last executing test programs:

4m9.894497283s ago: executing program 2 (id=907):
openat$comedi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/comedi4\x00', 0x101000, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
r1 = socket$rds(0x15, 0x5, 0x0)
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

4m9.712622531s ago: executing program 2 (id=910):
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f00000002c0)='pids.max\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f0000000440)=0x100ef51, 0x12)

4m9.604828456s ago: executing program 2 (id=913):
r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
fchdir(r0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0)
utimensat(r1, 0x0, &(0x7f0000000880)={{0x0, 0xea60}, {0x0, 0x3ffffffe}}, 0x0)

4m9.563709878s ago: executing program 2 (id=915):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x1010051, &(0x7f0000000640)={[{@errors_remount}, {@noload}, {@noblock_validity}, {@dioread_lock}, {@nouid32}, {@nomblk_io_submit}, {@mblk_io_submit}]}, 0x1, 0x558, &(0x7f00000000c0)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
getdents64(r0, &(0x7f0000002600)=""/4113, 0x1011)

4m9.151473608s ago: executing program 2 (id=920):
pipe2$watch_queue(&(0x7f0000000000)={<r0=>0xffffffffffffffff}, 0x80)
r1 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0xdd)
keyctl$get_persistent(0x16, 0x0, r1)

4m8.291229618s ago: executing program 2 (id=932):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f0000000300)={0x0, 0x12c, @ioapic={0xffff1000, 0x8000, 0xfffff5a7, 0x7fffffff, 0x0, [{0x1, 0x81, 0xfd, '\x00', 0x4}, {0x7, 0x3, 0x1, '\x00', 0x6}, {0x7, 0x0, 0xe, '\x00', 0x3b}, {0x4a, 0xe, 0xd6, '\x00', 0x86}, {0xd, 0x2, 0x10, '\x00', 0x2}, {0xd, 0x1, 0xf9, '\x00', 0x3}, {0x2, 0xa, 0x27, '\x00', 0x6}, {0x8, 0xd, 0x2a, '\x00', 0x8}, {0x4, 0x0, 0xa, '\x00', 0x2}, {0x8, 0xd6, 0x3, '\x00', 0x8}, {0x9e, 0x6, 0x3}, {0x2, 0x9, 0x0, '\x00', 0x7f}, {0x45, 0x51, 0x6}, {0xf, 0xfc, 0x0, '\x00', 0x1}, {0x8, 0x2, 0x6, '\x00', 0xb}, {0xd, 0x1b, 0xfe, '\x00', 0x3}, {0x2, 0xa, 0xd6, '\x00', 0x8}, {0xa, 0x0, 0xca, '\x00', 0x6}, {0x0, 0x7, 0x4, '\x00', 0x1a}, {0xb, 0x8, 0x81, '\x00', 0xda}, {0x3, 0x87, 0x6, '\x00', 0x7}, {0x9, 0x3, 0x1, '\x00', 0x2}, {0xf9, 0x21, 0x4, '\x00', 0x7}, {0x8, 0x9, 0x0, '\x00', 0x6}]}})

4m7.986242152s ago: executing program 32 (id=932):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f0000000300)={0x0, 0x12c, @ioapic={0xffff1000, 0x8000, 0xfffff5a7, 0x7fffffff, 0x0, [{0x1, 0x81, 0xfd, '\x00', 0x4}, {0x7, 0x3, 0x1, '\x00', 0x6}, {0x7, 0x0, 0xe, '\x00', 0x3b}, {0x4a, 0xe, 0xd6, '\x00', 0x86}, {0xd, 0x2, 0x10, '\x00', 0x2}, {0xd, 0x1, 0xf9, '\x00', 0x3}, {0x2, 0xa, 0x27, '\x00', 0x6}, {0x8, 0xd, 0x2a, '\x00', 0x8}, {0x4, 0x0, 0xa, '\x00', 0x2}, {0x8, 0xd6, 0x3, '\x00', 0x8}, {0x9e, 0x6, 0x3}, {0x2, 0x9, 0x0, '\x00', 0x7f}, {0x45, 0x51, 0x6}, {0xf, 0xfc, 0x0, '\x00', 0x1}, {0x8, 0x2, 0x6, '\x00', 0xb}, {0xd, 0x1b, 0xfe, '\x00', 0x3}, {0x2, 0xa, 0xd6, '\x00', 0x8}, {0xa, 0x0, 0xca, '\x00', 0x6}, {0x0, 0x7, 0x4, '\x00', 0x1a}, {0xb, 0x8, 0x81, '\x00', 0xda}, {0x3, 0x87, 0x6, '\x00', 0x7}, {0x9, 0x3, 0x1, '\x00', 0x2}, {0xf9, 0x21, 0x4, '\x00', 0x7}, {0x8, 0x9, 0x0, '\x00', 0x6}]}})

1m56.638139902s ago: executing program 3 (id=2226):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4)
sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f0000000000)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x1}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast1}}}], 0x28}, 0xc4)

1m56.371134084s ago: executing program 3 (id=2232):
unshare(0x6020400)
syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000040)='./file0\x00', 0x2000800, &(0x7f0000000080)=ANY=[@ANYRES8=0x0, @ANYRESOCT, @ANYRESOCT], 0x1, 0x2ce, &(0x7f0000000380)="$eJzs3UFKG1EYB/AvGo21ixHaVXEx0E03DeoNQrFQGihYsrArQ1UoRoQIQruo7nqBnqKr3qE36DF6gboQUuJMG6MTpW3iCPn9QOZj3vyZ9xzxzeK9ZGt5f2/74HB388GPWFhIoxpx8vUsImImZiPz9Ft2nIuISszHRSdxk7mCc5XqjTEAYGI2NtqNsvvAZHW7jXb/Lax2paX1pZQOAQAAAAAAAAAA8N+2lmtX1v/HacTShfX/lfw480/r/wGAu2bU+v9ecvt9YTK63UZ7MX9/G2b9PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFCe014v6V3zU3b/AIDxM/8DwPQx/wPA9DkdmusrUTz/V8ruJgAwRq8337xsNJvrG2m6ELH/6ah11MqOWXtjN95FJ3ZiJZI4i/77QS6rn79orq+k55Zia/84zx8ftWaH86uRxFJxfjXLp8P5uVi8mF+LJB4W59cK8/Px5HHEzO+B1iOJ72/jIDqxHf3sIP9xNU2fvWpeytfOrytw/3aeDAAAAAAAAAAAAAAAAAAAANOknv5RuH+/Xh/VnuX/4vMBLu2vr8ajarljBwAAAAAAAAAAAAAAAAAAgLvi8P2HvXYn268f0ensdLMzWfEz38s/OKO4rrg39Fsd7y2qETHymtroJsV4i/7zndgtYuVz3NpwZvO/1uJrSvuXBAAAAAAAAAAAAAAAAAAAU2uw6bfsngAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAeQbf/z+5ouwxAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANPhVwAAAP//zLHlIg==")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90)
fstatfs(r0, 0x0)

1m55.895085207s ago: executing program 3 (id=2237):
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRESDEC=0x0, @ANYRES32=0x0, @ANYRES64], 0x4, 0x1291, &(0x7f0000001ac0)="$eJzs3U1rY1UYAOA3bTptOrapOo7OgHjQjSLEaReu3BSZAbGgVDugrjI21dD0g95QyCBOXLkS/BmiLt0J4h/oxo1rQRDpxuUsxCvtjUOb9Gvsx6A8zyaHk/O+95zccy+ccA93+7UvV5aXstpSvR1DpVKU10eifD9FiqEYjkI3Xrr98y/PvvPe+2/Ozs3dnE/p1uy706+mlCaf++GDT759/sf25dvfTX4/GltTQ9t/zPy6dXXr2vZf30QzS80sra61Uz3dWVtr1++0GmmxmS3XUnq71ahnjdRczRob+75faq2tr3dSfXVxYnx9o5Flqb7aScuNTmqXUnujk+of1ZurqVarpYnx4DQWvr6f53lEno/EpcjzPK/EeFyOx2IiJqMaU/F4PBFPxpV4Kq7G0/FMXNtt9aj7DQAAAAAAAAAAAAAAAAAAAP8vx+z/L9n/DwAAAAAAAAAAAAAAAAAAAOevf/9/OcL7/wEAAAAAAAAAAAAAAAAAAOCCHfP+/779/y/b/w8AAAAAAAAAAAAAAAAAAADnYaz4mE9pLGLl882FzYXis6ifXYpmtKIRN6Iaf8bu7v9CUb71xtzNG2nXVLyycq8Xf29zYXh//PRINaZKB8ZPVyIipbQ/fjTG98bPRDWuHHz8meL4ffFj8eILO/GfFfG1qMZPH8ZatGIxotQb/W78p9Mpvf7WXGV//PWddocaPufTAgAAAGeplh4YXL93e+vkA78v4nvr89RLVzri/4G+9Xk5rpcf3bgpZJ27y/VWq7HxLwuXDs9z6XSZBwo7c7Eee2smx3+b3zn4RjZ8kuH8M93OqD97CsNnnfDIwsjRbU5xTqO882Me2aZcFConmz8jcWzCvs53+2vyasTDDuf3r/bUjD10+OkKQ72fpt7qnniyRTfPz7VjAxdjpXN3efSoqMPvGaVzuhdx8fZeJgAAAAAAAAAAAPx3ZGMHPP1XiYiB5wE/Hqjp9nLsD3+QeaBm0BcXMEIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/mYHjgUAAAAAhPlbp9GxAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwVQAAAP//DKjCOw==")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)

1m55.148473562s ago: executing program 3 (id=2240):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0/../file0\x00', &(0x7f0000000300)={0x2000, 0x0, 0x10}, 0x18)

1m54.937181532s ago: executing program 3 (id=2243):
r0 = io_uring_setup(0x1890, &(0x7f0000000580)={0x0, 0xa1c5, 0x80, 0x4, 0x30f})
r1 = eventfd2(0x100, 0x80000)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000140)=r1, 0x1)
io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0)

1m54.532706191s ago: executing program 3 (id=2247):
r0 = landlock_create_ruleset(&(0x7f0000000080)={0x10}, 0x10, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x32)

1m54.1269615s ago: executing program 33 (id=2247):
r0 = landlock_create_ruleset(&(0x7f0000000080)={0x10}, 0x10, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x32)

1m37.453672813s ago: executing program 4 (id=2353):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0))
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x840, 0x0)
ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f0000000080)=0x81)

1m37.227431333s ago: executing program 4 (id=2356):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001b80), r1)
sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7040fddbdf250300305206000e"], 0x1c}, 0x1, 0x0, 0x0, 0x20004090}, 0x8040)

1m37.08737147s ago: executing program 4 (id=2359):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'macvlan0\x00', <r2=>0x0})
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @dev={0xac, 0x14, 0x14, 0x63}, r2}, 0x63)

1m36.964214076s ago: executing program 4 (id=2362):
syz_mount_image$exfat(&(0x7f00000009c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000001100)=ANY=[@ANYBLOB='utf8,utf8,uid=', @ANYRESHEX=0xee01, @ANYBLOB=',iocharset=cp949,errors=remount-ro,utf8,errors=remount-ro,dmask=00000000000000000000003,time_offset=0x0000000000000006,gid=', @ANYRESHEX=0xee00, @ANYBLOB="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"/308], 0x1, 0x152b, &(0x7f0000002f80)="$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")
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000006, 0x401d031, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)

1m36.704764148s ago: executing program 4 (id=2365):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10)
unshare(0x22020600)
poll(&(0x7f0000000000)=[{r0, 0x141}], 0x1, 0x3)

1m36.332763265s ago: executing program 4 (id=2368):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0)
ioctl(r0, 0xc0104d03, &(0x7f0000000900)="000001")

1m36.060065418s ago: executing program 34 (id=2368):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0)
ioctl(r0, 0xc0104d03, &(0x7f0000000900)="000001")

53.878836059s ago: executing program 6 (id=2747):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000880))
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000080))

53.738423796s ago: executing program 6 (id=2748):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0xfc5, 0xb080, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x1f0, 0x18, "", [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x2, 0x1, 0x1, {0x22, 0x6}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0xd, 0xf3}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000180)={0x40, 0xf, 0x8, {0x8, 0x11, "110041c9def1"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
open$dir(0x0, 0x34f980, 0x111)

51.816738836s ago: executing program 6 (id=2767):
mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xf6ffffff)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_int(r0, 0x1, 0x22, 0x0, &(0x7f0000000480))

51.708341101s ago: executing program 6 (id=2769):
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
syz_mount_image$udf(&(0x7f00000001c0), &(0x7f0000000100)='./file1\x00', 0x1004000, &(0x7f0000000340)={[{@gid}, {@mode={'mode', 0x3d, 0x4}}, {@anchor={'anchor', 0x3d, 0x7}}, {@longad}, {@utf8}, {@unhide}, {@undelete}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@uid_forget}, {@rootdir={'rootdir', 0x3d, 0x6}}, {@gid_forget}, {@nostrict}, {@session}, {@gid_forget}]}, 0x1, 0xc34, &(0x7f0000001bc0)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x191a461, &(0x7f0000000140)={[], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]})

51.251634032s ago: executing program 6 (id=2774):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
pipe2$9p(&(0x7f00000001c0)={<r0=>0xffffffffffffffff}, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}]}})

50.825237912s ago: executing program 6 (id=2777):
r0 = socket$caif_seqpacket(0x25, 0x5, 0x1)
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x501, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f0000000080)={0x0, 0x0, 0x800})
close_range(r0, r1, 0x0)

50.524601317s ago: executing program 35 (id=2777):
r0 = socket$caif_seqpacket(0x25, 0x5, 0x1)
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x501, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f0000000080)={0x0, 0x0, 0x800})
close_range(r0, r1, 0x0)

5.679585553s ago: executing program 7 (id=3208):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/kernel/numa_balancing\x00', 0x1, 0x0)
write(r0, 0x0, 0x0)

5.415260036s ago: executing program 0 (id=3212):
syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB="12010102000000408c0d0c0040000102030109026e0003017fc008080b0001010130230904000000010130000a2401100a00070000000904010000010230000904010101010230000905010960002503020a25250504"], 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl(r1, 0x4048aec9, &(0x7f0000000140)="0300000000000000010000000200000000000000")

5.404315326s ago: executing program 7 (id=3213):
r0 = socket$inet_tcp(0x2, 0x1, 0x6)
setsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f00000003c0)='espintcp', 0x8)
write(r0, &(0x7f00000001c0)="f7", 0x1)
close(0x3)

5.254224693s ago: executing program 7 (id=3214):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000700)=[@text32={0x20, 0x0}], 0x1, 0x42, &(0x7f0000000740)=[@cr0={0x0, 0xc0000010}], 0x1)

4.991711845s ago: executing program 7 (id=3216):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xb, 0x0, 0x100000}, 0x20)

4.854589372s ago: executing program 7 (id=3218):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x3c, r0, 0x801, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee33908f8eef16f162471f4"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}]}]}, 0x3c}}, 0x0)

4.46464458s ago: executing program 7 (id=3223):
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x8, 0x1)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)

2.295697912s ago: executing program 0 (id=3236):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000600)={0x6, 0x9, 0x20ffa})
mmap(&(0x7f000002c000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0)

2.183132518s ago: executing program 5 (id=3237):
syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x7f, 0x2, 0x1, 0x7f, 0x6, 0xfffffff9, 0xfffffff2, 0x5f, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x5, 0x3, 0x3c5b, 0x1, 0x20, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x9, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x6, 0xfffffffd, 0x5, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x8, 0x12f, 0x8000, 0x10, 0x8, 0x129432e2, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0xd, 0xfffffffe, 0x7, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0xa, 0x4, 0x4000, 0x7ff, 0x9, 0x400, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x0, 0x9, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x6, 0x5, 0x10003, 0x4, 0x1, 0x7, 0xb, 0x9, 0x48c93690, 0x3, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x1, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x1, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x1, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d6, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb2f, 0x3, 0x7, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x6, 0x6, 0x8ad, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x1, 0xffffffff, 0x7ffffffe, 0x5, 0x8, 0xc8, 0x3, 0x3, 0xffff, 0x3, 0x9, 0x80000001, 0x9602, 0xa, 0x8, 0x4, 0x6, 0x801, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c)
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x918)

1.9178423s ago: executing program 5 (id=3240):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4800}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x70, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x44, 0x3, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x38, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x4000851}, 0x40)

1.757455438s ago: executing program 0 (id=3242):
r0 = fanotify_init(0x40, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0xa8500, 0x97)
fanotify_mark(r0, 0x1, 0x40001019, r1, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

1.728623669s ago: executing program 5 (id=3243):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040000018010000786c6c2e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000008500000006000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fcffffff850000002d"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000780850000002d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc)

1.597986225s ago: executing program 0 (id=3244):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000007008500000073"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

1.48871487s ago: executing program 5 (id=3245):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0)
write(r0, &(0x7f0000000480)="6252657175657374547970653d2daf", 0xf)

1.389508475s ago: executing program 0 (id=3246):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4000, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"/2303], 0xff, 0x5e9e, &(0x7f000000bc00)="$eJzs3U9vHGcdB/Df/vH6T2kbVagKEQc3hdJSmv8JlH9NOXCAA0ioZxK5bhVIASUB0SoirnJAXICXAJdeOPQt8AL6GhAvgEg2px4og8Z+nmQ8XmcdEu/s+vl8JGfmN8+O95l8PZ5dz8w+AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADED77/k7O9iLjym7TgWMTnYhDRj1iu69WoZy7nxw8j4nhsN8fzETFYjKjX3/7n2YgLEfHJMxGbW7fX6sXnDtiPi2du3fjsh9/7x+//dPf4z97+6Uft9h9//vzHf7gTcexHr3/82Z0ns+0AAABQiqqqql56m38ivb/vd90pAGAq8vG/SvJytVqtVj/R+o/92eqPutC6qRrvTrOIiI3mOvVrBqfjAWDObMSnXXeBDsm/aMOIeKrrTgAzrdd1BzgUm1u313op317zeLC6057/Trkr/43e/fs79ptO0r7GZFo/X3djEM/t05/lKfVhluT8++38r+y0j9LjDjv/adkv/9HOrU/FyfkP2vm37Mr/zxExt/n3x+Zfqpz/8FHy3xjM8f4vfwAAAAAAjr789/9jHZ//XXz8TTmQh53/XZ1SHwAAAAAAAADgSXvc8f/uM/4fAAAAzKz6vXrtL888WLbfZ7HVy9/qRTzdejxQmNXGhwMCAAAAAAAAAAAAANMxjFhJ1/UvRMTTKytVVdVfTe36UT3u+vOu9O2HknX9Sx4AAHZ88kzrXv5exFJEvJU+629hZWWlqpaWV6qVankxv54dLS5Vy433tXlaL1scHeAF8XBU1d9sqbFe06T3y5Pa29+vfq5RNThAx6ajw8ABICJ2jkabjkhHTFU9G12/ymE+2P+PHvs/B9H1zykAAABw+Kqqqnrp47xPpHP+/a47BQBMRT7+t88LqNVqtVqtPnp1UzXenWYRERvNderXDIbjB4A5sxGfdt0FOiT/og0j4njXnQBmWq/rDnAoNrdur/VSvr3m8WB1pz1fC7Ir/43e9np5/XHTSdrXmEzr5+tuDOK5ffrz/JT6MEty/v12/ld22vMQ/4ed/7Tsl3+9ncc66E/Xcv6Ddv4tRyf//tj8S5XzHz5S/gP5AwAAAADADMt//z/m/G/eZAAAAAAAAACYO5tbt9fyfa/5/P8Xxzyu15xz/+eRkfPvHTh/9/8eJTn/fjv/1gU5g8b8vTcf5P/vrdtrH9361xfydObzXxiM6ude6PUHw3TNT7XwTlyL67EeZ/Y8frir/eye9oVd7ecmtJ/f0z6q25dz+6lYi1/G9Xj7fvvihAujlia0VxPac/4D+3+Rcv7Dxled/0pq77WmtXsf9vfs983puOe5/Lf/vLR375q+uzG4v21N9fad7KA/2/8nT43i1zfXb5z67dVbt26cjTTZtfRcpMkTlvNfSF85/5df3GnPv/eb++u9D0ePnP+suBvDffN/sTFfb+8rU+5bF3L+o/SV889HoPH7/zznv//+/2oH/QEAAAAAAAAAAAAAAICHqapq+xbRyxFxKd3/09W9mQDAdOXjf5Xk5Wq1Wq1Wq49e3VSN90aziIi/N9epXzP8btw3AwBm2X8j4p9dd4LOyL9g+fP+6umXuu4MMFU33//g51evX1+/cbPrngAAAAAAAAAA/688/udqY/zn7euAWuNG7xr/9c1YndvxP/ujwfZY52mDXoiHj/99Mh4+/vdwwvMtTGgfTWhfnNC+NKF97I0eDTn/F1LGOf8TacNKGv/15Q7607Wc/8k01nPO/yutxzXzr/46z/n3d+V/+tZ7vzp98/0PXrv23tV3199d/8XZM5cunL944fzFi6ffuXZ9/czOvx32+HDl/PPY164DLUvOP2cu/7Lk/L+cavmXJef/UqrlX5acf369J/+y5Pzzex/5lyXn/0qq5V+WnP9XUy3/suT8X021/MuS8/9aquVflpz/a6mWf1ly/qdSLf+y5PxPp1r+Zcn55zNc8i9Lzj9f2SD/suT8z6Va/mXJ+Z9PtfzLkvO/kGr5lyXnfzHV8i9Lzv9SquVflpz/11Mt/7Lk/L+RavmXJef/eqrlX5ac/zdTLf+y5Py/lWr5lyXn/+1Uy78sOf/vpFr+Zcn5fzfV8i9Lzv+NVMu/LA8+/9+MGTNm8kzXv5kAAAAAAAAAAAAAgLZpXE7c9TYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA/duBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFvXuLkbO87wf+7sleGxL8D2figG1OBhZ21ydwiMEkIX9KeqAkpE1Lahx7bZz4VO+ak1DZFNoSBalI7QW9aJpEaRSprUBVpKYSjZAaqb1rrhpxE7USF76AykFJ1VSBrd6Z53k8Mzs7sz6MPfM+n09k/7w77zvzzDvvzO53yXcWAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaLT+EzN/MlQURfmn9teaori4/PeqYmf54fy2C71CAAAA4Gy9V/v7by9Jn9i5jJ0atvmXa//tewsLCwvFF9898f6fLSykC9YVxcjKoqhdFv3rL36+0LhN8HwxPjTc8PFwl5sf6XL5aJfLx7pcvqLL5Su7XD7e5fJFB2CRVfWfx9Su7IbaP9fUD2lxWTFWu+yGNns9P7RyeDj+LKdmqLbPwti+4kBxsJgpphbtM1T7X1G8vr68rQeKeFvDDbe1tiiKkz99dk9cw1A4xjcUTTdW0/jYvXNfse7dnz675ztzb1/dbnY9DItWWhQbN5TrfKEoTv24qhgqVqZjEtc53LDOtW3WOdK0zqHafuW/W9d5cpnrjPd7PKzzRx3WuTZ87qnri6KYL5bcptXzxXCxuuVW0/Eer58R5XWUD+WHitHTOk/WL+M8Kfd56/rm86T1nIzHf304JqNLrKHx4XjnKysWHfczPU/Ke90P52p53Q+VNzo+3vij1aZztdzm2RuXPgfaPnZtzoF0LjecAxu6nQPDK0Zq58DwqTVvaDoHphftM1wM1W7rxI2dz4HJuUNHJ2effub2A4d275/ZP3N4emrbls1bt2zeunVy34GDM1P1v0/vkA6Q1cVwOgc3hNeaeA7e3LJt4ym58M1z9zwY75PnQXnfP3tTuaCLh4slzvFymxc2nv3zIH3db3gejDY8D9q+prZ5Howu43lQbnNy4/K+Zo42/Gm3hl69Fq5pOAcu5NfD8jYfvWXp18K1YV0v3nq6Xw9HFp0D8W4Nhede+Zn0/d74XeG4LD4vrikvuGhFcXx25tgdT+2emzs2XYRxXlza8Fi1ni+rG+5Tseh8GT7t82Xn3/zypmvafH5NOFbjt3V+rMpttkx0fqxqr+7tj2fTZzcVYZxj5/t4tvtqVh7PlCU6HM9ymxduP/vvBVMuaXj9G+v2+jcyNlp//RtJR2Os6fVv8UMzUltZUZy8fXmvf2Phz/l+/busT17/ymP16B2dz4FymxcnT/ccGO34+nd9mENhPbeExDDekPvfr10+Xz9NGx7LrufN6OhYOG9G4y02nzebF+1TXlt52xunzuy82Xh982PV9H1LBc+b8lj9+VTn86bc5o3ps3/tWBX/2fDasaLbOTA2sqJc71g6Ceqvdwur4jlwR7GnOFIcLPamfcpHubytiU3LOwdWhD/n+7Xjqj45B8pj9cqmzudAuc0PN5/b7502hs+kbRq+d2r9+cJSmf+a0VPX13rYznXmL9f5yS2dfzZUbvP2ltPNGZ2P023hMxe1OU6tz5+lzum9xfk5TleFdR7c2vlnU+U2l21b5vm0syiKN6ffrP28K/x89++P//v3mn7u2+5nym9Ov/ng5MM/Pp31AwBw5t6v/T2/ov69ZsN/sV7Of/8HAAAABkLM/cNhJvI/AAAAVEbM/SNhJvI/AAAAVEbM/aNhJpnk/8fv2v7qe88V6d0AF4J4eTwMD91T3y52vOfDx+sWTik///Fvj7361eeWd9vDRVH88sEPt93+8XviuuqOxnV+tPnzi1x13bJu/7FHTm3X+P4JJ7fXrz/en+WeBrGr/Prkptr1rnt6ujbfeLCozYfnX3y+fv31j+P2JzbXt//L8KYlO/cNNe2/MaznhjDXhfeUeWjnqeNQzrjfq2uv/edLP3fq9uJ+Qxs+WLubr/xB/Xrje0S9fGl9+3i/l1r/P33tu6+W2z91Y/v1Pzfcfv0nwvW+FeYvdtS3bzzmX21Y/x+F9cfbi/vd8a0ftF3/a1fWt38tnBffCLN1/ff96Ufea/d4xdvZeXd9v3j7U/+9pbZfvL54/a3rH39uuul4tF7/G+/Wr2fHEz8badw+fj7eTvTY3c3n91B4fJt65EVRfPePi6bjXHysvt8/tqw/Xt/Ru9uv/7aWdR4duq62/6n7s6bpfn39rze1vb9xPTv/bk3T/Xn5/nD83p38YXm9Jx4O52O4/H9/VL++1vcyfe3+5tebuP031tSft/H6JlvW/3LL+uevK49d9/U/8G59/a/du7Jp/Ts/Fc6nB+qz2/r3/9UlTft/8zv1x+PYkxOHj8weP7C34ag2Po9Xjq9afdHFH/jgJeG1tPXjXUfmHp85tm5q3VRRrBvAtwzs9fq/FeZ/1cf8ub+Fuh//rH7evfTp+tetm39e//jl8PnHwuMZvz5+/S/Gms7X1sd9/t76PNv13xrWsVxXfu0/r1vWhie+8Prxf/jDt1u/L4j35+jl47X798r6K2qXDb1Rv7z19aqb/7i8+Xn9k9Gp2vx+OK4L4Z2ZN1xRv73W64/vTfLSZ+rP3/idXNy/aHk/kTUjzffjbNf/k/B9zA+uan79i+fH959reTfnNcVQuYT58PpQzNcvj1vF4/3SySva3l58H55i/urTWeaSZp+enTx44PDxpybnZmbnJmeffmbXoSPHD8/tqr136a4vddv/1PN7de35vXdm25ai9mw/Uh89dqHXf/SRPXvvnLpp78y+3cf3zT1ydObY/j2zs3tm9s7etHvfvpknu+1/YO+O6U3bN9+5aWL/gb077tq+ffP2iQOHj5TLqC+qi21TX544fGxXbZfZHVu2T2/dumVq4tCRvTM77pyamjjebf/a16aJcu8nJo7NHNw9d+DQzMTsgWdmdkxv37ZtU9d3fzx0dN/susljxw9PHp+dOTZZvy/r5mqfLr/2ddufPMweCa93LYbCd+efv21ben/c0re/suRV1Tdp/va0eCe8F1T8+tbt45j7x8JMMsn/AAAAkIOY+8Mb/5+6QP4HAACAyoi5f2WYifwPAAAAlRFz/3iYSSb5P6P+/6rGD/T/6/T/9f8L/X/9/x7T/9f/70T/X/9/kNev/6//T3f91v+PuX9VUWSZ/wEAACAHMfevDjOR/wEAAKAyYu6/KMxE/gcAAIDKiLn/4jCTPPL/WOs/K9z/b6L/X6f/363/H7fV/y/0//X/z5D+v/5/J/r/+v+DvP4+7P+v0v+n3/Rb/z/m/g+EmeSR/wEAACALMfd/MMxE/gcAAIDKiLn/kjAT+R8AAAAqI+b+NWEmmeT/jH7/fxP9/zr9f7//v9D/1/8/95oOsf6//n8n+v/6/4O8/j7s//v9//Sdfuv/x9z//8JMMsn/AAAAkIOY+z8UZiL/AwAAQGXE3H9pmIn8DwAAAJURc/9lYSaZ5H/9f/1//X/9f/1//f9e0v/X/+9E/1//f5DXr/+v/093/db/j7n/8jCTTPI/AAAA5CDm/ivCTOR/AAAAqIyY+68MM5H/AQAAoDJi7r8qzCST/K//r/+v/6//r/+v/99L+v/6/53o/+v/D/L69f/1/+mu3/r/MfdfHWaSSf4HAACAHMTcf02YifwPAAAAlRFz/4fDTOR/AAAAqIyY+9eGmWSS//X/9f/1//X/9f/1/3tpsPr/w0teov9fp//fTP9f/1//X/+fzvqt/x9z/0fCTDLJ/wAAAJCDmPuvDTOR/wEAAKAyYu6/LsxE/gcAAIDKiLl/XZhJJvlf/1//X/9f/1//X/+/lwar/780/f86/f9m+v/6//r/+v901m/9/5j714eZZJL/AQAAIAcx928IM5H/AQAAoDJi7r8+zET+BwAAgMqIuf+GMJNM8r/+v/6//r/+v/6//n8v6f/r/3ei/6//P8jr1/9fXv9/RbcrotL6rf8fc/+NYSaZ5H8AAADIQcz9N4WZyP8AAABQGTH33xxmIv8DAABAZcTcvzHMJJP8r/+v/6//r/+v/6//30v6/4v6/2/9T6H/H+n/6/8P8vr1//3+f7rrt/5/zP23hJlkkv8BAAAgBzH33xpmIv8DAABAZcTcf1uYifwPAAAAlRFz/0SYSSb5X/9f/1//X/9f/1//v5eq2v9Pr6N+/7/+v/6//r/+v/4/S+q3/n/M/beHmWSS/wEAACAHMfffEWYi/wMAAEBlxNw/GWYi/wMAAEBlxNw/FWaSSf7X/9f/1//v7/7/eJvzTf9f/3+QVLX/fxa//1//v4H+v/7/IK9f/1//n+76rf8fc/90mEkm+R8AAAByEHP/pjAT+R8AAAAqI+b+zWEm8j8AAABURsz9W8JMMsn/+v/6//r//d3/9/v/9f/1/zvT/9f/L/T/z9iF7s8P+vr1//X/aTbc5nP91v+PuX9rmEkm+R8AAAByEHP/tjAT+R8AAAAGS+v/ubRBzP13hpnI/wAAAFAZMfffFWaSSf7X/9f/1//X/9f/1//vJf1//f9O9P/1/wd5/fr/+v9012/9/5j7t4eZZJL/AQAAIAcx9380zET+BwAAgMqIuf/uMBP5HwAAAAZKu99DGMXc/7Ewk0zyv/5/1fv/Cyv1//X/9f87r1//v7f0//X/O9H/1/8f5PXr/+v/012/9f9j7t8RZpJJ/gcAAIAcxNx/T5iJ/A8AAACVEXP/vWEm8j8AAABURsz9O8NMMsn/+v9V7//7/f/6//r/3dav/99b+v/6/53o/w9m/z9826L/f376/+NL7d/Y/y/PIf1/+lG/9f9j7r8vzCST/A8AAAA5iLn/42Em8j8AAABURsz9nwgzkf8BAACgMmLu/2SYSSb5X/9f/1//X/9f/1//v5f0//X/O9H/H8z+f6T/7/f/6//TTb/1/2Puvz/MJJP8DwAAADmIuf9TYSbyPwAAAFRGzP3/P8xE/gcAAIDKiLn/gTCTTPK//r/+v/6//r/+v/5/L+n/6/93ov+v/z/I69f/1/+nu37r/8fc/ythJpnkfwAAAMhBzP0PhpnI/wAAAFAZMfd/OsxE/gcAAIDKiLn/V8NMMsn/+v/np/8/nK5f/1//X/9f/1///1zS/9f/L/T/z9iF7s8P+vr1//X/6a7f+v8x9/9amEkm+R8AAAByEHP/r4eZyP8AAABQGTH3/0aYifwPAAAAlRFz/0NhJpnkf/1/v/9f/1//X/9f/7+X9P/1/zvR/9f/H+T16//r/9Ndv/X/Y+7/zTCTTPI/AAAA5CDm/ofDTOR/AAAAqIyY+z8TZiL/AwAAQGXE3P/ZMJNM8r/+v/6//r/+v/6//n8v6f/r/3ei/6//P8jr1//X/6e7fuv/x9z/SJhJJvkfAAAAchBz/+fCTOR/AAAAqIyY+38rzET+BwAAgMqIuf+3w0wyyf/6//r/+v/6//r/+v+9pP+/uP9fvoZdyP7/iuVsqP+/LPr/+v/6//r/dNZv/f+Y+z8fZpJJ/gcAAIAcxNz/O2Em8j8AAABURsz9vxtmIv8DAABAZcTc/2iYSSb5X/9f/1//X/9f/1//v5f0//3+/070//X/B3n9+v/6/3TXb/3/mPu/EGaSSf4HAACAHMTc/3thJvI/AAAAVEbM/bvCTOR/AAAAqIyY+x8LM8kk/+v/6//r/+v/6//r//eS/r/+fyf6//r/g7x+/X/9f7rrt/5/zP27w0wyyf8AAACQg5j7vxhmIv8DAABAZcTcvyfMRP4HAACAyoi5f2+YSSb5X/9f/1//X/9f/1//v5f0//X/O9H/1/8f5PXr/+v/012/9f9j7p8JM8kk/wMAAEAOYu7fF2Yi/wMAAEBlxNy/P8xE/gcAAIDKiLn/8TCTTPK//r/+v/6//r/+v/5/L+n/6/93ov+v/z/I69f/1/+nu37r/8fcfyDMJJP8DwAAADmIuf9LYSbyPwAAAFRGzP1fDjOR/wEAAKAyYu4/GGaSSf7X/9f/1//X/9f/1//vJf1//f9O9P/1/wd5/fr/+v9012/9/5j7D4WZZJL/AQAAIAcx9x8OM5H/AQAAoDJi7j8SZiL/AwAAQGXE3H80zCST/K//r/+v/6//r/+v/99L+v/6/53o/+v/D/L69f/1/+mu3/r/Mff/fphJJvkfAAAAchBz/7EwE/kfAAAAKiPm/tkwE/kfAAAAKiPm/rkwk0zyv/6//r/+v/6//r/+fy/p/+v/d6L/r/8/yOvX/9f/p7t+6//H3H88zCST/A8AAAA5iLn/iTAT+R8AAAAqI+b+J8NM5H8AAAD4P/buM9eus4rj8AnGgIQQY2EEDIEx8Ikp0HsLvfcSeu+919B7771DIPQqBcFda124iff2Pfbxefe7nufLErZlXrBA+cv6aU8jd/+945Ym+1//r//X/5/2/zfc6+THj9T/n3R++n/9v/7/XPT/+v+d/n9vx+7nt/5+/b/+n3Wj9f+5++8TtzTZ/wAAANBB7v77xi32PwAAAEwjd//94hb7HwAAAKaRu//+cUuT/a//1//r/33/X/+v/z8k/b/+f4n+X/+/5ffr//X/rBut/8/d/4C4pcn+BwAAgA5y9z8wbrH/AQAAYBq5+x8Ut9j/AAAAMI3c/Q+OW5rsf/2//l//r//X/+v/D0n/r/9fov/X/2/5/fp//T/rRuv/c/c/JG5psv8BAACgg9z9D41b7H8AAACYRu7+h8Ut9j8AAABMI3f/w+OWJvtf/6//1//r//X/+v9D0v/r/5fo//X/W36//l//z7rR+v/c/Y+IW5rsfwAAAOggd/8j4xb7HwAAAKaRu/9RcYv9DwAAANPI3f/ouKXJ/tf/6//1//p//b/+/5D0//r/Jfp//f+W36//1/+z7uD9/z2u/++93P4/d//1cUuT/Q8AAAAd5O5/TNxi/wMAAMA0cvc/Nm6x/wEAAGAaufsfF7c02f/6f/3/af9/y3X6f/2//v/0x/X/V4f+X/+/RP8/av9/ef9N6P/1//p/1hy8/1/p/c/+69z9j49bmux/AAAA6CB3/xPiFvsfAAAAppG7/4lxi/0PAAAA08jd/6S4pcn+1//r/33//8bKz/X/+n/9/9Wn/9f/L9H/j9r/+/7/lfb/d7+M95/2///553D9P3Marf/P3f/kuKXJ/gcAAIAOcvc/JW6x/wEAAGAaufufGrfY/wAAADCN3P1Pi1ua7H/9v/5f/+/7//p//f8h6f/1/0v0//r/Lb/f9//1/6wbrf/P3f/0uKXJ/gcAAIAOcvc/I26x/wEAAGAaufufGbfY/wAAADCN3P3Pilua7H/9v/5f/6//v6L+/4L+X/+/TP+v/1+i/9f/b/n9+n/9P+tG6/9z9z87bmmy/wEAAKCD3P3PiVvsfwAAAJhG7v7nxi32PwAAAEwjd//z4pYm+1//r//X/+v/ff9f/39I+v/p+v/r9P+n9P/6f/2//p9lo/X/ufufH7c02f8AAADQQe7+F8Qt9j8AAABMI3f/C+MW+x8AAACmkbv/hrilyf7X/+v/9f/6f/2//v+Q9P/T9f++//8/9P/6f/2//p9lo/X/uftfFLesDb+LKz8PAAAADCN3/4vjliZ//w8AAAAd5O5/Sdxi/wMAAMA0cve/NG5psv/1//p//b/+X/+v/z8k/b/+f4n+/7b7/ztd4t9P/z/W+/X/+n/Wjdb/5+5/WdzSZP8DAABAB7n7Xx632P8AAAAwjdz9r4hb7H8AAACYRu7+V8YtTfb/pfr/m+988vPn7P9vr//X/+v/9f9J/6//3+n/9f8r9P++/7/l9+v/9f+sG63/z93/qrilyf4HAACADnL3vzpusf8BAABgGrn7XxO32P8AAAAwjdz9r41bmux/3//X/+v/9f/6f/3/Ien/9f9L9P/6/y2/X/+v/2fdaP1/7v7XxS1N9j8AAAB0kLv/9XGL/Q8AAADTyN3/hrjF/gcAAIBp5O5/Y9zSZP/r//X/R+//b6f/T/r/+HPV/+v/z0H/r//f6f/3dux+fuvv1//r/1k3Wv+fu/9NcUuT/Q8AAAAd5O5/c9xi/wMAAMA0cve/JW6x/wEAAGAaufvfGrc02f/6f/3/0ft/3/8v+v/4c9X/6//PQf+v/9/p//d27H5+6+/X/+v/WTda/5+7/21xS5P9DwAAAB3k7n973GL/AwAAwDRy978jbrH/AQAAYBq5+98ZtzTZ//p//b/+X/+v/9f/H5L+X/+/RP+v/9/y+/X/+n/Wjdb/5+5/V9zSZP8DAABAB7n73x232P8AAAAwjdz974lb7H8AAACYRu7+98YtTfa//n/r/f89b4oX6P/1//p//f+Q9P/6/yX6f/3/lt+v/9f/s260/j93//vilib7HwAAADrI3f/+uMX+BwAAgGnk7v9A3GL/AwAAwDRy938wbmmy/3v0/xdv9cvm6f99/1//r//X/49N/6//X6L/1/9v+f36f/0/60br/3P3fyhuabL/AQAAoIPc/R+OW+x/AAAAmEbu/o/ELfY/AAAATCN3/0fjlib7v0f/f2sN+v/8j3Vt+/9b7qr/1/8X/b/+f6f/1/+v0P/r/7f8fv2//p91o/X/uftvjFua7H8AAADoIHf/x+IW+x8AAACmkbv/43GL/Q8AAADTyN3/ibjhbnc53pOuKf3/tP2/7//r//X/+v8h6P/1/0v0//r/Lb9f/6//Z91o/X/u/k/GLf7+HwAAAKaRu/9TcYv9DwAAANPI3f/puMX+BwAAgGnk7v9M3NJk/+v/9f/6f/3/dP1//O9J/z8G/b/+f4n+X/+/5ffr//X/rBut/8/d/9m4pcn+BwAAgA5y938ubrH/AQAAYBq5+z8ft9j/AAAAMI3c/V+IW5rsf/2//l//f9X6/4tnf3/9v+//6//1//r/Zfp//f+W36//1/+zbrT+P3f/F+OWJvsfAAAAOsjd/6W4xf4HAACAaeTu/3LcYv8DAADANHL3fyVuabL/9f/6f/2/7//r//X/h6T/1/8v0f/r/7f8fv2//p91o/X/ufu/Grc02f8AAADQQe7+r8Ut9j8AAABMI3f/1+MW+x8AAACmkbv/G3FLk/0/c/+/9Mv0/yf0//r/nf5f/39g+n/9/xL9v/5/y+/X/+v/WTda/5+7/5txS5P9DwAAAB3k7v9W3GL/AwAAwDRy9387brH/AQAAYBq5+78TtzTZ/zP3/0v0/yf0//r/nf5f/39g+n/9/xL9v/5/y+/X/+v/WTda/5+7/7txS5P9DwAAAB3k7v9e3GL/AwAAwDRy938/brH/AQAAYBq5+38QtzTZ//p//b/+X/+v/9f/H5L+X/+/RP+v/9/y+/X/+n/Wjdb/5+7/YdzSZP8DAABAB7n7fxS32P8AAAAwjdz9P45b7H8AAACYRu7+n8QtTfa//l//r/8fqv+/w9nfR/+v/9f/L9P/6/93+v+9Hbuf3/r79f/6f9aN1v/n7v9p3NJk/wMAAEAHuft/FrfY/wAAADCN3P0/j1vsfwAAAJhG7v5fxC1N9r/+X/+v/9+7/7+w8/3//3uP/l//f1v0//r/Jfp//f+W36//1/+zbrT+P3f/L+OWJvsfAAAAOsjd/6u4xf4HAACAaeTu/3XcYv8DAADANHL3/yZuabL/9f/6f/3/UN//1//r//X/56T/1//v9P97O3Y/v/X36//1/6wbrf/P3X9T3NJk/wMAAEAHuft/G7fY/wAAADCN3P2/i1vsfwAAAJhG7v6b45Ym+1//r/+fsv+/o/5f/6//H4X+X/+/RP+v/9/y+/X/+n/Wjdb/5+7/fdzSZP8DAABAB7n7/xC32P8AAAAwjdz9f4xb7H8AAACYRu7+P8UtTfa//l//P2X/7/v/+v+t9f8XTv8PWP9/Pvp//f9O/7+3Y/fzW3+//l//z7rR+v/c/X+OW5rsfwAAAOggd/9f4hb7HwAAAKaRu/+vcYv9DwAAANPI3f+3uKXJ/u/S/5/NSPT/J/T/+v+d/n+M/r/R9//P/nlfKf2//n+n/9/bsfv5rb9f/6//Z91o/X/u/r/HLU32PwAAAHSQu/8fcYv9DwAAANPI3f/PuMX+BwAAgGnk7v9X3NJk/3fp/8/S/5/Q/+v/d/p//f+B+f6//n+J/l//v+X36//1/6wbrf/P3f/vAAAA//+KYySt")
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x80f811, 0x0, 0x0, 0x0, &(0x7f00000000c0))
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./bus/file0\x00', 0x80008, 0x0, 0x0, 0x0, &(0x7f0000000000))
rename(&(0x7f0000000b40)='./bus/file0\x00', &(0x7f0000000080)='./file1\x00')

1.288416549s ago: executing program 5 (id=3248):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x7, 0x201, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc004}, 0x80c0)
sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001080)={0x20, 0x0, 0x7, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000019}, 0x8080)
sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000001500)=ANY=[@ANYBLOB="14000000030701"], 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x80)

1.131555526s ago: executing program 5 (id=3249):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bond0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x3, 0x3, 0xda8}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x5000, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x6a4, 0x5, 0x5}}}}]}, 0x44}}, 0x4008000)

756.564015ms ago: executing program 1 (id=3253):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0)

508.303116ms ago: executing program 1 (id=3254):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x254, &(0x7f0000000300)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
write$binfmt_elf32(r0, &(0x7f0000000340)=ANY=[], 0x58)
preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000002200)=""/4086, 0xff6}], 0x1, 0x1, 0x40031, 0x1f)

365.749323ms ago: executing program 1 (id=3255):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700020000000000ef000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r1}, 0xc)

227.143609ms ago: executing program 0 (id=3256):
r0 = socket$kcm(0xa, 0x1, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020"], 0x0, 0x3c}, 0x28)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0xffffffffffffffdd, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000))

151.515543ms ago: executing program 1 (id=3257):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xfd, 0x0, 0x7fff7ffc}]})
r0 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb)
pipe2$watch_queue(&(0x7f0000000080)={<r1=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x0)

61.211847ms ago: executing program 1 (id=3258):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/devices/system/machinecheck/machinecheck0/bank1\x00', 0x2, 0x0)
read$FUSE(r0, &(0x7f0000001040)={0x2020}, 0x2020)

0s ago: executing program 1 (id=3259):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20000040)

kernel console output (not intermixed with test programs):

.3.2194'.
[  281.547313][T11170] CIFS: bad ip= option (127®0.0.1)
[  281.556974][T11170] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  281.583095][    C1] vkms_vblank_simulate: vblank timer overrun
[  281.592520][T11170] CIFS: Attempting to mount (null)
[  281.609571][T11170] CIFS: VFS: Error connecting to socket. Aborting operation.
[  281.635162][T11170] CIFS: VFS: cifs_mount failed w/return code = -111
[  281.805117][T11180] loop4: detected capacity change from 0 to 1764
[  281.992945][T11185] loop3: detected capacity change from 0 to 256
[  282.004157][T11185] exfat: Deprecated parameter 'namecase'
[  282.014198][T11185] exfat: Deprecated parameter 'namecase'
[  282.026670][T11185] exfat: Deprecated parameter 'namecase'
[  282.057098][T11185] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[  282.108777][ T3557] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  282.400604][T11187] loop4: detected capacity change from 0 to 40427
[  282.420629][T11187] F2FS-fs (loop4): invalid crc value
[  282.443513][T11187] F2FS-fs (loop4): Found nat_bits in checkpoint
[  282.547826][T11187] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  282.634487][ T8034] syz-executor: attempt to access beyond end of device
[  282.634487][ T8034] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  282.659656][ T8034] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  283.169862][T11210] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2220'.
[  283.193437][T11210] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2220'.
[  283.226137][T11212] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2220'.
[  283.251749][T11212] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2220'.
[  283.371302][T11217] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2221'.
[  284.095979][   T28] audit: type=1326 audit(1789488898.747:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11213 comm="syz.4.2216" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44c899e159 code=0x7fc00000
[  284.127080][T11233] loop3: detected capacity change from 0 to 512
[  284.181904][T11233] FAT-fs (loop3): Directory bread(block 199916) failed
[  284.198881][T11233] FAT-fs (loop3): Directory bread(block 199917) failed
[  284.205819][T11233] FAT-fs (loop3): Directory bread(block 199918) failed
[  284.227667][T11233] FAT-fs (loop3): Directory bread(block 199919) failed
[  284.247801][T11233] FAT-fs (loop3): Directory bread(block 199920) failed
[  284.268712][T11233] FAT-fs (loop3): Directory bread(block 199921) failed
[  284.283172][T11233] FAT-fs (loop3): Directory bread(block 199922) failed
[  284.307741][T11233] FAT-fs (loop3): Directory bread(block 199923) failed
[  284.416539][T11233] FAT-fs (loop3): FAT read failed (blocknr 128)
[  284.691374][T11245] loop4: detected capacity change from 0 to 1024
[  285.001017][T11247] loop3: detected capacity change from 0 to 8192
[  285.676130][T11249] loop4: detected capacity change from 0 to 40427
[  285.694769][ T5774] tipc: Resetting bearer <eth:syz_tun>
[  285.738684][T11249] F2FS-fs (loop4): invalid crc value
[  285.780479][T11249] F2FS-fs (loop4): Found nat_bits in checkpoint
[  285.837075][ T5774] tipc: Disabling bearer <eth:syz_tun>
[  285.916558][T11249] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  286.112851][ T8034] syz-executor: attempt to access beyond end of device
[  286.112851][ T8034] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  286.138084][   T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  286.152635][ T8034] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  286.411198][   T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  286.556098][   T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  286.657399][   T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  287.081553][   T11] tipc: Left network mode
[  287.214258][ T5775] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  287.230516][ T5775] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  287.248991][ T5775] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  287.257021][ T5775] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  287.265413][ T5775] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  287.273407][ T5775] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  288.055980][T11269] loop4: detected capacity change from 0 to 40427
[  288.086055][T11269] F2FS-fs (loop4): Invalid SB checksum offset: 0
[  288.115286][T11269] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  288.145890][T11269] F2FS-fs (loop4): invalid crc value
[  288.423802][T11271] chnl_net:caif_netlink_parms(): no params data found
[  288.511060][T11269] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[  288.528372][T11269] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  288.683262][ T8034] syz-executor: attempt to access beyond end of device
[  288.683262][ T8034] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  288.721368][ T8034] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  289.197974][T11271] bridge0: port 1(bridge_slave_0) entered blocking state
[  289.207715][T11271] bridge0: port 1(bridge_slave_0) entered disabled state
[  289.214980][T11271] bridge_slave_0: entered allmulticast mode
[  289.267687][T11271] bridge_slave_0: entered promiscuous mode
[  289.295226][T11271] bridge0: port 2(bridge_slave_1) entered blocking state
[  289.316708][T11271] bridge0: port 2(bridge_slave_1) entered disabled state
[  289.333450][T11271] bridge_slave_1: entered allmulticast mode
[  289.347870][T11271] bridge_slave_1: entered promiscuous mode
[  289.378365][ T5775] Bluetooth: hci1: command tx timeout
[  289.432400][   T11] hsr_slave_0: left promiscuous mode
[  289.442305][   T11] hsr_slave_1: left promiscuous mode
[  289.470512][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  289.486358][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  289.508637][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  289.516094][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  289.536582][   T11] bridge_slave_1: left allmulticast mode
[  289.544207][   T11] bridge_slave_1: left promiscuous mode
[  289.561234][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  289.608847][   T11] bridge_slave_0: left allmulticast mode
[  289.614713][   T11] bridge_slave_0: left promiscuous mode
[  289.638091][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  289.756550][   T11] veth1_macvtap: left promiscuous mode
[  289.763203][   T11] veth0_macvtap: left promiscuous mode
[  289.769551][   T11] veth1_vlan: left promiscuous mode
[  289.775603][   T11] veth0_vlan: left promiscuous mode
[  289.997190][T11331] loop4: detected capacity change from 0 to 32768
[  290.051736][T11331] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  290.128310][T11331] XFS (loop4): Ending clean mount
[  290.315757][ T8034] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  291.053705][   T11] team0 (unregistering): Port device team_slave_1 removed
[  291.137441][   T11] team0 (unregistering): Port device team_slave_0 removed
[  291.207673][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  291.277420][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  291.467912][ T5775] Bluetooth: hci1: command tx timeout
[  292.057077][   T11] bond0 (unregistering): Released all slaves
[  292.067767][    T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  292.264195][T11271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  292.292778][T11271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  292.301977][    T9] usb 5-1: Using ep0 maxpacket: 8
[  292.314290][    T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  292.364048][    T9] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  292.383588][    T9] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  292.417242][    T9] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40
[  292.443760][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  292.453502][T11271] team0: Port device team_slave_0 added
[  292.470793][T11271] team0: Port device team_slave_1 added
[  292.483070][    T9] usb 5-1: Product: syz
[  292.487285][    T9] usb 5-1: Manufacturer: syz
[  292.503770][    T9] usb 5-1: SerialNumber: syz
[  292.560545][T11271] batman_adv: batadv0: Adding interface: batadv_slave_0
[  292.577619][T11271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  292.659689][T11271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  292.689466][T11271] batman_adv: batadv0: Adding interface: batadv_slave_1
[  292.696061][   T28] audit: type=1326 audit(1789488907.337:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11369 comm="syz.0.2272" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62ee79e159 code=0x7ffc0000
[  292.706025][T11271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  292.746614][    C1] vkms_vblank_simulate: vblank timer overrun
[  292.780483][   T28] audit: type=1326 audit(1789488907.337:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11369 comm="syz.0.2272" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62ee79e159 code=0x7ffc0000
[  292.827748][T11271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  292.887659][   T28] audit: type=1326 audit(1789488907.387:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11369 comm="syz.0.2272" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62ee79e159 code=0x7ffc0000
[  292.911662][    C1] vkms_vblank_simulate: vblank timer overrun
[  292.971536][T11271] hsr_slave_0: entered promiscuous mode
[  292.988317][   T28] audit: type=1326 audit(1789488907.387:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11369 comm="syz.0.2272" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f62ee79e159 code=0x7ffc0000
[  293.012321][    C1] vkms_vblank_simulate: vblank timer overrun
[  293.059830][T11271] hsr_slave_1: entered promiscuous mode
[  293.072195][T11271] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  293.100617][T11271] Cannot create hsr debugfs directory
[  293.122770][   T28] audit: type=1326 audit(1789488907.387:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11369 comm="syz.0.2272" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62ee79e159 code=0x7ffc0000
[  293.146817][    C1] vkms_vblank_simulate: vblank timer overrun
[  293.229488][   T28] audit: type=1326 audit(1789488907.387:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11369 comm="syz.0.2272" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62ee79e159 code=0x7ffc0000
[  293.306453][   T28] audit: type=1326 audit(1789488907.387:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11369 comm="syz.0.2272" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62ee79e159 code=0x7ffc0000
[  293.330529][    C1] vkms_vblank_simulate: vblank timer overrun
[  293.346992][    T9] usb 5-1: 1:1: cannot get freq (v2/v3): err -71
[  293.361366][    T9] usb 5-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[  293.383870][   T28] audit: type=1326 audit(1789488907.387:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11369 comm="syz.0.2272" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62ee79e159 code=0x7ffc0000
[  293.475707][   T28] audit: type=1326 audit(1789488907.387:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11369 comm="syz.0.2272" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62ee79e159 code=0x7ffc0000
[  293.499835][    C1] vkms_vblank_simulate: vblank timer overrun
[  293.552742][ T5775] Bluetooth: hci1: command tx timeout
[  293.577883][   T28] audit: type=1326 audit(1789488907.387:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11369 comm="syz.0.2272" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f62ee79e159 code=0x7ffc0000
[  293.591534][    T9] usb 5-1: USB disconnect, device number 11
[  293.601891][    C1] vkms_vblank_simulate: vblank timer overrun
[  293.704049][ T5764] udevd[5764]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  294.074460][T11271] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  294.124631][T11271] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  294.155638][T11271] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  294.177352][T11271] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  294.488657][T11271] 8021q: adding VLAN 0 to HW filter on device bond0
[  294.491723][T11417] loop4: detected capacity change from 0 to 256
[  294.529115][T11271] 8021q: adding VLAN 0 to HW filter on device team0
[  294.619741][ T2969] bridge0: port 1(bridge_slave_0) entered blocking state
[  294.626950][ T2969] bridge0: port 1(bridge_slave_0) entered forwarding state
[  294.646870][T11417] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d)
[  294.695193][ T2969] bridge0: port 2(bridge_slave_1) entered blocking state
[  294.702468][ T2969] bridge0: port 2(bridge_slave_1) entered forwarding state
[  295.403548][T11271] 8021q: adding VLAN 0 to HW filter on device batadv0
[  295.617788][ T5775] Bluetooth: hci1: command tx timeout
[  295.892737][T11475] IPv6: NLM_F_CREATE should be specified when creating new route
[  295.936851][T11475] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  295.944683][T11475] IPv6: NLM_F_CREATE should be set when creating new route
[  295.951977][T11475] IPv6: NLM_F_CREATE should be set when creating new route
[  295.959294][T11475] IPv6: NLM_F_CREATE should be set when creating new route
[  295.967904][T11475] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  296.246035][T11488] netlink: 'syz.0.2308': attribute type 3 has an invalid length.
[  296.279140][T11488] netlink: 136 bytes leftover after parsing attributes in process `syz.0.2308'.
[  296.430005][T11271] veth0_vlan: entered promiscuous mode
[  296.501466][T11271] veth1_vlan: entered promiscuous mode
[  296.601830][T11271] veth0_macvtap: entered promiscuous mode
[  296.633555][T11271] veth1_macvtap: entered promiscuous mode
[  296.699181][T11271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  296.718913][T11271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  296.736980][T11271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  296.772869][T11271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  296.808525][T11271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  296.868384][T11271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  296.888670][T11271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  296.924620][T11271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  296.981208][T11271] batman_adv: batadv0: Interface activated: batadv_slave_0
[  297.015702][T11271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  297.036528][T11271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  297.066471][T11271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  297.087601][T11271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  297.097487][T11271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  297.147617][T11271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  297.153283][T11514] nbd: socks must be embedded in a SOCK_ITEM attr
[  297.157471][T11271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  297.208166][T11271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  297.240632][T11271] batman_adv: batadv0: Interface activated: batadv_slave_1
[  297.281629][T11271] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  297.327784][T11271] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  297.352167][T11271] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  297.362308][T11271] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  297.485336][T11519] loop4: detected capacity change from 0 to 512
[  297.574957][T11519] EXT4-fs: Ignoring removed mblk_io_submit option
[  297.587726][   T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  297.587743][   T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  297.689519][T11519] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  297.862883][   T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  297.884295][T11519] __quota_error: 8 callbacks suppressed
[  297.884309][T11519] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  297.916568][   T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  298.006968][T11519] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0
[  298.076853][T11519] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.2317: Failed to acquire dquot type 0
[  298.101532][T11519] EXT4-fs (loop4): Remounting filesystem read-only
[  298.125606][T11519] EXT4-fs (loop4): 1 orphan inode deleted
[  298.154256][T11519] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  298.167368][T11519] ext4 filesystem being mounted at /335/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  298.365243][ T8034] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  299.084846][T11558] jffs2: notice: (11558) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  299.558176][ T5830] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  299.787601][ T5830] usb 5-1: Using ep0 maxpacket: 8
[  299.800059][ T5830] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  299.827607][ T5830] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  299.863722][ T5830] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  299.905489][ T5830] usb 5-1: config 0 descriptor??
[  300.239746][ T5830] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  300.532250][ T5810] usb 5-1: USB disconnect, device number 12
[  300.650530][T11577] loop5: detected capacity change from 0 to 32768
[  300.729257][T11577] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  300.870979][T11577] XFS (loop5): Ending clean mount
[  300.885151][T11577] XFS (loop5): Quotacheck needed: Please wait.
[  300.974775][T11577] XFS (loop5): Quotacheck: Done.
[  301.031087][   T28] audit: type=1800 audit(1789488915.687:99): pid=11577 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2334" name="file1" dev="loop5" ino=9286 res=0 errno=0
[  301.453066][T11271] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  302.284147][T11620] loop4: detected capacity change from 0 to 40427
[  302.329319][T11620] F2FS-fs (loop4): Invalid log blocks per segment (32)
[  302.336234][T11620] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  302.391371][T11620] F2FS-fs (loop4): heap/no_heap options were deprecated
[  302.556145][T11647] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2346'.
[  302.804457][T11655] loop5: detected capacity change from 0 to 256
[  302.865223][T11655] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d)
[  303.107407][ T2969] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  303.503791][T11681] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2358'.
[  303.601176][T11689] loop4: detected capacity change from 0 to 256
[  303.641390][T11689] exfat: Deprecated parameter 'utf8'
[  303.646833][T11689] exfat: Deprecated parameter 'utf8'
[  303.662376][T11689] exfat: Deprecated parameter 'utf8'
[  303.687477][T11689] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  303.848394][ T5810] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  304.053302][ T5810] usb 6-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 0.00
[  304.066127][ T5810] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  304.079206][ T5810] usb 6-1: Product: syz
[  304.083417][ T5810] usb 6-1: Manufacturer: syz
[  304.129667][ T5810] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input36
[  304.370349][   T23] usb 6-1: USB disconnect, device number 2
[  304.756733][ T5773] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  304.766466][ T5773] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  304.788710][ T5773] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  304.799980][ T5773] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  304.807878][ T5773] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  304.815468][ T5773] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  305.205336][T11708] chnl_net:caif_netlink_parms(): no params data found
[  305.362584][T11708] bridge0: port 1(bridge_slave_0) entered blocking state
[  305.381592][T11708] bridge0: port 1(bridge_slave_0) entered disabled state
[  305.396856][T11708] bridge_slave_0: entered allmulticast mode
[  305.414492][T11708] bridge_slave_0: entered promiscuous mode
[  305.426635][T11708] bridge0: port 2(bridge_slave_1) entered blocking state
[  305.444251][T11708] bridge0: port 2(bridge_slave_1) entered disabled state
[  305.454465][T11708] bridge_slave_1: entered allmulticast mode
[  305.469085][T11708] bridge_slave_1: entered promiscuous mode
[  305.532561][T11708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  305.546920][T11708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  305.595098][T11708] team0: Port device team_slave_0 added
[  305.605226][T11708] team0: Port device team_slave_1 added
[  305.635579][T11708] batman_adv: batadv0: Adding interface: batadv_slave_0
[  305.643252][T11708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  305.669142][    C1] vkms_vblank_simulate: vblank timer overrun
[  305.676122][T11708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  305.689352][T11708] batman_adv: batadv0: Adding interface: batadv_slave_1
[  305.696365][T11708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  305.723076][T11708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  305.785549][T11708] hsr_slave_0: entered promiscuous mode
[  305.791696][   T23] usb 6-1: new low-speed USB device number 3 using dummy_hcd
[  305.801281][T11708] hsr_slave_1: entered promiscuous mode
[  305.809017][T11708] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  305.816610][T11708] Cannot create hsr debugfs directory
[  305.980988][   T23] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  305.989462][   T23] usb 6-1: config 0 has no interface number 0
[  305.999121][   T23] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  306.035540][T11708] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  306.042447][   T23] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  306.053308][   T23] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  306.062800][   T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  306.066017][T11708] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  306.079789][   T23] usb 6-1: config 0 descriptor??
[  306.085848][T11726] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  306.101040][T11708] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  306.111201][   T23] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  306.126324][T11708] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  306.160463][T11708] bridge0: port 2(bridge_slave_1) entered blocking state
[  306.167695][T11708] bridge0: port 2(bridge_slave_1) entered forwarding state
[  306.175255][T11708] bridge0: port 1(bridge_slave_0) entered blocking state
[  306.182439][T11708] bridge0: port 1(bridge_slave_0) entered forwarding state
[  306.201224][   T42] bridge0: port 1(bridge_slave_0) entered disabled state
[  306.210099][   T42] bridge0: port 2(bridge_slave_1) entered disabled state
[  306.267095][T11708] 8021q: adding VLAN 0 to HW filter on device bond0
[  306.278133][ T5810] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  306.291621][T11708] 8021q: adding VLAN 0 to HW filter on device team0
[  306.304788][ T3485] bridge0: port 1(bridge_slave_0) entered blocking state
[  306.311993][ T3485] bridge0: port 1(bridge_slave_0) entered forwarding state
[  306.331922][   T42] bridge0: port 2(bridge_slave_1) entered blocking state
[  306.339107][   T42] bridge0: port 2(bridge_slave_1) entered forwarding state
[  306.361180][    T9] usb 6-1: USB disconnect, device number 3
[  306.477782][ T5810] usb 2-1: Using ep0 maxpacket: 32
[  306.488526][ T5810] usb 2-1: config 0 has an invalid interface number: 51 but max is 0
[  306.504087][ T5810] usb 2-1: config 0 has no interface number 0
[  306.514383][ T5810] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  306.531040][ T5810] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  306.541789][ T5810] usb 2-1: Product: syz
[  306.545987][ T5810] usb 2-1: Manufacturer: syz
[  306.554749][ T5810] usb 2-1: SerialNumber: syz
[  306.563097][ T5810] usb 2-1: config 0 descriptor??
[  306.575253][ T5810] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  306.590385][T11708] 8021q: adding VLAN 0 to HW filter on device batadv0
[  306.784349][ T5810] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  306.806822][ T5810] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  306.898073][ T5773] Bluetooth: hci2: command tx timeout
[  306.919241][T11708] veth0_vlan: entered promiscuous mode
[  306.984332][T11708] veth1_vlan: entered promiscuous mode
[  307.071185][T11708] veth0_macvtap: entered promiscuous mode
[  307.081694][T11708] veth1_macvtap: entered promiscuous mode
[  307.136530][T11708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  307.155585][T11708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  307.198161][    C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71
[  307.204479][T11708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  307.209583][    T9] usb 2-1: USB disconnect, device number 25
[  307.247255][T11708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  307.253480][    T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  307.267694][T11708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  307.293858][T11708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  307.302700][    T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  307.329783][T11708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  307.339202][    T9] quatech2 2-1:0.51: device disconnected
[  307.364713][T11708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  307.415639][T11708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  307.437866][T11708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  307.459498][T11708] batman_adv: batadv0: Interface activated: batadv_slave_0
[  307.495635][T11708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  307.533531][T11708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  307.558333][T11708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  307.578497][T11708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  307.600704][T11708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  307.645251][T11708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  307.681388][T11708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  307.706830][T11708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  307.734748][T11708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  307.745723][T11708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  307.767336][T11708] batman_adv: batadv0: Interface activated: batadv_slave_1
[  307.811537][T11708] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  307.820795][T11708] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  307.832568][T11708] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  307.841606][T11708] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  308.116969][   T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  308.135314][   T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  308.181647][ T3485] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  308.223741][ T3485] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  308.342827][T11751] loop5: detected capacity change from 0 to 40427
[  308.407766][T11751] F2FS-fs (loop5): Insane cp_payload (553648128 >= 504)
[  308.433302][T11751] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  308.489038][T11751] F2FS-fs (loop5): invalid crc value
[  308.494429][T11751] F2FS-fs (loop5): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root
[  308.602836][T11751] F2FS-fs (loop5): Found nat_bits in checkpoint
[  308.839665][T11751] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  308.857496][T11751] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  308.941253][T11777] loop6: detected capacity change from 0 to 8192
[  308.991423][ T5773] Bluetooth: hci2: command tx timeout
[  309.169997][T11271] syz-executor: attempt to access beyond end of device
[  309.169997][T11271] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  309.236818][T11271] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  309.299397][T11788] vivid-000: disconnect
[  309.332340][T11785] vivid-000: reconnect
[  309.543681][T11766] overlayfs: conflicting lowerdir path
[  310.027503][T11806] ieee802154 phy0 wpan0: encryption failed: -22
[  310.288034][    T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  310.448216][    T8] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  310.493538][    T9] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  310.504938][    T9] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  310.516540][    T9] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  310.525998][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  310.539968][T11809] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  310.550145][    T9] usb 6-1: Quirk or no altest; falling back to MIDI 1.0
[  310.638035][    T8] usb 2-1: Using ep0 maxpacket: 32
[  310.646411][    T8] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  310.658879][    T8] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  310.670326][    T8] usb 2-1: config 0 interface 0 has no altsetting 0
[  310.682045][    T8] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  310.693845][    T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  310.703224][    T8] usb 2-1: Product: syz
[  310.707403][    T8] usb 2-1: Manufacturer: syz
[  310.713451][    T8] usb 2-1: SerialNumber: syz
[  310.721510][    T8] usb 2-1: config 0 descriptor??
[  310.804868][   T27] usb 6-1: USB disconnect, device number 4
[  311.059097][ T5773] Bluetooth: hci2: command tx timeout
[  311.144063][    T8] gs_usb 2-1:0.0: Configuring for 1 interfaces
[  311.304537][T11818] ieee802154 phy0 wpan0: encryption failed: -22
[  311.432640][T11822] ªªªªªª: renamed from vlan0 (while UP)
[  311.554017][    T8] gs_usb 2-1:0.0: Disabling termination support for channel 0 (-EPROTO)
[  311.598218][    T8] usb 2-1: USB disconnect, device number 26
[  312.071074][T11840] loop5: detected capacity change from 0 to 64
[  312.164513][T11840] syz.5.2417: attempt to access beyond end of device
[  312.164513][T11840] loop5: rw=2049, sector=161, nr_sectors = 1 limit=64
[  312.224798][T11840] buffer_io_error: 10 callbacks suppressed
[  312.224815][T11840] Buffer I/O error on dev loop5, logical block 161, lost async page write
[  312.281542][T11840] syz.5.2417: attempt to access beyond end of device
[  312.281542][T11840] loop5: rw=2049, sector=162, nr_sectors = 1 limit=64
[  312.317306][T11840] Buffer I/O error on dev loop5, logical block 162, lost async page write
[  312.353921][T11840] syz.5.2417: attempt to access beyond end of device
[  312.353921][T11840] loop5: rw=2049, sector=163, nr_sectors = 1 limit=64
[  312.389364][T11840] Buffer I/O error on dev loop5, logical block 163, lost async page write
[  312.427666][T11840] syz.5.2417: attempt to access beyond end of device
[  312.427666][T11840] loop5: rw=2049, sector=167, nr_sectors = 1 limit=64
[  312.467764][T11840] Buffer I/O error on dev loop5, logical block 167, lost async page write
[  312.476388][T11840] syz.5.2417: attempt to access beyond end of device
[  312.476388][T11840] loop5: rw=2049, sector=169, nr_sectors = 1 limit=64
[  312.527178][T11835] loop6: detected capacity change from 0 to 32768
[  312.534053][T11840] Buffer I/O error on dev loop5, logical block 169, lost async page write
[  312.549659][T11835] XFS: attr2 mount option is deprecated.
[  312.555970][T11840] syz.5.2417: attempt to access beyond end of device
[  312.555970][T11840] loop5: rw=2049, sector=171, nr_sectors = 1 limit=64
[  312.576053][T11840] Buffer I/O error on dev loop5, logical block 171, lost async page write
[  312.586175][T11840] syz.5.2417: attempt to access beyond end of device
[  312.586175][T11840] loop5: rw=2049, sector=172, nr_sectors = 1 limit=64
[  312.600055][T11840] Buffer I/O error on dev loop5, logical block 172, lost async page write
[  312.613344][T11835] XFS (loop6): DAX unsupported by block device. Turning off DAX.
[  312.624160][T11835] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  312.791667][T11835] XFS (loop6): Ending clean mount
[  312.810545][    T8] XFS (loop6): Metadata CRC error detected at xfs_inobt_read_verify+0x42/0xd0, xfs_finobt block 0x10 
[  312.841944][    T8] XFS (loop6): Unmount and run xfs_repair
[  312.879446][    T8] XFS (loop6): First 128 bytes of corrupted metadata buffer:
[  312.908357][    T8] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff  FIB3............
[  312.917266][    T8] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 80  ................
[  312.957176][    T8] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91  ..G...N..b..1...
[  312.975223][    T8] 00000030: 00 00 00 00 37 43 cf 4c 00 00 24 40 00 00 40 37  ....7C.L..$@..@7
[  312.998024][    T8] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00  ................
[  313.006926][    T8] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  313.029255][    T8] 00000060: 00 00 00 00 00 00 30 77 00 00 00 00 00 00 00 00  ......0w........
[  313.046357][    T8] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  313.075375][T11835] XFS (loop6): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x10 len 4 error 74
[  313.098265][T11835] XFS (loop6): Failed to initialize disk quotas.
[  313.138101][ T5773] Bluetooth: hci2: command tx timeout
[  313.210338][   T27] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  313.265358][T11708] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  313.437607][   T27] usb 6-1: Using ep0 maxpacket: 32
[  313.471503][   T27] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  313.502833][   T27] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  313.568898][   T27] usb 6-1: config 0 descriptor??
[  313.701364][T11891] loop6: detected capacity change from 0 to 128
[  313.731196][T11891] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256
[  313.768079][T11891] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found!
[  313.787697][T11891] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found!
[  313.799387][   T27] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  313.805635][   T27] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  313.833295][T11891] UDF-fs: Scanning with blocksize 512 failed
[  313.856944][   T27] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  313.878386][   T27] usb 6-1: media controller created
[  313.899353][T11891] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256
[  313.926679][   T27] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  313.945677][T11891] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512
[  313.976191][T11891] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found
[  314.004033][   T27] az6027: usb out operation failed. (-71)
[  314.004616][T11891] UDF-fs: Scanning with blocksize 1024 failed
[  314.037314][T11891] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256
[  314.037746][   T27] az6027: usb out operation failed. (-71)
[  314.066053][   T27] stb0899_attach: Driver disabled by Kconfig
[  314.072225][   T27] az6027: no front-end attached
[  314.072225][   T27] 
[  314.082976][T11891] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512
[  314.089262][   T27] az6027: usb out operation failed. (-71)
[  314.106387][   T27] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  314.107632][T11891] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found
[  314.130853][   T27] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input37
[  314.153277][T11891] UDF-fs: Scanning with blocksize 2048 failed
[  314.163675][   T27] dvb-usb: schedule remote query interval to 400 msecs.
[  314.177842][   T27] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  314.183823][T11891] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256
[  314.206644][   T27] usb 6-1: USB disconnect, device number 5
[  314.240675][T11891] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512
[  314.267781][T11891] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found
[  314.287637][T11891] UDF-fs: Scanning with blocksize 4096 failed
[  314.293794][T11891] UDF-fs: warning (device loop6): udf_fill_super: No partition found (1)
[  314.365046][   T27] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  314.679214][ T6117] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  314.827641][ T5831] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  314.875200][ T6117] usb 2-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 0.00
[  314.887210][ T6117] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  314.905929][ T6117] usb 2-1: Product: syz
[  314.913007][ T6117] usb 2-1: Manufacturer: syz
[  314.929832][ T6117] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input38
[  315.012782][ T5831] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  315.051072][ T5831] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  315.078439][ T5831] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  315.100028][ T5831] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  315.133377][ T5831] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  315.152059][ T5831] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  315.167738][ T5831] usb 7-1: Manufacturer: syz
[  315.178291][ T5831] usb 7-1: config 0 descriptor??
[  315.200672][    T8] usb 2-1: USB disconnect, device number 27
[  315.601393][ T5831] appleir 0003:05AC:8243.0010: unknown main item tag 0x0
[  315.615425][ T5831] appleir 0003:05AC:8243.0010: No inputs registered, leaving
[  315.637208][ T5831] appleir 0003:05AC:8243.0010: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0
[  315.916853][   T23] usb 7-1: USB disconnect, device number 2
[  316.207724][T11969] netlink: 844 bytes leftover after parsing attributes in process `syz.5.2438'.
[  316.910582][    T8] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  316.969577][   T23] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  317.107628][    T8] usb 2-1: Using ep0 maxpacket: 32
[  317.120222][    T8] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  317.136171][    T8] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  317.162447][    T8] usb 2-1: config 0 interface 0 has no altsetting 0
[  317.181839][   T23] usb 7-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 0.00
[  317.197668][   T23] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  317.216115][   T23] usb 7-1: Product: syz
[  317.220800][    T8] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  317.226243][   T23] usb 7-1: Manufacturer: syz
[  317.241009][    T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  317.255454][    T8] usb 2-1: Product: syz
[  317.261280][    T8] usb 2-1: Manufacturer: syz
[  317.262793][   T23] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/input/input39
[  317.266373][    T8] usb 2-1: SerialNumber: syz
[  317.316069][ T1283] ieee802154 phy0 wpan0: encryption failed: -22
[  317.322725][ T1283] ieee802154 phy1 wpan1: encryption failed: -22
[  317.336552][    T8] usb 2-1: config 0 descriptor??
[  317.701946][ T6117] usb 7-1: USB disconnect, device number 3
[  317.771418][    T8] gs_usb 2-1:0.0: Configuring for 1 interfaces
[  317.946005][T12023] loop5: detected capacity change from 0 to 256
[  318.007236][T12023] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x8f9fe1ed, utbl_chksum : 0xe619d30d)
[  318.173931][    T8] gs_usb 2-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO)
[  318.194424][    T8] gs_usb: probe of 2-1:0.0 failed with error -71
[  318.224530][    T8] usb 2-1: USB disconnect, device number 28
[  318.702476][T12052] loop5: detected capacity change from 0 to 1024
[  318.760740][T12054] usbip-vudc usbip-vudc.0: gadget not bound
[  319.185102][T12066] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2463'.
[  319.551077][T12064] loop6: detected capacity change from 0 to 40427
[  319.571020][T12064] F2FS-fs (loop6): Invalid SB checksum offset: 0
[  319.577408][T12064] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock
[  319.591002][T12064] F2FS-fs (loop6): invalid crc value
[  319.675697][T12064] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0
[  319.682906][T12064] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  319.768309][T11708] syz-executor: attempt to access beyond end of device
[  319.768309][T11708] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  319.800472][T11708] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  320.102750][    T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  320.318899][    T9] usb 6-1: Using ep0 maxpacket: 32
[  320.334354][    T9] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  320.344269][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  320.364129][    T9] usb 6-1: config 0 descriptor??
[  320.408298][T12092] loop6: detected capacity change from 0 to 4096
[  320.417330][T12092] ntfs3: loop6: Different NTFS sector size (4096) and media sector size (512).
[  320.488224][T12092] ntfs3: loop6: ino=19, mi_enum_attr
[  320.503126][T12092] ntfs3: loop6: Failed to initialize $Extend/$ObjId.
[  320.594410][    T9] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  320.629629][    T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  320.660837][    T9] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  320.682017][    T9] usb 6-1: media controller created
[  320.779203][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  320.788471][T12081] az6027: more than 2 i2c messages at a time is not handled yet. TODO.
[  320.849534][    T9] az6027: usb out operation failed. (-71)
[  320.858049][    T9] az6027: usb out operation failed. (-71)
[  320.863809][    T9] stb0899_attach: Driver disabled by Kconfig
[  320.878627][T12100] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2476'.
[  320.897433][    T9] az6027: no front-end attached
[  320.897433][    T9] 
[  320.906115][    T9] az6027: usb out operation failed. (-71)
[  320.913381][    T9] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  320.941693][    T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input40
[  320.970074][    T9] dvb-usb: schedule remote query interval to 400 msecs.
[  320.997766][    T9] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  321.048220][    T9] usb 6-1: USB disconnect, device number 6
[  321.163842][    T9] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  321.759609][   T28] audit: type=1400 audit(1789488936.417:100): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="/" pid=12114 comm="syz.5.2484" name="/" offset=53
[  322.002428][T12118] macvlan0: entered promiscuous mode
[  322.030287][T12118] netlink: 'syz.6.2486': attribute type 1 has an invalid length.
[  322.049254][T12123] jffs2: notice: (12123) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  322.057613][T12118] netlink: 'syz.6.2486': attribute type 2 has an invalid length.
[  322.131675][T12122] loop5: detected capacity change from 0 to 4096
[  322.183614][T12122] ntfs3: loop5: Different NTFS sector size (4096) and media sector size (512).
[  322.306334][T12122] ntfs3: loop5: ino=19, mi_enum_attr
[  322.332342][T12122] ntfs3: loop5: Failed to initialize $Extend/$ObjId.
[  322.679864][T12139] ALSA: mixer_oss: invalid OSS volume 'dev/net/tun'
[  322.884263][T12146] loop5: detected capacity change from 0 to 512
[  322.928697][T12146] EXT4-fs: Ignoring removed nomblk_io_submit option
[  322.992530][T12146] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  323.038044][T12146] ext4 filesystem being mounted at /47/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  323.202259][T11271] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  323.512436][T12166] ucsi_ccg 0-0008: ucsi_ccg_init failed - -110
[  323.528551][T12166] ucsi_ccg: probe of 0-0008 failed with error -110
[  323.549716][T12166] i2c i2c-0: new_device: Instantiated device ccgx-ucsi at 0x08
[  324.196724][T12170] loop6: detected capacity change from 0 to 40427
[  324.211902][T12170] F2FS-fs (loop6): build fault injection attr: rate: 690, type: 0x7ffff
[  324.235129][T12170] F2FS-fs (loop6): invalid crc value
[  324.262499][T12170] F2FS-fs (loop6): Found nat_bits in checkpoint
[  324.384573][T12170] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  324.424185][   T28] audit: type=1800 audit(1789488939.077:101): pid=12170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2507" name="file1" dev="loop6" ino=10 res=0 errno=0
[  324.444719][    C1] vkms_vblank_simulate: vblank timer overrun
[  324.469611][T12170] syz.6.2507: attempt to access beyond end of device
[  324.469611][T12170] loop6: rw=524288, sector=45064, nr_sectors = 8 limit=40427
[  324.494354][T12201] ipvlan2: entered allmulticast mode
[  324.500861][T12170] syz.6.2507: attempt to access beyond end of device
[  324.500861][T12170] loop6: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  324.522352][T12201] macvlan1: entered allmulticast mode
[  324.542870][T12201] veth1_vlan: entered allmulticast mode
[  324.567975][T12201] batman_adv: batadv0: Adding interface: ipvlan2
[  324.579454][T12201] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  324.603345][T11708] syz-executor: attempt to access beyond end of device
[  324.603345][T11708] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  324.616710][T12201] batman_adv: batadv0: Interface activated: ipvlan2
[  324.640120][T11708] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  324.894170][T12214] overlay: filesystem on ./file0 is read-only
[  325.907513][T12240] loop5: detected capacity change from 0 to 32768
[  325.969948][T12240] JBD2: Ignoring recovery information on journal
[  326.087870][T12240] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  326.342769][T11271] ocfs2: Unmounting device (7,5) on (node local)
[  326.555501][T12254] loop6: detected capacity change from 0 to 512
[  326.641058][T12254] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  326.714035][T12254] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  326.953787][T11708] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  327.127264][T12277] ip_tables: iptables: counters copy to user failed while replacing table
[  327.688118][T12302] netlink: 'syz.0.2566': attribute type 12 has an invalid length.
[  327.723311][T12302] netlink: 'syz.0.2566': attribute type 29 has an invalid length.
[  327.752124][T12305] vivid-000: disconnect
[  327.753638][T12302] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2566'.
[  327.762166][T12304] vivid-000: reconnect
[  327.797656][T12302] netlink: 'syz.0.2566': attribute type 1 has an invalid length.
[  327.807849][T12302] netlink: 'syz.0.2566': attribute type 2 has an invalid length.
[  328.264303][T12316] loop6: detected capacity change from 0 to 164
[  328.568623][T12325] loop6: detected capacity change from 0 to 512
[  328.735054][T12331] loop7: detected capacity change from 0 to 7
[  328.760835][T12328] nbd3: detected capacity change from 0 to 63
[  328.779539][    C1] blk_print_req_error: 10 callbacks suppressed
[  328.779555][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  328.794990][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  328.806303][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  328.815584][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  328.837719][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  328.846907][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  328.856127][ T5773] block nbd3: Receive control failed (result -104)
[  328.859197][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  328.872566][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  328.881092][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  328.890307][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  328.908737][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  328.938297][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  328.947512][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  328.956611][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  328.965896][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  328.974195][T12331] ldm_validate_partition_table(): Disk read failed.
[  328.989722][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  328.998980][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  329.027628][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  329.036802][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  329.044896][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  329.057774][T12331] Dev loop7: unable to read RDB block 0
[  329.082735][T12331]  loop7: unable to read partition table
[  329.092883][T12331] loop7: partition table beyond EOD, truncated
[  329.104460][T12331] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü�¾CêjÌ–ã¢P=ý?ã}X‹ºÐ	œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö�˜Èµ4FLQkÝŠ) failed (rc=-5)
[  329.292063][T12340] loop5: detected capacity change from 0 to 256
[  329.375445][T12340] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  329.948518][T12361] (null): rxe_set_mtu: Set mtu to 512
[  330.155335][T12361] infiniband syz1: set active
[  330.166337][T12361] infiniband syz1: added syz_tun
[  330.298852][T12361] RDS/IB: syz1: added
[  330.305122][T12361] smc: adding ib device syz1 with port count 1
[  330.317183][T12361] smc:    ib device syz1 port 1 has pnetid 
[  330.325834][T12373] synth uevent: /devices/platform/pcspkr: unknown uevent action string
[  330.347838][T12373] platform pcspkr: uevent: failed to send synthetic uevent: -22
[  330.423324][T12375] loop6: detected capacity change from 0 to 256
[  330.463582][T12375] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256
[  330.494734][T12375] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512
[  330.515659][T12375] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found
[  330.526530][T12375] UDF-fs: Scanning with blocksize 512 failed
[  330.558996][T12375] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256
[  330.591454][T12375] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  332.574475][T12425] kAFS: bad VL server IP address
[  332.598488][T12427] program syz.1.2622 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  333.723984][T11271] infiniband syz1: set down
[  333.754021][   T23] syz1: rxe_query_port: returned err = -19
[  333.777634][   T23] infiniband syz1: ib_query_port failed (-19)
[  333.821019][ T3510] smc: removing ib device syz1
[  333.836798][T12459] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2637'.
[  333.844829][   T23] syz1: rxe_query_port: returned err = -19
[  333.901045][T12459] veth1: entered promiscuous mode
[  333.956514][T12459] veth1: left promiscuous mode
[  334.131800][ T3485] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  334.384621][T12466] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2640'.
[  335.327969][T12477] loop6: detected capacity change from 0 to 64
[  336.648314][ T5775] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  336.665162][ T5775] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  336.674096][ T5775] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  336.683643][ T5775] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  336.694170][ T5775] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  336.701571][ T5775] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  337.250997][T12498] chnl_net:caif_netlink_parms(): no params data found
[  337.475612][T12526] tipc: Enabled bearer <eth:syz_tun>, priority 0
[  337.547485][T12498] bridge0: port 1(bridge_slave_0) entered blocking state
[  337.587827][T12498] bridge0: port 1(bridge_slave_0) entered disabled state
[  337.595110][T12498] bridge_slave_0: entered allmulticast mode
[  337.623592][T12498] bridge_slave_0: entered promiscuous mode
[  337.697928][T12498] bridge0: port 2(bridge_slave_1) entered blocking state
[  337.705880][T12498] bridge0: port 2(bridge_slave_1) entered disabled state
[  337.724099][T12498] bridge_slave_1: entered allmulticast mode
[  337.732272][T12498] bridge_slave_1: entered promiscuous mode
[  337.758515][T12540] loop6: detected capacity change from 0 to 8
[  337.861752][T12498] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  337.908533][T12498] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  338.024941][T12498] team0: Port device team_slave_0 added
[  338.059339][T12498] team0: Port device team_slave_1 added
[  338.141523][T12498] batman_adv: batadv0: Adding interface: batadv_slave_0
[  338.148818][T12498] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  338.176682][T12498] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  338.195455][T12498] batman_adv: batadv0: Adding interface: batadv_slave_1
[  338.204673][T12498] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  338.239359][T12498] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  338.327633][ T6117] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  338.392398][T12498] hsr_slave_0: entered promiscuous mode
[  338.418725][T12498] hsr_slave_1: entered promiscuous mode
[  338.426517][T12498] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  338.434812][T12498] Cannot create hsr debugfs directory
[  338.494293][T12558] i2c i2c-0: new_device: Can't parse I2C address
[  338.507719][ T6117] usb 7-1: Using ep0 maxpacket: 32
[  338.522885][ T6117] usb 7-1: config 0 has an invalid interface number: 51 but max is 0
[  338.557641][ T6117] usb 7-1: config 0 has no interface number 0
[  338.576006][ T6117] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  338.591247][ T6117] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  338.610343][ T6117] usb 7-1: Product: syz
[  338.614568][ T6117] usb 7-1: Manufacturer: syz
[  338.625157][ T5830] tipc: Node number set to 3664630468
[  338.637641][ T6117] usb 7-1: SerialNumber: syz
[  338.659804][ T6117] usb 7-1: config 0 descriptor??
[  338.670775][ T6117] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  338.832022][ T5775] Bluetooth: hci1: command tx timeout
[  338.882998][T12498] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  338.894792][ T6117] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  338.949556][ T6117] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  338.977362][T12570] netlink: 'syz.1.2684': attribute type 12 has an invalid length.
[  338.997040][T12570] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2684'.
[  339.126534][T12498] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  339.273699][T12498] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  339.312460][    C1] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71
[  339.320567][ T5831] usb 7-1: USB disconnect, device number 4
[  339.343706][ T5831] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  339.383905][ T5831] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  339.417897][ T5831] quatech2 7-1:0.51: device disconnected
[  339.480282][T12498] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  339.698406][T12498] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  339.720326][T12498] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  339.730646][T12498] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  339.744222][T12498] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  339.815612][T12498] 8021q: adding VLAN 0 to HW filter on device bond0
[  339.835593][T12498] 8021q: adding VLAN 0 to HW filter on device team0
[  339.848185][    T9] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  339.869747][ T2885] bridge0: port 1(bridge_slave_0) entered blocking state
[  339.876907][ T2885] bridge0: port 1(bridge_slave_0) entered forwarding state
[  339.912628][ T3485] bridge0: port 2(bridge_slave_1) entered blocking state
[  339.919783][ T3485] bridge0: port 2(bridge_slave_1) entered forwarding state
[  340.078089][    T9] usb 2-1: Using ep0 maxpacket: 32
[  340.086356][    T9] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  340.102155][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  340.118512][    T9] usb 2-1: config 0 descriptor??
[  340.134484][T12498] 8021q: adding VLAN 0 to HW filter on device batadv0
[  340.348158][    T9] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  340.374867][    T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  340.394410][    T9] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  340.403034][    T9] usb 2-1: media controller created
[  340.426152][T12498] veth0_vlan: entered promiscuous mode
[  340.441718][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  340.448128][T12498] veth1_vlan: entered promiscuous mode
[  340.494157][T12498] veth0_macvtap: entered promiscuous mode
[  340.506667][T12498] veth1_macvtap: entered promiscuous mode
[  340.529971][T12498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  340.540551][T12498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  340.551705][T12498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  340.554010][    T9] az6027: usb out operation failed. (-71)
[  340.563432][T12498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  340.582195][T12498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  340.582636][    T9] az6027: usb out operation failed. (-71)
[  340.599949][    T9] stb0899_attach: Driver disabled by Kconfig
[  340.601064][T12498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  340.605942][    T9] az6027: no front-end attached
[  340.605942][    T9] 
[  340.606342][    T9] az6027: usb out operation failed. (-71)
[  340.625444][T12498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  340.631458][    T9] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  340.648487][T12498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  340.659012][T12498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  340.670027][T12498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  340.675046][    T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input41
[  340.681670][T12498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  340.704725][    T9] dvb-usb: schedule remote query interval to 400 msecs.
[  340.712329][    T9] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  340.724609][    T9] usb 2-1: USB disconnect, device number 29
[  340.732961][T12498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  340.755313][T12498] batman_adv: batadv0: Interface activated: batadv_slave_0
[  340.784151][T12498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  340.796116][T12498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  340.813513][T12498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  340.824615][T12498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  340.837677][T12498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  340.848956][    T9] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  340.852118][T12498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  340.877206][T12498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  340.888947][T12498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  340.900895][T12498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  340.907780][ T5775] Bluetooth: hci1: command tx timeout
[  340.911838][T12498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  340.926875][T12498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  340.940015][T12498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  340.951647][T12498] batman_adv: batadv0: Interface activated: batadv_slave_1
[  340.964142][T12498] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  340.975732][T12498] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  340.985999][T12498] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  340.995663][T12498] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  341.097812][ T2969] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  341.105680][ T2969] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  341.156277][ T2885] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  341.164972][ T2885] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  341.271328][T12589] loop5: detected capacity change from 0 to 4096
[  341.540786][T12593] kAFS: bad VL server IP address
[  342.830911][T12623] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2702'.
[  342.866094][T12623] veth1: entered promiscuous mode
[  342.891011][T12623] veth1: left promiscuous mode
[  342.978120][ T5775] Bluetooth: hci1: command tx timeout
[  343.035325][T12625] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2703'.
[  344.142575][T12634] loop6: detected capacity change from 0 to 32768
[  344.194949][T12634] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  344.506426][T12634] XFS (loop6): Ending clean mount
[  344.666179][T12676] ieee802154 phy0 wpan0: encryption failed: -22
[  344.739076][T12679] í
[  344.845853][T11708] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  345.065408][ T5775] Bluetooth: hci1: command tx timeout
[  345.171903][T12692] Bluetooth: MGMT ver 1.22
[  345.415142][T12699] loop6: detected capacity change from 0 to 512
[  345.472071][T12699] EXT4-fs: Ignoring removed orlov option
[  345.491404][T12699] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  345.514928][T12699] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  345.661522][T12699] EXT4-fs (loop6): 1 truncate cleaned up
[  345.690702][T12699] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  345.777821][ T5810] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  345.843075][T11708] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  346.030758][ T5810] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  346.044208][ T5810] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  346.057669][ T5810] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  346.076381][ T5810] usb 6-1: Product: syz
[  346.086292][ T5810] usb 6-1: Manufacturer: syz
[  346.096189][ T5810] usb 6-1: SerialNumber: syz
[  346.957026][ T5810] cdc_ncm 6-1:1.0: SET_CRC_MODE failed
[  346.975299][ T5810] cdc_ncm 6-1:1.0: SET_NTB_FORMAT failed
[  347.014100][ T5810] cdc_ncm 6-1:1.0: bind() failure
[  347.033407][ T5810] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found
[  347.043913][ T5810] cdc_ncm 6-1:1.1: bind() failure
[  347.084075][ T5810] usb 6-1: USB disconnect, device number 7
[  347.117709][ T6117] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  347.266301][T12753] rnbd_client L127: Can't parse path i: -93
[  347.321691][ T6117] usb 7-1: Using ep0 maxpacket: 32
[  347.351059][ T6117] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  347.368142][ T6117] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  347.400940][ T6117] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  347.425772][ T6117] usb 7-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00
[  347.435236][ T6117] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  347.454076][ T6117] usb 7-1: config 0 descriptor??
[  347.709769][T12763] program syz.5.2761 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  347.880021][ T6117] hid-led 0003:0FC5:B080.0011: unknown main item tag 0x1
[  347.901101][ T6117] hid-led 0003:0FC5:B080.0011: unknown main item tag 0x0
[  347.917790][ T6117] hid-led 0003:0FC5:B080.0011: unknown main item tag 0x4
[  348.080871][ T6117] hid-led: probe of 0003:0FC5:B080.0011 failed with error -71
[  348.117894][ T6117] usb 7-1: USB disconnect, device number 5
[  348.408015][ T5810] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  348.587741][ T5810] usb 6-1: Using ep0 maxpacket: 16
[  348.606306][ T5810] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  348.636087][ T5810] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  348.667124][ T5810] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[  348.710072][ T5810] usb 6-1: config 0 interface 0 has no altsetting 0
[  348.716767][ T5810] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  348.747692][ T5810] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  348.769193][ T5810] usb 6-1: config 0 descriptor??
[  348.777005][T12779] RDS: rds_bind could not find a transport for a:0:20::, load rds_tcp or rds_rdma?
[  348.916072][T12783] netlink: 'syz.1.2770': attribute type 10 has an invalid length.
[  348.937220][T12783] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2770'.
[  348.944606][T12781] loop6: detected capacity change from 0 to 2048
[  349.043296][T12781] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found!
[  349.070561][T12781] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  349.128033][T12781] UDF-fs: bad mount option "fscontext=system_u" or missing value
[  349.155997][T12787] ipvlan3: entered promiscuous mode
[  349.198754][T12787] team0: Device ipvlan3 failed to register rx_handler
[  349.230985][ T5810] hid (null): report_id 49134 is invalid
[  349.236719][ T5810] hid (null): unknown global tag 0xd
[  349.257644][T11708] UDF-fs: error (device loop6): udf_read_inode: (ino 1440) failed !bh
[  349.267061][T11708] UDF-fs: error (device loop6): udf_read_inode: (ino 1440) failed !bh
[  349.275499][ T5810] hid (null): unknown global tag 0xc
[  349.283698][ T5810] hid (null): unknown global tag 0xc
[  349.289180][ T5810] hid (null): global environment stack overflow
[  349.421403][ T6117] usb 6-1: USB disconnect, device number 8
[  349.720006][ T3485] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  349.850209][ T3485] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  349.980757][ T3485] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  350.116385][ T3485] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  350.721569][ T5773] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  350.741189][ T5773] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  350.769160][ T5773] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  350.777620][ T5773] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  350.793289][ T5773] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  350.817861][ T5773] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  350.955597][T12827] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2788'.
[  351.724433][T12821] chnl_net:caif_netlink_parms(): no params data found
[  352.155508][T12821] bridge0: port 1(bridge_slave_0) entered blocking state
[  352.185315][T12821] bridge0: port 1(bridge_slave_0) entered disabled state
[  352.218530][T12821] bridge_slave_0: entered allmulticast mode
[  352.225889][T12821] bridge_slave_0: entered promiscuous mode
[  352.447155][T12821] bridge0: port 2(bridge_slave_1) entered blocking state
[  352.463337][T12821] bridge0: port 2(bridge_slave_1) entered disabled state
[  352.487843][T12821] bridge_slave_1: entered allmulticast mode
[  352.517656][T12821] bridge_slave_1: entered promiscuous mode
[  352.651304][T12821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  352.717675][ T3485] hsr_slave_0: left promiscuous mode
[  352.771167][ T3485] hsr_slave_1: left promiscuous mode
[  352.777440][ T3485] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  352.829055][ T3485] batman_adv: batadv0: Removing interface: batadv_slave_0
[  352.869557][ T3485] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  352.877061][ T3485] batman_adv: batadv0: Removing interface: batadv_slave_1
[  352.907865][ T5773] Bluetooth: hci2: command tx timeout
[  352.917962][ T3485] bridge_slave_1: left allmulticast mode
[  352.924072][ T3485] bridge_slave_1: left promiscuous mode
[  352.930022][ T3485] bridge0: port 2(bridge_slave_1) entered disabled state
[  352.943361][ T3485] bridge_slave_0: left allmulticast mode
[  352.955576][ T3485] bridge_slave_0: left promiscuous mode
[  352.962344][ T3485] bridge0: port 1(bridge_slave_0) entered disabled state
[  353.000473][ T3485] veth1_macvtap: left promiscuous mode
[  353.006141][ T3485] veth0_macvtap: left promiscuous mode
[  353.014311][ T3485] veth1_vlan: left promiscuous mode
[  353.019833][ T3485] veth0_vlan: left promiscuous mode
[  353.617884][   T23] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  353.807915][   T23] usb 6-1: Using ep0 maxpacket: 32
[  353.844849][   T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  353.868638][ T6117] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  353.887738][   T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  353.899971][   T23] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00
[  353.909365][   T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  353.934019][   T23] usb 6-1: config 0 descriptor??
[  354.080431][ T6117] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  354.097898][ T6117] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  354.127618][ T6117] usb 2-1: config 0 interface 0 has no altsetting 0
[  354.157871][ T6117] usb 2-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00
[  354.177829][ T6117] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  354.200090][ T6117] usb 2-1: config 0 descriptor??
[  354.378875][   T23] koneplus 0003:1E7D:2D51.0013: unknown main item tag 0x0
[  354.408920][   T23] koneplus 0003:1E7D:2D51.0013: unknown main item tag 0x0
[  354.416169][   T23] koneplus 0003:1E7D:2D51.0013: item fetching failed at offset 2/5
[  354.442205][   T23] koneplus 0003:1E7D:2D51.0013: parse failed
[  354.450894][   T23] koneplus: probe of 0003:1E7D:2D51.0013 failed with error -22
[  354.590895][ T5782] usb 6-1: USB disconnect, device number 9
[  354.622612][ T3485] team0 (unregistering): Port device team_slave_1 removed
[  354.644292][ T6117] hid-multitouch 0003:0EEF:72C4.0014: unbalanced collection at end of report description
[  354.670884][ T6117] hid-multitouch: probe of 0003:0EEF:72C4.0014 failed with error -22
[  354.721506][ T3485] team0 (unregistering): Port device team_slave_0 removed
[  354.780638][ T3485] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  354.843973][ T3485] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  354.978099][ T5773] Bluetooth: hci2: command tx timeout
[  355.398527][ T5782] usb 2-1: USB disconnect, device number 30
[  355.599103][ T3485] bond0 (unregistering): Released all slaves
[  355.815877][T12821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  355.958166][T12821] team0: Port device team_slave_0 added
[  355.978179][T12821] team0: Port device team_slave_1 added
[  356.063373][T12821] batman_adv: batadv0: Adding interface: batadv_slave_0
[  356.107813][T12821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  356.216949][T12821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  356.257497][T12821] batman_adv: batadv0: Adding interface: batadv_slave_1
[  356.264696][T12821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  356.334261][T12821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  356.589411][T12821] hsr_slave_0: entered promiscuous mode
[  356.622645][T12821] hsr_slave_1: entered promiscuous mode
[  356.674254][T12821] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  356.694925][T12821] Cannot create hsr debugfs directory
[  357.058413][ T5773] Bluetooth: hci2: command tx timeout
[  357.482306][T12821] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  357.538858][T12821] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  357.584731][T12821] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  357.628163][T12821] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  357.888739][T12821] 8021q: adding VLAN 0 to HW filter on device bond0
[  357.930725][T12821] 8021q: adding VLAN 0 to HW filter on device team0
[  357.975261][ T3510] bridge0: port 1(bridge_slave_0) entered blocking state
[  357.982455][ T3510] bridge0: port 1(bridge_slave_0) entered forwarding state
[  358.084271][ T3485] bridge0: port 2(bridge_slave_1) entered blocking state
[  358.091484][ T3485] bridge0: port 2(bridge_slave_1) entered forwarding state
[  358.113155][T12969] input: syz1 as /devices/virtual/input/input42
[  358.867719][T12821] 8021q: adding VLAN 0 to HW filter on device batadv0
[  358.925470][   T55] block nbd3: Possible stuck request ffff888021e40000: control (read@0,1024B). Runtime 30 seconds
[  358.939741][   T55] block nbd3: Possible stuck request ffff888021e40200: control (read@1024,3072B). Runtime 30 seconds
[  359.138683][ T5773] Bluetooth: hci2: command tx timeout
[  359.200171][T12958] loop5: detected capacity change from 0 to 32768
[  359.253124][T12958] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.2826 (12958)
[  359.460401][T12958] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  359.536433][T12958] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm
[  359.617184][T12958] BTRFS info (device loop5): setting nodatasum
[  359.668061][T12958] BTRFS info (device loop5): disabling tree log
[  359.674476][T12958] BTRFS info (device loop5): max_inline at 0
[  359.717736][T12958] BTRFS info (device loop5): using free space tree
[  359.829431][T12821] veth0_vlan: entered promiscuous mode
[  359.918268][T12821] veth1_vlan: entered promiscuous mode
[  359.978891][T12958] BTRFS info (device loop5): enabling ssd optimizations
[  359.985894][T12958] BTRFS info (device loop5): auto enabling async discard
[  360.060237][T12821] veth0_macvtap: entered promiscuous mode
[  360.102667][T12821] veth1_macvtap: entered promiscuous mode
[  360.227310][T13025] ipvlan3: entered promiscuous mode
[  360.288829][T13025] team0: Device ipvlan3 failed to register rx_handler
[  360.493135][T12498] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  360.511234][T12821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  360.542306][T12821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  360.574005][T12821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  360.612875][T12821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  360.652316][T12821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  360.682450][T12821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  360.712969][T12821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  360.717915][T13037] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2838'.
[  360.743023][T12821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  360.773575][T12821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  360.806322][T12821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  360.832465][T12821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  360.853231][T12821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  360.909357][T12821] batman_adv: batadv0: Interface activated: batadv_slave_0
[  360.950800][T12821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  361.004744][T12821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  361.032098][T12821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  361.058296][T12821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  361.088255][T12821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  361.106881][T12821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  361.116862][T12821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  361.145478][T12821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  361.174064][T12821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  361.196560][T12821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  361.209506][T12821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  361.226103][T12821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  361.252948][T12821] batman_adv: batadv0: Interface activated: batadv_slave_1
[  361.275596][T12821] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  361.316461][T12821] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  361.337595][T12821] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  361.346347][T12821] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  361.667342][   T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  361.685675][   T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  361.759050][ T3510] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  361.777996][ T3510] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  362.069118][T13058] loop5: detected capacity change from 0 to 4096
[  362.344862][T13058] ntfs: volume version 3.1.
[  362.958155][ T5810] hid-generic 0005:07C0:05DF.0015: item fetching failed at offset 0/1
[  362.997778][T13065] loop7: detected capacity change from 0 to 40427
[  363.005884][ T5810] hid-generic: probe of 0005:07C0:05DF.0015 failed with error -22
[  363.052074][T13065] F2FS-fs (loop7): Invalid SB checksum offset: 0
[  363.107435][T13065] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock
[  363.140186][T13065] F2FS-fs (loop7): invalid crc value
[  363.539187][T13065] F2FS-fs (loop7): Try to recover 2th superblock, ret: 0
[  363.546327][T13065] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  363.809619][T12821] syz-executor: attempt to access beyond end of device
[  363.809619][T12821] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  363.911395][T12821] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[  364.781596][T13136] loop7: detected capacity change from 0 to 512
[  364.794379][T13129] i2c i2c-0: new_device: Invalid device name
[  364.856914][T13136] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  364.897665][T13136] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  364.924116][T13136] EXT4-fs (loop7): shut down requested (2)
[  364.990157][T12821] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  365.155250][ T2969] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  365.200133][T13147] loop7: detected capacity change from 0 to 64
[  365.262058][T13152] loop5: detected capacity change from 0 to 1024
[  365.432927][T13152] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  365.570884][T13152] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  366.017087][T12498] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  366.170443][T13182] netlink: 452 bytes leftover after parsing attributes in process `syz.1.2881'.
[  366.379365][  T788] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  366.567877][  T788] usb 8-1: Using ep0 maxpacket: 32
[  366.585753][  T788] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32
[  366.626664][  T788] usb 8-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  366.666023][  T788] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  366.688442][   T23] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  366.700184][  T788] usb 8-1: Product: syz
[  366.704390][  T788] usb 8-1: Manufacturer: syz
[  366.737803][  T788] usb 8-1: SerialNumber: syz
[  366.763940][  T788] usb 8-1: config 0 descriptor??
[  366.782235][T13179] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  366.794721][  T788] hub 8-1:0.0: bad descriptor, ignoring hub
[  366.817623][  T788] hub: probe of 8-1:0.0 failed with error -5
[  366.839670][  T788] input: syz syz as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input44
[  366.901319][   T23] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  366.936552][   T23] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  366.991900][   T23] usb 2-1: config 0 interface 0 has no altsetting 0
[  367.018841][   T23] usb 2-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00
[  367.045062][   T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  367.101903][   T23] usb 2-1: config 0 descriptor??
[  367.136096][  T788] usb 8-1: USB disconnect, device number 2
[  367.142083][    C1] usbtouchscreen 8-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19
[  367.313814][T13217] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  367.313814][T13217] The task syz.0.2888 (13217) triggered the difference, watch for misbehavior.
[  367.553986][   T23] sony 0003:054C:0268.0016: hiddev0,hidraw0: USB HID v80.00 Device [HID 054c:0268] on usb-dummy_hcd.1-1/input0
[  367.588345][   T23] sony 0003:054C:0268.0016: failed to claim input
[  367.680065][T13227] program syz.5.2891 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  367.834539][ T6117] usb 2-1: USB disconnect, device number 31
[  367.897085][T13230] loop7: detected capacity change from 0 to 1764
[  368.083371][T13236] netlink: 'syz.5.2894': attribute type 15 has an invalid length.
[  368.254255][T13246] bond0: option slaves: interface +d does not exist!
[  368.464125][T13251] loop5: detected capacity change from 0 to 512
[  368.513217][T13251] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2
[  368.615049][T13251] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.2901: invalid indirect mapped block 256 (level 1)
[  368.706131][T13251] EXT4-fs (loop5): Remounting filesystem read-only
[  368.733058][T13251] EXT4-fs (loop5): 1 truncate cleaned up
[  368.751420][T13251] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  368.929884][T12498] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  369.201561][T13275] netlink: 200 bytes leftover after parsing attributes in process `syz.0.2918'.
[  370.367691][  T788] usb 2-1: new full-speed USB device number 32 using dummy_hcd
[  370.421878][T13318] rtc_cmos 00:00: Alarms can be up to one day in the future
[  370.568962][  T788] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 11
[  370.595662][  T788] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[  370.615824][  T788] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[  370.664939][  T788] usb 2-1: config 1 interface 0 has no altsetting 0
[  370.681882][  T788] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  370.708456][  T788] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  370.738410][  T788] ums-sddr09 2-1:1.0: USB Mass Storage device detected
[  370.957730][  T788] scsi host1: usb-storage 2-1:1.0
[  371.074495][T13320] loop5: detected capacity change from 0 to 32768
[  371.212127][ T6117] usb 2-1: USB disconnect, device number 32
[  371.613918][T13347] loop7: detected capacity change from 0 to 128
[  371.640180][T13347] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
[  371.683037][T13347] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  371.705597][T13347] ext2 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  371.745218][   T28] audit: type=1800 audit(1789488986.397:102): pid=13347 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2946" name="file1" dev="loop7" ino=12 res=0 errno=0
[  371.862588][T12821] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  372.096419][T13356] loop5: detected capacity change from 0 to 256
[  372.142118][T13360] kernel read not supported for file /eth0 (pid: 13360 comm: syz.0.2950)
[  372.209239][T13363] 9pnet_fd: Insufficient options for proto=fd
[  372.215388][   T28] audit: type=1800 audit(1789488986.867:103): pid=13360 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2950" name="eth0" dev="mqueue" ino=38591 res=0 errno=0
[  372.545787][T13353] loop7: detected capacity change from 0 to 32768
[  372.564033][T13353] XFS: noikeep mount option is deprecated.
[  372.631190][T13353] XFS (loop7): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  372.661247][T13353] XFS (loop7): Ending clean mount
[  372.678499][T13353] XFS (loop7): Quotacheck needed: Please wait.
[  372.735960][  T970] IPVS: starting estimator thread 0...
[  372.839576][T13385] IPVS: using max 23 ests per chain, 55200 per kthread
[  372.875190][T13353] XFS (loop7): Quotacheck: Done.
[  373.006623][T12821] XFS (loop7): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  374.014103][T13428] ip_tables: iptables: counters copy to user failed while replacing table
[  374.415508][T13438] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2977'.
[  374.437876][T13438] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2977'.
[  374.489892][T13438] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  374.500032][T13438] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  374.508855][T13438] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  374.518540][T13438] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  374.572747][T13440] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2977'.
[  374.608008][T13440] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2977'.
[  374.903696][T13449] loop7: detected capacity change from 0 to 4096
[  374.907048][T13451] MTRR 2 not used
[  374.992142][T13454] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  375.179357][T13459] netlink: 'syz.1.2984': attribute type 2 has an invalid length.
[  375.203970][T13460] loop5: detected capacity change from 0 to 512
[  375.233821][T13460] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  375.345226][T13460] EXT4-fs (loop5): 1 truncate cleaned up
[  375.352271][T13460] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  375.405179][T13464] loop7: detected capacity change from 0 to 1024
[  375.419895][T13464] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  375.436542][T13464] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  375.469741][T13464] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002]
[  375.488488][T13464] System zones: 0-1, 3-36
[  375.495662][T13464] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  375.531294][T12498] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  375.545878][T13467] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Hello request ret = -22)
[  375.567969][T13467] iwpm_hello_cb: Unable to parse nlmsg
[  375.670109][T12821] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  375.987198][ T2969] bond0: (slave bond_slave_0): interface is now down
[  376.016713][ T2969] bond0: (slave bond_slave_1): interface is now down
[  376.063402][ T2969] bond0: now running without any active interface!
[  376.424253][T13493] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1'
[  376.467822][T13493] CPU: 1 PID: 13493 Comm: syz.7.2997 Not tainted syzkaller #0
[  376.475346][T13493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  376.485446][T13493] Call Trace:
[  376.488749][T13493]  <TASK>
[  376.491705][T13493]  dump_stack_lvl+0x18c/0x250
[  376.496420][T13493]  ? show_regs_print_info+0x20/0x20
[  376.501652][T13493]  ? load_image+0x420/0x420
[  376.506196][T13493]  sysfs_create_dir_ns+0x26e/0x2a0
[  376.511431][T13493]  ? __lock_acquire+0x7d80/0x7d80
[  376.516487][T13493]  ? sysfs_warn_dup+0xa0/0xa0
[  376.521196][T13493]  ? rcu_is_watching+0x15/0xb0
[  376.525986][T13493]  ? do_raw_spin_unlock+0x121/0x230
[  376.531220][T13493]  kobject_add_internal+0x617/0xc90
[  376.536457][T13493]  kobject_add+0x164/0x240
[  376.540913][T13493]  ? kobject_init+0x1d0/0x1d0
[  376.545620][T13493]  ? get_device_parent+0x366/0x390
[  376.550777][T13493]  device_add+0x3fa/0xc40
[  376.555138][T13493]  tty_register_device_attr+0x428/0x990
[  376.560722][T13493]  ? tty_register_device+0x30/0x30
[  376.565871][T13493]  ? tty_port_init+0x132/0x1a0
[  376.570665][T13493]  ? gsm_dlci_alloc+0x32a/0x630
[  376.575544][T13493]  ? __might_fault+0xaa/0x120
[  376.580249][T13493]  gsm_activate_mux+0x110/0x2a0
[  376.585138][T13493]  gsmld_ioctl+0x12ca/0x1900
[  376.589769][T13493]  ? gsmld_write+0x120/0x120
[  376.594400][T13493]  ? __init_ldsem+0x150/0x150
[  376.599119][T13493]  ? __fget_files+0x28/0x460
[  376.603768][T13493]  ? gsmld_write+0x120/0x120
[  376.608396][T13493]  tty_ioctl+0x9b5/0xdc0
[  376.612679][T13493]  ? tty_get_icount+0xb0/0xb0
[  376.617391][T13493]  __se_sys_ioctl+0xfd/0x170
[  376.622029][T13493]  do_syscall_64+0x55/0xb0
[  376.626488][T13493]  ? clear_bhb_loop+0x40/0x90
[  376.631196][T13493]  ? clear_bhb_loop+0x40/0x90
[  376.635912][T13493]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  376.641844][T13493] RIP: 0033:0x7f713b99e159
[  376.646278][T13493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  376.665905][T13493] RSP: 002b:00007f713c938028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  376.674366][T13493] RAX: ffffffffffffffda RBX: 00007f713bc26090 RCX: 00007f713b99e159
[  376.682366][T13493] RDX: 00002000000001c0 RSI: 00000000404c4701 RDI: 0000000000000003
[  376.690367][T13493] RBP: 00007f713ba3506b R08: 0000000000000000 R09: 0000000000000000
[  376.698358][T13493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  376.706350][T13493] R13: 00007f713bc26128 R14: 00007f713bc26090 R15: 00007ffe263713a8
[  376.714403][T13493]  </TASK>
[  376.717458][    C1] vkms_vblank_simulate: vblank timer overrun
[  376.798912][T13493] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory.
[  376.989074][T13503] loop5: detected capacity change from 0 to 256
[  377.010190][T13503] exfat: Deprecated parameter 'utf8'
[  377.054795][T13503] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0x89b2d127, utbl_chksum : 0xe619d30d)
[  378.743580][ T1283] ieee802154 phy0 wpan0: encryption failed: -22
[  378.750052][ T1283] ieee802154 phy1 wpan1: encryption failed: -22
[  379.013619][T13564] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3018'.
[  379.043254][T13564] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3018'.
[  379.287289][T13576] program syz.0.3022 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  379.649994][ T6117] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  379.850062][ T6117] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  379.861929][ T6117] usb 6-1: config 0 has no interface number 0
[  379.878863][ T6117] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  379.901414][ T6117] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  379.931952][ T6117] usb 6-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  379.973936][ T6117] usb 6-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00
[  379.992683][ T6117] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  380.038802][ T6117] usb 6-1: config 0 descriptor??
[  380.640855][T13627] loop7: detected capacity change from 0 to 4096
[  380.660952][T13627] EXT4-fs: inline encryption not supported
[  380.683512][ T6117] input: HID 28bd:0042 Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.1/0003:28BD:0042.0017/input/input45
[  380.729255][T13627] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  380.742273][ T6117] input: HID 28bd:0042 Pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.1/0003:28BD:0042.0017/input/input46
[  380.767757][T13627] EXT4-fs (loop7): Test dummy encryption mode enabled
[  380.810264][ T6117] uclogic 0003:28BD:0042.0017: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.5-1/input1
[  380.855716][T13627] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0002]
[  380.891832][ T6117] usb 6-1: USB disconnect, device number 10
[  380.917132][T13627] System zones: 0-5
[  380.974722][T13627] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  380.981845][T13631] fido_id[13631]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory
[  381.204431][T12821] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  381.813754][T13661] input: syz0 as /devices/virtual/input/input47
[  382.644296][T13654] loop5: detected capacity change from 0 to 32768
[  382.732732][T13654] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  382.897874][  T788] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  382.942643][T13654] XFS (loop5): Ending clean mount
[  382.963896][T13654] XFS (loop5): Quotacheck needed: Please wait.
[  383.099931][T13654] XFS (loop5): Quotacheck: Done.
[  383.107583][  T788] usb 8-1: Using ep0 maxpacket: 16
[  383.157475][  T788] usb 8-1: config 0 has an invalid interface number: 1 but max is 0
[  383.171331][  T788] usb 8-1: config 0 has no interface number 0
[  383.190202][  T788] usb 8-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  383.202731][  T788] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  383.220176][  T788] usb 8-1: Product: syz
[  383.225043][  T788] usb 8-1: Manufacturer: syz
[  383.230227][  T788] usb 8-1: SerialNumber: syz
[  383.253480][  T788] usb 8-1: config 0 descriptor??
[  383.268913][  T788] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  383.750199][T12498] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  384.207950][  T788] gspca_spca1528: reg_w err -110
[  384.243505][  T788] spca1528: probe of 8-1:0.1 failed with error -110
[  384.458223][  T788] usb 8-1: USB disconnect, device number 3
[  384.816509][T13765] loop5: detected capacity change from 0 to 136
[  385.063666][T13772] netlink: 'syz.0.3079': attribute type 2 has an invalid length.
[  385.107960][T13772] netlink: 'syz.0.3079': attribute type 1 has an invalid length.
[  385.193340][T13782] <
[  385.371668][T13790] loop5: detected capacity change from 0 to 128
[  385.956101][T13812] loop7: detected capacity change from 0 to 4096
[  386.008139][T13812] ntfs: (device loop7): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  386.153304][T13820] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3096'.
[  386.233304][T13812] ntfs: volume version 3.1.
[  386.897635][   T23] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  387.104300][   T23] usb 8-1: Using ep0 maxpacket: 16
[  387.123561][   T23] usb 8-1: config 0 has an invalid interface number: 34 but max is 0
[  387.147866][   T23] usb 8-1: config 0 has no interface number 0
[  387.162860][   T23] usb 8-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  387.182512][   T23] usb 8-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  387.229099][   T23] usb 8-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  387.260961][   T23] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  387.276042][   T23] usb 8-1: Product: syz
[  387.286630][   T23] usb 8-1: Manufacturer: syz
[  387.310701][   T23] usb 8-1: SerialNumber: syz
[  387.334864][   T23] usb 8-1: config 0 descriptor??
[  387.344048][T13842] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  387.352337][T13842] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  387.608194][T13842] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  387.615467][T13842] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  387.841441][T13891] loop5: detected capacity change from 0 to 2048
[  387.858449][   T23] asix 8-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  387.887087][T13891] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024)
[  387.928336][T13894] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  388.053726][   T23] asix 8-1:0.34 (unnamed net_device) (uninitialized): invalid PHY address: 84
[  388.256837][ T5813] usb 8-1: USB disconnect, device number 4
[  388.680155][T13916] lo: entered promiscuous mode
[  388.685132][T13916] lo: entered allmulticast mode
[  388.692859][T13916] tunl0: entered promiscuous mode
[  388.706984][T13916] tunl0: entered allmulticast mode
[  388.713738][T13916] gre0: entered promiscuous mode
[  388.719147][T13916] gre0: entered allmulticast mode
[  388.725426][T13916] gretap0: entered promiscuous mode
[  388.731339][T13916] gretap0: entered allmulticast mode
[  388.743604][T13916] erspan0: entered promiscuous mode
[  388.750953][T13916] erspan0: entered allmulticast mode
[  388.768757][T13916] ip_vti0: entered promiscuous mode
[  388.784309][T13916] ip_vti0: entered allmulticast mode
[  388.795690][T13916] ip6_vti0: entered promiscuous mode
[  388.807678][T13916] ip6_vti0: entered allmulticast mode
[  388.815654][T13916] sit0: entered promiscuous mode
[  388.821352][T13916] sit0: entered allmulticast mode
[  388.836747][T13916] ip6tnl0: entered promiscuous mode
[  388.856930][T13916] ip6tnl0: entered allmulticast mode
[  388.875593][T13916] ip6gre0: entered promiscuous mode
[  388.886147][T13916] ip6gre0: entered allmulticast mode
[  388.896319][T13916] syz_tun: entered promiscuous mode
[  388.904760][T13916] syz_tun: entered allmulticast mode
[  388.922035][T13916] ip6gretap0: entered promiscuous mode
[  388.934213][T13916] ip6gretap0: entered allmulticast mode
[  388.943479][T13916] bridge0: entered promiscuous mode
[  388.956615][T13916] bridge0: entered allmulticast mode
[  388.999862][   T55] block nbd3: Possible stuck request ffff888021e40000: control (read@0,1024B). Runtime 60 seconds
[  389.010678][   T55] block nbd3: Possible stuck request ffff888021e40200: control (read@1024,3072B). Runtime 60 seconds
[  389.756864][T13940] loop7: detected capacity change from 0 to 16
[  389.810147][T13940] erofs: (device loop7): mounted with root inode @ nid 36.
[  389.938048][ T5810] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  390.127799][ T5810] usb 6-1: Using ep0 maxpacket: 32
[  390.135516][ T5810] usb 6-1: config index 0 descriptor too short (expected 35577, got 27)
[  390.145180][ T5810] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  390.155684][ T5810] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92
[  390.164971][ T5810] usb 6-1: config 1 has no interface number 0
[  390.171523][ T5810] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  390.192762][ T5810] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  390.206326][ T5810] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  390.229763][ T5810] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  390.261876][ T5810] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found
[  390.344534][T13958] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3150'.
[  390.477596][T13936] loop5: detected capacity change from 0 to 512
[  390.557907][T13936] EXT4-fs error (device loop5): ext4_validate_block_bitmap:430: comm syz.5.3140: bg 0: block 16: invalid block bitmap
[  390.576715][T13936] EXT4-fs (loop5): Remounting filesystem read-only
[  390.584854][T13936] EXT4-fs (loop5): 1 truncate cleaned up
[  390.593106][T13936] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  390.650175][ T5810] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached
[  390.662529][T13968] jffs2: notice: (13968) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  391.139949][ T5810] usb 6-1: USB disconnect, device number 11
[  391.159516][ T5810] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected
[  391.196314][T13989] input: syz1 as /devices/virtual/input/input48
[  391.700960][T12498] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  391.911366][T14010] ipvlan0: entered promiscuous mode
[  391.920226][T14010] ipvlan0: left promiscuous mode
[  391.973810][T14007] loop5: detected capacity change from 0 to 4096
[  392.061255][T14007] ntfs3: loop5: ino=19, mi_enum_attr
[  392.066627][T14007] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  392.202477][T14017] loop7: detected capacity change from 0 to 512
[  392.247687][T14017] EXT4-fs (loop7): Test dummy encryption mode enabled
[  392.278652][T14017] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  392.344544][T14017] EXT4-fs (loop7): 1 truncate cleaned up
[  392.364002][T14017] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  392.479340][T14017] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 211 vs 220 free clusters
[  392.633702][T12821] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  393.183247][T14044] loop5: detected capacity change from 0 to 164
[  393.206419][T14044] Unable to read rock-ridge attributes
[  393.254577][T14044] Unable to read rock-ridge attributes
[  393.395136][T14046] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  393.728876][T14054] loop7: detected capacity change from 0 to 1024
[  393.792337][T14054] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  393.997660][T14060] netlink: 116 bytes leftover after parsing attributes in process `syz.1.3194'.
[  393.999196][T12821] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  394.053349][T14048] loop5: detected capacity change from 0 to 40427
[  394.110486][T14048] F2FS-fs (loop5): invalid crc value
[  394.152013][T14048] F2FS-fs (loop5): Found nat_bits in checkpoint
[  394.189089][T14067] ip_tables: iptables: counters copy to user failed while replacing table
[  394.305598][T14048] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[  394.369425][   T28] audit: type=1800 audit(1789489009.027:104): pid=14048 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3189" name="file1" dev="loop5" ino=10 res=0 errno=0
[  394.389970][    C1] vkms_vblank_simulate: vblank timer overrun
[  394.494470][T12498] syz-executor: attempt to access beyond end of device
[  394.494470][T12498] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  394.536397][T12498] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  394.560565][T14078] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3200'.
[  396.192663][ T3485] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  396.321563][ T3485] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  396.507731][ T3485] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  396.685355][ T3485] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  397.052726][ T5775] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  397.070623][ T5775] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  397.080377][ T5775] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  397.092799][ T5775] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  397.101356][ T5775] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  397.116567][ T5775] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  397.979702][T14133] chnl_net:caif_netlink_parms(): no params data found
[  398.565560][T14133] bridge0: port 1(bridge_slave_0) entered blocking state
[  398.584676][T14133] bridge0: port 1(bridge_slave_0) entered disabled state
[  398.605028][T14133] bridge_slave_0: entered allmulticast mode
[  398.643489][T14133] bridge_slave_0: entered promiscuous mode
[  398.670346][T14133] bridge0: port 2(bridge_slave_1) entered blocking state
[  398.678283][T14133] bridge0: port 2(bridge_slave_1) entered disabled state
[  398.686425][T14133] bridge_slave_1: entered allmulticast mode
[  398.734905][T14133] bridge_slave_1: entered promiscuous mode
[  399.006973][T14133] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  399.081762][T14133] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  399.220403][ T5775] Bluetooth: hci2: command tx timeout
[  399.251438][ T3485] hsr_slave_0: left promiscuous mode
[  399.268973][T14212] input: syz1 as /devices/virtual/input/input49
[  399.293765][ T3485] hsr_slave_1: left promiscuous mode
[  399.338039][ T3485] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  399.345506][ T3485] batman_adv: batadv0: Removing interface: batadv_slave_0
[  399.406865][ T3485] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  399.429986][ T3485] batman_adv: batadv0: Removing interface: batadv_slave_1
[  399.439616][ T3485] bridge_slave_1: left allmulticast mode
[  399.445290][ T3485] bridge_slave_1: left promiscuous mode
[  399.463071][ T3485] bridge0: port 2(bridge_slave_1) entered disabled state
[  399.484829][ T3485] bridge_slave_0: left allmulticast mode
[  399.497574][ T3485] bridge_slave_0: left promiscuous mode
[  399.509371][ T3485] bridge0: port 1(bridge_slave_0) entered disabled state
[  399.598085][ T3485] veth1_macvtap: left promiscuous mode
[  399.604360][ T3485] veth0_macvtap: left promiscuous mode
[  399.617771][ T3485] veth1_vlan: left promiscuous mode
[  399.637906][ T3485] veth0_vlan: left promiscuous mode
[  400.850856][ T3485] team0 (unregistering): Port device team_slave_1 removed
[  400.911789][ T3485] team0 (unregistering): Port device team_slave_0 removed
[  400.972232][ T3485] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  401.043222][ T3485] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  401.307993][ T5775] Bluetooth: hci2: command tx timeout
[  401.475782][ T3485] bond0 (unregistering): Released all slaves
[  401.695153][T14133] team0: Port device team_slave_0 added
[  401.731553][T14133] team0: Port device team_slave_1 added
[  401.844914][T14133] batman_adv: batadv0: Adding interface: batadv_slave_0
[  401.856661][T14133] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  401.909351][T14133] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  401.931015][T14133] batman_adv: batadv0: Adding interface: batadv_slave_1
[  401.940583][T14133] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  401.976699][T14133] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  402.083949][T14133] hsr_slave_0: entered promiscuous mode
[  402.096149][T14133] hsr_slave_1: entered promiscuous mode
[  402.109172][T14133] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  402.116845][T14133] Cannot create hsr debugfs directory
[  402.941466][T14133] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  402.960502][T14133] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  402.978844][T14133] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  402.996338][T14133] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  403.109834][T14133] 8021q: adding VLAN 0 to HW filter on device bond0
[  403.132503][T14133] 8021q: adding VLAN 0 to HW filter on device team0
[  403.167983][ T2969] bridge0: port 1(bridge_slave_0) entered blocking state
[  403.175110][ T2969] bridge0: port 1(bridge_slave_0) entered forwarding state
[  403.191192][ T3485] bridge0: port 2(bridge_slave_1) entered blocking state
[  403.198378][ T3485] bridge0: port 2(bridge_slave_1) entered forwarding state
[  403.388969][ T5775] Bluetooth: hci2: command tx timeout
[  403.548890][T14133] 8021q: adding VLAN 0 to HW filter on device batadv0
[  403.885690][T14133] veth0_vlan: entered promiscuous mode
[  403.910383][T14133] veth1_vlan: entered promiscuous mode
[  403.960988][T14133] veth0_macvtap: entered promiscuous mode
[  403.981817][T14133] veth1_macvtap: entered promiscuous mode
[  404.017407][T14133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  404.044750][T14133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  404.056480][T14133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  404.076065][T14133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  404.086217][T14133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  404.104735][T14133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  404.116868][T14133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  404.147709][T14133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  404.165688][T14133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  404.178420][T14133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  404.188688][T14133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  404.199382][T14133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  404.212488][T14133] batman_adv: batadv0: Interface activated: batadv_slave_0
[  404.231364][T14133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  404.247216][T14133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  404.257453][T14133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  404.270817][T14133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  404.281668][T14133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  404.293699][T14133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  404.303604][T14133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  404.314991][T14133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  404.325138][T14133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  404.335747][T14133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  404.347405][T14133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  404.360213][T14133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  404.375942][T14133] batman_adv: batadv0: Interface activated: batadv_slave_1
[  404.404670][T14133] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  404.423908][T14133] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  404.435029][T14133] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  404.451630][T14133] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  404.603851][ T3557] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  404.626945][ T3557] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  404.669181][ T3468] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  404.687073][ T3468] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  405.457752][ T5775] Bluetooth: hci2: command tx timeout
[  407.647736][ T5143] udevd[5143]: worker [6128] /devices/virtual/block/nbd3 is taking a long time
[  418.198392][   T42] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  419.058954][   T55] block nbd3: Possible stuck request ffff888021e40000: control (read@0,1024B). Runtime 90 seconds
[  419.069847][   T55] block nbd3: Possible stuck request ffff888021e40200: control (read@1024,3072B). Runtime 90 seconds
[  440.185334][ T1283] ieee802154 phy0 wpan0: encryption failed: -22
[  440.192161][ T1283] ieee802154 phy1 wpan1: encryption failed: -22
[  449.123082][   T42] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  449.140542][   T55] block nbd3: Possible stuck request ffff888021e40000: control (read@0,1024B). Runtime 120 seconds
[  449.151430][   T55] block nbd3: Possible stuck request ffff888021e40200: control (read@1024,3072B). Runtime 120 seconds
[  462.737847][ T5775] Bluetooth: hci1: command 0x0406 tx timeout
[  479.225585][   T55] block nbd3: Possible stuck request ffff888021e40000: control (read@0,1024B). Runtime 150 seconds
[  479.236626][   T55] block nbd3: Possible stuck request ffff888021e40200: control (read@1024,3072B). Runtime 150 seconds
[  480.048170][   T42] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  501.625757][ T1283] ieee802154 phy0 wpan0: encryption failed: -22
[  501.632334][ T1283] ieee802154 phy1 wpan1: encryption failed: -22
[  509.298092][   T55] block nbd3: Possible stuck request ffff888021e40000: control (read@0,1024B). Runtime 180 seconds
[  509.308959][   T55] block nbd3: Possible stuck request ffff888021e40200: control (read@1024,3072B). Runtime 180 seconds
[  510.825526][ T5143] udevd[5143]: worker [6128] /devices/virtual/block/nbd3 timeout; kill it
[  510.834494][ T5143] udevd[5143]: seq 16013 '/devices/virtual/block/nbd3' killed
[  510.972639][ T3468] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  524.177604][ T5775] Bluetooth: hci2: command 0x0406 tx timeout
[  539.377853][   T55] block nbd3: Possible stuck request ffff888021e40000: control (read@0,1024B). Runtime 210 seconds
[  539.389117][   T55] block nbd3: Possible stuck request ffff888021e40200: control (read@1024,3072B). Runtime 210 seconds
[  541.999822][   T42] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  558.579980][   T29] INFO: task jbd2/sda1-8:5105 blocked for more than 143 seconds.
[  558.590154][   T29]       Not tainted syzkaller #0
[  558.595118][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  558.603908][   T29] task:jbd2/sda1-8     state:D stack:26024 pid:5105  ppid:2      flags:0x00004000
[  558.617451][   T29] Call Trace:
[  558.620766][   T29]  <TASK>
[  558.623708][   T29]  __schedule+0x15ae/0x4660
[  558.628576][   T29]  ? asan.module_dtor+0x20/0x20
[  558.633706][   T29]  ? __lock_acquire+0x7d80/0x7d80
[  558.642944][   T29]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  558.649172][   T29]  ? lockdep_hardirqs_on+0x98/0x150
[  558.654408][   T29]  schedule+0xbd/0x170
[  558.659216][   T29]  io_schedule+0x80/0xd0
[  558.663482][   T29]  bit_wait_io+0x11/0xd0
[  558.668088][   T29]  __wait_on_bit+0x9f/0x2c0
[  558.672612][   T29]  ? bit_wait+0xd0/0xd0
[  558.676775][   T29]  out_of_line_wait_on_bit+0x13c/0x190
[  558.682277][   T29]  ? bit_wait+0xd0/0xd0
[  558.686441][   T29]  ? __wait_on_bit+0x2c0/0x2c0
[  558.691668][   T29]  ? do_raw_write_lock+0x11e/0x260
[  558.696802][   T29]  ? bit_waitqueue+0x30/0x30
[  558.701518][   T29]  ? do_raw_read_unlock+0x3d/0x80
[  558.706560][   T29]  jbd2_journal_commit_transaction+0x2e8d/0x5ad0
[  558.713032][   T29]  ? jbd2_journal_finish_inode_data_buffers+0xb0/0xb0
[  558.719889][   T29]  ? lock_chain_count+0x20/0x20
[  558.724754][   T29]  ? _raw_spin_unlock+0x40/0x40
[  558.729717][   T29]  ? __try_to_del_timer_sync+0x1c2/0x280
[  558.735510][   T29]  ? __timer_delete_sync+0x23d/0x2e0
[  558.741382][   T29]  ? __lock_acquire+0x7d80/0x7d80
[  558.746413][   T29]  ? timer_delete_sync+0x20/0x20
[  558.751628][   T29]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  558.757587][   T29]  ? _raw_spin_unlock+0x40/0x40
[  558.762455][   T29]  ? finish_wait+0xca/0x1d0
[  558.766977][   T29]  kjournald2+0x40f/0x810
[  558.772082][   T29]  ? jbd2_seq_info_show+0x5c0/0x5c0
[  558.777304][   T29]  ? wake_bit_function+0x200/0x200
[  558.782472][   T29]  ? _raw_spin_unlock+0x40/0x40
[  558.787332][   T29]  ? __kthread_parkme+0x71/0x1c0
[  558.792389][   T29]  ? __kthread_parkme+0x15b/0x1c0
[  558.797806][   T29]  kthread+0x2fa/0x390
[  558.801891][   T29]  ? jbd2_seq_info_show+0x5c0/0x5c0
[  558.807076][   T29]  ? kthread_blkcg+0xd0/0xd0
[  558.811780][   T29]  ret_from_fork+0x48/0x80
[  558.816214][   T29]  ? kthread_blkcg+0xd0/0xd0
[  558.820857][   T29]  ret_from_fork_asm+0x11/0x20
[  558.825616][   T29]  </TASK>
[  558.828823][   T29] INFO: task syz-executor:5760 blocked for more than 143 seconds.
[  558.836950][   T29]       Not tainted syzkaller #0
[  558.842854][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  558.851984][   T29] task:syz-executor    state:D stack:22008 pid:5760  ppid:5759   flags:0x00004002
[  558.861583][   T29] Call Trace:
[  558.864876][   T29]  <TASK>
[  558.868649][   T29]  __schedule+0x15ae/0x4660
[  558.873206][   T29]  ? mark_lock+0x94/0x320
[  558.878633][   T29]  ? asan.module_dtor+0x20/0x20
[  558.883516][   T29]  ? __lock_acquire+0x7d80/0x7d80
[  558.888798][   T29]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  558.895136][   T29]  ? lockdep_hardirqs_on+0x98/0x150
[  558.903037][   T29]  schedule+0xbd/0x170
[  558.907100][   T29]  io_schedule+0x80/0xd0
[  558.911688][   T29]  bit_wait_io+0x11/0xd0
[  558.915971][   T29]  __wait_on_bit+0x9f/0x2c0
[  558.924278][   T29]  ? bit_wait+0xd0/0xd0
[  558.928508][   T29]  out_of_line_wait_on_bit+0x13c/0x190
[  558.933979][   T29]  ? bit_wait+0xd0/0xd0
[  558.942443][   T29]  ? __wait_on_bit+0x2c0/0x2c0
[  558.947238][   T29]  ? do_raw_spin_lock+0x11f/0x2b0
[  558.953384][   T29]  ? bit_waitqueue+0x30/0x30
[  558.959159][   T29]  ? do_raw_spin_unlock+0x121/0x230
[  558.964403][   T29]  do_get_write_access+0x5c9/0xe00
[  558.969614][   T29]  jbd2_journal_get_write_access+0x10c/0x140
[  558.975608][   T29]  __ext4_journal_get_write_access+0x208/0x6d0
[  558.982216][   T29]  ? __ext4_journal_ensure_credits+0x450/0x450
[  558.988655][   T29]  ? __might_sleep+0xe0/0xe0
[  558.993277][   T29]  ext4_reserve_inode_write+0x205/0x2a0
[  558.999486][   T29]  __ext4_mark_inode_dirty+0x13f/0x720
[  559.004978][   T29]  ext4_dirty_inode+0xcb/0x110
[  559.009794][   T29]  ? __ext4_expand_extra_isize+0x400/0x400
[  559.015628][   T29]  __mark_inode_dirty+0x2cc/0xc90
[  559.020944][   T29]  file_update_time+0x187/0x1a0
[  559.025832][   T29]  ext4_page_mkwrite+0x1f9/0x11a0
[  559.030995][   T29]  ? do_wp_page+0x4ce/0x34d0
[  559.035592][   T29]  ? ext4_change_inode_journal_flag+0x8a0/0x8a0
[  559.042552][   T29]  ? __lock_acquire+0x7d80/0x7d80
[  559.047697][   T29]  do_page_mkwrite+0x153/0x3f0
[  559.052475][   T29]  do_wp_page+0xd4d/0x34d0
[  559.056883][   T29]  ? folio_put+0xd0/0xd0
[  559.061240][   T29]  ? do_raw_spin_lock+0x11f/0x2b0
[  559.066279][   T29]  ? __rwlock_init+0x150/0x150
[  559.071167][   T29]  handle_mm_fault+0x1306/0x4a50
[  559.076121][   T29]  ? handle_mm_fault+0xe6/0x4a50
[  559.081141][   T29]  ? numa_migrate_prep+0x350/0x350
[  559.086269][   T29]  ? lock_mm_and_find_vma+0x9c/0x2f0
[  559.091648][   T29]  do_user_addr_fault+0x736/0x12d0
[  559.096801][   T29]  exc_page_fault+0x64/0x100
[  559.102059][   T29]  ? clear_bhb_loop+0x40/0x90
[  559.106760][   T29]  asm_exc_page_fault+0x26/0x30
[  559.111711][   T29] RIP: 0033:0x7f37e1c7c6e2
[  559.116140][   T29] RSP: 002b:00007fff18a84b20 EFLAGS: 00010202
[  559.122268][   T29] RAX: 00007f37dfa20000 RBX: 00005555666636a0 RCX: 0000000000000003
[  559.130321][   T29] RDX: 00000000000027ac RSI: 00005555666d6c80 RDI: 0000000000000008
[  559.138731][   T29] RBP: 00007fff18a85020 R08: 00005555666d6cb8 R09: 0000000000000092
[  559.147334][   T29] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fff18a84e60
[  559.155397][   T29] R13: 00007fff18a84c50 R14: 585858582e7a7973 R15: 00007fff18a84ba0
[  559.163450][   T29]  </TASK>
[  559.166530][   T29] INFO: task syz-executor:14133 blocked for more than 143 seconds.
[  559.174583][   T29]       Not tainted syzkaller #0
[  559.179720][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  559.188450][   T29] task:syz-executor    state:D stack:21800 pid:14133 ppid:14124  flags:0x00004000
[  559.197753][   T29] Call Trace:
[  559.201033][   T29]  <TASK>
[  559.204284][   T29]  __schedule+0x15ae/0x4660
[  559.209104][   T29]  ? lock_chain_count+0x20/0x20
[  559.214016][   T29]  ? preempt_schedule_common+0x82/0xc0
[  559.219893][   T29]  ? asan.module_dtor+0x20/0x20
[  559.224779][   T29]  ? preempt_schedule+0xc0/0xd0
[  559.229718][   T29]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  559.235894][   T29]  ? preempt_schedule_thunk+0x1a/0x30
[  559.241334][   T29]  schedule+0xbd/0x170
[  559.246008][   T29]  io_schedule+0x80/0xd0
[  559.250350][   T29]  bit_wait_io+0x11/0xd0
[  559.254607][   T29]  __wait_on_bit+0x9f/0x2c0
[  559.259222][   T29]  ? bit_wait+0xd0/0xd0
[  559.263426][   T29]  out_of_line_wait_on_bit+0x13c/0x190
[  559.268982][   T29]  ? bit_wait+0xd0/0xd0
[  559.273148][   T29]  ? __wait_on_bit+0x2c0/0x2c0
[  559.278008][   T29]  ? do_raw_spin_lock+0x11f/0x2b0
[  559.283046][   T29]  ? bit_waitqueue+0x30/0x30
[  559.287679][   T29]  ? do_raw_spin_unlock+0x121/0x230
[  559.292928][   T29]  do_get_write_access+0x5c9/0xe00
[  559.298778][   T29]  jbd2_journal_get_write_access+0x10c/0x140
[  559.305613][   T29]  __ext4_journal_get_write_access+0x208/0x6d0
[  559.312754][   T29]  ? __ext4_journal_ensure_credits+0x450/0x450
[  559.319201][   T29]  __ext4_new_inode+0x140c/0x3aa0
[  559.324270][   T29]  ? ext4_has_group_desc_csum+0x1f0/0x1f0
[  559.330081][   T29]  ? dquot_initialize+0x20/0x20
[  559.334953][   T29]  ext4_mkdir+0x40b/0xc90
[  559.343197][   T29]  ? ext4_symlink+0x940/0x940
[  559.349001][   T29]  ? inode_permission+0xf3/0x480
[  559.353959][   T29]  ? bpf_lsm_inode_mkdir+0x9/0x10
[  559.359043][   T29]  ? security_inode_mkdir+0xb7/0x100
[  559.364360][   T29]  vfs_mkdir+0x2a5/0x470
[  559.368653][   T29]  do_mkdirat+0x1dc/0x450
[  559.372990][   T29]  ? vfs_mkdir+0x470/0x470
[  559.377397][   T29]  __x64_sys_mkdirat+0x89/0xa0
[  559.382713][   T29]  do_syscall_64+0x55/0xb0
[  559.387147][   T29]  ? clear_bhb_loop+0x40/0x90
[  559.391902][   T29]  ? clear_bhb_loop+0x40/0x90
[  559.396640][   T29]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  559.402603][   T29] RIP: 0033:0x7f3e5179cfc7
[  559.407030][   T29] RSP: 002b:00007ffc57a66b98 EFLAGS: 00000206 ORIG_RAX: 0000000000000102
[  559.416012][   T29] RAX: ffffffffffffffda RBX: 00007f3e51834aaf RCX: 00007f3e5179cfc7
[  559.424138][   T29] RDX: 00000000000001ff RSI: 00007f3e51834aaf RDI: 00000000ffffff9c
[  559.432475][   T29] RBP: 00007f3e51a267b8 R08: 0000000000000000 R09: 0000000000000000
[  559.440514][   T29] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000008
[  559.448555][   T29] R13: 0000000000000003 R14: 00007ffc57a66e08 R15: 0000000000000000
[  559.457127][   T29]  </TASK>
[  559.460437][   T29] INFO: task syz.0.3256:14231 blocked for more than 144 seconds.
[  559.468684][   T29]       Not tainted syzkaller #0
[  559.473631][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  559.482392][   T29] task:syz.0.3256      state:D stack:27048 pid:14231 ppid:5779   flags:0x00004004
[  559.491635][   T29] Call Trace:
[  559.494941][   T29]  <TASK>
[  559.497997][   T29]  __schedule+0x15ae/0x4660
[  559.502554][   T29]  ? mark_lock+0x94/0x320
[  559.506899][   T29]  ? asan.module_dtor+0x20/0x20
[  559.512317][   T29]  ? __lock_acquire+0x7d80/0x7d80
[  559.517367][   T29]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  559.523322][   T29]  ? lockdep_hardirqs_on+0x98/0x150
[  559.528593][   T29]  schedule+0xbd/0x170
[  559.532676][   T29]  io_schedule+0x80/0xd0
[  559.536936][   T29]  bit_wait_io+0x11/0xd0
[  559.541510][   T29]  __wait_on_bit+0x9f/0x2c0
[  559.546091][   T29]  ? bit_wait+0xd0/0xd0
[  559.550325][   T29]  out_of_line_wait_on_bit+0x13c/0x190
[  559.556373][   T29]  ? bit_wait+0xd0/0xd0
[  559.560609][   T29]  ? __wait_on_bit+0x2c0/0x2c0
[  559.565398][   T29]  ? do_raw_spin_lock+0x11f/0x2b0
[  559.570500][   T29]  ? bit_waitqueue+0x30/0x30
[  559.575099][   T29]  ? do_raw_spin_unlock+0x121/0x230
[  559.580442][   T29]  do_get_write_access+0x5c9/0xe00
[  559.585577][   T29]  jbd2_journal_get_write_access+0x10c/0x140
[  559.591621][   T29]  __ext4_journal_get_write_access+0x208/0x6d0
[  559.597912][   T29]  ? __ext4_journal_ensure_credits+0x450/0x450
[  559.604076][   T29]  ? __might_sleep+0xe0/0xe0
[  559.608733][   T29]  ext4_reserve_inode_write+0x205/0x2a0
[  559.614677][   T29]  __ext4_mark_inode_dirty+0x13f/0x720
[  559.620337][   T29]  ext4_dirty_inode+0xcb/0x110
[  559.625112][   T29]  ? __ext4_expand_extra_isize+0x400/0x400
[  559.630993][   T29]  __mark_inode_dirty+0x2cc/0xc90
[  559.636034][   T29]  file_update_time+0x187/0x1a0
[  559.640943][   T29]  ext4_page_mkwrite+0x1f9/0x11a0
[  559.645997][   T29]  ? filemap_fault+0x103c/0x1540
[  559.651204][   T29]  ? mapping_seek_hole_data+0x1330/0x1330
[  559.658029][   T29]  ? ext4_change_inode_journal_flag+0x8a0/0x8a0
[  559.664334][   T29]  ? __lock_acquire+0x7d80/0x7d80
[  559.669416][   T29]  ? __pte_offset_map+0x20d/0x280
[  559.674445][   T29]  do_page_mkwrite+0x153/0x3f0
[  559.679307][   T29]  handle_mm_fault+0x1a2c/0x4a50
[  559.684254][   T29]  ? handle_mm_fault+0xe6/0x4a50
[  559.689273][   T29]  ? numa_migrate_prep+0x350/0x350
[  559.694422][   T29]  ? lock_mm_and_find_vma+0x9c/0x2f0
[  559.700583][   T29]  do_user_addr_fault+0x736/0x12d0
[  559.705723][   T29]  exc_page_fault+0x64/0x100
[  559.710366][   T29]  ? clear_bhb_loop+0x40/0x90
[  559.715398][   T29]  asm_exc_page_fault+0x26/0x30
[  559.720368][   T29] RIP: 0033:0x7f62ee6727a9
[  559.724797][   T29] RSP: 002b:00007ffed88d8e30 EFLAGS: 00010202
[  559.730948][   T29] RAX: 0000001b2d923000 RBX: ffffffff813bd28a RCX: 0000001b2d922ff8
[  559.739041][   T29] RDX: 0000001b2d324220 RSI: 0000000000000008 RDI: 00007f62ef555720
[  559.747049][   T29] RBP: 000000000000002d R08: 00007f62eea10000 R09: 00007f62eea12000
[  559.755162][   T29] R10: 00000000813bd28e R11: 0000000000000003 R12: 00007f62eea26038
[  559.763983][   T29] R13: 000000000000002c R14: ffffffff813bd108 R15: 00007f62ef555720
[  559.772089][   T29]  ? unwind_next_frame+0x1d38/0x2990
[  559.777399][   T29]  ? unwind_next_frame+0x1eba/0x2990
[  559.782855][   T29]  </TASK>
[  559.785943][   T29] 
[  559.785943][   T29] Showing all locks held in the system:
[  559.794757][   T29] 1 lock held by khungtaskd/29:
[  559.800523][   T29]  #0: ffffffff8d1320e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290
[  559.810575][   T29] 2 locks held by kworker/u4:9/3468:
[  559.815889][   T29]  #0: ffff8880b8e3c258 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130
[  559.826506][   T29]  #1: ffff8880b8e28a00 (psi_seq){-.-.}-{0:0}, at: __schedule+0x21d3/0x4660
[  559.835393][   T29] 2 locks held by getty/5525:
[  559.840164][   T29]  #0: ffff88802d0340a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  559.850086][   T29]  #1: ffffc900032832f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x428/0x1370
[  559.861242][   T29] 3 locks held by syz-executor/5760:
[  559.866574][   T29]  #0: ffff88807df581a0 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0
[  559.876947][   T29]  #1: ffff88814ded4510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0
[  559.886782][   T29]  #2: ffff88814dee0990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170
[  559.896589][   T29] 2 locks held by kworker/1:4/5831:
[  559.901863][   T29]  #0: ffff888017c72d38 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600
[  559.912995][   T29]  #1: ffffc900048b7d00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600
[  559.925623][   T29] 1 lock held by udevd/6128:
[  559.930367][   T29]  #0: ffff888021cdd4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x11b/0x610
[  559.940549][   T29] 3 locks held by syz-executor/14133:
[  559.945926][   T29]  #0: ffff88814ded4418 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  559.957473][   T29]  #1: ffff888076d32210 (&type->i_mutex_dir_key#3/1){+.+.}-{3:3}, at: filename_create+0x20f/0x450
[  559.968509][   T29]  #2: ffff88814dee0990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170
[  559.978342][   T29] 3 locks held by syz.0.3256/14231:
[  559.983540][   T29]  #0: ffff88801b7ea7a0 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0
[  559.993511][   T29]  #1: ffff88814ded4510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0
[  560.003354][   T29]  #2: ffff88814dee0990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170
[  560.013094][   T29] 2 locks held by dhcpcd/14386:
[  560.018265][   T29]  #0: ffff888078b32020 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x82/0x210
[  560.028953][   T29]  #1: ffffffff8d137ab8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3da/0x880
[  560.039933][   T29] 
[  560.042267][   T29] =============================================
[  560.042267][   T29] 
[  560.051387][   T29] NMI backtrace for cpu 0
[  560.055769][   T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0
[  560.062965][   T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  560.073015][   T29] Call Trace:
[  560.076295][   T29]  <TASK>
[  560.079225][   T29]  dump_stack_lvl+0x18c/0x250
[  560.083903][   T29]  ? __wake_up_klogd+0xd9/0x100
[  560.088752][   T29]  ? show_regs_print_info+0x20/0x20
[  560.093945][   T29]  ? load_image+0x420/0x420
[  560.098449][   T29]  nmi_cpu_backtrace+0x3a6/0x3e0
[  560.103416][   T29]  ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0
[  560.109567][   T29]  ? load_image+0x420/0x420
[  560.114061][   T29]  ? wq_watchdog_touch+0xef/0x170
[  560.119084][   T29]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[  560.125150][   T29]  nmi_trigger_cpumask_backtrace+0x17a/0x2f0
[  560.131132][   T29]  watchdog+0xf59/0xfa0
[  560.135284][   T29]  ? watchdog+0x1e1/0xfa0
[  560.139616][   T29]  kthread+0x2fa/0x390
[  560.143674][   T29]  ? hungtask_pm_notify+0x50/0x50
[  560.148691][   T29]  ? kthread_blkcg+0xd0/0xd0
[  560.153270][   T29]  ret_from_fork+0x48/0x80
[  560.157684][   T29]  ? kthread_blkcg+0xd0/0xd0
[  560.162264][   T29]  ret_from_fork_asm+0x11/0x20
[  560.167038][   T29]  </TASK>
[  560.171090][   T29] Sending NMI from CPU 0 to CPUs 1:
[  560.176615][    C1] NMI backtrace for cpu 1
[  560.176625][    C1] CPU: 1 PID: 42 Comm: kworker/u4:2 Not tainted syzkaller #0
[  560.176640][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  560.176649][    C1] Workqueue: events_unbound nsim_dev_trap_report_work
[  560.176672][    C1] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x82/0x90
[  560.176694][    C1] Code: 8d 52 28 4d 39 ca 77 22 89 ff 89 f6 49 ff c0 4c 89 01 48 c7 44 11 08 05 00 00 00 48 89 7c 11 10 48 89 74 11 18 48 89 44 11 20 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 f3 0f 1e fa 48 8b 04 24
[  560.176707][    C1] RSP: 0018:ffffc90000b2f5b0 EFLAGS: 00000293
[  560.176718][    C1] RAX: ffffffff813bc2a9 RBX: ffffc90000b28000 RCX: 0000000000000000
[  560.176729][    C1] RDX: ffff888018ae1e00 RSI: 0000000000000001 RDI: 0000000000000000
[  560.176739][    C1] RBP: 0000000000000001 R08: ffff888018ae1e00 R09: 0000000000000003
[  560.176749][    C1] R10: 0000000000000004 R11: 0000000000000000 R12: 1ffff92000165ed3
[  560.176758][    C1] R13: ffffc90000b2f688 R14: ffffc90000b2fa20 R15: ffffc90000b30000
[  560.176769][    C1] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  560.176781][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  560.176798][    C1] CR2: 00005595aad23660 CR3: 000000000cf32000 CR4: 00000000003506e0
[  560.176811][    C1] Call Trace:
[  560.176816][    C1]  <TASK>
[  560.176821][    C1]  unwind_next_frame+0xed9/0x2990
[  560.176843][    C1]  ? __kasan_kmalloc+0x8f/0xa0
[  560.176862][    C1]  ? __kasan_kmalloc+0x8f/0xa0
[  560.176878][    C1]  ? stack_trace_save+0x100/0x100
[  560.176895][    C1]  arch_stack_walk+0x144/0x190
[  560.176914][    C1]  ? __kasan_kmalloc+0x8f/0xa0
[  560.176932][    C1]  stack_trace_save+0xaa/0x100
[  560.176950][    C1]  ? stack_trace_snprint+0xf0/0xf0
[  560.176965][    C1]  ? stack_trace_save+0xaa/0x100
[  560.176984][    C1]  ? kasan_set_track+0x5f/0x70
[  560.176999][    C1]  ? kasan_set_track+0x4e/0x70
[  560.177015][    C1]  kasan_set_track+0x4e/0x70
[  560.177030][    C1]  ? kasan_set_track+0x4e/0x70
[  560.177044][    C1]  ? __kasan_kmalloc+0x8f/0xa0
[  560.177090][    C1]  ? __kmem_cache_alloc_node+0x194/0x250
[  560.177110][    C1]  ? __alloc_skb+0x138/0x2c0
[  560.177127][    C1]  __kasan_kmalloc+0x8f/0xa0
[  560.177144][    C1]  ? __alloc_skb+0x138/0x2c0
[  560.177159][    C1]  __kmalloc_node_track_caller+0xb4/0x230
[  560.177179][    C1]  ? rcu_is_watching+0x15/0xb0
[  560.177198][    C1]  ? __alloc_skb+0x138/0x2c0
[  560.177213][    C1]  kmalloc_reserve+0x116/0x240
[  560.177232][    C1]  __alloc_skb+0x138/0x2c0
[  560.177250][    C1]  nsim_dev_trap_report_work+0x253/0xa90
[  560.177273][    C1]  ? process_scheduled_works+0x975/0x1600
[  560.177292][    C1]  process_scheduled_works+0xa60/0x1600
[  560.177324][    C1]  ? worker_attach_to_pool+0x370/0x370
[  560.177345][    C1]  ? assign_work+0x3cc/0x5d0
[  560.177365][    C1]  worker_thread+0xa5e/0xfe0
[  560.177388][    C1]  ? _raw_spin_unlock+0x40/0x40
[  560.177406][    C1]  ? __kthread_parkme+0x71/0x1c0
[  560.177425][    C1]  kthread+0x2fa/0x390
[  560.177439][    C1]  ? pr_cont_work+0x550/0x550
[  560.177456][    C1]  ? kthread_blkcg+0xd0/0xd0
[  560.177476][    C1]  ret_from_fork+0x48/0x80
[  560.177493][    C1]  ? kthread_blkcg+0xd0/0xd0
[  560.177508][    C1]  ret_from_fork_asm+0x11/0x20
[  560.177534][    C1]  </TASK>
[  560.489581][    C1] vkms_vblank_simulate: vblank timer overrun
[  560.504059][   T29] Kernel panic - not syncing: hung_task: blocked tasks
[  560.510951][   T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0
[  560.518160][   T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  560.528228][   T29] Call Trace:
[  560.531514][   T29]  <TASK>
[  560.534458][   T29]  dump_stack_lvl+0x18c/0x250
[  560.539155][   T29]  ? show_regs_print_info+0x20/0x20
[  560.544352][   T29]  ? load_image+0x420/0x420
[  560.548867][   T29]  panic+0x2ca/0x720
[  560.552771][   T29]  ? bpf_jit_dump+0xd0/0xd0
[  560.557273][   T29]  ? __irq_work_queue_local+0x13a/0x3b0
[  560.562819][   T29]  ? preempt_schedule_thunk+0x1a/0x30
[  560.568196][   T29]  ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0
[  560.574352][   T29]  watchdog+0xf98/0xfa0
[  560.578527][   T29]  ? watchdog+0x1e1/0xfa0
[  560.582855][   T29]  kthread+0x2fa/0x390
[  560.586917][   T29]  ? hungtask_pm_notify+0x50/0x50
[  560.591936][   T29]  ? kthread_blkcg+0xd0/0xd0
[  560.596517][   T29]  ret_from_fork+0x48/0x80
[  560.600929][   T29]  ? kthread_blkcg+0xd0/0xd0
[  560.605510][   T29]  ret_from_fork_asm+0x11/0x20
[  560.610281][   T29]  </TASK>
[  560.613556][   T29] Kernel Offset: disabled
[  560.617897][   T29] Rebooting in 86400 seconds..