last executing test programs:

3m54.853037127s ago: executing program 3 (id=212):
pipe(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x801}, &(0x7f00000003c0)=<r1=>0x0, &(0x7f0000000300)=<r2=>0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185100})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0)
munlockall()
io_uring_enter(r0, 0x7277, 0x0, 0x28, 0x0, 0x0)
close(0xffffffffffffffff)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x101, 0x0)
r4 = dup(0xffffffffffffffff)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
syz_io_uring_setup(0x74ce, &(0x7f0000000380)={0x0, 0xb27a, 0x800, 0x0, 0x80002a9}, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, 0x0)
r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, 0x0)
mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r5, 0x0)
r6 = syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x1)
r7 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0x7078, 0x0, 0xb, 0x284}, &(0x7f0000000100)=<r8=>0x0, &(0x7f0000000140)=<r9=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r6, 0x0, 0x0})
io_uring_enter(r7, 0x3516, 0x0, 0x4, 0x0, 0x0)

3m52.120248473s ago: executing program 3 (id=221):
getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x9, 0x3, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94)
mlockall(0x7)
brk(0x5d555ede6000)
mmap$binder(&(0x7f000023d000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
preadv(r3, &(0x7f0000000240)=[{&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/71, 0x47}, {&(0x7f00000023c0)=""/4096, 0x1000}], 0x4, 0x9, 0xffffff01)
r4 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00')
r5 = socket$kcm(0x2, 0x200000000000001, 0x106)
close(r5)
lseek(r4, 0x4000000000004, 0x2)
bind$inet(r3, 0x0, 0x0)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000100), 0x4)
connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000007, 0x12, r6, 0xbc7ae000)
setsockopt$inet_tcp_int(r3, 0x6, 0x1, 0x0, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0)

3m49.789015911s ago: executing program 3 (id=224):
syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, &(0x7f00000001c0)={@id={0x2, 0x0, @c}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000340)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0)
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000)

3m45.63290501s ago: executing program 3 (id=233):
pipe(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x801}, &(0x7f00000003c0)=<r1=>0x0, &(0x7f0000000300)=<r2=>0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185100})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0)
munlockall()
io_uring_enter(r0, 0x7277, 0x0, 0x28, 0x0, 0x0)
close(0xffffffffffffffff)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x101, 0x0)
r4 = dup(0xffffffffffffffff)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
syz_io_uring_setup(0x74ce, &(0x7f0000000380)={0x0, 0xb27a, 0x800, 0x0, 0x80002a9}, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, 0x0)
r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, 0x0)
mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r5, 0x0)
r6 = syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x1)
r7 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0x7078, 0x0, 0xb, 0x284}, &(0x7f0000000100)=<r8=>0x0, &(0x7f0000000140)=<r9=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r6, 0x0, 0x0})
io_uring_enter(r7, 0x3516, 0x0, 0x4, 0x0, 0x0)

3m43.170947465s ago: executing program 3 (id=242):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
r0 = io_uring_setup(0x46ea, &(0x7f00000000c0)={0x0, 0xc0a6, 0x40, 0x7fc, 0x3e2})
r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000300)={0x0, "030000000000000023000000debd12ffff00000004000000001020000400"})
r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
ioctl$SG_IO(r2, 0x2285, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

3m41.081943755s ago: executing program 3 (id=246):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = fsopen(0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f00000001c0))
ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000040)=0xc)
ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000640)=0x10)
close(r4)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='sour:e', &(0x7f0000000040)='c:::\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
fsopen(&(0x7f0000000200)='befs\x00', 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}}], {0x14}}, 0xcc}}, 0x0)

3m25.488006551s ago: executing program 32 (id=246):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = fsopen(0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f00000001c0))
ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000040)=0xc)
ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000640)=0x10)
close(r4)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='sour:e', &(0x7f0000000040)='c:::\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
fsopen(&(0x7f0000000200)='befs\x00', 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}}], {0x14}}, 0xcc}}, 0x0)

24.548949017s ago: executing program 0 (id=760):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r0, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="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", 0x110}, {&(0x7f00000008c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970", 0x16}], 0x3}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000001e00)="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", 0x561}], 0x1}}], 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

23.119970166s ago: executing program 6 (id=763):
socket(0x2, 0xa, 0x300)
r0 = socket(0x2c, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x17)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000080)=@udp6=r0}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f0000000200), &(0x7f0000001500)=@tcp=r0}, 0x20)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'team_slave_0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}})
write$tun(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="70000000ffffffffffff0180c200000e0800450000780000000000177c2275e687350016c82f9078ac1e0001e000000164006558006490780200000004000000020000002915a94a11e4fb7e83969bcb5cdbf104b1e6f70749e196288c4e8cd4f9aafcafd0e077bf945c40399aeb88c1efcab6c7795d64a69c0160363258e550a72ed13b6de13637349f05f524bbde1d772edc6e"], 0x8a)
sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000c40)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x410cd}, 0x400c084)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="050000000400000008", @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000037f8000000000000000000000000f2645f89cf1830bc"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000080850000000f000000182b0000", @ANYRES32=r2, @ANYBLOB="00000000010000801801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000600b70300000d000000850000000600000085200000040000009500"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000700)="ef16", 0x0}, 0x50)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r5 = accept4(r4, 0x0, 0x0, 0x800)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

22.945850591s ago: executing program 0 (id=764):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
close(0x4)
r2 = getpid()
syz_pidfd_open(r2, 0x0)
r3 = socket$inet6(0xa, 0x80002, 0x0)
getsockopt$IP_VS_SO_GET_SERVICE(r3, 0x0, 0x17, 0x0, 0x0)
r4 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x7168, 0x3010, 0x2, 0x41}, &(0x7f0000000040)=<r5=>0x0, &(0x7f0000000000)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, 0x0, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r4, 0x47ba, 0x3e80, 0x0, 0x0, 0x0)

22.821811328s ago: executing program 5 (id=765):
socket$alg(0x26, 0x5, 0x0)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10)
sendto(r0, &(0x7f0000000180)='%', 0x300000, 0x840, 0x0, 0x60)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0)
sendfile(r4, r3, 0x0, 0x6)
read$watch_queue(r4, &(0x7f0000000540)=""/4096, 0x1000)
fanotify_init(0x200, 0x0)
getrusage(0xffffffffffffffff, &(0x7f00000002c0))
syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00')
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x2098070, &(0x7f0000000140)=ANY=[@ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_i', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB="0618"], 0x3, 0x0, 0x0)
r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000100)=0x80000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000140)={@local, 0x2})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000000)={{@my=0x1, 0xffffffff}, @my=0x0, 0xd, 0x5, 0x3, 0x100000000000000, 0x6, 0x2})

22.474267851s ago: executing program 6 (id=766):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000580)={{0x0, 0x5, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x3, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffe, 0x8000000000000000, 0x0, 0xfffffffffffffffe, 0x8, 0x0, 0x4, 0xfffffffffffffffd, 0x0, 0xf3, 0x3, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x6, 0x0, 0x14, 0x0, 0x0, 0x7, 0x0, 0x9, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3486, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4, 0x800000, 0x0, 0x101, 0x0, 0xd721, 0x0, 0x4, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x79a2, 0x0, 0x3, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4a44e74b]})
eventfd(0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000"], 0x48)
r1 = socket$netlink(0x10, 0x3, 0x10)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000001c0)='macvlan1\x00', 0x10)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x80)
socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000100), 0x10000000000000, 0x2a0000)
fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, <r2=>0x0})
sched_setscheduler(r2, 0x2, &(0x7f0000000280)=0x1)
sched_setaffinity(r2, 0x8, &(0x7f0000000540)=0x2)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r3, &(0x7f0000000280)={0x1f, 0x41, @any, 0x400}, 0xe)
setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4)
io_uring_enter(0xffffffffffffffff, 0x7b20, 0xe93c, 0x0, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newrule={0x30, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1f}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'erspan0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x44004)

21.806358393s ago: executing program 6 (id=767):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=<r0=>0x0)
sched_rr_get_interval(r0, &(0x7f00000000c0))
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$alg(0x26, 0x5, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="03000000040000000400", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="040000000300"/18], 0x50)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000009c0)=@newtfilter={0xebc, 0x2c, 0x100, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xffff}, {0xb, 0xffe0}, {0x6, 0x3}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x12}}, @TCA_RATE={0x6, 0x5, {0x4, 0x1}}, @TCA_CHAIN={0x8, 0xb, 0x80}, @TCA_RATE={0x6, 0x5, {0x80, 0x81}}, @filter_kind_options=@f_u32={{0x8}, {0xe70, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xffef, 0xfff1}}, @TCA_U32_LINK={0x8, 0x3, 0x2c0000}, @TCA_U32_DIVISOR={0x8, 0x4, 0xfe}, @TCA_U32_ACT={0xe54, 0x7, [@m_pedit={0xe50, 0x1f, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x0, 0xfffffbff, 0x10000000, 0x2, 0x8}, 0x80, 0xd}, [{0xc9, 0x2, 0x1, 0x400, 0x8, 0x1}, {0x0, 0x6, 0x47ecf86e, 0x0, 0x1, 0x6}, {0x2, 0x2072, 0x425, 0x7fff, 0x1, 0x77}, {0x1, 0x8, 0x10001, 0x1, 0x4, 0x10}, {0x5, 0x1000, 0x2, 0x83, 0x3, 0x8}, {0xfffffffc, 0x8, 0x1, 0x1, 0x80000000}, {0x5d, 0x1000, 0x1ff, 0xe849, 0x8, 0x4}, {0x7, 0x2, 0x28, 0x4, 0x7, 0x7}, {0x8, 0x1, 0x9b, 0x6, 0x4, 0x8000}, {0x80, 0x2, 0x7, 0x5, 0x7ff, 0x893}, {0x2, 0x2, 0x5, 0x3, 0x65, 0x9}, {0x1, 0x4, 0x4, 0x9, 0x6, 0xe}, {0xffff, 0x100, 0x3, 0x7, 0x6, 0x7}, {0x4, 0x7ff, 0x5, 0x7, 0x5, 0x1}, {0x7, 0x7fff, 0x0, 0x4004, 0x9, 0x80}, {0x5, 0x48, 0xa94, 0x6, 0xffffffff, 0xff}, {0x7, 0xff00, 0x4, 0x7, 0x9, 0xb}, {0x5, 0xa3, 0xb, 0x9, 0x4800, 0x6b}, {0x9, 0x1, 0x2, 0x1, 0x8, 0x2f1}, {0xd32, 0x1000, 0x80, 0x81, 0x9, 0x1}, {0xf5, 0x9, 0x3, 0xb000000, 0x4, 0x5}, {0x4, 0x400, 0x1, 0x7ff, 0x36, 0x7}, {0xfffffffe, 0x80000000, 0x3, 0x0, 0xc, 0x1}, {0x10, 0x3, 0x3, 0x7, 0x2, 0xfffffffa}, {0xfffffff7, 0x4, 0x1, 0x6c88, 0x5, 0x10000}, {0x9, 0xec35, 0x2, 0x9, 0x6, 0x9}, {0x2, 0x0, 0x3, 0x8, 0x6, 0x1000}, {0xfffffffb, 0x200, 0x2, 0x5, 0xfffffffc, 0x7}, {0x3, 0x401, 0x1, 0xf3, 0xef0, 0xfffffffa}, {0x3, 0x0, 0x8, 0xe32, 0x400, 0x8}, {0x7f, 0x4, 0xfffffffe, 0xfffffffb, 0x1, 0x80}, {0x4, 0x8, 0x6, 0x99, 0x6, 0x1000}, {0x593, 0x8, 0x6, 0x7, 0xd2df, 0x4}, {0x0, 0x7, 0x1, 0xaf96, 0x10, 0xfffffff7}, {0x0, 0x5, 0x1ff, 0x7, 0x1ff, 0x4}, {0x3, 0x3ff, 0x3, 0x3, 0x19, 0xb5}, {0x2, 0x3, 0xf0, 0xff, 0xfffffffe, 0x8b}, {0x10000, 0x1ff, 0x2, 0x97cf, 0x45b}, {0x9, 0x3, 0x80000000, 0x80000000, 0x0, 0xb}, {0x9, 0xd9f5, 0xe3, 0xb, 0x5, 0x4}, {0x7, 0xf, 0x2, 0x3, 0x10000, 0xfffff001}, {0x8, 0xfffffffb, 0xfff, 0x4, 0x731b482, 0x8}, {0x1, 0xc738, 0x9, 0x2, 0x8, 0x7}, {0x7, 0x7ff, 0x8, 0xffffffd8, 0x0, 0xfffffffb}, {0x200, 0x3, 0x3, 0xfff, 0x2, 0x2}, {0x0, 0x1, 0xff, 0xffffd21c, 0x4, 0x3}, {0xe2, 0x0, 0x9, 0x4, 0xfffff001, 0x400}, {0x0, 0x1000, 0x80, 0x4, 0x4f, 0xfffffffe}, {0x7e, 0x400, 0x8, 0x5, 0x7, 0x8}, {0x8, 0x0, 0x6, 0x2, 0x5, 0xffffff81}, {0x8, 0x100, 0xff, 0x1ff, 0x964, 0x8000}, {0x80, 0x0, 0x3, 0x4, 0x1, 0x18}, {0x5, 0xcc7, 0x8, 0x80, 0x0, 0x1}, {0x3, 0x4, 0x5, 0x7e, 0x8, 0xfffffff5}, {0x2, 0x9, 0x8, 0x9, 0x1}, {0x7, 0x1, 0x8, 0x3ff, 0x2df, 0x6}, {0xc, 0x20c05, 0xb, 0x101, 0x2}, {0x3, 0x56, 0x6, 0x3, 0x7, 0x9}, {0x5, 0x6, 0x8, 0x7, 0x7, 0x1}, {0x5, 0x7, 0x9, 0xd3, 0x8, 0x1}, {0x3, 0x1, 0x455, 0xc9000000, 0x9, 0x10000}, {0x9, 0x8, 0x8, 0x0, 0x1, 0x9}, {0xb47, 0x1, 0x2, 0x852, 0xf, 0xff}, {0xe, 0x3, 0x401, 0x3, 0x9, 0xffffa36b}, {0x4, 0x80000001, 0x2, 0x9f0, 0x2, 0x6}, {0xfffffffc, 0x80000000, 0x0, 0x0, 0xd, 0x4}, {0x5, 0x4, 0x401, 0x0, 0x9, 0x1}, {0x1, 0x5, 0x8, 0x0, 0x7, 0x1000}, {0xa, 0x80, 0x6, 0x9, 0x5852, 0x1}, {0x2, 0x0, 0x7fffffff, 0xa4c8, 0x5, 0x4}, {0x9, 0x12, 0x101, 0x1000, 0x2, 0x1}, {0x6, 0x10001, 0x100, 0x3, 0xff}, {0x7d, 0x4, 0x7, 0x0, 0x81, 0x7}, {0x80000000, 0x4f, 0x101, 0x8, 0xe, 0x6}, {0x187, 0x5, 0x6, 0x1, 0x6, 0x1000}, {0x0, 0xf, 0x1, 0x8e, 0x4, 0x8}, {0x1, 0x2, 0x9, 0xffffffb5, 0x17a, 0x1}, {0x81, 0x0, 0x7ff, 0x8, 0x8001, 0x1}, {0x81, 0x2, 0x1, 0x1, 0x5, 0x6}, {0x10000, 0x2, 0x1000, 0x81, 0x4, 0x7}, {0x1, 0x1, 0x80000001, 0x6, 0x7fff, 0xfffffff8}, {0x5, 0x5, 0xad, 0x2, 0x400, 0x3}, {0x9, 0x9, 0x6, 0x2, 0x8, 0x94a}, {0x2, 0x1, 0x6, 0x10000, 0x9366, 0x5}, {0xff, 0x3, 0x4, 0x2, 0x4, 0x2}, {0x1ff, 0x7f, 0x0, 0x4, 0x6, 0x5}, {0x4, 0x9, 0x6, 0x100000, 0xfa1, 0xfffffff5}, {0x7, 0x101, 0x93d0, 0xf3, 0x3, 0x9}, {0x8000, 0x2, 0x0, 0xfb7, 0x8, 0x1000}, {0x7fff, 0x0, 0x3, 0x0, 0xff, 0x8}, {0x1a4e, 0x9, 0x6, 0x7, 0x7, 0x9}, {0x7, 0x7, 0x0, 0xf, 0x0, 0x4}, {0x9, 0x9, 0x8, 0xbc5, 0x81, 0x100}, {0x40, 0x4, 0x7, 0x800, 0x4, 0x7}, {0xb12a, 0x9, 0xa9, 0x1ff, 0x6, 0x7}, {0x100, 0x1b00, 0x1ff, 0x5, 0x1, 0x8}, {0x5df, 0x7fff, 0xc000, 0x8, 0x5, 0xca4}, {0xf, 0xa, 0x6, 0x3, 0x10000, 0x6}, {0x7, 0x200, 0x5, 0x510, 0x8, 0x7}, {0x5cc0e9e5, 0x3, 0x0, 0x7fff, 0x7fffffff, 0x5}, {0x10, 0xfff, 0xffffffff, 0x3ff, 0x1, 0x8}, {0x1, 0x1, 0xd, 0xfff, 0x2, 0x35d}, {0x6, 0x8, 0x6, 0x8, 0x8, 0x3ff}, {0x7, 0x7, 0x5, 0x6, 0x2, 0xcdf}, {0x9, 0x7, 0xa92c, 0x9, 0xa8, 0x4}, {0x1, 0x9, 0x10001, 0xfa6, 0x3, 0x8}, {0x5, 0xdad, 0x1, 0xe2f, 0xd, 0x6}, {0x3, 0x4, 0x2, 0x6, 0x1, 0x8001}, {0xb, 0x439d3188, 0xffff, 0x5, 0x1ff, 0x1}, {0xe2a0, 0x54, 0xffffffff, 0x6, 0x3, 0x80000000}, {0x1000, 0x4, 0xd3, 0x4, 0xdc, 0x2}, {0x6, 0x2, 0x8, 0x4, 0xfe3, 0x4}, {0x6, 0x4, 0x8, 0x9, 0x7f, 0x8}, {0x9, 0x2, 0x5, 0xfffffff8, 0xffffffff, 0x10001}, {0x0, 0x4, 0x30d, 0x2, 0x2, 0x7}, {0x8, 0xfff, 0x9, 0x2, 0x1, 0x8}, {0x8, 0x80000000, 0x2, 0x6, 0x5, 0x7fffffff}, {0x80000001, 0x5, 0x80000001, 0xdc, 0x2}, {0x80, 0x4, 0x0, 0x7, 0x1, 0x8}, {0x2, 0x200, 0x5be, 0xfffffff3, 0x7, 0x800}, {0x1000, 0x1, 0x3, 0x9, 0xa, 0x5}, {0xe, 0x4000000, 0x5ea, 0x10, 0x8, 0x80000000}, {0xf, 0x2, 0x80000001, 0x5, 0x2a59, 0x1}, {0x3e87, 0x3, 0x5, 0x9, 0x1, 0x9}, {0xffffff64, 0x0, 0x7, 0x3, 0xae85, 0x25c98821}, {0x0, 0x7, 0xd, 0x400, 0x6, 0xe6c}, {0xffffffff, 0x2, 0x0, 0x100, 0x4, 0x5855}, {0x6528, 0x5, 0x96, 0x8001, 0xe246, 0x6}], [{0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x4}, {0x3}, {}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2}, {0x5, 0x1}, {0x1, 0x1}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0xb, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x7}, {}, {0x4, 0x1}, {0x5}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {}, {0x3}, {0x6, 0x1}, {}, {}, {0x3}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x1}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {}, {}, {0x2}, {0x5}, {}, {0x4, 0x1}, {0x3}, {0x1}, {0x2}, {0x2}, {0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4}, {0x2}, {0x3}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {0x2}, {}, {}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x2}, {0xe2e05a6e9f46ef72, 0x1}, {0x3}, {0x2}, {0x5}, {0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x9a2799bccd0b4636, 0x1}, {0x1}, {}, {0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0xebc}, 0x1, 0x0, 0x0, 0x4050}, 0x20000040)
r4 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0)

20.627192328s ago: executing program 6 (id=768):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_pidfd_open(0x0, 0x0)
r4 = socket$kcm(0x29, 0x2, 0x0)
sendmmsg$inet(r4, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000400)="03362a247861461b950daf8180", 0xd}], 0x1}}], 0x1, 0x40)
close(r4)
setns(r3, 0x24020000)
mount_setattr(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0)
ptrace$peek(0x3, 0x0, 0x0)
setns(0xffffffffffffffff, 0x24020000)

19.429624726s ago: executing program 6 (id=769):
syz_open_dev$cec(0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000800)={0x2020, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x2020)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
syz_open_dev$vim2m(0x0, 0x7, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0xc)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

19.234457592s ago: executing program 2 (id=770):
r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0)
mq_notify(r0, &(0x7f00000000c0)={0x0, 0xc, 0x0, @thr={0x0, 0x0}})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="1201100154e108101e041840b4ed01020301090212"], 0x0)
r3 = add_key$user(&(0x7f0000000000), 0x0, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636e82cfdeaadb674e1693d4a7de63820fefc4f787e272b122ebbff6884b3de82f8a3df9a2d0b67e46c349917110300b94240185146e52ac1540130161b6534e99e466173", 0x68, 0xfffffffffffffffe)
r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)

18.963790967s ago: executing program 4 (id=772):
r0 = syz_open_dev$video(&(0x7f0000000000), 0x80000000003, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
dup3(0xffffffffffffffff, r3, 0x80000)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, 0x0, 0x48000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'macvlan1\x00', <r6=>0x0})
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000001c0)={@remote, r6}, 0x14)
openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
fsopen(&(0x7f0000000180)='ntfs3\x00', 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
bind$unix(r7, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8afb5086d04b3082a6d0000000409021200"], 0x0)
r8 = openat$sysfs(0xffffff9c, 0x0, 0x325840, 0x115)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r8, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_generic(r1, 0x0, 0xc000)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05640, &(0x7f0000000180)={0xa, @pix={0x1, 0x4982, 0x56595559, 0x0, 0xffff, 0x3, 0x3, 0xfeedcafe, 0x0, 0x0, 0x0, 0x5}})

16.122531045s ago: executing program 0 (id=774):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=<r0=>0x0)
sched_rr_get_interval(r0, &(0x7f00000000c0))
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$alg(0x26, 0x5, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000009c0)=@newtfilter={0xebc, 0x2c, 0x100, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xffff}, {0xb, 0xffe0}, {0x6, 0x3}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x12}}, @TCA_RATE={0x6, 0x5, {0x4, 0x1}}, @TCA_CHAIN={0x8, 0xb, 0x80}, @TCA_RATE={0x6, 0x5, {0x80, 0x81}}, @filter_kind_options=@f_u32={{0x8}, {0xe70, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xffef, 0xfff1}}, @TCA_U32_LINK={0x8, 0x3, 0x2c0000}, @TCA_U32_DIVISOR={0x8, 0x4, 0xfe}, @TCA_U32_ACT={0xe54, 0x7, [@m_pedit={0xe50, 0x1f, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x0, 0xfffffbff, 0x10000000, 0x2, 0x8}, 0x80, 0xd}, [{0xc9, 0x2, 0x1, 0x400, 0x8, 0x1}, {0x0, 0x6, 0x47ecf86e, 0x0, 0x1, 0x6}, {0x2, 0x2072, 0x425, 0x7fff, 0x1, 0x77}, {0x1, 0x8, 0x10001, 0x1, 0x4, 0x10}, {0x5, 0x1000, 0x2, 0x83, 0x3, 0x8}, {0xfffffffc, 0x8, 0x1, 0x1, 0x80000000}, {0x5d, 0x1000, 0x1ff, 0xe849, 0x8, 0x4}, {0x7, 0x2, 0x28, 0x4, 0x7, 0x7}, {0x8, 0x1, 0x9b, 0x6, 0x4, 0x8000}, {0x80, 0x2, 0x7, 0x5, 0x7ff, 0x893}, {0x2, 0x2, 0x5, 0x3, 0x65, 0x9}, {0x1, 0x4, 0x4, 0x9, 0x6, 0xe}, {0xffff, 0x100, 0x3, 0x7, 0x6, 0x7}, {0x4, 0x7ff, 0x5, 0x7, 0x5, 0x1}, {0x7, 0x7fff, 0x0, 0x4004, 0x9, 0x80}, {0x5, 0x48, 0xa94, 0x6, 0xffffffff, 0xff}, {0x7, 0xff00, 0x4, 0x7, 0x9, 0xb}, {0x5, 0xa3, 0xb, 0x9, 0x4800, 0x6b}, {0x9, 0x1, 0x2, 0x1, 0x8, 0x2f1}, {0xd32, 0x1000, 0x80, 0x81, 0x9, 0x1}, {0xf5, 0x9, 0x3, 0xb000000, 0x4, 0x5}, {0x4, 0x400, 0x1, 0x7ff, 0x36, 0x7}, {0xfffffffe, 0x80000000, 0x3, 0x0, 0xc, 0x1}, {0x10, 0x3, 0x3, 0x7, 0x2, 0xfffffffa}, {0xfffffff7, 0x4, 0x1, 0x6c88, 0x5, 0x10000}, {0x9, 0xec35, 0x2, 0x9, 0x6, 0x9}, {0x2, 0x0, 0x3, 0x8, 0x6, 0x1000}, {0xfffffffb, 0x200, 0x2, 0x5, 0xfffffffc, 0x7}, {0x3, 0x401, 0x1, 0xf3, 0xef0, 0xfffffffa}, {0x3, 0x0, 0x8, 0xe32, 0x400, 0x8}, {0x7f, 0x4, 0xfffffffe, 0xfffffffb, 0x1, 0x80}, {0x4, 0x8, 0x6, 0x99, 0x6, 0x1000}, {0x593, 0x8, 0x6, 0x7, 0xd2df, 0x4}, {0x0, 0x7, 0x1, 0xaf96, 0x10, 0xfffffff7}, {0x0, 0x5, 0x1ff, 0x7, 0x1ff, 0x4}, {0x3, 0x3ff, 0x3, 0x3, 0x19, 0xb5}, {0x2, 0x3, 0xf0, 0xff, 0xfffffffe, 0x8b}, {0x10000, 0x1ff, 0x2, 0x97cf, 0x45b}, {0x9, 0x3, 0x80000000, 0x80000000, 0x0, 0xb}, {0x9, 0xd9f5, 0xe3, 0xb, 0x5, 0x4}, {0x7, 0xf, 0x2, 0x3, 0x10000, 0xfffff001}, {0x8, 0xfffffffb, 0xfff, 0x4, 0x731b482, 0x8}, {0x1, 0xc738, 0x9, 0x2, 0x8, 0x7}, {0x7, 0x7ff, 0x8, 0xffffffd8, 0x0, 0xfffffffb}, {0x200, 0x3, 0x3, 0xfff, 0x2, 0x2}, {0x0, 0x1, 0xff, 0xffffd21c, 0x4, 0x3}, {0xe2, 0x0, 0x9, 0x4, 0xfffff001, 0x400}, {0x0, 0x1000, 0x80, 0x4, 0x4f, 0xfffffffe}, {0x7e, 0x400, 0x8, 0x5, 0x7, 0x8}, {0x8, 0x0, 0x6, 0x2, 0x5, 0xffffff81}, {0x8, 0x100, 0xff, 0x1ff, 0x964, 0x8000}, {0x80, 0x0, 0x3, 0x4, 0x1, 0x18}, {0x5, 0xcc7, 0x8, 0x80, 0x0, 0x1}, {0x3, 0x4, 0x5, 0x7e, 0x8, 0xfffffff5}, {0x2, 0x9, 0x8, 0x9, 0x1}, {0x7, 0x1, 0x8, 0x3ff, 0x2df, 0x6}, {0xc, 0x20c05, 0xb, 0x101, 0x2}, {0x3, 0x56, 0x6, 0x3, 0x7, 0x9}, {0x5, 0x6, 0x8, 0x7, 0x7, 0x1}, {0x5, 0x7, 0x9, 0xd3, 0x8, 0x1}, {0x3, 0x1, 0x455, 0xc9000000, 0x9, 0x10000}, {0x9, 0x8, 0x8, 0x0, 0x1, 0x9}, {0xb47, 0x1, 0x2, 0x852, 0xf, 0xff}, {0xe, 0x3, 0x401, 0x3, 0x9, 0xffffa36b}, {0x4, 0x80000001, 0x2, 0x9f0, 0x2, 0x6}, {0xfffffffc, 0x80000000, 0x0, 0x0, 0xd, 0x4}, {0x5, 0x4, 0x401, 0x0, 0x9, 0x1}, {0x1, 0x5, 0x8, 0x0, 0x7, 0x1000}, {0xa, 0x80, 0x6, 0x9, 0x5852, 0x1}, {0x2, 0x0, 0x7fffffff, 0xa4c8, 0x5, 0x4}, {0x9, 0x12, 0x101, 0x1000, 0x2, 0x1}, {0x6, 0x10001, 0x100, 0x3, 0xff}, {0x7d, 0x4, 0x7, 0x0, 0x81, 0x7}, {0x80000000, 0x4f, 0x101, 0x8, 0xe, 0x6}, {0x187, 0x5, 0x6, 0x1, 0x6, 0x1000}, {0x0, 0xf, 0x1, 0x8e, 0x4, 0x8}, {0x1, 0x2, 0x9, 0xffffffb5, 0x17a, 0x1}, {0x81, 0x0, 0x7ff, 0x8, 0x8001, 0x1}, {0x81, 0x2, 0x1, 0x1, 0x5, 0x6}, {0x10000, 0x2, 0x1000, 0x81, 0x4, 0x7}, {0x1, 0x1, 0x80000001, 0x6, 0x7fff, 0xfffffff8}, {0x5, 0x5, 0xad, 0x2, 0x400, 0x3}, {0x9, 0x9, 0x6, 0x2, 0x8, 0x94a}, {0x2, 0x1, 0x6, 0x10000, 0x9366, 0x5}, {0xff, 0x3, 0x4, 0x2, 0x4, 0x2}, {0x1ff, 0x7f, 0x0, 0x4, 0x6, 0x5}, {0x4, 0x9, 0x6, 0x100000, 0xfa1, 0xfffffff5}, {0x7, 0x101, 0x93d0, 0xf3, 0x3, 0x9}, {0x8000, 0x2, 0x0, 0xfb7, 0x8, 0x1000}, {0x7fff, 0x0, 0x3, 0x0, 0xff, 0x8}, {0x1a4e, 0x9, 0x6, 0x7, 0x7, 0x9}, {0x7, 0x7, 0x0, 0xf, 0x0, 0x4}, {0x9, 0x9, 0x8, 0xbc5, 0x81, 0x100}, {0x40, 0x4, 0x7, 0x800, 0x4, 0x7}, {0xb12a, 0x9, 0xa9, 0x1ff, 0x6, 0x7}, {0x100, 0x1b00, 0x1ff, 0x5, 0x1, 0x8}, {0x5df, 0x7fff, 0xc000, 0x8, 0x5, 0xca4}, {0xf, 0xa, 0x6, 0x3, 0x10000, 0x6}, {0x7, 0x200, 0x5, 0x510, 0x8, 0x7}, {0x5cc0e9e5, 0x3, 0x0, 0x7fff, 0x7fffffff, 0x5}, {0x10, 0xfff, 0xffffffff, 0x3ff, 0x1, 0x8}, {0x1, 0x1, 0xd, 0xfff, 0x2, 0x35d}, {0x6, 0x8, 0x6, 0x8, 0x8, 0x3ff}, {0x7, 0x7, 0x5, 0x6, 0x2, 0xcdf}, {0x9, 0x7, 0xa92c, 0x9, 0xa8, 0x4}, {0x1, 0x9, 0x10001, 0xfa6, 0x3, 0x8}, {0x5, 0xdad, 0x1, 0xe2f, 0xd, 0x6}, {0x3, 0x4, 0x2, 0x6, 0x1, 0x8001}, {0xb, 0x439d3188, 0xffff, 0x5, 0x1ff, 0x1}, {0xe2a0, 0x54, 0xffffffff, 0x6, 0x3, 0x80000000}, {0x1000, 0x4, 0xd3, 0x4, 0xdc, 0x2}, {0x6, 0x2, 0x8, 0x4, 0xfe3, 0x4}, {0x6, 0x4, 0x8, 0x9, 0x7f, 0x8}, {0x9, 0x2, 0x5, 0xfffffff8, 0xffffffff, 0x10001}, {0x0, 0x4, 0x30d, 0x2, 0x2, 0x7}, {0x8, 0xfff, 0x9, 0x2, 0x1, 0x8}, {0x8, 0x80000000, 0x2, 0x6, 0x5, 0x7fffffff}, {0x80000001, 0x5, 0x80000001, 0xdc, 0x2}, {0x80, 0x4, 0x0, 0x7, 0x1, 0x8}, {0x2, 0x200, 0x5be, 0xfffffff3, 0x7, 0x800}, {0x1000, 0x1, 0x3, 0x9, 0xa, 0x5}, {0xe, 0x4000000, 0x5ea, 0x10, 0x8, 0x80000000}, {0xf, 0x2, 0x80000001, 0x5, 0x2a59, 0x1}, {0x3e87, 0x3, 0x5, 0x9, 0x1, 0x9}, {0xffffff64, 0x0, 0x7, 0x3, 0xae85, 0x25c98821}, {0x0, 0x7, 0xd, 0x400, 0x6, 0xe6c}, {0xffffffff, 0x2, 0x0, 0x100, 0x4, 0x5855}, {0x6528, 0x5, 0x96, 0x8001, 0xe246, 0x6}], [{0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x4}, {0x3}, {}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2}, {0x5, 0x1}, {0x1, 0x1}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0xb, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x7}, {}, {0x4, 0x1}, {0x5}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {}, {0x3}, {0x6, 0x1}, {}, {}, {0x3}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x1}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {}, {}, {0x2}, {0x5}, {}, {0x4, 0x1}, {0x3}, {0x1}, {0x2}, {0x2}, {0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4}, {0x2}, {0x3}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {0x2}, {}, {}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x2}, {0xe2e05a6e9f46ef72, 0x1}, {0x3}, {0x2}, {0x5}, {0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x9a2799bccd0b4636, 0x1}, {0x1}, {}, {0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0xebc}, 0x1, 0x0, 0x0, 0x4050}, 0x20000040)
r4 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fea0"], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x79, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0)

16.121613714s ago: executing program 5 (id=775):
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x3)
unshare(0x60040000)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28)
setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)

14.789807678s ago: executing program 0 (id=776):
socket$nl_route(0x10, 0x3, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000140)={@remote, @private}, &(0x7f0000000180)=0xc)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = memfd_create(&(0x7f00000002c0)='\x103q}2\xa18/\xd5\x86\xe7\xc0\x14\x8f^\xd5\xfd\xa9\r\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2_\xdb\xc0\x8b\x19\x17\xb7R\x00\x00\xcb:\b\xeeC0\xa3\xa6\xcf\x00\x00\xac\xc5h&+\t\x98\'\xfd|\x11\x99\xa2*6{\xd2C>2\xf2!\xbc\xda\xee\xb0\xd8\xbf\xaf)\xf58c\x189K\x82\xd1(\xceY*\xcb\x9b\xbdn\x8e\x98m\x10L\xec\xfdWF\x7fj\x19\xb8<\xd2\x9d\x02\xeaQy\xe32\xed\x16f\xfe&\x1a\xdb\xeb\xad\xaaE\b\xa9\xf8\xa9s\xc4d\xd4\x03\xf1\xdaxO\x99\x804m[Ai\x13\x02\xf0\x84c2s\xf0P\t`\x9b\x12&\x8cx\x8eg\x9d\xe6g', 0x3)
ftruncate(r1, 0x80079a0)
splice(r1, 0x0, r0, 0x0, 0x1002, 0x9)
openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x14)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffa}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x50}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0)
prlimit64(r2, 0xc, &(0x7f0000000180)={0x8, 0x6}, &(0x7f0000000f80))
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, 0x0, 0x40000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66)

12.387314638s ago: executing program 5 (id=779):
socket$inet(0x2, 0x4000000000000001, 0x0)
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03)
ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x80085665, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
close(r3)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0xc814)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
syz_80211_join_ibss(&(0x7f0000000200)='wlan0\x00', &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c00078018000180140002"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084)
sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c00000003060104000000000000000002000005050001000700000025e0144d06db249617cab2013cfc2694c2e1fbf957bf4ea85e3a962656fcaf7b2c5242df28d75e9a5317dfd9db9095578c19f668f1cdb1bf3d29d6ab43"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080)

10.842390442s ago: executing program 2 (id=782):
mbind(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x4005, 0x0, 0x4, 0x0)
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20008000)
recvmsg$kcm(r0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, 0x0, 0x0)
close(0x3)
socket$tipc(0x1e, 0x2, 0x0)
syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x0, 0x80, 0x0, 0x4000}, &(0x7f0000000340)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_io_uring_setup(0x88f, &(0x7f00000000c0)={0x0, 0xaee3, 0x800, 0xffffffff, 0xbfe00000}, &(0x7f0000000000)=<r5=>0x0, &(0x7f0000000040)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r4, 0x47f6, 0x0, 0x2, 0x0, 0x300)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0)

9.299730079s ago: executing program 0 (id=784):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03)
ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x80085665, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
close(r3)
openat$sndtimer(0xffffffffffffff9c, 0x0, 0x2)
ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000400))
getpid()
getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000003140)=""/4111, &(0x7f0000000000)=0x4)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r4, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@empty, 0x4e22, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x1}, {0xfffffffffffffffd, 0x0, 0x6, 0x0, 0x5, 0x80000000, 0x0, 0x7fffffdfffffffff}, {0x0, 0x0, 0xffffffffffffffff, 0x20000000000000}}, {{@in=@multicast2, 0x4d5, 0x6c}, 0xa, @in=@private=0xa010102, 0x350a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200000}}, 0xe8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, 0x0, &(0x7f0000000140))
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e24, 0xfffffff7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x74}}}, &(0x7f0000000280)=0x84)

9.209803777s ago: executing program 2 (id=786):
socket(0x2, 0xa, 0x300)
r0 = socket(0x2c, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="11000000040000000400"], 0x17)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r0}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f0000000200), &(0x7f0000001500)=@tcp=r0}, 0x20)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
write$tun(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="70000000ffffffffffff0180c200000e0800450000780000000000177c2275e687350016c82f9078ac1e0001e000000164006558006490780200000004000000020000002915a94a11e4fb7e83969bcb5cdbf104b1e6f70749e196288c4e8cd4f9aafcafd0e077bf945c40399aeb88c1efcab6c7795d64a69c0160363258e550a72ed13b6de13637349f05f524bbde1d772edc6e"], 0x8a)
sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000c40)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x410cd}, 0x400c084)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000080000", @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000037f8000000000000000000000000f2645f89cf1830bc"], 0x50)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000700)="ef16", 0x0}, 0x50)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

8.80563744s ago: executing program 4 (id=787):
syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, &(0x7f00000001c0)={@id={0x2, 0x0, @c}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000340)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0)
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000)

7.518838653s ago: executing program 6 (id=789):
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x103)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
lsetxattr$trusted_overlay_origin(&(0x7f0000000180)='./file1\x00', &(0x7f0000000040), &(0x7f0000000100), 0x40, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
openat$tun(0xffffffffffffff9c, 0x0, 0x80000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x7, 0x0, 0x0)
r5 = socket$inet6(0xa, 0x2, 0x3a)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000200)='.\x00', 0x10000a0)
sendto$inet6(r5, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0)
sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={0x2, 0x3, 0x0, 0x2, 0x10, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "a3"}, @sadb_address={0x5, 0x6, 0xff, 0x0, 0x0, @in6={0xa, 0xfffe, 0x0, @private2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x80}, 0x1, 0x7}, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, 0x0, 0x0)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x1000001, 0x5069f481, 0x8, 0x7fff, 0x0, 0x800, 0x0, 0x0, 0x10}}, 0x50)

6.907826379s ago: executing program 2 (id=790):
socket$nl_route(0x10, 0x3, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000140)={@remote, @private}, &(0x7f0000000180)=0xc)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = memfd_create(&(0x7f00000002c0)='\x103q}2\xa18/\xd5\x86\xe7\xc0\x14\x8f^\xd5\xfd\xa9\r\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2_\xdb\xc0\x8b\x19\x17\xb7R\x00\x00\xcb:\b\xeeC0\xa3\xa6\xcf\x00\x00\xac\xc5h&+\t\x98\'\xfd|\x11\x99\xa2*6{\xd2C>2\xf2!\xbc\xda\xee\xb0\xd8\xbf\xaf)\xf58c\x189K\x82\xd1(\xceY*\xcb\x9b\xbdn\x8e\x98m\x10L\xec\xfdWF\x7fj\x19\xb8<\xd2\x9d\x02\xeaQy\xe32\xed\x16f\xfe&\x1a\xdb\xeb\xad\xaaE\b\xa9\xf8\xa9s\xc4d\xd4\x03\xf1\xdaxO\x99\x804m[Ai\x13\x02\xf0\x84c2s\xf0P\t`\x9b\x12&\x8cx\x8eg\x9d\xe6g', 0x3)
ftruncate(r1, 0x80079a0)
splice(r1, 0x0, r0, 0x0, 0x1002, 0x9)
openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x14)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffa}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x50}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r5, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x24, 0x4, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8}]}, 0x24}}, 0x4)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, 0x0, 0x40000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66)

6.564615126s ago: executing program 4 (id=791):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
socket$kcm(0x2, 0xa, 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10)
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0)
writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000440)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}, {&(0x7f00000005c0)="683f0057954e837474512fc2ea9992001ebd73539c576605b706fd396a2cf8946bc2d0235702", 0x26}], 0x2)

6.533352681s ago: executing program 1 (id=792):
socket(0x2, 0xa, 0x300)
r0 = socket(0x2c, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x17)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000080)=@udp6=r0}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f0000000200), &(0x7f0000001500)=@tcp=r0}, 0x20)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'team_slave_0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}})
write$tun(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="70000000ffffffffffff0180c200000e0800450000780000000000177c2275e687350016c82f9078ac1e0001e000000164006558006490780200000004000000020000002915a94a11e4fb7e83969bcb5cdbf104b1e6f70749e196288c4e8cd4f9aafcafd0e077bf945c40399aeb88c1efcab6c7795d64a69c0160363258e550a72ed13b6de13637349f05f524bbde1d772edc6e"], 0x8a)
sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000c40)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x410cd}, 0x400c084)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800", @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000037f8000000000000000000000000f2645f89cf1830bc"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000080850000000f000000182b0000", @ANYRES32=r2, @ANYBLOB="00000000010000801801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000600b70300000d000000850000000600000085200000040000009500"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000700)="ef16", 0x0}, 0x50)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r5 = accept4(r4, 0x0, 0x0, 0x800)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

5.885695978s ago: executing program 1 (id=793):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, 0x0, {0xfff1}, {0xffff, 0xe}, {0xd}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x7, [0x4, 0x0, 0x5, 0x10, 0xff, 0x1d, 0x9, 0x8, 0xc, 0x5, 0xd, 0xd, 0x3, 0x4, 0x3, 0xd], 0x1, [0x200, 0xc, 0x101, 0x7, 0x486, 0x3c, 0x0, 0x5, 0x8, 0x2a, 0xa, 0x134e, 0xfffc, 0x6, 0x8, 0xba], [0x3, 0x9, 0x3, 0x0, 0x3, 0x0, 0xc5d4, 0x3, 0x3, 0x48a2, 0xffff, 0x7, 0x5, 0x4, 0x6, 0x6]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc004841}, 0x4040044)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500210000000401a8001600a40001402000", 0x3a}], 0x1}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfe33)

5.622842993s ago: executing program 1 (id=794):
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x3)
unshare(0x60040000)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)

5.523903222s ago: executing program 2 (id=795):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
r1 = fcntl$dupfd(r0, 0x406, r0)
ioctl$TCFLSH(r1, 0x400455c8, 0x1)
ioctl$TIOCSETD(r1, 0x5412, 0x0)

5.445524778s ago: executing program 5 (id=796):
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x20000000002)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
execveat$binfmt(0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0, 0x400)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
pipe(&(0x7f0000000180))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x0, 0x0, &(0x7f00000003c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x72, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94)
keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000002060300000034e40000000000000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f7274000000000c000780080006"], 0x58}, 0x1, 0x0, 0x0, 0x20000081}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x400882, 0x125)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="5400000009060102000000"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil)
r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
getsockopt$X25_QBITINCL(r5, 0x106, 0x1, 0x0, &(0x7f0000000080))
write$dsp(0xffffffffffffffff, &(0x7f0000000900)='B', 0x1)
close(0xffffffffffffffff)

3.419895715s ago: executing program 4 (id=797):
socket(0x2, 0xa, 0x300)
r0 = socket(0x2c, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x17)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r0}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f0000000200), &(0x7f0000001500)=@tcp=r0}, 0x20)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'team_slave_0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}})
write$tun(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="70000000ffffffffffff0180c200000e0800450000780000000000177c2275e687350016c82f9078ac1e0001e000000164006558006490780200000004000000020000002915a94a11e4"], 0x8a)
sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000c40)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x410cd}, 0x400c084)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000080000", @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000037f80000"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000080850000000f000000182b0000", @ANYRES32=r2, @ANYBLOB="00000000010000801801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000600b70300000d00"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000700)="ef16", 0x0}, 0x50)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r5 = accept4(r4, 0x0, 0x0, 0x800)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

3.418875152s ago: executing program 5 (id=798):
mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0)
msync(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x6)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f00000001c0)=0x80000000)
r3 = syz_socket_connect_nvme_tcp()
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'veth0_to_bond\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newroute={0x34, 0x1a, 0x1, 0x70bd28, 0x0, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x7}, [@RTA_IIF={0x8, 0x3, r5}, @RTA_DST={0x8, 0x1, @remote}, @RTA_SRC={0x8, 0x2, @private=0xa010100}]}, 0x34}}, 0xea5bc50b6199d77e)
sendto$inet_nvme_pdu(r3, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000540)=@ipv6_newaddrlabel={0x38, 0x48, 0x321, 0x70bd2c, 0x25dfdbfb, {0xa, 0x0, 0x0, 0x0, 0x0, 0x4}, [@IFAL_LABEL={0x8, 0x2, 0x6}, @IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
socket$key(0xf, 0x3, 0x2)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x38, 0x10, 0x801, 0x4000000, 0xfffffffc, {0x0, 0x0, 0x4c, 0x0, 0x204e9, 0x500}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x5}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x4529}]}, 0x38}, 0x1, 0xffffa888}, 0x20000880)

3.288407415s ago: executing program 2 (id=799):
socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x18, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x19, 0x0, 0x0, @binary}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x4000000)

2.499464412s ago: executing program 1 (id=800):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=<r0=>0x0)
sched_rr_get_interval(r0, &(0x7f00000000c0))
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="03000000040000000400", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="040000000300"/18], 0x50)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000009c0)=@newtfilter={0xebc, 0x2c, 0x100, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xffff}, {0xb, 0xffe0}, {0x6, 0x3}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x12}}, @TCA_RATE={0x6, 0x5, {0x4, 0x1}}, @TCA_CHAIN={0x8, 0xb, 0x80}, @TCA_RATE={0x6, 0x5, {0x80, 0x81}}, @filter_kind_options=@f_u32={{0x8}, {0xe70, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xffef, 0xfff1}}, @TCA_U32_LINK={0x8, 0x3, 0x2c0000}, @TCA_U32_DIVISOR={0x8, 0x4, 0xfe}, @TCA_U32_ACT={0xe54, 0x7, [@m_pedit={0xe50, 0x1f, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x0, 0xfffffbff, 0x10000000, 0x2, 0x8}, 0x80, 0xd}, [{0xc9, 0x2, 0x1, 0x400, 0x8, 0x1}, {0x0, 0x6, 0x47ecf86e, 0x0, 0x1, 0x6}, {0x2, 0x2072, 0x425, 0x7fff, 0x1, 0x77}, {0x1, 0x8, 0x10001, 0x1, 0x4, 0x10}, {0x5, 0x1000, 0x2, 0x83, 0x3, 0x8}, {0xfffffffc, 0x8, 0x1, 0x1, 0x80000000}, {0x5d, 0x1000, 0x1ff, 0xe849, 0x8, 0x4}, {0x7, 0x2, 0x28, 0x4, 0x7, 0x7}, {0x8, 0x1, 0x9b, 0x6, 0x4, 0x8000}, {0x80, 0x2, 0x7, 0x5, 0x7ff, 0x893}, {0x2, 0x2, 0x5, 0x3, 0x65, 0x9}, {0x1, 0x4, 0x4, 0x9, 0x6, 0xe}, {0xffff, 0x100, 0x3, 0x7, 0x6, 0x7}, {0x4, 0x7ff, 0x5, 0x7, 0x5, 0x1}, {0x7, 0x7fff, 0x0, 0x4004, 0x9, 0x80}, {0x5, 0x48, 0xa94, 0x6, 0xffffffff, 0xff}, {0x7, 0xff00, 0x4, 0x7, 0x9, 0xb}, {0x5, 0xa3, 0xb, 0x9, 0x4800, 0x6b}, {0x9, 0x1, 0x2, 0x1, 0x8, 0x2f1}, {0xd32, 0x1000, 0x80, 0x81, 0x9, 0x1}, {0xf5, 0x9, 0x3, 0xb000000, 0x4, 0x5}, {0x4, 0x400, 0x1, 0x7ff, 0x36, 0x7}, {0xfffffffe, 0x80000000, 0x3, 0x0, 0xc, 0x1}, {0x10, 0x3, 0x3, 0x7, 0x2, 0xfffffffa}, {0xfffffff7, 0x4, 0x1, 0x6c88, 0x5, 0x10000}, {0x9, 0xec35, 0x2, 0x9, 0x6, 0x9}, {0x2, 0x0, 0x3, 0x8, 0x6, 0x1000}, {0xfffffffb, 0x200, 0x2, 0x5, 0xfffffffc, 0x7}, {0x3, 0x401, 0x1, 0xf3, 0xef0, 0xfffffffa}, {0x3, 0x0, 0x8, 0xe32, 0x400, 0x8}, {0x7f, 0x4, 0xfffffffe, 0xfffffffb, 0x1, 0x80}, {0x4, 0x8, 0x6, 0x99, 0x6, 0x1000}, {0x593, 0x8, 0x6, 0x7, 0xd2df, 0x4}, {0x0, 0x7, 0x1, 0xaf96, 0x10, 0xfffffff7}, {0x0, 0x5, 0x1ff, 0x7, 0x1ff, 0x4}, {0x3, 0x3ff, 0x3, 0x3, 0x19, 0xb5}, {0x2, 0x3, 0xf0, 0xff, 0xfffffffe, 0x8b}, {0x10000, 0x1ff, 0x2, 0x97cf, 0x45b}, {0x9, 0x3, 0x80000000, 0x80000000, 0x0, 0xb}, {0x9, 0xd9f5, 0xe3, 0xb, 0x5, 0x4}, {0x7, 0xf, 0x2, 0x3, 0x10000, 0xfffff001}, {0x8, 0xfffffffb, 0xfff, 0x4, 0x731b482, 0x8}, {0x1, 0xc738, 0x9, 0x2, 0x8, 0x7}, {0x7, 0x7ff, 0x8, 0xffffffd8, 0x0, 0xfffffffb}, {0x200, 0x3, 0x3, 0xfff, 0x2, 0x2}, {0x0, 0x1, 0xff, 0xffffd21c, 0x4, 0x3}, {0xe2, 0x0, 0x9, 0x4, 0xfffff001, 0x400}, {0x0, 0x1000, 0x80, 0x4, 0x4f, 0xfffffffe}, {0x7e, 0x400, 0x8, 0x5, 0x7, 0x8}, {0x8, 0x0, 0x6, 0x2, 0x5, 0xffffff81}, {0x8, 0x100, 0xff, 0x1ff, 0x964, 0x8000}, {0x80, 0x0, 0x3, 0x4, 0x1, 0x18}, {0x5, 0xcc7, 0x8, 0x80, 0x0, 0x1}, {0x3, 0x4, 0x5, 0x7e, 0x8, 0xfffffff5}, {0x2, 0x9, 0x8, 0x9, 0x1}, {0x7, 0x1, 0x8, 0x3ff, 0x2df, 0x6}, {0xc, 0x20c05, 0xb, 0x101, 0x2}, {0x3, 0x56, 0x6, 0x3, 0x7, 0x9}, {0x5, 0x6, 0x8, 0x7, 0x7, 0x1}, {0x5, 0x7, 0x9, 0xd3, 0x8, 0x1}, {0x3, 0x1, 0x455, 0xc9000000, 0x9, 0x10000}, {0x9, 0x8, 0x8, 0x0, 0x1, 0x9}, {0xb47, 0x1, 0x2, 0x852, 0xf, 0xff}, {0xe, 0x3, 0x401, 0x3, 0x9, 0xffffa36b}, {0x4, 0x80000001, 0x2, 0x9f0, 0x2, 0x6}, {0xfffffffc, 0x80000000, 0x0, 0x0, 0xd, 0x4}, {0x5, 0x4, 0x401, 0x0, 0x9, 0x1}, {0x1, 0x5, 0x8, 0x0, 0x7, 0x1000}, {0xa, 0x80, 0x6, 0x9, 0x5852, 0x1}, {0x2, 0x0, 0x7fffffff, 0xa4c8, 0x5, 0x4}, {0x9, 0x12, 0x101, 0x1000, 0x2, 0x1}, {0x6, 0x10001, 0x100, 0x3, 0xff}, {0x7d, 0x4, 0x7, 0x0, 0x81, 0x7}, {0x80000000, 0x4f, 0x101, 0x8, 0xe, 0x6}, {0x187, 0x5, 0x6, 0x1, 0x6, 0x1000}, {0x0, 0xf, 0x1, 0x8e, 0x4, 0x8}, {0x1, 0x2, 0x9, 0xffffffb5, 0x17a, 0x1}, {0x81, 0x0, 0x7ff, 0x8, 0x8001, 0x1}, {0x81, 0x2, 0x1, 0x1, 0x5, 0x6}, {0x10000, 0x2, 0x1000, 0x81, 0x4, 0x7}, {0x1, 0x1, 0x80000001, 0x6, 0x7fff, 0xfffffff8}, {0x5, 0x5, 0xad, 0x2, 0x400, 0x3}, {0x9, 0x9, 0x6, 0x2, 0x8, 0x94a}, {0x2, 0x1, 0x6, 0x10000, 0x9366, 0x5}, {0xff, 0x3, 0x4, 0x2, 0x4, 0x2}, {0x1ff, 0x7f, 0x0, 0x4, 0x6, 0x5}, {0x4, 0x9, 0x6, 0x100000, 0xfa1, 0xfffffff5}, {0x7, 0x101, 0x93d0, 0xf3, 0x3, 0x9}, {0x8000, 0x2, 0x0, 0xfb7, 0x8, 0x1000}, {0x7fff, 0x0, 0x3, 0x0, 0xff, 0x8}, {0x1a4e, 0x9, 0x6, 0x7, 0x7, 0x9}, {0x7, 0x7, 0x0, 0xf, 0x0, 0x4}, {0x9, 0x9, 0x8, 0xbc5, 0x81, 0x100}, {0x40, 0x4, 0x7, 0x800, 0x4, 0x7}, {0xb12a, 0x9, 0xa9, 0x1ff, 0x6, 0x7}, {0x100, 0x1b00, 0x1ff, 0x5, 0x1, 0x8}, {0x5df, 0x7fff, 0xc000, 0x8, 0x5, 0xca4}, {0xf, 0xa, 0x6, 0x3, 0x10000, 0x6}, {0x7, 0x200, 0x5, 0x510, 0x8, 0x7}, {0x5cc0e9e5, 0x3, 0x0, 0x7fff, 0x7fffffff, 0x5}, {0x10, 0xfff, 0xffffffff, 0x3ff, 0x1, 0x8}, {0x1, 0x1, 0xd, 0xfff, 0x2, 0x35d}, {0x6, 0x8, 0x6, 0x8, 0x8, 0x3ff}, {0x7, 0x7, 0x5, 0x6, 0x2, 0xcdf}, {0x9, 0x7, 0xa92c, 0x9, 0xa8, 0x4}, {0x1, 0x9, 0x10001, 0xfa6, 0x3, 0x8}, {0x5, 0xdad, 0x1, 0xe2f, 0xd, 0x6}, {0x3, 0x4, 0x2, 0x6, 0x1, 0x8001}, {0xb, 0x439d3188, 0xffff, 0x5, 0x1ff, 0x1}, {0xe2a0, 0x54, 0xffffffff, 0x6, 0x3, 0x80000000}, {0x1000, 0x4, 0xd3, 0x4, 0xdc, 0x2}, {0x6, 0x2, 0x8, 0x4, 0xfe3, 0x4}, {0x6, 0x4, 0x8, 0x9, 0x7f, 0x8}, {0x9, 0x2, 0x5, 0xfffffff8, 0xffffffff, 0x10001}, {0x0, 0x4, 0x30d, 0x2, 0x2, 0x7}, {0x8, 0xfff, 0x9, 0x2, 0x1, 0x8}, {0x8, 0x80000000, 0x2, 0x6, 0x5, 0x7fffffff}, {0x80000001, 0x5, 0x80000001, 0xdc, 0x2}, {0x80, 0x4, 0x0, 0x7, 0x1, 0x8}, {0x2, 0x200, 0x5be, 0xfffffff3, 0x7, 0x800}, {0x1000, 0x1, 0x3, 0x9, 0xa, 0x5}, {0xe, 0x4000000, 0x5ea, 0x10, 0x8, 0x80000000}, {0xf, 0x2, 0x80000001, 0x5, 0x2a59, 0x1}, {0x3e87, 0x3, 0x5, 0x9, 0x1, 0x9}, {0xffffff64, 0x0, 0x7, 0x3, 0xae85, 0x25c98821}, {0x0, 0x7, 0xd, 0x400, 0x6, 0xe6c}, {0xffffffff, 0x2, 0x0, 0x100, 0x4, 0x5855}, {0x6528, 0x5, 0x96, 0x8001, 0xe246, 0x6}], [{0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x4}, {0x3}, {}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2}, {0x5, 0x1}, {0x1, 0x1}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0xb, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x7}, {}, {0x4, 0x1}, {0x5}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {}, {0x3}, {0x6, 0x1}, {}, {}, {0x3}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x1}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {}, {}, {0x2}, {0x5}, {}, {0x4, 0x1}, {0x3}, {0x1}, {0x2}, {0x2}, {0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4}, {0x2}, {0x3}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {0x2}, {}, {}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x2}, {0xe2e05a6e9f46ef72, 0x1}, {0x3}, {0x2}, {0x5}, {0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x9a2799bccd0b4636, 0x1}, {0x1}, {}, {0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0xebc}, 0x1, 0x0, 0x0, 0x4050}, 0x20000040)
r4 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fea0"], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x79, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0)

2.376915721s ago: executing program 5 (id=801):
syz_open_dev$cec(0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000800)={0x2020, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x2020)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
syz_open_dev$vim2m(0x0, 0x7, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0xc)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

2.276232943s ago: executing program 4 (id=802):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x4000, &(0x7f0000000040)=ANY=[], 0xff, 0x60c0, &(0x7f000000d800)="$eJzs3U1vHVf9B/DfffC147RpVP1V5R+xcFMeWkrznEB5asqCBSxAQl2TyHWrlBRQEhCtIuLKC8QGeAmw6YZFJV4BL6CvASGxJVLSVReUQWOf44xvrn3tJp659vl8pJuZ35w7vmfyveOZ65m5EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA/OD7PznXi4irv04Tjkc8FYOIfsSRul6KeuRKfv4wIk7EenM8FxGD+Yh6/vV/nom4GBEfH4u4/+DOcj35/C77cens7Zuf/fB7//jdH9dOvPPmTz8cb//x/1346Pd3I47/6NWPPrv7ZJYdAAAASlFVVdVLH/NPps/3/a47BQC0Im//qyRPV6vVavUTrf/Q38vznzradX/Vh7Ruqia72ywiYrU5T73P4HA8ABwwq/Fp112gQ/Iv2jAijnbdCWCm9bruAPvi/oM7y72Ub6+5PVjaaM9/p9yS/2pv8/qO7YbTjJ9j0tb7ay0G8ew2/TnSUh9mSc6/P57/1Y32UXrefufflu3yH21c+lScnP9gPP8xW/L/U0Qc2Pz7E/MvVc5/uJf8VwcHeP2XPwAAAAAAh1/++//xjo//zj/+ouzKTsd/l1rqAwAAAAAAAAA8aY97/79N7v8HAAAAM6v+rF7787GH07b7LrZ6+hu9iKfHng8UZqnx5YAAAAAAAAAAAAAAQDuGEYvpvP65iHh6cbGqqvrRNF7v1ePOf9CVvvxQsq5/yQMAwIaPj41dy9+LWIiIN9J3/c0tLi5W1VxELFZH5vP+7Gh+oTrS+Fybh/W0+dEudoiHo6r+YQuN+ZqmfV6e1j7+8+rXGlWDXXSsHR0GDgARsbE1um+LdMhU1TPR9V4OB4P1//Cx/rMbXb9PAQAAgP1XVVXVS1/nfTId8+933SkAoBV5+z9+XECtVquLqT/ZmDgz/VGr97Fuqia72ywiYrU5T73P4Hb8AHDArManXXeBDsm/aMOIONF1J4CZ1uu6A+yL+w/uLPdSvr3m9mBpoz2fC7Il/9Xe+nx5/knDacbPMWnr/bUWg3h2m/4811IfZknOvz+e/9WN9nyL/818FvYn/7Zsl3+9nMc76E/Xcv6D8fzH7Pf635a16E/Mv1Q5/+Ge8h/IHwAAAAAAZlj++/9xx3/zIgMAAAAAAADAgXP/wZ3lfN1rPv7/hQnP6zXHXP95aOT8e7vO3/W/h0nOvz+e/9gJOYPG+L3XH+b/yYM7yx/e/vf/5+HM5z83GNWvPdfrD4bpnJ9q7q24HjdiJc4+8vzhlvZzj7TPbWk/P6X9wiPto7r9SG4/Hcvxi7gRb262z085MWphSns1pT3nP7D+FynnP2w86vwXU3tvbFi790H/kfW+OZz0Olf++p8vP7p2tWG4pVqLweayNRyr/znVWp8eWv8/OTqKX91auXn6N9du3755LtJgy9TzkQZPWM5/Lj1y/i++sNGef+8319d7H4z2nP+sWIvhpPzX398vNMbr5X2p5b51Iec/So+cf94CTV7/D3L+E9f/9eV7uYP+AAAAAAAAAAAAAAAAwE6qqlq/RPRKRFxO1/90dW0mANCuvP2vkjxdre6g/tffZqs/arVavbXuzVh/PkfdVE32WrOIiL8356n3GX476YcBALPsvxHxz647QWfkX7D8fX/18ItddwZo1a333v/ZtRs3Vm7e6ronAAAAAAAAAMDnle//udS4//P6eUBj943ecv/X12PpwN7/sz8arN/rPC3Q87Hz/b9Pxc73/x5Oeb25Ke2jKe3zU9oXprRPvNCjIef/fMo4538yLVhJ9399sYP+dC3nfyrd6znn/5Wx5zXzr/5ykPPvb8n/zO13f3nm1nvvv3L93Wtvr7y98vNzZy9fvHDp4oVLl868df3GytmNfzvs8f7K+ed7XzsPtCw5/5y5/MuS8/9SquVflpT/5m6o/MuS1/+8vyf/suT882cf+Zcl5/9SquVflpz/V1Mt/7Lk/F9OtfzLkvP/WqrlX5ac/yupln9Zcv6nUy3/suT8z6Ra/mXJ+ecjXPIvS84/n9kg/7Lk/M+nWv5lyflfSLX8y5Lzv5hq+Zcl538p1fIvS87/cqrlX5ac/9dTLf+y5Py/kWr5lyXn/2qq5V+WnP83Uy3/suT8v5Vq+Zcl5//tVO+U/zst9ot25Py/k2rrf1ly/t9NtfzLkvN/LdXyL8vD7/83sueRxdnoRpsjVRUxA90wsu8jXf9mAgAAAAAAAAAAAADGtXE6cdfLCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwP/YgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRX27jVGrrO+H/izV6+TQPwnIYQQiO1cMGST3fUtMcFgrv809JIGQksLdYy9dgy+1buGBKFmaWgLAqmR2hf0RSkgQEhtlahCKpUoilSk9k1VXhVFlVArIdWVoDIRVKICtjpznufZmdnZmV3vrj1zzueD4p+9M2fmmTNnZve76DsHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABotuNts380FEIo/mv8sS2E64q/bw2Hin8u7L/aKwQAAADW6+eNP//q+vyFQ6vYqOk6//iaf/n64uLiYvjgixd/8SeLi/mC7SGMbAmhcVnyTz/9yWLzdaKnw8TQcNO/h3vc/UiPy0d7XD7W4/LxHpdv6XH5RI/Ll+2AZbaWv49p3Ngdjb9uK3dpuDGMNS67o8NWTw9tGR5Ov8tpGGpsszh2PJwMp8JsmF62zVDjfyF8c0dxXw+GdF/DTfd1awjh0o8+fjStYSju4ztCy501ND93P3xL2P7ijz5+9KvzP3hlp9lzNyxbaQi7dhbr/GQIS7+uCkNhS94naZ3DTeu8tcM6R1rWOdTYrvh7+zovrXKd6XFPxHV+p8s6b41fe+L2EMJCWPE67Z4Ow+GatnvN+3uiPCKK2yieypeF0TUdJztWcZwU23z/9tbjpP2YTPt/R9wnoyusofnp+OEnxpft98s9TopH3Q/HanHbDxd3OjHR/KvVlmO1uM7H71z5GOj43HU4BvKx3HQM7Ox1DAyPjzSOgeGlNe9sOQZmlm0zHIYa93Xxzu7HwNT86XNTc09+7J6Tp4+cmD0xe2Zmev/ePfv27tm3b+r4yVOz0+Wfa9ulA+SaMJyPwZ3xvSYdg69tu27zIbn4xY17HUz0yeugeOzvuatY0HXDYYVjvLjOJ3et/3WQv+83vQ5Gm14HHd9TO7wORlfxOiiuc2nX6r5njjb912kNm/VeuK3pGLia3w+L+3z/61Z+L7w1rutTr1/r98ORZcdAelhD8bVXfCX/vDdxf9wvy4+LW4oLrh0PF+Zmz9/7xJH5+fMzIY4r4oam56r9eLmm6TGFZcfL8JqPl0N/+bO7bunw9W1xX03cvfRcjXd4Horr7J3s/lw13t0778+Wr+4OcWywK70/O303K/ZnzhJdjv3iOp+8Z/0/C+Zc0vT+N9br/W9kbLR8/xvJe2Os5f1v+VMz0lhZCJfuWd3731j870q//93YJ+9/xb56/73dj4HiOp+aWusxMNr1/e/2OIfiel4XE8NEU+7/RePyhfIwbXouex43o6Nj8bgZTffYetzsWbZNcWvFfe+avrzjZtftrc9Vy88tFTxuin31p9Pdj5viOs/PrP+9Y2v6a9N7x3ivY2BsZLxY71g+CMr3u8Wt6Ri4NxwNZ8OpcCxvUzzLxX1N7l7dMTAe/7vS7x0398kxUOyrz+3ufgwU1/n2no392WlX/Eq+TtPPTu2/X1gp898yunR77bttozN/sc637+3+u6HiOj/Yu9ac0X0/3R2/cm2H/dT++lnpmD4Wrsx+ujmu89S+7r+bKq5z4/5VHk+HQggvzLzQ+H1X/P3u31z416+3/N630++UX5h54aGpR767lvUDAHD5ftH4c2G8/Fmz6f+xXs3//w8AAAAMhJT7h+PM5H8AAACojJT7R+LM5H8AAACojJT7R+PMapL/H7//wLM/fyrkTwNcjNLlaTc8/KbyeqnjvRD/vX1xSfH1t3557NlPP7W6+x4OIfzsoVd1vP7jb0rrKp1L63xD69eXufm2Vd3/Y48uXa/58xMuHShvPz2e1R4Gqav8zandjdvd/uRMYz7/UGjMRxY+9XR5++W/0/Uv7imv/+fxQ0sOHR9q2X5XXM8dcW6Pnynz8KGl/VDMtN2zt77mH25479L9pe2Gdr608TA/93vl7abPiHrmhvL66XGvtP6//8zXni2u/8Sdndf/1HDn9V+Mt/v9OH96sLx+8z7/dNP6/yCuP91f2u7eL32r4/qfe0V5/eficfGFONvX/5Y/fvXPOz1f6X4OPVBul+5/+n/2NrZLt5duv339E0/NtOyP9tt//sXydg5+5McjzddPX0/3kzz2QOvxPRSf35YeeQjha38YWvZzeGO53d+1rT/d3rkHOq//7rZ1nhu6rbH90uPZ1vK4Pv+V3R0fb1rPob/e1vJ4nnlH3H8vTn27uN2Lj8TjMV7+v98pb6/9s0yfe0fr+026/he2la/bdHtTbet/pm39C7cV+673+h98sVz/c2/e0rL+Q++Mx9OD5ey1/hN/cX3L9l/8avl8nP/o5JmzcxdOHosPZlvb63jLxNZrrr3uJS+9Pr6Xtv/78Nn5x2fPb5/ePh3C9gH8yMDNXv+X4vzvcixs/D2Uvvvj8rj77LvK71uv/Un572fi1x+Lz2f6/vj5PxtrOV7bn/eFN5dzvet/fVzHar3iM/9xW4cv/+eyz/y9+IFvXvjb3/9B+88F6fGce/lE4/F9bsdNjcuGni8vb3+/6uXfX976uv7e6HRjfiPu18X4ycw7byrvr/3202eTfPbd5es3/SSXtg9tnyeybaT1cax3/d+LP8d86+bW9790fHzjqbZPc94WhoolLMT3h7BQXp6ulfb3Zy/d1PH+0ufwhIVXrmWZK5p7cm7q1MkzF56Ymp+dm5+ae/Jjh0+fvXBm/nDjs0sPf6jX9kuv72sar+9js/v3hsar/Ww5NtnVXv+5R48eu2/6rmOzx49cOD7/6LnZ8yeOzs0dnT02d9eR48dnP9pr+5PHDs7sPrDnvt2TJ04eO3j/gQN7DkyePHO2WEa5qB72T3948sz5w41N5g7uPTCzb9/e6cnTZ4/NHrxvenryQq/tG9+bJoutPzJ5fvbUkfmTp2cn505+bPbgzIH9+3f3/PTH0+eOz22fOn/hzNSFudnzU+Vj2T7f+HLxva/X9tTD3Nn4ftdmKP50/r679+fPxy18+RMr3lR5ldYfT8MP42dBpe9vvf6dcv9YnFlN8j8AAADUQcr98YP/ly6Q/wEAAKAyUu7fEmcm/wMAAEBlpNw/EWdWk/yv/6//r/+v/6//fwX7/0H/f6Pp/29I/385/f9V0f/X/9f/1/+nu37r/6fcvzWEWuZ/AAAAqIOU+6+JM5P/AQAAoDJS7r82zkz+BwAAgMpIuf+6OLN65P+x9r/q/+v/6/839//TdfX/g/6//v9l0v/X/+9G/1//f5DX34f9/636//Sbfuv/p9z/kjizeuR/AAAAqIWU+18aZyb/AwAAQGWk3H99nJn8DwAAAJWRcv+2OLOa5P8NPP//Z+JF+v/6/4Pe/z+djmPn/9f/1/9fP/1//f9u9P/1/wd5/X3Y/3f+f/pOv/X/U+7/f3FmNcn/AAAAUAcp978szkz+BwAAgMpIuf+GODP5HwAAACoj5f4b48xqkv83sP/v/P/6/1Xp/zed/1//v5n+v/7/5dD/1//vRv9f/3/j1z8Uf0zQ/++1vf4/V0K/9f9T7n95nFlN8j8AAADUQcr9N8WZyf8AAABQGSn3vyLOTP4HAACAyki5/+Y4s5rkf/1//X/9f/1//X/9/82k/6//343+v/7/IK9f/1//n976rf+fcv8r48xqkv8BAACgDlLuvyXOTP4HAACAyki5/1VxZvI/AAAAVEbK/bfGmdUk/+v/91X//8mg/7+8/z+s/6//X1pr/79hoff69f8312D1/4dXvET/v6T/30r/X/9f/1//n+76rf+fcv+r48xqkv8BAACgDlLuf02cmfwPAAAAlZFy/21xZvI/AAAAVEbK/dvjzGqS//X/+6r/7/z/zv+v/+/8/0v9//kh/f9VcP5//f+g/3/ZrnZ/ftDXr/+v/09v/db/T7l/R5xZTfI/AAAA1EHK/TvjzOR/AAAAqIyU+2+PM5P/AQAAoDJS7r8jzqwm+V///zL7/1tb/6n/33n9+v/6//r/zv+v/6//343+v/7/IK9f/391/f/xXjdEpfVb/z/l/jvjzGqS/wEAAKAOUu6/K85M/gcAAIDKSLn/tXFm8j8AAABURsr9u+LMapL/9f+d/1//X/9f/1//fzPp/6+6/7/1cta1Kf3/9Car/9+T/r/+/6D0/yc6bO/8/1wJ/db/T7n/dXFmNcn/AAAAUAcp978+zkz+BwAAgMpIuf/uODP5HwAAACoj5f7JOLOa5H/9f/1//X/9f/1//f/NVNX+f34fdf5//X/9f/3/Te7/f2WF7Qfl/P/UW7/1/1PuvyfOrCb5HwAAAOog5f5748zkfwAAAKiMlPun4szkfwAAAKiMlPun48xqkv+r3/9vbxaX9P9L+v/6/0H/X/9/k1W1/99+/v8Qgv6//n+m/6//32/n/+9E/58rYf39//G8SePPdfb/U+6fiTOrSf4HAACAOki5f3ecmfwPAAAAlZFy/544M/kfAAAAKiPl/r1xZjXJ/9Xv/3em/1/S/9f/D/r/+v+brC79f+f/Ly/X/y/p/+v/6//r/9fRcIevrb//v7RJ48919v9T7t8XZ1aT/A8AAAB1kHL//jgz+R8AAAAqI+X+++LM5H8AAACojJT7748zq0n+1//X/9f/1//v3/5/6/1vXv//v/T/N5H+v/5/N/r/+v+DvH79f/1/etvY/v/16+7/p9x/IM6sJvkfAAAA6iDl/jfEmcn/AAAAUBkp9z8QZyb/AwAAwEDpdB7CJOX+N8aZ1ST/6/9Xvf+/uEX/X/9/cPv/rfvT+f/1/zuJb5/6/6tUr/7/1mX3p//f6mr35wd9/fr/+v/0trH9/2U/nq65/59y/8E4s5rkfwAAAKiDlPvfFGcm/wMAAEBlpNz/5jgz+R8AAAAqI+X+Q3FmNcn/+v9V7//33/n/h8Lg9v9H9f/1//X/18z5//X/u3H+/8Hs/6fP3dD/75/+f3EM6f/Tj/qt/59y/1vizGqS/wEAAKAOUu5/a5yZ/A8AAACVkXL/2+LM5H8AAACojJT73x5nVpP8r/+v/+/8/87/r/+v/7+Z9P/1/7vR/x/M/n+i/98//X/n/6df9Vv/P+X+d8SZ1ST/AwAAQB2k3P/OODP5HwAAACoj5f7/H2cm/wMAAEBlpNz/YJxZTfJ/hfr/Y3Hq/+v/6//r/zfo//cH/X/9/270//X/B3n9+v/6//TWb/3/lPt/Kc6sJvkfAAAA6iDl/ofizOR/AAAAqIyU+98VZyb/AwAAQGWk3P/LcWY1yf8V6v+X+vT8/8P59vX/9f/1//X/9f830oD2/yf0/0v6//r/g7x+/X/9f3rrt/5/yv2/EmdWk/wPAAAAdZBy/6/Gmcn/AAAAUBkp9/9anJn8DwAAAJWRcv/DcWY1yf/6/87/r/+v/9+3/f/R1v2p/6//38mA9v+d/z/S/9f/H+T16//r/9Nbv/X/U+7/9TizmuR/AAAAqIOU+x+JM5P/AQAAoDJS7n93nJn8DwAAAJWRcv974sxqkv/1//X/9f/1//u2/9+2P/X/+7X//29dL9X/1//vRv9f/3+Q16//r/9Pb/3W/0+5/9E4s5rkfwAAAKiDlPvfG2cm/wMAAEBlpNz/G3Fm8j8AAABURsr9vxlnNpj5f3itG+j/6//r/+v/r7r/vxBC0P/X/18j/f/l/f/iPexq9v/HV3NF/f9V0f/X/9f/1/+nu37r/6fc/744s8HM/wAAAEAHKff/VpyZ/A8AAACVkXL/b8eZyf8AAABQGSn3vz/OrCb5X/9f/1//X//f+f/1/zeT/n+9zv8/HvT/g/6//r/+v/4/Wb/1/1Pu/0CcWU3yPwAAANRByv2/E2cm/wMAAEBlpNx/OM5M/gcAAIDKSLn/sTizmuR//f+r1P/fWl5f/1//vzr9/0X9f/3/jvT/69X/d/7/kv6//r/+v/4/pX7r/6fcfyTOrCb5HwAAAOog5f4PxpnJ/wAAAFAZKfcfjTOT/wEAAKAyUu4/FmdWk/yv/+/8//r/+v/O/6//v5n0//X/u9H/1/8f5PXr/+v/01u/9f9T7p+NM6tJ/gcAAIA6SLn/eJyZ/A8AAACVkXL/iTgz+R8AAAAqI+X+x+PMapL/9f/1/1fV/x8L+v/6//r/+v+XRf9f/78b/X/9/0Fev/6//j+9bVz//583pP+fcv/JOLOa5H8AAACog5T7PxRnJv8DAABAZaTc/+E4M/kfAAAAKiPl/lNxZjXJ//r/+v/O/1/B/v+o/n/Q/+8b+v/6/93o/+v/D/L69f/1/+ltKGxU/z9sSP8/5f7TcWY1yf8AAABQByn3n4kzk/8BAACgMlLuPxtnJv8DAABAZaTcfy7OrCb5X/9f/1//v4L9f+f/b9D/7w/6//r/3ej/6/8P8vr1//X/6W3jzv+/Mf3/lPt/N86sJvkfAAAA6iDl/v9j7z6a5LyrPY63riWPVK5bd3X3vAV27OAd+DWwYUuRc44GTE4m55yTiSbnnIPJORlMBkOVKWvOOfZIPd2t0fT08/zP57PgMGaseayhxvUr1beee8ct9j8AAAAMI3f/feIW+x8AAACGkbv/vnFLk/2v/9f/6//1//p//f826f/1/6vo/+fT/59Z8vfr//X/+n/WmVr/n7v/fnFLk/0PAAAAHeTuv3/cYv8DAADAMHL3PyBusf8BAABgGLn7Hxi3NNn/+n/9v/5/Mv3/fuen/9f/6/8vif5f/7/Ydf9/Lj4YvP9fRv+v/9f/s87U+v/c/Q+KW5rsfwAAAOggd/+D4xb7HwAAAIaRu/8hcYv9DwAAAMPI3f/QuKXJ/tf/6//H7f/35tb/e/9/fl9H7P9P3f5l9f/HS/+v/1/suv9v8v7/ZfT/+n/9P+tMrf/P3f+wuKXJ/gcAAIAOcvc/PG6x/wEAAGAYufsfEbfY/wAAADCM3P2PjFua7H/9v/5/3P5/du//1//n93WI/v9c/Tre/6//1/8fTv+v/5/z8+v/9f+sN7X+P3f/o+KWJvsfAAAAOsjd/+i4xf4HAACAYeTuf0zcYv8DAADAMHL3PzZuabL/9f/6f/2//l//fwLv/9f/6//1/0vp//X/c35+/b/+n/Wm1v/n7n9c3NJk/wMAAEAHufsfH7fY/wAAADCM3P1PiFvsfwAAABhG7v4nxi1N9v+l9f+n9P+H0P8vf379v/5f/6//1//r/1fR/+v/5/z8+n/9P+ttvf+/+przd9P+P3f/NXFLk/0PAAAAHeTuf1LcYv8DAADAMHL3Pzlusf8BAABgGLn7nxK3NNn/S/r/KxYzfv//2c2+tP4/vv7B/v/WU/p//f80+/9b4qeM/l//f7F59/9n9f876//39P8r+/nNfif0//p//T/rbL3/X9P7X/hx7v5r45Ym+x8AAAA6yN3/1LjF/gcAAIBh5O5/Wtxi/wMAAMAwcvc/PW5psv8v7f3/0+//vf9/t+//z193C/3/mWXPr//v0v/v8/5//f8y8+7/vf9/i/3/PfI30/v/D7frfn7uz7+q/7/rBs+v/6eDqfX/ufufEbc02f8AAADQQe7+Z8Yt9j8AAAAMI3f/s+IW+x8AAACGkbv/2XFLg/1/Wv9fz5H0/97/v1H/f27/79f/H3we/b/+fxn9v/5/ld29/1//v5hAPz/35/f+//X9/1XrfhGGN7X+P3f/c+KWBvsfAAAAusjd/9y4xf4HAACAYeTuf17cYv8DAADAMHL3Pz9uabL/9f/6f/2/9/9fVv9/xTb6/9NLfz/1//r/ZfT/+v+F/v/Idt3Pz/359f/e/896U+v/c/dfF7fU8Dt9hH9KAAAAYEpy978gbmny5/8AAADQQe7+F8Yt9j8AAAAMI3f/i+KWJvtf/6//1//r/73/X/+/Tfr/4fr/U/r/2+n/9f/6f/0/q02t/8/d/+K4pcn+BwAAgA5y978kbrH/AQAAYBi5+18at9j/AAAAMIzc/S+LW5rsf/2//l//r//X/+v/t0n/P1z/7/3/d6D/1//r//X/rDa1/j93/8vjlib7HwAAADrI3f+KuMX+BwAAgGHk7n9l3GL/AwAAwDBy978qbpnd/r+woN2M/l//r//X/+v/9f/bNP3+/8xGn6X/36f/P2hb/f/ZQ76e/n9az388/X9+9/X/jGkC/f/d7vhx7v5Xxy2z2/8AAADAYXL3vyZusf8BAABgGLn7Xxu32P8AAAAwjNz9r4tbmuz/w/r/m6/a/9/X9P/5G6b/j6v/1/8v9P9F/6//X8yi/9+M/n+f/v8g7//X/3v/v/6f1SbQ/x/4OHf/6+OWJvsfAAAAOsjd/4a4xf4HAACAYeTuf2PcYv8DAADAMHL3vyluabL/vf9f/6//1//r//X/26T/1/+vMqP+f2/ZX9T/6//1//p/Vpta/5+7/81xS5P9DwAAAB3k7n9L3GL/AwAAwDBy9781brH/AQAAYBi5+98WtzTZ//p//f/O+///GbL/P/+I+n/9v/5f/6//X21G/f9S+n/9v/5f/89qU+v/c/e/PW5psv8BAACgg9z974hb7H8AAAAYRu7+d8Yt9j8AAAAMI3f/u+KWJvtf/6//33n/7/3/Rf8f31f9v/7/Euj/9f8L/f+R7bqfn/vz6//1/6w3tf4/d/+745Ym+x8AAAA6yN3/nrjF/gcAAIBh5O6/Pm6x/wEAAGAYufvfG7c02f/6f/2//l//r//X/2+T/l//v8rJ9v/X3qz/P2jX/fzcn1//r/9nvan1/7n73xe3NNn/AAAA0EHu/vfHLfY/AAAADCN3/wfiFvsfAAAAhpG7/4NxS5P9r/+fe/9/95viCabW/+en6P/1/yv7/73FxfT/+v9Lof/X/y+28v7/C39SLKf/1//r//X/rHZi/f89r77XXW77L2v6/9z9H4pbmux/AAAA6CB3/w1xi/0PAAAAw8jd/+G4xf4HAACAYeTu/0jc0mT/9+j/z1z0aeP0/97/r/+fdP+fP1S9/1//r//X/y813f5/M/p//b/+X//PalN7/3/u/o/GLU32PwAAAHSQu/9jcYv9DwAAAMPI3f/xuMX+BwAAgGHk7v9E3NJk//fo/y+m/9937P3/rf+n/9f/l03e/6//1/9fLv2//n+h/z+yXffzc3/+ofv/Uwv9P8diav1/7v5Pxi1N9j8AAAB0kLv/U3GL/Q8AAADDyN3/6bjF/gcAAIBh5O7/TNxw5//d3SOdKP2//t/7//X/+n/9/zbp/4/Q/586vfFz6f/36f+PZtf9/Nyff+j+3/v/OSZT6/9z9382bvHn/wAAADCM3P2fi1vsfwAAABhG7v7Pxy32PwAAAAxgv3fP3f+FuKXJ/l/T/+/l5x25/z93+NfW/+v/F/p//b/+X/9/mYbs/y+B/n+f/v9odt3Pz/35Z9f/X3/wQ/0/J2FJ/3/+J/Gu+v/c/V+MW5rsfwAAAOggd/+X4hb7HwAAAIaRu//LcYv9DwAAAMPI3f+VuKXJ/l/a/+95/7/+X/+v/1/o//X/x0L/r/9fRf+v/5/z88+u/7+A/p+TMLX3/+fu/2rc0mT/AwAAQAe5+78Wt9j/AAAAMIzc/V+PW+x/AAAAGEbu/m/ELU32/5r3/+v/N/tH0f/r/5f+/0H/r//fsP8/s9D/H5n+X/+/0P8f2a77+bk//+X0/+f0/zQxtf4/d/8345Ym+x8AAAA6yN3/rbjF/gcAAIBh5O7/dtxi/wMAAMAwcvd/J25psv9H7v9XfZr+f5/+X/+/0P9Pof/3/v/LoP/X/y/0/0e2635+7s/v/f/6f9abWv+fu/+7cUuT/Q8AAAAd5O7/Xtxi/wMAAMAwcvffuFjcYP8DAADAmG48/59nF9+PW5rs/5H7/1X0//v0//r/hf5f/79l+n/9/yr6f/3/nJ9f/6//Z72p9f+5+38QtzTZ/wAAANBB7v4fxi32PwAAAAwjd/+P4hb7HwAAAIaRu//HcUuT/a//1//r//X/+n/9/zbp//X/q+j/9f9zfn79v/6f9abW/+fu/0nc0mT/AwAAQAe5+38at9j/AAAAMIzc/T+LW+x/AAAAGEbu/p/HLU32v/5f/6//1//r//X/26T/1/+vov/X/8/5+fX/+n/Wm1r/n7v/F3FLk/0PAAAAHeTu/2XcYv8DAADAMHL3/ypusf8BAABgGLn7fx23NNn/+v/bnuNc/XX9v/5f/6//T/r/49G2/7/tX6v6/7X0//r/OT+//l//z3pT6/9z9/8mbmmy/wEAAKCD3P2/jVvsfwAAABhG7v7fxS32PwAAAAwjd//v45Ym+1//7/3/+n/9/zz6/yv1//r/pSbb/3v//0b0//r/OT+//l//z3pT6/9z998UtzTZ/wAAANBB7v4/xC32PwAAAAwjd/8f4xb7HwAAAIaRu//muKXJ/tf/6/+H7P/39P/j9f/e/z/L/v9O+n/9/2r6f/3/nJ9f/6//Z72p9f+5+/8UtzTZ/wAAANBB7v4/xy32PwAAAAwjd/9f4hb7HwAAAIaRu/+vcUuT/a//1/8P2f97/7/+X/8/Gfp//f8q+n/9/5yfX/+v/2e9qfX/ufv/Frc02f8AAADQQe7+v8ct9j8AAAAMI3f/P+IW+x8AAACGkbv/n3FLk/2v/9f/6//1//p//f826f/n2/9fuThC/3/dQv+v/9f/6//1/5Sp9f+5+/8VtzTZ/wAAANBB7v5b4pal+///T+ipAAAAgOOUu//fcYs//wcAAIBh5O7/T9zSZP/r//X/+n/9v/5f/79N+v/59v/e/7+e/l//r//X/7Pa1Pr/3P3/DQAA///E7/7M")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc6081, 0xcc)
mmap(&(0x7f0000afc000/0x1000)=nil, 0x1000, 0x2000001, 0x4010933, r0, 0xb4b40000)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x82200, 0x0)
openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x2002, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, 0x0, 0x0, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = io_uring_setup(0x423a, &(0x7f0000000000)={0x0, 0x6087, 0x40})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r6, 0x6, 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x20fffe85)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000880)='/proc/bus/input/handlers\x00', 0x0, 0x0)

1.335793988s ago: executing program 1 (id=803):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@hyper})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, 0x0)

958.980954ms ago: executing program 0 (id=804):
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000003200), 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = syz_open_procfs(0x0, &(0x7f0000000580)='net/fib_trie\x00')
pread64(r2, &(0x7f0000019180)=""/102346, 0x18fca, 0x3)
ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000180)={0x6, 0x5})

604.208049ms ago: executing program 1 (id=805):
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x20000000002)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
execveat$binfmt(0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0, 0x400)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
pipe(&(0x7f0000000180))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x0, 0x0, &(0x7f00000003c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x72, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94)
keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000380), 0x149842, 0x0)
write$dsp(r3, &(0x7f0000000900)='B', 0x1)
close(r3)

0s ago: executing program 4 (id=806):
getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x9, 0x3, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94)
mlockall(0x7)
brk(0x5d555ede6000)
mmap$binder(&(0x7f000023d000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10)
syz_open_dev$rtc(&(0x7f0000000000), 0x200, 0xb5f5f4b51c5b73d5)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.117' (ED25519) to the list of known hosts.
[   74.137525][ T5803] cgroup: Unknown subsys name 'net'
[   74.236868][ T5803] cgroup: Unknown subsys name 'cpuset'
[   74.246702][ T5803] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   75.758079][ T5803] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   78.147456][ T5824] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   78.186008][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   78.194223][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   78.195791][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   78.201691][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   78.220050][ T5835] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   78.227082][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   78.229004][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   78.243577][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   78.243982][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   78.251993][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   78.257924][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   78.265951][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   78.273462][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   78.280973][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   78.296410][ T5838] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   78.296560][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   78.305765][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   78.314642][ T5835] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   78.322238][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   78.334457][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   78.334808][ T5839] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   78.350690][ T5824] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   78.357907][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   78.357998][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   78.372819][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   78.373679][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   78.396141][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   78.404946][ T5840] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   78.414503][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   79.154492][ T5819] chnl_net:caif_netlink_parms(): no params data found
[   79.311212][ T5820] chnl_net:caif_netlink_parms(): no params data found
[   79.476742][ T5818] chnl_net:caif_netlink_parms(): no params data found
[   79.489975][ T5821] chnl_net:caif_netlink_parms(): no params data found
[   79.589957][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.597908][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.605376][ T5819] bridge_slave_0: entered allmulticast mode
[   79.613156][ T5819] bridge_slave_0: entered promiscuous mode
[   79.653394][ T5817] chnl_net:caif_netlink_parms(): no params data found
[   79.677247][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.685293][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.694804][ T5819] bridge_slave_1: entered allmulticast mode
[   79.703098][ T5819] bridge_slave_1: entered promiscuous mode
[   79.792822][ T5816] chnl_net:caif_netlink_parms(): no params data found
[   79.837672][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.844949][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.852458][ T5820] bridge_slave_0: entered allmulticast mode
[   79.860341][ T5820] bridge_slave_0: entered promiscuous mode
[   79.906796][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   79.917491][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.924926][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.932935][ T5820] bridge_slave_1: entered allmulticast mode
[   79.945845][ T5820] bridge_slave_1: entered promiscuous mode
[   80.014843][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   80.063328][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.070654][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.078338][ T5821] bridge_slave_0: entered allmulticast mode
[   80.086183][ T5821] bridge_slave_0: entered promiscuous mode
[   80.103254][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.110404][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.118060][ T5818] bridge_slave_0: entered allmulticast mode
[   80.125909][ T5818] bridge_slave_0: entered promiscuous mode
[   80.166633][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.174320][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.181555][ T5821] bridge_slave_1: entered allmulticast mode
[   80.189556][ T5821] bridge_slave_1: entered promiscuous mode
[   80.209664][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.216944][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.224238][ T5818] bridge_slave_1: entered allmulticast mode
[   80.231798][ T5818] bridge_slave_1: entered promiscuous mode
[   80.241335][ T5819] team0: Port device team_slave_0 added
[   80.250511][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   80.315665][ T5819] team0: Port device team_slave_1 added
[   80.337664][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   80.385025][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.392500][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.399823][ T5817] bridge_slave_0: entered allmulticast mode
[   80.407856][ T5817] bridge_slave_0: entered promiscuous mode
[   80.414231][ T5840] Bluetooth: hci3: command tx timeout
[   80.422900][ T5840] Bluetooth: hci4: command tx timeout
[   80.425876][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.435691][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.443561][ T5817] bridge_slave_1: entered allmulticast mode
[   80.451504][ T5817] bridge_slave_1: entered promiscuous mode
[   80.476124][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   80.492681][ T5829] Bluetooth: hci2: command tx timeout
[   80.498254][ T5829] Bluetooth: hci0: command tx timeout
[   80.504431][ T5137] Bluetooth: hci1: command tx timeout
[   80.510462][ T5840] Bluetooth: hci5: command tx timeout
[   80.520480][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   80.546138][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   80.583309][ T5820] team0: Port device team_slave_0 added
[   80.589985][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0
[   80.597022][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   80.623076][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   80.635093][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.642482][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.649983][ T5816] bridge_slave_0: entered allmulticast mode
[   80.657833][ T5816] bridge_slave_0: entered promiscuous mode
[   80.668386][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   80.717175][ T5820] team0: Port device team_slave_1 added
[   80.736737][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1
[   80.744067][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   80.770732][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   80.789845][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.797186][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.805031][ T5816] bridge_slave_1: entered allmulticast mode
[   80.812877][ T5816] bridge_slave_1: entered promiscuous mode
[   80.835189][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   80.848183][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   80.859382][ T5818] team0: Port device team_slave_0 added
[   80.879051][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0
[   80.886848][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   80.916156][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   80.944962][ T5821] team0: Port device team_slave_0 added
[   80.980494][ T5818] team0: Port device team_slave_1 added
[   81.018618][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1
[   81.026246][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   81.052904][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   81.078911][ T5821] team0: Port device team_slave_1 added
[   81.095531][ T5816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   81.224687][ T5816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   81.254230][ T5817] team0: Port device team_slave_0 added
[   81.260680][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0
[   81.268837][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   81.295146][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   81.316871][ T5819] hsr_slave_0: entered promiscuous mode
[   81.324104][ T5819] hsr_slave_1: entered promiscuous mode
[   81.380469][ T5817] team0: Port device team_slave_1 added
[   81.399031][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1
[   81.406290][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   81.432261][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   81.463775][ T5820] hsr_slave_0: entered promiscuous mode
[   81.470380][ T5820] hsr_slave_1: entered promiscuous mode
[   81.477060][ T5820] debugfs: 'hsr0' already exists in 'hsr'
[   81.483011][ T5820] Cannot create hsr debugfs directory
[   81.490487][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0
[   81.497820][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   81.524386][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   81.550060][ T5816] team0: Port device team_slave_0 added
[   81.629540][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1
[   81.636603][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   81.665474][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   81.690097][ T5816] team0: Port device team_slave_1 added
[   81.746899][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0
[   81.753924][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   81.780612][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   81.804448][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_0
[   81.811670][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   81.838379][ T5816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   81.884926][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1
[   81.891882][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   81.918561][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   81.942747][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_1
[   81.949724][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   81.976029][ T5816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   82.037184][ T5818] hsr_slave_0: entered promiscuous mode
[   82.043720][ T5818] hsr_slave_1: entered promiscuous mode
[   82.049955][ T5818] debugfs: 'hsr0' already exists in 'hsr'
[   82.055750][ T5818] Cannot create hsr debugfs directory
[   82.110652][ T5821] hsr_slave_0: entered promiscuous mode
[   82.118709][ T5821] hsr_slave_1: entered promiscuous mode
[   82.125207][ T5821] debugfs: 'hsr0' already exists in 'hsr'
[   82.131018][ T5821] Cannot create hsr debugfs directory
[   82.363629][ T5817] hsr_slave_0: entered promiscuous mode
[   82.370488][ T5817] hsr_slave_1: entered promiscuous mode
[   82.377581][ T5817] debugfs: 'hsr0' already exists in 'hsr'
[   82.383369][ T5817] Cannot create hsr debugfs directory
[   82.403840][ T5816] hsr_slave_0: entered promiscuous mode
[   82.410644][ T5816] hsr_slave_1: entered promiscuous mode
[   82.417978][ T5816] debugfs: 'hsr0' already exists in 'hsr'
[   82.423887][ T5816] Cannot create hsr debugfs directory
[   82.492633][ T5840] Bluetooth: hci4: command tx timeout
[   82.498729][ T5829] Bluetooth: hci3: command tx timeout
[   82.572427][ T5829] Bluetooth: hci0: command tx timeout
[   82.577861][ T5829] Bluetooth: hci1: command tx timeout
[   82.583927][ T5834] Bluetooth: hci2: command tx timeout
[   82.589458][ T5840] Bluetooth: hci5: command tx timeout
[   82.730929][ T5819] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   82.745096][ T5819] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   82.809736][ T5819] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   82.859710][ T5819] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   83.050163][ T5820] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   83.065773][ T5820] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   83.098725][ T5820] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   83.109367][ T5820] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   83.208789][ T5818] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   83.221680][ T5818] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   83.234998][ T5818] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   83.248941][ T5818] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   83.391380][ T5816] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   83.419533][ T5816] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   83.433440][ T5816] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   83.464898][ T5816] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   83.495529][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0
[   83.516282][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0
[   83.577713][ T5821] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   83.590061][ T5821] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   83.615440][ T5821] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   83.636797][ T5819] 8021q: adding VLAN 0 to HW filter on device team0
[   83.654975][ T5821] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   83.688317][ T5820] 8021q: adding VLAN 0 to HW filter on device team0
[   83.729441][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.736788][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   83.747912][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.755438][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   83.821012][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.828306][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.840968][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.848260][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.881229][ T5817] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   83.894178][ T5817] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   83.905490][ T5817] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   83.918330][ T5817] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   83.966911][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0
[   84.090164][ T5818] 8021q: adding VLAN 0 to HW filter on device team0
[   84.133115][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0
[   84.164816][   T65] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.171963][   T65] bridge0: port 1(bridge_slave_0) entered forwarding state
[   84.228450][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0
[   84.265972][ T5816] 8021q: adding VLAN 0 to HW filter on device team0
[   84.288192][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.296004][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   84.355789][ T5821] 8021q: adding VLAN 0 to HW filter on device team0
[   84.408008][   T50] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.415211][   T50] bridge0: port 1(bridge_slave_0) entered forwarding state
[   84.457576][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.464955][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   84.476930][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.484202][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   84.545929][   T65] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.553358][   T65] bridge0: port 2(bridge_slave_1) entered forwarding state
[   84.571763][ T5818] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   84.582853][ T5840] Bluetooth: hci4: command tx timeout
[   84.588270][ T5840] Bluetooth: hci3: command tx timeout
[   84.605430][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0
[   84.654022][ T5840] Bluetooth: hci5: command tx timeout
[   84.654037][ T5829] Bluetooth: hci1: command tx timeout
[   84.654085][ T5829] Bluetooth: hci2: command tx timeout
[   84.659455][ T5840] Bluetooth: hci0: command tx timeout
[   84.694204][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0
[   84.820685][ T5821] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   84.835015][ T5821] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   84.878349][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0
[   84.899349][ T5817] 8021q: adding VLAN 0 to HW filter on device team0
[   84.946377][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.953611][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   85.031893][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.039355][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   85.081932][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0
[   85.406222][ T5820] veth0_vlan: entered promiscuous mode
[   85.470425][ T5820] veth1_vlan: entered promiscuous mode
[   85.666865][ T5819] veth0_vlan: entered promiscuous mode
[   85.700300][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0
[   85.719612][ T5820] veth0_macvtap: entered promiscuous mode
[   85.735674][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0
[   85.746900][ T5819] veth1_vlan: entered promiscuous mode
[   85.775955][ T5820] veth1_macvtap: entered promiscuous mode
[   85.868472][ T5819] veth0_macvtap: entered promiscuous mode
[   85.893758][ T5819] veth1_macvtap: entered promiscuous mode
[   85.911825][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0
[   85.949875][ T5821] veth0_vlan: entered promiscuous mode
[   85.960758][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1
[   85.983882][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0
[   85.999844][ T5818] veth0_vlan: entered promiscuous mode
[   86.016729][ T5818] veth1_vlan: entered promiscuous mode
[   86.024054][   T37] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   86.033795][   T37] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   86.048931][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0
[   86.061844][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1
[   86.071647][   T37] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   86.081661][   T37] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   86.108426][   T29] cfg80211: failed to load regulatory.db
[   86.114733][ T5821] veth1_vlan: entered promiscuous mode
[   86.171422][   T37] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   86.181138][   T37] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   86.210098][ T5816] veth0_vlan: entered promiscuous mode
[   86.217622][   T37] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   86.263744][   T37] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   86.325647][ T5816] veth1_vlan: entered promiscuous mode
[   86.338185][ T5818] veth0_macvtap: entered promiscuous mode
[   86.349432][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.373020][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.374782][ T5817] veth0_vlan: entered promiscuous mode
[   86.426089][ T5818] veth1_macvtap: entered promiscuous mode
[   86.470977][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.479917][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.496601][ T5817] veth1_vlan: entered promiscuous mode
[   86.536160][ T5816] veth0_macvtap: entered promiscuous mode
[   86.562577][ T5821] veth0_macvtap: entered promiscuous mode
[   86.584579][ T5816] veth1_macvtap: entered promiscuous mode
[   86.598696][ T5820] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   86.623238][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0
[   86.633573][   T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.641516][   T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.652737][ T5840] Bluetooth: hci4: command tx timeout
[   86.663456][ T5840] Bluetooth: hci3: command tx timeout
[   86.675859][ T5817] veth0_macvtap: entered promiscuous mode
[   86.683926][ T5821] veth1_macvtap: entered promiscuous mode
[   86.697424][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1
[   86.715193][ T5817] veth1_macvtap: entered promiscuous mode
[   86.733588][ T5137] Bluetooth: hci5: command tx timeout
[   86.733611][ T5829] Bluetooth: hci1: command tx timeout
[   86.733641][ T5829] Bluetooth: hci0: command tx timeout
[   86.739077][ T5840] Bluetooth: hci2: command tx timeout
[   86.835670][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0
[   86.851269][   T37] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.120220][   T37] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.362481][   T37] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.371273][   T37] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   87.397580][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0
[   87.415452][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1
[   87.444758][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0
[   87.455547][   T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.464913][   T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.478742][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1
[   87.500185][ T1304] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.513641][ T1304] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.537477][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1
[   87.562885][ T1304] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.571714][ T1304] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   87.650654][   T37] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.674395][  T882] usb 4-1: new full-speed USB device number 2 using dummy_hcd
[   87.720872][   T37] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.737976][   T37] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.767240][   T37] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   87.779089][   T37] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.838682][   T37] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.857566][  T882] usb 4-1: config 1 has an invalid descriptor of length 47, skipping remainder of the config
[   87.869244][   T37] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.880171][  T882] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30
[   87.895468][   T37] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   87.912849][ T5973] faux_driver vgem: [drm] Unknown color mode 2054; guessing buffer size.
[   87.943011][  T882] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[   87.960215][  T882] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   87.983360][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.998147][  T882] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   87.998218][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.034447][  T882] usb 4-1: SerialNumber: syz
[   88.128456][  T882] cdc_acm 4-1:1.0: skipping garbage
[   88.147152][  T882] cdc_acm 4-1:1.0: Control and data interfaces are not separated!
[   88.157795][  T882] cdc_acm 4-1:1.0: This needs exactly 3 endpoints
[   88.170829][  T882] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -22
[   88.358536][   T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.368953][   T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.386455][ T1304] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.453971][ T1304] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.466108][ T5896] usb 4-1: USB disconnect, device number 2
[   88.715634][   T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.744503][   T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.786101][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.812135][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.929179][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.957678][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.020035][   T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.125852][   T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.139602][ T5982] loop3: detected capacity change from 0 to 128
[   90.192974][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.200868][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.357611][ T5982] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   90.548430][ T5982] ext4 filesystem being mounted at /1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   91.193378][ T5990] loop5: detected capacity change from 0 to 32768
[   91.247607][ T5982] process 'syz.3.7' launched './file0' with NULL argv: empty string added
[   92.177424][ T5993] read_mapping_page failed!
[   92.326145][ T5820] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   92.469066][ T5997] syz.0.1 uses obsolete (PF_INET,SOCK_PACKET)
[   92.828600][ T6001] loop2: detected capacity change from 0 to 32768
[   95.823802][   T10] usb 2-1: new full-speed USB device number 2 using dummy_hcd
[   96.115701][   T24] usb 6-1: new full-speed USB device number 2 using dummy_hcd
[   96.324060][   T24] usb 6-1: config 1 has an invalid descriptor of length 47, skipping remainder of the config
[   96.344647][ T6025] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   96.424192][   T24] usb 6-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30
[   96.521378][   T24] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[   96.590446][   T24] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   96.603692][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   96.611957][   T24] usb 6-1: SerialNumber: syz
[   96.863357][   T24] cdc_acm 6-1:1.0: skipping garbage
[   96.870663][   T24] cdc_acm 6-1:1.0: Control and data interfaces are not separated!
[   96.882471][   T24] cdc_acm 6-1:1.0: This needs exactly 3 endpoints
[   97.519195][ T6038] syz.0.18 (6038): drop_caches: 2
[   97.684845][   T24] cdc_acm 6-1:1.0: probe with driver cdc_acm failed with error -22
[   97.809133][   T24] usb 6-1: USB disconnect, device number 2
[   99.096834][ T6045] loop1: detected capacity change from 0 to 131072
[   99.602304][ T6045] F2FS-fs (loop1): invalid crc value
[   99.727535][ T6045] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   99.763178][ T6045] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  100.481315][ T6059] fuse: Unknown parameter 'user_id00000000000000000000'
[  103.610116][ T6081] syz.5.31 (6081): drop_caches: 2
[  104.266393][ T6086] netlink: 'syz.0.33': attribute type 1 has an invalid length.
[  104.552663][ T6088] netlink: 4 bytes leftover after parsing attributes in process `syz.0.33'.
[  105.682449][ T6096] loop3: detected capacity change from 0 to 32768
[  107.332136][   T24] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  107.524551][   T24] usb 6-1: config 0 has no interfaces?
[  107.579927][   T24] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  107.633677][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  107.661686][   T24] usb 6-1: SerialNumber: syz
[  107.740469][   T24] usb 6-1: config 0 descriptor??
[  108.997825][ T5830] usb 6-1: USB disconnect, device number 3
[  109.372729][ T6132] netlink: 'syz.1.47': attribute type 1 has an invalid length.
[  109.473457][ T6133] netlink: 20 bytes leftover after parsing attributes in process `syz.5.48'.
[  109.610063][ T6134] loop0: detected capacity change from 0 to 2048
[  109.630390][ T6133] vlan2: entered promiscuous mode
[  109.653224][ T6134] =======================================================
[  109.653224][ T6134] WARNING: The mand mount option has been deprecated and
[  109.653224][ T6134]          and is ignored by this kernel. Remove the mand
[  109.653224][ T6134]          option from the mount to silence this warning.
[  109.653224][ T6134] =======================================================
[  109.702089][ T6133] team0: entered promiscuous mode
[  109.707165][ T6133] team_slave_0: entered promiscuous mode
[  110.376108][ T6135] syz.2.45 (6135): drop_caches: 2
[  110.435605][ T6133] team_slave_1: entered promiscuous mode
[  110.767300][ T6130] delete_channel: no stack
[  110.782679][ T6134] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  111.502863][ T6134] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  112.180050][   T31] audit: type=1326 audit(1774153120.045:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6128 comm="syz.0.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5e359c799 code=0x7ffc0000
[  112.437833][  T145] Bluetooth: hci6: Frame reassembly failed (-84)
[  112.459638][   T31] audit: type=1326 audit(1774153120.055:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6128 comm="syz.0.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5e359c799 code=0x7ffc0000
[  112.727409][ T6153] loop4: detected capacity change from 0 to 32768
[  112.745064][   T31] audit: type=1326 audit(1774153120.055:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6128 comm="syz.0.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7fe5e359c799 code=0x7ffc0000
[  112.784797][   T31] audit: type=1326 audit(1774153120.055:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6128 comm="syz.0.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5e359c799 code=0x7ffc0000
[  113.028775][   T31] audit: type=1326 audit(1774153120.055:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6128 comm="syz.0.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5e359c799 code=0x7ffc0000
[  113.063412][   T31] audit: type=1326 audit(1774153120.055:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6128 comm="syz.0.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fe5e359c799 code=0x7ffc0000
[  113.178213][   T31] audit: type=1326 audit(1774153120.055:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6128 comm="syz.0.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5e359c799 code=0x7ffc0000
[  113.398289][   T31] audit: type=1326 audit(1774153120.065:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6128 comm="syz.0.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5e359c799 code=0x7ffc0000
[  113.420681][   T31] audit: type=1326 audit(1774153120.065:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6128 comm="syz.0.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe5e359c799 code=0x7ffc0000
[  113.444711][   T31] audit: type=1326 audit(1774153120.085:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6128 comm="syz.0.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5e359c799 code=0x7ffc0000
[  113.494799][ T6168] fuse: Unknown parameter 'user_id00000000000000000000'
[  114.261459][ T5840] Bluetooth: hci6: Opcode 0x1003 failed: -110
[  115.063642][ T6180] netlink: 'syz.1.61': attribute type 1 has an invalid length.
[  115.744639][   T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  115.960080][   T10] usb 5-1: config 0 has no interfaces?
[  115.985466][   T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  116.014031][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  116.064125][   T10] usb 5-1: SerialNumber: syz
[  116.095052][   T10] usb 5-1: config 0 descriptor??
[  116.573522][   T10] usb 5-1: USB disconnect, device number 2
[  117.934805][ T6209] syz.4.67 (6209): drop_caches: 2
[  118.416932][ T6212] loop5: detected capacity change from 0 to 32768
[  118.700759][ T6215] fuse: Bad value for 'fd'
[  119.334061][ T6217] read_mapping_page failed!
[  119.461447][ T6189] loop0: detected capacity change from 0 to 32768
[  119.797018][ T6220] loop3: detected capacity change from 0 to 2048
[  119.952856][ T6220] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  120.151128][ T6220] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  121.143092][ T6230] netlink: 'syz.4.75': attribute type 1 has an invalid length.
[  121.974487][   T31] kauditd_printk_skb: 14 callbacks suppressed
[  121.974507][   T31] audit: type=1326 audit(1774153129.535:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6219 comm="syz.3.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bc8d9c799 code=0x7ffc0000
[  122.157413][   T31] audit: type=1326 audit(1774153129.535:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6219 comm="syz.3.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bc8d9c799 code=0x7ffc0000
[  122.302206][   T31] audit: type=1326 audit(1774153129.545:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6219 comm="syz.3.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f2bc8d9c799 code=0x7ffc0000
[  123.180329][   T31] audit: type=1326 audit(1774153129.545:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6219 comm="syz.3.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bc8d9c799 code=0x7ffc0000
[  123.401941][   T31] audit: type=1326 audit(1774153129.545:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6219 comm="syz.3.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bc8d9c799 code=0x7ffc0000
[  123.696997][ T5829] Bluetooth: hci6: command 0x1003 tx timeout
[  123.697190][ T5840] Bluetooth: hci6: Opcode 0x1003 failed: -110
[  123.813945][   T24] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  123.832257][   T31] audit: type=1326 audit(1774153129.545:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6219 comm="syz.3.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f2bc8d9c799 code=0x7ffc0000
[  124.042174][   T31] audit: type=1326 audit(1774153129.545:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6219 comm="syz.3.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bc8d9c799 code=0x7ffc0000
[  124.089656][   T24] usb 6-1: config 0 has no interfaces?
[  124.113047][   T24] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  124.132180][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  124.153159][   T31] audit: type=1326 audit(1774153129.545:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6219 comm="syz.3.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bc8d9c799 code=0x7ffc0000
[  124.202505][ T6255] netlink: 'syz.3.80': attribute type 1 has an invalid length.
[  124.210195][   T24] usb 6-1: SerialNumber: syz
[  124.232810][ T6255] netlink: 28 bytes leftover after parsing attributes in process `syz.3.80'.
[  124.242579][   T24] usb 6-1: config 0 descriptor??
[  124.293939][ T6254] netlink: 32 bytes leftover after parsing attributes in process `syz.1.81'.
[  124.367877][   T31] audit: type=1326 audit(1774153129.545:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6219 comm="syz.3.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2bc8d9c799 code=0x7ffc0000
[  124.497418][   T10] usb 6-1: USB disconnect, device number 4
[  124.532647][   T31] audit: type=1326 audit(1774153129.565:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6219 comm="syz.3.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bc8d9c799 code=0x7ffc0000
[  125.592105][ T5916] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[  125.653607][ T6272] fuse: Bad value for 'fd'
[  125.787978][ T5916] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  125.811205][ T5916] usb 3-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30
[  125.828573][ T5916] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  125.953716][ T5916] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  125.965714][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  126.014367][ T5916] usb 3-1: SerialNumber: syz
[  126.042848][ T5916] cdc_acm 3-1:1.0: Control and data interfaces are not separated!
[  126.271320][ T6276] loop5: detected capacity change from 0 to 32768
[  126.367214][ T5916] cdc_acm 3-1:1.0: This needs exactly 3 endpoints
[  126.376398][ T5916] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -22
[  126.620118][ T5916] usb 3-1: USB disconnect, device number 2
[  126.905570][ T6280] read_mapping_page failed!
[  128.013536][ T6289] netlink: 'syz.5.90': attribute type 1 has an invalid length.
[  128.039197][ T6291] loop7: detected capacity change from 0 to 7
[  129.050353][ T6295] loop2: detected capacity change from 0 to 2048
[  129.120049][ T5975] Dev loop7: unable to read RDB block 7
[  129.133829][ T5975]  loop7: unable to read partition table
[  129.140332][ T6295] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  129.140663][ T5975] loop7: partition table beyond EOD, truncated
[  129.172586][ T6307] netlink: 20 bytes leftover after parsing attributes in process `syz.5.96'.
[  129.256875][ T6295] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  129.405943][ T6291] Dev loop7: unable to read RDB block 7
[  129.427744][ T6291]  loop7: unable to read partition table
[  129.435890][ T6291] loop7: partition table beyond EOD, truncated
[  129.442352][ T6291] loop_reread_partitions: partition scan of loop7 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[  130.300518][   T31] kauditd_printk_skb: 14 callbacks suppressed
[  130.300536][   T31] audit: type=1326 audit(1774153137.875:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6293 comm="syz.2.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4530f9c799 code=0x7ffc0000
[  130.451118][   T31] audit: type=1326 audit(1774153137.875:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6293 comm="syz.2.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4530f9c799 code=0x7ffc0000
[  130.572463][   T31] audit: type=1326 audit(1774153137.885:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6293 comm="syz.2.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f4530f9c799 code=0x7ffc0000
[  130.615615][ T6315] fuse: Bad value for 'fd'
[  130.675549][   T31] audit: type=1326 audit(1774153137.885:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6293 comm="syz.2.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4530f9c799 code=0x7ffc0000
[  130.779368][   T31] audit: type=1326 audit(1774153137.885:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6293 comm="syz.2.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4530f9c799 code=0x7ffc0000
[  130.857908][   T31] audit: type=1326 audit(1774153137.885:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6293 comm="syz.2.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f4530f9c799 code=0x7ffc0000
[  131.071608][   T31] audit: type=1326 audit(1774153137.885:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6293 comm="syz.2.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4530f9c799 code=0x7ffc0000
[  131.094531][   T31] audit: type=1326 audit(1774153137.885:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6293 comm="syz.2.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4530f9c799 code=0x7ffc0000
[  131.116756][   T31] audit: type=1326 audit(1774153137.885:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6293 comm="syz.2.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4530f9c799 code=0x7ffc0000
[  131.822164][   T31] audit: type=1326 audit(1774153137.905:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6293 comm="syz.2.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4530f9c799 code=0x7ffc0000
[  132.095283][ T5840] Bluetooth: hci6: Opcode 0x1003 failed: -110
[  132.869749][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  132.878541][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  132.991334][ T6329] syz.3.101 (6329): drop_caches: 2
[  133.460118][ T6332] loop5: detected capacity change from 0 to 32768
[  136.473476][ T6353] netlink: 'syz.2.108': attribute type 1 has an invalid length.
[  136.631257][ T6355] netlink: 20 bytes leftover after parsing attributes in process `syz.5.109'.
[  137.902136][ T5830] usb 6-1: new full-speed USB device number 5 using dummy_hcd
[  138.881439][ T5830] usb 6-1: config 1 has an invalid descriptor of length 47, skipping remainder of the config
[  138.954456][ T5830] usb 6-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30
[  139.007922][ T5830] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  139.204905][ T5830] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  139.400220][ T5830] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  139.409209][ T5830] usb 6-1: SerialNumber: syz
[  139.428738][ T5830] cdc_acm 6-1:1.0: skipping garbage
[  139.444268][ T5830] cdc_acm 6-1:1.0: Control and data interfaces are not separated!
[  139.958007][ T6382] syz.4.117 (6382): drop_caches: 2
[  140.213399][ T6379] loop3: detected capacity change from 0 to 2048
[  140.265687][ T5830] cdc_acm 6-1:1.0: This needs exactly 3 endpoints
[  140.288788][ T6379] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  140.309973][ T5830] cdc_acm 6-1:1.0: probe with driver cdc_acm failed with error -22
[  140.360738][ T6379] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  140.391904][ T5830] usb 6-1: USB disconnect, device number 5
[  140.993267][   T31] kauditd_printk_skb: 14 callbacks suppressed
[  140.993312][   T31] audit: type=1326 audit(1774153148.935:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6377 comm="syz.3.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bc8d9c799 code=0x7ffc0000
[  141.672747][   T31] audit: type=1326 audit(1774153148.935:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6377 comm="syz.3.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bc8d9c799 code=0x7ffc0000
[  141.804337][   T31] audit: type=1326 audit(1774153148.935:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6377 comm="syz.3.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f2bc8d9c799 code=0x7ffc0000
[  141.827396][   T31] audit: type=1326 audit(1774153148.935:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6377 comm="syz.3.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bc8d9c799 code=0x7ffc0000
[  142.519569][   T31] audit: type=1326 audit(1774153148.935:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6377 comm="syz.3.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bc8d9c799 code=0x7ffc0000
[  142.559419][ T6397] netlink: 'syz.1.122': attribute type 1 has an invalid length.
[  142.671217][   T31] audit: type=1326 audit(1774153148.945:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6377 comm="syz.3.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f2bc8d9c799 code=0x7ffc0000
[  142.777460][ T6401] netlink: 20 bytes leftover after parsing attributes in process `syz.5.123'.
[  143.010226][   T31] audit: type=1326 audit(1774153148.945:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6377 comm="syz.3.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bc8d9c799 code=0x7ffc0000
[  143.133289][ T5830] usb 3-1: new full-speed USB device number 3 using dummy_hcd
[  143.157518][ T5829] Bluetooth: hci6: Opcode 0x1003 failed: -110
[  143.162159][ T5840] Bluetooth: hci6: command 0x1003 tx timeout
[  143.412640][   T31] audit: type=1326 audit(1774153148.945:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6377 comm="syz.3.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bc8d9c799 code=0x7ffc0000
[  143.566120][   T31] audit: type=1326 audit(1774153148.945:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6377 comm="syz.3.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2bc8d9c799 code=0x7ffc0000
[  143.621966][ T5830] usb 3-1: config 1 has an invalid descriptor of length 47, skipping remainder of the config
[  143.642090][ T5830] usb 3-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30
[  143.679183][ T6409] loop7: detected capacity change from 0 to 7
[  143.685811][ T5830] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  143.704443][   T31] audit: type=1326 audit(1774153148.965:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6377 comm="syz.3.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bc8d9c799 code=0x7ffc0000
[  143.826236][ T5830] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  144.544660][ T5830] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  144.594725][ T6409] Dev loop7: unable to read RDB block 7
[  144.600441][ T6409]  loop7: unable to read partition table
[  144.646255][ T5830] usb 3-1: SerialNumber: syz
[  144.681208][ T5830] cdc_acm 3-1:1.0: skipping garbage
[  144.696808][ T5830] cdc_acm 3-1:1.0: Control and data interfaces are not separated!
[  144.716774][ T5830] cdc_acm 3-1:1.0: This needs exactly 3 endpoints
[  144.732685][ T5830] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -22
[  144.742381][ T6409] loop7: partition table beyond EOD, truncated
[  144.748584][ T6409] loop_reread_partitions: partition scan of loop7 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[  145.229248][ T6430] syz.5.130 (6430): drop_caches: 2
[  145.930532][   T10] usb 3-1: USB disconnect, device number 3
[  146.112132][ T5830] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  146.630422][ T5830] usb 2-1: device descriptor read/64, error -71
[  146.935004][ T5830] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  148.002120][ T5916] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  148.202103][ T5916] usb 6-1: Using ep0 maxpacket: 8
[  148.226586][ T5916] usb 6-1: config 0 has an invalid interface number: 55 but max is 0
[  148.309194][ T5916] usb 6-1: config 0 has no interface number 0
[  148.332115][ T5916] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  148.412612][ T5916] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  148.662768][ T5916] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  148.793886][ T5916] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  149.042694][ T5916] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  149.139917][ T5916] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  149.238824][ T5916] usb 6-1: config 0 descriptor??
[  149.271411][ T5916] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  149.573621][    T9] usb 6-1: USB disconnect, device number 6
[  149.579514][    C0] ldusb 6-1:0.55: usb_submit_urb failed (-19)
[  149.991509][ T6463] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  149.996738][ T6462] netlink: 20 bytes leftover after parsing attributes in process `syz.1.140'.
[  151.192203][    T9] ldusb 6-1:0.55: LD USB Device #0 now disconnected
[  151.424764][ T6481] loop7: detected capacity change from 0 to 7
[  151.650579][ T6481] Dev loop7: unable to read RDB block 7
[  151.650612][ T6481]  loop7: unable to read partition table
[  151.650801][ T6481] loop7: partition table beyond EOD, truncated
[  151.650832][ T6481] loop_reread_partitions: partition scan of loop7 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[  154.394811][ T6508] Zero length message leads to an empty skb
[  155.973657][ T6519] netlink: 12 bytes leftover after parsing attributes in process `syz.0.158'.
[  156.063860][ T6519] vlan2: entered promiscuous mode
[  156.122416][ T6519] team0: entered promiscuous mode
[  156.275920][ T6519] team_slave_0: entered promiscuous mode
[  156.281784][ T6519] team_slave_1: entered promiscuous mode
[  157.042244][ T6518] delete_channel: no stack
[  157.313298][ T6534] loop4: detected capacity change from 0 to 2048
[  157.583679][ T6534] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  158.522765][ T6534] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  159.874159][   T31] kauditd_printk_skb: 14 callbacks suppressed
[  159.874205][   T31] audit: type=1326 audit(1774153167.825:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6533 comm="syz.4.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ce0f9c799 code=0x7ffc0000
[  160.350510][   T31] audit: type=1326 audit(1774153167.825:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6533 comm="syz.4.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ce0f9c799 code=0x7ffc0000
[  160.422485][   T31] audit: type=1326 audit(1774153167.825:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6533 comm="syz.4.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f7ce0f9c799 code=0x7ffc0000
[  160.452170][   T31] audit: type=1326 audit(1774153167.825:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6533 comm="syz.4.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ce0f9c799 code=0x7ffc0000
[  160.577180][   T31] audit: type=1326 audit(1774153167.835:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6533 comm="syz.4.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ce0f9c799 code=0x7ffc0000
[  160.688779][   T31] audit: type=1326 audit(1774153167.835:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6533 comm="syz.4.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f7ce0f9c799 code=0x7ffc0000
[  160.894565][   T31] audit: type=1326 audit(1774153167.835:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6533 comm="syz.4.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ce0f9c799 code=0x7ffc0000
[  161.088868][   T31] audit: type=1326 audit(1774153167.835:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6533 comm="syz.4.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ce0f9c799 code=0x7ffc0000
[  161.234774][   T31] audit: type=1326 audit(1774153167.835:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6533 comm="syz.4.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7ce0f9c799 code=0x7ffc0000
[  161.309384][   T31] audit: type=1326 audit(1774153167.855:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6533 comm="syz.4.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ce0f9c799 code=0x7ffc0000
[  162.248162][ T5829] Bluetooth: hci6: Opcode 0x1003 failed: -110
[  163.932843][ T5916] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  164.340397][ T5916] usb 4-1: Using ep0 maxpacket: 8
[  164.483871][ T5916] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  164.494164][ T6595] IPVS: sync thread started: state = MASTER, mcast_ifn = syz_tun, syncid = 1, id = 0
[  164.524717][ T5916] usb 4-1: config 0 has no interfaces?
[  164.531866][ T5916] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  164.548437][ T5916] usb 4-1: config 0 has no interfaces?
[  164.586973][ T5916] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  164.626368][ T5916] usb 4-1: config 0 has no interfaces?
[  164.673232][ T5916] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  164.708139][ T5916] usb 4-1: config 0 has no interfaces?
[  164.718624][ T5916] usb 4-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a
[  164.747510][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  164.818932][ T5916] usb 4-1: config 0 descriptor??
[  167.889928][ T5917] usb 4-1: USB disconnect, device number 3
[  169.933614][ T5916] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  170.323726][ T5916] usb 5-1: Using ep0 maxpacket: 8
[  170.346256][ T5916] usb 5-1: config 0 has an invalid interface number: 55 but max is 0
[  170.381889][ T5916] usb 5-1: config 0 has no interface number 0
[  170.433014][ T5916] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  171.191125][ T5916] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  171.271387][ T5916] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  171.333817][ T5916] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  171.396428][ T5916] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  171.421036][ T5916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  171.656453][ T5916] usb 5-1: config 0 descriptor??
[  171.683536][ T5916] usb 5-1: can't set config #0, error -71
[  172.674428][ T5916] usb 5-1: USB disconnect, device number 3
[  177.582210][ T5830] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  178.202121][ T5830] usb 6-1: Using ep0 maxpacket: 8
[  178.222645][ T5830] usb 6-1: config 0 has an invalid interface number: 55 but max is 0
[  178.230967][ T5830] usb 6-1: config 0 has no interface number 0
[  178.295818][ T5830] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  178.349906][ T5830] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  179.081379][ T5830] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  179.099177][ T5830] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  179.196699][ T5830] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  179.232114][ T5830] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  179.259208][ T5830] usb 6-1: config 0 descriptor??
[  179.479547][ T5830] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  180.168062][    T9] usb 6-1: USB disconnect, device number 7
[  181.391752][    T9] ldusb 6-1:0.55: LD USB Device #0 now disconnected
[  183.303927][ T6763] netlink: 'syz.1.225': attribute type 21 has an invalid length.
[  183.682123][    T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!!
[  189.422263][ T5917] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  190.021135][ T5917] usb 6-1: Using ep0 maxpacket: 8
[  190.047721][ T5917] usb 6-1: config 0 has an invalid interface number: 55 but max is 0
[  190.060337][ T5917] usb 6-1: config 0 has no interface number 0
[  190.102876][ T5917] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  190.147191][ T5917] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  190.194708][ T5917] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  190.245006][ T5917] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  190.320675][ T5917] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  190.371267][ T5917] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  190.414432][ T5917] usb 6-1: config 0 descriptor??
[  190.447990][ T5917] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  190.462071][    T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  192.455747][   T10] usb 6-1: USB disconnect, device number 8
[  192.704028][    T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  192.755826][   T10] ldusb 6-1:0.55: LD USB Device #0 now disconnected
[  192.765657][    T9] usb 2-1: config 0 has no interface number 0
[  193.703010][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  193.710072][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  194.242612][    T9] usb 2-1: string descriptor 0 read error: -71
[  194.279750][    T9] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  194.304292][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  195.113016][    T9] usb 2-1: config 0 descriptor??
[  195.130178][    T9] usb 2-1: can't set config #0, error -71
[  195.168190][    T9] usb 2-1: USB disconnect, device number 5
[  196.619110][ T6869] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  196.720948][ T6870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  197.012203][    T9] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[  197.864843][    T9] usb 1-1: config 1 has an invalid descriptor of length 47, skipping remainder of the config
[  197.911280][    T9] usb 1-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30
[  198.096458][    T9] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  198.144898][    T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  198.182374][ T6885] netlink: 20 bytes leftover after parsing attributes in process `syz.1.260'.
[  198.455205][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  198.482333][    T9] usb 1-1: SerialNumber: syz
[  198.512147][ T6884] delete_channel: no stack
[  199.281275][    T9] usb 1-1: can't set config #1, error -71
[  199.291291][    T9] usb 1-1: USB disconnect, device number 2
[  201.615705][ T5832] Bluetooth: hci3: command 0x0406 tx timeout
[  201.616025][ T5839] Bluetooth: hci4: command 0x0406 tx timeout
[  201.622437][ T5832] Bluetooth: hci1: command 0x0406 tx timeout
[  201.628053][ T5824] Bluetooth: hci0: command 0x0406 tx timeout
[  201.628142][ T5824] Bluetooth: hci2: command 0x0406 tx timeout
[  201.628173][ T5824] Bluetooth: hci5: command 0x0406 tx timeout
[  206.114477][ T6925] netlink: 68 bytes leftover after parsing attributes in process `syz.0.274'.
[  206.187578][ T6924] delete_channel: no stack
[  206.357857][ T6928] loop7: detected capacity change from 0 to 7
[  206.686525][ T6934] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22
[  206.695522][ T6934] netdevsim netdevsim4: Direct firmware load for . failed with error -22
[  206.704491][ T6934] netdevsim netdevsim4: Falling back to sysfs fallback for: .
[  207.681911][ T6928] Dev loop7: unable to read RDB block 7
[  207.687700][ T6928]  loop7: unable to read partition table
[  207.711857][ T6939] Bluetooth: MGMT ver 1.23
[  207.718345][ T6928] loop7: partition table beyond EOD, truncated
[  207.748199][ T6928] loop_reread_partitions: partition scan of loop7 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[  207.836888][ T5829] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  207.846260][ T5829] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  207.855977][ T5829] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  207.873118][ T5829] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  207.886297][ T5829] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  209.461174][ T6957] tipc: Started in network mode
[  209.544386][ T6957] tipc: Node identity 5adc85cba1db, cluster identity 4711
[  209.695658][ T6957] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  210.411697][ T5835] Bluetooth: hci6: command tx timeout
[  211.077577][   T37] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  211.167077][ T6948] tipc: Disabling bearer <eth:syzkaller0>
[  211.184733][ T6981] netlink: 68 bytes leftover after parsing attributes in process `syz.4.289'.
[  211.201308][ T5830] tipc: Node number set to 4211574219
[  211.259704][   T37] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  211.328200][ T6980] delete_channel: no stack
[  211.635954][ T6989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  211.672324][ T6989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  211.758330][   T37] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.492251][ T5835] Bluetooth: hci6: command tx timeout
[  212.531444][   T37] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  214.151736][ T6933] chnl_net:caif_netlink_parms(): no params data found
[  214.320080][   T37] bridge_slave_1: left allmulticast mode
[  214.332554][   T37] bridge_slave_1: left promiscuous mode
[  214.348684][   T37] bridge0: port 2(bridge_slave_1) entered disabled state
[  214.417731][   T37] bridge_slave_0: left allmulticast mode
[  214.429141][   T37] bridge_slave_0: left promiscuous mode
[  214.443428][   T37] bridge0: port 1(bridge_slave_0) entered disabled state
[  214.572199][ T5835] Bluetooth: hci6: command tx timeout
[  214.733204][ T7013] loop5: detected capacity change from 0 to 7
[  214.781097][ T7013] Dev loop5: unable to read RDB block 7
[  214.825081][ T7013]  loop5: AHDI p1 p2 p3
[  214.829420][ T7013] loop5: partition table partially beyond EOD, truncated
[  215.362698][ T7013] loop5: p1 start 1818582900 is beyond EOD, truncated
[  215.454845][ T7013] loop5: p3 start 335544320 is beyond EOD, truncated
[  215.829845][ T7024] netlink: 16 bytes leftover after parsing attributes in process `syz.5.302'.
[  215.999829][   T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  216.053979][   T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  216.083751][   T37] bond0 (unregistering): Released all slaves
[  216.344957][ T7027] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  216.358425][ T7028] syzkaller0: entered promiscuous mode
[  216.375994][ T7028] syzkaller0: entered allmulticast mode
[  216.652086][ T5835] Bluetooth: hci6: command tx timeout
[  218.358208][ T7039] tipc: Resetting bearer <eth:syzkaller0>
[  219.034620][ T7039] tipc: Disabling bearer <eth:syzkaller0>
[  221.420851][ T6933] bridge0: port 1(bridge_slave_0) entered blocking state
[  221.462250][ T6933] bridge0: port 1(bridge_slave_0) entered disabled state
[  221.520029][ T6933] bridge_slave_0: entered allmulticast mode
[  221.565999][ T6933] bridge_slave_0: entered promiscuous mode
[  221.701520][ T7097] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  221.715604][ T7097] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  221.823747][ T6933] bridge0: port 2(bridge_slave_1) entered blocking state
[  221.830918][ T6933] bridge0: port 2(bridge_slave_1) entered disabled state
[  221.902514][ T6933] bridge_slave_1: entered allmulticast mode
[  221.936089][ T6933] bridge_slave_1: entered promiscuous mode
[  222.374287][ T6933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  222.394883][ T6933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  222.494030][   T37] hsr_slave_0: left promiscuous mode
[  222.500245][   T37] hsr_slave_1: left promiscuous mode
[  222.538314][   T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  222.595486][   T37] batman_adv: batadv0: Removing interface: batadv_slave_0
[  222.632710][   T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  222.669728][   T37] batman_adv: batadv0: Removing interface: batadv_slave_1
[  222.792818][   T37] veth1_macvtap: left promiscuous mode
[  222.821278][   T37] veth0_macvtap: left promiscuous mode
[  222.848956][   T37] veth1_vlan: left promiscuous mode
[  222.892193][   T37] veth0_vlan: left promiscuous mode
[  223.330797][ T7108] netlink: 8 bytes leftover after parsing attributes in process `syz.0.317'.
[  223.815206][ T7098] loop5: detected capacity change from 0 to 32768
[  224.194899][   T37] team0 (unregistering): Port device team_slave_1 removed
[  224.448791][ T7114] loop5: detected capacity change from 0 to 32768
[  224.676208][   T37] team0 (unregistering): Port device team_slave_0 removed
[  226.244663][ T6933] team0: Port device team_slave_0 added
[  226.259992][ T6933] team0: Port device team_slave_1 added
[  226.601091][ T7123] tipc: Started in network mode
[  226.606080][ T7123] tipc: Node identity ee2360fc2e7b, cluster identity 4711
[  226.613761][ T7123] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  227.353911][  T882] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  227.573112][ T7124] syzkaller0: entered promiscuous mode
[  227.589274][ T7124] syzkaller0: entered allmulticast mode
[  227.648478][ T6933] batman_adv: batadv0: Adding interface: batadv_slave_0
[  227.677322][ T6933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  227.744728][  T882] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  227.769023][  T882] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  227.992633][ T6933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  228.003411][  T882] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  228.017969][  T882] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  228.023166][ T6933] batman_adv: batadv0: Adding interface: batadv_slave_1
[  228.033423][ T6933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  228.068159][ T6933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  228.154068][ T7146] netlink: 64 bytes leftover after parsing attributes in process `syz.0.327'.
[  228.648289][  T882] usb 6-1: config 0 descriptor??
[  228.966859][ T5830] tipc: Node number set to 3227017468
[  228.996833][ T7122] tipc: Resetting bearer <eth:syzkaller0>
[  228.996999][ T7152] loop5: detected capacity change from 0 to 7
[  229.032496][ T7152] Dev loop5: unable to read RDB block 7
[  229.042382][ T7152]  loop5: AHDI p1 p2 p3
[  229.062517][ T7152] loop5: partition table partially beyond EOD, truncated
[  229.079020][ T7152] loop5: p1 start 1818582900 is beyond EOD, truncated
[  229.174923][ T7152] loop5: p3 start 335544320 is beyond EOD, truncated
[  229.247530][ T7122] tipc: Disabling bearer <eth:syzkaller0>
[  229.352356][    T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!!
[  229.370630][  T882] usbhid 6-1:0.0: can't add hid device: -71
[  229.385463][  T882] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  229.412453][  T882] usb 6-1: USB disconnect, device number 9
[  229.688077][ T6933] hsr_slave_0: entered promiscuous mode
[  229.734117][ T6933] hsr_slave_1: entered promiscuous mode
[  229.750095][ T6933] debugfs: 'hsr0' already exists in 'hsr'
[  229.774975][ T6933] Cannot create hsr debugfs directory
[  230.920980][ T7167] netlink: 8 bytes leftover after parsing attributes in process `syz.5.335'.
[  233.294400][ T6933] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  233.501815][ T6933] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  233.926221][ T6933] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  234.993548][ T6933] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  236.401201][ T7230] netlink: 8 bytes leftover after parsing attributes in process `syz.2.348'.
[  236.935365][ T7245] lo speed is unknown, defaulting to 1000
[  236.942325][ T7245] lo speed is unknown, defaulting to 1000
[  236.964415][ T7245] lo speed is unknown, defaulting to 1000
[  237.016818][ T7245] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  237.117866][ T7245] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  237.309292][ T7245] lo speed is unknown, defaulting to 1000
[  237.317318][ T7245] lo speed is unknown, defaulting to 1000
[  237.325907][ T7245] lo speed is unknown, defaulting to 1000
[  237.333707][ T7245] lo speed is unknown, defaulting to 1000
[  237.342660][ T7245] lo speed is unknown, defaulting to 1000
[  237.350256][ T7245] lo speed is unknown, defaulting to 1000
[  237.448267][ T6933] 8021q: adding VLAN 0 to HW filter on device bond0
[  237.545626][ T7248] netlink: 4 bytes leftover after parsing attributes in process `syz.5.351'.
[  237.657799][ T6933] 8021q: adding VLAN 0 to HW filter on device team0
[  237.804257][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  237.811538][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  237.936722][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  237.943948][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  238.794896][ T7268] bridge0: port 1(bridge_slave_0) entered disabled state
[  238.806563][ T7268] bridge0: port 2(bridge_slave_1) entered disabled state
[  238.970240][ T6933] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  239.421621][ T7280] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[  239.430639][ T7280] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[  239.439199][ T7280] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[  241.852951][ T7301] netlink: 4 bytes leftover after parsing attributes in process `syz.1.363'.
[  242.191645][ T6933] 8021q: adding VLAN 0 to HW filter on device batadv0
[  242.832184][ T7322] netlink: 'syz.5.369': attribute type 1 has an invalid length.
[  242.942998][ T7326] netlink: 28 bytes leftover after parsing attributes in process `syz.5.369'.
[  243.160091][ T7322] bond1: (slave gretap1): making interface the new active one
[  243.209451][ T7322] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  243.321214][ T7326] macvlan2: entered promiscuous mode
[  243.339682][ T7326] macvlan2: entered allmulticast mode
[  243.383439][ T7326] bond1: entered promiscuous mode
[  243.422089][ T7326] gretap1: entered promiscuous mode
[  243.511795][ T7326] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  243.578254][ T7326] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  243.623265][ T7326] bond1: left promiscuous mode
[  243.629350][ T7326] gretap1: left promiscuous mode
[  243.864365][ T6933] veth0_vlan: entered promiscuous mode
[  243.953165][ T6933] veth1_vlan: entered promiscuous mode
[  244.181087][ T6933] veth0_macvtap: entered promiscuous mode
[  244.266971][ T6933] veth1_macvtap: entered promiscuous mode
[  244.373641][ T6933] batman_adv: batadv0: Interface activated: batadv_slave_0
[  244.448624][ T6933] batman_adv: batadv0: Interface activated: batadv_slave_1
[  245.965084][ T1304] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  246.113499][ T1304] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  246.177922][ T1304] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  246.251242][ T1304] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  246.269869][ T7363] netlink: 4 bytes leftover after parsing attributes in process `syz.1.376'.
[  246.720138][ T1304] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  246.738860][ T1304] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  247.031340][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  247.126299][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  247.183288][ T7394] siw: device registration error -23
[  249.852094][ T5830] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  249.965054][ T7425] netlink: 4 bytes leftover after parsing attributes in process `syz.0.392'.
[  250.065461][ T5830] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  250.102020][ T5830] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  250.132240][ T5830] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  250.172477][ T5830] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  250.273217][ T5830] usb 3-1: config 0 descriptor??
[  251.042142][ T5830] usbhid 3-1:0.0: can't add hid device: -71
[  251.048165][ T5830] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  251.141403][ T7442] netlink: 64 bytes leftover after parsing attributes in process `syz.4.397'.
[  251.799263][ T5830] usb 3-1: USB disconnect, device number 4
[  255.062671][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  255.069027][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  256.893798][ T7476] lo speed is unknown, defaulting to 1000
[  257.211989][ T7479] bridge0: port 1(bridge_slave_0) entered disabled state
[  257.230015][ T7479] bridge0: port 2(bridge_slave_1) entered disabled state
[  257.916327][ T5830] lo speed is unknown, defaulting to 1000
[  261.040011][ T7520] lo speed is unknown, defaulting to 1000
[  261.604647][ T7523] loop5: detected capacity change from 0 to 7
[  261.809494][ T7523] Dev loop5: unable to read RDB block 7
[  262.028267][ T7523]  loop5: AHDI p1 p2 p3
[  262.543657][ T7523] loop5: partition table partially beyond EOD, truncated
[  262.667602][ T7523] loop5: p1 start 1818582900 is beyond EOD, truncated
[  262.702180][ T7523] loop5: p3 start 335544320 is beyond EOD, truncated
[  263.042250][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[  263.089017][ T7544] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  265.031187][ T7560] netlink: 8 bytes leftover after parsing attributes in process `syz.1.427'.
[  269.594730][ T7606] lo speed is unknown, defaulting to 1000
[  276.700376][ T7686] input: syz0 as /devices/virtual/input/input5
[  277.408584][ T7692] lo speed is unknown, defaulting to 1000
[  277.784592][ T7711] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  279.859563][ T7729] syzkaller0: entered promiscuous mode
[  280.119769][ T7729] syzkaller0: entered allmulticast mode
[  280.251616][ T7742] netlink: 64 bytes leftover after parsing attributes in process `syz.5.470'.
[  281.331360][ T7750] netlink: 64 bytes leftover after parsing attributes in process `syz.0.471'.
[  282.132111][ T7754] netlink: 'syz.5.473': attribute type 21 has an invalid length.
[  283.773413][ T7773] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  284.497884][ T7788] netlink: 'syz.5.478': attribute type 1 has an invalid length.
[  284.560478][ T7776] netlink: 'syz.0.479': attribute type 21 has an invalid length.
[  284.613708][ T7791] netlink: 28 bytes leftover after parsing attributes in process `syz.5.478'.
[  284.866862][ T7795] IPVS: sync thread started: state = MASTER, mcast_ifn = syz_tun, syncid = 1, id = 0
[  285.070077][ T5917] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  285.121695][ T7791] macvlan2: entered promiscuous mode
[  285.152194][ T7791] macvlan2: entered allmulticast mode
[  285.213727][ T7791] bond2: entered promiscuous mode
[  285.244189][ T5917] usb 5-1: device descriptor read/64, error -71
[  286.023810][ T7791] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  286.187248][ T5917] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  286.512282][ T5917] usb 5-1: device descriptor read/64, error -71
[  286.926765][ T5917] usb usb5-port1: attempt power cycle
[  286.963435][ T7791] bond2: left promiscuous mode
[  287.575783][ T5917] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  288.305577][ T5917] usb 5-1: device descriptor read/8, error -71
[  288.490917][ T7832] random: crng reseeded on system resumption
[  289.952680][ T7845] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  290.495255][ T7853] syz.2.496 (7853): drop_caches: 2
[  291.967800][ T7866] lo speed is unknown, defaulting to 1000
[  294.153141][    T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!!
[  295.267208][ T7898] syzkaller0: entered promiscuous mode
[  295.279277][ T7898] syzkaller0: entered allmulticast mode
[  295.339045][ T7900] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  296.277820][ T7915] syz.4.511 (7915): drop_caches: 2
[  296.693491][ T7917] usb usb7: usbfs: process 7917 (syz.2.512) did not claim interface 0 before use
[  297.322031][ T5917] usb 3-1: new full-speed USB device number 5 using dummy_hcd
[  297.519743][ T5917] usb 3-1: config 1 has an invalid descriptor of length 47, skipping remainder of the config
[  297.571115][ T5917] usb 3-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30
[  297.612407][ T5917] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  297.694522][ T5917] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  297.722844][ T5917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  297.756835][ T5917] usb 3-1: SerialNumber: syz
[  297.787700][ T5917] cdc_acm 3-1:1.0: skipping garbage
[  297.812117][ T5917] cdc_acm 3-1:1.0: Control and data interfaces are not separated!
[  297.868422][ T5917] cdc_acm 3-1:1.0: This needs exactly 3 endpoints
[  297.898891][ T5917] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -22
[  297.988960][ T5916] usb 3-1: USB disconnect, device number 5
[  301.071875][ T7947] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  301.597160][ T7948] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  301.779412][ T7961] netlink: 'syz.0.525': attribute type 21 has an invalid length.
[  302.134564][ T7948] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  302.341236][ T7948] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  302.404896][ T7948] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  302.479630][ T7948] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  302.537846][ T7948] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  302.556760][ T7948] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  302.678341][ T7948] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  302.727309][ T7948] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  302.850785][ T7948] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  302.975125][ T7948] Bluetooth: hci6: Opcode 0x0406 failed: -4
[  303.266745][ T5835] Bluetooth: hci0: command 0x0406 tx timeout
[  303.622136][ T7948] Bluetooth: hci6: Opcode 0x0406 failed: -4
[  304.452196][ T5835] Bluetooth: hci5: command 0x0406 tx timeout
[  304.458396][ T5835] Bluetooth: hci1: command 0x0c1a tx timeout
[  304.617107][ T7980] netlink: 64 bytes leftover after parsing attributes in process `syz.1.529'.
[  304.700300][ T5829] Bluetooth: hci3: command 0x0406 tx timeout
[  304.732317][ T5829] Bluetooth: hci4: command 0x0406 tx timeout
[  305.126873][ T5829] Bluetooth: hci6: command 0x0c1a tx timeout
[  305.382235][ T5829] Bluetooth: hci0: command 0x0406 tx timeout
[  306.502280][ T5829] Bluetooth: hci5: command 0x0406 tx timeout
[  306.732468][ T5829] Bluetooth: hci3: command 0x0406 tx timeout
[  306.812221][ T5829] Bluetooth: hci4: command 0x0406 tx timeout
[  307.212227][ T5829] Bluetooth: hci6: command 0x0c1a tx timeout
[  307.903576][ T8003] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  308.494223][ T8008] siw: device registration error -23
[  309.302011][ T5829] Bluetooth: hci6: command 0x0c1a tx timeout
[  309.566360][ T8021] netlink: 64 bytes leftover after parsing attributes in process `syz.6.541'.
[  310.700038][ T8028] syzkaller0: entered promiscuous mode
[  310.722075][ T8028] syzkaller0: entered allmulticast mode
[  311.675207][ T8038] bridge0: port 1(bridge_slave_0) entered disabled state
[  311.676149][ T8040] netlink: 68 bytes leftover after parsing attributes in process `syz.1.545'.
[  311.685905][ T8038] bridge0: port 2(bridge_slave_1) entered disabled state
[  311.728400][ T8038] vlan2: left promiscuous mode
[  311.733301][ T8038] team0: left promiscuous mode
[  311.738049][ T8038] team_slave_0: left promiscuous mode
[  311.743601][ T8038] team_slave_1: left promiscuous mode
[  313.366709][ T8060] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  313.939090][ T8070] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  314.152200][ T8066] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  314.159623][ T8066] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  314.170266][ T8066] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  314.241031][ T8066] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  314.261089][ T8066] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  314.564291][ T8080] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  314.602860][ T8066] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  315.281152][ T8082] loop5: detected capacity change from 0 to 7
[  315.309407][ T8082] Dev loop5: unable to read RDB block 7
[  315.336469][ T8082]  loop5: unable to read partition table
[  315.390396][ T8082] loop5: partition table beyond EOD, truncated
[  315.492982][ T8082] loop_reread_partitions: partition scan of loop5 (�被x������ ) failed (rc=-5)
[  315.585895][ T8088] netlink: 68 bytes leftover after parsing attributes in process `syz.6.560'.
[  315.692027][ T5829] Bluetooth: hci0: command 0x0406 tx timeout
[  315.942557][ T8090] syzkaller0: entered promiscuous mode
[  315.950501][ T8090] syzkaller0: entered allmulticast mode
[  316.310650][   T52] Bluetooth: hci5: command 0x0406 tx timeout
[  316.316785][ T5835] Bluetooth: hci3: command 0x0406 tx timeout
[  316.316874][ T5829] Bluetooth: hci1: command 0x0c1a tx timeout
[  316.332004][ T5829] Bluetooth: hci4: command 0x0406 tx timeout
[  316.498660][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  316.507439][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  316.982112][ T5829] Bluetooth: hci6: command 0x0c1a tx timeout
[  317.231488][ T8100] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  317.549496][ T8108] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  319.292477][ T8127] netlink: 68 bytes leftover after parsing attributes in process `syz.0.575'.
[  319.534360][ T8128] loop5: detected capacity change from 0 to 7
[  319.602190][ T8128] Dev loop5: unable to read RDB block 7
[  319.607817][ T8128]  loop5: unable to read partition table
[  319.653968][ T8128] loop5: partition table beyond EOD, truncated
[  319.701664][ T8128] loop_reread_partitions: partition scan of loop5 (�被x������ ) failed (rc=-5)
[  320.832336][ T8144] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  320.985482][ T8147] netlink: 20 bytes leftover after parsing attributes in process `syz.5.579'.
[  321.037792][ T8146] delete_channel: no stack
[  322.646471][ T8169] bridge0: port 1(bridge_slave_0) entered disabled state
[  322.662527][ T8169] bridge0: port 2(bridge_slave_1) entered disabled state
[  322.818094][ T8169] vlan2: left promiscuous mode
[  322.822987][ T8169] team0: left promiscuous mode
[  322.827810][ T8169] team_slave_0: left promiscuous mode
[  322.834598][ T8169] team_slave_1: left promiscuous mode
[  324.148595][ T8184] netlink: 68 bytes leftover after parsing attributes in process `syz.5.590'.
[  324.636315][ T8188] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  324.745216][ T8188] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  324.757977][ T8189] loop5: detected capacity change from 0 to 7
[  324.769501][ T8189] Dev loop5: unable to read RDB block 7
[  324.782253][ T8189]  loop5: unable to read partition table
[  324.799268][ T8189] loop5: partition table beyond EOD, truncated
[  324.839399][ T8189] loop_reread_partitions: partition scan of loop5 (�被x������ ) failed (rc=-5)
[  325.103511][ T8192] netlink: 20 bytes leftover after parsing attributes in process `syz.5.594'.
[  325.146649][ T8194] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  325.161342][ T8191] delete_channel: no stack
[  326.475781][ T8212] bridge0: port 1(bridge_slave_0) entered disabled state
[  326.493423][ T8212] bridge0: port 2(bridge_slave_1) entered disabled state
[  327.618525][ T8216] siw: device registration error -23
[  328.545775][ T8226] lo speed is unknown, defaulting to 1000
[  328.983328][ T8221] netlink: 68 bytes leftover after parsing attributes in process `syz.6.604'.
[  329.204814][ T8232] netlink: 20 bytes leftover after parsing attributes in process `syz.4.607'.
[  329.258597][ T8228] delete_channel: no stack
[  329.591404][ T8241] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  330.635148][ T8263] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  330.678757][ T8263] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  332.106717][ T8279] netlink: 68 bytes leftover after parsing attributes in process `syz.6.621'.
[  332.330605][ T8281] netlink: 4 bytes leftover after parsing attributes in process `syz.2.622'.
[  332.393321][ T8280] delete_channel: no stack
[  334.028598][ T8294] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  335.272337][ T5926] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  335.482039][ T5926] usb 2-1: device descriptor read/64, error -71
[  335.798390][ T8317] netlink: 68 bytes leftover after parsing attributes in process `syz.0.635'.
[  335.822652][ T5926] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  336.023011][ T5926] usb 2-1: device descriptor read/64, error -71
[  336.215710][ T5926] usb usb2-port1: attempt power cycle
[  336.474815][ T8325] usb usb7: usbfs: process 8325 (syz.0.637) did not claim interface 0 before use
[  336.692272][ T5926] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  336.879567][   T24] usb 1-1: new full-speed USB device number 3 using dummy_hcd
[  336.910075][ T5926] usb 2-1: device descriptor read/8, error -71
[  336.947046][ T8328] netlink: 4 bytes leftover after parsing attributes in process `syz.5.638'.
[  337.007933][ T8327] delete_channel: no stack
[  337.076168][   T24] usb 1-1: config 1 has an invalid descriptor of length 47, skipping remainder of the config
[  337.089104][   T24] usb 1-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30
[  337.100571][   T24] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  337.187896][ T5926] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  337.210227][   T24] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  337.730282][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  337.740091][ T5926] usb 2-1: device descriptor read/8, error -71
[  337.753454][   T24] usb 1-1: SerialNumber: syz
[  338.086770][ T5926] usb usb2-port1: unable to enumerate USB device
[  338.287805][   T24] cdc_acm 1-1:1.0: skipping garbage
[  338.304574][   T24] cdc_acm 1-1:1.0: Control and data interfaces are not separated!
[  338.320712][   T24] cdc_acm 1-1:1.0: This needs exactly 3 endpoints
[  338.327657][   T24] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -22
[  338.459494][ T8339] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  338.508490][   T10] usb 1-1: USB disconnect, device number 3
[  340.645957][ T8362] lo speed is unknown, defaulting to 1000
[  341.767789][ T8371] loop2: detected capacity change from 0 to 32768
[  344.292202][ T8390] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  345.358843][ T8397] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  346.073369][ T8406] usb usb7: usbfs: process 8406 (syz.0.659) did not claim interface 0 before use
[  347.572091][   T24] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  348.541967][   T24] usb 1-1: Using ep0 maxpacket: 8
[  348.592043][   T10] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  348.635253][   T24] usb 1-1: unable to get BOS descriptor or descriptor too short
[  348.645344][   T24] usb 1-1: unable to read config index 0 descriptor/start: -71
[  348.671090][   T24] usb 1-1: can't read configurations, error -71
[  348.862213][   T10] usb 6-1: device descriptor read/64, error -71
[  349.452039][   T10] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  349.520181][ T8442] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  349.642224][   T10] usb 6-1: device descriptor read/64, error -71
[  349.777121][   T10] usb usb6-port1: attempt power cycle
[  350.222452][   T10] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  351.512265][ T5896] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  351.772304][   T10] usb 6-1: device descriptor read/8, error -71
[  351.792327][ T5896] usb 1-1: Using ep0 maxpacket: 8
[  351.962585][ T5896] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  352.062136][ T5896] usb 1-1: config 0 has no interfaces?
[  352.087661][ T5896] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  352.117429][ T5896] usb 1-1: config 0 has no interfaces?
[  352.138251][ T5896] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  352.169632][ T5896] usb 1-1: config 0 has no interfaces?
[  352.190046][ T5896] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  352.216466][ T5896] usb 1-1: config 0 has no interfaces?
[  352.228478][ T5896] usb 1-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a
[  352.250786][ T5896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  352.286693][ T5896] usb 1-1: config 0 descriptor??
[  352.974578][ T8467] lo speed is unknown, defaulting to 1000
[  353.923794][ T8473] netlink: 52 bytes leftover after parsing attributes in process `syz.6.680'.
[  354.769536][   T10] usb 1-1: USB disconnect, device number 6
[  354.852112][ T8477] lo speed is unknown, defaulting to 1000
[  356.776563][ T8490] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  358.047555][ T8509] syz.0.688 (8509): drop_caches: 2
[  360.206022][ T8525] netlink: 52 bytes leftover after parsing attributes in process `syz.4.695'.
[  360.262032][    T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  360.452803][    T9] usb 3-1: Using ep0 maxpacket: 8
[  360.497746][    T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  360.543257][    T9] usb 3-1: config 0 has no interfaces?
[  361.584773][    T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  361.626672][    T9] usb 3-1: config 0 has no interfaces?
[  361.681709][    T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  361.714914][    T9] usb 3-1: config 0 has no interfaces?
[  361.726649][ T8537] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  361.769074][    T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  361.783214][    T9] usb 3-1: config 0 has no interfaces?
[  361.789817][    T9] usb 3-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a
[  362.001818][ T8540] loop4: detected capacity change from 0 to 32768
[  362.010806][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  362.033142][    T9] usb 3-1: config 0 descriptor??
[  362.590523][ T8544] read_mapping_page failed!
[  363.820348][   T10] usb 3-1: USB disconnect, device number 6
[  363.826319][    T9] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  363.982194][    T9] usb 6-1: Using ep0 maxpacket: 16
[  364.001455][    T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  364.018470][    T9] usb 6-1: config 0 has no interfaces?
[  364.040182][    T9] usb 6-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4
[  364.080774][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  364.135731][    T9] usb 6-1: Product: syz
[  364.142071][    T9] usb 6-1: Manufacturer: syz
[  364.177415][    T9] usb 6-1: SerialNumber: syz
[  364.234260][    T9] usb 6-1: config 0 descriptor??
[  366.919805][ T8592] loop1: detected capacity change from 0 to 32768
[  367.895634][ T8605] netlink: 64 bytes leftover after parsing attributes in process `syz.0.718'.
[  369.778003][ T5917] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  369.962175][ T5917] usb 1-1: Using ep0 maxpacket: 8
[  369.993508][ T5917] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  370.038401][ T5917] usb 1-1: config 0 has no interfaces?
[  370.144442][ T5917] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  370.196869][ T5917] usb 1-1: config 0 has no interfaces?
[  370.371934][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  370.443559][ T5917] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  370.462286][ T5917] usb 1-1: config 0 has no interfaces?
[  371.347052][ T5917] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  371.357422][ T5917] usb 1-1: config 0 has no interfaces?
[  372.178338][ T5917] usb 1-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a
[  372.189192][ T5917] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  372.292919][ T5917] usb 1-1: config 0 descriptor??
[  372.362435][    T9] usb 6-1: USB disconnect, device number 14
[  372.492321][ T5917] usb 1-1: can't set config #0, error -71
[  372.518255][ T8637] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  372.531718][ T5917] usb 1-1: USB disconnect, device number 7
[  372.985791][ T8646] netlink: 64 bytes leftover after parsing attributes in process `syz.0.732'.
[  374.777944][ T5917] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  375.001969][ T5917] usb 6-1: Using ep0 maxpacket: 16
[  375.182045][ T5917] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  375.248028][ T8675] lo speed is unknown, defaulting to 1000
[  375.556734][ T5917] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  375.575323][ T5917] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  375.589602][ T5917] usb 6-1: Product: syz
[  375.663086][ T5917] usb 6-1: Manufacturer: syz
[  375.669801][ T5917] usb 6-1: SerialNumber: syz
[  375.694737][ T5917] usb 6-1: config 0 descriptor??
[  375.706539][ T5917] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  375.720381][ T5917] em28xx 6-1:0.0: DVB interface 0 found: bulk
[  375.821933][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  376.308795][ T5917] em28xx 6-1:0.0: unknown em28xx chip ID (0)
[  377.832289][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  378.034773][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  378.041644][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  378.302689][ T5917] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  378.310931][ T5917] em28xx 6-1:0.0: board has no eeprom
[  379.602005][ T5917] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  379.609865][ T5917] em28xx 6-1:0.0: dvb set to bulk mode.
[  379.677955][    T9] em28xx 6-1:0.0: Binding DVB extension
[  379.733011][ T5917] usb 6-1: USB disconnect, device number 15
[  379.740496][ T5917] em28xx 6-1:0.0: Disconnecting em28xx
[  380.795815][    T9] em28xx 6-1:0.0: Registering input extension
[  380.867531][ T5917] em28xx 6-1:0.0: Closing input extension
[  380.978753][ T8711] binder: BINDER_SET_CONTEXT_MGR already set
[  380.986750][ T8711] binder: 8710:8711 ioctl 4018620d 200000004a80 returned -16
[  381.202460][ T5926] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  381.264161][ T5917] em28xx 6-1:0.0: Freeing device
[  381.867821][    T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  382.112182][ T5926] usb 2-1: Using ep0 maxpacket: 16
[  382.221969][    T9] usb 1-1: Using ep0 maxpacket: 8
[  382.244797][ T5926] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  382.332246][ T5926] usb 2-1: config 0 has no interfaces?
[  382.371839][    T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  382.375043][ T5926] usb 2-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4
[  382.479011][    T9] usb 1-1: config 0 has no interfaces?
[  382.479787][ T5926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  382.536578][ T5926] usb 2-1: Product: syz
[  382.540859][ T5926] usb 2-1: Manufacturer: syz
[  382.589620][ T5926] usb 2-1: SerialNumber: syz
[  382.635777][    T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  382.689112][    T9] usb 1-1: config 0 has no interfaces?
[  382.704079][ T5926] usb 2-1: config 0 descriptor??
[  384.953772][ T8744] lo speed is unknown, defaulting to 1000
[  386.505315][ T8750] netlink: 76 bytes leftover after parsing attributes in process `syz.6.757'.
[  386.592507][ T8750] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  386.658927][   T24] usb 2-1: USB disconnect, device number 10
[  386.802091][    T9] usb 1-1: unable to read config index 2 descriptor/start: -71
[  386.840262][    T9] usb 1-1: can't read configurations, error -71
[  387.600714][   T24] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  388.632130][   T24] usb 2-1: Using ep0 maxpacket: 16
[  388.657544][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  388.704102][   T24] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  388.735395][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  388.776994][   T24] usb 2-1: Product: syz
[  388.797895][   T24] usb 2-1: Manufacturer: syz
[  388.826547][   T24] usb 2-1: SerialNumber: syz
[  388.857615][   T24] usb 2-1: config 0 descriptor??
[  388.889459][   T24] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  389.062215][   T24] em28xx 2-1:0.0: DVB interface 0 found: bulk
[  389.534947][   T24] em28xx 2-1:0.0: unknown em28xx chip ID (0)
[  390.772220][   T24] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  390.821817][   T24] em28xx 2-1:0.0: board has no eeprom
[  391.945571][ T8754] em28xx 2-1:0.0: writing to i2c device at 0xfffe failed (error=-5)
[  392.002233][   T24] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  392.042015][   T24] em28xx 2-1:0.0: dvb set to bulk mode.
[  392.085772][ T5926] em28xx 2-1:0.0: Binding DVB extension
[  392.306003][    T9] usb 2-1: USB disconnect, device number 11
[  392.335003][    T9] em28xx 2-1:0.0: Disconnecting em28xx
[  392.423509][ T5926] em28xx 2-1:0.0: Registering input extension
[  392.441988][    T9] em28xx 2-1:0.0: Closing input extension
[  392.546997][    T9] em28xx 2-1:0.0: Freeing device
[  393.401971][ T5940] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  393.641998][ T5940] usb 3-1: Using ep0 maxpacket: 16
[  393.650009][ T5940] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  393.661194][ T5940] usb 3-1: config 0 has no interfaces?
[  393.835824][    T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  393.871310][ T5940] usb 3-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4
[  393.946186][ T5940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  394.034675][ T5940] usb 3-1: Product: syz
[  394.052175][ T5940] usb 3-1: Manufacturer: syz
[  394.058082][ T5940] usb 3-1: SerialNumber: syz
[  394.078318][    T9] usb 5-1: Using ep0 maxpacket: 8
[  394.729527][    T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  394.758886][ T5940] usb 3-1: config 0 descriptor??
[  394.798862][    T9] usb 5-1: config 0 has no interfaces?
[  394.846846][    T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  394.910377][    T9] usb 5-1: config 0 has no interfaces?
[  394.939081][    T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  394.952705][    T9] usb 5-1: config 0 has no interfaces?
[  394.969049][    T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  394.989588][    T9] usb 5-1: config 0 has no interfaces?
[  395.041673][    T9] usb 5-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a
[  395.081784][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  395.183585][    T9] usb 5-1: config 0 descriptor??
[  397.096321][ T8827] lo speed is unknown, defaulting to 1000
[  398.173731][ T8836] siw: device registration error -23
[  399.518748][ T5926] usb 3-1: USB disconnect, device number 7
[  402.301275][ T5940] usb 5-1: USB disconnect, device number 8
[  404.115855][ T8877] netlink: 'syz.1.788': attribute type 21 has an invalid length.
[  405.293268][ T8890] siw: device registration error -23
[  405.479383][ T8893] netlink: 8 bytes leftover after parsing attributes in process `syz.4.791'.
[  406.924836][ T8903] lo speed is unknown, defaulting to 1000
[  407.358887][ T8908] netlink: 64 bytes leftover after parsing attributes in process `syz.5.796'.
[  408.012227][ T5835] Bluetooth: hci2: command 0x1003 tx timeout
[  408.019979][ T5829] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  409.371954][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  410.369599][ T8925] loop4: detected capacity change from 0 to 32768
[  411.463283][  T110] ==================================================================
[  411.471388][  T110] BUG: KASAN: slab-use-after-free in jfs_lazycommit+0x749/0xaa0
[  411.479130][  T110] Read of size 4 at addr ffff888026127494 by task jfsCommit/110
[  411.486755][  T110] 
[  411.489083][  T110] CPU: 0 UID: 0 PID: 110 Comm: jfsCommit Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  411.489116][  T110] Tainted: [L]=SOFTLOCKUP
[  411.489126][  T110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  411.489140][  T110] Call Trace:
[  411.489149][  T110]  <TASK>
[  411.489159][  T110]  dump_stack_lvl+0xe8/0x150
[  411.489196][  T110]  print_report+0xba/0x230
[  411.489226][  T110]  ? jfs_lazycommit+0x749/0xaa0
[  411.489258][  T110]  kasan_report+0x117/0x150
[  411.489291][  T110]  ? jfs_lazycommit+0x749/0xaa0
[  411.489333][  T110]  jfs_lazycommit+0x749/0xaa0
[  411.489362][  T110]  ? __pfx_jfs_lazycommit+0x10/0x10
[  411.489388][  T110]  ? __pfx_default_wake_function+0x10/0x10
[  411.489418][  T110]  ? srso_alias_return_thunk+0x5/0xfbef5
[  411.489449][  T110]  ? __kthread_parkme+0x7a/0x1f0
[  411.489485][  T110]  ? srso_alias_return_thunk+0x5/0xfbef5
[  411.489519][  T110]  kthread+0x388/0x470
[  411.489543][  T110]  ? __pfx_jfs_lazycommit+0x10/0x10
[  411.489572][  T110]  ? __pfx_kthread+0x10/0x10
[  411.489596][  T110]  ret_from_fork+0x51e/0xb90
[  411.489631][  T110]  ? __pfx_ret_from_fork+0x10/0x10
[  411.489661][  T110]  ? srso_alias_return_thunk+0x5/0xfbef5
[  411.489690][  T110]  ? __switch_to+0xc7d/0x1450
[  411.489720][  T110]  ? __pfx_kthread+0x10/0x10
[  411.489743][  T110]  ret_from_fork_asm+0x1a/0x30
[  411.489790][  T110]  </TASK>
[  411.489799][  T110] 
[  411.624603][  T110] Allocated by task 8925:
[  411.628926][  T110]  kasan_save_track+0x3e/0x80
[  411.633592][  T110]  __kasan_kmalloc+0x93/0xb0
[  411.638166][  T110]  __kmalloc_cache_noprof+0x31c/0x660
[  411.643521][  T110]  jfs_fill_super+0xc2/0xd80
[  411.648102][  T110]  get_tree_bdev_flags+0x431/0x4f0
[  411.653197][  T110]  vfs_get_tree+0x92/0x2a0
[  411.657640][  T110]  do_new_mount+0x341/0xd30
[  411.662133][  T110]  __se_sys_mount+0x31d/0x420
[  411.666815][  T110]  do_syscall_64+0x14d/0xf80
[  411.671392][  T110]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  411.677279][  T110] 
[  411.679589][  T110] Freed by task 5819:
[  411.683555][  T110]  kasan_save_track+0x3e/0x80
[  411.688232][  T110]  kasan_save_free_info+0x46/0x50
[  411.693271][  T110]  __kasan_slab_free+0x5c/0x80
[  411.698035][  T110]  kfree+0x1c1/0x630
[  411.701915][  T110]  generic_shutdown_super+0x13d/0x2d0
[  411.707417][  T110]  kill_block_super+0x44/0x90
[  411.712187][  T110]  deactivate_locked_super+0xbc/0x130
[  411.717567][  T110]  cleanup_mnt+0x437/0x4d0
[  411.721966][  T110]  task_work_run+0x1d9/0x270
[  411.726549][  T110]  exit_to_user_mode_loop+0xed/0x480
[  411.731844][  T110]  do_syscall_64+0x32d/0xf80
[  411.736430][  T110]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  411.742307][  T110] 
[  411.744610][  T110] The buggy address belongs to the object at ffff888026127400
[  411.744610][  T110]  which belongs to the cache kmalloc-256 of size 256
[  411.758642][  T110] The buggy address is located 148 bytes inside of
[  411.758642][  T110]  freed 256-byte region [ffff888026127400, ffff888026127500)
[  411.772429][  T110] 
[  411.774739][  T110] The buggy address belongs to the physical page:
[  411.781150][  T110] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x26126
[  411.790014][  T110] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  411.798497][  T110] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  411.806028][  T110] page_type: f5(slab)
[  411.809994][  T110] raw: 00fff00000000040 ffff88813fea5b40 dead000000000100 dead000000000122
[  411.818565][  T110] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[  411.827222][  T110] head: 00fff00000000040 ffff88813fea5b40 dead000000000100 dead000000000122
[  411.835894][  T110] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[  411.844566][  T110] head: 00fff00000000001 ffffea0000984981 00000000ffffffff 00000000ffffffff
[  411.853227][  T110] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002
[  411.861921][  T110] page dumped because: kasan: bad access detected
[  411.868515][  T110] page_owner tracks the page as allocated
[  411.874298][  T110] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 13, tgid 13 (kworker/u8:1), ts 7239088356, free_ts 0
[  411.894346][  T110]  post_alloc_hook+0x231/0x280
[  411.899110][  T110]  get_page_from_freelist+0x24dc/0x2580
[  411.904656][  T110]  __alloc_frozen_pages_noprof+0x18d/0x380
[  411.910536][  T110]  allocate_slab+0x77/0x660
[  411.915119][  T110]  refill_objects+0x331/0x3c0
[  411.919821][  T110]  __pcs_replace_empty_main+0x2e6/0x730
[  411.925365][  T110]  __kmalloc_cache_noprof+0x392/0x660
[  411.930723][  T110]  scsi_probe_and_add_lun+0x2f8/0x4830
[  411.936177][  T110]  __scsi_scan_target+0x1f0/0xe10
[  411.941187][  T110]  scsi_scan_host_selected+0x372/0x690
[  411.946626][  T110]  do_scan_async+0x124/0x760
[  411.951200][  T110]  async_run_entry_fn+0xa8/0x440
[  411.956154][  T110]  process_scheduled_works+0xb6e/0x18c0
[  411.961693][  T110]  worker_thread+0xa53/0xfc0
[  411.966276][  T110]  kthread+0x388/0x470
[  411.970330][  T110]  ret_from_fork+0x51e/0xb90
[  411.974923][  T110] page_owner free stack trace missing
[  411.980274][  T110] 
[  411.982582][  T110] Memory state around the buggy address:
[  411.988189][  T110]  ffff888026127380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  411.996228][  T110]  ffff888026127400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  412.004274][  T110] >ffff888026127480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  412.012312][  T110]                          ^
[  412.016876][  T110]  ffff888026127500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  412.024917][  T110]  ffff888026127580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  412.032956][  T110] ==================================================================
[  412.041003][  T110] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  412.048182][  T110] CPU: 0 UID: 0 PID: 110 Comm: jfsCommit Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  412.058839][  T110] Tainted: [L]=SOFTLOCKUP
[  412.063147][  T110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  412.073302][  T110] Call Trace:
[  412.076570][  T110]  <TASK>
[  412.079487][  T110]  vpanic+0x56c/0xa60
[  412.083466][  T110]  ? __pfx_vpanic+0x10/0x10
[  412.087967][  T110]  panic+0xc5/0xd0
[  412.091681][  T110]  ? __pfx_panic+0x10/0x10
[  412.096092][  T110]  ? jfs_lazycommit+0x749/0xaa0
[  412.100933][  T110]  ? srso_alias_return_thunk+0x5/0xfbef5
[  412.106558][  T110]  ? jfs_lazycommit+0x749/0xaa0
[  412.111396][  T110]  ? srso_alias_return_thunk+0x5/0xfbef5
[  412.117017][  T110]  ? jfs_lazycommit+0x749/0xaa0
[  412.121876][  T110]  check_panic_on_warn+0x89/0xb0
[  412.126842][  T110]  ? jfs_lazycommit+0x749/0xaa0
[  412.131683][  T110]  end_report+0x73/0x180
[  412.135919][  T110]  ? jfs_lazycommit+0x749/0xaa0
[  412.140782][  T110]  kasan_report+0x128/0x150
[  412.145281][  T110]  ? jfs_lazycommit+0x749/0xaa0
[  412.150215][  T110]  jfs_lazycommit+0x749/0xaa0
[  412.154892][  T110]  ? __pfx_jfs_lazycommit+0x10/0x10
[  412.160083][  T110]  ? __pfx_default_wake_function+0x10/0x10
[  412.165878][  T110]  ? srso_alias_return_thunk+0x5/0xfbef5
[  412.171515][  T110]  ? __kthread_parkme+0x7a/0x1f0
[  412.176470][  T110]  ? srso_alias_return_thunk+0x5/0xfbef5
[  412.182108][  T110]  kthread+0x388/0x470
[  412.186259][  T110]  ? __pfx_jfs_lazycommit+0x10/0x10
[  412.191482][  T110]  ? __pfx_kthread+0x10/0x10
[  412.196089][  T110]  ret_from_fork+0x51e/0xb90
[  412.200674][  T110]  ? __pfx_ret_from_fork+0x10/0x10
[  412.205778][  T110]  ? srso_alias_return_thunk+0x5/0xfbef5
[  412.211762][  T110]  ? __switch_to+0xc7d/0x1450
[  412.216524][  T110]  ? __pfx_kthread+0x10/0x10
[  412.221136][  T110]  ret_from_fork_asm+0x1a/0x30
[  412.226001][  T110]  </TASK>
[  412.229406][  T110] Kernel Offset: disabled
[  412.233717][  T110] Rebooting in 86400 seconds..