last executing test programs:

15m11.972673832s ago: executing program 4 (id=5):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000000)={0x18, r1, 0x1, 0x0, &(0x7f0000000640)=[{0x23, 0x7}]})

15m11.28328665s ago: executing program 4 (id=8):
fsopen(0x0, 0x0)
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x203)
ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000080)={&(0x7f00000000c0)=[{0x7fff, 0x5850, 0x0, 0x0}], 0x1})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)

15m2.038005493s ago: executing program 4 (id=19):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x2)
capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7})
ioctl$VT_ACTIVATE(r0, 0x4b45, 0x3)

15m0.9554813s ago: executing program 4 (id=24):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/netstat\x00')
lseek(r1, 0x1000000, 0x0)

14m51.894474945s ago: executing program 4 (id=28):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x1, 0x30, 0x30, 0x700, @in6={0x1b, 0x4000, 0x0, @loopback, 0x10000bff}, @ib={0x1b, 0xd9, 0x100fff, {"4a50abf0c8ed50f638facd57de629163"}, 0x8000000000000001, 0x2, 0x1}}}, 0x118)

14m48.856803619s ago: executing program 4 (id=32):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e20, 0x0, @empty, 0x9}}, 0x0, 0x0, 0x3fc, 0x0, 0x32, 0x7}, 0x9c)
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000100)=0x7, 0x4)
bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x80000, @loopback}, 0x1c)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050073000004000000080000000b0000000000", @ANYRES32, @ANYBLOB, @ANYRES32=r1, @ANYRES32, @ANYRES8=r2], 0x50)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@map=r3, 0x4, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

14m44.063046114s ago: executing program 32 (id=21):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x4c}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0xc)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

14m32.751753823s ago: executing program 33 (id=32):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e20, 0x0, @empty, 0x9}}, 0x0, 0x0, 0x3fc, 0x0, 0x32, 0x7}, 0x9c)
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000100)=0x7, 0x4)
bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x80000, @loopback}, 0x1c)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050073000004000000080000000b0000000000", @ANYRES32, @ANYBLOB, @ANYRES32=r1, @ANYRES32, @ANYRES8=r2], 0x50)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@map=r3, 0x4, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

14m4.212526742s ago: executing program 2 (id=93):
mount$tmpfs(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000280), 0x2000001, &(0x7f0000000080)=ANY=[@ANYBLOB='fscontext=unconfined_u,fscontext', @ANYRES16])

14m3.710400435s ago: executing program 2 (id=95):
r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000200)={r1, r1, 0x10, 0x0, 0x0, 0x31, 0x40, 0x458, 0x0, 0x0, 0x1, 0x4, 'syz1\x00'})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)

14m2.170172386s ago: executing program 2 (id=98):
socket(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = syz_open_dev$dri(0x0, 0x0, 0x0)
r1 = syz_open_dev$dri(0x0, 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r2=>0x0], 0x0, 0x0, 0x0, 0x1})
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x0, <r4=>0xffffffffffffffff})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r4})

14m1.217950706s ago: executing program 2 (id=101):
r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0xad41, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0)
mount$fuse(0x0, 0x0, &(0x7f0000000040), 0x1810800, &(0x7f0000000200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}})
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x600400, 0x29)
statx(r2, 0x0, 0x1000, 0x7ff, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

14m0.818512991s ago: executing program 2 (id=103):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
getrlimit(0xc, &(0x7f0000000300))
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
socket$netlink(0x10, 0x3, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x2)
mount$tmpfs(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000280), 0x2000001, &(0x7f0000000080)=ANY=[@ANYBLOB='fscontext=unconfined_u,fscontext', @ANYRES16])
write(r3, &(0x7f00000008c0)="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", 0x8d1)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x78, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb}, {0x0, 0xfff3}, {0xd, 0x300}}, [@filter_kind_options=@f_flow={{0x9}, {0x48, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0xc1f5}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_ACT={0x34, 0x9, 0x0, 0x1, [@m_csum={0x30, 0x6, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)

13m57.731920656s ago: executing program 2 (id=106):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000040)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x0, 0x0)
recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r5 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r5, &(0x7f0000000000), 0x10)
setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, 0x0, 0x0)

13m40.214138024s ago: executing program 34 (id=106):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000040)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x0, 0x0)
recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r5 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r5, &(0x7f0000000000), 0x10)
setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, 0x0, 0x0)

11m55.82565265s ago: executing program 0 (id=247):
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000000)={0x80, 0x40000105, 0x0, 0x0})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

11m54.070152149s ago: executing program 0 (id=249):
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="8580f83288e1", @broadcast, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x1, 0x5, 0x1c, 0x67, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x11, 0x5, 0x0, @loopback}}}}}, 0x0)
r0 = socket$inet(0x2, 0x3, 0x24)
setsockopt$inet_msfilter(r0, 0x0, 0x23, &(0x7f0000004b00)=ANY=[@ANYBLOB="e0000808"], 0x10)

11m52.708418224s ago: executing program 0 (id=251):
getsockopt(0xffffffffffffffff, 0x200000000114, 0x2720, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x78bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}, @IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

11m50.636263426s ago: executing program 0 (id=252):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='cubic', 0x5)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2401}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024)
sendto$inet(r0, &(0x7f0000000180)="89", 0x1, 0x4c041, 0x0, 0x0)

11m47.442363192s ago: executing program 0 (id=254):
r0 = socket$inet6_icmp(0xa, 0x2, 0x3a)
bind$inet6(r0, 0x0, 0x0)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @mcast2, 0x1009}, 0x1c)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x8, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2, {[], @echo_reply={0x81, 0x0, 0x0, 0x2, 0x4}}}}}}, 0x0)

11m46.879705078s ago: executing program 0 (id=255):
gettid()
socket$inet(0x2b, 0x801, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01)
ioctl$EVIOCGRAB(r2, 0x40044590, 0x0)
io_setup(0x81, &(0x7f0000000380))
eventfd2(0x2, 0x80800)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0)
r3 = userfaultfd(0x801)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140))
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})

11m29.272529215s ago: executing program 35 (id=255):
gettid()
socket$inet(0x2b, 0x801, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01)
ioctl$EVIOCGRAB(r2, 0x40044590, 0x0)
io_setup(0x81, &(0x7f0000000380))
eventfd2(0x2, 0x80800)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0)
r3 = userfaultfd(0x801)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140))
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})

11m10.932853486s ago: executing program 3 (id=275):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000200)=""/85, 0x1000, 0x4000000}, 0x23)

11m6.175669764s ago: executing program 3 (id=278):
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00')
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240)={0x80000011})

11m4.143000922s ago: executing program 3 (id=280):
openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}, {&(0x7f00000005c0)}], 0x3}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)}}], 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0x6, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0xb, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0x9000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x4, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0xf3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x4, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x7, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]})
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

11m2.930051336s ago: executing program 3 (id=283):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x3)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x11e)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0), 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x24004810}, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r4, &(0x7f0000001a80)=[{{&(0x7f0000000080)={0xa, 0x4e24, 0x1ff, @private2={0xfc, 0x2, '\x00', 0x8}, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000200)="b87337", 0x3}], 0x1}}, {{&(0x7f0000000540)={0xa, 0x4e21, 0x7, @dev={0xfe, 0x80, '\x00', 0x19}, 0x5}, 0x1c, &(0x7f0000001640)=[{&(0x7f0000000580)="d1", 0x1}], 0x1}}], 0x2, 0x40)

11m0.422723296s ago: executing program 3 (id=285):
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0xc0189436, 0x0)
sendmmsg$inet6(r1, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)}], 0x1}}], 0x2, 0x1c000)
write$cgroup_freezer_state(r0, 0x0, 0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r3, 0xfffffffc)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@nombcache}, {@dioread_lock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4c}}, {@nouid32}, {@grpquota}, {@bh}, {@inlinecrypt}]}, 0x1, 0x46b, &(0x7f0000000740)="$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")
syz_open_dev$tty1(0xc, 0x4, 0x2)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
socket$inet_mptcp(0x2, 0x1, 0x106)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r7, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r5, 0x1, 0x70bd2c, 0x1000000, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000)
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000002000/0x3000)=nil, 0x3000}, 0x7})
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
mkdirat(0xffffffffffffff9c, 0x0, 0x1e0)

10m54.557475293s ago: executing program 3 (id=291):
openat$kvm(0xffffffffffffff9c, 0x0, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$nullb(0xffffffffffffff9c, 0x0, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_io_uring_setup(0x29e, 0x0, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_LINKAT={0x27, 0x4c, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x400})
io_uring_enter(r2, 0x847ba, 0x4c86, 0x5, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100000000)

10m39.171324256s ago: executing program 36 (id=291):
openat$kvm(0xffffffffffffff9c, 0x0, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$nullb(0xffffffffffffff9c, 0x0, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_io_uring_setup(0x29e, 0x0, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_LINKAT={0x27, 0x4c, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x400})
io_uring_enter(r2, 0x847ba, 0x4c86, 0x5, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100000000)

6m27.892729405s ago: executing program 5 (id=557):
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = eventfd2(0x1, 0x80800)
ioctl$KVM_HYPERV_EVENTFD(r0, 0x4018aebd, &(0x7f0000000080)={0x4000, r1})
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x800)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000a80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x14013, &(0x7f0000000480)={[{@gid}, {@codepage={'codepage', 0x3d, 'cp860'}}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}]}, 0x4, 0x339, &(0x7f0000000140)="$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")
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0)

6m23.639019692s ago: executing program 5 (id=559):
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', <r1=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={0xffffffffffffffff, r1, 0x25, 0x0, @void}, 0x10)
r2 = socket(0x10, 0x803, 0x0)
socket(0x2, 0xa, 0x300)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}})
unshare(0x62040200)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800})

6m21.398671023s ago: executing program 5 (id=561):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f0000000300)={[{@jqfmt_vfsold}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@orlov}, {@noload}, {@delalloc}, {@mblk_io_submit}, {@commit={'commit', 0x3d, 0x3}}, {@noblock_validity}, {@lazytime}, {@init_itable_val={'init_itable', 0x3d, 0x1}}]}, 0xfa, 0x477, &(0x7f0000001380)="$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")

6m19.335278882s ago: executing program 5 (id=562):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, 0x0)

6m17.774590855s ago: executing program 5 (id=564):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f0000000300)={[{@orlov}]}, 0x1, 0x571, &(0x7f0000001140)="$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")
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000240)={{}, {}, [], {0x4, 0x2}}, 0x24, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x20240, 0x0)
symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00')

6m15.908707325s ago: executing program 5 (id=567):
socket(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0xc831, r0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

6m0.395320356s ago: executing program 37 (id=567):
socket(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0xc831, r0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

13.845814163s ago: executing program 8 (id=814):
syz_mount_image$nilfs2(&(0x7f0000000a00), &(0x7f0000000a40)='./file0\x00', 0x0, &(0x7f0000000a80), 0x1, 0xa01, &(0x7f00000014c0)="$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")
r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x2)
r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
flock(r1, 0x1)
r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
flock(r2, 0x2)
flock(r0, 0x2)
flock(r0, 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

12.716422366s ago: executing program 8 (id=816):
r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
flistxattr(r0, &(0x7f00000000c0)=""/55, 0x37)

12.21357302s ago: executing program 8 (id=817):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000680))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x6], 0x0, 0x8340})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

11.875567676s ago: executing program 6 (id=818):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
timer_create(0x5, &(0x7f0000000040)={0x0, 0x2f, 0x1}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x2afc0, 0x1c1, 0x6}, 0x18)
r5 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0)
write$binfmt_register(r5, &(0x7f0000000140)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x3, 0x3a, 'M', 0x3a, '^', 0x3a, './file0', 0x3a, [0x46]}, 0x2a)
openat$dir(0xffffffffffffff9c, 0x0, 0x40240, 0x6)
socket(0x2c, 0x3, 0xfe)
setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x104, 0x4, 0x3c8, 0xe8, 0x1d0, 0x1d0, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@arp={@remote, @multicast2, 0x0, 0x0, 0x7, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x100}}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0xfc, {@empty, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@multicast, {[0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bond_slave_1\x00', 'ipvlan1\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418)
statx(0xffffffffffffffff, 0x0, 0x400, 0x200, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x10, 0x0, 0x0)
r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0)
write$uinput_user_dev(r6, &(0x7f0000000a00)={'syz1\x00', {0x3f, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x5, 0x6, 0x2, 0x400, 0x80400000, 0x0, 0x8, 0x0, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8003, 0x0, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x1, 0x200, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xfffbffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x1, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x6, 0x10000, 0x400, 0x7ffd, 0x3, 0x1, 0xf, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x8, 0x800, 0x7, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x411, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7, 0xed, 0x3], [0x401, 0x8000c584, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x400a, 0xc, 0x7, 0x0, 0xe8b, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x7, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x1956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0x8000ffff, 0x7, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x4c, 0x2, 0x763, 0xb, 0x402, 0x1, 0x9, 0x4001000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x2, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20006, 0x8a5, 0x86, 0x44, 0x409, 0x3, 0x4, 0x4, 0x10, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff9, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x136, 0x7fffffff]}, 0x45c)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007119b100000000008510000002000000850000002a00000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)

10.713752824s ago: executing program 8 (id=819):
r0 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x770d3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0)
r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0)
ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0)
socket$kcm(0x21, 0x2, 0x2)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="10000000001000003c0012800b000100697036746e6c00002c000280140003002001000000"], 0x5c}}, 0x0)

9.375694864s ago: executing program 6 (id=820):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000080)={[{@usebackuproot}, {@nodatasum}, {@ssd_spread}, {@user_subvol_rm}, {@flushoncommit}, {@compress_force}, {@acl}, {@nodiscard}]}, 0xfb, 0x50f9, &(0x7f0000005140)="$eJzs3U+IVWUfB/Dnzp1x5lVw7isEtsoikGrh4CYioqtMUFF0y8VgBE4tgnThJEi0EMQW/Vt4S4paSK6kFsksjKA2LqQwArehYS7cKAaSi3Yac8957pz7HO+5d0ZtTD8fmTnnOb/zPOe5l7O43+uccwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACEEF74/bNDVfVT16bPnJtp7jywZebyvul1p0OodbbX8vqOrc++8ua2HS9OxA6zL2fLRqPfkFnX81ljVc/GhX69P6+HEMaSAer58pk1pVGLq3vKA1a6fnH30U17mxuPH27Xr146e7L80lkwsdITWCn5eXVh8Vxqdn6PJHt024VTr9Zzimb90xPuX3kRAMCSTLU6i+7H0fwjbre9P60n7WbSbift+AmhXWwsRzbuqn7z3JDWV2iezSwqjPedZ1LP3/9uu5X2T9pJ1FjCPHt3zSPNRL95ziX1lZonAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ3kkbdHH6qqn7o2febcTHPngS0zl/dNrzsdQqOzvZaVa6vfP9z869utxw78uPmr4xeef6ye94vL0cLO4be48sRkCG8UKhfisBfXhtDqLXSa4cty4a3OynOxAAAAwN3k/s7vkW47i4NjPe1aJ03WOv+iLCxev7j76Ka9zY3HD7frVy+dPbn88Vp9xmvecLxuu7H4UysE4xh/0/EW63HXPaVxqqUjpnn+8fNTf1f1L+X/RnX+j++c/A8AAMDNkP/TcaoNyv/fvfbHJ1X9S/l/Q88hS/k/zjjm/5GwvPwPAAAAd7Lbnf+bpXGqDcr/4y+NfV3Vv5T/p4bL/6PFaceNv8YJ75oMYWrQ1AEAAIA+4v+7L361EPN69s1BmtefevTguarxSvm/OVz+H7ulrwoAAAC4GUe+2P5wVb2U/1vD5f/x2zprAAAAYCne+XDig6p6Kf/PDpf/V+fL/MqHrNNP8a8QDk2GMLGwMpcVfg7tp7sFAAAA4BaJOf3PT3f+ULVfKf/PVd//P97pIF7/33P/v9L1/4VCdte/J90YAAAAgHtR+Xr+eHv87MkF/Z6/P+z1/w/87+CrVccv5f/9w+X/enF5K5//BwAAAMvwX3v+3/bSONUG3f//vo/e/aWqfyn/t4fL/3G5pvjyTtRq2fvz3mQI6xdW8rsJfhMPtyspzI8VCh2tpMe22CMvzI8XCh1zSY/NkyE8uLCyPyn8PxbaSeHK2rxwJCmcjoX8fOgWjiWFE/FM+3xtPt208H0s5BdYzMcrKNZ0L4lIelzt12OhcMMeZ7sHBwAAuKfE8Jxn2bHeZkij7Hxt0A6rB+0wMmiH+qAdRpMd0h37bQ+zvYW4vX1m49Ke/39kuPwf34pV2aLf9f8hXv+fP9ewe/3/bCw0ksJ8LLTSOwa04jGysPtxPEajlfe4sr5bAAAAgLta/F6gvsLzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5h715j5KruA4CffY734d2FpAqhUbJJahw38Xptk4daqqwpVSPSNOuGBlURxcZek8ULdmxTYhQiYxPRCEFpg5R8KMIoimo+QK1ARFJAuEhxhMojoioKIFBoDVEQKSWJSBOkUM3ee2bvnLvz8GONl/5+knfOzP887zw859475wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwP8Ph75y1d82iz/82/Oefu7Cicv2rrvw5WvOO/3xECZnH+/Iwh3919868fM7z71r731rbrvnyPkf7M3L5fEwUP3Tmd+5LtZ6ZGkI93aE0J0GVg5mgZ78/mCs712DIZwW5gK1ElP9WYm04fD9vhD2h7lArarv9YUwWAhc8MRDD95YTdzSF8KyEEIlbePZStZGXxo4qzcL9KeBbd1Z4FdvZGqB73ZmAThu8c1Qe9EfnKzPMDJ/uQavv54T1rE3Vzq8rpgYaZzvZ+sWuFMFvekDk8f1tJWqY0GU3h6HvNsWwbuttJ1v9rQVv0jl31DemAtVQufmqS0br5zZFR/pDGNjXY1qWqDn+alXv7TpaNKL5nUYOzByQl6HNz227M6uFZ969J6Vy1488KF9Lx1vN39U2KTF9EKrhPw1t2iex2jC58kiePuVviWN+tIVQtjy+d/7dLN4af4/0nz+H1/O8bazLnes9fWhbG4eHxmMiVeGsrk5AAAALBqLYa/ptrEHPlYoPlxJ6ivN/0fbO/4fD/nnk/lstIdCmJhN7BsO4YzZx7PAHbG5S4ZDeO9sarI+sC4JHArhnbOJFbWqkhJLYonRJPCToTwwkQQOx8BkEvhWDNycBK6LgYNJYFMMHEoC58ZAmK4fx+8P5eNoO9AXAxuyjXgwnoXwi6HYWrKtnqlVBQAAcILks8Oe+ruFcx2ON0OcXh7sa5UhnoHdMEMlqSGdwdamVQ1r6G5VQ2erGmrj3tN8+KWaO1rVXDoNo6M+w62//JvPhCZK8//x5vP/yjwd6Sgd/w9h/ezfmLszj8zU4hsm6zIAAAAAx2Hgf5//ZrN4af4/0d75/3GfSFchc3gk7obYOhzCeH0gq/YPy4HsqPdAHgAAAIDFoHY8vnYsfDq/zU7RTufT5fyTR5k/HvifmDd/76H7NzTrb2n+P9ne+f/99bdZJw7HXnxtOIQlhcAPYi+rgVmjMfDjj9cH8vEfjhvghlhVfmJCraobYokNMTCeBPY3KvHDWokz6gP5k1VrfF9tHNN5iUIAAAAATrq4OyAel4/n/7/vN2uualauNP/fcHTn/8/Og0un988MhLCqO4Su9IcBj/RnCwPGwGBHnnigP6urK63q2v4QzqkOLK3q+Xz9/+50jcEn+rKqYuCM9x149axq4pt9IawqBp783O0friZ2JYFa43/ZF8J7qqNNG//OkqzxnrTxry8J4d2FQK2qS5aEUG2sN63qoUp+HYO0qn+uhPC2QqBW1UcqIewOACxS8b/SzcUHd+6+euvGmZmpHQuYiPvw+8KW6ZmpsU3bZjZXGvRpc9LnumWMri2Pqd0r3zyTL1H02bvXD7aTrv1OcLzYVr4fv3TiYH4/fhfqmR3nmp66u2vTIX/g/eUmQuGbVKMhdy7wkPuLlcw9iaX6Y/7eMBCWXLlzasfYFzfu2rVjdfa33exrsr/xMFO2rVan26p/vr618fJouFpW4li31fJiJat2Xb591c7dV6+cvnzjpVOXTl2x+iNrxs8eXzv+0bNXVUc1nv1tMdTl81WdDPWN29sc1wkc6pndhUpOxqeGhITEYktsG1je9P/k0vx/e/P5f/zUiZ/8+foMjY7/j8TD/Nnjc4f5N8TA/naP/480OppfOzFgNAnsiYE9DvMDAADw1hAn+XFvZtwr/dMV33mxWbnS/H9Pe7//P0Hr/9eWrj+/0TL/K2KJ8Ubr/6fL/NfW/9/TaP3/dJn/2vr/+9+E9f+vrAWSTfIL6/8DAABvBSdv/f+Wy/unFwgoZWi5vH96gYBShpbL+Ld7gYCjXv//2f/8q/8OTZTm/ze3N/+3cD8AAACcOr78Z1f9TrN4af6/v735/8lf/y80Ov9/tFFgstHCgNb/AwAAYJFqtP7fyPX9FzcrV5r/H2xv/h9Pu+isyx1rfX0oW9MupGvavTJU+8kAAAAALA6dYWysp828dSujrjv2Np/KlwJtli56/k+OHN35/4fam//X/S7jpseW3dm14lOPvn7PymUvHvjQvpfmjv8DAAAAC6fd/RIAAAAAAAAAAAAAAMCb7/n/2Lu2Wbz0+/+wfvbxRr//j9f9i78veHtd7lhr6/X/8vsXfPKu3bNLFj4yFML7i4Gte7eeFvJr8y8vBh68aMU7qom9aYn7nzv3hWri4jTwiZWnv1ZNnJMENsRFEt+ZBuJVFV9bmgTi8or/ngbi9jiYBnrzwFeXZuPoSLfVTwezbdWRbqunB0MYLgRq2+rewayNjnSAtySB2gC/kAbiAP88D3SmvbprIOtVDAzGorcNZL0CAOCUFb8F9oQt0zNT4/ErfLw9s7v+NqpbsuzacrUdbTb/TL402WfvXj/YTror/S46d63xnlCpDmF16etqMUvH7ChPTC0tNt3bGwy51WpvnQ3KpY520/U2HlFfNqKxTdtmNve0HPja1lnWdLfMsro02Slm6ZzdpG3U0kZf2hhRm9umjS7H+51hbKwryfUHMTgS6rR6RbT7e/3iOn+NXgXFPFcc2ferZvWV5v8j7c3/K8VxvZZfDGBPvLLe3w1b5h8AAAAW1lfX/fob8d9nrn/4yWZ5S/P/0fbm/3EPVn4oONvbcShe/3/fcAizl9YfyQJ3xOYuGQ7hvbOpyVgiu6D++bHEeBa4I+4wWRFLbJisr2pJDBxMAj8ZygOHksDhGMj3UhwI+a6cvx8K4cOzqfX1JbbHEiNJ4NMxMJoExmJgPAksjYGJJPDy0jwwmQT+LQbCdP22untpvq0AAACORj7P6qm/G9J53sHuVhk6WmXob5Whs1WGSqsMjUYR7387ZuhJTl7pKGTqSWvtS2opZYgXwz/qfpUyhB/W50wLlpqO5x/UzjfoqM9w38e6K6GJ0vx/vL35f3/9bdb64Tj/n7v+Xxb4Qeze1+Kp46Mx8OOP1wfyHQOH42T3hlpVk3mJfNJ+QywxEQOjSWB7DEwkgQ3r88D+d9QH8pl2rfF9tcan8xKFAAAAAJx0cQdB3E0T5/+37fzKQLNypfn/RHvz/9jeQLGx62KtR5aGcG/HXG9qgZWDWSDuxxiMP49/12AIpxV2cNRKTPVnJXqThsP3+7JfqPemVX2vL/vxQbx/wRMPPXhjNXFLXwjLCntfam08W8na6EsDZ/Vmgf40sK07C8Q9P7XAdzuzABy32l7B+ILKT3WpGZm/XIPX31vlmqDp8Er7QOfJN99vrhZKaYdrvk+15uietqb7bzlhSm+PQ95ti/HdNuLdVvwilX9DeWMuVAmdm6e2bLxyZld8pPhL1pIFep6Lv1JtJ30CXod7jr23rVXSDownHx/j85eb/3XYEau76bFld3at+NSj96xc9uKBD+17qe1uNBB/KPzQNf86+KPC5l1olZC/5hbd58mkz5NF8d9A8u4e9bSFENa//PUbmsVL8//J9ub/3cntrF/HjblzOIQPFDbuI3Hz//Fw9jlYCGSfkm8rB7JD7v811PCTEwAAAE602u6O2v6C6fw2OyE8nSeX808eZf64v2Ji3vzt9rv/ry9a1ixemv9vaD7/X5J00/F/x/9ZII7/z+tU3xW9JH1gz3Htii5Vx4Jw/H9ep/q7zfH/eTn+7/j/fBz/b8Hx/3md6k9b6VvSdl+6Qggv/tEDTzeLl+b/29ub/1v/b/5F+2rr/21otP7f9kbr/+2x/h8AALCgGiw0l87zSqv3lTKkq/eVMrRcILDlEoPW/zvq9f9eOPPZ34QmSvP/Pe3N/+PLYaDY+mJZ/290fYOqbo6B7RYGBAAA4FTUaAcBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAb677/uF/NjeLP/zb855+7sKJy/auu/Dla847/fEQpmcf78jCHf3X3zrx8zvPvWvvfWtuu+fI+R+s5OV68tvfrcsda319KIT9hUcGY+KVoeqducAFn7xrd3c18chQCO8vBrbu3XpaNfGtoRCWFwMPXrTiHdXE3rTE/c+d+0I1cXEa+MTK01+rJs7JAx1pd/9xadbdjrS7Ny4NYbgQqHX3sqX1VdXa+NM80Jm28U+DWRsxMBiLfmMwayMGZmKJ6SUhrOoOoSut6uFKVlVXWtW/VLKqutKqvlwJ4ZwQQnda1XO9WVXd6cgf782qioEz3nfg1bOqif29IawqBp783O0fria+kARqjf9Fbwjvqb5k0sa/3ZM13pM2fktPCO8OIfSmJX7ZnZXoTUs83x3C2wqBWuOf7w5hd+AtIX741H2i7dx99daNMzNTOxYw0Zu31Re2TM9MjW3aNrO5kvSpkY5C+o1rj33sz7z6pU3V28/evX6wnXR3Xq5ntstreururj3Vex/71V+sZO75KNUf8/eGgbDkyp1TO8a+uHHXrh2rs7/tZl+T/e3Ko9m2Wr1YttXyYiWrdl2+fdXO3VevnL5846VTl05dsfoja8bPHl87/tGzV1VHNZ79PRFDvf3kD/XM7kIlJ+MDQEJCYrElOus+3cZP9Q/y0hf9uY72hMrsB3RpWlHM0jE7yhMx6HXHOOJj+Z7SckSrSxOHUpY182S5tj7L2tJkYq6WvizL7Pe60uSw2Fjn7CaN9zvD2FhXo+0wUn+3uHl/dhyb96l807WbBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4P/YgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24FgAAAAAQJi/dRg9GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHApAAD//7IeJCA=")
ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000001680)={{0x0, 0x8541}, 0x100, './file1\x00'})
r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x44800, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0xfffe82)
r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
syz_usb_connect(0x0, 0x3f, 0x0, 0x0)
ioctl$FITRIM(r1, 0xc4009420, &(0x7f0000000180)={0x5, 0x10000})
ioctl$BTRFS_IOC_QGROUP_CREATE(r1, 0xc400941b, 0x0)
capset(0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff)
ioctl$FS_IOC_GETFSMAP(r2, 0xc040583f, 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000640), 0x0, 0x22400)
r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x6042, 0x126)
sendfile(r4, r3, 0x0, 0x80000002)
r5 = open(&(0x7f0000000340)='./bus\x00', 0x14927e, 0x102)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r5, 0x0)
fallocate(r5, 0x0, 0x0, 0x1000f4)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000004540), 0xffffffffffffffff)
r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
preadv(r6, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r7 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0)
ioctl$LOOP_SET_STATUS64(r7, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x68245b64, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]})

9.030710484s ago: executing program 1 (id=821):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000042, &(0x7f0000000240)={[{@nombcache}, {@oldalloc}, {@inlinecrypt}, {@delalloc}, {@noload}, {@delalloc}, {@stripe={'stripe', 0x3d, 0x4}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@lazytime}]}, 0x3, 0x4ea, &(0x7f00000006c0)="$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")
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'})
r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r2, &(0x7f0000000680)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x2, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @default, @null]}, 0x40)
r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r3, &(0x7f00000000c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x1, @default}, 0x1c)
close_range(r0, 0xffffffffffffffff, 0x0)

7.061578365s ago: executing program 1 (id=822):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0x0, 0x1}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0)

5.855209989s ago: executing program 1 (id=823):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x3c}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x884)

5.762657943s ago: executing program 6 (id=824):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00004b0000/0x4000)=nil, &(0x7f00004b1000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0xc, 0xa0002f3})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0x200a, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_JOIN_MESH(r1, 0x0, 0x0)
io_uring_enter(r0, 0x2216, 0x7721, 0x16, 0x0, 0x3b)

4.832519591s ago: executing program 6 (id=825):
r0 = signalfd4(0xffffffffffffffff, &(0x7f00000003c0)={[0x1fffffffff]}, 0x8, 0x0)
flistxattr(r0, 0x0, 0x0)

4.639110468s ago: executing program 1 (id=826):
connect$unix(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

4.257278201s ago: executing program 6 (id=827):
r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@host})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, &(0x7f0000000440), 0x10)
connect$vsock_stream(r1, &(0x7f00000001c0)={0x28, 0x0, 0xffffffff, @local}, 0x10)
listen(r1, 0x5)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
accept4$unix(r1, 0x0, 0x0, 0x0)
getpgrp(0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r3 = open(0x0, 0x80ff, 0x88)
r4 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x186)
fcntl$setlease(r4, 0x400, 0x1)
fcntl$setlease(r3, 0x400, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$l2tp6(0xa, 0x2, 0x73)
pselect6(0x40, &(0x7f0000000000)={0x0, 0xfffffffffffffffe, 0xff, 0x3, 0x1000000, 0x8000, 0x4, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0xfffffffffffffff7}, 0x0, 0x0)

3.711646436s ago: executing program 1 (id=828):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
timer_create(0x5, &(0x7f0000000040)={0x0, 0x2f, 0x1}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x2afc0, 0x1c1, 0x6}, 0x18)
r5 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0)
write$binfmt_register(r5, &(0x7f0000000140)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x3, 0x3a, 'M', 0x3a, '^', 0x3a, './file0', 0x3a, [0x46]}, 0x2a)
openat$dir(0xffffffffffffff9c, 0x0, 0x40240, 0x6)
socket(0x2c, 0x3, 0xfe)
setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x104, 0x4, 0x3c8, 0xe8, 0x1d0, 0x1d0, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@arp={@remote, @multicast2, 0x0, 0x0, 0x7, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x100}}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0xfc, {@empty, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@multicast, {[0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bond_slave_1\x00', 'ipvlan1\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418)
statx(0xffffffffffffffff, 0x0, 0x400, 0x200, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x10, 0x0, 0x0)
r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0)
write$uinput_user_dev(r6, &(0x7f0000000a00)={'syz1\x00', {0x3f, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x5, 0x6, 0x2, 0x400, 0x80400000, 0x0, 0x8, 0x0, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8003, 0x0, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x1, 0x200, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xfffbffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x1, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x6, 0x10000, 0x400, 0x7ffd, 0x3, 0x1, 0xf, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x8, 0x800, 0x7, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x411, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7, 0xed, 0x3], [0x401, 0x8000c584, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x400a, 0xc, 0x7, 0x0, 0xe8b, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x7, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x1956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0x8000ffff, 0x7, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x4c, 0x2, 0x763, 0xb, 0x402, 0x1, 0x9, 0x4001000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x2, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20006, 0x8a5, 0x86, 0x44, 0x409, 0x3, 0x4, 0x4, 0x10, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff9, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x136, 0x7fffffff]}, 0x45c)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007119b100000000008510000002000000850000002a00000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)

1.235804781s ago: executing program 1 (id=829):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000200)={[{@noenospc_debug}, {@metadata_ratio={'metadata_ratio', 0x3d, 0x5}}, {@compress_force_algo={'compress-force', 0x3d, 'zlib'}}, {@usebackuproot}, {@nossd_spread}, {@autodefrag}, {@space_cache}, {@notreelog}]}, 0x3, 0x5145, &(0x7f0000005140)="$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")
r0 = open(&(0x7f0000000000)='./bus\x00', 0x4c37e, 0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]})
r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r2, 0x41009432, &(0x7f00000001c0))
fallocate(r0, 0x0, 0x2, 0x9000f4)

696.735566ms ago: executing program 6 (id=830):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', <r3=>0x0})
sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4d7e00000000000000002a00000008002f000000000005003600000000000c0005000000000200000000050037000000000008000200", @ANYRES32=r3, @ANYBLOB="06000600fe000000060004"], 0x50}, 0x4, 0x700000000000000, 0x0, 0x4}, 0x4040084)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000340)={'wpan0\x00', <r7=>0x0})
sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)={0x1c, r5, 0x701, 0x70bd2b, 0x0, {0x19}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r4)

666.670452ms ago: executing program 8 (id=831):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_INTERRUPT(r3, 0x4004ae86, &(0x7f00000003c0)=0x200)

0s ago: executing program 8 (id=832):
r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0xfffffffffffffffb, 0x48b01)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000080)=@urb_type_control={0x2, {}, 0xffffff78, 0x84, &(0x7f00000000c0)={0x4b5a9da54893e123, 0x1, 0x10, 0x4}, 0x8, 0x5, 0xa, 0x0, 0x6, 0x20000, 0x0})

kernel console output (not intermixed with test programs):

iscuous mode
[  784.494610][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  784.532322][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  784.651141][ T8978] bridge0: port 2(bridge_slave_1) entered blocking state
[  784.660857][ T8978] bridge0: port 2(bridge_slave_1) entered disabled state
[  784.679577][ T8978] bridge_slave_1: entered allmulticast mode
[  784.690279][ T8978] bridge_slave_1: entered promiscuous mode
[  784.974762][ T8978] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  785.309464][ T8978] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  785.373797][ T8998] bridge0: port 1(bridge_slave_0) entered blocking state
[  785.399880][ T8998] bridge0: port 1(bridge_slave_0) entered disabled state
[  785.416424][ T8998] bridge_slave_0: entered allmulticast mode
[  785.436146][ T8998] bridge_slave_0: entered promiscuous mode
[  785.452052][ T8998] bridge0: port 2(bridge_slave_1) entered blocking state
[  785.460481][ T8998] bridge0: port 2(bridge_slave_1) entered disabled state
[  785.478463][ T8998] bridge_slave_1: entered allmulticast mode
[  785.497095][ T8998] bridge_slave_1: entered promiscuous mode
[  785.574863][ T6000] bridge_slave_1: left allmulticast mode
[  785.581950][ T6000] bridge_slave_1: left promiscuous mode
[  785.648075][ T6000] bridge0: port 2(bridge_slave_1) entered disabled state
[  785.832173][ T6000] bridge_slave_0: left allmulticast mode
[  785.851840][ T6000] bridge_slave_0: left promiscuous mode
[  785.892283][ T6000] bridge0: port 1(bridge_slave_0) entered disabled state
[  786.050984][ T6000] bridge_slave_1: left allmulticast mode
[  786.118149][ T6000] bridge_slave_1: left promiscuous mode
[  786.151570][ T6000] bridge0: port 2(bridge_slave_1) entered disabled state
[  786.211824][ T6000] bridge_slave_0: left allmulticast mode
[  786.256873][ T6000] bridge_slave_0: left promiscuous mode
[  786.282369][ T6000] bridge0: port 1(bridge_slave_0) entered disabled state
[  787.136717][ T6000] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  787.164981][ T6000] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  787.191720][ T6000] bond0 (unregistering): Released all slaves
[  787.499187][ T6000] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  787.522504][ T6000] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  787.540301][ T6000] bond0 (unregistering): Released all slaves
[  787.656072][ T8998] debugfs: 'netdev@ffff88801bb76568' already exists in 'ref_tracker'
[  788.038558][ T8978] team0: Port device team_slave_0 added
[  788.146411][ T8998] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  788.170230][ T8998] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  788.245611][ T8978] team0: Port device team_slave_1 added
[  788.534541][ T8998] team0: Port device team_slave_0 added
[  788.654313][ T8998] team0: Port device team_slave_1 added
[  788.714952][ T8978] batman_adv: batadv0: Adding interface: batadv_slave_0
[  788.726455][ T8978] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  788.758334][ T8978] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  788.782247][ T8978] batman_adv: batadv0: Adding interface: batadv_slave_1
[  788.790404][ T8978] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  788.828250][ T8978] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  788.996146][ T8998] batman_adv: batadv0: Adding interface: batadv_slave_0
[  789.007040][ T8998] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  789.036188][ T8998] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  789.077983][ T6000] hsr_slave_0: left promiscuous mode
[  789.086532][ T6000] hsr_slave_1: left promiscuous mode
[  789.100700][ T6000] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  789.119945][ T6000] batman_adv: batadv0: Removing interface: batadv_slave_0
[  789.133964][ T6000] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  789.142299][ T6000] batman_adv: batadv0: Removing interface: batadv_slave_1
[  789.177662][ T6000] hsr_slave_0: left promiscuous mode
[  789.186728][ T6000] hsr_slave_1: left promiscuous mode
[  789.210764][ T6000] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  789.219989][ T6000] batman_adv: batadv0: Removing interface: batadv_slave_0
[  789.244912][ T6000] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  789.252465][ T6000] batman_adv: batadv0: Removing interface: batadv_slave_1
[  789.290204][ T6000] veth1_macvtap: left promiscuous mode
[  789.296249][ T6000] veth0_macvtap: left promiscuous mode
[  789.302089][ T6000] veth1_vlan: left promiscuous mode
[  789.310227][ T6000] veth0_vlan: left promiscuous mode
[  789.317789][ T6000] veth1_macvtap: left promiscuous mode
[  789.326824][ T6000] veth0_macvtap: left promiscuous mode
[  789.333669][ T6000] veth1_vlan: left promiscuous mode
[  789.339176][ T6000] veth0_vlan: left promiscuous mode
[  790.510538][ T6000] team0 (unregistering): Port device team_slave_1 removed
[  790.581807][ T6000] team0 (unregistering): Port device team_slave_0 removed
[  791.304716][ T6000] team0 (unregistering): Port device team_slave_1 removed
[  791.362907][ T6000] team0 (unregistering): Port device team_slave_0 removed
[  791.803899][ T8998] batman_adv: batadv0: Adding interface: batadv_slave_1
[  791.817105][ T8998] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  791.851006][ T8998] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  791.852439][ T9050] netlink: 'syz.6.598': attribute type 1 has an invalid length.
[  791.871016][ T8945] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  792.012951][ T8945] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  792.077518][ T8945] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  792.206193][ T8978] hsr_slave_0: entered promiscuous mode
[  792.239881][ T8978] hsr_slave_1: entered promiscuous mode
[  792.266610][ T8978] debugfs: 'hsr0' already exists in 'hsr'
[  792.279675][ T8978] Cannot create hsr debugfs directory
[  792.325771][ T8945] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  792.503351][ T9056] netlink: 'syz.6.599': attribute type 10 has an invalid length.
[  792.573543][ T9057] loop5: detected capacity change from 0 to 7
[  792.595289][ T9057] Dev loop5: unable to read RDB block 7
[  792.602579][ T9057]  loop5: AHDI p1
[  792.611510][ T9057] loop5: partition table partially beyond EOD, truncated
[  797.317375][   T30] libceph: connect (1)[c::]:6789 error -101
[  797.325111][   T30] libceph: mon0 (1)[c::]:6789 connect error
[  797.340202][ T8998] hsr_slave_0: entered promiscuous mode
[  797.378847][ T8998] hsr_slave_1: entered promiscuous mode
[  797.381286][ T8998] debugfs: 'hsr0' already exists in 'hsr'
[  797.381338][ T8998] Cannot create hsr debugfs directory
[  797.446456][ T9068] loop1: detected capacity change from 0 to 64
[  797.534577][ T9063] ceph: No mds server is up or the cluster is laggy
[  799.803803][ T9078] netlink: 'syz.1.606': attribute type 1 has an invalid length.
[  800.440989][ T9081] loop1: detected capacity change from 0 to 128
[  800.525000][ T9081] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[  800.640101][ T9081] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  800.751192][ T9081] ext2 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  800.814889][ T8945] 8021q: adding VLAN 0 to HW filter on device bond0
[  801.022916][ T9071] loop6: detected capacity change from 0 to 40427
[  801.124103][ T8761] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  801.126309][ T8945] 8021q: adding VLAN 0 to HW filter on device team0
[  801.227803][ T6003] bridge0: port 1(bridge_slave_0) entered blocking state
[  801.235403][ T6003] bridge0: port 1(bridge_slave_0) entered forwarding state
[  801.428980][ T6003] bridge0: port 2(bridge_slave_1) entered blocking state
[  801.436598][ T6003] bridge0: port 2(bridge_slave_1) entered forwarding state
[  801.668253][ T9088] netlink: 'syz.1.608': attribute type 10 has an invalid length.
[  801.723854][ T9089] loop5: detected capacity change from 0 to 7
[  801.770317][ T9089] Dev loop5: unable to read RDB block 7
[  801.776511][ T9089]  loop5: AHDI p1
[  801.780330][ T9089] loop5: partition table partially beyond EOD, truncated
[  801.955628][ T9088] 8021q: adding VLAN 0 to HW filter on device batadv0
[  801.969987][ T9088] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  802.293908][ T9091] netlink: 20 bytes leftover after parsing attributes in process `syz.6.609'.
[  804.695509][ T8978] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  804.824366][ T8978] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  805.095206][ T8978] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  806.195110][ T6002] Bluetooth: hci4: Frame reassembly failed (-84)
[  808.163509][ T5783] Bluetooth: hci4: command 0x1003 tx timeout
[  808.169806][ T5790] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  809.042538][ T8978] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  809.498932][ T8998] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  809.949319][ T8998] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  810.215407][ T9106] loop1: detected capacity change from 0 to 256
[  810.238784][ T8998] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  810.381158][ T8998] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  810.483312][ T9106] FAT-fs (loop1): Directory bread(block 64) failed
[  810.490034][ T9106] FAT-fs (loop1): Directory bread(block 65) failed
[  810.513685][ T9106] FAT-fs (loop1): Directory bread(block 66) failed
[  810.565333][ T9106] FAT-fs (loop1): Directory bread(block 67) failed
[  810.584485][ T9106] FAT-fs (loop1): Directory bread(block 68) failed
[  810.622579][ T9106] FAT-fs (loop1): Directory bread(block 69) failed
[  810.695768][ T9106] FAT-fs (loop1): Directory bread(block 70) failed
[  810.727627][ T9106] FAT-fs (loop1): Directory bread(block 71) failed
[  810.763390][ T9106] FAT-fs (loop1): Directory bread(block 72) failed
[  810.801956][ T9106] FAT-fs (loop1): Directory bread(block 73) failed
[  811.411739][ T8978] 8021q: adding VLAN 0 to HW filter on device bond0
[  812.892081][ T8945] 8021q: adding VLAN 0 to HW filter on device batadv0
[  813.432078][ T8978] 8021q: adding VLAN 0 to HW filter on device team0
[  813.699769][ T6003] bridge0: port 1(bridge_slave_0) entered blocking state
[  813.707474][ T6003] bridge0: port 1(bridge_slave_0) entered forwarding state
[  813.929271][ T6003] bridge0: port 2(bridge_slave_1) entered blocking state
[  813.937103][ T6003] bridge0: port 2(bridge_slave_1) entered forwarding state
[  814.198647][ T9123] netlink: 'syz.6.617': attribute type 10 has an invalid length.
[  814.255031][ T9124] loop5: detected capacity change from 0 to 7
[  814.269554][ T9124] Dev loop5: unable to read RDB block 7
[  814.276147][ T9124]  loop5: AHDI p1
[  814.279962][ T9124] loop5: partition table partially beyond EOD, truncated
[  814.454648][ T8998] 8021q: adding VLAN 0 to HW filter on device bond0
[  814.824350][ T8998] 8021q: adding VLAN 0 to HW filter on device team0
[  815.048942][ T6003] bridge0: port 1(bridge_slave_0) entered blocking state
[  815.056485][ T6003] bridge0: port 1(bridge_slave_0) entered forwarding state
[  815.196210][ T6003] bridge0: port 2(bridge_slave_1) entered blocking state
[  815.203765][ T6003] bridge0: port 2(bridge_slave_1) entered forwarding state
[  815.908810][ T9132] netlink: 20 bytes leftover after parsing attributes in process `syz.6.618'.
[  818.516286][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  818.575234][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  819.206916][ T8978] 8021q: adding VLAN 0 to HW filter on device batadv0
[  819.783866][ T8294] libceph: connect (1)[c::]:6789 error -101
[  819.790435][ T8294] libceph: mon0 (1)[c::]:6789 connect error
[  819.888779][ T8945] veth0_vlan: entered promiscuous mode
[  819.993055][ T9141] ceph: No mds server is up or the cluster is laggy
[  820.031424][ T9152] macvlan2: entered promiscuous mode
[  820.065801][ T9152] macvlan2: entered allmulticast mode
[  820.449831][ T8945] veth1_vlan: entered promiscuous mode
[  820.762324][ T9159] loop6: detected capacity change from 0 to 512
[  820.846090][ T8945] veth0_macvtap: entered promiscuous mode
[  820.948039][ T9159] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  821.044938][ T8945] veth1_macvtap: entered promiscuous mode
[  821.063503][ T9159] EXT4-fs warning (device loop6): dx_probe:837: inode #2: comm syz.6.623: Unimplemented hash flags: 0x0001
[  821.088564][ T9163] loop1: detected capacity change from 0 to 256
[  821.118703][ T9163] exfat: Deprecated parameter 'namecase'
[  821.178448][ T9163] exfat: Deprecated parameter 'utf8'
[  821.219837][ T9159] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.623: Corrupt directory, running e2fsck is recommended
[  821.359693][ T9163] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x22785e93, utbl_chksum : 0xe619d30d)
[  821.482307][ T8945] batman_adv: batadv0: Interface activated: batadv_slave_0
[  821.666866][ T8945] batman_adv: batadv0: Interface activated: batadv_slave_1
[  821.743941][ T1151] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  821.769484][ T1151] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  821.853028][ T1151] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  821.878233][ T1151] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  821.985055][ T6785] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  821.985508][ T8998] 8021q: adding VLAN 0 to HW filter on device batadv0
[  822.513693][   T30] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  822.707548][   T30] usb 2-1: Using ep0 maxpacket: 16
[  822.736531][ T8978] veth0_vlan: entered promiscuous mode
[  822.767338][   T30] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  822.823283][   T30] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  822.859794][   T30] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[  822.919032][   T30] usb 2-1: config 0 interface 0 has no altsetting 0
[  822.939028][   T30] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  822.960617][ T8978] veth1_vlan: entered promiscuous mode
[  822.988755][   T30] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  823.052326][   T30] usb 2-1: config 0 descriptor??
[  823.720999][ T8978] veth0_macvtap: entered promiscuous mode
[  823.890881][ T8978] veth1_macvtap: entered promiscuous mode
[  823.921869][   T30] hid (null): global environment stack underflow
[  823.991490][   T30] hid (null): invalid report_count 43732
[  824.025203][   T30] hid (null): invalid report_count 21441
[  824.217246][ T8978] batman_adv: batadv0: Interface activated: batadv_slave_0
[  824.252548][   T30] usb 2-1: USB disconnect, device number 2
[  824.327715][ T8978] batman_adv: batadv0: Interface activated: batadv_slave_1
[  824.497600][   T53] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  824.631659][   T53] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  824.703256][   T53] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  824.712373][   T53] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  824.893739][ T9199] netlink: 68 bytes leftover after parsing attributes in process `syz.6.627'.
[  827.251840][ T5783] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  827.273797][ T5783] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  827.287263][ T5783] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  827.308253][ T5783] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  827.334147][ T5783] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  827.521245][ T8998] veth0_vlan: entered promiscuous mode
[  827.718730][ T8998] veth1_vlan: entered promiscuous mode
[  829.566227][ T5783] Bluetooth: hci4: command tx timeout
[  831.471275][ T8998] veth0_macvtap: entered promiscuous mode
[  831.605477][ T5783] Bluetooth: hci4: command tx timeout
[  832.088150][ T8998] veth1_macvtap: entered promiscuous mode
[  833.589955][ T8998] batman_adv: batadv0: Interface activated: batadv_slave_0
[  833.702980][ T5783] Bluetooth: hci4: command tx timeout
[  833.781305][   T53] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  833.861704][ T8998] batman_adv: batadv0: Interface activated: batadv_slave_1
[  834.097381][ T5790] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  834.125202][ T5790] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  834.157176][ T5790] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  834.169158][   T53] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  834.200544][ T5790] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  834.223793][ T5790] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  834.707442][ T1014] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  834.861538][   T53] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  835.049754][ T1014] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  835.083080][ T1014] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  835.167717][   T53] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  835.330184][ T1014] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  835.519391][ T9209] chnl_net:caif_netlink_parms(): no params data found
[  835.764485][ T5790] Bluetooth: hci4: command tx timeout
[  835.881385][ T9261] loop1: detected capacity change from 0 to 512
[  836.196595][ T9261] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  836.291737][ T9261] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  836.323720][ T5790] Bluetooth: hci1: command tx timeout
[  836.469445][ T9261] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.634: corrupted xattr block 33: invalid ea_ino
[  836.544054][ T9266] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.634: corrupted xattr block 33: invalid ea_ino
[  836.893075][ T9265] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  837.745780][ T8761] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  838.153838][   T53] bridge_slave_1: left allmulticast mode
[  838.225075][   T53] bridge_slave_1: left promiscuous mode
[  838.277183][   T53] bridge0: port 2(bridge_slave_1) entered disabled state
[  838.385989][ T5783] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  838.413251][ T5783] Bluetooth: hci1: command tx timeout
[  838.431291][ T5783] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  838.441406][ T5783] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  838.476250][ T5783] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  838.497676][ T5783] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  838.583677][   T53] bridge_slave_0: left allmulticast mode
[  838.589618][   T53] bridge_slave_0: left promiscuous mode
[  838.664439][   T53] bridge0: port 1(bridge_slave_0) entered disabled state
[  840.513251][ T5783] Bluetooth: hci1: command tx timeout
[  840.563684][ T5783] Bluetooth: hci0: command tx timeout
[  841.089538][   T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  841.181281][   T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  841.208215][   T53] bond0 (unregistering): Released all slaves
[  841.766542][   T53] hsr_slave_0: left promiscuous mode
[  841.779161][   T53] hsr_slave_1: left promiscuous mode
[  841.796301][   T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  841.814601][ T9291] netlink: 'syz.1.639': attribute type 1 has an invalid length.
[  841.827679][   T53] batman_adv: batadv0: Removing interface: batadv_slave_0
[  841.840203][   T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  841.849937][   T53] batman_adv: batadv0: Removing interface: batadv_slave_1
[  841.882216][   T53] veth1_macvtap: left promiscuous mode
[  841.888406][   T53] veth0_macvtap: left promiscuous mode
[  841.898768][   T53] veth1_vlan: left promiscuous mode
[  841.904624][   T53] veth0_vlan: left promiscuous mode
[  842.564072][ T5783] Bluetooth: hci1: command tx timeout
[  842.643694][ T5783] Bluetooth: hci0: command tx timeout
[  842.761694][   T53] team0 (unregistering): Port device team_slave_1 removed
[  842.815091][   T53] team0 (unregistering): Port device team_slave_0 removed
[  843.144578][ T9291] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  843.302821][ T9209] bridge0: port 1(bridge_slave_0) entered blocking state
[  843.322434][ T9209] bridge0: port 1(bridge_slave_0) entered disabled state
[  843.349193][ T9209] bridge_slave_0: entered allmulticast mode
[  843.389067][ T9209] bridge_slave_0: entered promiscuous mode
[  843.586721][ T9300] netlink: 8 bytes leftover after parsing attributes in process `syz.6.642'.
[  843.620196][ T9209] bridge0: port 2(bridge_slave_1) entered blocking state
[  843.644142][ T9209] bridge0: port 2(bridge_slave_1) entered disabled state
[  843.651817][ T9209] bridge_slave_1: entered allmulticast mode
[  843.702613][ T9209] bridge_slave_1: entered promiscuous mode
[  843.823891][    T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  844.045503][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  844.061446][    T9] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  844.071443][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  844.077770][ T9209] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  844.086148][    T9] usb 2-1: config 0 descriptor??
[  844.318515][ T9307] loop6: detected capacity change from 0 to 64
[  844.370719][   T53] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  844.393544][ T9243] chnl_net:caif_netlink_parms(): no params data found
[  844.579767][    T9] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor
[  844.636940][    T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0003/input/input8
[  844.732204][ T5783] Bluetooth: hci0: command tx timeout
[  844.980272][ T9209] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  845.050477][    T9] keytouch 0003:0926:3333.0003: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0
[  845.093167][    T9] usb 2-1: USB disconnect, device number 3
[  845.740409][ T9313] fido_id[9313]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  846.019848][   T53] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  846.259421][ T9209] team0: Port device team_slave_0 added
[  846.379969][ T9209] team0: Port device team_slave_1 added
[  846.813020][ T5783] Bluetooth: hci0: command tx timeout
[  846.868407][   T53] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  849.184428][   T53] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  849.248563][ T9209] batman_adv: batadv0: Adding interface: batadv_slave_0
[  849.272534][ T9209] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  849.375833][ T9209] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  849.400700][ T9209] batman_adv: batadv0: Adding interface: batadv_slave_1
[  849.423145][ T9209] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  849.463044][ T9209] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  850.353432][ T9243] bridge0: port 1(bridge_slave_0) entered blocking state
[  850.378464][ T9243] bridge0: port 1(bridge_slave_0) entered disabled state
[  850.408641][ T9243] bridge_slave_0: entered allmulticast mode
[  850.431879][ T9243] bridge_slave_0: entered promiscuous mode
[  850.493919][ T9243] bridge0: port 2(bridge_slave_1) entered blocking state
[  850.533536][ T9243] bridge0: port 2(bridge_slave_1) entered disabled state
[  850.541525][ T9243] bridge_slave_1: entered allmulticast mode
[  850.603148][ T9243] bridge_slave_1: entered promiscuous mode
[  850.647643][ T9209] hsr_slave_0: entered promiscuous mode
[  850.723620][ T9209] hsr_slave_1: entered promiscuous mode
[  851.277568][   T53] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  851.366754][ T9243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  851.596122][   T53] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  851.682408][ T9243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  851.813304][ T9274] chnl_net:caif_netlink_parms(): no params data found
[  852.041763][   T53] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  852.235913][ T9243] team0: Port device team_slave_0 added
[  852.380336][   T53] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  852.457041][ T9243] team0: Port device team_slave_1 added
[  852.937412][ T9369] netlink: 'syz.1.649': attribute type 1 has an invalid length.
[  853.163018][ T9243] batman_adv: batadv0: Adding interface: batadv_slave_0
[  853.171489][ T9243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  853.208141][ T9243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  853.231428][ T9243] batman_adv: batadv0: Adding interface: batadv_slave_1
[  853.263233][ T9243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  853.323070][ T9243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  853.944834][ T9377] loop1: detected capacity change from 0 to 1024
[  853.966639][ T9377] EXT4-fs: Ignoring removed oldalloc option
[  854.047081][ T9377] EXT4-fs: Ignoring removed bh option
[  854.189245][ T9377] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  854.515296][ T8761] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  854.648493][   T53] bridge_slave_1: left allmulticast mode
[  854.657270][   T53] bridge_slave_1: left promiscuous mode
[  854.669022][   T53] bridge0: port 2(bridge_slave_1) entered disabled state
[  854.728095][   T53] bridge_slave_0: left allmulticast mode
[  854.743126][   T53] bridge_slave_0: left promiscuous mode
[  854.749725][   T53] bridge0: port 1(bridge_slave_0) entered disabled state
[  854.798528][   T53] bridge_slave_1: left allmulticast mode
[  854.823170][   T53] bridge_slave_1: left promiscuous mode
[  854.829984][   T53] bridge0: port 2(bridge_slave_1) entered disabled state
[  854.883702][   T53] bridge_slave_0: left allmulticast mode
[  854.889920][   T53] bridge_slave_0: left promiscuous mode
[  854.913647][   T53] bridge0: port 1(bridge_slave_0) entered disabled state
[  857.274215][   T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  857.348719][   T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  857.431514][   T53] bond0 (unregistering): Released all slaves
[  857.649659][ T9387] loop1: detected capacity change from 0 to 512
[  857.777231][ T9387] EXT4-fs (loop1): 1 truncate cleaned up
[  857.827814][ T9387] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  857.861075][   T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  857.943184][   T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  857.974751][   T53] bond0 (unregistering): Released all slaves
[  858.141500][ T9274] bridge0: port 1(bridge_slave_0) entered blocking state
[  858.208298][ T9274] bridge0: port 1(bridge_slave_0) entered disabled state
[  858.233343][ T9274] bridge_slave_0: entered allmulticast mode
[  858.277547][ T9274] bridge_slave_0: entered promiscuous mode
[  858.310575][ T9274] bridge0: port 2(bridge_slave_1) entered blocking state
[  858.318758][ T9274] bridge0: port 2(bridge_slave_1) entered disabled state
[  858.328228][ T9274] bridge_slave_1: entered allmulticast mode
[  858.338765][ T9274] bridge_slave_1: entered promiscuous mode
[  858.417984][ T9243] hsr_slave_0: entered promiscuous mode
[  858.430609][ T9243] hsr_slave_1: entered promiscuous mode
[  858.450017][ T9243] debugfs: 'hsr0' already exists in 'hsr'
[  858.468623][ T9243] Cannot create hsr debugfs directory
[  859.506328][   T53] hsr_slave_0: left promiscuous mode
[  859.523886][   T53] hsr_slave_1: left promiscuous mode
[  859.536317][   T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  859.544659][   T53] batman_adv: batadv0: Removing interface: batadv_slave_0
[  859.561850][   T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  859.574628][   T53] batman_adv: batadv0: Removing interface: batadv_slave_1
[  859.619220][   T53] hsr_slave_0: left promiscuous mode
[  859.636254][   T53] hsr_slave_1: left promiscuous mode
[  859.648877][   T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  859.657805][   T53] batman_adv: batadv0: Removing interface: batadv_slave_0
[  859.676480][   T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  859.691927][   T53] batman_adv: batadv0: Removing interface: batadv_slave_1
[  859.749376][   T53] veth1_macvtap: left promiscuous mode
[  859.760491][   T53] veth0_macvtap: left promiscuous mode
[  859.781532][   T53] veth1_vlan: left promiscuous mode
[  859.787453][   T53] veth0_vlan: left promiscuous mode
[  859.803517][   T53] veth1_macvtap: left promiscuous mode
[  859.809893][   T53] veth0_macvtap: left promiscuous mode
[  859.838844][   T53] veth1_vlan: left promiscuous mode
[  859.846496][   T53] veth0_vlan: left promiscuous mode
[  861.442883][ T5783] Bluetooth: hci5: command 0x0406 tx timeout
[  861.618633][   T30] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  861.783004][   T30] usb 7-1: Using ep0 maxpacket: 8
[  861.810830][   T30] usb 7-1: config 0 has an invalid interface number: 31 but max is 0
[  861.840876][   T30] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  861.895081][   T30] usb 7-1: config 0 has no interface number 0
[  861.916380][   T30] usb 7-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  861.943268][   T30] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  861.951587][   T30] usb 7-1: Product: syz
[  861.958078][   T30] usb 7-1: Manufacturer: syz
[  861.968228][   T30] usb 7-1: SerialNumber: syz
[  861.986285][   T30] usb 7-1: config 0 descriptor??
[  862.218858][   T30] uvcvideo 7-1:0.31: Found UVC 0.04 device syz (046d:08c3)
[  862.237526][   T30] uvcvideo 7-1:0.31: No valid video chain found.
[  862.294955][   T53] team0 (unregistering): Port device team_slave_1 removed
[  862.354878][   T53] team0 (unregistering): Port device team_slave_0 removed
[  862.421628][ T5829] usb 7-1: USB disconnect, device number 5
[  863.279943][   T53] team0 (unregistering): Port device team_slave_1 removed
[  863.331100][   T53] team0 (unregistering): Port device team_slave_0 removed
[  864.061532][ T9274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  864.116995][ T9274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  864.552482][ T9274] team0: Port device team_slave_0 added
[  864.660018][ T9274] team0: Port device team_slave_1 added
[  864.990336][ T9274] batman_adv: batadv0: Adding interface: batadv_slave_0
[  865.004531][ T9274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  865.037837][ T9274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  865.070509][ T9274] batman_adv: batadv0: Adding interface: batadv_slave_1
[  865.085115][ T9274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  865.124135][ T9274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  865.448161][ T9209] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  865.478807][ T9209] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  865.665639][ T9209] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  865.788797][ T9274] hsr_slave_0: entered promiscuous mode
[  865.798899][ T9274] hsr_slave_1: entered promiscuous mode
[  865.817118][ T9274] debugfs: 'hsr0' already exists in 'hsr'
[  865.833551][ T9274] Cannot create hsr debugfs directory
[  865.843894][ T9209] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  866.488686][ T8761] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  866.915253][ T9446] netlink: 'syz.1.657': attribute type 1 has an invalid length.
[  867.363879][ T9243] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  867.455344][ T9243] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  867.651891][ T9243] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  867.887977][ T9243] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  868.461924][ T9209] 8021q: adding VLAN 0 to HW filter on device bond0
[  868.506131][ T9464] loop6: detected capacity change from 0 to 512
[  868.545127][ T9464] EXT4-fs: Ignoring removed mblk_io_submit option
[  868.685442][ T9464] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  868.718521][ T9464] ext4 filesystem being mounted at /204/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  869.016479][ T9209] 8021q: adding VLAN 0 to HW filter on device team0
[  869.107327][ T6785] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  869.195468][ T9274] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  869.262402][   T63] bridge0: port 1(bridge_slave_0) entered blocking state
[  869.270064][   T63] bridge0: port 1(bridge_slave_0) entered forwarding state
[  869.358391][ T9274] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  869.418513][ T9274] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  869.521548][   T63] bridge0: port 2(bridge_slave_1) entered blocking state
[  869.529135][   T63] bridge0: port 2(bridge_slave_1) entered forwarding state
[  869.571837][ T9274] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  870.198894][ T9243] 8021q: adding VLAN 0 to HW filter on device bond0
[  870.572336][ T9243] 8021q: adding VLAN 0 to HW filter on device team0
[  870.678539][ T7059] bridge0: port 1(bridge_slave_0) entered blocking state
[  870.686064][ T7059] bridge0: port 1(bridge_slave_0) entered forwarding state
[  870.842112][ T7059] bridge0: port 2(bridge_slave_1) entered blocking state
[  870.849725][ T7059] bridge0: port 2(bridge_slave_1) entered forwarding state
[  871.701415][ T9274] 8021q: adding VLAN 0 to HW filter on device bond0
[  871.989283][ T9274] 8021q: adding VLAN 0 to HW filter on device team0
[  872.121310][ T7335] bridge0: port 1(bridge_slave_0) entered blocking state
[  872.129070][ T7335] bridge0: port 1(bridge_slave_0) entered forwarding state
[  872.330554][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  872.338088][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  872.753563][ T9209] 8021q: adding VLAN 0 to HW filter on device batadv0
[  873.527123][ T9243] 8021q: adding VLAN 0 to HW filter on device batadv0
[  875.654623][ T9274] 8021q: adding VLAN 0 to HW filter on device batadv0
[  877.061561][ T9209] veth0_vlan: entered promiscuous mode
[  877.362765][ T9209] veth1_vlan: entered promiscuous mode
[  877.819698][ T9209] veth0_macvtap: entered promiscuous mode
[  877.999341][ T9209] veth1_macvtap: entered promiscuous mode
[  878.925515][ T9209] batman_adv: batadv0: Interface activated: batadv_slave_0
[  879.161239][ T9243] veth0_vlan: entered promiscuous mode
[  879.261559][ T9209] batman_adv: batadv0: Interface activated: batadv_slave_1
[  879.618278][ T9243] veth1_vlan: entered promiscuous mode
[  879.748005][ T6003] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  879.816078][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  879.842447][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  879.917911][ T6003] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  880.116635][ T1151] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  880.177242][ T1151] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  880.941145][ T9243] veth0_macvtap: entered promiscuous mode
[  881.069558][ T9243] veth1_macvtap: entered promiscuous mode
[  881.276414][ T9274] veth0_vlan: entered promiscuous mode
[  881.451204][ T9274] veth1_vlan: entered promiscuous mode
[  881.542066][ T9243] batman_adv: batadv0: Interface activated: batadv_slave_0
[  881.711346][ T9243] batman_adv: batadv0: Interface activated: batadv_slave_1
[  881.904716][   T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  881.933115][   T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  882.052214][   T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  882.124309][ T5999] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  882.348044][ T9563] netlink: 'syz.1.665': attribute type 1 has an invalid length.
[  882.695795][ T9274] veth0_macvtap: entered promiscuous mode
[  882.780129][ T9274] veth1_macvtap: entered promiscuous mode
[  883.107041][ T9274] batman_adv: batadv0: Interface activated: batadv_slave_0
[  883.288614][ T9274] batman_adv: batadv0: Interface activated: batadv_slave_1
[  883.425107][ T7335] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  883.468417][ T7335] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  883.510350][ T7335] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  883.587301][ T7335] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  887.553611][ T9625] netlink: 20 bytes leftover after parsing attributes in process `syz.6.667'.
[  887.694236][ T5790] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  887.703736][ T5790] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  887.714469][ T5790] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  887.728124][ T5790] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  887.745564][ T5790] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  889.843070][ T5790] Bluetooth: hci3: command tx timeout
[  890.669854][ T9627] chnl_net:caif_netlink_parms(): no params data found
[  891.715425][ T9652] loop6: detected capacity change from 0 to 256
[  891.906827][ T9652] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xfa924c08, utbl_chksum : 0xe619d30d)
[  891.926137][ T5790] Bluetooth: hci3: command tx timeout
[  892.510692][   T12] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  892.832006][ T6003] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  893.123877][   T12] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  893.519500][ T6003] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  894.033089][ T5790] Bluetooth: hci3: command tx timeout
[  894.152579][   T12] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  894.373165][ T9627] bridge0: port 1(bridge_slave_0) entered blocking state
[  894.443424][ T9627] bridge0: port 1(bridge_slave_0) entered disabled state
[  894.499187][ T9627] bridge_slave_0: entered allmulticast mode
[  894.570239][ T9627] bridge_slave_0: entered promiscuous mode
[  894.767781][   T12] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  894.910883][ T9627] bridge0: port 2(bridge_slave_1) entered blocking state
[  894.988116][ T9627] bridge0: port 2(bridge_slave_1) entered disabled state
[  895.052102][ T9627] bridge_slave_1: entered allmulticast mode
[  895.163148][ T9627] bridge_slave_1: entered promiscuous mode
[  895.831849][ T9627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  896.083402][ T5790] Bluetooth: hci3: command tx timeout
[  896.161822][ T9627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  896.977266][ T5783] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  896.991723][ T5783] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  897.001270][ T5783] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  897.067402][ T5783] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  897.088188][ T9627] team0: Port device team_slave_0 added
[  897.095105][ T5783] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  897.236928][ T9627] team0: Port device team_slave_1 added
[  897.623284][   T12] bridge_slave_1: left allmulticast mode
[  897.629126][   T12] bridge_slave_1: left promiscuous mode
[  897.687274][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  897.784036][   T12] bridge_slave_0: left allmulticast mode
[  897.803593][   T12] bridge_slave_0: left promiscuous mode
[  897.810160][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  898.278365][ T5790] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  898.313842][ T5790] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  898.326480][ T5790] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  898.358049][ T5790] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  898.374600][ T5790] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  899.154462][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  899.204933][ T5783] Bluetooth: hci4: command tx timeout
[  899.228345][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  899.311575][   T12] bond0 (unregistering): Released all slaves
[  899.358150][ T9627] batman_adv: batadv0: Adding interface: batadv_slave_0
[  899.378377][ T9627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  899.469419][ T9627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  900.488692][ T5783] Bluetooth: hci6: command tx timeout
[  900.653587][ T9627] batman_adv: batadv0: Adding interface: batadv_slave_1
[  900.701704][ T9627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  900.833196][ T9627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  901.285941][ T5783] Bluetooth: hci4: command tx timeout
[  901.783381][   T12] hsr_slave_0: left promiscuous mode
[  901.835511][   T12] hsr_slave_1: left promiscuous mode
[  901.882337][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  901.929368][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  902.089199][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  902.098677][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  902.579342][ T5783] Bluetooth: hci6: command tx timeout
[  902.749270][ T9711] netlink: 20 bytes leftover after parsing attributes in process `syz.1.675'.
[  903.362926][ T5783] Bluetooth: hci4: command tx timeout
[  903.667327][   T12] veth1_macvtap: left promiscuous mode
[  903.763606][   T12] veth0_macvtap: left promiscuous mode
[  903.769698][   T12] veth1_vlan: left promiscuous mode
[  903.783368][   T12] veth0_vlan: left promiscuous mode
[  904.643050][ T5783] Bluetooth: hci6: command tx timeout
[  905.185015][   T12] team0 (unregistering): Port device team_slave_1 removed
[  905.265134][   T12] team0 (unregistering): Port device team_slave_0 removed
[  905.473090][ T5783] Bluetooth: hci4: command tx timeout
[  906.743608][ T5783] Bluetooth: hci6: command tx timeout
[  906.781695][ T9719] binder: 9718:9719 ioctl 40046205 0 returned -22
[  907.079130][ T9627] hsr_slave_0: entered promiscuous mode
[  907.148748][ T9627] hsr_slave_1: entered promiscuous mode
[  909.827660][   T12] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  910.037362][ T9744] netlink: 24 bytes leftover after parsing attributes in process `syz.6.681'.
[  910.869164][   T12] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  911.471614][   T12] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  911.971489][   T12] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  913.508934][ T9691] chnl_net:caif_netlink_parms(): no params data found
[  914.148633][   T12] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  914.534280][ T9770] netlink: 20 bytes leftover after parsing attributes in process `syz.6.684'.
[  914.769711][ T9681] chnl_net:caif_netlink_parms(): no params data found
[  914.885817][   T12] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  915.144964][   T12] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  915.498201][   T12] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  915.799749][ T9627] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  915.945809][ T9627] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  916.135146][ T9627] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  916.518166][ T9627] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  918.697927][ T9691] bridge0: port 1(bridge_slave_0) entered blocking state
[  918.737733][ T9691] bridge0: port 1(bridge_slave_0) entered disabled state
[  918.763984][ T9691] bridge_slave_0: entered allmulticast mode
[  918.797934][ T9691] bridge_slave_0: entered promiscuous mode
[  918.952020][   T12] bridge_slave_1: left allmulticast mode
[  918.992854][   T12] bridge_slave_1: left promiscuous mode
[  918.999581][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  919.063319][   T12] bridge_slave_0: left allmulticast mode
[  919.069166][   T12] bridge_slave_0: left promiscuous mode
[  919.111807][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  919.182617][   T12] bridge_slave_1: left allmulticast mode
[  919.210184][   T12] bridge_slave_1: left promiscuous mode
[  919.223650][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  919.293905][   T12] bridge_slave_0: left allmulticast mode
[  919.299963][   T12] bridge_slave_0: left promiscuous mode
[  919.334292][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  920.274476][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  920.294671][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  920.329362][   T12] bond0 (unregistering): Released all slaves
[  920.634691][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  920.655993][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  920.698778][   T12] bond0 (unregistering): Released all slaves
[  920.724512][ T9691] bridge0: port 2(bridge_slave_1) entered blocking state
[  920.734779][ T9691] bridge0: port 2(bridge_slave_1) entered disabled state
[  920.746034][ T9691] bridge_slave_1: entered allmulticast mode
[  920.770432][ T9691] bridge_slave_1: entered promiscuous mode
[  920.845477][ T9681] bridge0: port 1(bridge_slave_0) entered blocking state
[  920.863888][ T9681] bridge0: port 1(bridge_slave_0) entered disabled state
[  920.871632][ T9681] bridge_slave_0: entered allmulticast mode
[  920.907676][ T9681] bridge_slave_0: entered promiscuous mode
[  921.151996][   T29] kauditd_printk_skb: 22 callbacks suppressed
[  921.152069][   T29] audit: type=1326 audit(1774469400.692:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9785 comm="syz.1.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca6699c799 code=0x7ffc0000
[  921.261653][ T9691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  921.274494][   T29] audit: type=1326 audit(1774469400.742:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9785 comm="syz.1.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fca6699c799 code=0x7ffc0000
[  921.305828][   T29] audit: type=1326 audit(1774469400.742:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9785 comm="syz.1.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca6699c799 code=0x7ffc0000
[  921.336850][   T29] audit: type=1326 audit(1774469400.752:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9785 comm="syz.1.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca6699c799 code=0x7ffc0000
[  921.393405][ T9681] bridge0: port 2(bridge_slave_1) entered blocking state
[  921.400874][ T9681] bridge0: port 2(bridge_slave_1) entered disabled state
[  921.433488][ T9681] bridge_slave_1: entered allmulticast mode
[  921.482589][   T29] audit: type=1326 audit(1774469400.752:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9785 comm="syz.1.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fca6699c799 code=0x7ffc0000
[  921.490414][ T9681] bridge_slave_1: entered promiscuous mode
[  921.540717][   T29] audit: type=1326 audit(1774469400.752:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9785 comm="syz.1.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca6699c799 code=0x7ffc0000
[  921.628140][ T9691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  924.784261][   T29] audit: type=1326 audit(1774469400.752:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9785 comm="syz.1.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca6699c799 code=0x7ffc0000
[  926.345941][   T29] audit: type=1326 audit(1774469400.752:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9785 comm="syz.1.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fca6699c799 code=0x7ffc0000
[  926.575150][   T29] audit: type=1326 audit(1774469400.752:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9785 comm="syz.1.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca6699c799 code=0x7ffc0000
[  926.673254][   T29] audit: type=1326 audit(1774469400.752:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9785 comm="syz.1.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fca6699c799 code=0x7ffc0000
[  926.728819][   T29] audit: type=1326 audit(1774469400.752:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9785 comm="syz.1.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca6699c799 code=0x7ffc0000
[  927.378554][ T9681] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  927.863962][ T9691] team0: Port device team_slave_0 added
[  928.116665][ T9691] team0: Port device team_slave_1 added
[  928.832030][ T9681] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  930.270435][   T12] hsr_slave_0: left promiscuous mode
[  930.313961][   T12] hsr_slave_1: left promiscuous mode
[  930.332155][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  931.028474][ T9808] netlink: 20 bytes leftover after parsing attributes in process `syz.1.692'.
[  931.276304][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  932.144240][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  932.151833][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  932.514037][   T12] hsr_slave_0: left promiscuous mode
[  932.530919][   T12] hsr_slave_1: left promiscuous mode
[  932.582911][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  932.609101][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  932.623588][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  932.631712][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  932.700041][   T12] veth1_macvtap: left promiscuous mode
[  932.710650][   T12] veth0_macvtap: left promiscuous mode
[  932.730532][   T12] veth1_vlan: left promiscuous mode
[  932.736442][   T12] veth0_vlan: left promiscuous mode
[  932.747201][   T12] veth1_macvtap: left promiscuous mode
[  932.753719][   T12] veth0_macvtap: left promiscuous mode
[  932.759791][   T12] veth1_vlan: left promiscuous mode
[  932.781479][   T12] veth0_vlan: left promiscuous mode
[  934.134484][   T12] team0 (unregistering): Port device team_slave_1 removed
[  934.193684][   T12] team0 (unregistering): Port device team_slave_0 removed
[  935.022914][   T12] team0 (unregistering): Port device team_slave_1 removed
[  935.076990][   T12] team0 (unregistering): Port device team_slave_0 removed
[  935.481943][ T9691] batman_adv: batadv0: Adding interface: batadv_slave_0
[  935.490560][ T9691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  935.531781][ T9691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  935.580732][ T9681] team0: Port device team_slave_0 added
[  935.614159][ T9691] batman_adv: batadv0: Adding interface: batadv_slave_1
[  935.621596][ T9691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  935.680518][ T9691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  935.841345][ T9681] team0: Port device team_slave_1 added
[  936.221627][ T9681] batman_adv: batadv0: Adding interface: batadv_slave_0
[  936.238230][ T9681] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  936.266487][ T9681] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  936.416418][ T9681] batman_adv: batadv0: Adding interface: batadv_slave_1
[  936.424568][ T9681] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  936.464380][ T9681] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  936.710353][ T9691] hsr_slave_0: entered promiscuous mode
[  936.733988][ T9691] hsr_slave_1: entered promiscuous mode
[  936.742615][ T9691] debugfs: 'hsr0' already exists in 'hsr'
[  936.781873][ T9691] Cannot create hsr debugfs directory
[  937.123738][ T9681] hsr_slave_0: entered promiscuous mode
[  937.139508][ T9681] hsr_slave_1: entered promiscuous mode
[  937.158793][ T9681] debugfs: 'hsr0' already exists in 'hsr'
[  937.182942][ T9681] Cannot create hsr debugfs directory
[  937.464022][ T9627] 8021q: adding VLAN 0 to HW filter on device bond0
[  937.581056][ T9627] 8021q: adding VLAN 0 to HW filter on device team0
[  937.957794][ T1151] bridge0: port 1(bridge_slave_0) entered blocking state
[  937.965492][ T1151] bridge0: port 1(bridge_slave_0) entered forwarding state
[  938.713893][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  938.721488][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  940.183168][   T30] usb 7-1: new full-speed USB device number 6 using dummy_hcd
[  940.410473][   T30] usb 7-1: config 0 has an invalid interface number: 237 but max is 0
[  940.442960][   T30] usb 7-1: config 0 has no interface number 0
[  940.482459][   T30] usb 7-1: config 0 interface 237 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  940.541212][   T30] usb 7-1: config 0 interface 237 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  940.618771][   T30] usb 7-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10
[  940.710828][   T30] usb 7-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  940.749691][   T30] usb 7-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.b6
[  940.799350][   T30] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  940.866431][   T30] usb 7-1: Product: syz
[  940.871452][   T30] usb 7-1: Manufacturer: syz
[  940.892523][   T30] usb 7-1: SerialNumber: syz
[  940.936582][   T30] usb 7-1: config 0 descriptor??
[  941.195824][   T30] usb 7-1: USB disconnect, device number 6
[  941.225363][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  941.231980][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  941.822153][ T9691] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  942.022912][ T9691] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  942.092143][ T9691] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  942.799830][ T9846] netlink: 20 bytes leftover after parsing attributes in process `syz.1.702'.
[  943.046790][ T9691] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  943.461522][ T9849] syzkaller0: entered promiscuous mode
[  943.477412][ T9849] syzkaller0: entered allmulticast mode
[  944.332162][ T9627] 8021q: adding VLAN 0 to HW filter on device batadv0
[  944.566308][ T9681] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  944.648136][ T9681] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  944.709145][ T9681] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  944.793796][ T9681] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  945.163878][ T9691] 8021q: adding VLAN 0 to HW filter on device bond0
[  945.434838][ T9691] 8021q: adding VLAN 0 to HW filter on device team0
[  945.536184][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[  945.543659][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[  945.737116][ T6003] bridge0: port 2(bridge_slave_1) entered blocking state
[  945.744732][ T6003] bridge0: port 2(bridge_slave_1) entered forwarding state
[  946.539197][ T9681] 8021q: adding VLAN 0 to HW filter on device bond0
[  946.791237][ T9681] 8021q: adding VLAN 0 to HW filter on device team0
[  946.899958][ T1151] bridge0: port 1(bridge_slave_0) entered blocking state
[  946.907794][ T1151] bridge0: port 1(bridge_slave_0) entered forwarding state
[  947.388546][ T6000] bridge0: port 2(bridge_slave_1) entered blocking state
[  947.396220][ T6000] bridge0: port 2(bridge_slave_1) entered forwarding state
[  948.334867][ T5790] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  948.346361][ T5790] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  948.359555][ T5790] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  948.380322][ T5790] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  948.394876][ T5790] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  949.450771][ T9691] 8021q: adding VLAN 0 to HW filter on device batadv0
[  950.485968][ T5783] Bluetooth: hci0: command tx timeout
[  952.579798][ T5783] Bluetooth: hci0: command tx timeout
[  953.702074][ T9681] 8021q: adding VLAN 0 to HW filter on device batadv0
[  954.680548][ T5783] Bluetooth: hci0: command tx timeout
[  955.008862][ T9918] netlink: 20 bytes leftover after parsing attributes in process `syz.1.711'.
[  955.104486][ T9882] chnl_net:caif_netlink_parms(): no params data found
[  955.267917][   T13] bridge_slave_1: left allmulticast mode
[  955.292060][   T13] bridge_slave_1: left promiscuous mode
[  955.318090][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  955.494510][   T13] bridge_slave_0: left allmulticast mode
[  955.500346][   T13] bridge_slave_0: left promiscuous mode
[  955.563758][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  955.744875][ T9924] netlink: 'syz.1.712': attribute type 1 has an invalid length.
[  956.334587][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  956.378054][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  956.408738][   T13] bond0 (unregistering): Released all slaves
[  956.733354][ T5783] Bluetooth: hci0: command tx timeout
[  956.993008][   T13] hsr_slave_0: left promiscuous mode
[  957.027458][   T13] hsr_slave_1: left promiscuous mode
[  957.081964][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  957.134723][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  957.289075][   T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  957.500274][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  957.529871][   T10] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  957.562816][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  957.607479][   T10] usb 2-1: config 0 descriptor??
[  957.798579][ T5790] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  957.815331][ T5790] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  957.833427][ T5790] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  957.873878][ T5790] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  957.898008][ T5790] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  958.105947][   T10] keytouch 0003:0926:3333.0004: fixing up Keytouch IEC report descriptor
[  958.158503][   T10] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0004/input/input9
[  958.369711][   T13] team0 (unregistering): Port device team_slave_1 removed
[  958.441297][   T10] keytouch 0003:0926:3333.0004: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0
[  958.487648][   T13] team0 (unregistering): Port device team_slave_0 removed
[  958.563752][   T10] usb 2-1: USB disconnect, device number 4
[  959.061698][ T9934] fido_id[9934]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  959.333409][ T9691] veth0_vlan: entered promiscuous mode
[  960.012928][ T5783] Bluetooth: hci1: command tx timeout
[  960.391271][ T5790] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  960.407467][ T5790] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  960.416981][ T5790] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  960.431841][ T5790] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  960.452495][ T5790] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  960.922848][ T9882] bridge0: port 1(bridge_slave_0) entered blocking state
[  960.943703][ T9882] bridge0: port 1(bridge_slave_0) entered disabled state
[  960.951407][ T9882] bridge_slave_0: entered allmulticast mode
[  960.969052][ T9882] bridge_slave_0: entered promiscuous mode
[  961.001531][ T9882] bridge0: port 2(bridge_slave_1) entered blocking state
[  961.221872][ T9882] bridge0: port 2(bridge_slave_1) entered disabled state
[  962.187173][ T5783] Bluetooth: hci1: command tx timeout
[  962.233986][ T9882] bridge_slave_1: entered allmulticast mode
[  962.763008][ T5783] Bluetooth: hci3: command tx timeout
[  964.202003][ T9882] bridge_slave_1: entered promiscuous mode
[  964.243350][ T5783] Bluetooth: hci1: command tx timeout
[  964.805311][ T5783] Bluetooth: hci3: command tx timeout
[  965.187655][ T9882] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  965.413826][ T9882] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  965.752978][   T30] usb 7-1: new full-speed USB device number 7 using dummy_hcd
[  965.858432][ T9882] team0: Port device team_slave_0 added
[  965.891258][ T9882] team0: Port device team_slave_1 added
[  965.953128][   T30] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  965.984076][   T30] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  966.030116][   T30] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[  966.061147][   T30] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  966.096408][   T30] usb 7-1: SerialNumber: syz
[  966.171923][   T30] usb 7-1: 0:2 : does not exist
[  966.323344][ T5783] Bluetooth: hci1: command tx timeout
[  966.603097][ T9959] netlink: 20 bytes leftover after parsing attributes in process `syz.1.719'.
[  966.771033][ T9956] 9p: Bad value for 'source'
[  966.882913][ T5783] Bluetooth: hci3: command tx timeout
[  966.948080][ T9882] batman_adv: batadv0: Adding interface: batadv_slave_0
[  966.978450][ T9882] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  967.073187][ T9882] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  967.210095][   T30] usb 7-1: USB disconnect, device number 7
[  967.243158][ T9882] batman_adv: batadv0: Adding interface: batadv_slave_1
[  967.250409][ T9882] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  967.323445][ T9882] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  967.573343][ T9968] netlink: 'syz.1.720': attribute type 1 has an invalid length.
[  967.622615][ T9933] udevd[9933]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  967.860493][ T9930] chnl_net:caif_netlink_parms(): no params data found
[  967.870957][ T9971] loop6: detected capacity change from 0 to 512
[  967.904038][ T9971] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  967.966724][ T9971] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  967.978098][ T9971] EXT4-fs (loop6): SIPHASH is not a valid default hash value
[  968.191730][ T9973] loop1: detected capacity change from 0 to 256
[  968.279651][ T9882] hsr_slave_0: entered promiscuous mode
[  968.296930][ T9882] hsr_slave_1: entered promiscuous mode
[  968.349676][   T35] bridge_slave_1: left allmulticast mode
[  968.368261][   T35] bridge_slave_1: left promiscuous mode
[  968.384058][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[  968.397169][ T9973] FAT-fs (loop1): Directory bread(block 64) failed
[  968.429220][   T35] bridge_slave_0: left allmulticast mode
[  968.441078][   T35] bridge_slave_0: left promiscuous mode
[  968.441484][ T9973] FAT-fs (loop1): Directory bread(block 65) failed
[  968.467895][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[  968.478078][ T9973] FAT-fs (loop1): Directory bread(block 66) failed
[  968.510401][ T9973] FAT-fs (loop1): Directory bread(block 67) failed
[  968.520250][ T9973] FAT-fs (loop1): Directory bread(block 68) failed
[  968.583561][ T9973] FAT-fs (loop1): Directory bread(block 69) failed
[  968.603095][ T9973] FAT-fs (loop1): Directory bread(block 70) failed
[  968.610340][ T9973] FAT-fs (loop1): Directory bread(block 71) failed
[  968.963659][ T5783] Bluetooth: hci3: command tx timeout
[  969.120028][ T9973] FAT-fs (loop1): Directory bread(block 72) failed
[  969.244313][ T9973] FAT-fs (loop1): Directory bread(block 73) failed
[  970.591518][   T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  970.678732][   T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  970.776950][   T35] bond0 (unregistering): Released all slaves
[  971.902139][   T35] hsr_slave_0: left promiscuous mode
[  971.935881][   T35] hsr_slave_1: left promiscuous mode
[  971.966166][   T35] batman_adv: batadv0: Removing interface: batadv_slave_0
[  972.000214][   T35] batman_adv: batadv0: Removing interface: batadv_slave_1
[  972.930839][   T35] team0 (unregistering): Port device team_slave_1 removed
[  973.033192][   T35] team0 (unregistering): Port device team_slave_0 removed
[  976.293350][ T9940] chnl_net:caif_netlink_parms(): no params data found
[  976.375773][ T9999] loop6: detected capacity change from 0 to 512
[  976.441824][ T9999] EXT4-fs: Ignoring removed nomblk_io_submit option
[  976.661210][ T9999] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  976.687276][ T9930] bridge0: port 1(bridge_slave_0) entered blocking state
[  976.706387][ T9999] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8840c01d, mo2=0102]
[  976.729006][ T9930] bridge0: port 1(bridge_slave_0) entered disabled state
[  976.750130][ T9999] EXT4-fs (loop6): couldn't mount RDWR because of unsupported optional features (80)
[  976.781993][ T9930] bridge_slave_0: entered allmulticast mode
[  976.819390][ T9999] EXT4-fs (loop6): Skipping orphan cleanup due to unknown ROCOMPAT features
[  976.888769][ T9930] bridge_slave_0: entered promiscuous mode
[  976.901362][ T9999] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  977.064983][ T9999] EXT4-fs warning (device loop6): dx_probe:861: inode #2: comm syz.6.726: dx entry: limit 65535 != root limit 120
[  977.140928][ T9999] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.726: Corrupt directory, running e2fsck is recommended
[  977.176250][ T9930] bridge0: port 2(bridge_slave_1) entered blocking state
[  977.217836][ T9930] bridge0: port 2(bridge_slave_1) entered disabled state
[  977.236637][ T9930] bridge_slave_1: entered allmulticast mode
[  977.284028][ T9930] bridge_slave_1: entered promiscuous mode
[  977.391754][ T6785] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  977.957020][T10006] netlink: 20 bytes leftover after parsing attributes in process `syz.6.727'.
[  978.062125][T10007] loop1: detected capacity change from 0 to 256
[  978.122569][T10007] exfat: Unknown parameter 'zero_size_dir'
[  978.299429][ T9930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  978.473131][   T30] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  978.716655][   T30] usb 2-1: config 0 has no interfaces?
[  978.737855][ T9930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  978.788089][   T30] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  978.818215][   T30] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  978.842972][   T30] usb 2-1: Product: syz
[  978.847339][   T30] usb 2-1: Manufacturer: syz
[  978.885895][   T30] usb 2-1: config 0 descriptor??
[  979.138680][   T30] usb 2-1: USB disconnect, device number 5
[  979.622297][ T9930] team0: Port device team_slave_0 added
[  979.828392][ T9930] team0: Port device team_slave_1 added
[  979.857497][T10013] loop6: detected capacity change from 0 to 256
[  979.969279][T10013] FAT-fs (loop6): Directory bread(block 64) failed
[  979.976448][T10013] FAT-fs (loop6): Directory bread(block 65) failed
[  979.986526][T10013] FAT-fs (loop6): Directory bread(block 66) failed
[  979.993497][T10013] FAT-fs (loop6): Directory bread(block 67) failed
[  980.000335][T10013] FAT-fs (loop6): Directory bread(block 68) failed
[  980.007282][T10013] FAT-fs (loop6): Directory bread(block 69) failed
[  980.014320][T10013] FAT-fs (loop6): Directory bread(block 70) failed
[  980.021010][T10013] FAT-fs (loop6): Directory bread(block 71) failed
[  980.028233][T10013] FAT-fs (loop6): Directory bread(block 72) failed
[  980.035090][T10013] FAT-fs (loop6): Directory bread(block 73) failed
[  980.336044][ T9930] batman_adv: batadv0: Adding interface: batadv_slave_0
[  980.418534][ T9930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  980.562848][ T9930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  980.902365][ T9930] batman_adv: batadv0: Adding interface: batadv_slave_1
[  981.069596][ T9930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  981.577215][ T9930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  982.017646][ T9940] bridge0: port 1(bridge_slave_0) entered blocking state
[  982.034959][ T9940] bridge0: port 1(bridge_slave_0) entered disabled state
[  982.056625][ T9940] bridge_slave_0: entered allmulticast mode
[  982.094273][ T9940] bridge_slave_0: entered promiscuous mode
[  982.142009][ T9940] bridge0: port 2(bridge_slave_1) entered blocking state
[  982.163452][ T9940] bridge0: port 2(bridge_slave_1) entered disabled state
[  982.188866][ T9940] bridge_slave_1: entered allmulticast mode
[  982.225877][ T9940] bridge_slave_1: entered promiscuous mode
[  982.779500][ T9930] hsr_slave_0: entered promiscuous mode
[  982.791304][ T9930] hsr_slave_1: entered promiscuous mode
[  982.823415][ T9930] debugfs: 'hsr0' already exists in 'hsr'
[  982.853403][ T9930] Cannot create hsr debugfs directory
[  983.106194][ T9940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  983.342391][ T9940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  983.471361][   T35] bridge_slave_1: left allmulticast mode
[  983.482509][   T35] bridge_slave_1: left promiscuous mode
[  983.508027][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[  983.552085][   T35] bridge_slave_0: left allmulticast mode
[  983.561826][   T35] bridge_slave_0: left promiscuous mode
[  983.591810][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[  983.976751][   T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  983.996427][   T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  984.018353][   T35] bond0 (unregistering): Released all slaves
[  984.106184][ T9882] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  984.149889][T10032] bridge0: port 1(bridge_slave_0) entered blocking state
[  984.157803][T10032] bridge0: port 1(bridge_slave_0) entered forwarding state
[  984.219958][ T9940] team0: Port device team_slave_0 added
[  984.280890][ T9882] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  984.382151][ T9940] team0: Port device team_slave_1 added
[  984.485385][   T35] hsr_slave_0: left promiscuous mode
[  984.547184][   T35] hsr_slave_1: left promiscuous mode
[  984.555859][   T35] batman_adv: batadv0: Removing interface: batadv_slave_0
[  984.607777][   T35] batman_adv: batadv0: Removing interface: batadv_slave_1
[  984.697530][   T35] veth0_vlan: left promiscuous mode
[  984.862240][T10042] netlink: 20 bytes leftover after parsing attributes in process `syz.1.736'.
[  986.255350][   T35] team0 (unregistering): Port device team_slave_1 removed
[  986.326622][   T35] team0 (unregistering): Port device team_slave_0 removed
[  986.686780][ T9882] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  986.719170][ T9882] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  988.209481][ T9940] batman_adv: batadv0: Adding interface: batadv_slave_0
[  988.493549][T10052] loop1: detected capacity change from 0 to 256
[  989.181356][ T9940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  990.167450][ T9940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  991.538845][ T9940] batman_adv: batadv0: Adding interface: batadv_slave_1
[  991.583918][ T9940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  991.676639][ T9940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  992.106511][T10063] loop6: detected capacity change from 0 to 512
[  992.238451][T10063] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  992.283527][T10063] ext4 filesystem being mounted at /242/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  992.885177][ T9940] hsr_slave_0: entered promiscuous mode
[  992.955662][ T9940] hsr_slave_1: entered promiscuous mode
[  993.065431][ T9940] debugfs: 'hsr0' already exists in 'hsr'
[  994.052845][ T9940] Cannot create hsr debugfs directory
[  995.646088][T10077] netlink: 20 bytes leftover after parsing attributes in process `syz.1.744'.
[  996.200150][ T6785] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  997.177040][T10093] loop1: detected capacity change from 0 to 1024
[  997.199411][T10093] EXT4-fs: Ignoring removed bh option
[  997.209082][T10093] EXT4-fs: Ignoring removed oldalloc option
[  997.217537][T10093] EXT4-fs: Ignoring removed nomblk_io_submit option
[  997.459849][T10093] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e841c01c, mo2=0003]
[  997.470329][T10093] System zones: 0-1, 3-36
[  997.591632][T10093] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1002.965046][ T9882] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1003.018852][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[ 1003.025599][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[ 1003.322511][T10102] netlink: 4 bytes leftover after parsing attributes in process `syz.6.748'.
[ 1003.540219][T10102] bond0: (slave bond_slave_0): Releasing backup interface
[ 1003.770919][ T9930] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1004.056348][ T9930] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1004.313935][ T9930] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1004.479289][ T9882] 8021q: adding VLAN 0 to HW filter on device team0
[ 1004.639112][ T9930] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1004.793111][    T9] usb 7-1: new full-speed USB device number 8 using dummy_hcd
[ 1004.971896][ T8761] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1005.027018][   T63] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1005.033764][    T9] usb 7-1: config 0 has an invalid interface number: 41 but max is 0
[ 1005.034564][   T63] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1005.057255][    T9] usb 7-1: config 0 has no interface number 0
[ 1005.074421][    T9] usb 7-1: config 0 interface 41 has no altsetting 0
[ 1005.155237][    T9] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[ 1005.202071][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1005.220208][    T9] usb 7-1: Product: syz
[ 1005.228054][    T9] usb 7-1: Manufacturer: syz
[ 1005.233611][    T9] usb 7-1: SerialNumber: syz
[ 1005.247432][    T9] usb 7-1: config 0 descriptor??
[ 1005.344489][   T63] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1005.351969][   T63] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1005.563758][T10113] loop1: detected capacity change from 0 to 256
[ 1005.588331][T10113] vfat: Unknown parameter 'iochÈÛ)Ät'
[ 1006.419063][T10116] nbd: must specify an index to disconnect
[ 1007.250001][    T9] CoreChips 7-1:0.41: probe with driver CoreChips failed with error -71
[ 1007.699269][ T9940] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1007.772099][ T9940] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1007.903630][ T9940] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 1007.999597][ T9940] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 1008.255219][    T9] usb 7-1: USB disconnect, device number 8
[ 1008.436704][T10001] udevd[10001]: setting owner of /dev/bus/usb/007/008 to uid=0, gid=0 failed: No such file or directory
[ 1008.705095][ T9930] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1009.262125][ T9930] 8021q: adding VLAN 0 to HW filter on device team0
[ 1009.280132][    T9] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[ 1009.370131][ T1014] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1009.377676][ T1014] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1009.470514][ T1014] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1009.478171][ T1014] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1009.505621][    T9] usb 7-1: Using ep0 maxpacket: 32
[ 1009.543679][    T9] usb 7-1: config 0 has an invalid interface number: 184 but max is 0
[ 1009.552092][    T9] usb 7-1: config 0 has no interface number 0
[ 1009.580942][    T9] usb 7-1: config 0 interface 184 has no altsetting 0
[ 1009.667033][    T9] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[ 1009.706326][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1009.739707][    T9] usb 7-1: Product: syz
[ 1009.754898][    T9] usb 7-1: Manufacturer: syz
[ 1009.763805][    T9] usb 7-1: SerialNumber: syz
[ 1009.792574][    T9] usb 7-1: config 0 descriptor??
[ 1010.057110][ T5790] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1010.080778][ T5790] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1010.090012][ T5790] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1010.115812][ T5790] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1010.137661][ T5790] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1010.679143][    T9] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71
[ 1010.800420][    T9] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1010.888736][    T9] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[ 1011.000108][    T9] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[ 1011.060102][    T9] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[ 1011.103810][    T9] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[ 1011.143021][    T9] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71
[ 1011.154554][T10147] netlink: 20 bytes leftover after parsing attributes in process `syz.1.753'.
[ 1011.257787][    T9] usb 7-1: USB disconnect, device number 9
[ 1011.806147][ T9940] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1012.118326][T10155] loop6: detected capacity change from 0 to 64
[ 1012.293362][ T5790] Bluetooth: hci4: command tx timeout
[ 1012.531172][ T9940] 8021q: adding VLAN 0 to HW filter on device team0
[ 1014.323777][ T5790] Bluetooth: hci4: command tx timeout
[ 1014.358731][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1014.366386][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1014.786993][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1014.794639][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1015.492568][ T9930] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1016.086501][ T5999] bridge_slave_1: left allmulticast mode
[ 1016.112946][ T5999] bridge_slave_1: left promiscuous mode
[ 1016.130226][ T5999] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1016.211065][ T5999] bridge_slave_0: left allmulticast mode
[ 1016.230625][ T5999] bridge_slave_0: left promiscuous mode
[ 1016.244249][ T5999] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1016.403077][ T5790] Bluetooth: hci4: command tx timeout
[ 1016.467012][T10179] loop6: detected capacity change from 0 to 256
[ 1016.559787][T10179] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x0726f69c, utbl_chksum : 0xe619d30d)
[ 1017.398223][T10184] exFAT-fs (loop6): start_clu is invalid cluster(0x0)
[ 1017.583595][   T29] audit: type=1800 audit(1774469496.962:46): pid=10184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.757" name="file1" dev="loop6" ino=1048647 res=0 errno=0
[ 1018.450375][ T5999] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1018.518100][ T5790] Bluetooth: hci4: command tx timeout
[ 1018.603116][ T5999] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1018.688095][ T5999] bond0 (unregistering): Released all slaves
[ 1020.684483][T10138] chnl_net:caif_netlink_parms(): no params data found
[ 1020.789361][ T5783] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1020.799297][ T5783] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1020.809567][ T5783] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1020.822406][ T5783] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1020.834597][ T5783] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1022.023006][T10123] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[ 1022.158584][ T5999] hsr_slave_0: left promiscuous mode
[ 1022.225479][T10204] loop1: detected capacity change from 0 to 256
[ 1022.232270][ T5999] hsr_slave_1: left promiscuous mode
[ 1022.238433][T10123] usb 7-1: Using ep0 maxpacket: 32
[ 1022.277680][T10204] exfat: Deprecated parameter 'utf8'
[ 1022.282192][T10123] usb 7-1: config 0 has an invalid interface number: 184 but max is 0
[ 1022.286299][ T5999] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1022.339589][T10123] usb 7-1: config 0 has no interface number 0
[ 1022.355782][ T5999] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1022.375382][T10123] usb 7-1: config 0 interface 184 has no altsetting 0
[ 1022.375573][T10204] exfat: Deprecated parameter 'utf8'
[ 1022.427074][T10123] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[ 1022.446827][T10204] exfat: Deprecated parameter 'namecase'
[ 1022.475204][T10123] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1022.515480][T10123] usb 7-1: Product: syz
[ 1022.546467][T10123] usb 7-1: Manufacturer: syz
[ 1022.578987][T10123] usb 7-1: SerialNumber: syz
[ 1022.621610][T10204] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d)
[ 1022.638677][T10123] usb 7-1: config 0 descriptor??
[ 1022.882905][ T5783] Bluetooth: hci0: command tx timeout
[ 1023.345552][ T5790] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1023.364424][ T5790] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1023.389141][ T5790] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1023.406640][ T5790] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1023.486517][ T5790] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1023.562510][T10123] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71
[ 1023.644877][T10123] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD
[ 1023.703254][T10123] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[ 1023.793170][T10123] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[ 1023.833101][T10123] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[ 1023.863199][T10123] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[ 1023.903850][T10123] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71
[ 1024.001290][T10123] usb 7-1: USB disconnect, device number 10
[ 1024.345356][ T5999] team0 (unregistering): Port device team_slave_1 removed
[ 1024.514699][ T5999] team0 (unregistering): Port device team_slave_0 removed
[ 1024.602949][T10215] loop6: detected capacity change from 0 to 1024
[ 1024.962990][ T5790] Bluetooth: hci0: command tx timeout
[ 1025.623461][ T5790] Bluetooth: hci6: command tx timeout
[ 1027.054106][ T5790] Bluetooth: hci0: command tx timeout
[ 1027.686890][ T5790] Bluetooth: hci6: command tx timeout
[ 1028.489735][T10138] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1028.544137][T10138] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1028.598012][T10138] bridge_slave_0: entered allmulticast mode
[ 1028.633514][T10138] bridge_slave_0: entered promiscuous mode
[ 1028.680030][T10236] loop1: detected capacity change from 0 to 1024
[ 1028.688542][T10138] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1028.738086][T10236] EXT4-fs: Ignoring removed bh option
[ 1028.746953][T10138] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1028.782516][T10138] bridge_slave_1: entered allmulticast mode
[ 1028.797759][T10236] EXT4-fs: Ignoring removed oldalloc option
[ 1028.820969][T10138] bridge_slave_1: entered promiscuous mode
[ 1028.837594][T10236] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1029.003873][T10239] netlink: 20 bytes leftover after parsing attributes in process `syz.6.765'.
[ 1029.040488][T10236] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e841c01c, mo2=0003]
[ 1029.091393][T10236] System zones: 0-1, 3-36
[ 1029.125847][ T5790] Bluetooth: hci0: command tx timeout
[ 1029.139405][T10194] chnl_net:caif_netlink_parms(): no params data found
[ 1029.201737][T10236] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1029.296798][T10236] EXT4-fs error (device loop1): ext4_iget_extra_inode:5025: inode #15: comm syz.1.766: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled
[ 1029.355783][T10246] EXT4-fs error (device loop1): ext4_iget_extra_inode:5025: inode #15: comm syz.1.766: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled
[ 1029.570431][ T8761] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1029.666006][T10138] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1029.762993][ T5790] Bluetooth: hci6: command tx timeout
[ 1029.874282][T10138] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1030.062288][T10253] loop1: detected capacity change from 0 to 1024
[ 1030.191651][T10253] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[ 1030.235012][T10253] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1030.370758][T10253] EXT4-fs error (device loop1): ext4_map_blocks:818: inode #15: block 3: comm syz.1.767: lblock 3 mapped to illegal pblock 3 (length 3)
[ 1030.455118][T10253] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[ 1030.468479][T10253] EXT4-fs (loop1): This should not happen!! Data will be lost
[ 1030.468479][T10253] 
[ 1030.712618][   T12] EXT4-fs error (device loop1): ext4_map_blocks:818: inode #15: block 8: comm kworker/u8:0: lblock 8 mapped to illegal pblock 8 (length 8)
[ 1030.779575][   T12] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[ 1030.786839][T10138] team0: Port device team_slave_0 added
[ 1030.799441][   T12] EXT4-fs (loop1): This should not happen!! Data will be lost
[ 1030.799441][   T12] 
[ 1030.832395][ T8761] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[ 1031.000036][T10138] team0: Port device team_slave_1 added
[ 1031.502110][T10138] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1031.536871][T10138] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1031.594026][T10138] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1031.668832][T10265] loop1: detected capacity change from 0 to 1024
[ 1031.700131][T10138] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1031.718408][T10138] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1031.818132][T10138] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1031.842856][ T5790] Bluetooth: hci6: command tx timeout
[ 1032.075650][T10207] chnl_net:caif_netlink_parms(): no params data found
[ 1032.324834][T10194] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1032.336737][T10194] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1032.372366][T10194] bridge_slave_0: entered allmulticast mode
[ 1032.427335][T10194] bridge_slave_0: entered promiscuous mode
[ 1032.670262][T10277] loop1: detected capacity change from 0 to 128
[ 1032.679176][T10194] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1032.743240][T10194] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1032.787942][T10194] bridge_slave_1: entered allmulticast mode
[ 1032.816947][T10194] bridge_slave_1: entered promiscuous mode
[ 1032.939288][T10281] syz.1.770: attempt to access beyond end of device
[ 1032.939288][T10281] loop1: rw=2049, sector=145, nr_sectors = 16 limit=128
[ 1032.997231][T10281] syz.1.770: attempt to access beyond end of device
[ 1032.997231][T10281] loop1: rw=2049, sector=169, nr_sectors = 8 limit=128
[ 1033.074484][T10281] syz.1.770: attempt to access beyond end of device
[ 1033.074484][T10281] loop1: rw=2049, sector=185, nr_sectors = 8 limit=128
[ 1033.485829][T10138] hsr_slave_0: entered promiscuous mode
[ 1033.524069][T10138] hsr_slave_1: entered promiscuous mode
[ 1033.588347][ T7303] kworker/u8:15: attempt to access beyond end of device
[ 1033.588347][ T7303] loop1: rw=8388609, sector=174, nr_sectors = 1 limit=128
[ 1033.640681][ T7303] Buffer I/O error on dev loop1, logical block 174, lost async page write
[ 1033.674743][T10194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1033.729029][T10194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1034.046378][T10291] loop1: detected capacity change from 0 to 1024
[ 1034.668986][T10194] team0: Port device team_slave_0 added
[ 1034.779809][T10293] loop1: detected capacity change from 0 to 256
[ 1034.892729][T10293] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x0726f69c, utbl_chksum : 0xe619d30d)
[ 1035.301593][T10194] team0: Port device team_slave_1 added
[ 1035.555765][T10207] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1035.635354][T10207] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1035.650880][T10207] bridge_slave_0: entered allmulticast mode
[ 1035.662915][T10207] bridge_slave_0: entered promiscuous mode
[ 1035.735563][T10297] exFAT-fs (loop1): start_clu is invalid cluster(0x0)
[ 1035.798315][   T29] audit: type=1800 audit(1774469515.390:47): pid=10297 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.772" name="file1" dev="loop1" ino=1048652 res=0 errno=0
[ 1036.256397][T10194] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1036.275279][T10194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1036.332747][T10194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1036.365424][T10194] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1036.388321][T10194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1036.454755][T10194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1036.717652][T10304] loop6: detected capacity change from 0 to 512
[ 1036.844152][T10304] EXT4-fs (loop6): blocks per group (255) and clusters per group (8192) inconsistent
[ 1036.899324][T10207] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1036.942954][T10207] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1036.977886][T10207] bridge_slave_1: entered allmulticast mode
[ 1037.019624][T10207] bridge_slave_1: entered promiscuous mode
[ 1037.676873][T10194] hsr_slave_0: entered promiscuous mode
[ 1037.715446][T10194] hsr_slave_1: entered promiscuous mode
[ 1037.760211][T10194] debugfs: 'hsr0' already exists in 'hsr'
[ 1037.796969][T10194] Cannot create hsr debugfs directory
[ 1037.950206][ T5999] bridge_slave_1: left allmulticast mode
[ 1037.956810][ T5999] bridge_slave_1: left promiscuous mode
[ 1037.963248][ T5999] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1037.977905][ T5999] bridge_slave_0: left allmulticast mode
[ 1037.985802][ T5999] bridge_slave_0: left promiscuous mode
[ 1038.005890][ T5999] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1038.116417][ T5999] bridge_slave_1: left allmulticast mode
[ 1038.130550][ T5999] bridge_slave_1: left promiscuous mode
[ 1038.137024][ T5999] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1038.193916][ T5999] bridge_slave_0: left allmulticast mode
[ 1038.208800][ T5999] bridge_slave_0: left promiscuous mode
[ 1038.241431][ T5999] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1039.375400][ T5999] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1039.410974][ T5999] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1039.450693][ T5999] bond0 (unregistering): Released all slaves
[ 1039.873167][T10319] loop1: detected capacity change from 0 to 8192
[ 1039.917933][ T5999] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1039.983358][ T5999] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1040.023695][ T5999] bond0 (unregistering): Released all slaves
[ 1040.589654][T10207] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1040.662788][ T5999] hsr_slave_0: left promiscuous mode
[ 1040.706740][ T5999] hsr_slave_1: left promiscuous mode
[ 1040.727467][ T5999] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1040.753443][ T5999] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1040.795548][ T5999] hsr_slave_0: left promiscuous mode
[ 1040.855872][ T5999] hsr_slave_1: left promiscuous mode
[ 1040.885277][ T5999] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1040.913354][ T5999] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1041.773865][T10339] netlink: 20 bytes leftover after parsing attributes in process `syz.1.780'.
[ 1042.453990][T10343] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6)
[ 1042.460723][T10343] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1042.487099][T10343] vhci_hcd vhci_hcd.0: Device attached
[ 1042.536982][T10343] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8)
[ 1042.543714][T10343] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 1042.585370][T10343] vhci_hcd vhci_hcd.0: Device attached
[ 1042.599129][T10348] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(11)
[ 1042.606034][T10348] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1042.643260][T10348] vhci_hcd vhci_hcd.0: Device attached
[ 1042.670708][T10343] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(14)
[ 1042.677540][T10343] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[ 1042.699829][T10343] vhci_hcd vhci_hcd.0: Device attached
[ 1042.707925][ T5999] team0 (unregistering): Port device team_slave_1 removed
[ 1042.744253][T10348] vhci_hcd vhci_hcd.0: pdev(6) rhport(3) sockfd(13)
[ 1042.751076][T10348] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[ 1042.759120][ T7638] usb 45-1: new low-speed USB device number 2 using vhci_hcd
[ 1042.775974][ T5999] team0 (unregistering): Port device team_slave_0 removed
[ 1042.786781][T10348] vhci_hcd vhci_hcd.0: Device attached
[ 1042.814970][T10351] vhci_hcd: connection closed
[ 1042.815340][T10349] vhci_hcd: connection closed
[ 1042.820469][T10344] vhci_hcd: connection reset by peer
[ 1042.840876][  T571] vhci_hcd vhci_hcd.6: stop threads
[ 1042.847132][T10346] vhci_hcd: connection closed
[ 1042.848001][  T571] vhci_hcd vhci_hcd.6: release socket
[ 1042.860530][T10353] vhci_hcd: connection closed
[ 1042.867591][  T571] vhci_hcd vhci_hcd.6: disconnect device
[ 1042.892371][  T571] vhci_hcd vhci_hcd.6: stop threads
[ 1042.897997][  T571] vhci_hcd vhci_hcd.6: release socket
[ 1042.905580][  T571] vhci_hcd vhci_hcd.6: disconnect device
[ 1042.921505][  T571] vhci_hcd vhci_hcd.6: stop threads
[ 1042.927177][  T571] vhci_hcd vhci_hcd.6: release socket
[ 1042.935415][  T571] vhci_hcd vhci_hcd.6: disconnect device
[ 1042.959043][  T571] vhci_hcd vhci_hcd.6: stop threads
[ 1042.964449][  T571] vhci_hcd vhci_hcd.6: release socket
[ 1042.995914][  T571] vhci_hcd vhci_hcd.6: disconnect device
[ 1043.012865][  T571] vhci_hcd vhci_hcd.6: stop threads
[ 1043.031850][  T571] vhci_hcd vhci_hcd.6: release socket
[ 1043.043496][  T571] vhci_hcd vhci_hcd.6: disconnect device
[ 1043.640273][ T5999] team0 (unregistering): Port device team_slave_1 removed
[ 1043.701099][ T5999] team0 (unregistering): Port device team_slave_0 removed
[ 1044.379399][T10207] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1044.840629][T10207] team0: Port device team_slave_0 added
[ 1044.976197][T10207] team0: Port device team_slave_1 added
[ 1045.578613][T10207] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1045.603913][T10207] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1045.633872][T10356] loop6: detected capacity change from 0 to 32768
[ 1045.679024][T10356] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.784 (10356)
[ 1045.718688][T10207] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1045.747067][T10356] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1045.773619][T10207] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1045.806932][T10207] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1045.820101][T10356] BTRFS info (device loop6): using crc32c checksum algorithm
[ 1045.905607][T10207] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1046.209302][T10356] BTRFS info (device loop6): allowing degraded mounts
[ 1046.259131][T10356] BTRFS info (device loop6): enabling ssd optimizations
[ 1046.281465][T10356] BTRFS info (device loop6): turning on async discard
[ 1046.288433][T10356] BTRFS info (device loop6): enabling free space tree
[ 1046.328809][T10356] BTRFS info (device loop6): force zlib compression, level 3
[ 1046.934649][ T6785] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1047.101302][T10207] hsr_slave_0: entered promiscuous mode
[ 1047.304535][T10207] hsr_slave_1: entered promiscuous mode
[ 1047.345343][T10207] debugfs: 'hsr0' already exists in 'hsr'
[ 1047.351996][T10207] Cannot create hsr debugfs directory
[ 1047.887829][ T7638] vhci_hcd vhci_hcd.6: vhci_device speed not set
[ 1049.198173][ T7637] usb usb46-port1: attempt power cycle
[ 1049.485704][T10138] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1049.790731][T10138] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1049.853299][ T7637] usb usb46-port1: unable to enumerate USB device
[ 1049.964116][T10138] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1050.169296][T10138] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1050.975737][T10194] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1051.186699][T10194] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1051.323719][T10194] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1051.416557][T10194] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1052.241410][T10402] loop1: detected capacity change from 0 to 32768
[ 1052.297367][T10402] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.788 (10402)
[ 1052.320137][T10138] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1052.380073][T10402] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1052.415347][T10402] BTRFS info (device loop1): using sha256 checksum algorithm
[ 1052.472522][T10402] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR
[ 1052.473385][T10402] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR
[ 1052.535126][T10402] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR
[ 1052.590105][T10402] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR
[ 1052.657577][T10402] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR
[ 1052.709758][T10207] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1052.729977][T10402] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR
[ 1052.744569][T10402] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR
[ 1052.785444][T10402] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR
[ 1052.829913][T10402] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR
[ 1052.845808][T10402] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR
[ 1052.858087][T10402] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR
[ 1052.871231][T10402] BTRFS error (device loop1): open_ctree failed: -12
[ 1052.975167][T10207] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1053.076478][T10207] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 1054.028236][T10207] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 1054.596675][T10138] 8021q: adding VLAN 0 to HW filter on device team0
[ 1054.740078][T10455] netlink: 20 bytes leftover after parsing attributes in process `syz.6.793'.
[ 1055.145212][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1055.152762][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1055.417338][ T7059] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1055.425035][ T7059] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1056.375240][T10194] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1058.130915][T10194] 8021q: adding VLAN 0 to HW filter on device team0
[ 1058.330821][ T1151] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1058.338433][ T1151] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1058.576719][ T6003] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1058.584843][ T6003] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1059.508653][T10207] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1059.837979][T10207] 8021q: adding VLAN 0 to HW filter on device team0
[ 1059.980542][ T7059] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1059.988127][ T7059] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1060.186327][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1060.193941][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1060.526546][T10138] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1061.347334][T10194] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1062.726995][T10207] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1063.255507][T10138] veth0_vlan: entered promiscuous mode
[ 1063.379087][T10138] veth1_vlan: entered promiscuous mode
[ 1063.702301][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[ 1063.709120][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[ 1063.951997][T10138] veth0_macvtap: entered promiscuous mode
[ 1064.191284][T10138] veth1_macvtap: entered promiscuous mode
[ 1064.314484][T10194] veth0_vlan: entered promiscuous mode
[ 1064.520236][T10194] veth1_vlan: entered promiscuous mode
[ 1064.561273][T10138] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1064.661155][T10138] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1064.808867][ T1014] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1064.835833][ T1014] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1064.904248][ T1014] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1064.921453][ T1014] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1065.362167][T10194] veth0_macvtap: entered promiscuous mode
[ 1065.484214][T10194] veth1_macvtap: entered promiscuous mode
[ 1065.996245][T10194] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1066.121606][T10207] veth0_vlan: entered promiscuous mode
[ 1066.253468][T10194] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1066.409076][   T35] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1066.481801][ T6003] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1066.530204][ T6003] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1066.624763][T10207] veth1_vlan: entered promiscuous mode
[ 1066.659349][ T6003] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1067.270243][T10207] veth0_macvtap: entered promiscuous mode
[ 1067.465817][T10207] veth1_macvtap: entered promiscuous mode
[ 1067.959290][T10207] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1068.081515][ T5818] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[ 1068.163800][T10207] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1068.328908][ T5818] usb 7-1: Using ep0 maxpacket: 8
[ 1068.365289][ T5818] usb 7-1: config index 0 descriptor too short (expected 301, got 45)
[ 1068.385729][ T6003] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1068.427073][ T5818] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1068.447955][ T6003] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1068.487540][ T5818] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1068.502427][   T13] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1068.528502][ T5818] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1068.546253][   T13] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1068.578087][ T5818] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1068.657089][ T5818] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1068.688974][ T5818] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1068.997817][ T5818] usb 7-1: usb_control_msg returned -32
[ 1069.003680][ T5818] usbtmc 7-1:16.0: can't read capabilities
[ 1070.903396][ T5833] usb 7-1: USB disconnect, device number 11
[ 1071.223037][ T5783] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1071.268495][ T5783] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1071.280804][ T5783] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1071.303801][ T5783] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1071.323270][ T5783] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1072.239034][T10609] netlink: 20 bytes leftover after parsing attributes in process `syz.6.806'.
[ 1072.267651][T10610] loop1: detected capacity change from 0 to 128
[ 1072.898770][T10615] syz.1.807: attempt to access beyond end of device
[ 1072.898770][T10615] loop1: rw=2049, sector=145, nr_sectors = 16 limit=128
[ 1072.997232][T10615] syz.1.807: attempt to access beyond end of device
[ 1072.997232][T10615] loop1: rw=2049, sector=169, nr_sectors = 8 limit=128
[ 1073.106340][T10615] syz.1.807: attempt to access beyond end of device
[ 1073.106340][T10615] loop1: rw=2049, sector=185, nr_sectors = 8 limit=128
[ 1073.212358][T10615] syz.1.807: attempt to access beyond end of device
[ 1073.212358][T10615] loop1: rw=2049, sector=201, nr_sectors = 8 limit=128
[ 1073.330391][T10615] syz.1.807: attempt to access beyond end of device
[ 1073.330391][T10615] loop1: rw=2049, sector=217, nr_sectors = 8 limit=128
[ 1073.408540][   T35] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1073.595743][   T35] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1073.630680][ T5790] Bluetooth: hci1: command tx timeout
[ 1073.842646][   T35] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1074.081183][   T35] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1074.177947][   T12] kworker/u8:0: attempt to access beyond end of device
[ 1074.177947][   T12] loop1: rw=8388609, sector=174, nr_sectors = 1 limit=128
[ 1074.293601][   T12] Buffer I/O error on dev loop1, logical block 174, lost async page write
[ 1074.756435][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1074.826968][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1074.854033][T10599] chnl_net:caif_netlink_parms(): no params data found
[ 1075.471171][ T1151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1075.479169][ T1151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1075.521559][   T35] bridge_slave_1: left allmulticast mode
[ 1075.527407][   T35] bridge_slave_1: left promiscuous mode
[ 1075.573018][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1075.671586][   T35] bridge_slave_0: left allmulticast mode
[ 1075.677444][   T35] bridge_slave_0: left promiscuous mode
[ 1075.710965][ T5790] Bluetooth: hci1: command tx timeout
[ 1075.741349][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1076.560562][   T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1076.671408][   T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1076.729969][   T35] bond0 (unregistering): Released all slaves
[ 1077.112290][ T1151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1077.146750][ T1151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1077.251511][   T35] hsr_slave_0: left promiscuous mode
[ 1077.278232][   T35] hsr_slave_1: left promiscuous mode
[ 1077.286300][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1077.322028][   T35] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1077.353851][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1077.362433][   T35] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1077.439491][   T35] veth1_macvtap: left promiscuous mode
[ 1077.445205][   T35] veth0_macvtap: left promiscuous mode
[ 1077.457875][   T35] veth1_vlan: left promiscuous mode
[ 1077.463406][   T35] veth0_vlan: left promiscuous mode
[ 1077.777316][ T5790] Bluetooth: hci1: command tx timeout
[ 1078.804690][   T35] team0 (unregistering): Port device team_slave_1 removed
[ 1078.852869][   T35] team0 (unregistering): Port device team_slave_0 removed
[ 1079.443797][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1079.456265][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1079.815156][T10599] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1079.854299][ T5790] Bluetooth: hci1: command tx timeout
[ 1079.858634][T10599] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1079.907911][T10599] bridge_slave_0: entered allmulticast mode
[ 1079.955173][T10599] bridge_slave_0: entered promiscuous mode
[ 1080.057514][T10599] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1080.095217][T10599] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1080.127585][T10599] bridge_slave_1: entered allmulticast mode
[ 1080.176971][T10599] bridge_slave_1: entered promiscuous mode
[ 1081.329216][T10654] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1081.344355][T10654] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1081.356943][T10654] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1081.385765][T10654] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1081.423254][T10654] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1082.076796][T10599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1082.086742][T10392] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[ 1082.196896][T10599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1082.290413][T10392] usb 7-1: Using ep0 maxpacket: 8
[ 1082.351654][T10392] usb 7-1: config index 0 descriptor too short (expected 301, got 45)
[ 1082.421462][T10392] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1082.480192][T10392] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1082.570969][T10392] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1082.639060][T10392] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1082.759970][T10392] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1082.780875][T10392] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1082.863367][T10599] team0: Port device team_slave_0 added
[ 1083.141918][T10392] usb 7-1: usb_control_msg returned -32
[ 1083.142718][T10599] team0: Port device team_slave_1 added
[ 1083.147740][T10392] usbtmc 7-1:16.0: can't read capabilities
[ 1083.476544][T10599] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1083.509257][T10599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1083.529268][T10654] Bluetooth: hci3: command tx timeout
[ 1083.631881][T10658] loop8: detected capacity change from 0 to 2048
[ 1083.646295][T10599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1083.736405][T10599] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1083.782736][T10599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1083.784460][T10658] NILFS (loop8): too small inode size: 0 bytes
[ 1083.847681][T10599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1084.685708][   T35] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1084.967252][T10392] usb 7-1: USB disconnect, device number 12
[ 1085.128846][T10667] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1085.271871][   T35] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1085.606689][T10654] Bluetooth: hci3: command tx timeout
[ 1086.386466][T10599] hsr_slave_0: entered promiscuous mode
[ 1086.396542][T10599] hsr_slave_1: entered promiscuous mode
[ 1086.482890][   T35] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1087.439682][T10677] netlink: 20 bytes leftover after parsing attributes in process `syz.8.819'.
[ 1087.684593][T10654] Bluetooth: hci3: command tx timeout
[ 1087.833644][   T35] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1088.450253][T10682] loop1: detected capacity change from 0 to 512
[ 1088.506992][T10682] EXT4-fs: Ignoring removed oldalloc option
[ 1088.624261][T10682] EXT4-fs: inline encryption not supported
[ 1088.676678][T10682] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[ 1088.972862][T10682] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.821: bg 0: block 64: padding at end of block bitmap is not set
[ 1088.997672][T10682] loop1: lost filesystem error report for type 5 error -117
[ 1089.002836][T10682] Quota error (device loop1): write_blk: dquota write failed
[ 1089.010484][    C0] EXT4-fs (loop1): error count since last fsck: 1
[ 1089.010578][    C0] EXT4-fs (loop1): initial error at time 1774469569: ext4_validate_block_bitmap:441
[ 1089.010703][    C0] EXT4-fs (loop1): last error at time 1774469569: ext4_validate_block_bitmap:441
[ 1089.047266][T10682] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[ 1089.057812][T10682] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.821: Failed to acquire dquot type 0
[ 1089.101083][T10682] loop1: lost filesystem error report for type 5 error -117
[ 1089.102479][T10682] EXT4-fs (loop1): 1 truncate cleaned up
[ 1089.126077][T10682] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1089.437494][T10682] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1089.532745][T10682] bond0: (slave rose0): Enslaving as an active interface with an up link
[ 1089.763129][T10654] Bluetooth: hci3: command tx timeout
[ 1089.788601][   T35] bridge_slave_1: left allmulticast mode
[ 1089.798462][   T35] bridge_slave_1: left promiscuous mode
[ 1089.806965][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1089.821657][   T35] bridge_slave_0: left allmulticast mode
[ 1089.828613][   T35] bridge_slave_0: left promiscuous mode
[ 1089.840990][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1089.930185][ T8761] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1090.686381][T10690] binder: BINDER_SET_CONTEXT_MGR already set
[ 1090.692721][T10690] binder: 10689:10690 ioctl 4018620d 200000004a80 returned -16
[ 1090.713396][   T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1090.738025][T10680] loop6: detected capacity change from 0 to 32768
[ 1090.785235][T10680] btrfs: Deprecated parameter 'usebackuproot'
[ 1090.813756][   T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1090.842445][T10680] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[ 1090.889653][   T35] bond0 (unregistering): Released all slaves
[ 1090.972227][T10650] chnl_net:caif_netlink_parms(): no params data found
[ 1092.411333][   T35] hsr_slave_0: left promiscuous mode
[ 1092.441217][   T35] hsr_slave_1: left promiscuous mode
[ 1092.449107][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1092.471889][   T35] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1092.513382][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1092.561172][   T35] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1092.691900][   T35] veth1_macvtap: left promiscuous mode
[ 1092.698592][   T35] veth0_macvtap: left promiscuous mode
[ 1092.761683][   T35] veth1_vlan: left promiscuous mode
[ 1092.767639][   T35] veth0_vlan: left promiscuous mode
[ 1096.281026][   T35] team0 (unregistering): Port device team_slave_1 removed
[ 1096.462111][   T35] team0 (unregistering): Port device team_slave_0 removed
[ 1097.248264][T10608] =====================================================
[ 1097.255735][T10608] BUG: KMSAN: uninit-value in put_cmsg+0x534/0xbc0
[ 1097.265364][T10608]  put_cmsg+0x534/0xbc0
[ 1097.270376][T10608]  __scm_recv_common+0x2fb/0x910
[ 1097.279983][T10608]  scm_recv+0x55/0xe0
[ 1097.284137][T10608]  netlink_recvmsg+0xd45/0xfe0
[ 1097.290587][T10608]  sock_recvmsg+0x27b/0x310
[ 1097.295469][T10608]  ____sys_recvmsg+0x193/0x620
[ 1097.300678][T10608]  ___sys_recvmsg+0x20b/0x850
[ 1097.305518][T10608]  __x64_sys_recvmsg+0x20e/0x3d0
[ 1097.310744][T10608]  x64_sys_call+0x35cc/0x3ea0
[ 1097.315630][T10608]  do_syscall_64+0x134/0xf80
[ 1097.320730][T10608]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1097.326796][T10608] 
[ 1097.329739][T10608] Local variable ucreds created at:
[ 1097.335018][T10608]  __scm_recv_common+0x1bb/0x910
[ 1097.340199][T10608]  scm_recv+0x55/0xe0
[ 1097.344332][T10608] 
[ 1097.346809][T10608] CPU: 0 UID: 0 PID: 10608 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) 
[ 1097.356131][T10608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1097.366596][T10608] =====================================================
[ 1097.373869][T10608] Disabling lock debugging due to kernel taint
[ 1097.772660][T10608] Kernel panic - not syncing: kmsan.panic set ...
[ 1097.779483][T10608] CPU: 0 UID: 0 PID: 10608 Comm: udevd Tainted: G    B               syzkaller #0 PREEMPT(full) 
[ 1097.790169][T10608] Tainted: [B]=BAD_PAGE
[ 1097.794432][T10608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1097.804623][T10608] Call Trace:
[ 1097.808005][T10608]  <TASK>
[ 1097.811025][T10608]  __dump_stack+0x26/0x30
[ 1097.815609][T10608]  dump_stack_lvl+0x50/0x1c0
[ 1097.820367][T10608]  ? dump_stack+0x12/0x25
[ 1097.824876][T10608]  dump_stack+0x1e/0x25
[ 1097.829201][T10608]  vpanic+0x7b4/0x1430
[ 1097.833468][T10608]  panic+0x15d/0x160
[ 1097.837590][T10608]  kmsan_report+0x31a/0x320
[ 1097.842290][T10608]  ? __msan_warning+0x1b/0x30
[ 1097.847139][T10608]  ? put_cmsg+0x534/0xbc0
[ 1097.851623][T10608]  ? __scm_recv_common+0x2fb/0x910
[ 1097.856903][T10608]  ? scm_recv+0x55/0xe0
[ 1097.861221][T10608]  ? netlink_recvmsg+0xd45/0xfe0
[ 1097.866344][T10608]  ? sock_recvmsg+0x27b/0x310
[ 1097.871206][T10608]  ? ____sys_recvmsg+0x193/0x620
[ 1097.876314][T10608]  ? ___sys_recvmsg+0x20b/0x850
[ 1097.881342][T10608]  ? __x64_sys_recvmsg+0x20e/0x3d0
[ 1097.886633][T10608]  ? x64_sys_call+0x35cc/0x3ea0
[ 1097.891767][T10608]  ? do_syscall_64+0x134/0xf80
[ 1097.896701][T10608]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1097.902932][T10608]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1097.909167][T10608]  ? netlink_recvmsg+0xad1/0xfe0
[ 1097.914268][T10608]  ? sock_recvmsg+0x27b/0x310
[ 1097.919111][T10608]  ? ____sys_recvmsg+0x193/0x620
[ 1097.924200][T10608]  ? ___sys_recvmsg+0x20b/0x850
[ 1097.929205][T10608]  ? __x64_sys_recvmsg+0x20e/0x3d0
[ 1097.934499][T10608]  ? kmsan_get_metadata+0xf1/0x160
[ 1097.939812][T10608]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[ 1097.945850][T10608]  ? put_cmsg+0x431/0xbc0
[ 1097.950351][T10608]  ? filter_irq_stacks+0x49/0x190
[ 1097.955695][T10608]  ? stack_depot_save_flags+0x35/0x790
[ 1097.961460][T10608]  ? kmsan_get_metadata+0xf1/0x160
[ 1097.966772][T10608]  ? kmsan_internal_set_shadow_origin+0x7a/0x110
[ 1097.973306][T10608]  ? kmsan_get_metadata+0xf1/0x160
[ 1097.978644][T10608]  __msan_warning+0x1b/0x30
[ 1097.983419][T10608]  put_cmsg+0x534/0xbc0
[ 1097.987799][T10608]  __scm_recv_common+0x2fb/0x910
[ 1097.992949][T10608]  scm_recv+0x55/0xe0
[ 1097.997092][T10608]  netlink_recvmsg+0xd45/0xfe0
[ 1098.002075][T10608]  ? __pfx_netlink_recvmsg+0x10/0x10
[ 1098.007530][T10608]  sock_recvmsg+0x27b/0x310
[ 1098.012225][T10608]  ____sys_recvmsg+0x193/0x620
[ 1098.017202][T10608]  ___sys_recvmsg+0x20b/0x850
[ 1098.022089][T10608]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[ 1098.028115][T10608]  ? kmsan_get_metadata+0xf1/0x160
[ 1098.033422][T10608]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[ 1098.039467][T10608]  __x64_sys_recvmsg+0x20e/0x3d0
[ 1098.044630][T10608]  ? kmsan_get_metadata+0xf1/0x160
[ 1098.049951][T10608]  x64_sys_call+0x35cc/0x3ea0
[ 1098.054825][T10608]  do_syscall_64+0x134/0xf80
[ 1098.059582][T10608]  ? clear_bhb_loop+0x50/0xa0
[ 1098.064425][T10608]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1098.070936][T10608] RIP: 0033:0x7fc95baa7407
[ 1098.075491][T10608] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[ 1098.095270][T10608] RSP: 002b:00007ffee143b500 EFLAGS: 00000202 ORIG_RAX: 000000000000002f
[ 1098.103847][T10608] RAX: ffffffffffffffda RBX: 00007fc95c2a7880 RCX: 00007fc95baa7407
[ 1098.111963][T10608] RDX: 0000000000000000 RSI: 00007ffee143b590 RDI: 000000000000000c
[ 1098.120167][T10608] RBP: 0000555707a01910 R08: 0000000000000000 R09: 0000000000000000
[ 1098.128307][T10608] R10: 0000000000000000 R11: 0000000000000202 R12: 0000555707a3df90
[ 1098.136395][T10608] R13: 00007ffee143b650 R14: 00007ffee143b59c R15: 0000000000000000
[ 1098.144621][T10608]  </TASK>
[ 1098.148063][T10608] Kernel Offset: disabled
[ 1098.152484][T10608] Rebooting in 86400 seconds..