz.5.752'.
[  330.935196][ T7566] netlink: 16 bytes leftover after parsing attributes in process `syz.5.752'.
[  331.167412][ T7567] EXT4-fs (loop7): 1 truncate cleaned up
[  331.173244][ T7567] EXT4-fs (loop7): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none.
[  331.241216][ T4711] asus 0005:0B05:8502.000E: No inputs registered, leaving
[  331.250967][ T4711] asus 0005:0B05:8502.000E: hidraw0: BLUETOOTH HID v0.00 Mouse [syz0] on syz0
[  331.361785][ T7579] fido_id[7579]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  332.534470][ T7593] tc_dump_action: action bad kind
[  332.849576][ T7604] loop7: detected capacity change from 0 to 512
[  333.028673][ T7604] EXT4-fs (loop7): Ignoring removed nomblk_io_submit option
[  333.102686][ T7605] input: syz1 as /devices/virtual/input/input31
[  333.314264][ T7604] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem
[  333.408047][ T7604] EXT4-fs (loop7): 1 truncate cleaned up
[  333.459302][ T7604] EXT4-fs (loop7): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000007,bsddf,nomblk_io_submit,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none.
[  333.764978][ T4711] asus 0005:0B05:8502.000F: No inputs registered, leaving
[  334.166277][ T4711] asus 0005:0B05:8502.000F: hidraw0: BLUETOOTH HID v0.00 Mouse [syz0] on syz0
[  334.406168][ T4263] Bluetooth: hci2: command 0x0406 tx timeout
[  334.499642][ T7641] loop5: detected capacity change from 0 to 512
[  334.600458][ T7641] EXT4-fs (loop5): 1 truncate cleaned up
[  334.617571][ T7639] fido_id[7639]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  334.679712][ T7641] EXT4-fs (loop5): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none.
[  337.759569][ T7668] netlink: 16 bytes leftover after parsing attributes in process `syz.0.774'.
[  337.768550][ T7668] netlink: 16 bytes leftover after parsing attributes in process `syz.0.774'.
[  338.945197][ T7675] netlink: 12 bytes leftover after parsing attributes in process `syz.7.777'.
[  339.130778][ T4265] asus 0005:0B05:8502.0010: No inputs registered, leaving
[  339.382312][ T4265] asus 0005:0B05:8502.0010: hidraw0: BLUETOOTH HID v0.00 Mouse [syz0] on syz0
[  339.589666][ T7693] loop7: detected capacity change from 0 to 512
[  339.707899][ T7693] EXT4-fs (loop7): 1 truncate cleaned up
[  339.793099][ T7693] EXT4-fs (loop7): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none.
[  339.794587][ T7690] fido_id[7690]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  340.396314][ T7696] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set
[  341.422288][ T7719] netlink: 16 bytes leftover after parsing attributes in process `syz.7.787'.
[  341.431513][ T7719] netlink: 16 bytes leftover after parsing attributes in process `syz.7.787'.
[  341.745849][ T7724] input: syz1 as /devices/virtual/input/input34
[  341.898977][ T7728] fuse: Bad value for 'fd'
[  343.223736][ T7734] loop7: detected capacity change from 0 to 256
[  343.881358][ T7743] binder: 7742:7743 ioctl c00c6211 0 returned -22
[  344.224784][ T7752] loop3: detected capacity change from 0 to 512
[  344.954674][ T7752] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option
[  345.090648][ T7757] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  345.110184][ T7752] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  345.172830][ T7752] EXT4-fs (loop3): 1 truncate cleaned up
[  345.179823][ T7757] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  345.196185][ T7752] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000007,bsddf,nomblk_io_submit,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none.
[  345.377180][ T7764] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  345.386788][ T7764] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  349.346064][ T4265] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  349.454119][ T7796] input: syz1 as /devices/virtual/input/input35
[  349.596157][ T4265] usb 8-1: Using ep0 maxpacket: 16
[  349.716247][ T4265] usb 8-1: config 0 has an invalid interface number: 34 but max is 0
[  349.736173][ T4265] usb 8-1: config 0 has no interface number 0
[  349.742399][ T4265] usb 8-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  349.823909][ T4265] usb 8-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  350.046237][ T4265] usb 8-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  350.066047][ T4265] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  350.122330][ T4265] usb 8-1: Product: syz
[  350.153183][ T4265] usb 8-1: Manufacturer: syz
[  350.168394][ T4265] usb 8-1: SerialNumber: syz
[  350.204389][ T4265] usb 8-1: config 0 descriptor??
[  350.266315][ T7815] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  350.283827][ T7815] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  350.371261][   T18] 
[  350.373645][   T18] ======================================================
[  350.380673][   T18] WARNING: possible circular locking dependency detected
[  350.387740][   T18] syzkaller #0 Not tainted
[  350.392170][   T18] ------------------------------------------------------
[  350.399192][   T18] cpuhp/1/18 is trying to acquire lock:
[  350.404756][   T18] ffff88814cecc660 (kn->active#32){++++}-{0:0}, at: kernfs_remove_by_name_ns+0x91/0x100
[  350.414528][   T18] 
[  350.414528][   T18] but task is already holding lock:
[  350.421889][   T18] ffffffff8cfbd7e0 (cpuhp_state-down){+.+.}-{0:0}, at: cpuhp_lock_acquire+0x8/0x40
[  350.431376][   T18] 
[  350.431376][   T18] which lock already depends on the new lock.
[  350.431376][   T18] 
[  350.441778][   T18] 
[  350.441778][   T18] the existing dependency chain (in reverse order) is:
[  350.450817][   T18] 
[  350.450817][   T18] -> #4 (cpuhp_state-down){+.+.}-{0:0}:
[  350.458576][   T18]        cpuhp_lock_acquire+0x3a/0x40
[  350.463984][   T18]        cpuhp_kick_ap_work+0x7f/0x1b0
[  350.469492][   T18]        _cpu_down+0x35b/0xbb0
[  350.474272][   T18]        cpu_device_down+0x69/0xa0
[  350.479403][   T18]        device_offline+0x259/0x3a0
[  350.484631][   T18]        acpi_bus_offline+0x23e/0x400
[  350.490018][   T18]        acpi_device_hotplug+0x56c/0xc60
[  350.495703][   T18]        acpi_hotplug_work_fn+0x8f/0xc0
[  350.501288][   T18]        process_one_work+0x867/0xff0
[  350.506670][   T18]        worker_thread+0xad7/0x12a0
[  350.511881][   T18]        kthread+0x42e/0x520
[  350.516476][   T18]        ret_from_fork+0x1f/0x30
[  350.521422][   T18] 
[  350.521422][   T18] -> #3 (cpu_hotplug_lock){++++}-{0:0}:
[  350.529517][   T18]        percpu_down_write+0x52/0x2f0
[  350.534903][   T18]        _cpu_up+0x77/0x810
[  350.539421][   T18]        cpu_up+0x16d/0x1a0
[  350.543934][   T18]        bringup_nonboot_cpus+0x100/0x1a0
[  350.549665][   T18]        smp_init+0x3a/0x150
[  350.554286][   T18]        kernel_init_freeable+0x3bc/0x560
[  350.560030][   T18]        kernel_init+0x19/0x1b0
[  350.564884][   T18]        ret_from_fork+0x1f/0x30
[  350.569829][   T18] 
[  350.569829][   T18] -> #2 (cpu_add_remove_lock){+.+.}-{3:3}:
[  350.577828][   T18]        __mutex_lock_common+0x1e5/0x2400
[  350.583576][   T18]        mutex_lock_nested+0x17/0x20
[  350.588866][   T18]        cpu_device_down+0x3a/0xa0
[  350.594025][   T18]        device_offline+0x259/0x3a0
[  350.599236][   T18]        acpi_bus_offline+0x23e/0x400
[  350.604615][   T18]        acpi_device_hotplug+0x56c/0xc60
[  350.610251][   T18]        acpi_hotplug_work_fn+0x8f/0xc0
[  350.615806][   T18]        process_one_work+0x867/0xff0
[  350.621204][   T18]        worker_thread+0xad7/0x12a0
[  350.626429][   T18]        kthread+0x42e/0x520
[  350.631024][   T18]        ret_from_fork+0x1f/0x30
[  350.635986][   T18] 
[  350.635986][   T18] -> #1 (&device->physical_node_lock){+.+.}-{3:3}:
[  350.644704][   T18]        __mutex_lock_common+0x1e5/0x2400
[  350.650518][   T18]        mutex_lock_nested+0x17/0x20
[  350.655894][   T18]        acpi_companion_match+0x86/0x110
[  350.661564][   T18]        acpi_device_uevent_modalias+0x16/0x30
[  350.667721][   T18]        platform_uevent+0x38/0xb0
[  350.672833][   T18]        dev_uevent+0x3a5/0x740
[  350.677681][   T18]        kobject_uevent_env+0x465/0x890
[  350.683218][   T18]        kobject_synth_uevent+0x457/0x940
[  350.689028][   T18]        uevent_store+0x22/0x60
[  350.693873][   T18]        kernfs_fop_write_iter+0x3a8/0x500
[  350.699678][   T18]        vfs_write+0x748/0xd70
[  350.704441][   T18]        ksys_write+0x153/0x260
[  350.709301][   T18]        do_syscall_64+0x4c/0xa0
[  350.714251][   T18]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  350.720680][   T18] 
[  350.720680][   T18] -> #0 (kn->active#32){++++}-{0:0}:
[  350.728150][   T18]        __lock_acquire+0x38f7/0x7d40
[  350.733539][   T18]        lock_acquire+0x19f/0x400
[  350.738565][   T18]        __kernfs_remove+0x5da/0xcb0
[  350.743871][   T18]        kernfs_remove_by_name_ns+0x91/0x100
[  350.749851][   T18]        device_del+0x62f/0xa80
[  350.754703][   T18]        device_unregister+0x1c/0xc0
[  350.759984][   T18]        mce_cpu_pre_down+0x33f/0x540
[  350.765352][   T18]        cpuhp_invoke_callback+0x423/0x7e0
[  350.771154][   T18]        cpuhp_thread_fun+0x3b2/0x7f0
[  350.776522][   T18]        smpboot_thread_fn+0x520/0x990
[  350.781983][   T18]        kthread+0x42e/0x520
[  350.786569][   T18]        ret_from_fork+0x1f/0x30
[  350.791530][   T18] 
[  350.791530][   T18] other info that might help us debug this:
[  350.791530][   T18] 
[  350.801822][   T18] Chain exists of:
[  350.801822][   T18]   kn->active#32 --> cpu_hotplug_lock --> cpuhp_state-down
[  350.801822][   T18] 
[  350.815013][   T18]  Possible unsafe locking scenario:
[  350.815013][   T18] 
[  350.822461][   T18]        CPU0                    CPU1
[  350.828100][   T18]        ----                    ----
[  350.833465][   T18]   lock(cpuhp_state-down);
[  350.837967][   T18]                                lock(cpu_hotplug_lock);
[  350.845090][   T18]                                lock(cpuhp_state-down);
[  350.852142][   T18]   lock(kn->active#32);
[  350.856388][   T18] 
[  350.856388][   T18]  *** DEADLOCK ***
[  350.856388][   T18] 
[  350.864614][   T18] 2 locks held by cpuhp/1/18:
[  350.869282][   T18]  #0: ffffffff8cfbd670 (cpu_hotplug_lock){++++}-{0:0}, at: lockdep_acquire_cpus_lock+0x5/0x30
[  350.879722][   T18]  #1: ffffffff8cfbd7e0 (cpuhp_state-down){+.+.}-{0:0}, at: cpuhp_lock_acquire+0x8/0x40
[  350.889556][   T18] 
[  350.889556][   T18] stack backtrace:
[  350.895446][   T18] CPU: 1 PID: 18 Comm: cpuhp/1 Not tainted syzkaller #0
[  350.902374][   T18] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  350.912449][   T18] Call Trace:
[  350.915728][   T18]  <TASK>
[  350.918654][   T18]  dump_stack_lvl+0x188/0x250
[  350.923352][   T18]  ? load_image+0x410/0x410
[  350.927853][   T18]  ? show_regs_print_info+0x20/0x20
[  350.933073][   T18]  ? print_circular_bug+0x12b/0x1a0
[  350.938450][   T18]  check_noncircular+0x2f8/0x400
[  350.943403][   T18]  ? print_deadlock_bug+0x5d0/0x5d0
[  350.948605][   T18]  ? lockdep_lock+0xf1/0x1f0
[  350.953216][   T18]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  350.959741][   T18]  ? mark_lock+0x94/0x320
[  350.964200][   T18]  ? _find_first_zero_bit+0xd1/0xf0
[  350.969404][   T18]  __lock_acquire+0x38f7/0x7d40
[  350.974351][   T18]  ? _raw_spin_unlock+0x40/0x40
[  350.979220][   T18]  ? __lock_acquire+0x13b3/0x7d40
[  350.984261][   T18]  ? verify_lock_unused+0x140/0x140
[  350.989461][   T18]  ? kasan_set_free_info+0x1f/0x40
[  350.994578][   T18]  ? kmem_cache_free+0x8f/0x210
[  350.999427][   T18]  ? device_unregister+0x1c/0xc0
[  351.004541][   T18]  ? kthread+0x42e/0x520
[  351.008785][   T18]  ? ret_from_fork+0x1f/0x30
[  351.013471][   T18]  lock_acquire+0x19f/0x400
[  351.017986][   T18]  ? kernfs_remove_by_name_ns+0x91/0x100
[  351.023723][   T18]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  351.029704][   T18]  ? read_lock_is_recursive+0x10/0x10
[  351.035081][   T18]  ? up_write+0x1b6/0x410
[  351.039415][   T18]  __kernfs_remove+0x5da/0xcb0
[  351.044175][   T18]  ? kernfs_remove_by_name_ns+0x91/0x100
[  351.049851][   T18]  ? kernfs_next_descendant_post+0x200/0x200
[  351.055850][   T18]  ? kernfs_find_ns+0x49e/0x510
[  351.060700][   T18]  kernfs_remove_by_name_ns+0x91/0x100
[  351.066161][   T18]  device_del+0x62f/0xa80
[  351.070492][   T18]  ? kill_device+0x160/0x160
[  351.075077][   T18]  device_unregister+0x1c/0xc0
[  351.079837][   T18]  mce_cpu_pre_down+0x33f/0x540
[  351.084711][   T18]  ? mce_cpu_online+0x930/0x930
[  351.089557][   T18]  cpuhp_invoke_callback+0x423/0x7e0
[  351.094868][   T18]  cpuhp_thread_fun+0x3b2/0x7f0
[  351.099741][   T18]  ? cpuhp_should_run+0xa0/0xa0
[  351.104610][   T18]  ? trace_raw_output_cpuhp_exit+0x1a0/0x1a0
[  351.110608][   T18]  ? cpuhp_should_run+0xa0/0xa0
[  351.115459][   T18]  smpboot_thread_fn+0x520/0x990
[  351.120401][   T18]  kthread+0x42e/0x520
[  351.124464][   T18]  ? cpu_report_death+0x180/0x180
[  351.129499][   T18]  ? kthread_blkcg+0xd0/0xd0
[  351.134889][   T18]  ret_from_fork+0x1f/0x30
[  351.145466][   T18]  </TASK>
[  351.159829][   T19] numa_remove_cpu cpu 1 node 0: mask now 0
[  351.165681][   T19] numa_remove_cpu cpu 1 node 1: mask now 0
[  351.184579][ T4343] smpboot: CPU 1 is now offline
[  351.261192][ T6798] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  351.363707][ T7853] FAULT_INJECTION: forcing a failure.
[  351.363707][ T7853] name failslab, interval 1, probability 0, space 0, times 0
[  351.395775][ T7815] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  351.443881][ T7815] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  351.468775][ T7853] CPU: 0 PID: 7853 Comm: syz.0.825 Not tainted syzkaller #0
[  351.476288][ T7853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  351.486346][ T7853] Call Trace:
[  351.489654][ T7853]  <TASK>
[  351.492601][ T7853]  dump_stack_lvl+0x188/0x250
[  351.497292][ T7853]  ? show_regs_print_info+0x20/0x20
[  351.502494][ T7853]  ? load_image+0x410/0x410
[  351.506996][ T7853]  ? __might_sleep+0xf0/0xf0
[  351.511583][ T7853]  ? __lock_acquire+0x7d40/0x7d40
[  351.516628][ T7853]  should_fail+0x383/0x4b0
[  351.521044][ T7853]  should_failslab+0x5/0x20
[  351.525556][ T7853]  slab_pre_alloc_hook+0x51/0xc0
[  351.530489][ T7853]  ? __kernfs_new_node+0xe3/0x6b0
[  351.535510][ T7853]  kmem_cache_alloc+0x3d/0x280
[  351.540287][ T7853]  __kernfs_new_node+0xe3/0x6b0
[  351.545141][ T7853]  ? kernfs_new_node+0x250/0x250
[  351.550178][ T7853]  ? rcu_is_watching+0x11/0xa0
[  351.554936][ T7853]  ? lock_release+0xb5/0x8a0
[  351.559547][ T7853]  ? sysfs_do_create_link_sd+0x75/0x110
[  351.565089][ T7853]  ? do_raw_spin_lock+0x128/0x2f0
[  351.570127][ T7853]  kernfs_new_node+0x148/0x250
[  351.574908][ T7853]  kernfs_create_link+0xa3/0x200
[  351.579860][ T7853]  sysfs_do_create_link_sd+0x83/0x110
[  351.585232][ T7853]  device_add+0x83b/0x1050
[  351.589650][ T7853]  netdev_register_kobject+0x184/0x320
[  351.595111][ T7853]  register_netdevice+0x10e8/0x1720
[  351.600309][ T7853]  ? netif_stacked_transfer_operstate+0x200/0x200
[  351.606723][ T7853]  ? vscnprintf+0x80/0x80
[  351.611053][ T7853]  ? radix_tree_lookup+0x263/0x280
[  351.616179][ T7853]  ppp_dev_configure+0x81a/0xaa0
[  351.621119][ T7853]  ppp_ioctl+0x8c2/0x1a70
[  351.625450][ T7853]  ? ppp_poll+0x250/0x250
[  351.629780][ T7853]  ? bpf_lsm_file_ioctl+0x5/0x10
[  351.634710][ T7853]  ? security_file_ioctl+0x7c/0xa0
[  351.639817][ T7853]  ? ppp_poll+0x250/0x250
[  351.644140][ T7853]  __se_sys_ioctl+0xfa/0x170
[  351.648728][ T7853]  do_syscall_64+0x4c/0xa0
[  351.653138][ T7853]  ? clear_bhb_loop+0x30/0x80
[  351.657810][ T7853]  ? clear_bhb_loop+0x30/0x80
[  351.662590][ T7853]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  351.668511][ T7853] RIP: 0033:0x7f1b7d1e2559
[  351.672935][ T7853] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  351.692545][ T7853] RSP: 002b:00007f1b7b439028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  351.700976][ T7853] RAX: ffffffffffffffda RBX: 00007f1b7d468fa0 RCX: 00007f1b7d1e2559
[  351.708950][ T7853] RDX: 00002000000001c0 RSI: 00000000c004743e RDI: 0000000000000004
[  351.716937][ T7853] RBP: 00007f1b7d279b20 R08: 0000000000000000 R09: 0000000000000000
[  351.724905][ T7853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  351.732878][ T7853] R13: 00007f1b7d469038 R14: 00007f1b7d468fa0 R15: 00007fff887bce58
[  351.740863][ T7853]  </TASK>
[  351.977471][ T4343] ACPI: \_SB_.C001: Eject incomplete - status 0xf
[  352.622634][ T6798] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  352.687970][ T4265] asix 8-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  352.723673][ T4265] asix: probe of 8-1:0.34 failed with error -71
[  352.776402][ T4265] usb 8-1: USB disconnect, device number 4
[  352.832667][ T6798] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  352.918978][ T6798] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  353.782710][ T6798] device hsr_slave_0 left promiscuous mode
[  353.813416][ T6798] device hsr_slave_1 left promiscuous mode
[  353.845422][ T6798] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  353.881064][ T6798] batman_adv: batadv0: Removing interface: batadv_slave_0
[  353.921082][ T6798] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  353.952215][ T6798] batman_adv: batadv0: Removing interface: batadv_slave_1
[  353.988579][ T6798] device bridge_slave_1 left promiscuous mode
[  354.040158][ T6798] bridge0: port 2(bridge_slave_1) entered disabled state
[  354.094681][ T6798] device bridge_slave_0 left promiscuous mode
[  354.121035][ T6798] bridge0: port 1(bridge_slave_0) entered disabled state
[  354.153355][ T6798] device veth1_macvtap left promiscuous mode
[  354.174570][ T6798] device veth0_macvtap left promiscuous mode
[  354.198123][ T6798] device veth1_vlan left promiscuous mode
[  354.219208][ T6798] device veth0_vlan left promiscuous mode
[  354.554399][ T6798] team0 (unregistering): Port device team_slave_1 removed
[  354.599302][ T6798] team0 (unregistering): Port device team_slave_0 removed
[  354.635715][ T6798] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  354.682042][ T6798] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  354.844124][ T6798] bond0 (unregistering): Released all slaves