last executing test programs:

30m18.878603005s ago: executing program 32 (id=119):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socket$inet_smc(0x2b, 0x1, 0x0)
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
unshare(0x8000000)
semget$private(0x0, 0x4000, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240))
setitimer(0x0, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3d, 0x301, 0x70bd25, 0xfffffffc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000740))
write$UHID_INPUT(r0, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000)
shutdown(0xffffffffffffffff, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f00000003c0)={0x1, {{0xa, 0x4e23, 0x8caa, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}}}, 0x84)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, &(0x7f0000000140))
open$dir(&(0x7f0000000300)='./file0\x00', 0x20800, 0xf8)
r3 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000000)={0x3fffffffffffff69, &(0x7f0000001ac0)=[{0x0, 0x1000}]})

26m59.278207266s ago: executing program 33 (id=509):
setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x100000001)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f0000000280))
r3 = socket$kcm(0x21, 0x2, 0xa)
preadv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000880)=""/175, 0xaf}], 0x1, 0x5, 0x0)
sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001240)=[{0x10, 0x110, 0x1, "dc"}], 0x10}, 0x40)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, 0xffffffffffffffff, 0x0, 0xa002a0}, 0x38)
openat$binfmt(0xffffff9c, 0x0, 0x41, 0x1ff)
ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x6, 0x6, 0xc})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x74}}, 0x0)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r4}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)

26m34.980544851s ago: executing program 34 (id=553):
socket$nl_generic(0x10, 0x3, 0x10)
userfaultfd(0x80001)
socket(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x2, 0x0)
socket$inet6(0xa, 0x800000000000002, 0x0)
socket$inet(0x2, 0x3, 0x4)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x3, 0x300)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'bond0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r2, @ANYBLOB="138000002b9201002400128009000100626f6e64000000001400028008", @ANYRES16=r0, @ANYBLOB="ac"], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x0)

25m48.250832834s ago: executing program 35 (id=631):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000080)={[{@usebackuproot}, {@nodatasum}, {@ssd_spread}, {@user_subvol_rm}, {@flushoncommit}, {@compress_force}, {@acl}, {@nodiscard}]}, 0xfb, 0x50f9, &(0x7f0000005140)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000540), 0x44800, 0x0)
ioctl$BTRFS_IOC_ENCODED_READ(r0, 0x80809440, &(0x7f00000004c0)={&(0x7f0000000180)=[{&(0x7f0000000340)="0b481c06", 0x4}], 0x1, 0x0, 0x0, 0x3, 0x950, 0xed, 0x4, 0x4})

25m41.540589204s ago: executing program 36 (id=650):
socket$inet_tcp(0x2, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x79af, 0x8, 0x0, 0x272}, &(0x7f0000000340)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth1_to_bridge\x00', <r5=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x3, 0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x15, 0x2, {{0x6, 0x6b7, 0x80, 0x0, 0x5, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x24000000)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000380)={'gre0\x00', 0x0, 0x7800, 0x20, 0x6, 0x8, {{0x16, 0x4, 0x0, 0x5, 0x58, 0x66, 0x0, 0xcd, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, {[@ssrr={0x89, 0x3, 0x60}, @noop, @timestamp_prespec={0x44, 0x24, 0xfc, 0x3, 0x2, [{@dev={0xac, 0x14, 0x14, 0x3c}, 0xcf}, {@multicast1, 0x9}, {@multicast2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}]}, @timestamp_prespec={0x44, 0x14, 0x3c, 0x3, 0x4, [{@multicast2, 0x4}, {@empty, 0x2}]}, @lsrr={0x83, 0x7, 0x7, [@broadcast]}]}}}}})
sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x4)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
r6 = socket$inet6_sctp(0xa, 0x801, 0x84)
connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c)
r7 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
syz_open_dev$vim2m(&(0x7f0000000080), 0x9, 0x2)
syz_io_uring_setup(0x890, &(0x7f0000000140)={0x0, 0xaee2, 0x10, 0xfffffffd, 0xbfdffffc}, &(0x7f00000000c0), &(0x7f0000000040))
write$6lowpan_control(r7, &(0x7f0000000080)='disconnect aa:aa:aa:aa:aa:11 2', 0x1e)
sendto$inet6(r6, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @private2}, 0x1c)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
shutdown(r6, 0x1)
syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, &(0x7f0000000200)='(', 0x1, 0x10, 0x1})
preadv(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0)
io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x0)
syz_usb_connect(0x7, 0x3d, &(0x7f0000000000)=ANY=[@ANYBLOB="120150b68f0102030109022b000105e00006"], 0x0)

25m37.13839788s ago: executing program 37 (id=658):
chdir(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0xfffffffffffffffe, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c0001800600060065580000080002"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)

25m31.772489802s ago: executing program 38 (id=668):
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x0, 0x8001, 0x0, 0x98, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
syz_open_dev$video(0x0, 0x1d24, 0x23635de98487b93e)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0)
r2 = syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0x59b0, 0x3180, 0x3, 0x2c0}, &(0x7f0000000340)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x48, 0x4007, @fd_index=0x3, 0x22, 0x0, 0x0, 0x6, 0x1})
io_uring_enter(r2, 0x627, 0x4c1, 0x63, 0x0, 0x0)

25m7.187211499s ago: executing program 39 (id=695):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0x10000, 0x440)
ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f00000001c0))
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mlock(&(0x7f0000a93000/0x4000)=nil, 0x4000)
io_submit(0x0, 0x1, &(0x7f0000000500)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}])
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x125d, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810)
recvmsg(r4, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20)

24m56.697455798s ago: executing program 40 (id=708):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
r3 = gettid()
rt_sigtimedwait(0x0, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x8000000000000000, 0x8, 0x7, 0x8000003}, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1002}]})
r4 = open_tree(0xffffffffffffffff, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r4, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f00000000c0)=0x7fff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
timer_create(0x2, 0x0, &(0x7f0000bbdffc))
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x10000)
madvise(&(0x7f000034d000/0x3000)=nil, 0x3000, 0xc)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ptrace$PTRACE_GETSIGMASK(0x420a, r3, 0x8, &(0x7f00000001c0))
sendmsg$NL80211_CMD_GET_SURVEY(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004050)
bind$can_raw(r0, 0x0, 0x0)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0)

24m55.532112301s ago: executing program 41 (id=712):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r5 = open(0x0, 0x0, 0x0)
fcntl$notify(r5, 0x402, 0x8000003d)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x16)
openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x515001, 0x488)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x20)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000004000625eca60a2f7240b5b73827a942e2801"], 0x1c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x420, 0x288, 0x43, 0xa0, 0x288, 0x98, 0x388, 0x178, 0x178, 0x388, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'ip6erspan0\x00'}, 0x12a, 0x228, 0x288, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@string={{0xc0}, {0x0, 0x3, 'kmp\x00', "7af8bdb4c056dc65949041982abfe9ed51b01289c0026e2e6034ed587be5f09017b907388134b0ede40eb8d493f20d534fc37f23ec524d91a7a041f36bb1d1c3ab474544c5ef3f2fa69a80a0d967ee4464257d28d31e6843bc1221dfb9a6a27ad13af7061b737fd97d94f50942c68242819c941c0b4d9ec154c7d327187e8198", 0x38, 0x2, {0x1}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x7, 0x5, 0x4, 0x3, 0x4], 0x2, 0x4}, {0xffffffffffffffff, [0x1, 0x1, 0x1, 0x1, 0x1, 0x2], 0x4}}}}, {{@uncond, 0x0, 0xe0, 0x100, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x1b, 0x408, 0xfffffffb}}, @common=@set={{0x40}, {{0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300], 0x0, 0x1}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x480)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x50, &(0x7f00000001c0), 0x4)
listen(0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'veth0_to_batadv\x00', &(0x7f0000000900)=@ethtool_drvinfo={0x3, "143971f82697566b8c301c020a6afbd488fc7c279edf83c0dd0b5d5862d48e14", "2f91bb33e18d1ba6b06de2126d961310f99044ebaf20ad0a30f47c8714432ce5", "3776a301fdc26f620368bb3bb03fbf73f447ef3d56332f5c5da76d8227f25bad", "8b1c16a072ef1528de28568d35d41999e6adefd5f25317dc6393c688cf387214", "41673ab1377f94110ef87c555b0f2081cd971d04cb7465a8bd0f211b696fffda", "ca554e638c9589669c5fc085", 0x80, 0xf, 0x7, 0x4b}})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x51}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x80, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x1c}}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x4}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x80}}, 0x0)
socket(0x200000000000011, 0x4000000000080002, 0x0)
r7 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000000))

24m47.88742547s ago: executing program 42 (id=728):
syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f0000000440)={[{@journal_async_commit}, {@heartbeat_none}, {@grpquota}, {@inode64}, {@dir_resv_level={'dir_resv_level', 0x3d, 0x3}}, {@localflocks}]}, 0x0, 0x4703, &(0x7f0000004800)="$eJzs212IXFcBB/BzJ6vZpMl2P9ImafoxSQQXLcumT9X6ENeqjabNh7bVVFlnN9vN6uzMujujBYPUIIiCoARBxQ+qQulLLYiBvtQiFPxAWoVSUbS+iBSq4INBG+jKzNybnXtntneyk7S0/f2gnb3n3nPumf3vPXfOPZNCrHZqYaW4sFIsVYrV2ftXbil+rlquL86FwqvktT4/vbkSOcn+tXPkfR/4yD23hPCHY1/70Orq6mpoGA5dHWj7+fy/T8+2vyYKmTqNdru31vLH+iMv/fwtr3REnhMhhB0d/WrYFEL42C9C2BxCGInLRuPXLSGEbSGEKITw6G/+9ePBfrrQ5uy9Lzx37MzhfWemHn/smQvzR9c9MArhu+XdN88vvrh/023Pv+MynR4AAF7RB48fufvo5IHwZBSGzg10fl7fGb8mn4/vfNun7np4YG3/Kr3Z9CqGCgAAABlr8//h6OUu63XJylqyJPjEAyfufipa229i+/p26K4jt79/8kC8/ht17L81Lvrnezc111Cz677Z9d+RTP3u679r53n4q8/+svLWjfc/6V9y3uEQFSZS24XCxEQIx6Za27uirYVydaX2zvur9crJjZ/3jSKdf3b1fm1Bv9f8RzPV89b/d3/i8z/bMtDPOxgL2b/axnax80+ZLtL5rz+W/+RLUU/5j2Xq5eV/x9Pbz/9qcz/vIHtGLkU6/9aFuK/9gGJrAGjk/82B/Px3ZNrPy//7U+cePbGB7/80xpnhqNHXwdQI8HJcvs5XmMhI598KIjV0xr/I9a7//2XyvybTfl7+d1b/8bu/9XH/X2/8H5/qp803j3T+rSCKqSPWrv+RQv71f22m/bz8f3vqz89+sq97dWf+jf6Pu//3JJ1/fCNOD57N32Sv4//OTPt5+e8au++hhQ30+8Nb4n4ORWGs7Vun5xq3sKG19ermlKaxe2kDJ3kTSOff+q2lLp2h1kvz+h/OH/93ZdrPy/+hPV9/z+m+vv/bffyfNP73JJ3/lmbZpeT/Uib/3Zn28/L/4em//+W+yzz+N7YPyr8n6fy3duxfe/5T6Gn+d12mft7zn32jTz3y1z7m/0n/kvMmz3+S5xDjUev5D92l879q3eN6vf/vydTLu/6/9Z/nn97fz/gfDXoC0Id0/ttahV0mgL3mf32m/bz8v3DPlz/+pw3M/5qf+AaT/Nvm/5tb5UeN/z1J57+9VZj6x1APNv/fvP9Hnbn/N5P/DZn28/K/cGhi4CuX+f7f6P94l0fZdErnP7TucY38f9/D/f/GTL28/L+496cv3tzX5/8QJs31Nyyd/9XrHte8/gfz878pUy8v/+9849dPPNhH/9/eR12y+bfu9anLKf5s3uv8v5hpPy//H42fP7v/Csz/bnX/70k6/9aq+aXkn53/7820n5f/9478YHngCjz/uUP+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGzIavw6HqDCR2i4UJiZCGIu3d4Wt0Uzp5PRMuTr7mZUQdsTlxTAazZerM6Xy9EKlenJuulQuV2dDuCbevyMMRivlam16sbR07cW2tkSn5krLtZm5Ui2EsDMuvz5sT9qaWagtlpaaxyZ1ropKn61Xa6WJ+srccth9sXxbUj6/XK0vXXexrasL1eWlU6XK9MmF5XdPTk5Ohj0X+zwSzT1Qm6vUWr1t7W3USeoOR21vprn7hrbzfbpaX66Uys3yG9vqlKuzpXJbnZvazldbrldmS7W56XJ1Pjlfsa1u23tr7t4b7xsPI6n3l9TNOhi/3n7o+EePHz7Qsb8YpfOu1BfnJrd3/5sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4I3rydve9e0QwkBrqxBCOJj8EMX/pZy994Xnjp05vO/M1OOPPXNh/mi3YwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4PztwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYuZ+XKro4DsBnxve+FkgpbYRcBoaI6E7Cgn4RSeU1smWb1kGtEjIoCgwjWhYEQVC7qCBoFVT+BVELl62qTS1aGERQMTqTlzvCDS90zHkeGM4Mc++ZLwzcO3M+hwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALB+nN2x2JW1l3ZtXtq6+0PozM/9H0IYTZb3P+/tCD0hhK9fZk6HVdpCT1P/bybnxstXTX7v7R9/eH00WXv9xXeL63aHJB1qON6ZpOnQ0Nr736juDD6bHkxCSGMXQhQLY0/O1EIIHbELIYqfH+cvZr/v/8UuhCj6P9ztyu5/LXYhRLF196e+Wv6MR/Wcr18YbPzvb/UI3sYjOuvQ25NX3qVuauW9zN//k3zzPlgNsyeOvH8euwiimZ2bOhq7BgAA4O861yL/D1uW9+9fTkJPdzn3/9aU//c29b96/r/i3vYbYzNthRDbSmOT2fHwvnb63PhODVy9/bpmvKeq5P/VJv+vNvl/tcn/q03+X23yfzKv5P+V9PjmnsUXsYsgGvk/AABUz6HjE1P14ZHs5X/Tj85yXt+Xt/U8T39wa3rgUcO4kfzw33b42MSBg8Mj+X0vDwiurP+QLp39ns/3aG4Lk03zLlqt/9D7dGH+Wmf5E/U/nL9R1Fdc1/oPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAvdueehkEwCsPod1sRtdGqaMLCT4IPNDAiACnMaEAHEwZgIAQUMJBzlnuTZ3kBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA5/tXeV18f2mM9Foj0lR22bV/jqfZz9y3w/I+e9y4FQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADZ24EAGAAAAQJi/dR7tBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4KkAAAD//8Oayzs=")
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]})

24m38.48922331s ago: executing program 43 (id=739):
syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/net\x00')
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
sendmsg$TIPC_NL_NAME_TABLE_GET(r0, 0x0, 0x8010)
r1 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000002040)=""/102400, 0x19000)
r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$cgroup_procs(r3, 0x0, 0x2, 0x0)
add_key(&(0x7f00000002c0)='pkcs7_test\x00', &(0x7f0000000180), &(0x7f0000000740)="da91649bfb04be4db55cc93a63d9561b50f7450eb54b829490e2cc207e3add11b616bf0db51e286f88aed774ea47cb1f55a02a973c6a171accbe65bfb6cc1ebad171e4e6941be92c6a3c499996dd5559f81b96a5b64630d7857b154c2d9f7417b77af2c8e5ca7e5202438bf34ec75edcd0173d9a064254e2", 0x78, 0xfffffffffffffffe)
shmat(r1, &(0x7f0000ffd000/0x3000)=nil, 0x6000)

24m0.258681154s ago: executing program 44 (id=784):
socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = socket(0x10, 0x3, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='projid_map\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000)
r2 = syz_clone(0x2000, 0x0, 0xff36, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
writev(r1, &(0x7f0000000640)=[{&(0x7f0000000080)}], 0x1)
write(r0, &(0x7f0000000080)="240000001a007f0214f9f4070009040803000000000000050002000008000f40fe0000", 0x23)
r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x0, 0x0)
ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000580)={'pcl812\x00', [0x8001, 0x6, 0x1, 0x4, 0xffffffb0, 0xcc7, 0x8, 0x7, 0x1, 0x7fff, 0x60, 0x1, 0x9, 0x2, 0x6, 0x9, 0x1, 0xff, 0x43, 0x40000003, 0x89, 0x10c, 0xf27, 0x1, 0xc, 0x8, 0x5, 0x40000006, 0x8, 0x10000, 0xfffffff4]})

23m44.44479433s ago: executing program 45 (id=809):
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="14000000000000002900000000000014000000000000002900000034000000fdffffff00000000180000000000000029000000040000000400000000000000d80000000000000029000000360000005e17000000000000000100000100010800000000000000000728000000030800ff0f66090000000000000700000000000000010000000000000001000000000000000864c8a11099"], 0x188}}], 0x1, 0x810)
bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000640)="3013f93f6a23826aeaa571d88a1fc628ec108a5ce411744d4e3ae79c5374eb3bdc7564d840b7d870c0da80f54b31a033a8", 0x31}, {&(0x7f0000001400)="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", 0x37a}], 0x2, &(0x7f0000000340)=ANY=[@ANYBLOB="10000000001d83000744d63c000100000008"], 0x10}, 0x40000)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

22m59.843410689s ago: executing program 46 (id=860):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$inet6(r2, &(0x7f0000002280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5b0}, 0x20008001)
syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaa"], 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0xffbf}], 0x1)

22m56.722132609s ago: executing program 47 (id=863):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000080)={[{@usebackuproot}, {@nodatasum}, {@ssd_spread}, {@user_subvol_rm}, {@flushoncommit}, {@compress_force}, {@acl}, {@nodiscard}]}, 0xfb, 0x50f9, &(0x7f0000005140)="$eJzs3U+IVWUfB/Dnzp1x5lVw7isEtsoikGrh4CYioqtMUFF0y8VgBE4tgnThJEi0EMQW/Vt4S4paSK6kFsksjKA2LqQwArehYS7cKAaSi3Yac8957pz7HO+5d0ZtTD8fmTnnOb/zPOe5l7O43+uccwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACEEF74/bNDVfVT16bPnJtp7jywZebyvul1p0OodbbX8vqOrc++8ua2HS9OxA6zL2fLRqPfkFnX81ljVc/GhX69P6+HEMaSAer58pk1pVGLq3vKA1a6fnH30U17mxuPH27Xr146e7L80lkwsdITWCn5eXVh8Vxqdn6PJHt024VTr9Zzimb90xPuX3kRAMCSTLU6i+7H0fwjbre9P60n7WbSbift+AmhXWwsRzbuqn7z3JDWV2iezSwqjPedZ1LP3/9uu5X2T9pJ1FjCPHt3zSPNRL95ziX1lZonAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ3kkbdHH6qqn7o2febcTHPngS0zl/dNrzsdQqOzvZaVa6vfP9z869utxw78uPmr4xeef6ye94vL0cLO4be48sRkCG8UKhfisBfXhtDqLXSa4cty4a3OynOxAAAAwN3k/s7vkW47i4NjPe1aJ03WOv+iLCxev7j76Ka9zY3HD7frVy+dPbn88Vp9xmvecLxuu7H4UysE4xh/0/EW63HXPaVxqqUjpnn+8fNTf1f1L+X/RnX+j++c/A8AAMDNkP/TcaoNyv/fvfbHJ1X9S/l/Q88hS/k/zjjm/5GwvPwPAAAAd7Lbnf+bpXGqDcr/4y+NfV3Vv5T/p4bL/6PFaceNv8YJ75oMYWrQ1AEAAIA+4v+7L361EPN69s1BmtefevTguarxSvm/OVz+H7ulrwoAAAC4GUe+2P5wVb2U/1vD5f/x2zprAAAAYCne+XDig6p6Kf/PDpf/V+fL/MqHrNNP8a8QDk2GMLGwMpcVfg7tp7sFAAAA4BaJOf3PT3f+ULVfKf/PVd//P97pIF7/33P/v9L1/4VCdte/J90YAAAAgHtR+Xr+eHv87MkF/Z6/P+z1/w/87+CrVccv5f/9w+X/enF5K5//BwAAAMvwX3v+3/bSONUG3f//vo/e/aWqfyn/t4fL/3G5pvjyTtRq2fvz3mQI6xdW8rsJfhMPtyspzI8VCh2tpMe22CMvzI8XCh1zSY/NkyE8uLCyPyn8PxbaSeHK2rxwJCmcjoX8fOgWjiWFE/FM+3xtPt208H0s5BdYzMcrKNZ0L4lIelzt12OhcMMeZ7sHBwAAuKfE8Jxn2bHeZkij7Hxt0A6rB+0wMmiH+qAdRpMd0h37bQ+zvYW4vX1m49Ke/39kuPwf34pV2aLf9f8hXv+fP9ewe/3/bCw0ksJ8LLTSOwa04jGysPtxPEajlfe4sr5bAAAAgLta/F6gvsLzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5h715j5KruA4CffY734d2FpAqhUbJJahw38Xptk4daqqwpVSPSNOuGBlURxcZek8ULdmxTYhQiYxPRCEFpg5R8KMIoimo+QK1ARFJAuEhxhMojoioKIFBoDVEQKSWJSBOkUM3ee2bvnLvz8GONl/5+knfOzP887zw859475wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwP8Ph75y1d82iz/82/Oefu7Cicv2rrvw5WvOO/3xECZnH+/Iwh3919868fM7z71r731rbrvnyPkf7M3L5fEwUP3Tmd+5LtZ6ZGkI93aE0J0GVg5mgZ78/mCs712DIZwW5gK1ElP9WYm04fD9vhD2h7lArarv9YUwWAhc8MRDD95YTdzSF8KyEEIlbePZStZGXxo4qzcL9KeBbd1Z4FdvZGqB73ZmAThu8c1Qe9EfnKzPMDJ/uQavv54T1rE3Vzq8rpgYaZzvZ+sWuFMFvekDk8f1tJWqY0GU3h6HvNsWwbuttJ1v9rQVv0jl31DemAtVQufmqS0br5zZFR/pDGNjXY1qWqDn+alXv7TpaNKL5nUYOzByQl6HNz227M6uFZ969J6Vy1488KF9Lx1vN39U2KTF9EKrhPw1t2iex2jC58kiePuVviWN+tIVQtjy+d/7dLN4af4/0nz+H1/O8bazLnes9fWhbG4eHxmMiVeGsrk5AAAALBqLYa/ptrEHPlYoPlxJ6ivN/0fbO/4fD/nnk/lstIdCmJhN7BsO4YzZx7PAHbG5S4ZDeO9sarI+sC4JHArhnbOJFbWqkhJLYonRJPCToTwwkQQOx8BkEvhWDNycBK6LgYNJYFMMHEoC58ZAmK4fx+8P5eNoO9AXAxuyjXgwnoXwi6HYWrKtnqlVBQAAcILks8Oe+ruFcx2ON0OcXh7sa5UhnoHdMEMlqSGdwdamVQ1r6G5VQ2erGmrj3tN8+KWaO1rVXDoNo6M+w62//JvPhCZK8//x5vP/yjwd6Sgd/w9h/ezfmLszj8zU4hsm6zIAAAAAx2Hgf5//ZrN4af4/0d75/3GfSFchc3gk7obYOhzCeH0gq/YPy4HsqPdAHgAAAIDFoHY8vnYsfDq/zU7RTufT5fyTR5k/HvifmDd/76H7NzTrb2n+P9ne+f/99bdZJw7HXnxtOIQlhcAPYi+rgVmjMfDjj9cH8vEfjhvghlhVfmJCraobYokNMTCeBPY3KvHDWokz6gP5k1VrfF9tHNN5iUIAAAAATrq4OyAel4/n/7/vN2uualauNP/fcHTn/8/Og0un988MhLCqO4Su9IcBj/RnCwPGwGBHnnigP6urK63q2v4QzqkOLK3q+Xz9/+50jcEn+rKqYuCM9x149axq4pt9IawqBp783O0friZ2JYFa43/ZF8J7qqNNG//OkqzxnrTxry8J4d2FQK2qS5aEUG2sN63qoUp+HYO0qn+uhPC2QqBW1UcqIewOACxS8b/SzcUHd+6+euvGmZmpHQuYiPvw+8KW6ZmpsU3bZjZXGvRpc9LnumWMri2Pqd0r3zyTL1H02bvXD7aTrv1OcLzYVr4fv3TiYH4/fhfqmR3nmp66u2vTIX/g/eUmQuGbVKMhdy7wkPuLlcw9iaX6Y/7eMBCWXLlzasfYFzfu2rVjdfa33exrsr/xMFO2rVan26p/vr618fJouFpW4li31fJiJat2Xb591c7dV6+cvnzjpVOXTl2x+iNrxs8eXzv+0bNXVUc1nv1tMdTl81WdDPWN29sc1wkc6pndhUpOxqeGhITEYktsG1je9P/k0vx/e/P5f/zUiZ/8+foMjY7/j8TD/Nnjc4f5N8TA/naP/480OppfOzFgNAnsiYE9DvMDAADw1hAn+XFvZtwr/dMV33mxWbnS/H9Pe7//P0Hr/9eWrj+/0TL/K2KJ8Ubr/6fL/NfW/9/TaP3/dJn/2vr/+9+E9f+vrAWSTfIL6/8DAABvBSdv/f+Wy/unFwgoZWi5vH96gYBShpbL+Ld7gYCjXv//2f/8q/8OTZTm/ze3N/+3cD8AAACcOr78Z1f9TrN4af6/v735/8lf/y80Ov9/tFFgstHCgNb/AwAAYJFqtP7fyPX9FzcrV5r/H2xv/h9Pu+isyx1rfX0oW9MupGvavTJU+8kAAAAALA6dYWysp828dSujrjv2Np/KlwJtli56/k+OHN35/4fam//X/S7jpseW3dm14lOPvn7PymUvHvjQvpfmjv8DAAAAC6fd/RIAAAAAAAAAAAAAAMCb7/n/2Lu2Wbz0+/+wfvbxRr//j9f9i78veHtd7lhr6/X/8vsXfPKu3bNLFj4yFML7i4Gte7eeFvJr8y8vBh68aMU7qom9aYn7nzv3hWri4jTwiZWnv1ZNnJMENsRFEt+ZBuJVFV9bmgTi8or/ngbi9jiYBnrzwFeXZuPoSLfVTwezbdWRbqunB0MYLgRq2+rewayNjnSAtySB2gC/kAbiAP88D3SmvbprIOtVDAzGorcNZL0CAOCUFb8F9oQt0zNT4/ErfLw9s7v+NqpbsuzacrUdbTb/TL402WfvXj/YTror/S46d63xnlCpDmF16etqMUvH7ChPTC0tNt3bGwy51WpvnQ3KpY520/U2HlFfNqKxTdtmNve0HPja1lnWdLfMsro02Slm6ZzdpG3U0kZf2hhRm9umjS7H+51hbKwryfUHMTgS6rR6RbT7e/3iOn+NXgXFPFcc2ferZvWV5v8j7c3/K8VxvZZfDGBPvLLe3w1b5h8AAAAW1lfX/fob8d9nrn/4yWZ5S/P/0fbm/3EPVn4oONvbcShe/3/fcAizl9YfyQJ3xOYuGQ7hvbOpyVgiu6D++bHEeBa4I+4wWRFLbJisr2pJDBxMAj8ZygOHksDhGMj3UhwI+a6cvx8K4cOzqfX1JbbHEiNJ4NMxMJoExmJgPAksjYGJJPDy0jwwmQT+LQbCdP22untpvq0AAACORj7P6qm/G9J53sHuVhk6WmXob5Whs1WGSqsMjUYR7387ZuhJTl7pKGTqSWvtS2opZYgXwz/qfpUyhB/W50wLlpqO5x/UzjfoqM9w38e6K6GJ0vx/vL35f3/9bdb64Tj/n7v+Xxb4Qeze1+Kp46Mx8OOP1wfyHQOH42T3hlpVk3mJfNJ+QywxEQOjSWB7DEwkgQ3r88D+d9QH8pl2rfF9tcan8xKFAAAAAJx0cQdB3E0T5/+37fzKQLNypfn/RHvz/9jeQLGx62KtR5aGcG/HXG9qgZWDWSDuxxiMP49/12AIpxV2cNRKTPVnJXqThsP3+7JfqPemVX2vL/vxQbx/wRMPPXhjNXFLXwjLCntfam08W8na6EsDZ/Vmgf40sK07C8Q9P7XAdzuzABy32l7B+ILKT3WpGZm/XIPX31vlmqDp8Er7QOfJN99vrhZKaYdrvk+15uietqb7bzlhSm+PQ95ti/HdNuLdVvwilX9DeWMuVAmdm6e2bLxyZld8pPhL1pIFep6Lv1JtJ30CXod7jr23rVXSDownHx/j85eb/3XYEau76bFld3at+NSj96xc9uKBD+17qe1uNBB/KPzQNf86+KPC5l1olZC/5hbd58mkz5NF8d9A8u4e9bSFENa//PUbmsVL8//J9ub/3cntrF/HjblzOIQPFDbuI3Hz//Fw9jlYCGSfkm8rB7JD7v811PCTEwAAAE602u6O2v6C6fw2OyE8nSeX808eZf64v2Ji3vzt9rv/ry9a1ixemv9vaD7/X5J00/F/x/9ZII7/z+tU3xW9JH1gz3Htii5Vx4Jw/H9ep/q7zfH/eTn+7/j/fBz/b8Hx/3md6k9b6VvSdl+6Qggv/tEDTzeLl+b/29ub/1v/b/5F+2rr/21otP7f9kbr/+2x/h8AALCgGiw0l87zSqv3lTKkq/eVMrRcILDlEoPW/zvq9f9eOPPZ34QmSvP/Pe3N/+PLYaDY+mJZ/290fYOqbo6B7RYGBAAA4FTUaAcBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAb677/uF/NjeLP/zb855+7sKJy/auu/Dla847/fEQpmcf78jCHf3X3zrx8zvPvWvvfWtuu+fI+R+s5OV68tvfrcsda319KIT9hUcGY+KVoeqducAFn7xrd3c18chQCO8vBrbu3XpaNfGtoRCWFwMPXrTiHdXE3rTE/c+d+0I1cXEa+MTK01+rJs7JAx1pd/9xadbdjrS7Ny4NYbgQqHX3sqX1VdXa+NM80Jm28U+DWRsxMBiLfmMwayMGZmKJ6SUhrOoOoSut6uFKVlVXWtW/VLKqutKqvlwJ4ZwQQnda1XO9WVXd6cgf782qioEz3nfg1bOqif29IawqBp783O0fria+kARqjf9Fbwjvqb5k0sa/3ZM13pM2fktPCO8OIfSmJX7ZnZXoTUs83x3C2wqBWuOf7w5hd+AtIX741H2i7dx99daNMzNTOxYw0Zu31Re2TM9MjW3aNrO5kvSpkY5C+o1rj33sz7z6pU3V28/evX6wnXR3Xq5ntstreururj3Vex/71V+sZO75KNUf8/eGgbDkyp1TO8a+uHHXrh2rs7/tZl+T/e3Ko9m2Wr1YttXyYiWrdl2+fdXO3VevnL5846VTl05dsfoja8bPHl87/tGzV1VHNZ79PRFDvf3kD/XM7kIlJ+MDQEJCYrElOus+3cZP9Q/y0hf9uY72hMrsB3RpWlHM0jE7yhMx6HXHOOJj+Z7SckSrSxOHUpY182S5tj7L2tJkYq6WvizL7Pe60uSw2Fjn7CaN9zvD2FhXo+0wUn+3uHl/dhyb96l807WbBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4P/YgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24FgAAAAAQJi/dRg9GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHApAAD//7IeJCA=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000540), 0x44800, 0x0)
sendfile(r0, r1, 0x0, 0xfffe82)
r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
ioctl$FITRIM(r2, 0xc4009420, &(0x7f0000000180)={0x5, 0x10000})
ioctl$BTRFS_IOC_QGROUP_CREATE(r2, 0xc400941b, &(0x7f0000000000)={0x1, 0x1400})
r3 = syz_open_dev$loop(&(0x7f0000000640), 0x0, 0x22400)
r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x6042, 0x126)
sendfile(r4, r3, 0x0, 0x80000002)
r5 = open(&(0x7f0000000340)='./bus\x00', 0x14927e, 0x102)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r5, 0x0)
fallocate(r5, 0x0, 0x0, 0x1000f4)
r6 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
pwritev2(r6, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x29000, 0x3)
r7 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0)
ioctl$LOOP_SET_STATUS64(r7, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x68245b64, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000680)={{r2}, 0x0, 0x1e, @inherit={0x48, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000000000000000000000000000249df15c0000000003fbff000000000008000000000000000000000000000000070000000000000005000000000000000600000000000000"]}, @name="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"})
creat(&(0x7f0000000200)='./file1\x00', 0x0)

22m56.387911774s ago: executing program 48 (id=864):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x8000003d)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x16)
openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x515001, 0x488)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r5, 0x0, 0x0, 0x4000841)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x20)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000004000625eca60a2f7240b5b73827a942e2801"], 0x1c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x420, 0x288, 0x43, 0xa0, 0x288, 0x98, 0x388, 0x178, 0x178, 0x388, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'ip6erspan0\x00'}, 0x12a, 0x228, 0x288, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@string={{0xc0}, {0x0, 0x3, 'kmp\x00', "7af8bdb4c056dc65949041982abfe9ed51b01289c0026e2e6034ed587be5f09017b907388134b0ede40eb8d493f20d534fc37f23ec524d91a7a041f36bb1d1c3ab474544c5ef3f2fa69a80a0d967ee4464257d28d31e6843bc1221dfb9a6a27ad13af7061b737fd97d94f50942c68242819c941c0b4d9ec154c7d327187e8198", 0x38, 0x2, {0x1}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x7, 0x5, 0x4, 0x3, 0x4], 0x2, 0x4}, {0xffffffffffffffff, [0x1, 0x1, 0x1, 0x1, 0x1, 0x2], 0x4}}}}, {{@uncond, 0x0, 0xe0, 0x100, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x1b, 0x408, 0xfffffffb}}, @common=@set={{0x40}, {{0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300], 0x0, 0x1}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x480)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x50, &(0x7f00000001c0), 0x4)
listen(0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'veth0_to_batadv\x00', &(0x7f0000000900)=@ethtool_drvinfo={0x3, "143971f82697566b8c301c020a6afbd488fc7c279edf83c0dd0b5d5862d48e14", "2f91bb33e18d1ba6b06de2126d961310f99044ebaf20ad0a30f47c8714432ce5", "3776a301fdc26f620368bb3bb03fbf73f447ef3d56332f5c5da76d8227f25bad", "8b1c16a072ef1528de28568d35d41999e6adefd5f25317dc6393c688cf387214", "41673ab1377f94110ef87c555b0f2081cd971d04cb7465a8bd0f211b696fffda", "ca554e638c9589669c5fc085", 0x80, 0xf, 0x7, 0x4b}})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x51}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x80, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x1c}}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x4}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x80}}, 0x0)
socket(0x200000000000011, 0x4000000000080002, 0x0)
r7 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000000))

17m57.930410427s ago: executing program 49 (id=1394):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8)
r1 = accept(r0, 0x0, 0x0)
recvmsg(r1, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000001700)=""/252, 0xfc}], 0x1}, 0x2000)
ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0xde3ebb5)
r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
io_uring_enter(r2, 0x847ba, 0x4, 0x0, 0x0, 0x0)

17m21.742829456s ago: executing program 50 (id=1476):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180))
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x180)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
close(0x3)
openat$cgroup_subtree(r0, 0x0, 0x2, 0x0)
r1 = syz_io_uring_setup(0x49e, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=<r2=>0x0, &(0x7f0000000480)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x4007, @fd_index=0x3, 0x6, &(0x7f0000000500)=""/230, 0xe6, 0x2, 0x1})
io_uring_enter(r1, 0x74d1, 0x4c3, 0x43, 0x0, 0xfffffffffffffd1d)

16m29.395245042s ago: executing program 51 (id=1552):
ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x3)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001200), 0x101101, 0x0)
r0 = syz_io_uring_setup(0x8d2, &(0x7f00000001c0)={0x0, 0x54a5, 0x400, 0x1, 0x37a}, &(0x7f00000002c0)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r0, 0x47ba, 0x3e82, 0x60, 0x0, 0x0)

16m12.162837904s ago: executing program 52 (id=1577):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
personality(0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
listen(r1, 0x0)
creat(0x0, 0x122)
memfd_create(&(0x7f0000000180)='macvlan\x00', 0x5)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x7)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x8)
sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r7], 0x5c}}, 0x40)

16m4.198684701s ago: executing program 53 (id=1591):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socket$inet_smc(0x2b, 0x1, 0x0)
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, 0x0, 0x0)
unshare(0x8000000)
semget$private(0x0, 0x4000, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000740))
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
shutdown(0xffffffffffffffff, 0x0)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, &(0x7f0000000140))
open$dir(&(0x7f0000000300)='./file0\x00', 0x20800, 0xf8)
r2 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000000)={0x3fffffffffffff69, &(0x7f0000001ac0)=[{0x0, 0x1000}]})

12m3.226468539s ago: executing program 54 (id=2014):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x9, 0x0, 0x7ffffdbd}]})
r4 = shmget$private(0x0, 0x4000, 0x8, &(0x7f0000755000/0x4000)=nil)
r5 = shmat(r4, &(0x7f0000ffc000/0x3000)=nil, 0x4000)
shmdt(r5)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil)
r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f00000005c0)={0x1, @pix_mp={0x3ff, 0xfff, 0x30314752, 0x3, 0x0, [{0x8, 0xf}, {0x8, 0xa}, {0xd, 0x8}, {0x5, 0x8}, {0x2, 0x3}, {0x5, 0x4}, {0x6, 0x409}, {0x10001, 0x1800002}], 0x0, 0xd, 0x2, 0x3078182a3427730f, 0x1}})
syz_emit_ethernet(0x95, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f00000001c0)={0x1, 0x1, [0xf74, 0x4e0, 0xe4b, 0xa20]})
ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f00000002c0)={0xc29, 0x7})
syz_open_dev$usbfs(&(0x7f0000000100), 0x775, 0x8000)
munlockall()
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r7, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8)
syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x100)
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0xc, r1, 0x0, 0xfffffffffffffffc, 0x1541})
syz_open_dev$sg(0x0, 0x10000, 0x101000)
r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r8, 0xffffffffffffffff, 0x0)

10m16.378672672s ago: executing program 3 (id=2311):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x0, 0x200000, 0x0, 0xb49, 0x6, 0xc, 0x0, 0x1}, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r3, &(0x7f0000000040)="07000000010001", 0x7)
read$dsp(0xffffffffffffffff, 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000000100))
lseek(r4, 0x1000000, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x40081, 0x0)
accept4(r1, 0x0, &(0x7f00000000c0), 0x800)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040), 0x0)
r5 = socket(0x10, 0x803, 0x0)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0)
read$char_usb(r6, &(0x7f00000001c0)=""/4056, 0xfd8)
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r6, 0x7a5, &(0x7f0000000040)={{@any, 0x4}, 0x1, 0x0, 0x3})
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', 0x0})

10m1.004742927s ago: executing program 55 (id=2311):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x0, 0x200000, 0x0, 0xb49, 0x6, 0xc, 0x0, 0x1}, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r3, &(0x7f0000000040)="07000000010001", 0x7)
read$dsp(0xffffffffffffffff, 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000000100))
lseek(r4, 0x1000000, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x40081, 0x0)
accept4(r1, 0x0, &(0x7f00000000c0), 0x800)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040), 0x0)
r5 = socket(0x10, 0x803, 0x0)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0)
read$char_usb(r6, &(0x7f00000001c0)=""/4056, 0xfd8)
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r6, 0x7a5, &(0x7f0000000040)={{@any, 0x4}, 0x1, 0x0, 0x3})
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', 0x0})

9m15.726584049s ago: executing program 56 (id=2390):
r0 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100))
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f0000000080)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000020000000000000000000000000000000014000000000100"/68], 0x44)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_procfs(0x0, 0x0)
openat$vimc2(0xffffffffffffff9c, &(0x7f0000004340), 0x2, 0x0)
openat$cgroup_procs(r4, 0x0, 0x2, 0x0)
r5 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000380)=@filter={'filter\x00', 0xe, 0x4, 0x368, 0xffffffff, 0x134, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x48c, 0x48c, 0x48c, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa4, 0xc8}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x2}}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [0xff, 0x0, 0x0, 0xff], [0x0, 0x800000ff, 0xffffffff, 0xff000000], 'lo\x00', 'veth1_macvtap\x00', {0xff}, {0xff}, 0x3c, 0x0, 0x0, 0x1}, 0x0, 0xec, 0x110, 0x0, {}, [@common=@unspec=@connlabel={{0x24}, {0x81, 0x3}}, @common=@ipv6header={{0x24}, {0x80, 0x5}}]}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0xfffffffffffffffb}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x3c4)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1f, 0x0, &(0x7f0000000040))
syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x4001, 0x0, 0x0, 0x0, 0x23190000})
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0)
syz_usb_connect(0x1, 0x0, 0x0, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x20, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x24}}, 0x0)

7m52.868273822s ago: executing program 57 (id=2512):
ioctl$FIOCLEX(0xffffffffffffffff, 0x5451)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0)
r2 = syz_io_uring_setup(0x9a, &(0x7f0000000480)={0x0, 0x5c46, 0x100, 0x7ffd, 0x1e3, 0x0, r1}, &(0x7f00000000c0)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r1, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1})
io_uring_enter(r2, 0x24a0, 0x4c1, 0x43, 0x0, 0x0)

4m12.344829217s ago: executing program 58 (id=2924):
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000007800)={0x0, 0x0, &(0x7f00000077c0)={&(0x7f0000006580)={0x14, 0x36, 0x51eb40323bf4c37b, 0x70bd2d, 0x25dfdbfd, {0x3}}, 0x14}}, 0x4000)

2m55.738237967s ago: executing program 1 (id=3143):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r0 = syz_clone(0x4088080, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0)
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x2000})
openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x103040, 0x0)
r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2)
write$binfmt_aout(r2, &(0x7f00000001c0)=ANY=[], 0xc8)

2m49.145746685s ago: executing program 1 (id=3154):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x12)
socket$inet6_tcp(0xa, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x1000)=nil, 0x1000, &(0x7f0000000080)='\x00\x00\x00')
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x3, 0x0, 0xe, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0)
r3 = fsopen(&(0x7f0000000180)='proc\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
fsmount(r3, 0x0, 0x1)
r4 = landlock_create_ruleset(&(0x7f0000000040)={0x3342, 0x3}, 0x18, 0x0)
landlock_restrict_self(r4, 0x5)
r5 = fsopen(&(0x7f0000000040)='afs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\r\xcc:', 0x0)
r6 = userfaultfd(0x1)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0))
close(0x3)
ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2})
r7 = syz_open_procfs(0x0, &(0x7f0000000240)='net/snmp6\x00')
read$FUSE(r7, 0x0, 0x0)
readv(r0, &(0x7f0000000200)=[{&(0x7f0000000100)=""/68, 0x44}], 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xbc}, @exit], &(0x7f0000000200)='GPL\x00'}, 0x90)

2m43.157298869s ago: executing program 1 (id=3171):
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0)
r2 = socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_genetlink_get_family_id$ethtool(0x0, r2)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
personality(0x0)
syz_emit_ethernet(0x4e, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xd, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0x224}, 0x0)
sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x6, 0x3c, 0xe, 0x2, 0x2, 0x3fc0000000000, 0x40, 0x9, 0x8}, 0x0)
r6 = creat(&(0x7f0000000240)='./file0\x00', 0x122)
setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x4)
lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000400)=@v3={0x3000000, [{0x9, 0x1}, {0x0, 0x3d9b}]}, 0x18, 0x0)
lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)=ANY=[@ANYRESDEC, @ANYRESDEC=r6, @ANYRES32=r5, @ANYRESDEC=r3, @ANYRESDEC=r1, @ANYRESHEX=r4], &(0x7f0000002740)=""/228, 0xe4)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0)
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0)
r7 = openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$apparmor_current(r7, &(0x7f0000000180)=ANY=[@ANYRES64], 0xff)
r8 = syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0)
ioctl$MEDIA_IOC_ENUM_LINKS(r8, 0xc0287c02, &(0x7f0000000300)={0x80000000, 0x0, 0x0})

2m40.386343125s ago: executing program 9 (id=3180):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002580)=@polexpire={0x21c, 0x1b, 0x300, 0x70bd29, 0x25dfdbfc, {{{@in=@loopback, @in6=@private0, 0x4e21, 0x200, 0x4e20, 0x0, 0xa, 0x10, 0x20, 0x27}, {0x8000000000000000, 0xd, 0x3, 0x6, 0x90000000, 0x8, 0x28, 0x7fffffffffffffff}, {0xd70, 0xb, 0x100, 0x9}, 0x5, 0x6e6bbc, 0x2, 0x0, 0x2, 0x3}, 0x40}, [@replay_val={0x10, 0xa, {0x70bd2b, 0x70bd25, 0x7}}, @algo_auth={0x141, 0x1, {{'cbcmac(cast5-generic)\x00'}, 0x7c8, "43bd238d335d347b5bcfcb11e94d094d55ca668076a111f50b71bdce5ea7722efa7543a391efa227aa4b88cc845fb683f91d059182d15f9c47e1e677588b8e068a3bcaf1f0a4422554b6a81e3e2dd9fdcf126a1f218e7340a15e8808337c55782216ce17fae91d9e3d4bd9ce978c9db7bf31dead79782e5a21000a786b6d8bf98a28661afb80db2735148230edcc50473e1e6f6c91da788ac90b155902f21b325e3e37ca43bc5892f0900b1671d3b6e561d70e28ae5fa2c662a68fe375084277d2b6b2674968a93901bb1e9b37fc72a759023d37e4fefaed7361c6ef12f9456f38003b25fa7d74dea5ffffc42e0a3400bede9070ccfe8c99bc"}}, @XFRMA_IF_ID={0x8, 0x1f, 0x3}]}, 0x21c}, 0x1, 0x0, 0x0, 0x4001000}, 0x20000810)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000001180)=0x2000000)
mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f00000000c0), 0x12)
r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x1, 0x0)
openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
read$FUSE(r3, &(0x7f0000003b80)={0x2020}, 0x2020)
r6 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="1400000016000b43d27a80648c2594f90924fc60", 0x14}], 0x1, 0x0, 0x0, 0x600}, 0x0)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000003c0)={0x54, 0x0, 0x111, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0xd5, 0xb, 0x9}, {0x6, 0x16, 0xfffa}, {0x5, 0x12, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x804}, 0x20000)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201f37a159b68b0267e030000000000000002ae0000000109022b207a86e69bbae8f98a5c01000000090401001186eee2000905", @ANYRES8=0x0], 0x0)

2m38.131154183s ago: executing program 1 (id=3186):
mount(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000040)='smb3\x00', 0x0, &(0x7f00000000c0)='rdma')

2m37.420696513s ago: executing program 1 (id=3188):
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x802, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x110a, 0x2})
accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48000, 0x0)
preadv(r2, &(0x7f0000000180)=[{&(0x7f0000002240)=""/251, 0xfb}], 0x1, 0x6, 0x9)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)

2m35.885652969s ago: executing program 1 (id=3192):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x300, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {0x0, 0x0, 0x20000000}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe07, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3})
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x162e02, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
openat$dma_heap(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c081, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r5 = accept(r4, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=r5, @ANYRES8], 0xfffffdef}, 0x1, 0x0, 0x0, 0x400c8c4}, 0x24040814)
recvfrom(0xffffffffffffffff, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4112, 0x0, 0x0)
r6 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x141000)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x17, 0x2, {{0x3, 0x1, 0x0, 0x2, 0x4}, 0xa4ca, 0x0, 0x0, 0x6, 0x0, 0x18, 0xb, 0xe, 0x3, 0x9, {0x10001, 0x7, 0x2, 0x7, 0x2, 0x7fffffff}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x4, 0x7, 0x6, 0x0, 0x1}}, {0x4}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4c840}, 0x0)
ioctl$FE_GET_PROPERTY(r6, 0x80106f53, 0x0)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6e65772064656661756c74207472cd38d3338db8b5347a"], 0x2d, 0xfffffffffffffffa)
r8 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
keyctl$read(0xb, r8, &(0x7f0000000240)=""/112, 0x349b7f55)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0)
syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="11"], 0x0)
syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0)

2m35.735985921s ago: executing program 9 (id=3193):
socket$inet_udp(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = syz_open_dev$vim2m(&(0x7f00000003c0), 0xb, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000100)={0x1, @pix_mp={0x8, 0x80, 0x50565559, 0x8, 0x7, [{0x6, 0x2}, {0xdf34, 0x9}, {0x6, 0xfffffffb}, {0x31d, 0x2}, {0x5, 0x2}, {0x5, 0xffffffff}, {0x1, 0x8}, {0x18, 0x3}], 0x2, 0x40, 0x2, 0x2, 0x6}})
r3 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x200)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r3, 0xc0a45352, &(0x7f0000000040)={{0x0, 0xff}, 'port1\x00', 0x0, 0x40, 0x1, 0x5, 0x6, 0x8, 0x9, 0x0, 0x2, 0x4})
quotactl$Q_GETINFO(0xffffffff80000500, &(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f0000000180))
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="050000007f00000043000000010000000000", @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50)
r4 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005ae4c41096050100f5050102030109021b0001000000000904d60001b5e14500090583"], 0x0)
r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd000905"], 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173)
syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_USERDATA={0x6, 0x7, 0x1, 0x0, "9f60"}]}], {0x14}}, 0x94}}, 0x0)
getsockopt$bt_hci(r6, 0x0, 0x1, &(0x7f0000000680)=""/56, &(0x7f0000000780)=0x38)
syz_usb_control_io$printer(r4, 0x0, &(0x7f0000000440)={0x1c, &(0x7f0000000080)=ANY=[@ANYBLOB="000a10"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r4, &(0x7f00000001c0)={0x18, &(0x7f0000000040)={0x20, 0x1, 0x2d, {0x2d, 0x3e, "10d46cc8e2244cf0409fc22097808f5741cc624ddd8d185c160962b5a9adafc9f8b211f50befadeb3cff25"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x810}}, &(0x7f0000000100)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000140)={0x20, 0x29, 0xf, {0xf, 0x29, 0xfc, 0x0, 0x3d, 0xe, "e83e418f", "54e1d65b"}}, &(0x7f0000000180)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x31, 0x2, 0x4, 0x7f, 0x77, 0xa, 0xfff}}}, &(0x7f00000006c0)={0x44, &(0x7f0000000200)={0x40, 0x11, 0x7a, "a2a4653a4af5a4efdcf4c4043c4395a45aec755cfb99ffb32b6d9534d4640c3b3fab5475c5e12a3813fac93233db9b33475c74d0e3bba6d70f5790975d2a7f35c48ff37da1349754194d6345b4a3482ead0f0d57acf85babc31b6e5fcd8a6fa06abb868fd97054509c33c8aae658e9be68de0da7b5968d74f100"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000340)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000380)=ANY=[@ANYBLOB="20000800000020000400f00000"], &(0x7f00000003c0)={0x40, 0x7, 0x2, 0xf}, &(0x7f0000000400)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000480)={0x40, 0xb, 0x2, "820b"}, 0x0, &(0x7f0000000500)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000540)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000000580)={0x40, 0x19, 0x2, "bd6e"}, &(0x7f00000005c0)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0xc3}, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x7}})
syz_usb_connect(0x5, 0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109023800010000000009043200019740a400052406000105240000000d240f0109"], 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mknod$loop(0x0, 0xfff, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)

2m28.801798748s ago: executing program 9 (id=3199):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000001100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800, 0x8}, 0x0, &(0x7f0000000240)={0x1f, 0x3}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)

2m27.437376877s ago: executing program 2 (id=3202):
r0 = socket$unix(0x1, 0x5, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x0, 0x0})
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
prctl$PR_SET_SECUREBITS(0x1c, 0x25)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bpf$BPF_GET_MAP_INFO(0x3, 0x0, 0x0)
r2 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x400246}, &(0x7f0000000340)=<r3=>0x0, &(0x7f00000006c0))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$IOMMU_VFIO_IOAS$GET(r2, 0x3b88, &(0x7f0000000080)={0xc, <r5=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000180)={0x48, 0x5, r5})
io_uring_enter(r2, 0x4c6e, 0xc67a, 0x8, 0x0, 0x0)
r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
setsockopt$rose(r6, 0x104, 0x1, &(0x7f0000000000)=0x4, 0x4)
r7 = io_uring_setup(0xf08, &(0x7f0000000780)={0x0, 0x80003125, 0x3cd0, 0x4004, 0x181})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000000c000/0x1000)=nil, &(0x7f000001f000/0x1000)=nil, &(0x7f0000015000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000000c000/0x4000)=nil, &(0x7f000001d000/0x3000)=nil, &(0x7f0000012000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x4000080)
fcntl$getflags(0xffffffffffffffff, 0x401)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
io_uring_register$IORING_REGISTER_FILES(r7, 0x20, &(0x7f0000000000)=[r7], 0x1)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_to_hsr\x00'})
syz_init_net_socket$rose(0xb, 0x5, 0x0)

2m26.048619172s ago: executing program 2 (id=3204):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000700)={'vlan0\x00', &(0x7f00000000c0)=@ethtool_channels={0x1, 0xf, 0x7, 0x6d8, 0x7, 0x5, 0x1, 0x4, 0x3a45}})

2m25.44238194s ago: executing program 2 (id=3206):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$inet6(0xa, 0x3, 0x3a)
syz_emit_ethernet(0x6e, &(0x7f0000000540)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6000318e00383a00fe880000000000000000000000000001ff020000000000000000000000000001"], 0x0)

2m24.705646185s ago: executing program 9 (id=3208):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a09040000000000000000020000000900010073797a30000000000900020073797a32000000002c00048028000180080001006e6174001c0002800800024000000002080003400000000a08"], 0x80}}, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}}, 0x20050840)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000000380))
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)
write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000040)=""/2, 0x2}}, 0x120)
r3 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000019340)=ANY=[@ANYRESHEX, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x0)
sendmmsg$alg(r3, &(0x7f00000000c0), 0x492492492492627, 0x0)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r5=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x840)
write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x1, {0x0, 0x0, 0xff, 0x4}}, 0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000000300)=""/102392, 0x18ff8)
write$nci(r0, &(0x7f0000000300)=@NCI_OP_CORE_CONN_CREDITS_NTF={0x0, 0x0, 0x3, 0x6, 0x2, {0x1, [{0x0, 0x48}]}}, 0x6)

2m24.516072251s ago: executing program 59 (id=3182):
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0)
ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, 0x0)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r6 = dup(r5)
write$UHID_INPUT(r6, &(0x7f0000002a00)={0xd, {"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", 0x1000}}, 0x1006)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, 0x0, 0x0)
sendmmsg(r3, &(0x7f0000001c00), 0x400000000000159, 0x40840)
sendmsg$rds(r2, &(0x7f0000001380)={&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_map={0x2c, 0x10c, 0x3, {{0x0}, 0x0, 0x10}}, @cswp={0x58, 0x114, 0x7, {{0x7ff80000, 0x101}, 0x0, 0x0, 0x89, 0x4, 0xeb, 0x10000000008a, 0x22, 0x77}}], 0x84}, 0x0)
set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x80000001}, 0x50)
socket$kcm(0x29, 0x2, 0x0)
r7 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8)
sendto$inet6(r7, &(0x7f0000001300)="92", 0x1, 0x10, &(0x7f0000000240)={0xa, 0x4e1c, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c)
connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4)
openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8)

2m24.495609758s ago: executing program 2 (id=3210):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, 0x0, 0x20040084)
socket$unix(0x1, 0x1, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0xfff0)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\n'], 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48)

2m23.318715296s ago: executing program 2 (id=3214):
syz_open_dev$radio(0x0, 0x1, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
getpid()
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000380)={0xc})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc22, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0)
r1 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r1, &(0x7f0000000580)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000100)=r2, 0x4)
sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000480)="b9693e14ae39b9d4956589cd4383940ab3b40d07cb4c156f3ca6fc88de9cb8a4ecac59ed49fd2b216619907a0b6431db4058ea0fc81a8a2c0d90fe4a4d001cb9ee95d2753b07a7825250f7428fd1147c0143bfdaa681777e472c350000a1e49900194dc22df4c565e5e7dbf454da7e3171f9736ec5b31348bd11c559d531fc5ad17bb24275fe9a24f69f4c0d44458071aff8d3c4783a7f1ccd3442264f6416fda9da7fe6f999f956700335e3e6a034413af8c4ba7c00"/195, 0xc3}, {&(0x7f0000000380)="248d7ac09ae9afb8954f66838ae5bb401e1c656014c4c8af25db88b25065cb5a4c7073b230eb916c6ff171fd78611ff70f30b9e77db814a1d43c7fa7a70c0df21e728ed51b836e0ce6f3faf0e4817093867621b5e0c03cf4638bc53de55de11380d10ae2775154c1069ae25d99ff710f4bbf7b5e76282c2df5a2d1f289179a74a84d8aceef5d869e05cc5117f25cd1e4d2461a95237c2fa3ba38e181e3f23a3cde974dfa75aecc3b2ce33369ad52580a6cd143f10ac7e783955969b8bd05a524f919a2fd9d3cbd055b5d2f7f00ca58f6b770492f471dc3b6b3b101d10f157ec9f68dac9b8d18cf8b", 0xe8}, {&(0x7f0000000240)="a3df552cfd633a6742d5c27a9fc4f4", 0xffffff53}], 0x3}, 0x4009080)

2m21.868355041s ago: executing program 2 (id=3217):
r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x121602, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r3 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x400201, 0x0)
r4 = socket$inet(0x2, 0x3, 0x6)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0)
sendto$inet(r4, 0x0, 0x0, 0x8800, &(0x7f00000001c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
sendto$inet(r4, &(0x7f0000000200)="9a9c94", 0x3, 0x20000800, &(0x7f0000001080)={0x2, 0x4e24, @multicast1}, 0x10)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000200)={0x48})
r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
ioctl$FBIOBLANK(r5, 0x4611, 0x3)
ioctl$FBIOGET_FSCREENINFO(r5, 0x4602, 0x0)
ioctl$FBIO_WAITFORVSYNC(r5, 0x40044620, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00ff000203030000000000000000000000000008000100010000"], 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_VERDICT(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000001030101000000000a000000000000000c000200"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x14)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0x7)
r8 = syz_open_procfs(0x0, &(0x7f0000002340)='fdinfo\x00')
getdents(r8, &(0x7f0000000000)=""/43, 0x2b)
getdents64(r8, 0x0, 0x0)

2m21.007116191s ago: executing program 9 (id=3219):
r0 = socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280), 0x3000c15, &(0x7f0000000240)=ANY=[])
write(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYRES64=r1], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0xcc7159d0d2eb8b2d, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x61}, 0x94)
r3 = socket(0x10, 0x803, 0x2)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)
sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, 0x0, 0x24044080)
r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
shutdown(r4, 0x0)
setsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, 0x0, 0x0)
connect$bt_rfcomm(r4, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000240)={'team0\x00', <r5=>0x0})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'ip6gre0\x00', <r6=>0x0, 0x29, 0x10, 0x75, 0x9, 0x3c, @dev={0xfe, 0x80, '\x00', 0xf}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x8, 0x80000000, 0x3}})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'wlan1\x00', <r7=>0x0})
sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000840)={0x244, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [{{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}]}}, {{0x8, 0x1, r5}, {0x1a4, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x101}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffe}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}]}, 0x244}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000085)

2m20.542054082s ago: executing program 60 (id=3192):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x300, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {0x0, 0x0, 0x20000000}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe07, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3})
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x162e02, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
openat$dma_heap(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c081, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r5 = accept(r4, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=r5, @ANYRES8], 0xfffffdef}, 0x1, 0x0, 0x0, 0x400c8c4}, 0x24040814)
recvfrom(0xffffffffffffffff, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4112, 0x0, 0x0)
r6 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x141000)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x17, 0x2, {{0x3, 0x1, 0x0, 0x2, 0x4}, 0xa4ca, 0x0, 0x0, 0x6, 0x0, 0x18, 0xb, 0xe, 0x3, 0x9, {0x10001, 0x7, 0x2, 0x7, 0x2, 0x7fffffff}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x4, 0x7, 0x6, 0x0, 0x1}}, {0x4}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4c840}, 0x0)
ioctl$FE_GET_PROPERTY(r6, 0x80106f53, 0x0)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6e65772064656661756c74207472cd38d3338db8b5347a"], 0x2d, 0xfffffffffffffffa)
r8 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
keyctl$read(0xb, r8, &(0x7f0000000240)=""/112, 0x349b7f55)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0)
syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="11"], 0x0)
syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0)

2m15.916079157s ago: executing program 9 (id=3229):
r0 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102)
r1 = dup(r0)
write$UHID_INPUT(r1, &(0x7f00000013c0)={0x200f, {"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", 0x1000}}, 0x1006)

2m6.914739323s ago: executing program 3 (id=3209):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x4088080, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0)
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x2000})
openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x103040, 0x0)
r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2)
write$binfmt_aout(r3, &(0x7f00000001c0)=ANY=[], 0xc8)

2m4.979647878s ago: executing program 61 (id=3217):
r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x121602, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r3 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x400201, 0x0)
r4 = socket$inet(0x2, 0x3, 0x6)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0)
sendto$inet(r4, 0x0, 0x0, 0x8800, &(0x7f00000001c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
sendto$inet(r4, &(0x7f0000000200)="9a9c94", 0x3, 0x20000800, &(0x7f0000001080)={0x2, 0x4e24, @multicast1}, 0x10)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000200)={0x48})
r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
ioctl$FBIOBLANK(r5, 0x4611, 0x3)
ioctl$FBIOGET_FSCREENINFO(r5, 0x4602, 0x0)
ioctl$FBIO_WAITFORVSYNC(r5, 0x40044620, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00ff000203030000000000000000000000000008000100010000"], 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_VERDICT(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000001030101000000000a000000000000000c000200"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x14)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0x7)
r8 = syz_open_procfs(0x0, &(0x7f0000002340)='fdinfo\x00')
getdents(r8, &(0x7f0000000000)=""/43, 0x2b)
getdents64(r8, 0x0, 0x0)

2m4.964574203s ago: executing program 3 (id=3241):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002580)=@polexpire={0x21c, 0x1b, 0x300, 0x70bd29, 0x25dfdbfc, {{{@in=@loopback, @in6=@private0, 0x4e21, 0x200, 0x4e20, 0x0, 0xa, 0x10, 0x20, 0x27}, {0x8000000000000000, 0xd, 0x3, 0x6, 0x90000000, 0x8, 0x28, 0x7fffffffffffffff}, {0xd70, 0xb, 0x100, 0x9}, 0x5, 0x6e6bbc, 0x2, 0x0, 0x2, 0x3}, 0x40}, [@replay_val={0x10, 0xa, {0x70bd2b, 0x70bd25, 0x7}}, @algo_auth={0x141, 0x1, {{'cbcmac(cast5-generic)\x00'}, 0x7c8, "43bd238d335d347b5bcfcb11e94d094d55ca668076a111f50b71bdce5ea7722efa7543a391efa227aa4b88cc845fb683f91d059182d15f9c47e1e677588b8e068a3bcaf1f0a4422554b6a81e3e2dd9fdcf126a1f218e7340a15e8808337c55782216ce17fae91d9e3d4bd9ce978c9db7bf31dead79782e5a21000a786b6d8bf98a28661afb80db2735148230edcc50473e1e6f6c91da788ac90b155902f21b325e3e37ca43bc5892f0900b1671d3b6e561d70e28ae5fa2c662a68fe375084277d2b6b2674968a93901bb1e9b37fc72a759023d37e4fefaed7361c6ef12f9456f38003b25fa7d74dea5ffffc42e0a3400bede9070ccfe8c99bc"}}, @XFRMA_IF_ID={0x8, 0x1f, 0x3}]}, 0x21c}, 0x1, 0x0, 0x0, 0x4001000}, 0x20000810)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000001180)=0x2000000)
mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet6_sctp(0xa, 0x1, 0x84)
read$FUSE(0xffffffffffffffff, &(0x7f0000000440)={0x2020}, 0x2020)
write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0), 0x12)
r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x1, 0x0)
openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000003b80)={0x2020}, 0x2020)
r5 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="1400000016000b43d27a80648c2594f90924fc60", 0x14}], 0x1, 0x0, 0x0, 0x600}, 0x0)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000003c0)={0x54, 0x0, 0x111, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0xd5, 0xb, 0x9}, {0x6, 0x16, 0xfffa}, {0x5, 0x12, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x804}, 0x20000)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201f37a159b68b0267e030000000000000002ae0000000109022b207a86e69bbae8f98a5c01000000090401001186eee2000905", @ANYRES8=0x0], 0x0)

2m0.603510515s ago: executing program 62 (id=3229):
r0 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102)
r1 = dup(r0)
write$UHID_INPUT(r1, &(0x7f00000013c0)={0x200f, {"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", 0x1000}}, 0x1006)

1m56.956035416s ago: executing program 3 (id=3254):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000580)='htcp', 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
sendto$inet(r0, &(0x7f00000000c0), 0xffffffffffffffef, 0x41020000, 0x0, 0x0)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)

1m55.347062321s ago: executing program 3 (id=3257):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a09040000000000000000020000000900010073797a30000000000900020073797a32000000002c00048028000180080001006e6174001c0002800800024000000002080003400000000a08"], 0x80}}, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}}, 0x20050840)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000000380))
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)
write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000040)=""/2, 0x2}}, 0x120)
r3 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000019340)=ANY=[@ANYRESHEX, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x0)
sendmmsg$alg(r3, &(0x7f00000000c0), 0x492492492492627, 0x0)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r5=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x840)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000000300)=""/102392, 0x18ff8)
write$nci(r0, &(0x7f0000000300)=@NCI_OP_CORE_CONN_CREDITS_NTF={0x0, 0x0, 0x3, 0x6, 0x2, {0x1, [{0x0, 0x48}]}}, 0x6)

1m51.860611983s ago: executing program 3 (id=3261):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x2301, 0x400000000000001})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x20, 0x0, &(0x7f0000002580)=[@request_death, @clear_death], 0x0, 0x0, 0x0})
syz_open_dev$tty20(0xc, 0x4, 0x1)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x1000f)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
openat$userio(0xffffff9c, 0x0, 0x0, 0x0)
read$FUSE(r2, &(0x7f0000000480)={0x2020}, 0x2020)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)

1m36.279948814s ago: executing program 63 (id=3261):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x2301, 0x400000000000001})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x20, 0x0, &(0x7f0000002580)=[@request_death, @clear_death], 0x0, 0x0, 0x0})
syz_open_dev$tty20(0xc, 0x4, 0x1)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x1000f)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
openat$userio(0xffffff9c, 0x0, 0x0, 0x0)
read$FUSE(r2, &(0x7f0000000480)={0x2020}, 0x2020)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)

1m20.202507777s ago: executing program 7 (id=3316):
socket$inet_sctp(0x2, 0x1, 0x84)
socket$inet_sctp(0x2, 0x5, 0x84)
gettid()
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=<r0=>0x0)
prlimit64(r0, 0xe, &(0x7f0000000080)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4)
ioctl$sock_ax25_SIOCDELRT(r1, 0x890c, 0x0)
r2 = landlock_create_ruleset(0x0, 0x0, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000140)={0x100}, 0x0)
connect$ax25(r1, &(0x7f0000000180)={{0x3, @bcast, 0x8}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48)
timer_create(0x3, 0x0, &(0x7f0000000240))
socket$inet6_udplite(0xa, 0x2, 0x88)

1m19.957850368s ago: executing program 7 (id=3317):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x64}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x2000c0d0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_netfilter(0x10, 0x3, 0xc)
bind$unix(0xffffffffffffffff, 0x0, 0x0)
io_uring_setup(0x44a2, &(0x7f0000000000)={0x0, 0xbf12, 0x4000, 0x0, 0x1a})
r3 = syz_open_procfs(0x0, &(0x7f0000000580)='net/fib_trie\x00')
pread64(r3, &(0x7f0000019180)=""/102346, 0x18fca, 0x3)
ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4020565b, &(0x7f0000000180)={0x6, 0x5})
socket$nl_route(0x10, 0x3, 0x0)
clock_adjtime(0x17, 0x0)
ioctl$IOC_PR_RESERVE(r3, 0x401070c9, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x9997)
ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f00000033c0)={0xc, @win={{0x0, 0x0, 0x4701, 0x560}, 0x1, 0x1, 0x0, 0x9, 0x0, 0x4}})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00'})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x401, 0x0, 0x80000, {0x0, 0x0, 0x0, 0x0, 0x2458a}}, 0x20}, 0x1, 0x0, 0x0, 0x20000050}, 0x4000040)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0)

1m14.769329081s ago: executing program 7 (id=3324):
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x4088080, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0)
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x2000})
openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x103040, 0x0)
r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2)
write$binfmt_aout(r3, &(0x7f00000001c0)=ANY=[], 0xc8)

1m9.591519869s ago: executing program 7 (id=3332):
r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0xffffffff, 0xbfe00000}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r0, 0x47f6, 0x0, 0x2, 0x0, 0x300)

1m5.70358264s ago: executing program 7 (id=3336):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x64}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x2000c0d0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_netfilter(0x10, 0x3, 0xc)
bind$unix(0xffffffffffffffff, 0x0, 0x0)
io_uring_setup(0x44a2, &(0x7f0000000000)={0x0, 0xbf12, 0x4000, 0x0, 0x1a})
r3 = syz_open_procfs(0x0, &(0x7f0000000580)='net/fib_trie\x00')
pread64(r3, &(0x7f0000019180)=""/102346, 0x18fca, 0x3)
ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4020565b, &(0x7f0000000180)={0x6, 0x5})
socket$nl_route(0x10, 0x3, 0x0)
clock_adjtime(0x17, 0x0)
ioctl$IOC_PR_RESERVE(r3, 0x401070c9, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x9997)
ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f00000033c0)={0xc, @win={{0x0, 0x0, 0x4701, 0x560}, 0x1, 0x1, 0x0, 0x9, 0x0, 0x4}})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00'})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x401, 0x0, 0x80000, {0x0, 0x0, 0x0, 0x0, 0x2458a}}, 0x20}, 0x1, 0x0, 0x0, 0x20000050}, 0x4000040)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0)

1m1.499394775s ago: executing program 7 (id=3344):
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x4088080, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0)
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x2000})
openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x103040, 0x0)
r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2)
write$binfmt_aout(r3, &(0x7f00000001c0)=ANY=[], 0xc8)

46.02001794s ago: executing program 64 (id=3344):
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x4088080, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0)
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x2000})
openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x103040, 0x0)
r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2)
write$binfmt_aout(r3, &(0x7f00000001c0)=ANY=[], 0xc8)

23.973277754s ago: executing program 4 (id=3426):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$UHID_CREATE(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
socket(0x18, 0x1, 0x2)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000300)=0xff, r3, 0x0, 0x3, 0x1}}, 0x20)

18.073619095s ago: executing program 4 (id=3437):
shmget(0x3, 0x1000, 0x78000000, &(0x7f0000ffd000/0x1000)=nil)

16.967044207s ago: executing program 4 (id=3440):
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'})
r0 = socket(0x2a, 0x2, 0x0)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x500)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r2=>0x0})
socket$inet_sctp(0x2, 0x5, 0x84)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, <r5=>0x0}, 0x2020)
write$FUSE_INIT(r4, &(0x7f0000000080)={0x50, 0x0, r5, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50)
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x18)
syz_fuse_handle_req(r4, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0xfffffffffffffffe, 0x0, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8)
sendto$packet(r1, &(0x7f0000000240)="f2435f0100088000000000850800", 0xe, 0x1, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x14)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x0)
ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'dummy0\x00'})

13.887399059s ago: executing program 8 (id=3448):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$UHID_CREATE(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
socket(0x18, 0x1, 0x2)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000300)=0xff, r3, 0x0, 0x3, 0x1}}, 0x20)

12.436859811s ago: executing program 8 (id=3451):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000280), 0x3)
getsockopt$bt_hci(r0, 0x11a, 0x2, 0x0, 0x0)

11.922390101s ago: executing program 8 (id=3453):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket(0x10, 0x3, 0x0)
getsockopt$sock_buf(r0, 0x1, 0x4c, 0x0, &(0x7f0000000240))

11.585544056s ago: executing program 8 (id=3457):
syz_init_net_socket$ax25(0x3, 0x2, 0xc4)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$OBJ_PIN_PROG(0x6, &(0x7f00000003c0)=@generic={0x0, r0}, 0x18)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
getcwd(0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f00000001c0)=@ccm_128={{0x304}, "e55fc591543217b2", "54e903a9e07110c7cecdf4568b05e8f1", "f2b35c07", "e7f1ebd4ddde66dc"}, 0x28)
openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000000004102, 0x0)
r5 = syz_io_uring_setup(0x52a, &(0x7f0000000440)={0x0, 0x74c2, 0x1, 0x1, 0x1a4, 0x0, r4}, &(0x7f00000004c0)=<r6=>0x0, &(0x7f00000003c0)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0xc000000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x12})
io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0)

10.69711308s ago: executing program 6 (id=3458):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x80000001}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0xe8}}, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)

10.65729365s ago: executing program 4 (id=3460):
recvmmsg(0xffffffffffffffff, &(0x7f0000000500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/200, 0xc8}, 0xfffffffe}], 0x1, 0x2, 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000180)=0x80000001, 0x4)
bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x32, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0x5e}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0)

9.467524561s ago: executing program 6 (id=3463):
r0 = syz_io_uring_setup(0x49f, &(0x7f0000000400)={0x0, 0xe7a9, 0x80, 0x7ffe, 0x40024e}, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2161, 0x1, {0x3}})
io_uring_enter(r0, 0x3d0e, 0x4c1, 0x20, 0x0, 0x0)

8.357655712s ago: executing program 4 (id=3465):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x800, 0x0, 0x8000021e}, &(0x7f00000001c0)=<r3=>0x0, &(0x7f0000000040))
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
io_uring_enter(r2, 0x47fa, 0x0, 0x0, 0x0, 0x0)

8.330659263s ago: executing program 5 (id=3466):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socket$nl_route(0x10, 0x3, 0x0)
bind$can_j1939(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000000)={0x0, 0xea60}, 0x10)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4)
getsockopt$sock_buf(r0, 0x1, 0x3b, 0xffffffffffffffff, &(0x7f0000000000)=0xd)
set_mempolicy_home_node(&(0x7f0000417000/0x2000)=nil, 0x2000, 0x0, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r4, 0x6, 0x3, &(0x7f0000000040), 0x4)

7.874433772s ago: executing program 6 (id=3468):
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
msgget$private(0x0, 0x8)
socket$kcm(0x2d, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104e380102030109021b00010000100009045902019b042a00090582"], 0x0)
syz_usb_control_io$uac1(r3, 0x0, 0x0)
syz_usb_control_io$printer(r3, 0x0, 0x0)
r4 = socket$inet(0x2, 0x80001, 0x84)
listen(r4, 0x3)
r5 = socket$netlink(0x10, 0x3, 0x4)
writev(r5, &(0x7f0000000080)=[{&(0x7f00000000c0)}], 0x1)
syz_usb_control_io$printer(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
r6 = syz_open_dev$sndpcmp(&(0x7f0000000240), 0x1, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r6, 0xc25c4110, &(0x7f0000000980)={0x0, [[0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4], [0x5], [0xfffffffc, 0x5]], '\x00', [{}, {0x0, 0x40000005}, {0xaf5, 0xaf6}, {0x3fc}, {0x0, 0x5b2c5934}, {}, {0x0, 0x3}, {0x10}, {0x0, 0x8}, {0x0, 0xffffff30}, {0x40000}, {0x0, 0x401}], '\x00', 0x0, 0x0, 0x0, 0x2, 0x0, 0x104})
syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)={0x20}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb4, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb4}}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0x138, 0x21, 0x1, 0x0, 0x4, {{@in6=@mcast1, @in=@dev={0xac, 0x14, 0x14, 0x2b}, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0xe8, 0x11, [{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2b, 0x2, 0x0, 0x3501, 0x2, 0x2}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, @in=@local, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3c, 0x0, 0x0, 0x0, 0xa, 0x8}, {@in=@private=0xa010102, @in6=@empty, @in=@local, @in6=@dev={0xfe, 0x80, '\x00', 0x3f}, 0x3c, 0x0, 0x0, 0x3505, 0x2, 0xa}]}]}, 0x138}}, 0x0)

7.021687162s ago: executing program 8 (id=3470):
r0 = socket(0xa, 0x3, 0xff)
setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000040)=0x7, 0x4)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000340)={0x0, 0x312000, 0x800, 0x0, 0x5}, 0x1c)
r3 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x900f, 0x100, 0x4, 0x16e}, &(0x7f0000000400)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x45, 0x0, @fd_index, 0x0, 0x0, 0xcb1a, 0x8})
io_uring_enter(r3, 0x3517, 0x173d, 0x42, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240488c0}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20004890)
ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f0000000140)={0x100, 0x20000004, 0x0, 0x8002, '\x00', '\x00', '\x00', 0x4, 0xfffffffc, 0x103, 0x4, "abd206a1ebd7cedfd17ebd65400ed41b"})
recvmmsg(r0, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0xd}], 0x1, 0x10102, 0x0)

4.9856782s ago: executing program 0 (id=3473):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x30, 0x2, 0x6, 0x401, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x30}}, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/dev_mcast\x00')
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
read$FUSE(r1, 0x0, 0x0)

4.964057602s ago: executing program 5 (id=3474):
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3d, &(0x7f0000000240)={0x1, 0x2}, 0x8)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002c00)=[{{&(0x7f0000000500)=@hci={0x1f, 0xffffffffffffffff, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000040)=[@txtime={{0x14, 0x1, 0x3d, 0x1000000000002}}], 0x14}}], 0x1, 0x8845)

4.702383682s ago: executing program 0 (id=3475):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$UHID_CREATE(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
socket(0x18, 0x1, 0x2)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000300)=0xff, r5, 0x0, 0x3, 0x1}}, 0x20)

4.581844852s ago: executing program 5 (id=3476):
recvmmsg(0xffffffffffffffff, &(0x7f0000000500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/200, 0xc8}, 0xfffffffe}], 0x1, 0x2, 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000180)=0x80000001, 0x4)
bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x32, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0x5e}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0)

4.306070265s ago: executing program 5 (id=3477):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x88031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
semtimedop(0x0, &(0x7f0000000040)=[{}], 0x1f4, &(0x7f0000000140)={0x0, 0x3938700})

3.218410926s ago: executing program 5 (id=3478):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
close(r0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a440)=[{{&(0x7f00000003c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40001}}], 0x1, 0x40048c0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getsockopt$rose(0xffffffffffffffff, 0x104, 0x4, 0x0, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000)
writev(0xffffffffffffffff, &(0x7f0000000400), 0x0)
r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r2, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8)
semctl$IPC_SET(0x0, 0x0, 0x1, 0x0)
r3 = open_tree(0xffffffffffffff9c, 0x0, 0x9901)
mount_setattr(r3, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000000080)={0xb, 0x0, 0x40000}, 0x20)
recvmsg(0xffffffffffffffff, 0x0, 0x104)
getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0xc)

3.126153281s ago: executing program 0 (id=3479):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb", 0x30}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c48b3072092c483271361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f5312", 0x95}], 0x2}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641e5", 0xb1}, {&(0x7f0000001300)="e0cda6472d1ccfb4d1d46bf348a3b7ff9e5b6b3e30ef2266c86a085e37271763c50968fe2e2eb13b9472381bade936f9a85e26aac6ebd21115f086751d870434cf07dbd92e0ea2322f163473dad24cffe6d23ffa95b04a2653e8a7c9ab042ea1b0bf4bde850bc9f6147f1a48e86eec8223fd33fc83374393fbd08a3281a268aff6688fb41eecbdd328ef0f", 0x8b}], 0x2}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a29962fd5daa4fc9c515a1c3ee25ace1a9948c24b277d0c9c46f948f8a3f98b1a18eff685b7296457ba31632fea4d8f817817026eeb76460dad4f677de73043600e7", 0xec}, {&(0x7f0000000740)="b176d469f44ff7e206a24a3a5f3a112da355134ae64fde53dc0e681885ead332aa45811c0070066fb0e5cf5a9a4965475953e2a028f7dd4a6ed8b33465fd161cd8dce309f6be32236cf8e07a5506acb719304ebc71b2a3756cb0832d928d432d1506d368e2b001a8b392dad3dc2916376732339a20db54405b716ea85c9a4d8f232138345947e47c80f23fcac5422ee2fcf8bf7ef306ed29b3045ee6f25c76fbc9e85a5bdf3be0a386a5afc9b5b11cece3aeed4bf8daf0394e72f577", 0xbc}], 0x2}}], 0x3, 0x2090)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

2.482851576s ago: executing program 0 (id=3480):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

2.319674624s ago: executing program 4 (id=3481):
syz_init_net_socket$ax25(0x3, 0x2, 0xc4)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$OBJ_PIN_PROG(0x6, &(0x7f00000003c0)=@generic={0x0, r0}, 0x18)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
getcwd(0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f00000001c0)=@ccm_128={{0x304}, "e55fc591543217b2", "54e903a9e07110c7cecdf4568b05e8f1", "f2b35c07", "e7f1ebd4ddde66dc"}, 0x28)
openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000000004102, 0x0)
r5 = syz_io_uring_setup(0x52a, &(0x7f0000000440)={0x0, 0x74c2, 0x1, 0x1, 0x1a4, 0x0, r4}, &(0x7f00000004c0)=<r6=>0x0, &(0x7f00000003c0)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0xc000000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x12})
io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0)

2.08792095s ago: executing program 0 (id=3482):
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x129942, 0x18)
socket$inet_udp(0x2, 0x2, 0x0)
socket(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
getpid()
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0x1bf5f000)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0))
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0)
fcntl$setlease(r0, 0x400, 0x1)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
fcntl$lock(r2, 0x25, &(0x7f0000000040)={0x1, 0x0, 0x200000000008b92, 0x6})
fcntl$lock(r2, 0x25, &(0x7f00000001c0)={0x0, 0x0, 0x10001, 0x6})
fcntl$lock(r2, 0x24, &(0x7f0000000080)={0x2, 0x1, 0xbb7, 0x800})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20)
openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x20040, 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x22060, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x40000, 0x52)

1.897954442s ago: executing program 6 (id=3483):
openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, 0x0, 0x0)
io_uring_setup(0x44a2, &(0x7f0000000300)={0x0, 0xbf12, 0x4000, 0x0, 0x1a})
pread64(0xffffffffffffffff, &(0x7f0000019180)=""/102346, 0x18fca, 0x3)
mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='erofs\x00', 0x0, 0x0)

1.333826098s ago: executing program 6 (id=3484):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x40000000000029a, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, 0x0, 0x0)
ftruncate(r5, 0x200004)
sendfile(r4, r5, 0x0, 0x80001d00c0d1)

842.295882ms ago: executing program 5 (id=3485):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socket$nl_route(0x10, 0x3, 0x0)
bind$can_j1939(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000000)={0x0, 0xea60}, 0x10)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4)
getsockopt$sock_buf(r0, 0x1, 0x3b, 0xffffffffffffffff, &(0x7f0000000000)=0xd)
set_mempolicy_home_node(&(0x7f0000417000/0x2000)=nil, 0x2000, 0x0, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r4, 0x6, 0x3, &(0x7f0000000040), 0x4)

132.057008ms ago: executing program 6 (id=3486):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x30, 0x2, 0x6, 0x401, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x30}}, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/dev_mcast\x00')
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
read$FUSE(r1, 0x0, 0x0)

41.827557ms ago: executing program 0 (id=3487):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000280)=@req3={0x10000, 0xffffffff, 0x100, 0x100, 0x6816, 0x0, 0x12}, 0x1c)

0s ago: executing program 8 (id=3488):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x5c}}, 0x8000)

kernel console output (not intermixed with test programs):

 team_slave_0 added
[ 1561.904388][T21717] team0: Port device team_slave_1 added
[ 1562.002455][T21558] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1562.045142][   T13] bridge_slave_1: left allmulticast mode
[ 1562.071327][   T13] bridge_slave_1: left promiscuous mode
[ 1562.081439][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1562.112475][   T13] bridge_slave_0: left allmulticast mode
[ 1562.145105][   T13] bridge_slave_0: left promiscuous mode
[ 1562.163105][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1562.630050][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1562.676842][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1562.708141][   T13] bond0 (unregistering): Released all slaves
[ 1562.941178][T21717] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1562.959693][T21717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1563.061705][T21717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1563.101042][T21717] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1563.108033][T21717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1563.208846][T21717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1563.277327][T21558] 8021q: adding VLAN 0 to HW filter on device team0
[ 1563.321472][   T13] hsr_slave_0: left promiscuous mode
[ 1563.347292][   T13] hsr_slave_1: left promiscuous mode
[ 1563.392030][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1563.420692][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1564.579403][   T13] team0 (unregistering): Port device team_slave_1 removed
[ 1564.613526][   T13] team0 (unregistering): Port device team_slave_0 removed
[ 1564.866559][T18566] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1564.873803][T18566] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1565.016585][T21558] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1565.027386][T21558] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1565.120690][T21717] hsr_slave_0: entered promiscuous mode
[ 1565.142324][T21717] hsr_slave_1: entered promiscuous mode
[ 1565.163764][T21717] debugfs: 'hsr0' already exists in 'hsr'
[ 1565.169624][T21717] Cannot create hsr debugfs directory
[ 1565.913291][T18566] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1565.920532][T18566] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1567.510921][ T5919] usb 7-1: new full-speed USB device number 21 using dummy_hcd
[ 1567.807091][T21558] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1567.825060][ T5919] usb 7-1: device descriptor read/64, error -71
[ 1568.183897][ T5919] usb 7-1: new full-speed USB device number 22 using dummy_hcd
[ 1568.809693][T21663] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1569.776367][ T5919] usb 7-1: device descriptor read/64, error -71
[ 1569.901350][ T5919] usb usb7-port1: attempt power cycle
[ 1570.250912][ T5919] usb 7-1: new full-speed USB device number 23 using dummy_hcd
[ 1570.419452][ T5919] usb 7-1: device descriptor read/8, error -71
[ 1570.482153][T21663] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1570.544153][T21663] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1570.609295][T21663] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1571.734230][T21558] veth0_vlan: entered promiscuous mode
[ 1571.766029][T21558] veth1_vlan: entered promiscuous mode
[ 1572.570265][T21558] veth0_macvtap: entered promiscuous mode
[ 1572.649571][T21558] veth1_macvtap: entered promiscuous mode
[ 1572.728688][T21663] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1572.813352][T21558] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1572.890663][T21558] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1572.904743][T21663] 8021q: adding VLAN 0 to HW filter on device team0
[ 1572.991034][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1573.003055][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1573.033236][  T148] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1573.040431][  T148] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1573.156912][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1573.184180][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1573.242811][  T148] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1573.250157][  T148] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1573.385595][T21717] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1574.242090][T21717] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1574.414508][T21717] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1574.457435][T21717] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1574.580873][ T9351] usb 7-1: new full-speed USB device number 25 using dummy_hcd
[ 1574.592415][ T6696] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1574.621400][ T6696] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1574.731534][ T9351] usb 7-1: device descriptor read/64, error -71
[ 1575.081495][ T9351] usb 7-1: new full-speed USB device number 26 using dummy_hcd
[ 1575.242065][T18566] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1575.299092][T18566] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1575.340971][ T9351] usb 7-1: device descriptor read/64, error -71
[ 1575.449478][T21717] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1575.466994][ T9351] usb usb7-port1: attempt power cycle
[ 1576.593305][T21717] 8021q: adding VLAN 0 to HW filter on device team0
[ 1577.022868][   T58] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1577.030129][   T58] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1577.043341][ T9351] usb 7-1: new full-speed USB device number 27 using dummy_hcd
[ 1577.115250][T20637] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1577.122525][T20637] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1577.182034][ T9351] usb 7-1: device descriptor read/8, error -71
[ 1577.835448][T21717] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1578.007269][T21663] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1578.771333][T21717] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1579.500992][T22062] ieee802154 phy0 wpan0: encryption failed: -22
[ 1580.349904][T21717] veth0_vlan: entered promiscuous mode
[ 1580.429174][T21717] veth1_vlan: entered promiscuous mode
[ 1580.593026][T21717] veth0_macvtap: entered promiscuous mode
[ 1580.643081][T21717] veth1_macvtap: entered promiscuous mode
[ 1580.765887][T21717] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1580.825217][T21717] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1580.932605][   T58] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1580.998631][T21663] veth0_vlan: entered promiscuous mode
[ 1581.092756][   T58] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1581.707247][ T1147] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1581.827180][ T1147] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1581.922919][T21663] veth1_vlan: entered promiscuous mode
[ 1581.968910][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1582.011095][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1582.206774][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1582.239175][T21663] veth0_macvtap: entered promiscuous mode
[ 1582.246281][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1582.286513][T21663] veth1_macvtap: entered promiscuous mode
[ 1582.356482][T21663] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1582.659915][T22096] erofs (device nbd1): cannot find valid erofs superblock
[ 1582.800941][T21663] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1583.058147][ T6695] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1583.116612][ T6695] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1583.184207][ T6695] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1583.224997][ T6695] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1583.428930][  T999] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1583.437517][  T999] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1583.557281][   T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1583.589175][   T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1583.634510][T20643] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[ 1583.971737][T22114] ieee802154 phy0 wpan0: encryption failed: -22
[ 1584.741310][T20643] usb 3-1: Using ep0 maxpacket: 8
[ 1585.651189][T20643] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64
[ 1585.660298][T20643] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1585.672299][T20643] usb 3-1: Product: syz
[ 1585.676491][T20643] usb 3-1: Manufacturer: syz
[ 1585.682729][T20643] usb 3-1: SerialNumber: syz
[ 1585.692433][T20643] usb 3-1: config 0 descriptor??
[ 1585.801886][T20643] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state.
[ 1585.809922][T20643] pctv452e: pctv452e_power_ctrl: 1
[ 1585.809922][T20643] 
[ 1585.895482][T20643] usb 3-1: selecting invalid altsetting 3
[ 1585.989319][T20643] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22
[ 1585.989319][T20643] 
[ 1586.470812][T20643] dvb-usb: bulk message failed: -22 (5/0)
[ 1586.482444][T20643] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1586.504809][T20643] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600)
[ 1586.543881][T20643] usb 3-1: media controller created
[ 1586.568139][T20643] dvb-usb: bulk message failed: -22 (8/0)
[ 1586.584285][T20643] pctv452e: I2C error -22; AA 01  A0 01 14 -> aa 01 31 04 a0 01 14
[ 1587.960781][T20643] dvb-usb: MAC address reading failed.
[ 1587.994838][T20643] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1588.123789][T20643] DVB: Unable to find symbol stb0899_attach()
[ 1588.130156][T20643] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600'
[ 1589.310809][T20643] rc_core: IR keymap rc-tt-1500 not found
[ 1589.347206][T20643] Registered IR keymap rc-empty
[ 1589.815809][T20643] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0
[ 1589.831775][T20643] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input40
[ 1589.874579][T20643] dvb-usb: schedule remote query interval to 100 msecs.
[ 1589.894653][T20643] pctv452e: pctv452e_power_ctrl: 0
[ 1589.894653][T20643] 
[ 1589.910576][T20643] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected.
[ 1589.953514][T20643] usb 3-1: USB disconnect, device number 25
[ 1590.491835][T22170] ieee802154 phy0 wpan0: encryption failed: -22
[ 1591.188624][T20643] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected.
[ 1595.255453][T22195] netlink: 212340 bytes leftover after parsing attributes in process `syz.7.2733'.
[ 1595.296458][T22195] openvswitch: netlink: Key 0 has unexpected len 4 expected 0
[ 1595.741161][ T6060] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[ 1596.754961][ T6060] usb 3-1: config 0 interface 0 has no altsetting 0
[ 1596.793898][ T6060] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75
[ 1596.865629][ T6060] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1596.923840][ T6060] usb 3-1: config 0 descriptor??
[ 1598.200825][T22195] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1598.872668][ T6060] video4linux radio48: keene_cmd_main failed (-71)
[ 1598.951550][ T6060] radio-keene 3-1:0.0: V4L2 device registered as radio48
[ 1599.059135][ T6060] usb 3-1: USB disconnect, device number 26
[ 1599.547281][T22240] ieee802154 phy0 wpan0: encryption failed: -22
[ 1601.543960][T22250] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1602.008739][T22258] 9p: Bad value for 'rfdno'
[ 1602.261539][T10437] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci7/hci7:201'
[ 1602.271502][T10437] CPU: 0 UID: 0 PID: 10437 Comm: kworker/u9:1 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1602.271538][T10437] Tainted: [L]=SOFTLOCKUP
[ 1602.271547][T10437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[ 1602.271564][T10437] Workqueue: hci7 hci_rx_work
[ 1602.271730][T10437] Call Trace:
[ 1602.271771][T10437]  <TASK>
[ 1602.271803][T10437]  dump_stack_lvl+0xe8/0x150
[ 1602.271911][T10437]  sysfs_create_dir_ns+0x271/0x2a0
[ 1602.271965][T10437]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1602.272035][T10437]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[ 1602.272074][T10437]  ? do_raw_spin_unlock+0xf5/0x210
[ 1602.272125][T10437]  kobject_add_internal+0x62b/0xd00
[ 1602.272225][T10437]  kobject_add+0x163/0x240
[ 1602.272267][T10437]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1602.272305][T10437]  ? __pfx_kobject_add+0x10/0x10
[ 1602.272337][T10437]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1602.272367][T10437]  ? _raw_spin_unlock+0x28/0x50
[ 1602.272442][T10437]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1602.272476][T10437]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1602.272506][T10437]  ? get_device_parent+0x366/0x3a0
[ 1602.272593][T10437]  device_add+0x408/0xb70
[ 1602.272629][T10437]  hci_conn_add_sysfs+0xd5/0x210
[ 1602.272683][T10437]  le_conn_complete_evt+0xf1d/0x1430
[ 1602.272760][T10437]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1602.272801][T10437]  ? __pfx_le_conn_complete_evt+0x10/0x10
[ 1602.272835][T10437]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[ 1602.272865][T10437]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1602.272898][T10437]  ? __pfx___mutex_lock+0x10/0x10
[ 1602.272929][T10437]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1602.272959][T10437]  ? skb_pull_data+0xfb/0x200
[ 1602.273061][T10437]  hci_le_conn_complete_evt+0x187/0x470
[ 1602.273105][T10437]  hci_event_packet+0x7af/0x12c0
[ 1602.273157][T10437]  ? __pfx_hci_le_meta_evt+0x10/0x10
[ 1602.273191][T10437]  ? __pfx_hci_event_packet+0x10/0x10
[ 1602.273226][T10437]  ? kcov_remote_start+0x49a/0x7a0
[ 1602.273286][T10437]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1602.273315][T10437]  ? hci_send_to_monitor+0xe2/0x590
[ 1602.273373][T10437]  hci_rx_work+0x3ee/0x1030
[ 1602.273403][T10437]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1602.273438][T10437]  ? process_scheduled_works+0xa25/0x1830
[ 1602.273482][T10437]  process_scheduled_works+0xb02/0x1830
[ 1602.273549][T10437]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1602.273589][T10437]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1602.273619][T10437]  ? assign_work+0x3d5/0x5e0
[ 1602.273659][T10437]  worker_thread+0xa50/0xfc0
[ 1602.273697][T10437]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1602.273744][T10437]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1602.273786][T10437]  kthread+0x388/0x470
[ 1602.273821][T10437]  ? __pfx_worker_thread+0x10/0x10
[ 1602.273854][T10437]  ? __pfx_kthread+0x10/0x10
[ 1602.273881][T10437]  ret_from_fork+0x51e/0xb90
[ 1602.273925][T10437]  ? __pfx_ret_from_fork+0x10/0x10
[ 1602.273956][T10437]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1602.273986][T10437]  ? __switch_to+0xc7d/0x1450
[ 1602.274029][T10437]  ? __pfx_kthread+0x10/0x10
[ 1602.274055][T10437]  ret_from_fork_asm+0x1a/0x30
[ 1602.274114][T10437]  </TASK>
[ 1602.274183][T10437] kobject: kobject_add_internal failed for hci7:201 with -EEXIST, don't try to register things with the same name in the same directory.
[ 1602.634009][T10437] Bluetooth: hci7: failed to register connection device
[ 1604.585516][T22275] netlink: 212340 bytes leftover after parsing attributes in process `syz.0.2751'.
[ 1604.660668][T22275] openvswitch: netlink: Key 0 has unexpected len 4 expected 0
[ 1605.970647][T22290] qrtr: Invalid version 47
[ 1607.301748][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[ 1607.308856][T22272] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1607.308910][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[ 1607.871293][ T5928] usb 7-1: new high-speed USB device number 29 using dummy_hcd
[ 1608.068469][T22301] input: syz0 as /devices/virtual/input/input41
[ 1608.117641][ T5928] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1608.163898][ T5928] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1608.262612][ T5928] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1608.347187][ T5928] usb 7-1: config 0 descriptor??
[ 1608.428831][ T5928] pwc: Askey VC010 type 2 USB webcam detected.
[ 1608.894506][ T5928] pwc: recv_control_msg error -32 req 02 val 2b00
[ 1608.923758][ T5928] pwc: recv_control_msg error -32 req 02 val 2700
[ 1608.982707][ T5928] pwc: recv_control_msg error -32 req 02 val 2c00
[ 1609.036431][ T5928] pwc: recv_control_msg error -32 req 04 val 1000
[ 1609.249895][ T5928] pwc: recv_control_msg error -32 req 04 val 1300
[ 1609.970863][ T5928] pwc: recv_control_msg error -32 req 04 val 1400
[ 1610.025639][ T5928] pwc: recv_control_msg error -32 req 02 val 2000
[ 1610.093572][ T5928] pwc: recv_control_msg error -32 req 02 val 2100
[ 1610.159570][ T5928] pwc: recv_control_msg error -32 req 04 val 1500
[ 1610.217449][ T5928] pwc: recv_control_msg error -32 req 02 val 2500
[ 1610.266879][ T5928] pwc: recv_control_msg error -32 req 02 val 2400
[ 1610.321910][ T5928] pwc: recv_control_msg error -32 req 02 val 2600
[ 1610.801197][ T5928] pwc: recv_control_msg error -32 req 02 val 2900
[ 1610.846160][ T5928] pwc: recv_control_msg error -32 req 02 val 2800
[ 1610.951049][T18962] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[ 1611.104200][ T5928] pwc: recv_control_msg error -71 req 04 val 1200
[ 1611.123131][ T5928] pwc: Registered as video103.
[ 1611.129987][ T5928] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input42
[ 1611.141640][T18962] usb 2-1: Using ep0 maxpacket: 16
[ 1611.154564][T18962] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1611.199703][T18962] usb 2-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1611.297999][ T5928] usb 7-1: USB disconnect, device number 29
[ 1611.341566][T18962] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1611.427795][T18962] usb 2-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20
[ 1611.445291][T18962] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1611.532582][T18962] usb 2-1: Product: syz
[ 1611.553653][T18962] usb 2-1: Manufacturer: syz
[ 1611.605547][T18962] usb 2-1: SerialNumber: syz
[ 1611.659593][T18962] usb 2-1: config 0 descriptor??
[ 1612.011567][T22333] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1612.878531][T18962] imon:imon_find_endpoints: no valid input (IR) endpoint found
[ 1612.910350][T18962] imon 2-1:0.0: unable to initialize intf0, err -19
[ 1613.978329][T18962] imon:imon_probe: failed to initialize context!
[ 1614.029863][T18962] imon 2-1:0.0: unable to register, err -19
[ 1614.070397][T18962] usb 2-1: USB disconnect, device number 25
[ 1614.858673][T22358] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2771'.
[ 1616.315686][T20656] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[ 1616.585330][T20656] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1616.651981][T20656] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1616.718619][T20656] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1616.752418][T20656] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1616.800069][T20656] usb 3-1: SerialNumber: syz
[ 1616.845658][T22387] fuse: Unknown parameter '0x0000000000000003'
[ 1617.190824][T22390] netlink: 'syz.5.2757': attribute type 1 has an invalid length.
[ 1617.200591][T22390] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2757'.
[ 1617.816380][T20656] usb 3-1: 0:2 : does not exist
[ 1618.222026][T20656] usb 3-1: USB disconnect, device number 27
[ 1618.563168][T22398] isofs_fill_super: bread failed, dev=nbd6, iso_blknum=16, block=32
[ 1620.007968][T21453] udevd[21453]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1620.191100][   T24] usb 6-1: new full-speed USB device number 22 using dummy_hcd
[ 1620.350794][ T5928] usb 7-1: new high-speed USB device number 30 using dummy_hcd
[ 1620.765974][ T5928] usb 7-1: Using ep0 maxpacket: 16
[ 1620.813498][ T5928] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1620.848929][ T5928] usb 7-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1621.381304][T22410] overlayfs: failed to resolve './file1': -2
[ 1621.527015][ T5928] usb 7-1: config 0 interface 0 has no altsetting 0
[ 1622.501080][   T24] usb 6-1: device descriptor read/64, error -71
[ 1622.549618][ T5928] usb 7-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20
[ 1622.813528][ T5928] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1622.851633][ T5928] usb 7-1: Product: syz
[ 1623.051059][ T5928] usb 7-1: Manufacturer: syz
[ 1623.084021][ T5928] usb 7-1: SerialNumber: syz
[ 1623.154497][ T5928] usb 7-1: config 0 descriptor??
[ 1623.205638][ T5928] usb 7-1: can't set config #0, error -71
[ 1623.268161][ T5928] usb 7-1: USB disconnect, device number 30
[ 1623.351717][T22418] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1625.739410][T18962] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[ 1625.765632][T10437] Bluetooth: hci0: Malformed Event: 0x2f
[ 1625.790863][ T5928] usb 7-1: new high-speed USB device number 31 using dummy_hcd
[ 1625.912974][T18962] usb 6-1: Using ep0 maxpacket: 8
[ 1625.940628][T18962] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1626.062252][T22434] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000)
[ 1626.238470][T18962] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1626.332080][T18962] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1626.351070][T18962] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1626.374417][ T5928] usb 7-1: config 0 interface 0 has no altsetting 0
[ 1626.391081][T18962] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1626.400225][ T5928] usb 7-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75
[ 1626.440662][T18962] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1626.449620][ T5928] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1626.501967][ T5928] usb 7-1: config 0 descriptor??
[ 1626.807140][T22440] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2789'.
[ 1627.151383][ T5928] video4linux radio48: keene_cmd_main failed (-71)
[ 1627.158023][ T5928] radio-keene 7-1:0.0: V4L2 device registered as radio48
[ 1627.200652][ T5928] usb 7-1: USB disconnect, device number 31
[ 1627.355746][T18962] usb 6-1: GET_CAPABILITIES returned 0
[ 1627.390049][T18962] usbtmc 6-1:16.0: can't read capabilities
[ 1627.704502][ T5919] usb 6-1: USB disconnect, device number 24
[ 1630.090938][T18962] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[ 1630.158716][T22483] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1631.984812][ T5928] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[ 1632.399424][T18962] usb 2-1: Using ep0 maxpacket: 16
[ 1632.433178][T18962] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1632.466224][T18962] usb 2-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1632.521805][   T24] usb 8-1: new full-speed USB device number 23 using dummy_hcd
[ 1632.523421][T18962] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1632.547810][ T5928] usb 1-1: config 0 has an invalid descriptor of length 113, skipping remainder of the config
[ 1632.571427][ T5928] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 108, changing to 7
[ 1632.612300][T18962] usb 2-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20
[ 1632.623896][ T5928] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 25965, setting to 1024
[ 1632.645235][T18962] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1632.670251][T18962] usb 2-1: Product: syz
[ 1632.678471][ T5928] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1632.680766][ T6060] usb 6-1: new full-speed USB device number 25 using dummy_hcd
[ 1632.703152][T18962] usb 2-1: Manufacturer: syz
[ 1632.716141][T18962] usb 2-1: SerialNumber: syz
[ 1632.733138][ T5928] usb 1-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94
[ 1632.761009][T18962] usb 2-1: config 0 descriptor??
[ 1632.772519][ T5928] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1632.813064][T18962] usb 2-1: can't set config #0, error -71
[ 1632.835998][ T5928] usb 1-1: config 0 descriptor??
[ 1632.850900][ T6060] usb 6-1: device descriptor read/64, error -71
[ 1632.907970][T18962] usb 2-1: USB disconnect, device number 26
[ 1632.987641][   T30] audit: type=1326 audit(1773373996.476:1237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22503 comm="syz.6.2808" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f99b059c799 code=0x0
[ 1633.233168][   T24] usb 8-1: new high-speed USB device number 24 using dummy_hcd
[ 1633.311208][ T6060] usb 6-1: new full-speed USB device number 26 using dummy_hcd
[ 1633.444809][T22508] 9pnet_virtio: no channels available for device syz
[ 1634.287417][T20643] usb 1-1: USB disconnect, device number 14
[ 1635.357842][   T24] usb 8-1: config 0 interface 0 has no altsetting 0
[ 1635.403098][   T24] usb 8-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75
[ 1635.647125][   T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1635.725910][   T24] usb 8-1: config 0 descriptor??
[ 1635.773702][   T24] usb 8-1: can't set config #0, error -71
[ 1635.804159][   T24] usb 8-1: USB disconnect, device number 24
[ 1635.882593][T18962] usb 7-1: new high-speed USB device number 32 using dummy_hcd
[ 1636.905125][T18962] usb 7-1: Using ep0 maxpacket: 32
[ 1636.946320][T18962] usb 7-1: config index 0 descriptor too short (expected 156, got 27)
[ 1636.996551][T18962] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1637.082668][T18962] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[ 1637.159065][T18962] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[ 1638.167857][T18962] usb 7-1: Product: syz
[ 1638.172417][T18962] usb 7-1: Manufacturer: syz
[ 1638.177100][T18962] usb 7-1: SerialNumber: syz
[ 1639.111323][T18962] usb 7-1: config 0 descriptor??
[ 1639.186864][T18962] usb 7-1: can't set config #0, error -71
[ 1639.368735][T18962] usb 7-1: USB disconnect, device number 32
[ 1642.942694][T22550] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1642.954062][T20643] usb 1-1: new full-speed USB device number 15 using dummy_hcd
[ 1643.350913][T20643] usb 1-1: device descriptor read/64, error -71
[ 1643.590788][T20643] usb 1-1: new full-speed USB device number 16 using dummy_hcd
[ 1643.773577][T20643] usb 1-1: device descriptor read/64, error -71
[ 1644.525447][T20643] usb usb1-port1: attempt power cycle
[ 1645.780940][T18962] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[ 1646.070002][T18962] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1646.079581][T18962] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75
[ 1646.091146][T10437] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201'
[ 1646.101821][T10437] CPU: 0 UID: 0 PID: 10437 Comm: kworker/u9:1 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1646.101864][T10437] Tainted: [L]=SOFTLOCKUP
[ 1646.101872][T10437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[ 1646.101885][T10437] Workqueue: hci4 hci_rx_work
[ 1646.101912][T10437] Call Trace:
[ 1646.101921][T10437]  <TASK>
[ 1646.101930][T10437]  dump_stack_lvl+0xe8/0x150
[ 1646.101962][T10437]  sysfs_create_dir_ns+0x271/0x2a0
[ 1646.101991][T10437]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1646.102021][T10437]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[ 1646.102051][T10437]  ? do_raw_spin_unlock+0xf5/0x210
[ 1646.102076][T10437]  kobject_add_internal+0x62b/0xd00
[ 1646.102111][T10437]  kobject_add+0x163/0x240
[ 1646.102135][T10437]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1646.102163][T10437]  ? __pfx_kobject_add+0x10/0x10
[ 1646.102187][T10437]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1646.102210][T10437]  ? _raw_spin_unlock+0x28/0x50
[ 1646.102239][T10437]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1646.102265][T10437]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1646.102287][T10437]  ? get_device_parent+0x366/0x3a0
[ 1646.102316][T10437]  device_add+0x408/0xb70
[ 1646.102348][T10437]  hci_conn_add_sysfs+0xd5/0x210
[ 1646.102372][T10437]  le_conn_complete_evt+0xf1d/0x1430
[ 1646.102400][T10437]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1646.102432][T10437]  ? __pfx_le_conn_complete_evt+0x10/0x10
[ 1646.102458][T10437]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[ 1646.102480][T10437]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1646.102506][T10437]  ? __pfx___mutex_lock+0x10/0x10
[ 1646.102529][T10437]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1646.102552][T10437]  ? skb_pull_data+0xfb/0x200
[ 1646.102583][T10437]  hci_le_conn_complete_evt+0x187/0x470
[ 1646.102616][T10437]  hci_event_packet+0x7af/0x12c0
[ 1646.102644][T10437]  ? __pfx_hci_le_meta_evt+0x10/0x10
[ 1646.102670][T10437]  ? __pfx_hci_event_packet+0x10/0x10
[ 1646.102697][T10437]  ? kcov_remote_start+0x49a/0x7a0
[ 1646.102730][T10437]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1646.102752][T10437]  ? hci_send_to_monitor+0xe2/0x590
[ 1646.102784][T10437]  hci_rx_work+0x3ee/0x1030
[ 1646.102810][T10437]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1646.102846][T10437]  ? process_scheduled_works+0xa25/0x1830
[ 1646.102886][T10437]  process_scheduled_works+0xb02/0x1830
[ 1646.102940][T10437]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1646.102971][T10437]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1646.102994][T10437]  ? assign_work+0x3d5/0x5e0
[ 1646.103024][T10437]  worker_thread+0xa50/0xfc0
[ 1646.103052][T10437]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1646.103088][T10437]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1646.103119][T10437]  kthread+0x388/0x470
[ 1646.103139][T10437]  ? __pfx_worker_thread+0x10/0x10
[ 1646.103164][T10437]  ? __pfx_kthread+0x10/0x10
[ 1646.103184][T10437]  ret_from_fork+0x51e/0xb90
[ 1646.103213][T10437]  ? __pfx_ret_from_fork+0x10/0x10
[ 1646.103238][T10437]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1646.103260][T10437]  ? __switch_to+0xc7d/0x1450
[ 1646.103286][T10437]  ? __pfx_kthread+0x10/0x10
[ 1646.103307][T10437]  ret_from_fork_asm+0x1a/0x30
[ 1646.103393][T10437]  </TASK>
[ 1646.103926][T10437] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory.
[ 1646.424944][T10437] Bluetooth: hci4: failed to register connection device
[ 1646.437963][T18962] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1646.459342][T18962] usb 2-1: config 0 descriptor??
[ 1646.883676][T18962] video4linux radio48: keene_cmd_main failed (-71)
[ 1646.950231][T18962] radio-keene 2-1:0.0: V4L2 device registered as radio48
[ 1647.024603][T18962] usb 2-1: USB disconnect, device number 27
[ 1649.203367][T22599] md: md2 stopped.
[ 1649.256613][T22602] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[ 1649.329982][T22602] block device autoloading is deprecated and will be removed.
[ 1649.914771][T20390] Bluetooth: hci1: command 0x0406 tx timeout
[ 1651.860781][T18962] usb 8-1: new full-speed USB device number 25 using dummy_hcd
[ 1652.046367][T18962] usb 8-1: device descriptor read/64, error -71
[ 1652.080084][   T24] usb 7-1: new high-speed USB device number 33 using dummy_hcd
[ 1652.555816][T18962] usb 8-1: new full-speed USB device number 26 using dummy_hcd
[ 1652.720830][T18962] usb 8-1: device descriptor read/64, error -71
[ 1652.831218][T18962] usb usb8-port1: attempt power cycle
[ 1652.853973][   T24] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1652.908767][   T24] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1652.993694][   T24] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1653.069631][   T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1653.147361][   T24] usb 7-1: SerialNumber: syz
[ 1653.191088][T18962] usb 8-1: new full-speed USB device number 27 using dummy_hcd
[ 1653.587362][T18962] usb 8-1: device descriptor read/8, error -71
[ 1654.037618][   T24] usb 7-1: 0:2 : does not exist
[ 1654.073628][   T24] usb 7-1: unit 5 not found!
[ 1654.328060][   T24] usb 7-1: USB disconnect, device number 33
[ 1654.433350][T21453] udevd[21453]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1654.825957][T22671] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2850'.
[ 1655.111191][T20643] usb 3-1: new full-speed USB device number 28 using dummy_hcd
[ 1655.313489][T20643] usb 3-1: not running at top speed; connect to a high speed hub
[ 1655.843669][T20643] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 1656.040782][T20643] usb 3-1: config 1 has no interface number 0
[ 1656.060866][T20643] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[ 1656.091924][T20643] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 78, changing to 4
[ 1656.118921][T20643] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice= 0.40
[ 1656.601154][T20643] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1656.661028][T20643] usb 3-1: Product: syz
[ 1656.681289][T20643] usb 3-1: Manufacturer: syz
[ 1656.696228][T20643] usb 3-1: SerialNumber: syz
[ 1656.861157][ T5928] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[ 1657.035502][T20643] usb 3-1: 2:1: invalid format type 0x1002 is detected, processed as PCM
[ 1657.061488][T20643] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[ 1657.084737][ T5928] usb 2-1: too many endpoints for config 1 interface 0 altsetting 13: 255, using maximum allowed: 30
[ 1657.158689][ T5928] usb 2-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[ 1657.271618][ T5928] usb 2-1: config 1 interface 0 has no altsetting 0
[ 1657.313903][ T5928] usb 2-1: string descriptor 0 read error: -22
[ 1657.322536][ T5928] usb 2-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.40
[ 1657.340536][T20643] usb 3-1: USB disconnect, device number 28
[ 1657.354361][ T5928] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1658.225679][T20643] usb 7-1: new high-speed USB device number 34 using dummy_hcd
[ 1658.233958][ T5928] hid_parser_main: 5 callbacks suppressed
[ 1658.233978][ T5928] hid-udraw 0003:20D6:CB17.0005: unknown main item tag 0x0
[ 1658.282629][ T5928] hid-udraw 0003:20D6:CB17.0005: unknown main item tag 0x0
[ 1658.305584][ T5928] hid-udraw 0003:20D6:CB17.0005: unknown main item tag 0x0
[ 1658.335061][ T5928] hid-udraw 0003:20D6:CB17.0005: unknown main item tag 0x0
[ 1658.409743][ T5928] hid-udraw 0003:20D6:CB17.0005: unknown main item tag 0x0
[ 1658.430309][T20643] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1658.494657][ T5928] hid-udraw 0003:20D6:CB17.0005: unknown main item tag 0x0
[ 1658.516869][T20643] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1658.570143][ T5928] hid-udraw 0003:20D6:CB17.0005: unknown main item tag 0x0
[ 1658.601118][T20643] usb 7-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00
[ 1658.614004][ T5928] hid-udraw 0003:20D6:CB17.0005: unknown main item tag 0x0
[ 1658.625438][ T5928] hid-udraw 0003:20D6:CB17.0005: unknown main item tag 0x0
[ 1658.660554][T20643] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1658.682959][ T5928] hid-udraw 0003:20D6:CB17.0005: unknown main item tag 0x0
[ 1658.701616][T20643] usb 7-1: config 0 descriptor??
[ 1659.332161][ T5928] input: THQ uDraw Game Tablet for PS3 Joypad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/0003:20D6:CB17.0005/input/input43
[ 1659.512933][T20643] kye 0003:0458:0138.0006: global environment stack underflow
[ 1659.603705][T20643] kye 0003:0458:0138.0006: item 0 0 1 11 parsing failed
[ 1659.659915][T20643] kye 0003:0458:0138.0006: parse failed
[ 1659.707375][T20643] kye 0003:0458:0138.0006: probe with driver kye failed with error -22
[ 1659.788907][T22734] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2867'.
[ 1659.894359][T20643] usb 7-1: USB disconnect, device number 34
[ 1659.951847][ T5928] input: THQ uDraw Game Tablet for PS3 Touchpad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/0003:20D6:CB17.0005/input/input44
[ 1660.512920][ T5928] input: THQ uDraw Game Tablet for PS3 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/0003:20D6:CB17.0005/input/input45
[ 1660.635419][ T5928] input: THQ uDraw Game Tablet for PS3 Accelerometer as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/0003:20D6:CB17.0005/input/input46
[ 1661.278120][ T5928] hid-udraw 0003:20D6:CB17.0005: hidraw0: USB HID v0.02 Device [HID 20d6:cb17] on usb-dummy_hcd.1-1/input0
[ 1661.479644][ T5928] usb 2-1: USB disconnect, device number 28
[ 1661.578368][T22745] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2872'.
[ 1661.718723][T22750] fido_id[22750]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory
[ 1662.431183][T20656] usb 7-1: new high-speed USB device number 35 using dummy_hcd
[ 1662.663655][T20656] usb 7-1: config 0 has too many interfaces: 204, using maximum allowed: 32
[ 1663.304940][T20656] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 204
[ 1663.394675][T20656] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1663.464715][T22760] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1663.474467][T22760] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1663.515387][T20656] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1663.577579][T20656] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1663.653177][T22777] nfs: Unknown parameter '*'
[ 1665.033458][T20656] usb 7-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00
[ 1665.102035][T20656] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1665.160729][T20656] usb 7-1: config 0 descriptor??
[ 1665.190755][T10437] Bluetooth: hci2: command 0x0406 tx timeout
[ 1665.238088][T20656] usb 7-1: can't set config #0, error -71
[ 1665.299644][T20656] usb 7-1: USB disconnect, device number 35
[ 1666.168387][T22760] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1666.219014][T22760] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1666.724594][T22807] usb usb3: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 1666.913564][   T58] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1666.975599][   T58] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1667.062685][   T58] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1667.136217][   T58] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1668.108371][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[ 1668.115734][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[ 1668.856251][T22827] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2891'.
[ 1668.865857][T22827] openvswitch: netlink: Missing key (keys=200040, expected=2000)
[ 1670.171193][T22769] Bluetooth: hci0: command 0x0406 tx timeout
[ 1671.920966][   T30] audit: type=1800 audit(1773374034.546:1238): pid=22843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2895" name="bus" dev="overlay" ino=164 res=0 errno=0
[ 1672.690810][ T6060] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[ 1672.920798][ T6060] usb 1-1: Using ep0 maxpacket: 8
[ 1672.959938][ T6060] usb 1-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64
[ 1672.991045][ T6060] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1672.999185][ T6060] usb 1-1: Product: syz
[ 1673.024258][ T6060] usb 1-1: Manufacturer: syz
[ 1673.028894][ T6060] usb 1-1: SerialNumber: syz
[ 1673.088969][ T6060] usb 1-1: config 0 descriptor??
[ 1673.123972][ T6060] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state.
[ 1673.200774][ T6060] pctv452e: pctv452e_power_ctrl: 1
[ 1673.200774][ T6060] 
[ 1673.208203][ T6060] usb 1-1: selecting invalid altsetting 3
[ 1673.276182][ T6060] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22
[ 1673.276182][ T6060] 
[ 1673.340794][ T6060] dvb-usb: bulk message failed: -22 (5/0)
[ 1673.409060][ T6060] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1673.448134][ T6060] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600)
[ 1673.489136][ T6060] usb 1-1: media controller created
[ 1673.519359][ T6060] dvb-usb: bulk message failed: -22 (8/0)
[ 1673.562879][ T6060] pctv452e: I2C error -22; AA 01  A0 01 14 -> aa 01 31 04 a0 01 14
[ 1673.600822][ T6060] dvb-usb: MAC address reading failed.
[ 1673.649818][ T6060] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1674.238476][T22861] ubi31: attaching mtd0
[ 1674.261995][T22861] ubi31: scanning is finished
[ 1674.266804][T22861] ubi31: empty MTD device detected
[ 1675.439775][T22861] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4
[ 1675.721683][ T6060] DVB: Unable to find symbol stb0899_attach()
[ 1675.760578][ T6060] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600'
[ 1676.572830][T18962] usb 7-1: new high-speed USB device number 36 using dummy_hcd
[ 1676.644291][ T6060] rc_core: IR keymap rc-tt-1500 not found
[ 1676.998846][ T6060] Registered IR keymap rc-empty
[ 1677.134066][ T6060] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0
[ 1677.151233][T18962] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1677.160055][T18962] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1677.230870][T18962] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1677.259411][T18962] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1677.283218][ T6060] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input47
[ 1677.315332][T18962] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1677.329050][T18962] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1677.362084][ T6060] dvb-usb: schedule remote query interval to 100 msecs.
[ 1677.369069][ T6060] pctv452e: pctv452e_power_ctrl: 0
[ 1677.369069][ T6060] 
[ 1677.441775][T18962] usb 7-1: Product: syz
[ 1677.457720][ T6060] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected.
[ 1677.458925][T18962] usb 7-1: Manufacturer: syz
[ 1677.484668][T20656] dvb-usb: bulk message failed: -22 (4/0)
[ 1677.490576][T20656] dvb-usb: error -22 while querying for an remote control event.
[ 1677.616326][T18962] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22
[ 1677.632420][ T6060] usb 1-1: USB disconnect, device number 18
[ 1677.702129][T20656] dvb-usb: bulk message failed: -22 (4/0)
[ 1677.720530][T20656] dvb-usb: error -22 while querying for an remote control event.
[ 1678.187663][T22898] ieee802154 phy0 wpan0: encryption failed: -22
[ 1678.593735][T22872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1678.683533][ T6060] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected.
[ 1678.751309][T22872] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1680.310061][T22914] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2908'.
[ 1680.783680][T18962] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[ 1680.817202][T22926] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2909'.
[ 1681.042751][T18962] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1681.101952][T18962] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1681.179394][T18962] usb 6-1: config 0 descriptor??
[ 1681.213314][T18962] cp210x 6-1:0.0: cp210x converter detected
[ 1681.615169][T18962] cp210x 6-1:0.0: failed to get vendor val 0x370b size 1: -71
[ 1681.639446][T18962] cp210x 6-1:0.0: querying part number failed
[ 1681.726607][T18962] usb 6-1: cp210x converter now attached to ttyUSB0
[ 1681.778963][T18962] usb 6-1: USB disconnect, device number 27
[ 1681.858367][T18962] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1681.898359][T18962] cp210x 6-1:0.0: device disconnected
[ 1683.586521][ T6060] usb 7-1: USB disconnect, device number 36
[ 1683.759397][T22950] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1688.317922][T22980] ieee802154 phy0 wpan0: encryption failed: -22
[ 1688.678823][T22989] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2923'.
[ 1690.584047][T23012] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2930'.
[ 1690.610964][ T6060] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[ 1690.862735][ T6060] usb 6-1: Using ep0 maxpacket: 16
[ 1690.953753][ T6060] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1691.151794][T23015] erofs (device nbd0): cannot find valid erofs superblock
[ 1691.557050][ T6060] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1691.732455][ T6060] usb 6-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20
[ 1691.744760][ T6060] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1691.764390][ T6060] usb 6-1: Product: syz
[ 1691.800742][ T6060] usb 6-1: Manufacturer: syz
[ 1691.805389][ T6060] usb 6-1: SerialNumber: syz
[ 1691.847127][ T6060] usb 6-1: config 0 descriptor??
[ 1692.451810][T18963] usb 7-1: new high-speed USB device number 37 using dummy_hcd
[ 1693.313693][T18963] usb 7-1: Using ep0 maxpacket: 16
[ 1693.327317][T18963] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1693.491098][T18963] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1693.520841][T18963] usb 7-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00
[ 1693.587707][T18963] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1693.606901][    C1] imon 6-1:0.0: imon usb_rx_callback_intf0: status(-71)
[ 1693.781431][T18963] usb 7-1: config 0 descriptor??
[ 1693.784746][ T6060] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input48
[ 1694.818226][ T6060] imon:send_packet: packet tx failed (-71)
[ 1695.750879][ T6060] imon 6-1:0.0: panel buttons/knobs setup failed
[ 1696.400844][ T6060] rc_core: IR keymap rc-imon-pad not found
[ 1696.406715][ T6060] Registered IR keymap rc-empty
[ 1696.483426][ T6060] imon 6-1:0.0: Looks like you're trying to use an IR protocol this device does not support
[ 1696.734464][ T6060] imon 6-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[ 1697.527554][ T6060] imon:send_packet: packet tx failed (-71)
[ 1697.561641][ T6060] imon 6-1:0.0: remote input dev register failed
[ 1697.569320][ T6060] imon 6-1:0.0: imon_init_intf0: rc device setup failed
[ 1698.704697][ T6060] imon 6-1:0.0: unable to initialize intf0, err 0
[ 1698.810769][ T6060] imon:imon_probe: failed to initialize context!
[ 1698.811549][T18963] usbhid 7-1:0.0: can't add hid device: -71
[ 1698.817260][ T6060] imon 6-1:0.0: unable to register, err -19
[ 1698.863317][T18963] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[ 1698.921117][ T6060] usb 6-1: USB disconnect, device number 28
[ 1698.941884][T18963] usb 7-1: USB disconnect, device number 37
[ 1699.970819][ T6060] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[ 1700.077622][T23086] input: syz1 as /devices/virtual/input/input50
[ 1700.741846][ T6060] usb 3-1: config index 0 descriptor too short (expected 45, got 36)
[ 1700.770519][ T6060] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1700.840561][ T6060] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1700.881649][T23094] ªªªªªª: renamed from vlan0
[ 1700.930786][ T6060] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1700.995018][ T6060] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1701.221529][ T6060] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1701.440323][T23104] input: syz0 as /devices/virtual/input/input51
[ 1701.601115][ T9351] usb 7-1: new high-speed USB device number 38 using dummy_hcd
[ 1701.850820][ T9351] usb 7-1: Using ep0 maxpacket: 16
[ 1701.960953][ T6060] usb 3-1: config 0 descriptor??
[ 1702.049004][ T9351] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1702.269234][ T9351] usb 7-1: config 0 interface 0 has no altsetting 0
[ 1702.281314][ T9351] usb 7-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20
[ 1702.375428][ T9351] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1702.600720][ T9351] usb 7-1: Product: syz
[ 1702.606213][ T6060] plantronics 0003:047F:FFFF.0007: reserved main item tag 0xd
[ 1702.629614][ T9351] usb 7-1: Manufacturer: syz
[ 1702.666130][ T9351] usb 7-1: SerialNumber: syz
[ 1702.723881][ T9351] usb 7-1: config 0 descriptor??
[ 1702.729525][ T6060] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[ 1702.955087][ T6060] usb 3-1: USB disconnect, device number 29
[ 1704.202816][    C1] imon 7-1:0.0: imon usb_rx_callback_intf0: status(-71)
[ 1704.253731][ T9351] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input53
[ 1704.293828][T23118] fido_id[23118]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[ 1704.387477][ T9351] imon:send_packet: packet tx failed (-71)
[ 1704.440999][ T9351] imon 7-1:0.0: panel buttons/knobs setup failed
[ 1705.380761][ T5928] usb 2-1: new full-speed USB device number 29 using dummy_hcd
[ 1705.543278][ T5928] usb 2-1: device descriptor read/64, error -71
[ 1705.581597][ T9351] rc_core: IR keymap rc-imon-pad not found
[ 1705.599327][ T9351] Registered IR keymap rc-empty
[ 1705.651725][ T9351] imon 7-1:0.0: Looks like you're trying to use an IR protocol this device does not support
[ 1705.707371][ T9351] imon 7-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[ 1705.778088][ T9351] imon:send_packet: packet tx failed (-71)
[ 1705.812138][ T5928] usb 2-1: new full-speed USB device number 30 using dummy_hcd
[ 1705.825708][ T9351] imon 7-1:0.0: remote input dev register failed
[ 1705.890183][ T9351] imon 7-1:0.0: imon_init_intf0: rc device setup failed
[ 1706.001011][ T5928] usb 2-1: device descriptor read/64, error -71
[ 1706.015490][T22769] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1706.031013][T22769] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1706.040314][T22769] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1706.055981][T22769] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1706.068540][T22769] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1706.169177][ T9351] imon 7-1:0.0: unable to initialize intf0, err 0
[ 1706.196575][ T9351] imon:imon_probe: failed to initialize context!
[ 1706.214065][ T9351] imon 7-1:0.0: unable to register, err -19
[ 1706.254787][ T5928] usb usb2-port1: attempt power cycle
[ 1706.414419][ T9351] usb 7-1: USB disconnect, device number 38
[ 1706.640765][ T5928] usb 2-1: new full-speed USB device number 31 using dummy_hcd
[ 1706.677365][ T5928] usb 2-1: device descriptor read/8, error -71
[ 1706.960921][ T5928] usb 2-1: new full-speed USB device number 32 using dummy_hcd
[ 1707.033209][ T5928] usb 2-1: device descriptor read/8, error -71
[ 1707.066509][   T48] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1707.127020][   T48] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1707.191509][ T5928] usb usb2-port1: unable to enumerate USB device
[ 1708.075989][   T48] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1708.148837][   T48] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1708.161066][T22769] Bluetooth: hci5: command tx timeout
[ 1708.395518][T23181] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1710.240815][T22769] Bluetooth: hci5: command tx timeout
[ 1711.440958][ T5928] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[ 1711.585124][   T48] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1711.611023][   T48] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1712.580784][T22769] Bluetooth: hci5: command tx timeout
[ 1713.468815][ T5928] usb 2-1: Using ep0 maxpacket: 16
[ 1713.487896][ T5928] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1713.546833][ T5928] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1713.593674][ T5928] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1713.649255][T23208] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[ 1713.657062][ T5928] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1715.769174][T22769] Bluetooth: hci5: command tx timeout
[ 1715.777638][ T5928] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1715.792912][ T5928] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1715.802294][ T5928] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1715.810302][ T5928] usb 2-1: Manufacturer: syz
[ 1715.833109][ T5928] usb 2-1: config 0 descriptor??
[ 1716.032009][ T5928] usb 2-1: can't set config #0, error -71
[ 1716.107612][ T5928] usb 2-1: USB disconnect, device number 33
[ 1717.187194][   T48] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1717.197948][   T48] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1717.339116][T23153] chnl_net:caif_netlink_parms(): no params data found
[ 1717.891391][ T5928] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[ 1718.152221][ T5928] usb 2-1: Using ep0 maxpacket: 8
[ 1718.281601][ T5928] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1718.311832][ T5928] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1718.349579][ T5928] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1718.370046][ T5928] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1718.463381][ T5928] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1718.534946][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1718.851159][T23234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1718.969976][T23234] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1719.039978][T23258] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input56
[ 1719.489152][T23153] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1719.496953][ T5928] usb 2-1: GET_CAPABILITIES returned 0
[ 1719.503182][T23153] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1719.513860][ T5928] usbtmc 2-1:16.0: can't read capabilities
[ 1719.521278][T23153] bridge_slave_0: entered allmulticast mode
[ 1719.562807][T23153] bridge_slave_0: entered promiscuous mode
[ 1719.695818][    C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1719.708450][    C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1719.717589][    C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1719.726693][    C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1719.789786][    C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1719.798943][    C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1719.808031][    C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1719.817150][    C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1719.848577][T23153] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1719.868745][    C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1719.877910][    C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1719.887009][    C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1719.896088][    C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1719.918185][    C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1719.927324][    C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1719.950416][T23153] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1719.957491][    C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1719.957559][    C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1720.033317][T18962] usb 2-1: USB disconnect, device number 34
[ 1720.130873][T23153] bridge_slave_1: entered allmulticast mode
[ 1720.138963][T23153] bridge_slave_1: entered promiscuous mode
[ 1721.693704][T23153] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1721.776592][T23153] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1721.908445][T23288] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2992'.
[ 1722.107838][   T48] bridge_slave_1: left allmulticast mode
[ 1722.120247][   T48] bridge_slave_1: left promiscuous mode
[ 1722.194140][   T48] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1722.363192][   T48] bridge_slave_0: left allmulticast mode
[ 1722.440455][   T48] bridge_slave_0: left promiscuous mode
[ 1722.477358][   T48] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1722.511505][T18963] usb 1-1: new full-speed USB device number 19 using dummy_hcd
[ 1722.721218][T18963] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1722.779145][T18963] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[ 1722.872489][T18963] usb 1-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00
[ 1723.125041][T18963] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1724.104630][T18963] usb 1-1: config 0 descriptor??
[ 1724.126618][T18963] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 1725.808417][T23310] input: syz0 as /devices/virtual/input/input57
[ 1727.200489][   T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1727.315063][   T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1727.345345][T20642] usb 1-1: USB disconnect, device number 19
[ 1727.447504][   T48] bond0 (unregistering): Released all slaves
[ 1727.818949][   T48] : left promiscuous mode
[ 1728.026778][T23153] team0: Port device team_slave_0 added
[ 1728.411315][T23153] team0: Port device team_slave_1 added
[ 1728.495142][   T48] tipc: Left network mode
[ 1728.713596][T23344] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1729.591372][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[ 1729.598169][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[ 1729.632598][T23153] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1729.639592][T23153] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1730.612229][T23153] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1730.631858][T23153] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1730.639009][T23153] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1730.666410][T23153] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1731.000036][T23153] hsr_slave_0: entered promiscuous mode
[ 1731.100919][T23153] hsr_slave_1: entered promiscuous mode
[ 1731.140422][T23153] debugfs: 'hsr0' already exists in 'hsr'
[ 1731.204828][ T5828] IPVS: starting estimator thread 0...
[ 1731.242322][T23153] Cannot create hsr debugfs directory
[ 1731.333506][T23359] IPVS: using max 25 ests per chain, 60000 per kthread
[ 1731.712698][T23367] input: syz0 as /devices/virtual/input/input58
[ 1731.816536][T23372] netlink: 'syz.1.3010': attribute type 1 has an invalid length.
[ 1732.904611][T23374] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[ 1732.935969][T23374] bond3: (slave vxcan3): Error -95 calling set_mac_address
[ 1733.143568][T23375] bond3: (slave gretap1): making interface the new active one
[ 1733.181071][T20642] usb 7-1: new high-speed USB device number 39 using dummy_hcd
[ 1733.212187][T23375] bond3: (slave gretap1): Enslaving as an active interface with an up link
[ 1733.342552][   T48] hsr_slave_0: left promiscuous mode
[ 1733.363366][   T48] hsr_slave_1: left promiscuous mode
[ 1733.370522][T20642] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[ 1733.401868][   T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1733.409321][   T48] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1733.426385][T20642] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1733.451426][T20642] usb 7-1: Product: syz
[ 1733.461713][T20642] usb 7-1: Manufacturer: syz
[ 1733.472529][   T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1733.480011][T20642] usb 7-1: SerialNumber: syz
[ 1733.496569][T20642] usb 7-1: config 0 descriptor??
[ 1733.504613][   T48] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1733.536216][   T48] veth1_macvtap: left promiscuous mode
[ 1733.542563][T23402] netlink: 220 bytes leftover after parsing attributes in process `syz.1.3015'.
[ 1733.552657][   T48] veth0_macvtap: left promiscuous mode
[ 1733.559157][T23402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3015'.
[ 1733.952294][T20642] usb 7-1: Firmware: major: 2, minor: 56, hardware type: HULUSB (4)
[ 1734.460188][T20642] usb 7-1: failed to fetch extended address, random address set
[ 1735.756074][T18962] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[ 1735.756636][   T48] team0 (unregistering): Port device team_slave_1 removed
[ 1735.804738][   T48] team0 (unregistering): Port device team_slave_0 removed
[ 1735.961565][T18962] usb 3-1: Using ep0 maxpacket: 16
[ 1736.027203][T18962] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1736.039636][T18962] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81
[ 1736.067038][T18962] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1736.083935][T18962] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[ 1736.094613][T18962] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1736.103461][T18962] usb 3-1: Product: syz
[ 1736.107952][T18962] usb 3-1: Manufacturer: syz
[ 1736.113073][T18962] usb 3-1: SerialNumber: syz
[ 1736.122596][T18962] usb 3-1: config 0 descriptor??
[ 1736.347136][T18962] appledisplay 3-1:0.0: Error while getting initial brightness: -71
[ 1737.232853][T18962] appledisplay 3-1:0.0: probe with driver appledisplay failed with error -71
[ 1737.299830][T18962] usb 3-1: USB disconnect, device number 30
[ 1738.020047][T20642] usb 7-1: USB disconnect, device number 39
[ 1743.454189][   T48] IPVS: stop unused estimator thread 0...
[ 1746.874585][T23153] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1746.997381][T23153] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1747.069752][T23153] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1747.117971][T23153] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1749.031254][T23153] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1749.176590][T23153] 8021q: adding VLAN 0 to HW filter on device team0
[ 1749.223609][T23587] xt_hashlimit: size too large, truncated to 1048576
[ 1749.288330][  T999] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1749.295595][  T999] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1749.382893][  T999] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1749.390118][  T999] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1750.587184][T23153] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1750.966131][T23615] fuse: Bad value for 'group_id'
[ 1750.996931][T23615] fuse: Bad value for 'group_id'
[ 1752.997643][T23627] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-ç/": -EINTR
[ 1754.507692][T23153] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1756.025015][T23650] syz.6.3078 (23650): drop_caches: 2
[ 1758.482603][T23674] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3085'.
[ 1759.340380][T23153] veth0_vlan: entered promiscuous mode
[ 1759.442759][T23153] veth1_vlan: entered promiscuous mode
[ 1759.770042][T23153] veth0_macvtap: entered promiscuous mode
[ 1759.826995][T23153] veth1_macvtap: entered promiscuous mode
[ 1759.910090][T23153] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1759.963899][T23153] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1760.064743][   T48] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1760.094167][   T48] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1760.146580][   T48] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1760.855463][   T48] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1761.163726][   T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1761.203901][   T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1761.821528][   T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1761.851178][   T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1763.666247][T23722] ieee802154 phy0 wpan0: encryption failed: -22
[ 1771.931066][T23826] netlink: 'syz.2.3121': attribute type 1 has an invalid length.
[ 1772.880765][T23823] qrtr: Invalid version 47
[ 1787.313123][T23957] ieee802154 phy0 wpan0: encryption failed: -22
[ 1788.387734][T23967] kAFS: unable to lookup cell 'ÿ'
[ 1788.441145][T23975] tmpfs: Unknown parameter 'fd'
[ 1788.490510][T23967] kAFS: unable to lookup cell '(,c¾Ì'
[ 1790.955336][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[ 1790.968245][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[ 1792.440935][T24020] qrtr: Invalid version 47
[ 1793.264947][T24025] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[ 1793.438000][T24025] CIFS mount error: No usable UNC path provided in device string!
[ 1793.438000][T24025] 
[ 1793.532886][T24025] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[ 1793.796302][   T30] audit: type=1326 audit(1773374157.296:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24031 comm="syz.1.3171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb2299c799 code=0x7ffc0000
[ 1793.884786][T24040] loop5: detected capacity change from 0 to 7
[ 1793.972676][T24040] Dev loop5: unable to read RDB block 7
[ 1794.002206][T24040]  loop5: AHDI p1 p2
[ 1794.019262][T24040] loop5: partition table partially beyond EOD, truncated
[ 1794.127082][T24040] loop5: p1 start 50331648 is beyond EOD, truncated
[ 1794.238920][   T30] audit: type=1326 audit(1773374157.296:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24031 comm="syz.1.3171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb2299c799 code=0x7ffc0000
[ 1794.466703][   T30] audit: type=1326 audit(1773374157.296:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24031 comm="syz.1.3171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7feb2299c799 code=0x7ffc0000
[ 1794.671322][   T30] audit: type=1326 audit(1773374157.316:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24031 comm="syz.1.3171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb2299c799 code=0x7ffc0000
[ 1794.707347][   T30] audit: type=1326 audit(1773374157.316:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24031 comm="syz.1.3171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb2299c799 code=0x7ffc0000
[ 1794.825373][   T30] audit: type=1326 audit(1773374157.326:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24031 comm="syz.1.3171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7feb2295cfce code=0x7ffc0000
[ 1794.848345][   T30] audit: type=1326 audit(1773374157.326:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24031 comm="syz.1.3171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb2299c799 code=0x7ffc0000
[ 1795.004866][   T30] audit: type=1326 audit(1773374157.326:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24031 comm="syz.1.3171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb2299c799 code=0x7ffc0000
[ 1795.186199][   T30] audit: type=1326 audit(1773374157.346:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24031 comm="syz.1.3171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7feb2299c799 code=0x7ffc0000
[ 1795.410497][   T30] audit: type=1326 audit(1773374157.346:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24031 comm="syz.1.3171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb2299c799 code=0x7ffc0000
[ 1795.503404][T24059] netlink: 'syz.9.3178': attribute type 10 has an invalid length.
[ 1795.640074][T24059] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1795.706679][T24059] bond0: (slave batadv0): Enslaving as an active interface with an up link
[ 1795.811230][T24063] fuse: Bad value for 'fd'
[ 1797.636777][T24069] qrtr: Invalid version 47
[ 1797.961121][ T5919] usb 10-1: new full-speed USB device number 33 using dummy_hcd
[ 1798.201787][ T5919] usb 10-1: device descriptor read/64, error -71
[ 1798.471124][ T5919] usb 10-1: new full-speed USB device number 34 using dummy_hcd
[ 1798.529982][T24090] netlink: 'syz.5.3185': attribute type 22 has an invalid length.
[ 1798.590779][T24090] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3185'.
[ 1798.590956][T24090] bond0: option ad_select: unable to set because the bond device is up
[ 1798.671868][ T5919] usb 10-1: device descriptor read/64, error -71
[ 1798.783408][ T5919] usb usb10-port1: attempt power cycle
[ 1799.161004][ T5919] usb 10-1: new full-speed USB device number 35 using dummy_hcd
[ 1799.192422][ T5919] usb 10-1: device descriptor read/8, error -71
[ 1799.461513][ T5919] usb 10-1: new full-speed USB device number 36 using dummy_hcd
[ 1800.644326][ T5919] usb 10-1: device descriptor read/8, error -71
[ 1800.748418][T24117] netlink: 212340 bytes leftover after parsing attributes in process `syz.6.3190'.
[ 1800.748514][T24117] openvswitch: netlink: Key 0 has unexpected len 4 expected 0
[ 1800.764499][ T5919] usb usb10-port1: unable to enumerate USB device
[ 1801.776051][T24133] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3192'.
[ 1801.781790][T24133] trusted_key: encrypted_key: master key parameter 'trÍ8Ó3�¸µ4z' is invalid
[ 1802.031060][T20642] usb 10-1: new high-speed USB device number 37 using dummy_hcd
[ 1802.067683][ T9351] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[ 1802.180742][T20642] usb 10-1: Using ep0 maxpacket: 16
[ 1802.183030][T20642] usb 10-1: config 0 has an invalid interface number: 214 but max is 0
[ 1802.183063][T20642] usb 10-1: config 0 has no interface number 0
[ 1802.183108][T20642] usb 10-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[ 1802.235284][T20642] usb 10-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[ 1802.235325][T20642] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1802.235350][T20642] usb 10-1: Product: syz
[ 1802.235368][T20642] usb 10-1: Manufacturer: syz
[ 1802.235385][T20642] usb 10-1: SerialNumber: syz
[ 1802.256039][T20642] usb 10-1: config 0 descriptor??
[ 1802.463378][T24134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1802.463890][T24134] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1803.020533][T24135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1803.021840][T24135] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1803.035981][ T9351] usb 2-1: config index 0 descriptor too short (expected 23569, got 27)
[ 1803.036036][ T9351] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1803.599447][T24117] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1804.531951][T24145] qrtr: Invalid version 47
[ 1807.297652][T20642] usbtouchscreen 10-1:0.214: probe with driver usbtouchscreen failed with error -71
[ 1807.345880][T20642] usb 10-1: USB disconnect, device number 37
[ 1808.970784][T20656] usb 10-1: new high-speed USB device number 38 using dummy_hcd
[ 1809.130799][T20656] usb 10-1: Using ep0 maxpacket: 8
[ 1809.133112][T20656] usb 10-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[ 1809.133168][T20656] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1809.133222][T20656] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1811.694241][T20656] usb 10-1: USB disconnect, device number 38
[ 1811.820799][T20642] usb 7-1: new full-speed USB device number 41 using dummy_hcd
[ 1811.950752][T20642] usb 7-1: device descriptor read/64, error -71
[ 1812.092712][T24191] netlink: 212340 bytes leftover after parsing attributes in process `syz.9.3208'.
[ 1812.092810][T24191] openvswitch: netlink: Key 0 has unexpected len 4 expected 0
[ 1812.222200][T20642] usb 7-1: new full-speed USB device number 42 using dummy_hcd
[ 1812.360723][T20642] usb 7-1: device descriptor read/64, error -71
[ 1812.473180][T20642] usb usb7-port1: attempt power cycle
[ 1812.634154][T10437] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1812.648053][T10437] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1812.650178][T10437] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1812.651892][T10437] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1812.656728][T10437] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1812.821125][T20642] usb 7-1: new full-speed USB device number 43 using dummy_hcd
[ 1812.847755][T20642] usb 7-1: device descriptor read/8, error -71
[ 1813.088094][T20642] usb 7-1: new full-speed USB device number 44 using dummy_hcd
[ 1813.139933][T20642] usb 7-1: device descriptor read/8, error -71
[ 1813.241243][T20642] usb usb7-port1: unable to enumerate USB device
[ 1813.270961][ T9351] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[ 1813.271000][ T9351] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[ 1813.394317][ T9351] usb 2-1: config 0 descriptor??
[ 1813.395467][ T9351] usb 2-1: can't set config #0, error -32
[ 1814.357235][T24204] chnl_net:caif_netlink_parms(): no params data found
[ 1814.712431][T10437] Bluetooth: hci6: command tx timeout
[ 1814.888701][T24191] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1815.578088][T24204] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1815.578275][T24204] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1815.578435][T24204] bridge_slave_0: entered allmulticast mode
[ 1815.601952][T24204] bridge_slave_0: entered promiscuous mode
[ 1815.620335][T24204] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1815.620422][T24204] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1815.620567][T24204] bridge_slave_1: entered allmulticast mode
[ 1815.634821][T24204] bridge_slave_1: entered promiscuous mode
[ 1815.902271][T24204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1816.044939][T24241] sp0: Synchronizing with TNC
[ 1816.064093][T24204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1816.669412][T24204] team0: Port device team_slave_0 added
[ 1816.790858][T10437] Bluetooth: hci6: command tx timeout
[ 1816.844015][T24204] team0: Port device team_slave_1 added
[ 1816.960917][T22769] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 1816.971562][T22769] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 1816.973196][T22769] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 1816.974191][T22769] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 1816.974859][T22769] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 1817.187846][T24204] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1817.187869][T24204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1817.187902][T24204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1817.234328][T24204] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1817.234355][T24204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1817.234387][T24204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1817.530710][T24268] /dev/nullb0: Can't open blockdev
[ 1817.707936][T24204] hsr_slave_0: entered promiscuous mode
[ 1817.709183][T24204] hsr_slave_1: entered promiscuous mode
[ 1817.710019][T24204] debugfs: 'hsr0' already exists in 'hsr'
[ 1817.710043][T24204] Cannot create hsr debugfs directory
[ 1818.870844][T22769] Bluetooth: hci6: command tx timeout
[ 1819.080940][T22769] Bluetooth: hci7: command tx timeout
[ 1820.234351][T20656] usb 6-1: new full-speed USB device number 29 using dummy_hcd
[ 1820.361055][T20656] usb 6-1: device descriptor read/64, error -71
[ 1820.600756][T20656] usb 6-1: new full-speed USB device number 30 using dummy_hcd
[ 1820.673756][T24298] netlink: 212340 bytes leftover after parsing attributes in process `syz.6.3230'.
[ 1820.673850][T24298] openvswitch: netlink: Key 0 has unexpected len 4 expected 0
[ 1820.750848][T20656] usb 6-1: device descriptor read/64, error -71
[ 1820.863428][T20656] usb usb6-port1: attempt power cycle
[ 1820.885838][T24264] chnl_net:caif_netlink_parms(): no params data found
[ 1820.951006][T22769] Bluetooth: hci6: command tx timeout
[ 1821.111012][T22769] Bluetooth: hci7: command tx timeout
[ 1821.201018][T20656] usb 6-1: new full-speed USB device number 31 using dummy_hcd
[ 1821.222648][T20656] usb 6-1: device descriptor read/8, error -71
[ 1821.286400][T24264] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1821.286591][T24264] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1821.286731][T24264] bridge_slave_0: entered allmulticast mode
[ 1821.288356][T24264] bridge_slave_0: entered promiscuous mode
[ 1821.319247][T24264] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1821.319469][T24264] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1821.319656][T24264] bridge_slave_1: entered allmulticast mode
[ 1821.321865][T24264] bridge_slave_1: entered promiscuous mode
[ 1821.416667][T24264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1821.424778][T24264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1821.460959][T20656] usb 6-1: new full-speed USB device number 32 using dummy_hcd
[ 1821.482157][T20656] usb 6-1: device descriptor read/8, error -71
[ 1821.562018][T24264] team0: Port device team_slave_0 added
[ 1821.568498][T24264] team0: Port device team_slave_1 added
[ 1821.591283][T20656] usb usb6-port1: unable to enumerate USB device
[ 1821.644532][T24264] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1821.644610][T24264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1821.644675][T24264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1821.649696][T24264] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1821.649748][T24264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1821.649810][T24264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1821.774513][T24264] hsr_slave_0: entered promiscuous mode
[ 1821.777890][T24264] hsr_slave_1: entered promiscuous mode
[ 1821.779327][T24264] debugfs: 'hsr0' already exists in 'hsr'
[ 1821.779409][T24264] Cannot create hsr debugfs directory
[ 1823.194291][T22769] Bluetooth: hci7: command tx timeout
[ 1823.646780][T24298] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1823.656013][T24264] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1823.661192][T24264] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1823.679804][T24204] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1823.692715][T24264] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1823.699157][T24264] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1823.737227][T24204] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1823.797533][T24204] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1823.819471][T24204] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1824.661741][T24264] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1824.681952][T24264] 8021q: adding VLAN 0 to HW filter on device team0
[ 1824.711311][T24204] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1824.765976][T20637] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1824.766095][T20637] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1824.775629][T20637] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1824.775711][T20637] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1824.886323][T24204] 8021q: adding VLAN 0 to HW filter on device team0
[ 1824.902466][T24264] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1824.902492][T24264] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1825.082299][T20637] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1825.082386][T20637] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1825.084384][T20637] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1825.084468][T20637] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1826.770813][T22769] Bluetooth: hci7: command tx timeout
[ 1827.441952][T24264] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1827.656910][T24204] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1827.877822][T24204] veth0_vlan: entered promiscuous mode
[ 1827.944149][T24204] veth1_vlan: entered promiscuous mode
[ 1828.074052][T24204] veth0_macvtap: entered promiscuous mode
[ 1828.115429][T24204] veth1_macvtap: entered promiscuous mode
[ 1828.775623][T24204] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1828.829704][T24204] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1828.865160][  T148] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1828.865226][  T148] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1828.865271][  T148] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1828.865313][  T148] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1829.323229][T24204] ieee80211 phy76: Selected rate control algorithm 'minstrel_ht'
[ 1829.393202][T24204] ieee80211 phy77: Selected rate control algorithm 'minstrel_ht'
[ 1829.409994][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1829.410027][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1829.455641][ T6696] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1829.455669][ T6696] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1829.678833][T24264] veth0_vlan: entered promiscuous mode
[ 1829.716624][T24264] veth1_vlan: entered promiscuous mode
[ 1830.002803][T24435] qrtr: Invalid version 47
[ 1831.519146][T24264] veth0_macvtap: entered promiscuous mode
[ 1831.558172][T24264] veth1_macvtap: entered promiscuous mode
[ 1831.827686][T24264] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1832.227852][T24264] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1832.481374][ T6696] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1832.636849][  T999] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1832.636908][  T999] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1832.636941][  T999] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1832.875408][T24264] ieee80211 phy78: Selected rate control algorithm 'minstrel_ht'
[ 1832.932730][T24446] netlink: 212340 bytes leftover after parsing attributes in process `syz.6.3243'.
[ 1832.932821][T24446] openvswitch: netlink: Key 0 has unexpected len 4 expected 0
[ 1832.937974][T10437] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[ 1832.942896][T10437] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[ 1832.946156][T10437] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[ 1832.951145][T10437] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[ 1832.952286][T10437] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[ 1833.017487][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1833.017517][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1833.658491][T24451] chnl_net:caif_netlink_parms(): no params data found
[ 1834.095123][T24451] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1834.095256][T24451] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1834.095458][T24451] bridge_slave_0: entered allmulticast mode
[ 1834.105086][T24451] bridge_slave_0: entered promiscuous mode
[ 1834.140207][T24451] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1834.140393][T24451] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1834.164827][T24451] bridge_slave_1: entered allmulticast mode
[ 1834.167010][T24451] bridge_slave_1: entered promiscuous mode
[ 1834.284816][T24451] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1834.289119][T24451] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1834.749372][T24451] team0: Port device team_slave_0 added
[ 1834.845656][T24451] team0: Port device team_slave_1 added
[ 1835.071366][T22769] Bluetooth: hci8: command tx timeout
[ 1835.174494][T20643] usb 4-1: new full-speed USB device number 21 using dummy_hcd
[ 1835.270073][T24451] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1835.270098][T24451] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1835.270130][T24451] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1835.275084][T24451] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1835.275106][T24451] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1835.275138][T24451] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1835.301323][T20643] usb 4-1: device descriptor read/64, error -71
[ 1835.357603][T24451] hsr_slave_0: entered promiscuous mode
[ 1835.361909][T24451] hsr_slave_1: entered promiscuous mode
[ 1835.362692][T24451] debugfs: 'hsr0' already exists in 'hsr'
[ 1835.362714][T24451] Cannot create hsr debugfs directory
[ 1835.553010][T20643] usb 4-1: new full-speed USB device number 22 using dummy_hcd
[ 1835.680724][T20643] usb 4-1: device descriptor read/64, error -71
[ 1835.747395][T24446] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1835.798232][T20643] usb usb4-port1: attempt power cycle
[ 1835.883699][T24264] ieee80211 phy79: Selected rate control algorithm 'minstrel_ht'
[ 1835.999692][ T9921] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1835.999721][ T9921] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1836.154212][T20643] usb 4-1: new full-speed USB device number 23 using dummy_hcd
[ 1836.172972][T20643] usb 4-1: device descriptor read/8, error -71
[ 1836.236565][T10437] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[ 1836.238253][T10437] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[ 1836.239472][T10437] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[ 1836.241349][T10437] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[ 1836.242028][T10437] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[ 1836.411474][T20643] usb 4-1: new full-speed USB device number 24 using dummy_hcd
[ 1836.428528][T24451] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1836.448853][T20643] usb 4-1: device descriptor read/8, error -71
[ 1836.475377][T24451] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1836.516438][T24451] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 1836.533335][T24451] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 1836.561361][T20643] usb usb4-port1: unable to enumerate USB device
[ 1836.566266][ T9351] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[ 1836.971637][T24524] qrtr: Invalid version 47
[ 1838.380273][T22769] Bluetooth: hci8: command tx timeout
[ 1838.382259][T22769] Bluetooth: hci9: command tx timeout
[ 1838.487635][ T9351] usb 5-1: Using ep0 maxpacket: 8
[ 1838.499342][ T9351] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[ 1838.499402][ T9351] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1838.499425][ T9351] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1839.612826][T24451] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1839.630508][T24451] 8021q: adding VLAN 0 to HW filter on device team0
[ 1839.637253][   T58] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1839.637357][   T58] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1839.681239][   T58] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1839.681350][   T58] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1839.764920][T24505] chnl_net:caif_netlink_parms(): no params data found
[ 1840.025367][T24541] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1840.307387][T20643] usb 5-1: USB disconnect, device number 15
[ 1840.390693][T10437] Bluetooth: hci9: command tx timeout
[ 1840.390735][T10437] Bluetooth: hci8: command tx timeout
[ 1840.486373][T24505] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1840.486549][T24505] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1840.486807][T24505] bridge_slave_0: entered allmulticast mode
[ 1840.489713][T24505] bridge_slave_0: entered promiscuous mode
[ 1840.493172][T24505] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1840.493284][T24505] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1840.493435][T24505] bridge_slave_1: entered allmulticast mode
[ 1840.497570][T24505] bridge_slave_1: entered promiscuous mode
[ 1841.084928][T24505] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1841.089317][T24505] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1841.292800][T24551] netlink: 212340 bytes leftover after parsing attributes in process `syz.3.3257'.
[ 1841.292871][T24551] openvswitch: netlink: Key 0 has unexpected len 4 expected 0
[ 1841.341087][T24505] team0: Port device team_slave_0 added
[ 1841.360223][T24505] team0: Port device team_slave_1 added
[ 1841.856471][T24505] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1841.856520][T24505] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1841.856570][T24505] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1841.869671][T24505] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1841.869691][T24505] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1841.869724][T24505] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1843.743116][T22769] Bluetooth: hci8: command tx timeout
[ 1843.743156][T22769] Bluetooth: hci9: command tx timeout
[ 1843.819594][T24505] hsr_slave_0: entered promiscuous mode
[ 1843.820445][T24505] hsr_slave_1: entered promiscuous mode
[ 1843.868130][T24505] debugfs: 'hsr0' already exists in 'hsr'
[ 1843.868247][T24505] Cannot create hsr debugfs directory
[ 1844.238916][T24551] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1844.273935][T24451] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1845.751027][T10437] Bluetooth: hci9: command tx timeout
[ 1846.503587][T24613] qrtr: Invalid version 47
[ 1847.623013][ T5920] usb 5-1: new full-speed USB device number 16 using dummy_hcd
[ 1847.634169][    C0] raw-gadget.1 gadget.4: ignoring, device is not running
[ 1847.880740][ T5920] usb 5-1: device descriptor read/64, error -32
[ 1848.141032][ T5920] usb 5-1: new full-speed USB device number 17 using dummy_hcd
[ 1848.174449][T24451] veth0_vlan: entered promiscuous mode
[ 1848.198571][T24451] veth1_vlan: entered promiscuous mode
[ 1848.266857][T24451] veth0_macvtap: entered promiscuous mode
[ 1848.280924][ T5920] usb 5-1: device descriptor read/64, error -71
[ 1848.323674][T24451] veth1_macvtap: entered promiscuous mode
[ 1848.360721][ T5828] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[ 1848.392692][ T5920] usb usb5-port1: attempt power cycle
[ 1848.448215][T24505] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1848.474207][T24505] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1848.492118][T24505] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1848.507114][T24451] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1848.514533][ T5828] usb 6-1: Using ep0 maxpacket: 8
[ 1848.517330][ T5828] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[ 1848.517381][ T5828] usb 6-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[ 1848.517429][ T5828] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1848.517458][ T5828] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1848.526132][T24451] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1848.537591][T24505] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1848.558692][ T5828] usbtmc 6-1:16.0: bulk endpoints not found
[ 1848.573141][  T148] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1848.573286][  T148] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1848.573425][  T148] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1848.573564][  T148] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1848.812590][T24451] ieee80211 phy80: Selected rate control algorithm 'minstrel_ht'
[ 1848.914895][  T999] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1848.914922][  T999] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1848.921782][T24451] ieee80211 phy81: Selected rate control algorithm 'minstrel_ht'
[ 1849.030406][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1849.030435][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1849.084881][T24505] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1849.124446][T24505] 8021q: adding VLAN 0 to HW filter on device team0
[ 1849.309273][ T1106] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1849.309389][ T1106] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1849.320279][ T1106] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1849.320389][ T1106] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1850.343418][T24505] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1850.343451][T24505] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1851.316843][ T5828] usb 6-1: USB disconnect, device number 33
[ 1851.919160][T24671] netlink: 212340 bytes leftover after parsing attributes in process `syz.5.3271'.
[ 1851.920067][T24671] openvswitch: netlink: Key 0 has unexpected len 4 expected 0
[ 1852.410392][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[ 1852.410461][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[ 1852.625177][T24505] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1853.501343][T20643] usb 9-1: new full-speed USB device number 40 using dummy_hcd
[ 1853.630868][T20643] usb 9-1: device descriptor read/64, error -71
[ 1854.081335][T20643] usb 9-1: new full-speed USB device number 41 using dummy_hcd
[ 1854.210842][T20643] usb 9-1: device descriptor read/64, error -71
[ 1854.321203][T20643] usb usb9-port1: attempt power cycle
[ 1854.733108][T24714] qrtr: Invalid version 47
[ 1855.571361][T24505] veth0_vlan: entered promiscuous mode
[ 1855.582138][T20643] usb 9-1: new full-speed USB device number 42 using dummy_hcd
[ 1855.620980][T20643] usb 9-1: device descriptor read/8, error -71
[ 1855.788585][T24505] veth1_vlan: entered promiscuous mode
[ 1855.921140][T20643] usb 9-1: new full-speed USB device number 43 using dummy_hcd
[ 1855.941148][T20643] usb 9-1: device descriptor read/8, error -71
[ 1856.002293][T24505] veth0_macvtap: entered promiscuous mode
[ 1856.015307][T24505] veth1_macvtap: entered promiscuous mode
[ 1856.051521][T20643] usb usb9-port1: unable to enumerate USB device
[ 1856.053907][T24505] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1856.087581][T24505] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1856.188441][   T58] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1856.188668][   T58] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1856.284261][   T58] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1856.284333][   T58] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1857.031602][T24505] ieee80211 phy82: Selected rate control algorithm 'minstrel_ht'
[ 1857.168909][T24505] ieee80211 phy83: Selected rate control algorithm 'minstrel_ht'
[ 1857.171760][   T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1857.171784][   T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1857.271117][ T5828] usb 7-1: new high-speed USB device number 45 using dummy_hcd
[ 1857.421307][ T5828] usb 7-1: Using ep0 maxpacket: 8
[ 1857.492483][ T5828] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[ 1857.501104][ T5828] usb 7-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[ 1857.501562][ T5828] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1857.501698][ T5828] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1858.443263][ T5828] usbtmc 7-1:16.0: bulk endpoints not found
[ 1858.467434][ T9921] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1858.467459][ T9921] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1860.589264][   T24] usb 7-1: USB disconnect, device number 45
[ 1861.446606][T22769] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[ 1861.448870][T22769] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[ 1861.449829][T22769] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[ 1861.515717][T22769] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[ 1861.516454][T22769] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[ 1861.561674][   T24] usb 8-1: new full-speed USB device number 29 using dummy_hcd
[ 1861.694849][   T24] usb 8-1: device descriptor read/64, error -71
[ 1862.120685][   T24] usb 8-1: new full-speed USB device number 30 using dummy_hcd
[ 1862.251159][   T24] usb 8-1: device descriptor read/64, error -71
[ 1862.514258][T24792] qrtr: Invalid version 47
[ 1863.273566][   T24] usb usb8-port1: attempt power cycle
[ 1863.710143][T10437] Bluetooth: hci10: command tx timeout
[ 1865.068355][T24781] chnl_net:caif_netlink_parms(): no params data found
[ 1865.760806][T10437] Bluetooth: hci10: command tx timeout
[ 1865.950295][T24819] pim6reg: entered allmulticast mode
[ 1866.284794][T24781] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1866.308231][T24781] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1866.308479][T24781] bridge_slave_0: entered allmulticast mode
[ 1866.310175][T24781] bridge_slave_0: entered promiscuous mode
[ 1866.338545][ T5828] usb 9-1: new high-speed USB device number 44 using dummy_hcd
[ 1866.339831][T24781] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1866.340023][T24781] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1866.340267][T24781] bridge_slave_1: entered allmulticast mode
[ 1866.348914][T24781] bridge_slave_1: entered promiscuous mode
[ 1866.539359][T24781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1866.571052][ T5828] usb 9-1: device descriptor read/64, error -71
[ 1866.594187][T24781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1866.725627][T24819] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3298'.
[ 1866.810834][ T5828] usb 9-1: new high-speed USB device number 45 using dummy_hcd
[ 1866.940739][ T5828] usb 9-1: device descriptor read/64, error -71
[ 1867.026951][T24781] team0: Port device team_slave_0 added
[ 1867.050998][ T5828] usb usb9-port1: attempt power cycle
[ 1867.343624][T24781] team0: Port device team_slave_1 added
[ 1867.691126][T24781] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1867.691146][T24781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1867.691170][T24781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1867.698519][T24781] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1867.698536][T24781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1867.698561][T24781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1867.700733][ T5828] usb 9-1: new high-speed USB device number 46 using dummy_hcd
[ 1867.722610][ T5828] usb 9-1: device descriptor read/8, error -71
[ 1867.852674][T10437] Bluetooth: hci10: command tx timeout
[ 1867.960986][ T5828] usb 9-1: new high-speed USB device number 47 using dummy_hcd
[ 1867.981523][ T5828] usb 9-1: device descriptor read/8, error -71
[ 1868.272747][ T5828] usb usb9-port1: unable to enumerate USB device
[ 1868.288525][T24847] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3301'.
[ 1868.291600][T24781] hsr_slave_0: entered promiscuous mode
[ 1869.024115][T24781] hsr_slave_1: entered promiscuous mode
[ 1869.025104][T24781] debugfs: 'hsr0' already exists in 'hsr'
[ 1869.025124][T24781] Cannot create hsr debugfs directory
[ 1869.235087][T24853] bridge1: port 1(geneve2) entered blocking state
[ 1869.235316][T24853] bridge1: port 1(geneve2) entered disabled state
[ 1869.235557][T24853] geneve2: entered allmulticast mode
[ 1869.265211][T24853] geneve2: entered promiscuous mode
[ 1869.940723][T10437] Bluetooth: hci10: command tx timeout
[ 1870.900743][T18963] usb 9-1: new full-speed USB device number 48 using dummy_hcd
[ 1871.030973][T18963] usb 9-1: device descriptor read/64, error -71
[ 1871.230168][T24876] netlink: 212340 bytes leftover after parsing attributes in process `syz.6.3309'.
[ 1871.230262][T24876] openvswitch: netlink: Key 0 has unexpected len 4 expected 0
[ 1871.273780][T18963] usb 9-1: new full-speed USB device number 49 using dummy_hcd
[ 1871.700735][T24887] siw: device registration error -23
[ 1873.262124][T18963] usb 9-1: device descriptor read/64, error -71
[ 1873.371154][T18963] usb usb9-port1: attempt power cycle
[ 1874.982673][T24895] syz.8.3312 (24895): drop_caches: 2
[ 1876.302098][T24781] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1876.319226][T24781] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1876.332600][T24781] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1876.353542][T24781] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1877.098020][T24781] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1877.413601][T24781] 8021q: adding VLAN 0 to HW filter on device team0
[ 1877.474864][T20637] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1877.474979][T20637] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1877.504664][T20637] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1877.504805][T20637] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1877.630738][ T5828] usb 8-1: new high-speed USB device number 32 using dummy_hcd
[ 1877.761170][ T5828] usb 8-1: device descriptor read/64, error -71
[ 1878.217463][ T5828] usb 8-1: new high-speed USB device number 33 using dummy_hcd
[ 1879.120508][ T5828] usb 8-1: device descriptor read/64, error -71
[ 1879.231152][ T5828] usb usb8-port1: attempt power cycle
[ 1879.586321][T24781] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1879.644330][ T5828] usb 8-1: new high-speed USB device number 34 using dummy_hcd
[ 1879.708999][T24944] siw: device registration error -23
[ 1881.622669][ T5828] usb 8-1: device descriptor read/8, error -71
[ 1882.951139][ T5828] usb 7-1: new full-speed USB device number 46 using dummy_hcd
[ 1882.964188][T24781] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1883.191123][ T5828] usb 7-1: device descriptor read/64, error -71
[ 1883.464586][T24781] veth0_vlan: entered promiscuous mode
[ 1883.473080][ T5828] usb 7-1: new full-speed USB device number 47 using dummy_hcd
[ 1883.531917][T24781] veth1_vlan: entered promiscuous mode
[ 1883.600686][ T5828] usb 7-1: device descriptor read/64, error -71
[ 1883.640064][T24971] syz.5.3326 (24971): drop_caches: 2
[ 1883.712796][ T5828] usb usb7-port1: attempt power cycle
[ 1883.797072][T24781] veth0_macvtap: entered promiscuous mode
[ 1883.878028][T24781] veth1_macvtap: entered promiscuous mode
[ 1883.889271][T24975] qrtr: Invalid version 47
[ 1884.052147][ T5828] usb 7-1: new full-speed USB device number 48 using dummy_hcd
[ 1884.072134][ T5828] usb 7-1: device descriptor read/8, error -71
[ 1884.109099][T24781] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1884.144535][T24781] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1884.170169][   T30] kauditd_printk_skb: 28 callbacks suppressed
[ 1884.170190][   T30] audit: type=1326 audit(1773374247.666:1277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24977 comm="syz.5.3327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0acb59c799 code=0x7ffc0000
[ 1884.174624][   T30] audit: type=1326 audit(1773374247.676:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24977 comm="syz.5.3327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0acb59c799 code=0x7ffc0000
[ 1884.183569][   T30] audit: type=1326 audit(1773374247.686:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24977 comm="syz.5.3327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f0acb59c799 code=0x7ffc0000
[ 1884.183631][   T30] audit: type=1326 audit(1773374247.686:1280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24977 comm="syz.5.3327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0acb59c799 code=0x7ffc0000
[ 1884.183671][   T30] audit: type=1326 audit(1773374247.686:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24977 comm="syz.5.3327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0acb59c799 code=0x7ffc0000
[ 1884.184815][   T30] audit: type=1326 audit(1773374247.686:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24977 comm="syz.5.3327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0acb55cfce code=0x7ffc0000
[ 1884.184871][   T30] audit: type=1326 audit(1773374247.686:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24977 comm="syz.5.3327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0acb59c799 code=0x7ffc0000
[ 1884.184912][   T30] audit: type=1326 audit(1773374247.686:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24977 comm="syz.5.3327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0acb59c799 code=0x7ffc0000
[ 1884.201837][   T30] audit: type=1326 audit(1773374247.696:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24977 comm="syz.5.3327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f0acb59c799 code=0x7ffc0000
[ 1884.201902][   T30] audit: type=1326 audit(1773374247.696:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24977 comm="syz.5.3327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0acb59c799 code=0x7ffc0000
[ 1884.202782][T18566] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1884.202853][T18566] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1884.202885][T18566] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1884.202916][T18566] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1884.310789][ T5828] usb 7-1: new full-speed USB device number 49 using dummy_hcd
[ 1884.331488][ T5828] usb 7-1: device descriptor read/8, error -71
[ 1884.441159][ T5828] usb usb7-port1: unable to enumerate USB device
[ 1884.621219][T24781] ieee80211 phy84: Selected rate control algorithm 'minstrel_ht'
[ 1884.919809][T20637] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1884.919839][T20637] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1884.969882][T24781] ieee80211 phy85: Selected rate control algorithm 'minstrel_ht'
[ 1885.283564][ T6695] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1885.283619][ T6695] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1885.386767][T24997] netlink: 212340 bytes leftover after parsing attributes in process `syz.8.3329'.
[ 1885.386880][T24997] openvswitch: netlink: Key 0 has unexpected len 4 expected 0
[ 1888.982377][T25032] siw: device registration error -23
[ 1892.046208][T25042] ieee802154 phy0 wpan0: encryption failed: -22
[ 1893.378998][T25054] syz.6.3338 (25054): drop_caches: 2
[ 1894.510939][   T24] usb 8-1: new high-speed USB device number 36 using dummy_hcd
[ 1895.300698][T23479] usb 5-1: new full-speed USB device number 19 using dummy_hcd
[ 1895.431503][T23479] usb 5-1: device descriptor read/64, error -71
[ 1895.670729][T23479] usb 5-1: new full-speed USB device number 20 using dummy_hcd
[ 1895.687670][T25080] netlink: 212340 bytes leftover after parsing attributes in process `syz.8.3346'.
[ 1895.687740][T25080] openvswitch: netlink: Key 0 has unexpected len 4 expected 0
[ 1895.800799][T23479] usb 5-1: device descriptor read/64, error -71
[ 1895.917358][T23479] usb usb5-port1: attempt power cycle
[ 1896.250711][T23479] usb 5-1: new full-speed USB device number 21 using dummy_hcd
[ 1896.271363][T23479] usb 5-1: device descriptor read/8, error -71
[ 1896.590712][T23479] usb 5-1: new full-speed USB device number 22 using dummy_hcd
[ 1896.612709][T23479] usb 5-1: device descriptor read/8, error -71
[ 1896.721276][T23479] usb usb5-port1: unable to enumerate USB device
[ 1898.272988][T25103] siw: device registration error -23
[ 1899.883291][T25095] qrtr: Invalid version 47
[ 1903.584527][T25123] ieee802154 phy0 wpan0: encryption failed: -22
[ 1904.790886][T20643] usb 9-1: new high-speed USB device number 51 using dummy_hcd
[ 1904.931422][T20643] usb 9-1: device descriptor read/64, error -71
[ 1904.990676][ T5920] usb 1-1: new full-speed USB device number 20 using dummy_hcd
[ 1905.150687][ T5920] usb 1-1: device descriptor read/64, error -71
[ 1905.270810][T20643] usb 9-1: new high-speed USB device number 52 using dummy_hcd
[ 1905.453469][T20643] usb 9-1: device descriptor read/64, error -71
[ 1905.453580][ T5920] usb 1-1: new full-speed USB device number 21 using dummy_hcd
[ 1905.561053][T20643] usb usb9-port1: attempt power cycle
[ 1905.599579][ T5920] usb 1-1: device descriptor read/64, error -71
[ 1905.701079][ T5920] usb usb1-port1: attempt power cycle
[ 1905.900900][T20643] usb 9-1: new high-speed USB device number 53 using dummy_hcd
[ 1905.925088][T20643] usb 9-1: device descriptor read/8, error -71
[ 1906.117266][ T5920] usb 1-1: new full-speed USB device number 22 using dummy_hcd
[ 1906.173645][T20643] usb 9-1: new high-speed USB device number 54 using dummy_hcd
[ 1906.301292][T20643] usb 9-1: device descriptor read/8, error -71
[ 1906.315467][ T5920] usb 1-1: device descriptor read/8, error -71
[ 1907.018716][T20643] usb usb9-port1: unable to enumerate USB device
[ 1907.743537][ T5920] usb 1-1: new full-speed USB device number 23 using dummy_hcd
[ 1908.212288][ T5920] usb 1-1: device descriptor read/8, error -71
[ 1908.320936][ T5920] usb usb1-port1: unable to enumerate USB device
[ 1910.606141][T25194] ieee802154 phy0 wpan0: encryption failed: -22
[ 1911.516571][T22769] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[ 1911.576809][T22769] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[ 1911.586290][T22769] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[ 1911.587191][T22769] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[ 1911.587687][T22769] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[ 1911.885480][   T30] kauditd_printk_skb: 11 callbacks suppressed
[ 1911.885497][   T30] audit: type=1326 audit(1773374275.356:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25206 comm="syz.0.3377" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9c0619c799 code=0x0
[ 1913.692919][T22769] Bluetooth: hci11: command tx timeout
[ 1913.881337][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[ 1913.881403][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[ 1915.782171][T22769] Bluetooth: hci11: command tx timeout
[ 1916.480801][T20643] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[ 1916.610789][T20643] usb 5-1: device descriptor read/64, error -71
[ 1916.880713][T20643] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[ 1917.032471][T20643] usb 5-1: device descriptor read/64, error -71
[ 1917.052678][T25204] chnl_net:caif_netlink_parms(): no params data found
[ 1917.256669][T20643] usb usb5-port1: attempt power cycle
[ 1917.610885][T20643] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[ 1917.648663][T20643] usb 5-1: device descriptor read/8, error -71
[ 1917.831203][T10437] Bluetooth: hci11: command tx timeout
[ 1917.900717][T20643] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[ 1918.161521][T20643] usb 5-1: device descriptor read/8, error -71
[ 1918.290736][T20643] usb usb5-port1: unable to enumerate USB device
[ 1919.975006][T10437] Bluetooth: hci11: command tx timeout
[ 1920.431249][   T30] audit: type=1326 audit(1773374283.936:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25273 comm="syz.4.3393" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f664219c799 code=0x0
[ 1922.526403][ T6696] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1924.164471][   T24] usb 7-1: new high-speed USB device number 50 using dummy_hcd
[ 1925.319686][   T24] usb 7-1: device descriptor read/64, error -71
[ 1925.570672][   T24] usb 7-1: new high-speed USB device number 51 using dummy_hcd
[ 1925.710881][   T24] usb 7-1: device descriptor read/64, error -71
[ 1925.825831][   T24] usb usb7-port1: attempt power cycle
[ 1926.451884][T22769] Bluetooth: hci5: command 0x0406 tx timeout
[ 1927.343663][ T6696] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1928.169345][   T30] audit: type=1326 audit(1773374291.666:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25344 comm="syz.0.3411" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9c0619c799 code=0x0
[ 1928.978391][ T6696] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1931.223905][ T6696] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1931.411280][T25204] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1931.411369][T25204] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1931.411604][T25204] bridge_slave_0: entered allmulticast mode
[ 1931.420203][T25204] bridge_slave_0: entered promiscuous mode
[ 1931.436300][T25204] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1931.436473][T25204] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1931.436675][T25204] bridge_slave_1: entered allmulticast mode
[ 1931.449985][T25204] bridge_slave_1: entered promiscuous mode
[ 1933.944776][T25204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1934.737615][T25204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1936.218356][T25204] team0: Port device team_slave_0 added
[ 1936.262122][T25204] team0: Port device team_slave_1 added
[ 1936.288567][   T30] audit: type=1326 audit(1773374299.786:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25406 comm="syz.5.3431" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0acb59c799 code=0x0
[ 1936.693646][T25204] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1936.693666][T25204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1936.693691][T25204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1936.837275][T25204] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1936.837301][T25204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1936.837335][T25204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1939.509557][T25204] hsr_slave_0: entered promiscuous mode
[ 1939.531000][T25204] hsr_slave_1: entered promiscuous mode
[ 1939.531926][T25204] debugfs: 'hsr0' already exists in 'hsr'
[ 1939.531949][T25204] Cannot create hsr debugfs directory
[ 1939.719191][ T6696] bridge_slave_1: left allmulticast mode
[ 1939.719224][ T6696] bridge_slave_1: left promiscuous mode
[ 1939.719430][ T6696] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1939.870677][ T6696] bridge_slave_0: left allmulticast mode
[ 1939.870711][ T6696] bridge_slave_0: left promiscuous mode
[ 1939.870943][ T6696] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1941.514309][T20390] Bluetooth: hci7: command 0x0406 tx timeout
[ 1944.484883][ T6696] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1944.521424][ T6696] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1944.536947][ T6696] bond0 (unregistering): Released all slaves
[ 1944.674214][T25442] batman_adv: batadv0: Adding interface: dummy0
[ 1944.674238][T25442] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1944.674274][T25442] batman_adv: batadv0: Interface activated: dummy0
[ 1944.724597][T25446] batadv0: mtu less than device minimum
[ 1944.726158][T25446] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1944.727726][T25446] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1944.729263][T25446] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1944.730803][T25446] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1944.732322][T25446] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1944.733707][T25446] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1944.734891][T25446] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1944.736053][T25446] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1944.737169][T25446] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1948.715946][ T6696] hsr_slave_0: left promiscuous mode
[ 1948.740279][ T6696] hsr_slave_1: left promiscuous mode
[ 1948.741652][ T6696] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1948.741674][ T6696] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1948.764627][ T6696] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1948.764659][ T6696] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1948.828378][ T6696] veth1_macvtap: left promiscuous mode
[ 1948.828429][ T6696] veth0_macvtap: left promiscuous mode
[ 1948.828503][ T6696] veth1_vlan: left promiscuous mode
[ 1948.828553][ T6696] veth0_vlan: left promiscuous mode
[ 1951.893731][ T6696] team0 (unregistering): Port device team_slave_1 removed
[ 1952.018897][ T6696] team0 (unregistering): Port device team_slave_0 removed
[ 1954.150184][T25571] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3480'.
[ 1954.219023][T25204] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1954.219091][T25204] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1954.768677][T25204] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1954.768712][T25204] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1955.335734][T25204] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1955.335782][T25204] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1956.607922][T25204] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1956.607969][T25204] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1956.711281][   T31] INFO: task syz.1.3192:24123 blocked for more than 143 seconds.
[ 1956.711317][   T31]       Tainted: G             L      syzkaller #0
[ 1956.711333][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1956.711347][   T31] task:syz.1.3192      state:D stack:28160 pid:24123 tgid:24122 ppid:10932  task_flags:0x400040 flags:0x00080002
[ 1956.711425][   T31] Call Trace:
[ 1956.711436][   T31]  <TASK>
[ 1956.711455][   T31]  __schedule+0x15dd/0x52d0
[ 1956.711496][   T31]  ? __lock_acquire+0x6b5/0x2cf0
[ 1956.711537][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1956.711588][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1956.711620][   T31]  ? stack_trace_save+0xa9/0x100
[ 1956.711650][   T31]  ? __pfx___schedule+0x10/0x10
[ 1956.711685][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1956.711720][   T31]  ? schedule+0x90/0x360
[ 1956.711751][   T31]  schedule+0x164/0x360
[ 1956.711782][   T31]  schedule_timeout+0xc3/0x2c0
[ 1956.711825][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[ 1956.711867][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1956.711902][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1956.711939][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1956.711975][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1956.712022][   T31]  __down_common+0x321/0x730
[ 1956.712066][   T31]  ? __pfx___down_common+0x10/0x10
[ 1956.712105][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1956.712137][   T31]  ? rcu_is_watching+0x15/0xb0
[ 1956.712184][   T31]  down+0x80/0xd0
[ 1956.712218][   T31]  console_lock+0x58/0x90
[ 1956.712243][   T31]  do_fb_ioctl+0x5f1/0x800
[ 1956.712416][   T31]  ? __pfx_do_fb_ioctl+0x10/0x10
[ 1956.712473][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1956.712528][   T31]  ? __fget_files+0x2a/0x420
[ 1956.712589][   T31]  ? __fget_files+0x3a0/0x420
[ 1956.712629][   T31]  ? __fget_files+0x2a/0x420
[ 1956.712673][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1956.712705][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1956.712738][   T31]  ? __pfx_fb_ioctl+0x10/0x10
[ 1956.712776][   T31]  __se_sys_ioctl+0xfc/0x170
[ 1956.712821][   T31]  do_syscall_64+0x14d/0xf80
[ 1956.712885][   T31]  ? trace_irq_disable+0x3b/0x150
[ 1956.712927][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1956.712961][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1956.712989][   T31] RIP: 0033:0x7feb2299c799
[ 1956.713014][   T31] RSP: 002b:00007feb237b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1956.713069][   T31] RAX: ffffffffffffffda RBX: 00007feb22c15fa0 RCX: 00007feb2299c799
[ 1956.713090][   T31] RDX: 0000200000000040 RSI: 0000000000004601 RDI: 0000000000000004
[ 1956.713110][   T31] RBP: 00007feb22a32c99 R08: 0000000000000000 R09: 0000000000000000
[ 1956.713128][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1956.713146][   T31] R13: 00007feb22c16038 R14: 00007feb22c15fa0 R15: 00007ffea74de2e8
[ 1956.713187][   T31]  </TASK>
[ 1956.713244][   T31] 
[ 1956.713244][   T31] Showing all locks held in the system:
[ 1956.713259][   T31] 1 lock held by khungtaskd/31:
[ 1956.713282][   T31]  #0: ffffffff8e75e420 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[ 1956.713385][   T31] 3 locks held by kworker/u8:6/148:
[ 1956.713403][   T31]  #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830
[ 1956.713526][   T31]  #1: ffffc90002e57c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830
[ 1956.713591][   T31]  #2: ffffffff8fbcd688 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[ 1956.713697][   T31] 3 locks held by kworker/u8:8/1106:
[ 1956.713725][   T31] 2 locks held by getty/5577:
[ 1956.713738][   T31]  #0: ffff888036fea0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 1956.713842][   T31]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0
[ 1956.713902][   T31] 4 locks held by kworker/u8:13/6696:
[ 1956.713915][   T31]  #0: ffff88801b6d6948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830
[ 1956.713975][   T31]  #1: ffffc9000d63fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830
[ 1956.714034][   T31]  #2: ffffffff8fbbeef0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800
[ 1956.714101][   T31]  #3: ffffffff8fbcd688 (rtnl_mutex){+.+.}-{4:4}, at: caif_exit_net+0x6a/0x4a0
[ 1956.714187][   T31] 4 locks held by kworker/u8:5/9921:
[ 1956.714203][   T31] 4 locks held by kworker/u8:0/18566:
[ 1956.714217][   T31] 3 locks held by kworker/u9:2/20390:
[ 1956.714229][   T31]  #0: ffff8880778fc948 ((wq_completion)hci8){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830
[ 1956.714294][   T31]  #1: ffffc900055a7c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830
[ 1956.714355][   T31]  #2: ffff88803fa58ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400
[ 1956.714438][   T31] 6 locks held by syz.0.3182/24094:
[ 1956.714454][   T31] 2 locks held by syz.3.3261/24586:
[ 1956.714466][   T31]  #0: ffffffff8eff3828 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x22d/0xd70
[ 1956.714521][   T31]  #1: ffff88807d0c61c0 (&tty->legacy_mutex){+.+.}-{4:4}, at: tty_init_dev+0x74/0x4d0
[ 1956.714602][   T31] 8 locks held by syz-executor/25204:
[ 1956.714614][   T31]  #0: ffff888033146420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x227/0xb90
[ 1956.714682][   T31]  #1: ffff88802a155c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1de/0x540
[ 1956.714739][   T31]  #2: ffff88802804a788 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x231/0x540
[ 1956.714803][   T31]  #3: ffffffff8f441f48 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370
[ 1956.714888][   T31]  #4: ffff88807c6a10e8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x860
[ 1956.714970][   T31]  #5: ffff88807c6a4250 (&devlink->lock_key#22){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x170
[ 1956.715047][   T31]  #6: ffffffff8fbcd688 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0xed/0x680
[ 1956.715099][   T31]  #7: ffffffff8e7646b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770
[ 1956.715165][   T31] 1 lock held by syz.4.3481/25591:
[ 1956.715179][   T31] 1 lock held by syz.4.3481/25600:
[ 1956.715191][   T31] 1 lock held by syz.5.3485/25592:
[ 1956.715203][   T31]  #0: ffff888022395900 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x234/0x4f0
[ 1956.715277][   T31] 1 lock held by syz.5.3485/25593:
[ 1956.715289][   T31] 2 locks held by syz.0.3487/25596:
[ 1956.715302][   T31] 2 locks held by syz.6.3486/25598:
[ 1956.715314][   T31] 2 locks held by syz.8.3488/25601:
[ 1956.715326][   T31]  #0: ffff88807b78f508 (&sb->s_type->i_mutex_key#14){+.+.}-{4:4}, at: sock_close+0x9b/0x240
[ 1956.715411][   T31]  #1: ffffffff8e7646b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770
[ 1956.715477][   T31] 
[ 1956.715484][   T31] =============================================
[ 1956.715484][   T31] 
[ 1956.715494][   T31] NMI backtrace for cpu 0
[ 1956.715508][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1956.715532][   T31] Tainted: [L]=SOFTLOCKUP
[ 1956.715539][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[ 1956.715549][   T31] Call Trace:
[ 1956.715558][   T31]  <TASK>
[ 1956.715566][   T31]  dump_stack_lvl+0xe8/0x150
[ 1956.715594][   T31]  nmi_cpu_backtrace+0x274/0x2d0
[ 1956.715638][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1956.715666][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[ 1956.715696][   T31]  sys_info+0x135/0x170
[ 1956.715720][   T31]  watchdog+0xfd9/0x1030
[ 1956.715754][   T31]  ? watchdog+0x21a/0x1030
[ 1956.715791][   T31]  kthread+0x388/0x470
[ 1956.715810][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1956.715838][   T31]  ? __pfx_kthread+0x10/0x10
[ 1956.715857][   T31]  ret_from_fork+0x51e/0xb90
[ 1956.715885][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 1956.715909][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1956.715931][   T31]  ? __switch_to+0xc7d/0x1450
[ 1956.715956][   T31]  ? __pfx_kthread+0x10/0x10
[ 1956.715975][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1956.716018][   T31]  </TASK>
[ 1956.716025][   T31] Sending NMI from CPU 0 to CPUs 1:
[ 1956.716061][    C1] NMI backtrace for cpu 1
[ 1956.716078][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1956.716106][    C1] Tainted: [L]=SOFTLOCKUP
[ 1956.716114][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[ 1956.716127][    C1] RIP: 0010:pv_native_safe_halt+0xf/0x20
[ 1956.716203][    C1] Code: be 6c 02 e9 8e 12 62 f5 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 32 1b 00 fb f4 <e9> 67 12 62 f5 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90
[ 1956.716221][    C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000246
[ 1956.716240][    C1] RAX: 00000000044983dd RBX: ffffffff819a8c8a RCX: 0000000080000001
[ 1956.716256][    C1] RDX: 0000000000000001 RSI: ffffffff8def61cd RDI: ffffffff8c27bc00
[ 1956.716273][    C1] RBP: ffffc90000197f10 R08: ffff8880b873395b R09: 1ffff110170e672b
[ 1956.716289][    C1] R10: dffffc0000000000 R11: ffffed10170e672c R12: ffffffff901196b0
[ 1956.716306][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003a5f000
[ 1956.716323][    C1] FS:  0000000000000000(0000) GS:ffff888125560000(0000) knlGS:0000000000000000
[ 1956.716341][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1956.716357][    C1] CR2: 0000000000000000 CR3: 0000000052eff000 CR4: 0000000000350ef0
[ 1956.716374][    C1] Call Trace:
[ 1956.716382][    C1]  <TASK>
[ 1956.716391][    C1]  default_idle+0x9/0x20
[ 1956.716418][    C1]  default_idle_call+0x72/0xb0
[ 1956.716447][    C1]  do_idle+0x1ba/0x5d0
[ 1956.716483][    C1]  ? __pfx_do_idle+0x10/0x10
[ 1956.716517][    C1]  ? do_idle+0xc/0x5d0
[ 1956.716550][    C1]  cpu_startup_entry+0x43/0x60
[ 1956.716582][    C1]  start_secondary+0x101/0x110
[ 1956.716609][    C1]  common_startup_64+0x13e/0x147
[ 1956.716644][    C1]  </TASK>
[ 1956.717047][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[ 1956.717062][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1956.717086][   T31] Tainted: [L]=SOFTLOCKUP
[ 1956.717095][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[ 1956.717107][   T31] Call Trace:
[ 1956.717115][   T31]  <TASK>
[ 1956.717124][   T31]  vpanic+0x56c/0xa60
[ 1956.717154][   T31]  ? __pfx_vpanic+0x10/0x10
[ 1956.717182][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1956.717213][   T31]  panic+0xc5/0xd0
[ 1956.717239][   T31]  ? __pfx_panic+0x10/0x10
[ 1956.717268][   T31]  ? printk_trigger_flush+0x13d/0x180
[ 1956.717292][   T31]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1956.717313][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1956.717337][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1956.717363][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1956.717387][   T31]  ? nmi_trigger_cpumask_backtrace+0x234/0x300
[ 1956.717422][   T31]  watchdog+0x1023/0x1030
[ 1956.717458][   T31]  ? watchdog+0x21a/0x1030
[ 1956.717494][   T31]  kthread+0x388/0x470
[ 1956.717514][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1956.717543][   T31]  ? __pfx_kthread+0x10/0x10
[ 1956.717563][   T31]  ret_from_fork+0x51e/0xb90
[ 1956.717596][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 1956.717620][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1956.717643][   T31]  ? __switch_to+0xc7d/0x1450
[ 1956.717668][   T31]  ? __pfx_kthread+0x10/0x10
[ 1956.717689][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1956.717732][   T31]  </TASK>
[ 1956.717838][   T31] Kernel Offset: disabled