last executing test programs:

4m6.736000112s ago: executing program 4 (id=116):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xa4}, [@ldst={0x4, 0x3, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0x1}, &(0x7f00000000c0), 0x0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_io_uring_setup(0x71fd, &(0x7f0000000300)={0x0, 0x3680, 0x20, 0x2, 0x93}, 0x0, &(0x7f00000003c0), &(0x7f0000000000))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000540)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1)
openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x414902, 0x80)
mount(&(0x7f0000000240), 0x0, &(0x7f0000000140)='ufs\x00', 0x0, 0x0)
r3 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f00000000c0), 0x0, 0xffffffffffffffff)
r4 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000280)='asymmetric\x00', &(0x7f0000000240)=@keyring={'key_or_keyring:', r3})
mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000002280)='vxfs\x00', 0x8000, 0x0)

4m4.401945541s ago: executing program 4 (id=117):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[<r3=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000})

3m56.642370006s ago: executing program 4 (id=131):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680))
prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x80000100008b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r0 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0)
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r3 = dup(r2)
write$UHID_INPUT(r3, &(0x7f0000002080)={0x200f, {"20e30a30ed0d09f91b5e070987f70e06d038e7ff7fc6e5539b0d3e0e8b089b3f363063030890e0879b0af8c6e70a9b334a959b669a240d0a0af3988f7ef319520100ffe8d178708c526db51b1b5b31070d0773090acd3b78130daa61d8e8040001000000b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19300305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f6709000000a141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a027d5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf050000008000000000f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b3f3f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7af1d0e54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c01008e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2f5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d21488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e1a63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e09d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a603336c00000077cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046ca5b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe6531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e6586df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59555e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0d8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb601203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f900000930dedf800", 0x1000}}, 0x1006)

3m51.051244286s ago: executing program 4 (id=138):
syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f0000000300)=ANY=[@ANYBLOB='nobarrier,gid=', @ANYRESHEX=0x0, @ANYBLOB="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", @ANYRESDEC, @ANYRESDEC], 0x44, 0x6f7, &(0x7f0000001f80)="$eJzs3U1sHGcZAOB31uu1N5XcbZu0BSHFakQEDSS2l5IgIREqhHyoUCQuvS6J01heu5HtIidCxAUKRzihHDgUIXPoCfWABOKAKGckJK4o90jcIw4smtmZ9f7Y693GP0n6PNJ4vpn5ft55O/Pt7myjDeAza/HtmNyOJBYvvLWVbj/YqTcf7NRXi3JETEVEKaLcXkWyFpF8EnE12kt8Lt2Zd5fsN84bD//0m/P3P6q3t8r5ktUvDWu3qzVkhO18idmImMjXYyrv19/1eHOgv3tjdZ104k4Tdq5IHJy01oDtcZqPcN8CT7p7EROTe+yvRZyKiOn8fUDks0PpmMM7dGPNcgAAAPBkmjiowvOP4lFsxczxhAMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADPhqT9m4FJvpSK8mwkxe//V/J9qUrlhOMd7isHHP/g5jEFAgAAAAAAAABH4uP8i/uzj+JRbMVMsb+VZN/5v5ZtnM7+PhfvxUYsxXpcjK1oxGZsxnrMR0zOdHVY2Wpsbq7PD7b8daQtW63WvbzlQkTUBlouHMNJAwAAAAAAAMCz6yexGDMnHQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHRLIibaq2w5XZRrUSpHxHREVNJ62xF/KcpPuuqQY389xjgAAADghBQfjWeS/7ULrST7zP9y9rl/Ot6LtdiM5diMZizFjexZQPtTf+mf2/Xmg536aroMdvzt/4wVR9ZjREzE+/uMPJfVONNpsRjfje/HhZiNa7Eey/HDaMRmLMVsVNOTiEYkUau2n17Uijj3jvdqz9a1/tjO9m2/mkVSjZuxnMV2Ma5Xov3YJDuHdMxXu0b7YyWib8T30+wk38qNmKMbXf+9fpU/l8m1nh+xj6NRy858spORuTT3eTZeGJ77Ma+T/pHmo9R5BnV6d5R0s3+kIuc/GCfnp/J1muuf9+b8sI35KK0/EwtRyq++iJd7c377i/df7G385X/97dqt0trKrZsbF47wlB7H7EEVJotCfybqXZl4ZfjVl2eimWZie/RMTPbvmB615dGq5NnIpqIRZ8vvZKVGvNZ1Cb4bN2IpLsdczMeVmItvxELUO1dYupzpyWu5vtqbk+xeKw3Ob8OexJ77UlelXxxQ+XileXmhK6/dM10tO5bvufrLmOu6+l4cfvWN/SqQjv/5vJyO8dPOK86ToCcT+dxcRPfS8Ez8tpX+3Wiurazfatwecbzz+Tq9bT/onZt/N3rU/a/uhyG9XtIZt5xtZTmpFtdLeuylTrS9+ark37i025UGjp3pHKvFTCzH9/a9Uyv5e7jBntrHXuk+9u/dmbOSv78pjvW8y4l3o5m9C+lz4FQNwDE79fqpSvVh9R/VD6s/q96qvjX95tSVqS9UYvLv5T9P/KH0+9I3k9fjw/hxzJx0pAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8CzYuHN3pdFsLq13CjHdv+dxC5V9xxpeiNKBdXaeG63DqEUMHyvJC5XDPfensVCNvj3FLyw9bs8fR8SQOpXHDj4Z+xobu5Dm4VA6LH44LdvTmhijeblotXedcmxMx0ojKe9xx03t3gVRW2k0/9vqaV6NrlsGeMZd2ly9fWnjzt2vLq823ll6Z2lt4crlK5frX5//2qWby82lufbfk44SOAobd+5OnHQMAAAAAAAAAAAAwHjy//t/81P/Y4byAXUq6xt7j3z2uE8VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeEotvh2T25HE/NzFuXT7wU69mS5FebdmOSJKEZH8KCL5JOJqtJeodXWX7DfOGw+jdP7+R/XdvspF/dKwdqPZzpeYjYiJfH2wqT26Gezveld/258qvKRzhmnCzhWJg5P2/wAAAP//vnbzsA==")
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f00000000c0)={0x1, 0xf0, 0x1, 0x4, 0x6, 0x0, 0x8, 0x7f, 0x5, 0x1, 0x4, 0x8, 0xc, 0x6}, 0xe)
socket$l2tp6(0xa, 0x2, 0x73)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
socket$inet(0x2, 0x3, 0x2)
syz_emit_ethernet(0x36, 0x0, 0x0)
syz_create_resource$binfmt(0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
munlock(&(0x7f0000a2b000/0x1000)=nil, 0x1000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="05f1aeb51328f6000000", @ANYBLOB="000429bd7000fddbdf25210000000400ff000500f600060000000600980005"], 0x4c}, 0x1, 0x0, 0x0, 0x80000}, 0x2)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000200)={'8255\x00', [0x4f27, 0xa, 0xffffffff, 0x401, 0x1, 0xcd7, 0xfff, 0x5c952399, 0xffffffff, 0x3ff, 0xfffff000, 0x1600, 0xfffffffe, 0x1, 0x9, 0xe1cb, 0x7bbd, 0x4, 0x3, 0x396, 0x80000089, 0xfffffffe, 0x0, 0xfffffff1, 0xffffeadb, 0x3, 0x3a, 0x1, 0x4, 0x8000000, 0xdffffffa]})
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r3, 0x6405, &(0x7f00000001c0))
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0)

3m48.524922222s ago: executing program 4 (id=146):
setresgid(0xee00, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000340)='./file1\x00', 0x0, &(0x7f0000000000)={[{@space_cache_v1}, {@clear_cache}, {@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0xff, 0x50d4, &(0x7f00000051c0)="$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")
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0x7d, 0x0, &(0x7f00000001c0))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.swap.current\x00', 0x275a, 0x0)

3m48.351889328s ago: executing program 1 (id=147):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
sendfile(r1, r1, 0x0, 0x2000fb)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)

3m48.082785997s ago: executing program 1 (id=148):
r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0x4, 0x4, 0x8}, 0x48)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58)
accept4(r2, 0x0, 0x0, 0x800)
setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000040)=0x4, 0x4)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

3m48.021240259s ago: executing program 1 (id=149):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)

3m47.900038174s ago: executing program 4 (id=150):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf1d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xfff1, 0xffff}, {0x6, 0xfff3}}}, 0x24}}, 0x4000800)

3m47.594101324s ago: executing program 32 (id=150):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf1d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xfff1, 0xffff}, {0x6, 0xfff3}}}, 0x24}}, 0x4000800)

3m46.131757424s ago: executing program 1 (id=156):
syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f0000000300)=ANY=[@ANYBLOB='nobarrier,gid=', @ANYRESHEX=0x0, @ANYBLOB="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", @ANYRESDEC, @ANYRESDEC], 0x44, 0x6f7, &(0x7f0000001f80)="$eJzs3U1sHGcZAOB31uu1N5XcbZu0BSHFakQEDSS2l5IgIREqhHyoUCQuvS6J01heu5HtIidCxAUKRzihHDgUIXPoCfWABOKAKGckJK4o90jcIw4smtmZ9f7Y693GP0n6PNJ4vpn5ft55O/Pt7myjDeAza/HtmNyOJBYvvLWVbj/YqTcf7NRXi3JETEVEKaLcXkWyFpF8EnE12kt8Lt2Zd5fsN84bD//0m/P3P6q3t8r5ktUvDWu3qzVkhO18idmImMjXYyrv19/1eHOgv3tjdZ104k4Tdq5IHJy01oDtcZqPcN8CT7p7EROTe+yvRZyKiOn8fUDks0PpmMM7dGPNcgAAAPBkmjiowvOP4lFsxczxhAMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADPhqT9m4FJvpSK8mwkxe//V/J9qUrlhOMd7isHHP/g5jEFAgAAAAAAAABH4uP8i/uzj+JRbMVMsb+VZN/5v5ZtnM7+PhfvxUYsxXpcjK1oxGZsxnrMR0zOdHVY2Wpsbq7PD7b8daQtW63WvbzlQkTUBlouHMNJAwAAAAAAAMCz6yexGDMnHQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHRLIibaq2w5XZRrUSpHxHREVNJ62xF/KcpPuuqQY389xjgAAADghBQfjWeS/7ULrST7zP9y9rl/Ot6LtdiM5diMZizFjexZQPtTf+mf2/Xmg536aroMdvzt/4wVR9ZjREzE+/uMPJfVONNpsRjfje/HhZiNa7Eey/HDaMRmLMVsVNOTiEYkUau2n17Uijj3jvdqz9a1/tjO9m2/mkVSjZuxnMV2Ma5Xov3YJDuHdMxXu0b7YyWib8T30+wk38qNmKMbXf+9fpU/l8m1nh+xj6NRy858spORuTT3eTZeGJ77Ma+T/pHmo9R5BnV6d5R0s3+kIuc/GCfnp/J1muuf9+b8sI35KK0/EwtRyq++iJd7c377i/df7G385X/97dqt0trKrZsbF47wlB7H7EEVJotCfybqXZl4ZfjVl2eimWZie/RMTPbvmB615dGq5NnIpqIRZ8vvZKVGvNZ1Cb4bN2IpLsdczMeVmItvxELUO1dYupzpyWu5vtqbk+xeKw3Ob8OexJ77UlelXxxQ+XileXmhK6/dM10tO5bvufrLmOu6+l4cfvWN/SqQjv/5vJyO8dPOK86ToCcT+dxcRPfS8Ez8tpX+3Wiurazfatwecbzz+Tq9bT/onZt/N3rU/a/uhyG9XtIZt5xtZTmpFtdLeuylTrS9+ark37i025UGjp3pHKvFTCzH9/a9Uyv5e7jBntrHXuk+9u/dmbOSv78pjvW8y4l3o5m9C+lz4FQNwDE79fqpSvVh9R/VD6s/q96qvjX95tSVqS9UYvLv5T9P/KH0+9I3k9fjw/hxzJx0pAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8CzYuHN3pdFsLq13CjHdv+dxC5V9xxpeiNKBdXaeG63DqEUMHyvJC5XDPfensVCNvj3FLyw9bs8fR8SQOpXHDj4Z+xobu5Dm4VA6LH44LdvTmhijeblotXedcmxMx0ojKe9xx03t3gVRW2k0/9vqaV6NrlsGeMZd2ly9fWnjzt2vLq823ll6Z2lt4crlK5frX5//2qWby82lufbfk44SOAobd+5OnHQMAAAAAAAAAAAAwHjy//t/81P/Y4byAXUq6xt7j3z2uE8VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeEotvh2T25HE/NzFuXT7wU69mS5FebdmOSJKEZH8KCL5JOJqtJeodXWX7DfOGw+jdP7+R/XdvspF/dKwdqPZzpeYjYiJfH2wqT26Gezveld/258qvKRzhmnCzhWJg5P2/wAAAP//vnbzsA==")
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f00000000c0)={0x1, 0xf0, 0x1, 0x4, 0x6, 0x0, 0x8, 0x7f, 0x5, 0x1, 0x4, 0x8, 0xc, 0x6}, 0xe)
socket$l2tp6(0xa, 0x2, 0x73)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
socket$inet(0x2, 0x3, 0x2)
syz_emit_ethernet(0x36, 0x0, 0x0)
syz_create_resource$binfmt(0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
munlock(&(0x7f0000a2b000/0x1000)=nil, 0x1000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="05f1aeb51328f6000000", @ANYBLOB="000429bd7000fddbdf25210000000400ff000500f600060000000600980005"], 0x4c}, 0x1, 0x0, 0x0, 0x80000}, 0x2)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000200)={'8255\x00', [0x4f27, 0xa, 0xffffffff, 0x401, 0x1, 0xcd7, 0xfff, 0x5c952399, 0xffffffff, 0x3ff, 0xfffff000, 0x1600, 0xfffffffe, 0x1, 0x9, 0xe1cb, 0x7bbd, 0x4, 0x3, 0x396, 0x80000089, 0xfffffffe, 0x0, 0xfffffff1, 0xffffeadb, 0x3, 0x3a, 0x1, 0x4, 0x8000000, 0xdffffffa]})
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r3, 0x6405, &(0x7f00000001c0))
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0)

3m44.443846471s ago: executing program 1 (id=160):
setresgid(0xee00, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000340)='./file1\x00', 0x0, &(0x7f0000000000)={[{@space_cache_v1}, {@clear_cache}, {@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0xff, 0x50d4, &(0x7f00000051c0)="$eJzs3U+IVWUfB/Dnzjg6KDjXnbp48QW3wiQKRURDaFaYc82CosVMLYIQYVAwFy3EgpIWDgha4cJgWmR/nFVFC3GVBEEQBcEgzEKQdkIxGC6Ke8957pz7HO+5dyZ1TD+fmDnnOb/zPOeZy1nc783n3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAhhJNz585V1bdemTm7Y2DP1Us3T+w8NTE6H0KtdbyW1yeeeuaFNw5MPD8cO0zuz7b1erchs67zWWN1x8Fmv86f10IIQ8kAg/l292Bp1OLu4fKAlfZfXNh25NbeXTPHxg9dOLp5qvyn0zS80hNYKfl9dW3xXhpr/R5Izmi3C7dereMWzfqnN9w9+SMAgCUZbbQ27bej+Vvcdvt4Wk/aY0l7OmnHdwjTxcZyZOOu7jbPLWl9heY5lkWFNd3mWU/q+evfbjeSekjbnVFjCfPsPDWPNMPd5jmV1FdqngAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD3k6c/+eJ6VX3rlZmzOwb2XL1088TOUxOj8yHUW8drWbn2xMLcwqa3dj/63e4vP/6zPn5yMO8Xt6sKJ4ff4s5jIyG8Xqhci8P+vj6ERmeh1QwflQtvtnaejQUAAAAeJJtavwfa7SwODnW0a600WWv9F2Vhcf/FhW1Hbu3dNXNs/NCFo5unlj9eo8t4Y7cdr92uL/7UCsE4xt90vMV6PPVwaZxq6Yhpnn959MPtVf1L+b9enf/jKyf/AwAA8G/I/+k41Xrl//nPX91X1b+U/7d0XLKU/+OMY/4fCMvL/wAAAHA/u9v5f6w0TrVe+f/r9/edrupfyv+j/eX/VcVpx4M/xgkfHAlhtNfUAQAAgC7i/3df/Ggh5vXsk4M0r7+49fpQ1Xil/D/WX/6vHBQAAAC4p34488jfVfVS/m/0l//X3NVZAwAAAEvxv/cmD1TVS/l/sr/8vzbf5isfsk7fx3+FcHokhOHmzlRWuBKmn2wXAAAAgDsk5vSXvt18tOq8Uv6fqn7+f3zSQVz/3/H8v9L6/0Ihe+rf4x4MAAAAwMOovJ4/Ph4/++aCbt+/3+/6/09//nVD1fVL+f94f/l/sLi9k9//BwAAAMvwX/v+v1dK41Tr9fz/t9/dsLT8P91f/o/bdcU/73J8fd4ZCWFjcyd/muBn8XIHk8LsUKHQ0kh6HIg98sLsmkKhZSrpsX0khP83d44nhQ2xMJ0UbqzPC+eTwk+xkN8P7cJXSeFyvNPOrM+nmxa+iYV8gcVsXEGxrr0kIunxR7cezcJte8y1Lw4AAPBQieE5z7JDnc2QRtnZWq8T1vY6YaDXCYO9TliVnJCe2O14mOwsxON//TL+XKhQyv/n+8v/8aVYnW26rf8Pcf1//r2G7fX/k7FQTwqzsdBInxjQiNfIwu4H8Rr1Rt7jxsZ2AQAAAB5o8XOBwRWeBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAPe/ceY8dVHw787PN61+vdDUHKQxYxL0N+ktdrOw7WLyCcVBEIpGQtov6DQtbYm9TxBhs/Co4s1RhUlCKEC66IQh+2RFSnEsgqbXmEEosqQVUtGoU2fziPpgWEKkGjFNclSiRX986c2bln9j78WNsbPh/Je8+933POzDn33vGcmblnAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgt8PV373hy+3i7/jR1796U+8HXvjBbw6u/9I9ky+FMNV4vScL97zvzHNnrvvU7Ru+d/s3Hjk9fudDg3m5PB6W1v/05k8+F2v92bIQvt0TQn8aWDWSBQby5yOxvuUjIVwV5gJFiZnhrES64PDkUAhHwlygqOq7QyGMlAJ3PfPDJ75YTxweCuGdIYRauowXatkyhtLAysEsMJwGdvRngf89mykC3+nNAnDB4peh+NAfn2rOMD5/uRafv4GLtmKXV9q8vpgYb53vV7cu8EqVDKYvTF3Q21apjgVR+Xqc8G1bBN+2Sj8f8raVd6TyPZSzc6Fa6N06c+/mvbN74iu9YWKir1VNC/Q+n3pl/5ZzSS+az2FcgfGL8jm8//DNzw5+7I4XH3n98f2na19bfqGr2ap7F1ot5J+5RfM+RhttTxbB16+yl7TCTlcI4fSJk/vbxSvj//H24//4cY6PvU25Y62vjWZj8/jKSEy8PJqNzQEAAGDRWAxHTQdX/OtP29VXGf+v6O78fzzlnw/ms9aeCGFjI/HZsRCubbyeBR6Li/v4WAhvbaSmmgO3JoETIVzXSNxYVJWUWBJLrEgCvxjNAxuTwFMxMJUEHo2BQ0ngczFwPAlsiYETSeC2GAjbmtvx/0bzdnQdGIqB6awTj8erEH49GpeW9NVzRVUAAAAXST46HGh+WrrW4UIzxOHl8aFOGeIV2C0z1JIa0hFsMaxqWUN/pxp6O9VQtPtA++ZXau7pVHPlMoye5gz/c+qaHaGNyvh/sv34vzbPivRUzv+HyU2Nh5i7N4/MFhmmp5oyAAAAABfg9948vbldvDL+39jd9f/xmEhfKXM4GQ9DbB8LYbI5kFV7SzWQnfVemgcAAABgMSjOxxfnwrflj9kl2ul4upp/6hzzxxP/G+fNv+PH//J4u/WtjP+nurv+f7j5MVuJp+JafGUshCWlwI/iWtYDDSti4KX3Nwfy9j8VO+ALsar8woSiqi/EEtMxMJkEjrQq8XRR4trmQP5mFQv/bNGObXmJUgAAAAAuuXg4IJ6Xj9f/r/nbP3yyXbnK+H/63K7/b4yDK5f3zy4NYXV/CH3pDwNODmcTA8bASE+e+PvhrK6+tKqDwyHcUm9YWtV/5PP/96dzDP5kKKsqBq5927FXVtYTXx8KYXU58OxHj66vJ/YmgWLhvzsUwg311qYL/7sl2cIH0oU/vCSEt5QCRVVbloRQX9hgWtU/1PL7GKRVHa+FcHUpUFT1nloI+wIAi1X8v3Rr+cXd+x7cvnl2dmbXAibiQfyhcO+22ZmJLTtmt9ZarNPWZJ2b5jH6TLVN3d765vk4R9Hdx8a6SRc/FJwsLys/kF+5cjB/HneGBhrtXDvQ9HRd2uR3v726iFDalWrV5N4FbvJwuZK5N7FSf8w/GJaGJXt3z+ya+PTmPXt2rcn+dpt9bfY3nmfK+mpN2lfD861bFx+PltNlJc63r1aWK1m954Gdq3fve3DVtgc23zdz38wnNkyuW7vh5sn171ldb9Rk9rdDS1fOV3PS0rNHu2zWRWzp9f2lSi7FRkNCQmKxJQYH7jzVbvNTGf/vbD/+j1uduOHP52dodf5/PJ7mz16fO80/HQNHuj3/P97qbH5xYcCKJHAgBg44zQ8AAMAbQzwcGY9mxoPSB971wvvalauM/w909/v/izT/fzF1/YdaTfN/Yywx2Wr+/3Sa/2L+/wOt5v9Pp/kv5v8/chnm/99bBJIu+bX5/wEAgDeCSzf/f8fp/dMbBFQydJzeP71BQCVDx2n8u71BwDnP//83v1yzPrRRGf8f6m78b+J+AAAAuHJcc9sNP24Xr4z/j3Q3/r/08/+FVtf/r2gVmGo1MaD5/wAAAFikWs3/98xHdr6/XbnK+P94d+P/eNlFb1PuWOtro9mcdiGd0+7l0eInAwAAALA49IaJiYEu8zZNjHrr+S/zVJwKtE267NDnj53b7/9PdDf+b/pdxv2Hb3528GN3vPjaI68/vv907WvL587/AwAAAAun2+MSAAAAAAAAAAAAAADA5ffo1d+ad16AqPL7/7Cp8Xqr3//H+/413TTxTD4Z4IE4s/6XxkzzBwAAAAvroVtffTj+u+/Lf/Rf7fJWxv/j3Y3/4/0F8vvgZbfeOxHv//fZsRAat9YbzwKPxcV9fCyEtzZSU7FEdkO9D8USk1ngsThh4o2xxPRUc1VLYuB4EvjFaB44kQSeioH8KMWxeGPAPx4NYX0jtam5xM5YYjwJ3BkDK5LARAxMJoFlMbAxCfxyWR6YSgL/FAP5zQeLvvrWsryvAAAAzkU+zhpofhrScd7x/k4Zejpl6LiI4U4ZejtlqLXIEJ//dVyHgfJ8/HmG+NJAWutQUkslQ7wZ3vk3vZiu7+nmnGnByqL7YsHx5pwxw85/vukroY3K+H9Fd+P/y3j///Ru/htjYEUS2BkDG5PA9KY8cOSa5oD7/wMAAHBla3X//9G3/NWhduUq4//J7sb/8UDEm5tyx1o73/8/f37Xh7+5r7HKJ0dDeHs5sP3g9qvqiUdHQ3hXOfDE3Tc2Ru0H0xLff/G2n9cT96SBD65605l64r1JYDp20nVpIB5VObMsCcTu/UkaiP1xPA0M5oGHlmXt6En76j9Hsr7qSfvq1Eh2eUVP2lffHsmW0ZM28HASKBr4yTQQG3hHHuhN1+qbS7O1ioGRWPQvlhYXfQAAcGWKe4ED4d5tszOT6U94r+9vfoyabln+mWq1PV0u/vl4a/K7j411k+5L90VrRVUDoVZvwprK7mo5S0+jlRenlg5d9+YWTe50t/feFuVS59p1g61bNJS1aGLLjtmtAx0bvq5zlrX9HbOsqQx2yll6G13aRS1drEsXLeqyb7pY5fi8N0xM9CW5/n8MjocmnT4R3d6vr3yf/1afgnKeo5//91fb1VcZ/2/sbvwf27M0lD7On4u1/mxZCN/umTsaUQRWjWSB2NyRODxePhLCVaV+KErMDGclBpMFhyeHshHqYFrVd4eyYwzx+V3P/PCJL9YTh4dCeGfpvSqW8UItW8ZQGlg5mAWG08CO/iwQr/woAt/pzQJwwYqNQvxA5T91KYzPX67F5++Nck/QtHmVa6DmyTffNneh1NIX8muqCuf2tlWqY0FUvh4nfNsW47ct+LaVd6TyPZSzc6Fa6N06c+/mvbN74ivlPdmKBXqfy3up3aQvwufwwPmvbWe1dAUmk83H5Pzl5v8c9sTq7j9887ODH7vjxUdef3z/6drXlne9Gi3EgcKT//2mq8rdu9BqIf/MLbrtyZTtyWL8b2Dc2xZCOPTnQ59sF6+M/6e6G//3J48Nr8bO3D0WwrtLnXsydv/vjGXbwVIg20peXQ1kl9z/dLTllhMAAAAutuJwR3G8YFv+mP0gPB0nV/NPnWP+eLxi47z5u13v/U/+/mPt4pXx/3T78f+SZDWd/3f+nwXi/P+8rvRD0UvSFw5c0KHoSnUsCOf/53Wlf9uc/5+X8//O/8/H+f8OnP+f15X+tlX2knba6QohnL1+4OF28cr4f2d34//fsvn/09n8i/n/00n7i/n/p1vN/7+z1fz/B8z/DwAALKgWE82n47zK5PyVDOnk/JUMPUmGc7/FQMdp9M3/n87/f/DPbtkT2qiM/w90N/6PH4eR8tIXy/z/45talNi4qXl1i8ChGNjpjgEAAABcRvEAQbzovdsZJgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFhYd7x6ZnO7+Dt+9PWv3tT7gRd+8JuD6790z+RLIWxrvN6ThXved+a5M9d96vYN37v9G4+cHr/zoVpebiB/XN6UO9b62mgIR0qvjMTEy6P1J3OBuz78zX399cTJ0RDeXg5sP7j9qnri0dEQ3lUOPHH3jdfUEwfTEt9/8baf1xP3pIEPrnrTmXrivXmgJ13dP12WrW5PurpfXBbCWClQrO79y5qrKpbxgTzQmy7jL0eyZcTASCz68Ei2jBiYjSW2LQlhdX8IfWlV/1jLqupLq/peLauqL63qD2oh3BJC6E+r+rfBrKr+tOVPD2ZVxcC1bzv2ysp64uhgCKvLgWc/enR9PbErCRQL/8hgCDfUPzLpwr81kC18IF34nwyE8JZSoKhqeiCE+sIG06pO9GdVDaZVfaM/hKtLgaKqm/pD2Be4XOKGZGv5xd37Hty+eXZ2ZtcCJgbzZQ2Fe7fNzkxs2TG7tZasUys9pfTZz5x/259/Zf+WRuLuY2PdpIv1miyvy9NTlRfLz/vzpwONdq4daHq6brE0ebhcydybWKk/5h8MS8OSvbtndk18evOePbvWZH+7zb42+9uXR7O+WrNY+mpluZLVex7YuXr3vgdXbXtg830z9818YsPkurUbbp5c/57V9UZNZn8vRkuPXvqWXt9fquRSbDQkJCQWW6K3aes2eaVvxys7+nMrOhBqjQ10ZVhRztLTaOXFaPSt59Ha3Lk2ujIkqbRoTWXgUMmytnOWdZUxw1yWoSxLY1+wMjgs19Tb6NL4vDdMTPS16ofx5qfl7v3VBXTvqdh1XaYBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4P3bgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04FgAAAAAQ5m8dRs8GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXAoAAP//Qczu7Q==")
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0x7d, 0x0, &(0x7f00000001c0))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.swap.current\x00', 0x275a, 0x0)

3m40.847978684s ago: executing program 1 (id=164):
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000001000}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)

3m39.680204844s ago: executing program 33 (id=164):
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000001000}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)

2m1.707789012s ago: executing program 5 (id=484):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x80, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x5823, 0x7, 0x6362, 0x5, 0xfffffffd, 0xffffffff}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804)
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000050}, 0x0)

2m0.424359706s ago: executing program 5 (id=488):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
io_setup(0x3, 0x0)

1m59.935814803s ago: executing program 5 (id=491):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
preadv2(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f00000008c0)=""/211, 0xd3}], 0x1, 0x4, 0x0, 0x0)

1m59.525044746s ago: executing program 5 (id=495):
syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f0000000300)=ANY=[@ANYBLOB='nobarrier,gid=', @ANYRESHEX=0x0, @ANYBLOB="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", @ANYRESDEC, @ANYRESDEC], 0x44, 0x6f7, &(0x7f0000001f80)="$eJzs3U1sHGcZAOB31uu1N5XcbZu0BSHFakQEDSS2l5IgIREqhHyoUCQuvS6J01heu5HtIidCxAUKRzihHDgUIXPoCfWABOKAKGckJK4o90jcIw4smtmZ9f7Y693GP0n6PNJ4vpn5ft55O/Pt7myjDeAza/HtmNyOJBYvvLWVbj/YqTcf7NRXi3JETEVEKaLcXkWyFpF8EnE12kt8Lt2Zd5fsN84bD//0m/P3P6q3t8r5ktUvDWu3qzVkhO18idmImMjXYyrv19/1eHOgv3tjdZ104k4Tdq5IHJy01oDtcZqPcN8CT7p7EROTe+yvRZyKiOn8fUDks0PpmMM7dGPNcgAAAPBkmjiowvOP4lFsxczxhAMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADPhqT9m4FJvpSK8mwkxe//V/J9qUrlhOMd7isHHP/g5jEFAgAAAAAAAABH4uP8i/uzj+JRbMVMsb+VZN/5v5ZtnM7+PhfvxUYsxXpcjK1oxGZsxnrMR0zOdHVY2Wpsbq7PD7b8daQtW63WvbzlQkTUBlouHMNJAwAAAAAAAMCz6yexGDMnHQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHRLIibaq2w5XZRrUSpHxHREVNJ62xF/KcpPuuqQY389xjgAAADghBQfjWeS/7ULrST7zP9y9rl/Ot6LtdiM5diMZizFjexZQPtTf+mf2/Xmg536aroMdvzt/4wVR9ZjREzE+/uMPJfVONNpsRjfje/HhZiNa7Eey/HDaMRmLMVsVNOTiEYkUau2n17Uijj3jvdqz9a1/tjO9m2/mkVSjZuxnMV2Ma5Xov3YJDuHdMxXu0b7YyWib8T30+wk38qNmKMbXf+9fpU/l8m1nh+xj6NRy858spORuTT3eTZeGJ77Ma+T/pHmo9R5BnV6d5R0s3+kIuc/GCfnp/J1muuf9+b8sI35KK0/EwtRyq++iJd7c377i/df7G385X/97dqt0trKrZsbF47wlB7H7EEVJotCfybqXZl4ZfjVl2eimWZie/RMTPbvmB615dGq5NnIpqIRZ8vvZKVGvNZ1Cb4bN2IpLsdczMeVmItvxELUO1dYupzpyWu5vtqbk+xeKw3Ob8OexJ77UlelXxxQ+XileXmhK6/dM10tO5bvufrLmOu6+l4cfvWN/SqQjv/5vJyO8dPOK86ToCcT+dxcRPfS8Ez8tpX+3Wiurazfatwecbzz+Tq9bT/onZt/N3rU/a/uhyG9XtIZt5xtZTmpFtdLeuylTrS9+ark37i025UGjp3pHKvFTCzH9/a9Uyv5e7jBntrHXuk+9u/dmbOSv78pjvW8y4l3o5m9C+lz4FQNwDE79fqpSvVh9R/VD6s/q96qvjX95tSVqS9UYvLv5T9P/KH0+9I3k9fjw/hxzJx0pAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8CzYuHN3pdFsLq13CjHdv+dxC5V9xxpeiNKBdXaeG63DqEUMHyvJC5XDPfensVCNvj3FLyw9bs8fR8SQOpXHDj4Z+xobu5Dm4VA6LH44LdvTmhijeblotXedcmxMx0ojKe9xx03t3gVRW2k0/9vqaV6NrlsGeMZd2ly9fWnjzt2vLq823ll6Z2lt4crlK5frX5//2qWby82lufbfk44SOAobd+5OnHQMAAAAAAAAAAAAwHjy//t/81P/Y4byAXUq6xt7j3z2uE8VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeEotvh2T25HE/NzFuXT7wU69mS5FebdmOSJKEZH8KCL5JOJqtJeodXWX7DfOGw+jdP7+R/XdvspF/dKwdqPZzpeYjYiJfH2wqT26Gezveld/258qvKRzhmnCzhWJg5P2/wAAAP//vnbzsA==")
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f00000000c0)={0x1, 0xf0, 0x1, 0x4, 0x6, 0x0, 0x8, 0x7f, 0x5, 0x1, 0x4, 0x8, 0xc, 0x6}, 0xe)
socket$l2tp6(0xa, 0x2, 0x73)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
socket$inet(0x2, 0x3, 0x2)
syz_emit_ethernet(0x36, 0x0, 0x0)
syz_create_resource$binfmt(0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
munlock(&(0x7f0000a2b000/0x1000)=nil, 0x1000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="05f1aeb51328f6000000", @ANYBLOB="000429bd7000fddbdf25210000000400ff000500f600060000000600980005"], 0x4c}, 0x1, 0x0, 0x0, 0x80000}, 0x2)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000200)={'8255\x00', [0x4f27, 0xa, 0xffffffff, 0x401, 0x1, 0xcd7, 0xfff, 0x5c952399, 0xffffffff, 0x3ff, 0xfffff000, 0x1600, 0xfffffffe, 0x1, 0x9, 0xe1cb, 0x7bbd, 0x4, 0x3, 0x396, 0x80000089, 0xfffffffe, 0x0, 0xfffffff1, 0xffffeadb, 0x3, 0x3a, 0x1, 0x4, 0x8000000, 0xdffffffa]})
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r4, 0x6405, &(0x7f00000001c0))
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x54, r2, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x1c}}]}, 0x54}, 0x1, 0x620b}, 0x0)

1m57.435175568s ago: executing program 5 (id=499):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
pipe2$9p(&(0x7f0000000180), 0x880)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r3, 0x0)
setpgid(0x0, r3)
mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0)
r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0x800000000000001)

1m56.819884679s ago: executing program 5 (id=502):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20000000)

1m56.369469164s ago: executing program 34 (id=502):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20000000)

14.635823331s ago: executing program 0 (id=733):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION2(0xffffffffffffffff, 0x40a0ae49, &(0x7f00000000c0)={0x5, 0x7, 0x1, 0x1000, &(0x7f00000ee000/0x1000)=nil, 0x3})
sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0)
r2 = syz_open_dev$vim2m(0x0, 0xa848, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, 0x0)
r3 = syz_open_procfs(0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
read$FUSE(r3, 0x0, 0x0)
r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
connect$inet6(r5, &(0x7f0000001940)={0xa, 0x0, 0x200, @mcast1, 0x5}, 0x1c)
sendmmsg$inet6(r5, &(0x7f0000002200)=[{{0x0, 0x0, 0x0}}], 0x40000000000027f, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='veno', 0x4)
r7 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil)
shmat(r7, &(0x7f0000ffc000/0x3000)=nil, 0x4000)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x8)
shmctl$IPC_RMID(r7, 0x0)
bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0)
remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10)

12.596123511s ago: executing program 6 (id=738):
r0 = io_uring_setup(0x68f6, &(0x7f00000002c0)={0x0, 0x48c7, 0x8, 0x0, 0x100016b})
readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000012c0)=""/191, 0x4}], 0x3)
close_range(r0, 0xffffffffffffffff, 0x0)
socket(0x10, 0x803, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0x103)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x413, &(0x7f00000003c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}})

12.290548451s ago: executing program 6 (id=740):
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close(0x4)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$unix(r1, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x2c, 0x42, 0x1, 0xffffffff, 0x25dfdbfd, {0x2}, [@nested={0x4, 0x38}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0xc, 0xc8, 0x0, 0x0, @u64=0x2}]}, @nested={0x4, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x4040)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa)

10.658942227s ago: executing program 0 (id=745):
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vcan0\x00'})
sendmsg$can_raw(0xffffffffffffffff, 0x0, 0x40)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b)
bind$alg(r0, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1-neon)\x00'}, 0x58)
move_pages(0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x5, 0xe4340000, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}}, 0x2)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810)
syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004106cd40cd060f011bd5000000010902"], 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r3, 0xffffffffffffffff, 0x0)

9.630133212s ago: executing program 2 (id=747):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x8001, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0x800, 0x7}, {0x0, 0x0, 0xe6}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@remote, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe8)
r1 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0)
close(r0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x1d, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfc, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8, 0x4}, {0x0, 0x8}}}, 0xb8}}, 0x0)

9.127880409s ago: executing program 7 (id=749):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880)
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0xffff}, {}, {0x2, 0xc}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0xfffff000, 0x31, 0x3, 0x581}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'syzkaller0\x00'})
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r9, {0x5, 0xffff}, {}, {0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x9200}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0xc010)
r10 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001780)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {0x2}, {}, {0xa, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x8, 0x8, 0x8, 0xcfe, 0x3, 0x80000000, 0x8a5, 0x6, 0x10, 0x8, 0xb, 0x2, 0xf6cb, 0x6ab, 0x5, 0x9, 0x8, 0x6, 0x0, 0x4, 0x7fffffff, 0x10000, 0x7, 0x0, 0x0, 0x7, 0x6, 0xfffffffe, 0x372b, 0xfffffffe, 0x1000, 0xfffffffa, 0x8, 0xae6, 0x6, 0xfffffffc, 0x1, 0x0, 0x7e, 0x8, 0x9d, 0x3, 0x240, 0x1, 0x7, 0x7, 0x6, 0x1000, 0x2007, 0xb, 0x401, 0x789f, 0x7ff, 0x3, 0x8, 0x800, 0x9, 0x10000, 0x6, 0xff, 0x8, 0x8226, 0x400, 0x401, 0xc709, 0x7, 0x5, 0x3, 0x7, 0x10000, 0x4, 0x40, 0x8, 0xc1, 0x7, 0x3ff, 0x200, 0x1, 0x6, 0x7fffffff, 0xfffffff9, 0x3, 0xa, 0xfffffffc, 0x1, 0x0, 0x9, 0x2, 0x4, 0x2, 0xc, 0x7b, 0xff, 0x800, 0x4, 0x80, 0x5, 0x4, 0x5, 0x1000, 0x5, 0x7, 0x40, 0x4d27, 0x2, 0x6, 0x8226, 0xe, 0x81, 0x3, 0x5, 0x3800000, 0xf12, 0x0, 0x2, 0x8911, 0x9, 0x7f43, 0x9, 0x2, 0x0, 0x3, 0x8, 0x2, 0x2, 0x2, 0xd098, 0x9, 0x8, 0x3, 0xa, 0xf7, 0x4, 0x3, 0x3, 0x0, 0xfffffffc, 0x0, 0x1, 0x81, 0xffff6660, 0x1, 0x3, 0x4, 0x0, 0x9, 0x3, 0x6, 0x5, 0xd7a, 0xfffffff9, 0x3, 0x8, 0x2, 0xfffffffd, 0x3864, 0x4, 0xb, 0x1, 0x4, 0x4c, 0x82ca, 0x4eeb, 0x6, 0xbdd, 0x5fdf, 0xc, 0x3, 0x10000, 0x9, 0x54, 0x8, 0x8, 0x800, 0x1ff, 0x9, 0xccc, 0x1, 0x7, 0x7ff, 0x4, 0xe, 0xc, 0xb, 0x80000001, 0x8001, 0x4, 0x9, 0xfffffffe, 0xfffffffa, 0x6, 0xb, 0x7ff, 0x1, 0x10, 0x2, 0x1, 0x4a0, 0x6, 0x0, 0x3ff, 0x9, 0x7, 0x1, 0x5, 0x7, 0x1, 0xfffffe01, 0x8001, 0x6, 0x3, 0x3, 0x9, 0x2, 0x4, 0x0, 0x1, 0x100, 0x4, 0x3, 0xffffff00, 0x6, 0x4, 0x3, 0x6, 0x5, 0x5c49, 0x7f, 0x7, 0x8cc7, 0x7, 0x0, 0x1, 0xcc99, 0x3, 0xb, 0x0, 0xffff, 0x0, 0xb64, 0x4, 0xf, 0x9, 0x77dc, 0x8, 0x1, 0x4, 0x7ff, 0x676, 0x10, 0x8, 0xffff, 0xfff, 0x8, 0x7]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x2004009c}, 0x0)

9.025824842s ago: executing program 2 (id=750):
socket(0x840000000002, 0x3, 0x100)
syz_emit_ethernet(0x5a, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08004e00004c0000000000059078ac1414000a0101004414090300000000000000000000000000000000890bceac141415ac1601010702000000000000000529c108cc96cbc3a5829107e5a92361d0f4967e696b07ef739d1aa823f7d22f27491a1184e525ab1e37380db300aba6bdf965fa3f245c3cf2767acb4c370a0adea9831035de329ea97789a365ea3e55266cc8ac74e481abb3425721c20cd7e78f942ded2ff9796d038b3caaa808a0a8a1f4e796b45254dd513d1a482a402fd96fccc82c308b792a5632eeab3ace0139", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c00000090780000"], 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
close(r2)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r4=>0x0})
sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfd1e, 0x4, &(0x7f0000000140)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14)

8.940926975s ago: executing program 6 (id=751):
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0)
r2 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil)
shmat(r2, &(0x7f0000ff1000/0x3000)=nil, 0x400c)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
r4 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0)
fsmount(r4, 0x0, 0x0)
poll(0x0, 0x0, 0x7)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x8811)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0xffff, 0xb, 0x1, 0x1, 0x7fff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50)

8.554703708s ago: executing program 2 (id=752):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, 0x0, 0x0)
writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x1fffa2}], 0x1)

8.554426448s ago: executing program 7 (id=753):
socketpair$unix(0x1, 0x3, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
sched_setattr(0x0, 0x0, 0x0)
r0 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/fs/binfmt_misc/syz3\x00', 0x2, 0x0)
pread64(r0, 0x0, 0x0, 0x9)

8.323817536s ago: executing program 2 (id=754):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
rename(0x0, 0x0)
r3 = socket$kcm(0xa, 0x922000000003, 0x11)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0)=r4, 0x4)
sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b3325fe80000000000000dc8b850f238466ccfff57a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
recvfrom(r5, &(0x7f0000000540)=""/4096, 0x1000, 0x10022, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x3, 0x4, 0x3, {0xa, 0x4e22, 0x8, @private1, 0x7f}}}, 0x80)

8.295411787s ago: executing program 7 (id=755):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8)
socket$vsock_stream(0x28, 0x1, 0x0)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000440)={0x6, 0x20000006, 0x0, 0x0, 0xd})

6.272352456s ago: executing program 6 (id=756):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION2(0xffffffffffffffff, 0x40a0ae49, &(0x7f00000000c0)={0x5, 0x7, 0x1, 0x1000, &(0x7f00000ee000/0x1000)=nil, 0x3})
sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0)
r2 = syz_open_dev$vim2m(0x0, 0xa848, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, 0x0)
r3 = syz_open_procfs(0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
read$FUSE(r3, 0x0, 0x0)
r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
connect$inet6(r5, &(0x7f0000001940)={0xa, 0x0, 0x200, @mcast1, 0x5}, 0x1c)
sendmmsg$inet6(r5, &(0x7f0000002200)=[{{0x0, 0x0, 0x0}}], 0x40000000000027f, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='veno', 0x4)
r7 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil)
shmat(r7, &(0x7f0000ffc000/0x3000)=nil, 0x4000)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x8)
shmctl$IPC_RMID(r7, 0x0)
bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0)
remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10)

6.268845616s ago: executing program 0 (id=766):
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0)
r2 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil)
shmat(r2, &(0x7f0000ff1000/0x3000)=nil, 0x400c)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
r4 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0)
fsmount(r4, 0x0, 0x0)
poll(0x0, 0x0, 0x7)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x8811)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0xffff, 0xb, 0x1, 0x1, 0x7fff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50)

6.077955652s ago: executing program 7 (id=757):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20)
sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x6000}, 0x20)

4.98601523s ago: executing program 7 (id=758):
socket$inet(0x2, 0x2, 0x1)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1)
sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80800, 0x0)
close(r3)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x80, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x5823, 0x7, 0x6362, 0x5, 0xfffffffd, 0xffffffff}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000050}, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
io_uring_setup(0x43e1, 0x0)

4.143583599s ago: executing program 2 (id=759):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r2 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0)
syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x8, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r6, &(0x7f0000000480)=""/74, 0x4a)

3.540481109s ago: executing program 3 (id=760):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x20031, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x40000073, 0x0, 0xb}]})

2.822710684s ago: executing program 3 (id=761):
close(0x3)

2.467929965s ago: executing program 3 (id=762):
socket(0x840000000002, 0x3, 0x100)
syz_emit_ethernet(0x5a, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08004e00004c0000000000059078ac1414000a0101004414090300000000000000000000000000000000890bceac141415ac1601010702000000000000000529c108cc96cbc3a5829107e5a92361d0f4967e696b07ef739d1aa823f7d22f27491a1184e525ab1e37380db300aba6bdf965fa3f245c3cf2767acb4c370a0adea9831035de329ea97789a365ea3e55266cc8ac74e481abb3425721c20cd7e78f942ded2ff9796d038b3caaa808a0a8a1f4e796b45254dd513d1a482a402fd96fccc82c308b792a5632eeab3ace0139", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c00000090780000"], 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
socket$unix(0x1, 0x1, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x4801}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008001}, 0x40)
close(r2)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r4=>0x0})
sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfd1e, 0x4, &(0x7f0000000140)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14)

2.284110212s ago: executing program 7 (id=763):
r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010c410cf8a00000000000109022d00010000000009040000020300000009210000000122050009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c00078018"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084)
sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c00000003060104000000000000000002000005050001000700000025e0144d06db249617cab2013cfc2694c2e1fbf957bf4ea85e3a962656fcaf7b2c5242df28d75e9a5317dfd9db9095578c19f668f1cdb1bf3d29d6ab43e28a"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080)

2.129924337s ago: executing program 0 (id=764):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880)
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0xffff}, {}, {0x2, 0xc}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0xfffff000, 0x31, 0x3, 0x581}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'syzkaller0\x00'})
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r9, {0x5, 0xffff}, {}, {0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x9200}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0xc010)
r10 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001780)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {0x2}, {}, {0xa, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x8, 0x8, 0x8, 0xcfe, 0x3, 0x80000000, 0x8a5, 0x6, 0x10, 0x8, 0xb, 0x2, 0xf6cb, 0x6ab, 0x5, 0x9, 0x8, 0x6, 0x0, 0x4, 0x7fffffff, 0x10000, 0x7, 0x0, 0x0, 0x7, 0x6, 0xfffffffe, 0x372b, 0xfffffffe, 0x1000, 0xfffffffa, 0x8, 0xae6, 0x6, 0xfffffffc, 0x1, 0x0, 0x7e, 0x8, 0x9d, 0x3, 0x240, 0x1, 0x7, 0x7, 0x6, 0x1000, 0x2007, 0xb, 0x401, 0x789f, 0x7ff, 0x3, 0x8, 0x800, 0x9, 0x10000, 0x6, 0xff, 0x8, 0x8226, 0x400, 0x401, 0xc709, 0x7, 0x5, 0x3, 0x7, 0x10000, 0x4, 0x40, 0x8, 0xc1, 0x7, 0x3ff, 0x200, 0x1, 0x6, 0x7fffffff, 0xfffffff9, 0x3, 0xa, 0xfffffffc, 0x1, 0x0, 0x9, 0x2, 0x4, 0x2, 0xc, 0x7b, 0xff, 0x800, 0x4, 0x80, 0x5, 0x4, 0x5, 0x1000, 0x5, 0x7, 0x40, 0x4d27, 0x2, 0x6, 0x8226, 0xe, 0x81, 0x3, 0x5, 0x3800000, 0xf12, 0x0, 0x2, 0x8911, 0x9, 0x7f43, 0x9, 0x2, 0x0, 0x3, 0x8, 0x2, 0x2, 0x2, 0xd098, 0x9, 0x8, 0x3, 0xa, 0xf7, 0x4, 0x3, 0x3, 0x0, 0xfffffffc, 0x0, 0x1, 0x81, 0xffff6660, 0x1, 0x3, 0x4, 0x0, 0x9, 0x3, 0x6, 0x5, 0xd7a, 0xfffffff9, 0x3, 0x8, 0x2, 0xfffffffd, 0x3864, 0x4, 0xb, 0x1, 0x4, 0x4c, 0x82ca, 0x4eeb, 0x6, 0xbdd, 0x5fdf, 0xc, 0x3, 0x10000, 0x9, 0x54, 0x8, 0x8, 0x800, 0x1ff, 0x9, 0xccc, 0x1, 0x7, 0x7ff, 0x4, 0xe, 0xc, 0xb, 0x80000001, 0x8001, 0x4, 0x9, 0xfffffffe, 0xfffffffa, 0x6, 0xb, 0x7ff, 0x1, 0x10, 0x2, 0x1, 0x4a0, 0x6, 0x0, 0x3ff, 0x9, 0x7, 0x1, 0x5, 0x7, 0x1, 0xfffffe01, 0x8001, 0x6, 0x3, 0x3, 0x9, 0x2, 0x4, 0x0, 0x1, 0x100, 0x4, 0x3, 0xffffff00, 0x6, 0x4, 0x3, 0x6, 0x5, 0x5c49, 0x7f, 0x7, 0x8cc7, 0x7, 0x0, 0x1, 0xcc99, 0x3, 0xb, 0x0, 0xffff, 0x0, 0xb64, 0x4, 0xf, 0x9, 0x77dc, 0x8, 0x1, 0x4, 0x7ff, 0x676, 0x10, 0x8, 0xffff, 0xfff, 0x8, 0x7]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x2004009c}, 0x0)

1.937096494s ago: executing program 3 (id=765):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, 0x0, 0x0)
writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x1fffa2}], 0x1)

1.917984304s ago: executing program 6 (id=767):
unshare(0x8040600)
r0 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0xa, &(0x7f0000000000)=0x1, 0x4)

1.787994459s ago: executing program 2 (id=768):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8)
socket$vsock_stream(0x28, 0x1, 0x0)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000440)={0x6, 0x20000006, 0x0, 0x0, 0xd})

1.660651273s ago: executing program 3 (id=769):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20)
sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x6000}, 0x20)

1.658089733s ago: executing program 6 (id=770):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000006c0)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x801, 0x0)
ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f0000000000)={0x5, 0x0, [{0x0, 0x84, 0x4, 0x9, 0x4, 0x0, 0xb}, {0xb, 0x5, 0x0, 0xd, 0x6, 0x0, 0x9}, {0x80000000, 0xffffffff, 0x4, 0x2d, 0x3, 0x40007, 0x1000}, {0x40000001, 0x0, 0x0, 0x10001, 0x6, 0x3, 0x8}, {0xa, 0x3, 0x8, 0x2, 0xfffffff7, 0x8459, 0x401}]})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket$kcm(0x11, 0x3, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r7)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_RATE={0x14, 0x6, {0x6, 0x1, 0xd5da, 0x8d7a}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0xffff, 0xb}, {0xe, 0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0x84e56105723e644b}, @TCA_TBF_BURST={0x8, 0x6, 0x20000000}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x2, 0x2, 0xa, 0x4}, {0x9c, 0x0, 0x7, 0x1, 0x6, 0x5}, 0x6, 0x71d, 0xa74}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4)
ioctl$int_in(r3, 0x40000000af01, 0x0)
ioctl$VHOST_NET_SET_BACKEND(r3, 0xaf02, 0x0)
ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r3, 0x40086e81, &(0x7f0000000140)=0xbc4c)
r11 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r12, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x43, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0xec, 0x2, 0x0, 0xfffffffffffffffe], 0x10000, 0x202})
ioctl$KVM_RUN(r12, 0xae80, 0x0)
ioctl$KVM_RUN(r12, 0xae80, 0x0)

1.634454105s ago: executing program 0 (id=771):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x12, 0x4)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c)
listen(0xffffffffffffffff, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
listen(r3, 0x0)
listen(r2, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f00000007c0)={0x2020}, 0x14ab)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x78bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}, @IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

451.179655ms ago: executing program 3 (id=772):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION2(0xffffffffffffffff, 0x40a0ae49, &(0x7f00000000c0)={0x5, 0x7, 0x1, 0x1000, &(0x7f00000ee000/0x1000)=nil, 0x3})
sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0)
r2 = syz_open_dev$vim2m(0x0, 0xa848, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, 0x0)
r3 = syz_open_procfs(0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
read$FUSE(r3, 0x0, 0x0)
r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
connect$inet6(r5, &(0x7f0000001940)={0xa, 0x0, 0x200, @mcast1, 0x5}, 0x1c)
sendmmsg$inet6(r5, &(0x7f0000002200)=[{{0x0, 0x0, 0x0}}], 0x40000000000027f, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
r7 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil)
shmat(r7, &(0x7f0000ffc000/0x3000)=nil, 0x4000)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x8)
shmctl$IPC_RMID(r7, 0x0)
bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0)
remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10)

0s ago: executing program 0 (id=773):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x890d000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xe, 0x4, 0x4, 0x3}, 0x50)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0x3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x6, 0x0}, {0x18, 0x9, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x5, 0x2}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

kernel console output (not intermixed with test programs):

id=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4683 comm="syz.1.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f918459c819 code=0x7ffc0000
[  116.477104][ T4686] infiniband syz2: Couldn't open port 1
[  116.518040][   T48] Bluetooth: hci2: unexpected event for opcode 0x0401
[  116.527361][ T4686] RDS/IB: syz2: added
[  116.531450][ T4686] smc: adding ib device syz2 with port count 1
[  116.537819][ T4686] smc:    ib device syz2 port 1 has pnetid 
[  116.544447][ T4686] vxcan1 speed is unknown, defaulting to 1000
[  116.639458][ T4313] usb 1-1: config 168 interface 0 has no altsetting 0
[  116.649008][ T4417] vxcan1 speed is unknown, defaulting to 1000
[  116.656391][ T4313] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[  116.665894][ T4313] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  116.680505][ T4313] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  116.690554][   T26] audit: type=1326 audit(1774808580.896:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4683 comm="syz.1.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f918459c819 code=0x7ffc0000
[  116.692278][ T4313] usb 1-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping
[  116.771913][ T4686] vxcan1 speed is unknown, defaulting to 1000
[  116.829140][ T4313] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  116.895349][ T4686] vxcan1 speed is unknown, defaulting to 1000
[  117.004476][ T4686] vxcan1 speed is unknown, defaulting to 1000
[  117.039666][ T4313] usb 1-1: config 168 interface 0 has no altsetting 0
[  117.049432][   T26] audit: type=1326 audit(1774808580.896:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4683 comm="syz.1.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f918459c819 code=0x7ffc0000
[  117.056841][ T4421] vxcan1 speed is unknown, defaulting to 1000
[  117.683671][ T4313] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[  117.695121][ T4313] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  117.708124][ T4686] vxcan1 speed is unknown, defaulting to 1000
[  117.907513][ T4694] 8021q: VLANs not supported on caif0
[  117.923157][ T4313] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  117.939771][ T4313] usb 1-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping
[  117.952141][ T4313] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  117.985158][ T4261] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 12
[  117.985815][   T26] audit: type=1326 audit(1774808580.896:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4683 comm="syz.1.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f918459c819 code=0x7ffc0000
[  118.036062][ T4313] usb 1-1: config 168 interface 0 has no altsetting 0
[  118.065798][ T4313] usb 1-1: string descriptor 0 read error: -71
[  118.072231][ T4313] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  119.290642][ T4313] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.315474][   T26] audit: type=1326 audit(1774808580.896:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4683 comm="syz.1.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f918459c819 code=0x7ffc0000
[  119.415633][ T4313] usb 1-1: can't set config #168, error -71
[  119.545055][ T4313] usb 1-1: USB disconnect, device number 2
[  119.601555][   T26] audit: type=1326 audit(1774808580.896:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4683 comm="syz.1.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f918459c819 code=0x7ffc0000
[  120.865967][   T48] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  120.885934][   T48] Bluetooth: hci2: Injecting HCI hardware error event
[  120.895999][ T4281] Bluetooth: hci2: hardware error 0x00
[  120.943823][ T4701] Cannot find add_set index 0 as target
[  121.775856][   T26] audit: type=1326 audit(1774808580.896:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4683 comm="syz.1.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f918459c819 code=0x7ffc0000
[  121.864926][   T26] audit: type=1326 audit(1774808580.896:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4683 comm="syz.1.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f918459c819 code=0x7ffc0000
[  121.923458][   T26] audit: type=1326 audit(1774808580.896:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4683 comm="syz.1.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f918459c819 code=0x7ffc0000
[  121.985871][   T26] audit: type=1326 audit(1774808580.896:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4683 comm="syz.1.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f918459c819 code=0x7ffc0000
[  122.071863][   T26] audit: type=1326 audit(1774808580.896:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4683 comm="syz.1.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f918459c819 code=0x7ffc0000
[  122.154399][   T26] audit: type=1326 audit(1774808580.896:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4683 comm="syz.1.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f918459c819 code=0x7ffc0000
[  122.222027][   T26] audit: type=1326 audit(1774808580.896:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4683 comm="syz.1.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f918459c819 code=0x7ffc0000
[  122.348798][   T26] audit: type=1326 audit(1774808580.896:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4683 comm="syz.1.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f918459c819 code=0x7ffc0000
[  123.215349][   T26] audit: type=1326 audit(1774808580.896:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4683 comm="syz.1.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f918455d04e code=0x7ffc0000
[  123.245946][   T26] audit: type=1326 audit(1774808580.896:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4683 comm="syz.1.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f918459c819 code=0x7ffc0000
[  123.798515][ T4281] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  123.839094][ T4737] =======================================================
[  123.839094][ T4737] WARNING: The mand mount option has been deprecated and
[  123.839094][ T4737]          and is ignored by this kernel. Remove the mand
[  123.839094][ T4737]          option from the mount to silence this warning.
[  123.839094][ T4737] =======================================================
[  123.875017][ T4737] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  123.901461][ T4737] CIFS mount error: No usable UNC path provided in device string!
[  123.901461][ T4737] 
[  123.912179][ T4737] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  124.577573][ T4742] 8021q: VLANs not supported on caif0
[  124.604631][   T52] block nbd4: Attempted send on invalid socket
[  124.612844][   T52] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  124.632521][ T4743] (syz.4.91,4743,0):ocfs2_get_sector:1771 ERROR: status = -5
[  124.666346][ T4743] (syz.4.91,4743,0):ocfs2_sb_probe:749 ERROR: status = -5
[  124.673686][ T4743] (syz.4.91,4743,0):ocfs2_fill_super:990 ERROR: superblock probe failed!
[  124.761062][ T4743] (syz.4.91,4743,1):ocfs2_fill_super:1176 ERROR: status = -5
[  125.048571][ T4748] loop2: detected capacity change from 0 to 2048
[  125.217474][ T4750] loop1: detected capacity change from 0 to 32768
[  125.229142][ T4750] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  125.239798][ T4750] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  125.248836][ T4750] BTRFS info (device loop1): enabling disk space caching
[  125.255919][ T4750] BTRFS info (device loop1): force clearing of disk cache
[  125.263132][ T4750] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  125.272928][ T4750] BTRFS info (device loop1): use zstd compression, level 3
[  125.280308][ T4750] BTRFS info (device loop1): disk space caching is enabled
[  125.429407][ T4758] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  125.588525][ T4768] Cannot find add_set index 0 as target
[  125.662373][ T4750] BTRFS info (device loop1): enabling ssd optimizations
[  125.672606][ T4750] BTRFS info (device loop1): rebuilding free space tree
[  125.721888][ T4750] BTRFS info (device loop1): disabling free space tree
[  125.728961][ T4750] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  125.738835][ T4750] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  126.833077][ T4270] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  133.260990][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  133.267679][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  133.636381][ T4821] loop1: detected capacity change from 0 to 32768
[  133.674355][ T4821] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.107 (4821)
[  133.812642][ T4821] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  133.823471][ T4821] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  133.832462][ T4821] BTRFS info (device loop1): enabling disk space caching
[  133.839514][ T4821] BTRFS info (device loop1): force clearing of disk cache
[  133.846826][ T4821] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  133.856277][ T4821] BTRFS info (device loop1): use zstd compression, level 3
[  133.863745][ T4821] BTRFS info (device loop1): disk space caching is enabled
[  134.270844][ T4817] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  134.348428][ T4821] BTRFS info (device loop1): enabling ssd optimizations
[  134.349160][ T4821] BTRFS info (device loop1): rebuilding free space tree
[  134.354278][ T4821] BTRFS info (device loop1): disabling free space tree
[  134.354322][ T4821] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  134.354351][ T4821] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  134.360526][   T26] kauditd_printk_skb: 2 callbacks suppressed
[  134.360541][   T26] audit: type=1326 audit(1774808599.276:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4813 comm="syz.4.104" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1c8d39c819 code=0x0
[  135.100100][ T4270] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  135.421281][ T4258] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 12 /dev/loop1 scanned by udevd (4258)
[  136.091911][ T4873] loop3: detected capacity change from 0 to 4096
[  136.182602][ T4875] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  136.385879][ T4415] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  136.897928][ T4415] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  138.187193][ T4415] usb 2-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config
[  138.267374][ T4415] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 66
[  138.315907][ T4415] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  138.325441][ T4415] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  138.362543][ T4415] usb 2-1: Product: syz
[  138.385828][ T4415] usb 2-1: Manufacturer: syz
[  138.626842][ T4415] usb 2-1: USB disconnect, device number 2
[  139.930939][ T4899] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  140.148296][ T4905] loop1: detected capacity change from 0 to 32768
[  140.174682][ T4905] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  140.185316][ T4905] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  140.194100][ T4905] BTRFS info (device loop1): enabling disk space caching
[  140.201254][ T4905] BTRFS info (device loop1): force clearing of disk cache
[  140.208469][ T4905] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  140.218434][ T4905] BTRFS info (device loop1): use zstd compression, level 3
[  140.225631][ T4905] BTRFS info (device loop1): disk space caching is enabled
[  140.276068][ T4415] usb 1-1: new full-speed USB device number 3 using dummy_hcd
[  140.497811][ T4415] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  140.524459][ T4415] usb 1-1: config 0 has no interface number 0
[  140.543584][ T4415] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  140.586124][ T4415] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  140.615210][ T4905] BTRFS info (device loop1): enabling ssd optimizations
[  140.623309][ T4905] BTRFS info (device loop1): rebuilding free space tree
[  140.636038][ T4905] BTRFS info (device loop1): disabling free space tree
[  140.643315][ T4905] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  140.653262][ T4905] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  140.809484][ T4415] usb 1-1: config 0 descriptor??
[  141.266852][ T4270] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  141.294317][ T4415] usb 1-1: selecting invalid altsetting 1
[  141.468781][ T4415] dvb_ttusb_budget: ttusb_init_controller: error
[  141.506246][   T26] audit: type=1326 audit(1774808606.416:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4925 comm="syz.2.123" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f01b6f9c819 code=0x0
[  141.521110][ T4415] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  141.951911][ T4415] DVB: Unable to find symbol cx22700_attach()
[  141.964558][ T4902] loop0: detected capacity change from 0 to 4096
[  142.002325][ T4261] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 12 /dev/loop1 scanned by udevd (4261)
[  142.030939][ T4902] ntfs3: Unknown parameter 'œ~wÅçvË‹7j‚ôè"Y§ìraH¤Å‘.Tœ¿[Cú0<S­èá’EÿÒ	uj+~:ÞÛç7	øûÌáürníÕFvv¨ô©�^uz™Øò�’Úh@Jt«‚vXÃh'
[  142.907540][ T4415] DVB: Unable to find symbol tda10046_attach()
[  143.705855][ T4415] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[  143.719890][ T4415] usb 1-1: USB disconnect, device number 3
[  144.175375][ T4949] tipc: Started in network mode
[  144.214313][ T4949] tipc: Node identity 66f15e7d73da, cluster identity 4711
[  144.859459][ T4949] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  144.925995][ T4951] device syzkaller0 entered promiscuous mode
[  145.743006][ T4949] tipc: Resetting bearer <eth:syzkaller0>
[  145.833521][ T4947] tipc: Resetting bearer <eth:syzkaller0>
[  146.833003][ T4947] tipc: Disabling bearer <eth:syzkaller0>
[  146.890890][ T4417] tipc: Node number set to 355163773
[  150.295418][ T4973] loop3: detected capacity change from 0 to 32768
[  150.746721][ T4973] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 12
[  151.548764][ T4982] siw: device registration error -23
[  151.799237][ T4258] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 12
[  151.885304][ T4988] device bond1 entered promiscuous mode
[  151.997769][ T4988] 8021q: adding VLAN 0 to HW filter on device bond1
[  152.024178][ T4992] device erspan1 entered promiscuous mode
[  152.116749][ T4992] bond1: (slave erspan1): Enslaving as an active interface with an up link
[  152.126348][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  152.146757][ T4993] netlink: 4 bytes leftover after parsing attributes in process `syz.3.139'.
[  152.768128][ T5007] syz.1.133 uses obsolete (PF_INET,SOCK_PACKET)
[  153.520659][ T5011] loop4: detected capacity change from 0 to 1024
[  153.965222][ T4993] bond1 (unregistering): (slave erspan1): Releasing backup interface
[  153.975078][ T4993] device erspan1 left promiscuous mode
[  154.005216][ T4993] bond1 (unregistering): Released all slaves
[  154.033550][ T5003] netlink: 'syz.1.133': attribute type 2 has an invalid length.
[  154.058679][ T4280] hfsplus: bad catalog entry type
[  154.065001][ T5021] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  154.087344][ T5019] device syzkaller0 entered promiscuous mode
[  154.125018][ T5019] tipc: Resetting bearer <eth:syzkaller0>
[  154.164205][ T5016] tipc: Resetting bearer <eth:syzkaller0>
[  154.218536][ T5016] tipc: Disabling bearer <eth:syzkaller0>
[  154.239736][ T4830] hfsplus: b-tree write err: -5, ino 25
[  154.245573][ T4830] hfsplus: b-tree write err: -5, ino 4
[  154.258739][ T4830] hfsplus: b-tree write err: -5, ino 2
[  154.790232][ T4384] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  154.941307][ T4384] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.067708][ T4384] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.236280][ T4384] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.575759][ T5045] loop1: detected capacity change from 0 to 1024
[  158.134217][ T4270] hfsplus: bad catalog entry type
[  159.566965][   T48] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  159.586265][   T48] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  159.596595][   T48] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  159.605118][   T48] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  159.615613][   T48] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  159.630046][   T48] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  161.594801][ T4383] hfsplus: b-tree write err: -5, ino 25
[  161.606774][ T4383] hfsplus: b-tree write err: -5, ino 4
[  161.613699][ T4383] hfsplus: b-tree write err: -5, ino 2
[  161.696195][ T4281] Bluetooth: hci4: command 0x0409 tx timeout
[  161.837006][ T5067] tipc: Started in network mode
[  161.841965][ T5067] tipc: Node identity 626a5deb8f63, cluster identity 4711
[  161.856154][ T5067] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  161.897773][ T5075] tipc: Resetting bearer <eth:syzkaller0>
[  161.918621][ T5062] tipc: Disabling bearer <eth:syzkaller0>
[  162.011013][ T5059] vxcan1 speed is unknown, defaulting to 1000
[  162.508194][   T26] audit: type=1326 audit(1774808627.416:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5090 comm="syz.0.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b2d59c819 code=0x7ffc0000
[  162.965621][ T5094] rdma_rxe: rxe_register_device failed with error -23
[  162.972803][ T5094] rdma_rxe: failed to add vxcan1
[  162.999352][   T26] audit: type=1326 audit(1774808627.416:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5090 comm="syz.0.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b2d59c819 code=0x7ffc0000
[  163.155683][   T26] audit: type=1326 audit(1774808627.416:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5090 comm="syz.0.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f9b2d59c819 code=0x7ffc0000
[  163.179214][   T26] audit: type=1326 audit(1774808627.416:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5090 comm="syz.0.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b2d59c819 code=0x7ffc0000
[  163.202390][   T26] audit: type=1326 audit(1774808627.416:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5090 comm="syz.0.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b2d59c819 code=0x7ffc0000
[  163.225125][   T26] audit: type=1326 audit(1774808627.416:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5090 comm="syz.0.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f9b2d59c819 code=0x7ffc0000
[  163.247994][   T26] audit: type=1326 audit(1774808627.416:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5090 comm="syz.0.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b2d59c819 code=0x7ffc0000
[  163.274991][   T26] audit: type=1326 audit(1774808627.416:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5090 comm="syz.0.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b2d59c819 code=0x7ffc0000
[  163.325854][   T26] audit: type=1326 audit(1774808627.416:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5090 comm="syz.0.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9b2d59c819 code=0x7ffc0000
[  163.416406][   T26] audit: type=1326 audit(1774808627.416:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5090 comm="syz.0.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b2d59c819 code=0x7ffc0000
[  163.485044][ T5105] loop2: detected capacity change from 0 to 1024
[  163.776030][ T4281] Bluetooth: hci4: command 0x041b tx timeout
[  165.070590][ T5059] chnl_net:caif_netlink_parms(): no params data found
[  166.031783][ T4281] Bluetooth: hci4: command 0x040f tx timeout
[  166.116560][    T9] hfsplus: b-tree write err: -5, ino 25
[  166.122488][    T9] hfsplus: b-tree write err: -5, ino 4
[  166.191336][    T9] hfsplus: b-tree write err: -5, ino 2
[  166.397982][   T48] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  166.432802][   T48] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  166.442776][   T48] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  166.453522][   T48] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  166.477117][   T48] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  166.484766][   T48] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  166.542478][ T5059] bridge0: port 1(bridge_slave_0) entered blocking state
[  166.552352][ T5059] bridge0: port 1(bridge_slave_0) entered disabled state
[  166.561289][ T5059] device bridge_slave_0 entered promiscuous mode
[  166.574585][ T5059] bridge0: port 2(bridge_slave_1) entered blocking state
[  166.584080][ T5059] bridge0: port 2(bridge_slave_1) entered disabled state
[  166.596404][ T5059] device bridge_slave_1 entered promiscuous mode
[  166.719219][ T5059] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  167.010496][ T5131] loop0: detected capacity change from 0 to 32768
[  167.025181][ T5131] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 12
[  167.070837][ T5122] vxcan1 speed is unknown, defaulting to 1000
[  167.080451][ T5059] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  167.184671][ T5059] team0: Port device team_slave_0 added
[  167.212899][ T5059] team0: Port device team_slave_1 added
[  168.389288][   T48] Bluetooth: hci4: command 0x0419 tx timeout
[  168.713419][   T48] Bluetooth: hci2: command 0x0409 tx timeout
[  168.743004][ T4258] I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  169.077907][ T5139] netlink: 76 bytes leftover after parsing attributes in process `syz.2.174'.
[  169.138043][ T5059] batman_adv: batadv0: Adding interface: batadv_slave_0
[  169.168481][ T5059] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  169.297454][ T5059] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  169.432577][ T5150] rdma_rxe: rxe_register_device failed with error -23
[  169.440098][ T5150] rdma_rxe: failed to add vxcan1
[  169.461311][   T26] kauditd_printk_skb: 7 callbacks suppressed
[  169.461474][   T26] audit: type=1326 audit(1774808634.366:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5143 comm="syz.0.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b2d59c819 code=0x7ffc0000
[  170.067380][   T26] audit: type=1326 audit(1774808634.366:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5143 comm="syz.0.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f9b2d59c819 code=0x7ffc0000
[  170.399961][   T26] audit: type=1326 audit(1774808634.366:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5143 comm="syz.0.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b2d59c819 code=0x7ffc0000
[  170.869966][ T5059] batman_adv: batadv0: Adding interface: batadv_slave_1
[  170.887588][ T5159] loop0: detected capacity change from 0 to 32768
[  170.895668][ T5159] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.178 (5159)
[  170.895797][   T48] Bluetooth: hci2: command 0x041b tx timeout
[  170.927723][ T5159] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  170.938100][ T5159] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  170.947189][ T5159] BTRFS info (device loop0): setting nodatacow, compression disabled
[  170.955499][ T5159] BTRFS info (device loop0): enabling auto defrag
[  170.955913][ T5059] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  170.962370][ T5159] BTRFS info (device loop0): max_inline at 0
[  170.995527][ T5159] BTRFS info (device loop0): using free space tree
[  171.002981][   T26] audit: type=1326 audit(1774808634.366:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5143 comm="syz.0.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f9b2d59c819 code=0x7ffc0000
[  171.031528][   T26] audit: type=1326 audit(1774808634.366:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5143 comm="syz.0.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b2d59c819 code=0x7ffc0000
[  171.104674][ T5059] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  171.120845][   T26] audit: type=1326 audit(1774808634.366:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5143 comm="syz.0.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9b2d59c819 code=0x7ffc0000
[  171.144756][   T26] audit: type=1326 audit(1774808634.376:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5143 comm="syz.0.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b2d59c819 code=0x7ffc0000
[  171.168311][   T26] audit: type=1326 audit(1774808634.376:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5143 comm="syz.0.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9b2d59c819 code=0x7ffc0000
[  171.200781][   T26] audit: type=1326 audit(1774808634.376:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5143 comm="syz.0.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b2d59c819 code=0x7ffc0000
[  171.260512][ T5142] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  171.276344][ T5147] device syzkaller0 entered promiscuous mode
[  171.282535][   T26] audit: type=1326 audit(1774808634.376:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5143 comm="syz.0.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9b2d55d04e code=0x7ffc0000
[  171.883232][ T5160] tipc: Resetting bearer <eth:syzkaller0>
[  171.986664][ T5141] tipc: Resetting bearer <eth:syzkaller0>
[  172.566507][ T5141] tipc: Disabling bearer <eth:syzkaller0>
[  172.784250][ T4426] tipc: Node number set to 3976814059
[  172.816662][ T4384] device hsr_slave_0 left promiscuous mode
[  172.871024][ T4384] device hsr_slave_1 left promiscuous mode
[  172.920245][ T4384] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  172.940075][ T4384] batman_adv: batadv0: Removing interface: batadv_slave_0
[  172.966316][ T4384] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  172.976260][   T48] Bluetooth: hci2: command 0x040f tx timeout
[  173.022211][ T4384] batman_adv: batadv0: Removing interface: batadv_slave_1
[  173.038422][ T4384] device bridge_slave_1 left promiscuous mode
[  173.046084][ T4384] bridge0: port 2(bridge_slave_1) entered disabled state
[  173.061179][ T4384] device bridge_slave_0 left promiscuous mode
[  173.078834][ T4384] bridge0: port 1(bridge_slave_0) entered disabled state
[  173.261028][ T4268] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  173.276610][ T4384] device veth1_macvtap left promiscuous mode
[  173.283338][ T4384] device veth0_macvtap left promiscuous mode
[  173.315836][ T4384] device veth1_vlan left promiscuous mode
[  173.322314][ T4384] device veth0_vlan left promiscuous mode
[  173.447219][ T4258] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop0 scanned by udevd (4258)
[  174.204642][ T5208] loop0: detected capacity change from 0 to 32768
[  174.216335][ T5208] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 12
[  175.055887][   T48] Bluetooth: hci2: command 0x0419 tx timeout
[  175.383810][ T5217] rdma_rxe: rxe_register_device failed with error -23
[  175.391368][ T5217] rdma_rxe: failed to add vxcan1
[  177.737819][ T4384] team0 (unregistering): Port device team_slave_1 removed
[  177.854376][ T4384] team0 (unregistering): Port device team_slave_0 removed
[  178.124419][ T4384] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  178.219356][ T4384] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  178.985242][ T4384] bond0 (unregistering): Released all slaves
[  179.240867][ T5228] tipc: Started in network mode
[  179.255867][ T5228] tipc: Node identity a2657395f468, cluster identity 4711
[  179.275929][ T5228] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  179.293871][ T5229] device syzkaller0 entered promiscuous mode
[  179.344053][ T5239] tipc: Resetting bearer <eth:syzkaller0>
[  179.392740][ T5059] device hsr_slave_0 entered promiscuous mode
[  179.412580][ T5059] device hsr_slave_1 entered promiscuous mode
[  179.440909][ T5059] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  179.459819][ T5059] Cannot create hsr debugfs directory
[  179.591562][ T5239] tipc: Resetting bearer <eth:syzkaller0>
[  179.643897][ T5239] tipc: Disabling bearer <eth:syzkaller0>
[  179.925517][ T5261] 8021q: VLANs not supported on caif0
[  180.114042][ T5122] chnl_net:caif_netlink_parms(): no params data found
[  180.198927][ T5259] loop3: detected capacity change from 0 to 32768
[  180.236183][ T5259] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 12
[  181.515203][ T5282] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  181.611303][ T5122] bridge0: port 1(bridge_slave_0) entered blocking state
[  181.694663][ T5122] bridge0: port 1(bridge_slave_0) entered disabled state
[  181.708987][ T5122] device bridge_slave_0 entered promiscuous mode
[  181.747428][ T5059] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  181.800724][ T5122] bridge0: port 2(bridge_slave_1) entered blocking state
[  181.846479][ T5122] bridge0: port 2(bridge_slave_1) entered disabled state
[  181.882747][ T5122] device bridge_slave_1 entered promiscuous mode
[  181.957970][ T5059] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  181.998800][ T5122] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  182.049507][ T5122] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  182.069436][ T5059] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  182.225540][ T5059] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  182.318511][ T4384] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  182.359753][ T5302] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  182.399059][ T5299] device syzkaller0 entered promiscuous mode
[  182.463522][ T5302] tipc: Resetting bearer <eth:syzkaller0>
[  182.504610][ T5122] team0: Port device team_slave_0 added
[  182.526128][ T5298] tipc: Resetting bearer <eth:syzkaller0>
[  182.564896][ T5298] tipc: Disabling bearer <eth:syzkaller0>
[  182.613111][ T4384] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  182.631797][ T5122] team0: Port device team_slave_1 added
[  182.653210][ T5309] 8021q: VLANs not supported on caif0
[  182.751068][ T4384] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  182.879108][ T4384] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  182.917272][ T5122] batman_adv: batadv0: Adding interface: batadv_slave_0
[  182.924468][ T5122] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  183.002369][ T5122] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  183.057151][ T5122] batman_adv: batadv0: Adding interface: batadv_slave_1
[  183.064814][ T5122] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  183.101737][ T5122] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  183.230111][ T5122] device hsr_slave_0 entered promiscuous mode
[  183.258760][ T5122] device hsr_slave_1 entered promiscuous mode
[  183.286078][ T5122] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  183.301955][ T5122] Cannot create hsr debugfs directory
[  183.327677][ T5318] loop2: detected capacity change from 0 to 16
[  183.443216][ T5318] erofs: (device loop2): mounted with root inode @ nid 36.
[  183.516469][ T5059] 8021q: adding VLAN 0 to HW filter on device bond0
[  183.763048][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  183.845050][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  183.892055][ T5059] 8021q: adding VLAN 0 to HW filter on device team0
[  184.124056][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  184.144684][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  184.165214][ T4452] bridge0: port 1(bridge_slave_0) entered blocking state
[  184.172471][ T4452] bridge0: port 1(bridge_slave_0) entered forwarding state
[  184.210945][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  184.271380][ T4830] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  184.340115][ T4830] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  184.475500][ T4830] bridge0: port 2(bridge_slave_1) entered blocking state
[  184.482915][ T4830] bridge0: port 2(bridge_slave_1) entered forwarding state
[  185.162286][ T4830] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  185.177904][ T4830] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  185.290339][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  185.315096][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  185.336222][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  185.346290][ T5347] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  185.441727][ T5354] device syzkaller0 entered promiscuous mode
[  185.458819][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  185.473534][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  185.528475][ T5347] tipc: Resetting bearer <eth:syzkaller0>
[  185.581180][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  185.591994][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  185.602520][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  185.612395][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  185.642296][ T5339] tipc: Resetting bearer <eth:syzkaller0>
[  185.678466][ T5364] overlayfs: overlapping lowerdir path
[  185.686452][ T5339] tipc: Disabling bearer <eth:syzkaller0>
[  185.706790][ T5059] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  185.884240][ T5122] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  185.965328][ T5122] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  185.987014][ T5122] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  186.126059][ T5122] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  186.660198][ T5122] 8021q: adding VLAN 0 to HW filter on device bond0
[  186.793519][ T5122] 8021q: adding VLAN 0 to HW filter on device team0
[  186.837724][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  186.876590][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  186.911619][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  186.949308][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  186.989042][ T4406] bridge0: port 1(bridge_slave_0) entered blocking state
[  186.996351][ T4406] bridge0: port 1(bridge_slave_0) entered forwarding state
[  187.034993][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  187.073944][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  187.101007][ T4406] bridge0: port 2(bridge_slave_1) entered blocking state
[  187.108428][ T4406] bridge0: port 2(bridge_slave_1) entered forwarding state
[  187.137417][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  187.155532][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  187.218003][ T4384] device hsr_slave_0 left promiscuous mode
[  187.246572][ T4384] device hsr_slave_1 left promiscuous mode
[  187.268404][ T4384] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  187.298148][ T4384] batman_adv: batadv0: Removing interface: batadv_slave_0
[  187.327993][ T4384] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  187.347296][ T4384] batman_adv: batadv0: Removing interface: batadv_slave_1
[  187.372066][ T4384] device bridge_slave_1 left promiscuous mode
[  187.390613][ T4384] bridge0: port 2(bridge_slave_1) entered disabled state
[  187.426459][ T4384] device bridge_slave_0 left promiscuous mode
[  187.444026][ T4384] bridge0: port 1(bridge_slave_0) entered disabled state
[  187.629627][ T4384] device veth1_macvtap left promiscuous mode
[  187.648278][ T4384] device veth0_macvtap left promiscuous mode
[  187.654659][ T4384] device veth1_vlan left promiscuous mode
[  187.700668][ T4384] device veth0_vlan left promiscuous mode
[  187.990410][ T4384] infiniband syz2: set down
[  189.077866][ T4384] team0 (unregistering): Port device team_slave_1 removed
[  189.127952][ T4384] team0 (unregistering): Port device team_slave_0 removed
[  189.174494][ T4384] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  189.225344][ T4384] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  189.461962][ T4322] smc: removing ib device syz2
[  189.626771][ T4384] bond0 (unregistering): Released all slaves
[  189.822137][ T5427] netlink: 8 bytes leftover after parsing attributes in process `syz.3.238'.
[  189.845641][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  189.855343][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  189.868222][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  189.920537][ T4860] vxcan1 speed is unknown, defaulting to 1000
[  189.966185][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  189.984389][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  190.003856][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  190.023537][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  190.042374][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  190.091368][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  190.110240][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  190.153632][ T5059] 8021q: adding VLAN 0 to HW filter on device batadv0
[  190.253534][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  190.285065][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  190.324544][ T5435] device ipip0 entered promiscuous mode
[  190.341178][ T5122] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  190.667543][ T5446] fuse: Invalid rootmode
[  191.297250][ T4281] Bluetooth: hci1: command 0x0406 tx timeout
[  191.684067][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  191.704326][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  191.750059][ T5122] 8021q: adding VLAN 0 to HW filter on device batadv0
[  191.775654][ T5469] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  191.803687][ T5469] device syzkaller0 entered promiscuous mode
[  191.866326][ T5469] tipc: Resetting bearer <eth:syzkaller0>
[  191.903515][ T5468] tipc: Resetting bearer <eth:syzkaller0>
[  191.985512][ T5468] tipc: Disabling bearer <eth:syzkaller0>
[  192.041105][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  192.061292][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  192.115344][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  192.134635][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  192.177002][ T5059] device veth0_vlan entered promiscuous mode
[  192.184755][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  192.195529][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  192.240268][ T5059] device veth1_vlan entered promiscuous mode
[  192.325560][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  192.350807][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  192.370911][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  192.403483][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  192.434939][ T5059] device veth0_macvtap entered promiscuous mode
[  192.508654][ T5059] device veth1_macvtap entered promiscuous mode
[  192.561440][ T5059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  192.614105][ T5059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  192.640102][ T5059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  192.668146][ T5059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  192.698761][ T5059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  192.721323][ T5059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  192.743641][ T5059] batman_adv: batadv0: Interface activated: batadv_slave_0
[  192.770931][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  192.823771][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  192.848279][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  192.876182][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  193.047946][ T5059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  193.068627][ T5059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  193.090341][ T5059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  193.237735][ T5059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  193.274556][ T5059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  193.310925][ T5059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  193.340821][ T5059] batman_adv: batadv0: Interface activated: batadv_slave_1
[  193.424066][ T5059] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  193.440319][ T5059] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  193.454925][ T5059] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  193.466773][ T5059] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  193.637584][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  193.670911][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  193.975943][ T4281] Bluetooth: hci1: unexpected event for opcode 0x0401
[  193.983689][   T26] kauditd_printk_skb: 2 callbacks suppressed
[  193.983813][   T26] audit: type=1326 audit(1774808658.716:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5510 comm="syz.2.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b6f9c819 code=0x7ffc0000
[  194.328292][   T26] audit: type=1326 audit(1774808658.716:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5510 comm="syz.2.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f01b6f9c819 code=0x7ffc0000
[  194.394590][   T26] audit: type=1326 audit(1774808658.716:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5510 comm="syz.2.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b6f9c819 code=0x7ffc0000
[  194.474344][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  194.482358][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  194.551024][   T26] audit: type=1326 audit(1774808658.716:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5510 comm="syz.2.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f01b6f9c819 code=0x7ffc0000
[  194.625557][   T26] audit: type=1326 audit(1774808658.726:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5510 comm="syz.2.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b6f9c819 code=0x7ffc0000
[  194.691513][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  194.704497][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  194.741964][   T26] audit: type=1326 audit(1774808658.726:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5510 comm="syz.2.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f01b6f9c819 code=0x7ffc0000
[  194.781247][ T5122] device veth0_vlan entered promiscuous mode
[  194.800254][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  194.816724][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  194.843399][   T26] audit: type=1326 audit(1774808658.726:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5510 comm="syz.2.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b6f9c819 code=0x7ffc0000
[  194.874464][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  194.893763][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  194.920950][ T5122] device veth1_vlan entered promiscuous mode
[  194.934676][   T26] audit: type=1326 audit(1774808658.726:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5510 comm="syz.2.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f01b6f9c819 code=0x7ffc0000
[  194.971876][ T4326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  194.975496][ T5532] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  194.994653][ T4326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  195.012283][   T26] audit: type=1326 audit(1774808658.726:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5510 comm="syz.2.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b6f9c819 code=0x7ffc0000
[  195.027976][ T5527] device syzkaller0 entered promiscuous mode
[  195.060026][ T5122] device veth0_macvtap entered promiscuous mode
[  195.074151][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  195.100345][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  195.117070][   T26] audit: type=1326 audit(1774808658.726:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5510 comm="syz.2.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f01b6f9c819 code=0x7ffc0000
[  195.121825][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  195.156311][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  195.165656][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  195.191677][ T5122] device veth1_macvtap entered promiscuous mode
[  195.210844][ T5537] netlink: 12 bytes leftover after parsing attributes in process `syz.2.271'.
[  195.263487][ T5537] 8021q: adding VLAN 0 to HW filter on device bond1
[  195.292373][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  195.387079][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  195.452722][ T5527] tipc: Resetting bearer <eth:syzkaller0>
[  195.485448][ T4452] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  195.501888][ T5526] tipc: Resetting bearer <eth:syzkaller0>
[  195.524951][ T4452] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  195.663005][ T5526] tipc: Disabling bearer <eth:syzkaller0>
[  195.856326][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  195.894024][ T5122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  195.933182][ T5122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  195.950555][ T5122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  195.962069][ T5122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  195.996054][ T5122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  196.023755][ T5122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  196.044631][ T5122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  196.063526][ T5122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  196.118536][ T5122] batman_adv: batadv0: Interface activated: batadv_slave_0
[  196.153224][ T5122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  196.177023][ T5122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  196.187491][ T5122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  196.198249][ T5122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  196.260207][ T5122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  196.314724][ T5122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  196.422753][ T5122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  196.487713][ T5122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  196.574751][ T5122] batman_adv: batadv0: Interface activated: batadv_slave_1
[  196.617728][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  196.633607][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  196.646167][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  196.655570][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  196.817982][ T5122] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  196.827324][ T5122] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  196.836984][ T5122] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  196.846174][ T5122] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  197.745933][   T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  197.754542][   T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  197.822455][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  197.838237][ T4326] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  197.872756][ T4326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  197.904865][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  198.017151][ T4281] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  198.026135][ T4281] Bluetooth: hci1: Injecting HCI hardware error event
[  198.034648][   T48] Bluetooth: hci1: hardware error 0x00
[  199.539672][ T5607] netlink: 68 bytes leftover after parsing attributes in process `syz.5.290'.
[  199.619562][ T5609] vxcan1 speed is unknown, defaulting to 1000
[  199.635445][ T5609] vxcan1 speed is unknown, defaulting to 1000
[  199.645823][ T5609] vxcan1 speed is unknown, defaulting to 1000
[  200.093571][ T5609] infiniband syz2: set active
[  200.098461][ T5609] infiniband syz2: added vxcan1
[  200.104169][ T5609] rdma_rxe: unable to create cq
[  200.109252][ T5609] infiniband syz2: Couldn't create ib_mad CQ
[  200.115453][ T5609] infiniband syz2: Couldn't open port 1
[  200.137640][   T48] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  200.146550][   T26] kauditd_printk_skb: 18 callbacks suppressed
[  200.146565][   T26] audit: type=1326 audit(1774808664.596:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5599 comm="syz.6.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a3479c819 code=0x7ffc0000
[  200.176771][ T4312] vxcan1 speed is unknown, defaulting to 1000
[  200.201883][ T5609] RDS/IB: syz2: added
[  200.206287][ T5609] smc: adding ib device syz2 with port count 1
[  200.212786][ T5609] smc:    ib device syz2 port 1 has pnetid 
[  200.219495][ T5609] vxcan1 speed is unknown, defaulting to 1000
[  200.253585][ T4319] vxcan1 speed is unknown, defaulting to 1000
[  200.427290][   T26] audit: type=1326 audit(1774808664.596:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5599 comm="syz.6.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a3479c819 code=0x7ffc0000
[  200.457435][ T5609] vxcan1 speed is unknown, defaulting to 1000
[  200.481399][   T26] audit: type=1326 audit(1774808664.596:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5599 comm="syz.6.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f5a3479c819 code=0x7ffc0000
[  200.604071][   T26] audit: type=1326 audit(1774808664.596:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5599 comm="syz.6.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a3479c819 code=0x7ffc0000
[  200.655540][ T5609] vxcan1 speed is unknown, defaulting to 1000
[  200.766567][ T5609] vxcan1 speed is unknown, defaulting to 1000
[  200.867618][   T26] audit: type=1326 audit(1774808664.596:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5599 comm="syz.6.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a3479c819 code=0x7ffc0000
[  200.901248][ T5609] vxcan1 speed is unknown, defaulting to 1000
[  200.939105][   T26] audit: type=1326 audit(1774808664.596:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5599 comm="syz.6.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f5a3479c819 code=0x7ffc0000
[  200.990448][   T26] audit: type=1326 audit(1774808664.596:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5599 comm="syz.6.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a3479c819 code=0x7ffc0000
[  201.020856][   T26] audit: type=1326 audit(1774808664.596:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5599 comm="syz.6.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a3479c819 code=0x7ffc0000
[  201.060888][   T26] audit: type=1326 audit(1774808664.596:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5599 comm="syz.6.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f5a3479c819 code=0x7ffc0000
[  201.160246][   T26] audit: type=1326 audit(1774808664.596:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5599 comm="syz.6.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a3479c819 code=0x7ffc0000
[  202.744165][ T5652] dccp_invalid_packet: P.Data Offset(0) too small
[  203.289807][ T5669] rdma_rxe: rxe_register_device failed with error -23
[  203.298201][ T5669] rdma_rxe: failed to add vxcan1
[  204.323467][ T4281] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  204.332827][ T4281] Bluetooth: hci2: Injecting HCI hardware error event
[  204.341982][   T48] Bluetooth: hci2: hardware error 0x00
[  205.257686][ T5690] netlink: 28 bytes leftover after parsing attributes in process `syz.5.316'.
[  206.268802][ T5708] netlink: 4 bytes leftover after parsing attributes in process `syz.3.319'.
[  206.830898][ T5721] rdma_rxe: rxe_register_device failed with error -23
[  206.838605][ T5721] rdma_rxe: failed to add vxcan1
[  206.859532][   T26] kauditd_printk_skb: 24 callbacks suppressed
[  206.859605][   T26] audit: type=1326 audit(1774808671.766:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5716 comm="syz.0.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b2d59c819 code=0x7ffc0000
[  207.055853][   T48] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  207.591497][   T26] audit: type=1326 audit(1774808671.766:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5716 comm="syz.0.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f9b2d59c819 code=0x7ffc0000
[  207.725768][   T26] audit: type=1326 audit(1774808671.766:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5716 comm="syz.0.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b2d59c819 code=0x7ffc0000
[  207.995908][   T26] audit: type=1326 audit(1774808671.766:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5716 comm="syz.0.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f9b2d59c819 code=0x7ffc0000
[  208.050588][   T26] audit: type=1326 audit(1774808671.766:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5716 comm="syz.0.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b2d59c819 code=0x7ffc0000
[  208.080894][   T26] audit: type=1326 audit(1774808671.766:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5716 comm="syz.0.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f9b2d59c819 code=0x7ffc0000
[  208.225201][   T26] audit: type=1326 audit(1774808671.766:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5716 comm="syz.0.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b2d59c819 code=0x7ffc0000
[  208.382483][   T26] audit: type=1326 audit(1774808671.766:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5716 comm="syz.0.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9b2d59c819 code=0x7ffc0000
[  208.409343][   T26] audit: type=1326 audit(1774808671.766:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5716 comm="syz.0.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b2d59c819 code=0x7ffc0000
[  208.446200][   T26] audit: type=1326 audit(1774808671.776:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5716 comm="syz.0.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9b2d59c819 code=0x7ffc0000
[  210.346654][ T4425] usb 7-1: new full-speed USB device number 2 using dummy_hcd
[  210.580861][ T4425] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  210.636766][ T4425] usb 7-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[  210.681909][ T4425] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  210.729355][ T4425] usb 7-1: Product: syz
[  210.786204][ T4425] usb 7-1: Manufacturer: syz
[  210.796900][ T4425] usb 7-1: SerialNumber: syz
[  210.842386][ T4425] usb 7-1: config 0 descriptor??
[  211.068861][ T4426] usb 7-1: USB disconnect, device number 2
[  211.234287][ T5776] loop2: detected capacity change from 0 to 32768
[  211.252631][ T5776] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 12
[  211.347508][ T4258] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  211.354664][ T4425] usb 4-1: new full-speed USB device number 2 using dummy_hcd
[  211.739245][ T4425] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  211.786114][ T4425] usb 4-1: config 0 has no interface number 0
[  211.839736][ T4425] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  211.903654][ T4425] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  212.009215][ T4425] usb 4-1: config 0 descriptor??
[  212.072038][ T4425] usb 4-1: selecting invalid altsetting 1
[  212.113795][ T4425] dvb_ttusb_budget: ttusb_init_controller: error
[  212.168374][ T4425] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  212.630334][ T4425] DVB: Unable to find symbol cx22700_attach()
[  212.944303][ T4425] DVB: Unable to find symbol tda10046_attach()
[  213.043575][ T4425] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[  213.076841][ T4425] usb 4-1: USB disconnect, device number 2
[  214.484403][ T4481] hid (null): report_id 0 is invalid
[  214.515218][ T4481] hid-generic 007F:0005:0001.0001: unknown main item tag 0x2
[  214.525488][ T4481] hid-generic 007F:0005:0001.0001: report_id 0 is invalid
[  214.539561][ T4481] hid-generic 007F:0005:0001.0001: item 0 0 1 8 parsing failed
[  214.549810][ T4481] hid-generic: probe of 007F:0005:0001.0001 failed with error -22
[  215.526573][ T5820] netlink: 'syz.0.342': attribute type 7 has an invalid length.
[  215.568247][ T5820] netlink: 'syz.0.342': attribute type 8 has an invalid length.
[  215.649367][ T5823] netlink: 'syz.0.342': attribute type 9 has an invalid length.
[  216.123849][ T5842] loop0: detected capacity change from 0 to 32768
[  216.161000][ T5842] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 12
[  216.277502][ T4481] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  216.525967][ T4481] usb 3-1: Using ep0 maxpacket: 8
[  216.533512][ T4481] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  216.631801][ T4481] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  216.695986][ T4481] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  216.736725][ T4481] usb 3-1: config 0 descriptor??
[  216.748131][ T4258] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 12
[  216.953527][ T4319] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  217.157878][ T4481] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  217.175869][ T4319] usb 1-1: Using ep0 maxpacket: 8
[  217.184426][ T4319] usb 1-1: config 0 has no interfaces?
[  217.225339][ T4319] usb 1-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5
[  217.283476][ T4319] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  217.342149][ T4319] usb 1-1: Product: syz
[  217.362576][ T4319] usb 1-1: Manufacturer: syz
[  217.393199][ T4319] usb 1-1: SerialNumber: syz
[  217.417037][   T26] kauditd_printk_skb: 4 callbacks suppressed
[  217.417055][   T26] audit: type=1326 audit(1774808682.336:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5837 comm="syz.2.343" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f01b6f9c819 code=0x0
[  217.449408][ T4319] usb 1-1: config 0 descriptor??
[  217.569788][ T5862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  217.605562][ T5862] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  217.665273][ T4319] usb 1-1: USB disconnect, device number 4
[  219.086066][ T4425] usb 3-1: USB disconnect, device number 2
[  219.609628][ T5898] loop3: detected capacity change from 0 to 32768
[  219.621047][ T5898] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 12
[  219.935469][ T5902] process 'syz.2.355' launched '/dev/fd/8' with NULL argv: empty string added
[  220.211850][ T4258] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 12
[  220.903169][ T5919] rdma_rxe: rxe_register_device failed with error -23
[  220.911316][ T5919] rdma_rxe: failed to add vxcan1
[  221.116251][   T26] audit: type=1326 audit(1774808685.836:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5913 comm="syz.5.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9a99c819 code=0x7ffc0000
[  221.265609][   T26] audit: type=1326 audit(1774808685.836:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5913 comm="syz.5.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9a99c819 code=0x7ffc0000
[  221.675628][   T26] audit: type=1326 audit(1774808685.836:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5913 comm="syz.5.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f3a9a99c819 code=0x7ffc0000
[  221.810992][   T26] audit: type=1326 audit(1774808685.836:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5913 comm="syz.5.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9a99c819 code=0x7ffc0000
[  221.917331][   T26] audit: type=1326 audit(1774808685.836:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5913 comm="syz.5.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9a99c819 code=0x7ffc0000
[  222.078532][   T26] audit: type=1326 audit(1774808685.836:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5913 comm="syz.5.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f3a9a99c819 code=0x7ffc0000
[  222.259037][   T26] audit: type=1326 audit(1774808685.836:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5913 comm="syz.5.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9a99c819 code=0x7ffc0000
[  222.371362][   T26] audit: type=1326 audit(1774808685.836:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5913 comm="syz.5.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9a99c819 code=0x7ffc0000
[  222.402863][   T26] audit: type=1326 audit(1774808685.836:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5913 comm="syz.5.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f3a9a99c819 code=0x7ffc0000
[  222.439497][   T26] audit: type=1326 audit(1774808685.836:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5913 comm="syz.5.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9a99c819 code=0x7ffc0000
[  222.635007][   T26] audit: type=1326 audit(1774808685.836:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5913 comm="syz.5.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9a99c819 code=0x7ffc0000
[  222.668192][ T5941] capability: warning: `syz.3.366' uses 32-bit capabilities (legacy support in use)
[  222.680784][   T26] audit: type=1326 audit(1774808685.836:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5913 comm="syz.5.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3a9a99c819 code=0x7ffc0000
[  222.707415][   T26] audit: type=1326 audit(1774808685.836:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5913 comm="syz.5.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9a99c819 code=0x7ffc0000
[  222.794423][   T26] audit: type=1326 audit(1774808685.836:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5913 comm="syz.5.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9a99c819 code=0x7ffc0000
[  222.858258][   T26] audit: type=1326 audit(1774808685.836:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5913 comm="syz.5.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3a9a99c819 code=0x7ffc0000
[  222.936719][   T26] audit: type=1326 audit(1774808685.836:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5913 comm="syz.5.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9a99c819 code=0x7ffc0000
[  222.959435][   T26] audit: type=1326 audit(1774808685.836:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5913 comm="syz.5.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9a99c819 code=0x7ffc0000
[  222.983494][   T26] audit: type=1326 audit(1774808685.836:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5913 comm="syz.5.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3a9a95d04e code=0x7ffc0000
[  223.118805][   T26] audit: type=1326 audit(1774808685.836:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5913 comm="syz.5.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9a99c819 code=0x7ffc0000
[  223.939488][ T5957] loop0: detected capacity change from 0 to 32768
[  223.958001][ T5957] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 12
[  224.476120][ T5967] rdma_rxe: rxe_register_device failed with error -23
[  224.483281][ T5967] rdma_rxe: failed to add vxcan1
[  224.976021][   T48] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  224.986220][   T48] Bluetooth: hci4: Injecting HCI hardware error event
[  224.995437][ T4276] Bluetooth: hci4: hardware error 0x00
[  225.196275][ T4258] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 12
[  227.248977][ T4276] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  227.310978][ T6013] loop6: detected capacity change from 0 to 32768
[  227.339203][ T6013] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 12
[  227.791822][ T4258] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 12
[  229.309889][ T6059] af_packet: tpacket_rcv: packet too big, clamped from 65232 to 4294967272. macoff=96
[  230.412966][ T6076] loop5: detected capacity change from 0 to 32768
[  230.429495][ T6076] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 12
[  231.011916][ T4258] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 12
[  233.232875][ T6081] netlink: 32 bytes leftover after parsing attributes in process `syz.2.394'.
[  236.636242][ T6173] netlink: 8 bytes leftover after parsing attributes in process `syz.5.419'.
[  236.645182][ T6173] netlink: 32 bytes leftover after parsing attributes in process `syz.5.419'.
[  237.195807][ T4481] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  237.408884][ T4481] usb 1-1: config 0 has no interfaces?
[  237.415319][ T4481] usb 1-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[  237.457249][ T4481] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  237.495936][ T4481] usb 1-1: config 0 descriptor??
[  237.798460][ T4481] usb 1-1: USB disconnect, device number 5
[  239.714035][ T6218] device syzkaller0 entered promiscuous mode
[  239.955780][ T4481] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  240.145784][ T4481] usb 4-1: Using ep0 maxpacket: 8
[  240.154031][ T4481] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  240.196131][ T4481] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  240.232621][ T4481] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  240.276367][ T4481] usb 4-1: config 0 descriptor??
[  240.706163][ T4481] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  241.098870][ T6257] vxcan1 speed is unknown, defaulting to 1000
[  241.372370][   T26] kauditd_printk_skb: 21 callbacks suppressed
[  241.372387][   T26] audit: type=1326 audit(1774808706.286:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6219 comm="syz.3.429" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efe90b9c819 code=0x0
[  241.379651][ T6220] kvm: pic: non byte read
[  241.458259][ T6220] kvm: pic: non byte read
[  241.642518][ T6220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  241.689187][ T6220] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  242.955995][ T6275] netlink: 12 bytes leftover after parsing attributes in process `syz.6.438'.
[  243.010484][ T6275] device vlan2 entered promiscuous mode
[  243.025927][ T6275] device batadv0 entered promiscuous mode
[  243.251418][ T4481] usb 4-1: USB disconnect, device number 3
[  245.915828][ T4421] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  246.031366][ T4594] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  246.131560][ T4421] usb 4-1: config 0 has no interfaces?
[  246.150233][ T4421] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[  246.189872][ T4421] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  246.232013][ T4421] usb 4-1: config 0 descriptor??
[  246.265945][ T4594] usb 1-1: Using ep0 maxpacket: 8
[  246.273792][ T4594] usb 1-1: config index 0 descriptor too short (expected 30, got 18)
[  246.888165][ T4594] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  246.908234][ T4594] usb 1-1: config 0 has no interfaces?
[  246.987992][ T4594] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  247.045878][ T4594] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  247.054080][ T4594] usb 1-1: Product: syz
[  247.104061][ T4594] usb 1-1: Manufacturer: syz
[  247.109343][ T4594] usb 1-1: SerialNumber: syz
[  247.117857][ T4594] usb 1-1: config 0 descriptor??
[  247.124579][ T4860] usb 4-1: USB disconnect, device number 4
[  247.834462][ T4860] usb 1-1: USB disconnect, device number 6
[  248.059650][ T6340] netlink: 12 bytes leftover after parsing attributes in process `syz.6.451'.
[  248.113954][ T6340] device vlan2 entered promiscuous mode
[  248.936850][ T4481] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  249.165795][ T4481] usb 7-1: Using ep0 maxpacket: 8
[  249.172520][ T4481] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  249.204494][ T4481] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  249.249179][ T4481] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  249.291404][ T4481] usb 7-1: config 0 descriptor??
[  249.769749][ T4481] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  250.154781][ T6377] kvm: pic: non byte read
[  250.215808][   T26] audit: type=1326 audit(1774808715.086:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6344 comm="syz.6.453" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5a3479c819 code=0x0
[  250.277865][ T6377] kvm: pic: non byte read
[  250.956077][ T6380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  251.001833][ T6380] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  253.466540][ T4481] usb 7-1: USB disconnect, device number 3
[  253.905867][ T4426] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  254.250340][ T4426] usb 3-1: config 0 has no interfaces?
[  254.260222][ T4426] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[  254.320206][ T4426] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  254.384584][ T4426] usb 3-1: config 0 descriptor??
[  254.624821][ T6422] device syzkaller0 entered promiscuous mode
[  254.803784][ T4856] usb 3-1: USB disconnect, device number 3
[  255.272484][ T6430] loop0: detected capacity change from 0 to 1024
[  255.781831][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  255.788724][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  256.338423][ T4384] hfsplus: b-tree write err: -5, ino 25
[  256.344715][ T4384] hfsplus: b-tree write err: -5, ino 4
[  256.404042][ T4384] hfsplus: b-tree write err: -5, ino 2
[  259.879243][ T6478] netlink: 12 bytes leftover after parsing attributes in process `syz.3.480'.
[  259.903745][ T6483] loop5: detected capacity change from 0 to 1024
[  259.951006][ T6478] device vlan2 entered promiscuous mode
[  260.017144][ T6478] device batadv0 entered promiscuous mode
[  260.895635][ T4406] hfsplus: b-tree write err: -5, ino 25
[  260.904327][ T4406] hfsplus: b-tree write err: -5, ino 4
[  260.986786][ T4406] hfsplus: b-tree write err: -5, ino 2
[  261.844485][ T6508] autofs4:pid:6508:autofs_fill_super: called with bogus options
[  263.371197][ T6536] loop5: detected capacity change from 0 to 1024
[  265.133038][ T5059] hfsplus: bad catalog entry type
[  265.573367][    T9] hfsplus: b-tree write err: -5, ino 25
[  265.624443][    T9] hfsplus: b-tree write err: -5, ino 4
[  265.646106][    T9] hfsplus: b-tree write err: -5, ino 2
[  265.729230][   T11] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  266.103863][   T11] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  266.286305][   T11] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  266.802103][   T11] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  266.881884][ T6585] loop2: detected capacity change from 0 to 1024
[  267.019865][ T6581] loop6: detected capacity change from 0 to 32768
[  267.073566][ T6581] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 12
[  268.014972][ T4384] hfsplus: b-tree write err: -5, ino 25
[  268.031097][ T4384] hfsplus: b-tree write err: -5, ino 4
[  268.113813][ T4384] hfsplus: b-tree write err: -5, ino 2
[  268.435393][ T6599] autofs4:pid:6599:autofs_fill_super: called with bogus options
[  268.539620][ T4261] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 12
[  268.694746][   T48] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  268.705558][   T48] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  268.724111][   T48] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  268.737067][   T48] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  268.745596][   T48] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  268.754367][   T48] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  268.879608][ T6604] vxcan1 speed is unknown, defaulting to 1000
[  268.892260][ T6602] device syzkaller0 entered promiscuous mode
[  269.925189][ T6620] netlink: 320 bytes leftover after parsing attributes in process `syz.0.514'.
[  270.401727][ T6604] chnl_net:caif_netlink_parms(): no params data found
[  270.816484][   T48] Bluetooth: hci4: command 0x0409 tx timeout
[  271.095113][ T6642] loop6: detected capacity change from 0 to 1024
[  272.295864][ T6604] bridge0: port 1(bridge_slave_0) entered blocking state
[  272.308217][    T9] hfsplus: b-tree write err: -5, ino 25
[  272.350991][    T9] hfsplus: b-tree write err: -5, ino 4
[  272.383875][ T6604] bridge0: port 1(bridge_slave_0) entered disabled state
[  272.384762][    T9] hfsplus: b-tree write err: -5, ino 2
[  272.406240][ T6604] device bridge_slave_0 entered promiscuous mode
[  272.424909][ T6604] bridge0: port 2(bridge_slave_1) entered blocking state
[  272.448814][ T6604] bridge0: port 2(bridge_slave_1) entered disabled state
[  272.511992][ T6604] device bridge_slave_1 entered promiscuous mode
[  272.560195][   T11] device hsr_slave_0 left promiscuous mode
[  272.577168][   T11] device hsr_slave_1 left promiscuous mode
[  272.585029][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  272.597885][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  272.617093][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  272.655620][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  272.671407][   T26] audit: type=1326 audit(1774808737.586:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6648 comm="syz.2.521" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f01b6f9c819 code=0x0
[  272.701356][   T11] device bridge_slave_1 left promiscuous mode
[  272.719649][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  272.737900][   T11] device bridge_slave_0 left promiscuous mode
[  272.782500][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  272.907016][   T48] Bluetooth: hci4: command 0x041b tx timeout
[  272.938907][   T11] device veth1_macvtap left promiscuous mode
[  272.946727][   T11] device veth0_macvtap left promiscuous mode
[  272.954915][   T11] device veth1_vlan left promiscuous mode
[  272.965777][   T11] device veth0_vlan left promiscuous mode
[  273.510720][ T6671] netlink: 128 bytes leftover after parsing attributes in process `syz.2.523'.
[  274.221831][ T6687] loop0: detected capacity change from 0 to 32768
[  274.231305][ T6687] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 12
[  274.318091][ T4258] I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  274.976790][   T48] Bluetooth: hci4: command 0x040f tx timeout
[  275.068097][ T6709] loop6: detected capacity change from 0 to 1024
[  276.085037][ T4322] hfsplus: b-tree write err: -5, ino 25
[  276.140009][ T4322] hfsplus: b-tree write err: -5, ino 4
[  276.156306][ T4322] hfsplus: b-tree write err: -5, ino 2
[  276.583881][   T26] audit: type=1326 audit(1774808741.496:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6714 comm="syz.2.532" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f01b6f9c819 code=0x0
[  276.697721][   T11] team0 (unregistering): Port device team_slave_1 removed
[  276.850109][   T11] team0 (unregistering): Port device team_slave_0 removed
[  277.006124][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  277.055885][   T48] Bluetooth: hci4: command 0x0419 tx timeout
[  277.376520][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  278.791003][   T11] bond0 (unregistering): Released all slaves
[  279.094944][ T6681] device syzkaller0 entered promiscuous mode
[  279.147103][ T6733] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  279.171129][ T6733] batman_adv: batadv0: Removing interface: batadv_slave_0
[  279.192166][ T6733] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  279.207457][ T6733] batman_adv: batadv0: Removing interface: batadv_slave_1
[  280.510731][ T6604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  280.609741][ T6604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  280.921953][ T6604] team0: Port device team_slave_0 added
[  281.799248][ T6604] team0: Port device team_slave_1 added
[  281.846632][ T6774] netlink: 168 bytes leftover after parsing attributes in process `syz.0.545'.
[  281.908991][   T26] audit: type=1326 audit(1774808746.826:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6765 comm="syz.6.544" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5a3479c819 code=0x0
[  281.965106][ T6604] batman_adv: batadv0: Adding interface: batadv_slave_0
[  281.997395][ T6604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  282.259061][ T6604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  282.340443][ T6604] batman_adv: batadv0: Adding interface: batadv_slave_1
[  282.369481][ T6604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  282.501358][ T6604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  282.788958][ T6604] device hsr_slave_0 entered promiscuous mode
[  282.835047][ T6604] device hsr_slave_1 entered promiscuous mode
[  283.567729][ T6803] device syzkaller0 entered promiscuous mode
[  284.163164][ T6604] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  284.200763][ T6604] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  284.262733][ T6604] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  284.318309][ T6604] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  284.712508][ T6604] 8021q: adding VLAN 0 to HW filter on device bond0
[  284.831140][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  284.860099][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  284.920463][ T6604] 8021q: adding VLAN 0 to HW filter on device team0
[  284.930215][   T26] audit: type=1326 audit(1774808749.846:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6823 comm="syz.6.558" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5a3479c819 code=0x0
[  284.997619][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  285.057952][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  285.103462][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[  285.113822][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[  285.155635][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  285.218798][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  285.240578][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  285.269282][ T4406] bridge0: port 2(bridge_slave_1) entered blocking state
[  285.279504][ T4406] bridge0: port 2(bridge_slave_1) entered forwarding state
[  285.424392][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  285.460319][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  285.898991][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  285.941899][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  285.976616][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  286.069118][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  286.154370][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  286.209919][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  286.305598][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  286.378716][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  286.414238][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  286.479416][ T6850] device syzkaller0 entered promiscuous mode
[  287.912211][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  287.944523][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  288.013836][ T6604] 8021q: adding VLAN 0 to HW filter on device batadv0
[  290.115142][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  290.130482][   T26] audit: type=1326 audit(1774808755.046:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6924 comm="syz.3.574" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efe90b9c819 code=0x0
[  290.148258][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  290.392938][ T6934] rdma_rxe: rxe_register_device failed with error -23
[  290.402487][ T6934] rdma_rxe: failed to add vxcan1
[  290.409930][   T26] audit: type=1326 audit(1774808755.326:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6931 comm="syz.2.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b6f9c819 code=0x7ffc0000
[  290.645168][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  290.672784][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  290.699066][   T26] audit: type=1326 audit(1774808755.326:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6931 comm="syz.2.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b6f9c819 code=0x7ffc0000
[  290.724377][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  290.782533][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  290.858990][   T26] audit: type=1326 audit(1774808755.326:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6931 comm="syz.2.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f01b6f9c819 code=0x7ffc0000
[  290.910140][ T6942] netlink: 'syz.2.578': attribute type 10 has an invalid length.
[  291.022668][   T26] audit: type=1326 audit(1774808755.326:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6931 comm="syz.2.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b6f9c819 code=0x7ffc0000
[  291.146167][ T6604] device veth0_vlan entered promiscuous mode
[  291.180920][   T26] audit: type=1326 audit(1774808755.326:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6931 comm="syz.2.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b6f9c819 code=0x7ffc0000
[  291.282245][ T6942] device syzkaller0 entered promiscuous mode
[  291.322442][   T26] audit: type=1326 audit(1774808755.356:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6931 comm="syz.2.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f01b6f9c819 code=0x7ffc0000
[  291.358150][ T6604] device veth1_vlan entered promiscuous mode
[  291.393590][   T26] audit: type=1326 audit(1774808755.356:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6931 comm="syz.2.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b6f9c819 code=0x7ffc0000
[  291.518470][ T6604] device veth0_macvtap entered promiscuous mode
[  291.603404][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  291.653616][ T6962] netlink: 168 bytes leftover after parsing attributes in process `syz.6.580'.
[  291.668476][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  291.712779][   T26] audit: type=1326 audit(1774808755.356:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6931 comm="syz.2.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b6f9c819 code=0x7ffc0000
[  291.780520][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  291.813935][   T26] audit: type=1326 audit(1774808755.356:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6931 comm="syz.2.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f01b6f9c819 code=0x7ffc0000
[  291.856666][ T6604] device veth1_macvtap entered promiscuous mode
[  291.953396][ T6604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  292.045896][ T6604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  292.141530][ T6604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  292.184918][ T6604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  292.242260][ T6604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  292.285154][ T6604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  292.387043][ T6604] batman_adv: batadv0: Interface activated: batadv_slave_0
[  292.454782][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  292.511562][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  292.761864][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  294.955596][ T6996] fuse: Unknown parameter '0x0000000000000003'
[  295.546902][   T26] kauditd_printk_skb: 25 callbacks suppressed
[  295.546920][   T26] audit: type=1326 audit(1774808760.466:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7001 comm="syz.0.588" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9b2d59c819 code=0x0
[  298.911890][ T6604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  298.934056][ T6604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  298.952255][ T6604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  298.965047][ T6604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  298.980063][ T6604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  298.994954][ T6604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  299.070963][ T6604] batman_adv: batadv0: Interface activated: batadv_slave_1
[  299.095074][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  299.127635][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  299.155422][ T6997] device syzkaller1 entered promiscuous mode
[  299.176940][ T7006] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  299.306235][ T6604] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  299.349279][ T6604] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  299.417493][ T6604] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  299.481330][ T6604] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  299.513737][ T7029] netlink: 168 bytes leftover after parsing attributes in process `syz.3.593'.
[  300.016180][ T4383] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  300.131938][ T4383] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  300.143413][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  300.220861][ T4322] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  300.245978][ T4322] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  300.307608][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  300.485829][ T4426] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  300.738638][ T4426] usb 4-1: Using ep0 maxpacket: 8
[  300.784588][ T4426] usb 4-1: config 6 has an invalid interface number: 2 but max is 0
[  300.908188][ T4426] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config
[  301.281398][ T4426] usb 4-1: config 6 has no interface number 0
[  301.525808][ T4426] usb 4-1: config 6 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  301.676774][ T4426] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91
[  301.718907][ T4426] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  301.770430][ T4426] usb 4-1: Product: syz
[  301.825901][ T4426] usb 4-1: Manufacturer: syz
[  301.852155][ T4426] usb 4-1: SerialNumber: syz
[  301.907338][ T4426] hso 4-1:6.2: Failed to find INT IN ep
[  302.110473][ T4417] usb 4-1: USB disconnect, device number 5
[  302.364243][   T26] audit: type=1326 audit(1774808767.276:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7063 comm="syz.7.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88d3f9c819 code=0x7ffc0000
[  302.508424][   T26] audit: type=1326 audit(1774808767.316:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7063 comm="syz.7.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88d3f9c819 code=0x7ffc0000
[  302.706034][   T26] audit: type=1326 audit(1774808767.346:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7063 comm="syz.7.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f88d3f9c819 code=0x7ffc0000
[  302.934131][   T26] audit: type=1326 audit(1774808767.346:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7063 comm="syz.7.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88d3f9c819 code=0x7ffc0000
[  303.118345][   T26] audit: type=1326 audit(1774808767.346:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7063 comm="syz.7.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f88d3f9c819 code=0x7ffc0000
[  303.380560][   T26] audit: type=1326 audit(1774808768.296:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7070 comm="syz.3.599" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efe90b9c819 code=0x0
[  304.284866][   T26] audit: type=1326 audit(1774808769.196:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7063 comm="syz.7.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88d3f9c819 code=0x7ffc0000
[  304.653102][   T26] audit: type=1326 audit(1774808769.246:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7063 comm="syz.7.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88d3f9c819 code=0x7ffc0000
[  305.030250][ T7097] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  305.205966][ T7097] tipc: Resetting bearer <eth:syzkaller0>
[  305.356929][ T7096] tipc: Disabling bearer <eth:syzkaller0>
[  305.986718][ T7106] netlink: 168 bytes leftover after parsing attributes in process `syz.6.604'.
[  306.606117][ T7113] fuse: Unknown parameter '0x0000000000000003'
[  306.663286][ T7113] device syzkaller1 entered promiscuous mode
[  306.704987][ T7115] netlink: 168 bytes leftover after parsing attributes in process `syz.6.616'.
[  308.093708][   T26] audit: type=1326 audit(1774808772.976:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7129 comm="syz.3.610" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efe90b9c819 code=0x0
[  308.119999][    C1] vkms_vblank_simulate: vblank timer overrun
[  310.021927][ T7128] bridge0: port 2(bridge_slave_1) entered disabled state
[  310.037139][ T7128] bridge0: port 1(bridge_slave_0) entered disabled state
[  310.645493][   T26] audit: type=1326 audit(1774808775.556:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7182 comm="syz.6.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a3479c819 code=0x7ffc0000
[  310.714576][   T26] audit: type=1326 audit(1774808775.596:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7182 comm="syz.6.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a3479c819 code=0x7ffc0000
[  310.889948][   T26] audit: type=1326 audit(1774808775.686:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7182 comm="syz.6.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f5a3479c819 code=0x7ffc0000
[  311.270270][   T26] audit: type=1326 audit(1774808775.686:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7182 comm="syz.6.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a3479c819 code=0x7ffc0000
[  311.493714][   T26] audit: type=1326 audit(1774808775.686:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7182 comm="syz.6.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a3479c819 code=0x7ffc0000
[  311.640771][   T26] audit: type=1326 audit(1774808775.686:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7182 comm="syz.6.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f5a3479c819 code=0x7ffc0000
[  311.679113][    C1] vkms_vblank_simulate: vblank timer overrun
[  311.834034][   T26] audit: type=1326 audit(1774808776.416:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7182 comm="syz.6.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a3479c819 code=0x7ffc0000
[  311.871322][    C1] vkms_vblank_simulate: vblank timer overrun
[  311.982317][ T7128] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  312.072032][ T7128] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  312.232721][   T26] audit: type=1326 audit(1774808776.416:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7182 comm="syz.6.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a3479c819 code=0x7ffc0000
[  312.271444][    C1] vkms_vblank_simulate: vblank timer overrun
[  312.544691][   T26] audit: type=1326 audit(1774808777.306:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7182 comm="syz.6.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5a3479c819 code=0x7ffc0000
[  312.581631][    C1] vkms_vblank_simulate: vblank timer overrun
[  313.275998][ T7128] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  313.304252][ T7128] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  313.335285][ T7128] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  313.350280][ T7128] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  316.301056][ T7238] netlink: 'syz.7.624': attribute type 10 has an invalid length.
[  316.394639][ T7238] 8021q: adding VLAN 0 to HW filter on device batadv0
[  316.479234][ T7238] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  316.710441][ T7238] device syzkaller0 entered promiscuous mode
[  316.766017][ T7246] device syzkaller0 entered promiscuous mode
[  317.230482][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  317.255561][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  318.121240][ T7239] batman_adv: batadv0: Removing interface: batadv_slave_0
[  318.191342][ T7239] batman_adv: batadv0: Removing interface: batadv_slave_1
[  318.519182][ T7239] bond0: (slave batadv0): Releasing backup interface
[  319.622455][ T7283] netlink: 88 bytes leftover after parsing attributes in process `syz.3.634'.
[  323.839454][ T7332] netlink: 'syz.0.647': attribute type 10 has an invalid length.
[  323.953334][ T7332] 8021q: adding VLAN 0 to HW filter on device batadv0
[  324.054733][ T7332] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  324.219503][ T7333] netlink: 4 bytes leftover after parsing attributes in process `syz.2.646'.
[  324.390174][ T7333] device bridge_slave_1 left promiscuous mode
[  324.420616][ T7333] bridge0: port 2(bridge_slave_1) entered disabled state
[  324.486966][ T7333] device bridge_slave_0 left promiscuous mode
[  324.727092][ T7333] bridge0: port 1(bridge_slave_0) entered disabled state
[  331.148641][ T7383] netlink: 168 bytes leftover after parsing attributes in process `syz.6.658'.
[  331.181482][ T7384] rdma_rxe: rxe_register_device failed with error -23
[  331.193202][ T7384] rdma_rxe: failed to add vxcan1
[  331.218316][   T26] kauditd_printk_skb: 39 callbacks suppressed
[  331.218333][   T26] audit: type=1326 audit(1774808796.136:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7371 comm="syz.0.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b2d59c819 code=0x7ffc0000
[  331.407278][   T26] audit: type=1326 audit(1774808796.136:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7371 comm="syz.0.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b2d59c819 code=0x7ffc0000
[  331.703307][   T26] audit: type=1326 audit(1774808796.136:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7371 comm="syz.0.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f9b2d59c819 code=0x7ffc0000
[  331.959832][   T26] audit: type=1326 audit(1774808796.136:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7371 comm="syz.0.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b2d59c819 code=0x7ffc0000
[  334.119886][   T26] audit: type=1326 audit(1774808796.136:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7371 comm="syz.0.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b2d59c819 code=0x7ffc0000
[  334.355057][   T26] audit: type=1326 audit(1774808796.136:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7371 comm="syz.0.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f9b2d59c819 code=0x7ffc0000
[  334.535913][   T26] audit: type=1326 audit(1774808796.136:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7371 comm="syz.0.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b2d59c819 code=0x7ffc0000
[  334.699610][   T26] audit: type=1326 audit(1774808796.136:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7371 comm="syz.0.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b2d59c819 code=0x7ffc0000
[  334.890206][   T26] audit: type=1326 audit(1774808796.136:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7371 comm="syz.0.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f9b2d59c819 code=0x7ffc0000
[  335.245100][ T4481] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  335.854520][   T26] audit: type=1326 audit(1774808796.136:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7371 comm="syz.0.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b2d59c819 code=0x7ffc0000
[  336.406328][ T4481] usb 7-1: Using ep0 maxpacket: 8
[  336.439091][ T4481] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  336.479309][ T4481] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  336.548505][   T26] audit: type=1326 audit(1774808796.136:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7371 comm="syz.0.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b2d59c819 code=0x7ffc0000
[  336.564935][ T4481] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  336.750696][ T4481] usb 7-1: config 0 descriptor??
[  336.825916][   T26] audit: type=1326 audit(1774808796.136:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7371 comm="syz.0.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9b2d59c819 code=0x7ffc0000
[  336.965050][   T26] audit: type=1326 audit(1774808796.136:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7371 comm="syz.0.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b2d59c819 code=0x7ffc0000
[  337.108124][   T26] audit: type=1326 audit(1774808796.136:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7371 comm="syz.0.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b2d59c819 code=0x7ffc0000
[  337.201728][   T26] audit: type=1326 audit(1774808796.136:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7371 comm="syz.0.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9b2d59c819 code=0x7ffc0000
[  337.246205][ T4481] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  337.325260][   T26] audit: type=1326 audit(1774808796.136:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7371 comm="syz.0.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b2d59c819 code=0x7ffc0000
[  337.462289][   T26] audit: type=1326 audit(1774808796.136:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7371 comm="syz.0.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b2d59c819 code=0x7ffc0000
[  337.549991][   T26] audit: type=1326 audit(1774808796.186:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7371 comm="syz.0.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9b2d55d04e code=0x7ffc0000
[  337.604044][   T26] audit: type=1326 audit(1774808796.186:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7371 comm="syz.0.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b2d59c819 code=0x7ffc0000
[  337.685037][   T26] audit: type=1326 audit(1774808796.186:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7371 comm="syz.0.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b2d59c819 code=0x7ffc0000
[  337.745277][ T7401] kvm: pic: non byte read
[  337.772984][ T7401] kvm: pic: non byte read
[  337.803532][ T7401] kvm: pic: non byte read
[  337.809940][ T7401] kvm: pic: non byte read
[  337.830317][ T7401] kvm: pic: non byte read
[  338.030511][ T4481] usb 7-1: USB disconnect, device number 4
[  338.440472][ T7442] netlink: 12 bytes leftover after parsing attributes in process `syz.0.670'.
[  338.979063][ T7442] device vlan2 entered promiscuous mode
[  339.024749][ T7448] netlink: 168 bytes leftover after parsing attributes in process `syz.6.671'.
[  339.028111][ T7442] device batadv0 entered promiscuous mode
[  339.191013][ T7412] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  339.235983][ T7412] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  339.709744][ T7412] Bluetooth: hci4: Suspend notifier action (1) failed: -4
[  341.215796][ T4276] Bluetooth: hci4: command 0x0c1a tx timeout
[  343.297545][ T4276] Bluetooth: hci4: command 0x0406 tx timeout
[  344.931312][ T7494] rdma_rxe: rxe_register_device failed with error -23
[  344.940603][ T7494] rdma_rxe: failed to add vxcan1
[  344.953670][   T26] kauditd_printk_skb: 1 callbacks suppressed
[  344.953688][   T26] audit: type=1326 audit(1774808809.866:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7488 comm="syz.2.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b6f9c819 code=0x7ffc0000
[  345.215982][   T26] audit: type=1326 audit(1774808809.866:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7488 comm="syz.2.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b6f9c819 code=0x7ffc0000
[  345.369231][   T26] audit: type=1326 audit(1774808809.866:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7488 comm="syz.2.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f01b6f9c819 code=0x7ffc0000
[  345.369280][   T26] audit: type=1326 audit(1774808809.866:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7488 comm="syz.2.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b6f9c819 code=0x7ffc0000
[  345.369313][   T26] audit: type=1326 audit(1774808809.866:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7488 comm="syz.2.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b6f9c819 code=0x7ffc0000
[  345.369342][   T26] audit: type=1326 audit(1774808809.866:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7488 comm="syz.2.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f01b6f9c819 code=0x7ffc0000
[  345.369593][   T26] audit: type=1326 audit(1774808809.866:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7488 comm="syz.2.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b6f9c819 code=0x7ffc0000
[  345.369626][   T26] audit: type=1326 audit(1774808809.866:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7488 comm="syz.2.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b6f9c819 code=0x7ffc0000
[  345.369659][   T26] audit: type=1326 audit(1774808809.866:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7488 comm="syz.2.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f01b6f9c819 code=0x7ffc0000
[  345.369693][   T26] audit: type=1326 audit(1774808809.866:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7488 comm="syz.2.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b6f9c819 code=0x7ffc0000
[  345.539324][    C1] vkms_vblank_simulate: vblank timer overrun
[  345.729283][    C1] vkms_vblank_simulate: vblank timer overrun
[  345.868293][    C1] vkms_vblank_simulate: vblank timer overrun
[  346.208881][    C1] vkms_vblank_simulate: vblank timer overrun
[  346.643779][    C1] vkms_vblank_simulate: vblank timer overrun
[  346.882968][    C1] vkms_vblank_simulate: vblank timer overrun
[  347.164925][    C1] vkms_vblank_simulate: vblank timer overrun
[  347.332935][ T7518] netlink: 168 bytes leftover after parsing attributes in process `syz.7.682'.
[  348.256170][ T4481] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  348.475885][ T4481] usb 1-1: Using ep0 maxpacket: 8
[  348.489075][ T4481] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  348.597523][ T4481] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  348.714071][ T4481] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  348.826654][ T4481] usb 1-1: config 0 descriptor??
[  349.250429][ T4481] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  349.256239][ T7542] netlink: 136 bytes leftover after parsing attributes in process `syz.2.686'.
[  349.658632][ T4481] usb 1-1: USB disconnect, device number 7
[  353.637085][ T7595] rdma_rxe: rxe_register_device failed with error -23
[  353.645017][ T7595] rdma_rxe: failed to add vxcan1
[  353.652286][   T26] kauditd_printk_skb: 10 callbacks suppressed
[  353.652298][   T26] audit: type=1326 audit(1774808818.566:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7589 comm="syz.3.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe90b9c819 code=0x7ffc0000
[  353.810207][   T26] audit: type=1326 audit(1774808818.566:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7589 comm="syz.3.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe90b9c819 code=0x7ffc0000
[  353.957750][   T26] audit: type=1326 audit(1774808818.606:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7589 comm="syz.3.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7efe90b9c819 code=0x7ffc0000
[  354.165885][   T26] audit: type=1326 audit(1774808818.606:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7589 comm="syz.3.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe90b9c819 code=0x7ffc0000
[  354.398825][   T26] audit: type=1326 audit(1774808818.606:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7589 comm="syz.3.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe90b9c819 code=0x7ffc0000
[  354.541963][   T26] audit: type=1326 audit(1774808818.606:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7589 comm="syz.3.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7efe90b9c819 code=0x7ffc0000
[  354.725766][   T26] audit: type=1326 audit(1774808818.606:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7589 comm="syz.3.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe90b9c819 code=0x7ffc0000
[  354.880726][   T26] audit: type=1326 audit(1774808818.606:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7589 comm="syz.3.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe90b9c819 code=0x7ffc0000
[  354.984432][   T26] audit: type=1326 audit(1774808818.606:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7589 comm="syz.3.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7efe90b9c819 code=0x7ffc0000
[  355.055887][   T26] audit: type=1326 audit(1774808818.606:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7589 comm="syz.3.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe90b9c819 code=0x7ffc0000
[  356.059534][ T7608] netlink: 32 bytes leftover after parsing attributes in process `syz.2.699'.
[  356.855801][ T4319] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  356.919420][ T4858] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  357.046043][ T4319] usb 8-1: Using ep0 maxpacket: 8
[  357.075151][ T4319] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  357.100984][ T7627] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request
[  357.115860][ T4858] usb 3-1: Using ep0 maxpacket: 32
[  357.127013][ T4319] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  357.140618][ T4858] usb 3-1: config 0 has an invalid interface number: 51 but max is 0
[  357.170640][ T4858] usb 3-1: config 0 has no interface number 0
[  357.178388][ T4319] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  357.208537][ T4858] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  357.226794][ T4319] usb 8-1: config 0 descriptor??
[  357.239557][ T4858] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  357.266003][ T4858] usb 3-1: Product: syz
[  357.282704][ T4858] usb 3-1: Manufacturer: syz
[  357.300073][ T4858] usb 3-1: SerialNumber: syz
[  357.344220][ T4858] usb 3-1: config 0 descriptor??
[  357.412044][ T4858] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  357.611585][ T4858] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  357.660210][ T4319] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  357.689701][ T4858] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  358.038996][ T7638] kvm: pic: non byte read
[  358.667524][ T7638] kvm: pic: non byte read
[  358.706100][ T7638] kvm: pic: non byte read
[  358.710821][ T7638] kvm: pic: non byte read
[  358.763098][ T7638] kvm: pic: non byte read
[  358.812545][ T7638] kvm: pic: non byte read
[  358.830808][ T7638] kvm: pic: non byte read
[  358.840184][ T7638] kvm: pic: non byte read
[  358.845057][ T7638] kvm: pic: non byte read
[  358.852944][ T7638] kvm: pic: non byte read
[  358.954111][ T4415] usb 8-1: USB disconnect, device number 2
[  361.053209][    C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71
[  361.053573][ T4481] usb 3-1: USB disconnect, device number 4
[  361.216505][ T4481] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  361.280315][ T4481] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  361.371287][ T4481] quatech2 3-1:0.51: device disconnected
[  362.115310][ T7695] mmap: syz.0.710 (7695) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  362.741653][ T7703] netlink: 168 bytes leftover after parsing attributes in process `syz.7.717'.
[  364.765764][   T22] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  364.975939][   T22] usb 4-1: Using ep0 maxpacket: 8
[  364.988834][   T22] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  365.038630][   T22] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  365.084421][   T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  365.130547][   T22] usb 4-1: config 0 descriptor??
[  365.496040][ T4858] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  365.560893][   T22] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  365.867411][ T4858] usb 7-1: config 0 has no interfaces?
[  365.895789][ T4858] usb 7-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[  365.936767][ T4858] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  365.984621][ T4858] usb 7-1: config 0 descriptor??
[  366.240727][ T4858] usb 7-1: USB disconnect, device number 5
[  367.207295][ T4858] usb 4-1: USB disconnect, device number 6
[  369.513933][ T7791] netlink: 168 bytes leftover after parsing attributes in process `syz.6.735'.
[  370.545778][ T4481] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  370.785712][ T4481] usb 8-1: Using ep0 maxpacket: 8
[  370.807765][ T4481] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  370.875408][ T4481] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  370.933016][ T4481] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  371.016418][ T4481] usb 8-1: config 0 descriptor??
[  371.454119][ T4481] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  371.918630][ T7827] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  372.221974][ T7837] netlink: 'syz.2.746': attribute type 10 has an invalid length.
[  372.396383][ T7837] device syzkaller0 entered promiscuous mode
[  372.727358][ T4481] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  372.959497][ T4481] usb 1-1: config 0 has no interfaces?
[  372.975318][ T4481] usb 1-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[  373.014031][ T4481] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  373.100024][ T4481] usb 1-1: config 0 descriptor??
[  373.184808][ T7851] netlink: 168 bytes leftover after parsing attributes in process `syz.2.747'.
[  373.378168][ T4858] usb 8-1: USB disconnect, device number 3
[  373.410868][   T22] usb 1-1: USB disconnect, device number 8
[  373.749531][ T7862] device syzkaller0 entered promiscuous mode
[  378.659359][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  378.668574][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  378.895869][   T22] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  378.938455][ T7924] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  379.106026][   T22] usb 3-1: Using ep0 maxpacket: 8
[  379.126824][   T22] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  379.227242][   T22] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  379.273195][   T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  379.354980][   T22] usb 3-1: config 0 descriptor??
[  379.799780][   T22] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  380.128509][ T4421] usb 3-1: USB disconnect, device number 5
[  380.233942][ T7951] device syzkaller0 entered promiscuous mode
[  380.695900][ T4858] usb 8-1: new full-speed USB device number 4 using dummy_hcd
[  380.899442][ T4858] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  380.967887][ T4858] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  381.032360][ T4858] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  381.175725][ T7974] netlink: 'syz.0.771': attribute type 1 has an invalid length.
[  381.770763][ T4858] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  381.787007][ T4858] usb 8-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00
[  381.798441][ T4858] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  381.841912][ T7974] 8021q: adding VLAN 0 to HW filter on device bond2
[  381.872479][ T4858] usb 8-1: config 0 descriptor??
[  381.892405][ T7976] netlink: 'syz.6.770': attribute type 10 has an invalid length.
[  382.086522][ T7976] 8021q: adding VLAN 0 to HW filter on device batadv0
[  382.128036][ T7976] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  382.270383][ T7981] bond2: (slave geneve2): making interface the new active one
[  382.343627][ T7981] bond2: (slave geneve2): Enslaving as an active interface with an up link
[  382.350390][ T4858] hid-u2fzero 0003:10C4:8ACF.0002: unknown main item tag 0x0
[  382.373266][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready
[  382.433726][ T4858] hid-u2fzero 0003:10C4:8ACF.0002: unknown main item tag 0x0
[  382.478701][ T4858] hid-u2fzero 0003:10C4:8ACF.0002: unknown main item tag 0x0
[  382.511515][ T4858] hid-u2fzero 0003:10C4:8ACF.0002: unknown main item tag 0x0
[  382.566416][ T7981] syz.0.771 (7981) used greatest stack depth: 20184 bytes left
[  382.582474][ T4858] hid-u2fzero 0003:10C4:8ACF.0002: unknown main item tag 0x0
[  382.661366][ T7976] device syzkaller0 entered promiscuous mode
[  382.886308][ T4858] hid-u2fzero 0003:10C4:8ACF.0002: hidraw0: USB HID v0.00 Device [HID 10c4:8acf] on usb-dummy_hcd.7-1/input0
[  383.009784][ T4858] hid-u2fzero 0003:10C4:8ACF.0002: U2F Zero LED initialised
[  383.115589][ T4858] general protection fault, probably for non-canonical address 0xdffffc0000000015: 0000 [#1] PREEMPT SMP KASAN
[  383.129307][ T4858] KASAN: null-ptr-deref in range [0x00000000000000a8-0x00000000000000af]
[  383.139501][ T4858] CPU: 1 PID: 4858 Comm: kworker/1:11 Not tainted syzkaller #0
[  383.148662][ T4858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  383.160387][ T4858] Workqueue: usb_hub_wq hub_event
[  383.165590][ T4858] RIP: 0010:u2fzero_rng_read+0x295/0x740
[  383.171451][ T4858] Code: 80 3c 28 00 49 89 c5 74 08 4c 89 ff e8 14 df 19 fa bb a8 00 00 00 49 03 1f 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 48 89 df e8 6d df 19 fa 48 8d 44 24 60 48 89 03
[  383.194538][ T4858] RSP: 0018:ffffc9000cad67e0 EFLAGS: 00010202
[  383.202606][ T4858] RAX: 0000000000000015 RBX: 00000000000000a8 RCX: dffffc0000000000
[  383.212397][ T4858] RDX: 000000000000003b RSI: 0000000000000000 RDI: ffff8880569f0969
[  383.224429][ T4858] RBP: ffffc9000cad6970 R08: 0000000000000000 R09: ffff8880569f092e
[  383.234570][ T4858] R10: dffffc0000000000 R11: ffffed100ad3e12d R12: 1ffff9200195ad04
[  383.244689][ T4858] R13: 1ffff1100afb9e06 R14: 1ffff1100afb9e7c R15: ffff888057dcf030
[  383.255200][ T4858] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  383.266695][ T4858] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  383.276146][ T4858] CR2: 000020000003c000 CR3: 000000007a18d000 CR4: 00000000003506e0
[  383.288424][ T4858] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  383.299679][ T4858] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  383.310450][ T4858] Call Trace:
[  383.315243][ T4858]  <TASK>
[  383.318943][ T4858]  ? u2fzero_brightness_set+0x2c0/0x2c0
[  383.327477][ T4858]  ? mutex_lock_nested+0x10/0x10
[  383.335644][ T4858]  ? u2fzero_brightness_set+0x2c0/0x2c0
[  383.342688][ T4858]  add_early_randomness+0x7a/0x150
[  383.349800][ T4858]  hwrng_register+0x398/0x440
[  383.354802][ T4858]  devm_hwrng_register+0x43/0xb0
[  383.361471][ T4858]  u2fzero_probe+0x355/0x470
[  383.366860][ T4858]  ? hid_map_usage_clear+0x1d0/0x1d0
[  383.373685][ T4858]  hid_device_probe+0x25c/0x350
[  383.380405][ T4858]  ? hid_uevent+0x340/0x340
[  383.385731][ T4858]  really_probe+0x2aa/0xc70
[  383.391142][ T4858]  ? pm_runtime_barrier+0x147/0x1c0
[  383.397710][ T4858]  __driver_probe_device+0x18c/0x330
[  383.404425][ T4858]  driver_probe_device+0x4f/0x420
[  383.410641][ T4858]  __device_attach_driver+0x2c6/0x510
[  383.418284][ T4858]  ? coredump_store+0x90/0x90
[  383.424652][ T4858]  bus_for_each_drv+0x184/0x210
[  383.430630][ T4858]  ? coredump_store+0x90/0x90
[  383.435794][ T4858]  ? subsys_find_device_by_id+0x360/0x360
[  383.442396][ T4858]  __device_attach+0x2a8/0x480
[  383.447540][ T4858]  ? device_attach+0x20/0x20
[  383.452819][ T4858]  ? kobject_uevent_env+0x35f/0x8a0
[  383.458139][ T4858]  bus_probe_device+0xbc/0x1e0
[  383.463310][ T4858]  ? device_add+0x97c/0xfb0
[  383.468072][ T4858]  device_add+0xa00/0xfb0
[  383.472886][ T4858]  hid_add_device+0x389/0x530
[  383.478691][ T4858]  usbhid_probe+0xc09/0xfe0
[  383.484846][ T4858]  usb_probe_interface+0x5c5/0xb20
[  383.490804][ T4858]  ? usb_register_driver+0x3d0/0x3d0
[  383.498266][ T4858]  really_probe+0x2aa/0xc70
[  383.505076][ T4858]  ? pm_runtime_barrier+0x147/0x1c0
[  383.512640][ T4858]  __driver_probe_device+0x18c/0x330
[  383.519778][ T4858]  driver_probe_device+0x4f/0x420
[  383.526994][ T4858]  __device_attach_driver+0x2c6/0x510
[  383.534149][ T4858]  ? coredump_store+0x90/0x90
[  383.541608][ T4858]  bus_for_each_drv+0x184/0x210
[  383.547821][ T4858]  ? coredump_store+0x90/0x90
[  383.554194][ T4858]  ? subsys_find_device_by_id+0x360/0x360
[  383.563144][ T4858]  __device_attach+0x2a8/0x480
[  383.571003][ T4858]  ? device_attach+0x20/0x20
[  383.578916][ T4858]  ? kobject_uevent_env+0x35f/0x8a0
[  383.587096][ T4858]  bus_probe_device+0xbc/0x1e0
[  383.592787][ T4858]  ? device_add+0x97c/0xfb0
[  383.598844][ T4858]  device_add+0xa00/0xfb0
[  383.604774][ T4858]  usb_set_configuration+0x1991/0x1fd0
[  383.611239][ T4858]  usb_generic_driver_probe+0x89/0x150
[  383.618712][ T4858]  usb_probe_device+0x139/0x270
[  383.624818][ T4858]  ? usb_register_device_driver+0x230/0x230
[  383.633245][ T4858]  really_probe+0x2aa/0xc70
[  383.639457][ T4858]  ? pm_runtime_barrier+0x147/0x1c0
[  383.647358][ T4858]  __driver_probe_device+0x18c/0x330
[  383.653809][ T4858]  driver_probe_device+0x4f/0x420
[  383.660167][ T4858]  __device_attach_driver+0x2c6/0x510
[  383.666781][ T4858]  ? coredump_store+0x90/0x90
[  383.672801][ T4858]  bus_for_each_drv+0x184/0x210
[  383.678522][ T4858]  ? coredump_store+0x90/0x90
[  383.684447][ T4858]  ? subsys_find_device_by_id+0x360/0x360
[  383.691201][ T4858]  __device_attach+0x2a8/0x480
[  383.697154][ T4858]  ? device_attach+0x20/0x20
[  383.703137][ T4858]  ? __kmem_cache_free+0xb6/0x1f0
[  383.708967][ T4858]  ? kobject_uevent_env+0x35f/0x8a0
[  383.715330][ T4858]  bus_probe_device+0xbc/0x1e0
[  383.721319][ T4858]  ? device_add+0x97c/0xfb0
[  383.726804][ T4858]  device_add+0xa00/0xfb0
[  383.731415][ T4858]  usb_new_device+0xd66/0x1650
[  383.737267][ T4858]  ? lock_chain_count+0x20/0x20
[  383.743157][ T4858]  ? usb_disconnect+0x8a0/0x8a0
[  383.749202][ T4858]  ? _raw_spin_unlock_irq+0x1f/0x40
[  383.755362][ T4858]  ? lockdep_hardirqs_on+0x94/0x140
[  383.762364][ T4858]  hub_event+0x2dcf/0x5560
[  383.768642][ T4858]  ? hub_post_resume+0x120/0x120
[  383.774552][ T4858]  ? read_lock_is_recursive+0x10/0x10
[  383.782873][ T4858]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  383.790609][ T4858]  ? _raw_spin_unlock+0x40/0x40
[  383.797293][ T4858]  ? _raw_spin_unlock_irq+0x1f/0x40
[  383.803582][ T4858]  ? process_one_work+0x7b0/0x1160
[  383.810855][ T4858]  process_one_work+0x8a2/0x1160
[  383.818066][ T4858]  ? worker_detach_from_pool+0x240/0x240
[  383.825134][ T4858]  ? _raw_spin_lock_irq+0xb7/0xf0
[  383.832704][ T4858]  ? _raw_spin_lock_irqsave+0x100/0x100
[  383.839361][ T4858]  ? kthread_data+0x4b/0xc0
[  383.845550][ T4858]  worker_thread+0xaa2/0x1270
[  383.851618][ T4858]  kthread+0x29d/0x330
[  383.856908][ T4858]  ? worker_clr_flags+0x1a0/0x1a0
[  383.864187][ T4858]  ? kthread_blkcg+0xd0/0xd0
[  383.869019][ T4858]  ret_from_fork+0x1f/0x30
[  383.873874][ T4858]  </TASK>
[  383.877268][ T4858] Modules linked in:
[  384.247069][ T4858] ---[ end trace 0000000000000000 ]---
[  384.258852][ T4858] RIP: 0010:u2fzero_rng_read+0x295/0x740
[  384.270989][ T4858] Code: 80 3c 28 00 49 89 c5 74 08 4c 89 ff e8 14 df 19 fa bb a8 00 00 00 49 03 1f 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 48 89 df e8 6d df 19 fa 48 8d 44 24 60 48 89 03
[  384.300911][ T4858] RSP: 0018:ffffc9000cad67e0 EFLAGS: 00010202
[  384.310337][ T4858] RAX: 0000000000000015 RBX: 00000000000000a8 RCX: dffffc0000000000
[  384.353879][ T4858] RDX: 000000000000003b RSI: 0000000000000000 RDI: ffff8880569f0969
[  384.365787][ T4858] RBP: ffffc9000cad6970 R08: 0000000000000000 R09: ffff8880569f092e
[  384.375329][ T4858] R10: dffffc0000000000 R11: ffffed100ad3e12d R12: 1ffff9200195ad04
[  384.385758][ T4858] R13: 1ffff1100afb9e06 R14: 1ffff1100afb9e7c R15: ffff888057dcf030
[  384.394774][ T4858] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  384.413954][ T4858] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  384.423726][ T4858] CR2: 00007f9b2d7e92f8 CR3: 000000007a18d000 CR4: 00000000003506e0
[  384.433040][ T4858] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  384.443660][ T4858] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  384.452877][ T4858] Kernel panic - not syncing: Fatal exception
[  384.459857][ T4858] Kernel Offset: disabled
[  384.464737][ T4858] Rebooting in 86400 seconds..