last executing test programs:

10m54.419769942s ago: executing program 32 (id=4680):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)

10m30.529641509s ago: executing program 33 (id=5162):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x4000066, 0x4)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, 0x0, 0x0)

9m58.702351805s ago: executing program 34 (id=5776):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, 0x0, &(0x7f0000000480))

9m55.579965115s ago: executing program 35 (id=5808):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x204019, &(0x7f00000009c0)={[{@nocompress}, {@cruft}, {@check_strict}, {@mode={'mode', 0x3d, 0x7}}, {@mode={'mode', 0x3d, 0xa7c}}, {@utf8}, {@utf8}]}, 0x0, 0x567, &(0x7f0000000200)="$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")

9m53.822338181s ago: executing program 36 (id=5835):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x8949, &(0x7f00000001c0)={'gretap0\x00', 0x0})

5m43.988696419s ago: executing program 1 (id=11109):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4d", 0x2c}], 0x2}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/6, 0x6}, {&(0x7f00000001c0)=""/153, 0x99}], 0x2}, 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$binfmt_misc(r3, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0xffffffff9673e35d]}})

5m43.624590608s ago: executing program 1 (id=11111):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9)
r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000c40), 0x12)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
syz_clone(0x28000100, &(0x7f0000001c40), 0x0, 0x0, 0x0, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12)

5m43.405064631s ago: executing program 1 (id=11112):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300))
rt_sigtimedwait(0x0, 0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@loopback, 0x800, 0x0, 0x2, 0x3, 0x0, 0x6}, 0x20)

5m43.31791263s ago: executing program 1 (id=11113):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000c80)='./file0\x00', 0x2810489, &(0x7f00000008c0)={[{@anchor={'anchor', 0x3d, 0x10000}}, {@adinicb}, {@unhide}, {@umask={'umask', 0x3d, 0x80}}, {@unhide}, {@lastblock={'lastblock', 0x3d, 0xb42b}}, {@shortad}, {@uid_forget}, {@shortad}, {@uid_ignore}, {@umask={'umask', 0x3d, 0x7}}, {@uid}, {@gid}, {@dmode={'dmode', 0x3d, 0x9}}, {@fileset={'fileset', 0x3d, 0x3}}]}, 0x9, 0xc24, &(0x7f0000000d00)="$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")
mount(0x0, 0x0, 0x0, 0x0, 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc13, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x2020)

5m42.609579855s ago: executing program 1 (id=11128):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000000000/0x3000)=nil, 0x3000, &(0x7f00000000c0)='fd/3\x00')

5m41.233493041s ago: executing program 1 (id=11163):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x101, 0x7ffc, 0xcc}, 0x50)

5m41.063449499s ago: executing program 37 (id=11163):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x101, 0x7ffc, 0xcc}, 0x50)

5m22.258731299s ago: executing program 5 (id=11523):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r3 = getpid()
syz_open_procfs(r3, &(0x7f0000000040)='fd/3\x00')

5m22.092426887s ago: executing program 5 (id=11525):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
sendmmsg$inet(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610414000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48)

5m21.850924152s ago: executing program 5 (id=11528):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write(r0, 0x0, 0x0)
futex(&(0x7f00000000c0), 0x6, 0x1, &(0x7f0000000140), 0x0, 0x2)

5m21.709630587s ago: executing program 5 (id=11533):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000c80)='./file0\x00', 0x2810489, &(0x7f00000008c0)={[{@anchor={'anchor', 0x3d, 0x10000}}, {@adinicb}, {@unhide}, {@umask={'umask', 0x3d, 0x80}}, {@unhide}, {@lastblock={'lastblock', 0x3d, 0xb42b}}, {@shortad}, {@uid_forget}, {@shortad}, {@uid_ignore}, {@umask={'umask', 0x3d, 0x7}}, {@uid}, {@gid}, {@dmode={'dmode', 0x3d, 0x9}}, {@fileset={'fileset', 0x3d, 0x3}}]}, 0x9, 0xc24, &(0x7f0000000d00)="$eJzs3V9oXOl5B+D3myOtJW/TzG42zh/nYmAD2Xqzi2R51yregBwrIgvGa1ZWLhYKGluyO6w0kiW5eEMJLiSUkLa45CKXNWwCvauvWggNuFfbEgKiV6UXxW03Zns3CaQtvViVM/ONNNLalrK2JXn9PMb+nTnznpnvzOrVnDN7zpwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACK+/o2TQ8Npr0cBAOymM5NvDo14/weAJ8o5+/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGwvRRHfjRTv/qCVptu3OwZON5pXrk6NT9x9scEUKSpRtOvLvwPDR0eOvfLq8dFu3n/5h+0L8cbkuZO1Uwvzi0uzy8uzM7WpZuPCwszsjh/hQZff6kj7BajNv31l5uLF5drRl0c23X21eufA04eqJ0YPj7zVrZ0an5iY7Knp6//Yz/4R6eE9FJ8gT0UR34wU7730QapHRCUevBe2+d3xqA1GX9l/7ZWYGp9or8hco95cKe9MlVzVF1HtWWis2yO70IsPZCziWvnfqRzwkXL1JhfrS/Xzc7O1s/WllcZKY6GZKp3RlutTjUqMpojFiGgVez149pv+KOJYpLjz61Y6HxFFtw9ePDP55tDI9g/QtwuDvMfTVouI1XgMehb2qQNRxF9Gih9OD8WF3Ffttnk/4itlvhZxucxbKa7n26n8BTEa8SvvJ/BY64sifhEpFlIrzXR7v71defpbtdebFxd6arvblY/9/sFusm3CPjYQRZxvb/G30sf/sAsAAAAAAAAAAAAA2B1F/DRS3Jx/IS1G7zmljeal2rn6+bnOUcHdY/9ream1tbW1aupkLedQzrGcZ3NO51zMeS3n9Zw3ct7MeSvnas7bOVs5o5KfP2ct51DOsZxnc07nXMx5Lef1nDdy3sx5K+dqzts5WznDeU8AAAAAAAAAAAAAAAAAAAA8ZINRxESkuPHuH7WvKx3t69J/+sTomfHneq8Z/7ltHqesfTkifho7uyZvf77WeKqUfx7+egHbG4givpOv//cnez0YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgX6hEEd+NFD/6TStFioixiOno5O1ir0cHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJQGUhGnIsV/fWOgfXs1Ir4YER+ulX8i/ndtq70eMQAAAAAAAAAAAAAAAAAAAHwCpSIuR4ofv9dK1Yi4Wr1z4OlD1ROjh0feKqKIVJb01r8xee5k7dTC/OLS7PLy7Extqtm4sDAzu9OnGzjdaF65OjU+8UhWZluDj3j8gwOnFhbfWWpc+sOVu95/cODk+eWVpfqFu98dg9EXMdQ750h7wFPjE+1BzzXqzfaiqXKPAfZF1Ha6MgAAAAAAAAAAAAAAAAAAAOwbB1MR45Hi+Z8dS93zxvs65/x/qnOrWK/9yR9vfBfA3Jbs6v3+gJ1Mp50O9Ej7xPva1PjExGTP7L7+j5aWY0qpiM9GisN///n2+fApDt713Piy7s8ixej/Hct11cNl3dimqoEjU+MTtTMLzZdOzs0tXKiv1M/PzdYmF+sXdvzFAQAAAAAAAAAAAAAAAAAAAHAfB1MRfx4pjr2+mrrXnc/n//d1bvWc//9aRPey8wNpc65rn9v/u+1z+zvTnz4x+vrR5+81/1Gc/1+OKaUiPowUz/zV59vX0++e/z+0pbas+3Gk+MX3vpTrKk+VdcPd1ek84sXG3OxQWftipPj+2W5ttGtfzbWf2agdLmv/IVI8+weba4/n2uc2ao+WtXcixcSZu9d+dqN2pKwdjBRf/dNat/ZgWfv1XHtoo/blCwtzMzt9eXkylf3/b5Hiy8PfTN2f+Xv2f8/3f1zbkus+0vP3n35Y/V/tmXct9/Va7v/hbfr/cqT4i+tfynWd3jua73+m/e9G/38/UvzepzbXvpJrn92oHd7pasFeKvv/nyLF6u1/Wf+Zz/2fO2ujQ3v7/4t9m7O7XbBX/f9Mz7xqHtfIb/lawJNm+Z1vv12fm5tdMmHChIn1ib3+zQQ8auX2/39Hiq9dLlJ3PzZv//9O59bG/v//fGdj+//Elly3R9v/z/bMO5H3Wvr7IgZW5hf7PxcxsPzOt19qzNcvzV6abY6MjB7//WPDR48P9z/V3bnfmNrxawePu7L/344UP/mbf17/HHvz/v/dP/87uCXX7VH/f6Z3nTbt1+z4pYAnTtn/fx0p/vXGB+v/v+l+n/91P+d74fnNOdgt2qP+f65nXi3/M9oz74Ui4uROnwsAAAAAAAAAAB4TB1MRP4sUf9v6x/Vr3m8+/ie+3K3tPf7vXvbD9f8BgPsr3/8nI8XPD341db9DZifH/89syXV7dPzvoZ55M7t0XvOOX2QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiYUhRxIFK8+4NWul2UtzsGTjeaV65OjU/cfbHBFCkqUbTry78Dw0dHjr3y6vHRbt5/+YftC/HG5LmTtVML84tLs8vLszO1qWbjwsLM7I4f4UGX3+pI+wWozb99ZebixeXa0ZdHNt19tXrnwNOHqidGD4+81a2dGp+YmOyp6ev/2M/+EenhPRSfIE9FET+PFO+99EH69yKiEg/eC9v87njUBqOv7L/2SkyNT7RXZK5Rb66Ud6ZKruqLqPYsNNbtkV3oxQcyFnEtIirlgI+Uqze5WF+qn5+brZ2tL600VhoLzVTpjLZcn2pUYjRFLEZEq9jrwbPf9EcRfxcp7vy6lf6jiCi6ffDimck3h0a2f4C+XRjkPZ62WkSsxmPQs7BPHYginosUP5weiv8sOn3Vbpv3I75S5msRl8u8leJ6vp3KXxCjEb/yfgKPtb4o4mykWEit9H6Re7+9XXn6W7XXmxcXemq725WP/f7BbrJtwj42EEX8sr3F30q/9H4OAAAAAAAAAAAAAPtcEV+LFDfnX0jt80PXzyltNC/VztXPz3UO6+8e+1/LS62tra1VUydrOYdyjuU8m3M652LOazmv57yR82bOWzlXc97O2coZlfz8OWs5h3KO5TybczrnYs5rOa/nvJHzZs5bOVdz3s7ZyhmOkwYAAAAAAAAAAAAAAAAA4BGpRBHfixQ/+k0rrRWd68tORydvO88VPtH+PwAA//9mFkcG")
mount(0x0, 0x0, 0x0, 0x0, 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc13, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x2020)

5m21.136636698s ago: executing program 5 (id=11540):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00', <r3=>0x0})
ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r3})

5m19.69658144s ago: executing program 5 (id=11562):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x10000002]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{}, {0x6, 0x0, 0x0, 0x7fff0000}]})

5m19.41424916s ago: executing program 38 (id=11562):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x10000002]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{}, {0x6, 0x0, 0x0, 0x7fff0000}]})

2m49.476619316s ago: executing program 2 (id=14509):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2)
sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r3, 0xf21, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x75}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0xc0c0)

2m49.355717559s ago: executing program 2 (id=14512):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x4]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
mkdir(&(0x7f0000000000)='./file0\x00', 0x2)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43)
read$FUSE(r2, 0x0, 0x0)

2m49.205428285s ago: executing program 2 (id=14517):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f00000001c0)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108)

2m49.045066171s ago: executing program 2 (id=14522):
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x441, 0x20)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3001009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]})
syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x14a0, &(0x7f0000000700)=ANY=[], 0x1, 0x0, 0x0)
setxattr$security_capability(&(0x7f0000000140)='./file1\x00', &(0x7f0000000200), 0x0, 0x0, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x0)

2m48.252687036s ago: executing program 2 (id=14537):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmsg$unix(r2, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4040801}, 0x20008840)

2m46.577071893s ago: executing program 2 (id=14571):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r2, 0x0)
mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil)

2m46.342929468s ago: executing program 39 (id=14571):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r2, 0x0)
mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil)

2m10.034833368s ago: executing program 0 (id=15425):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r2 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @loopback}, 0x1c)
sendto$inet6(r2, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c)

2m9.968033175s ago: executing program 0 (id=15427):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = memfd_create(&(0x7f0000000c40)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\xa5HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x3)
write$binfmt_script(r2, &(0x7f0000000140)={'#! ', './file0'}, 0xb)
execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

2m9.796692633s ago: executing program 0 (id=15438):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBMETA(r3, 0x4b3d, 0x0)

2m9.670052817s ago: executing program 0 (id=15442):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0)
r0 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r0, 0x0)
setpgid(0x0, r0)
openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)

2m9.521249403s ago: executing program 0 (id=15446):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000300))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040))
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0}}], 0x51, 0x0, &(0x7f0000000600)="4bb16fc96dcf827965e297e4bcdc4cc27c7f5cce42d3404ebf85cb80c1e0f1800190544fb4577f9c7b137beb432502670dac13efbd760cd34255de3bf80391ae67bfe4a9e6cef0df81e89597f675b813d1"})

2m9.301215105s ago: executing program 0 (id=15452):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r2, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x218, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x20, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438)

2m9.174265939s ago: executing program 40 (id=15452):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r2, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x218, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x20, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438)

1m33.45038245s ago: executing program 7 (id=16254):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000012c0)={0x14, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}}, 0x14}}, 0x0)

1m32.042681629s ago: executing program 7 (id=16287):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000100), 0x1, 0x599, &(0x7f0000000540)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0)

1m31.818486132s ago: executing program 7 (id=16292):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r2=>0x0}, 0x0)
chown(&(0x7f00000003c0)='./file0\x00', r2, 0xee01)

1m31.668560178s ago: executing program 7 (id=16295):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'})

1m31.534198162s ago: executing program 7 (id=16298):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write(r0, 0x0, 0x0)
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)

1m31.037129965s ago: executing program 7 (id=16304):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write(r0, 0x0, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f00000006c0)=ANY=[@ANYRES32, @ANYBLOB="0000003c1a6c90530a891453f4a10a116f23b3000000007c"], 0x48)

1m30.825058128s ago: executing program 41 (id=16304):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write(r0, 0x0, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f00000006c0)=ANY=[@ANYRES32, @ANYBLOB="0000003c1a6c90530a891453f4a10a116f23b3000000007c"], 0x48)

7.980637775s ago: executing program 8 (id=17790):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write(r0, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x76)

6.779415962s ago: executing program 8 (id=17812):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
sendmmsg$inet(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="05000000040000000400000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x15, 0x17, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000004000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000052000000bf0900000000000026090600000003e70400000006000000180100002020732500000000002020207d9af8ff00000000ad9100000000000037010000f8ffffffb702000008000000b70300000000000014000000060000005c93000000000000b5030200000000008500000000000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

5.469844651s ago: executing program 8 (id=17833):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
sendmmsg$inet(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040)
modify_ldt$write(0x1, &(0x7f0000000a40)={0x476, 0x20000000, 0x1000, 0x0, 0x1, 0x0, 0x1}, 0x10)
syz_clone3(&(0x7f0000000d40)={0xe5a44100, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0x0], 0x1}, 0x58)

4.260402538s ago: executing program 4 (id=17848):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
io_setup(0x2007, &(0x7f0000000980)=<r3=>0x0)
r4 = eventfd2(0x0, 0x0)
io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r2, 0x0, 0x0, 0x7, 0x0, 0x1, r4}])

4.043672971s ago: executing program 4 (id=17851):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
ppoll(0x0, 0x0, &(0x7f00000002c0)={0x77359400}, 0x0, 0x0)

3.860856161s ago: executing program 8 (id=17853):
mkdir(0x0, 0x0)
chdir(0x0)
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x4]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x48141, 0x0)
fcntl$setlease(r2, 0x400, 0x2)

3.608796897s ago: executing program 8 (id=17858):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = socket(0x1e, 0x2, 0x0)
setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000480), 0x4)
sendmsg$tipc(r2, &(0x7f0000000740)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10, 0x0}, 0x20008040)
recvmmsg(r2, &(0x7f0000009a80)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000009ac0)=""/4103, 0x1007}], 0x1}, 0x7}], 0x1, 0x40, 0x0)

3.276604392s ago: executing program 8 (id=17866):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r2, 0x0)

3.061404605s ago: executing program 4 (id=17869):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x4, &(0x7f0000000d80)=ANY=[], 0x1, 0x550f, &(0x7f000000cf00)="$eJzs3E1vG1UXAODjpGn69faNEAt2HalCSqTaivNRwS5AKz5EqqjAghU4tmO5tT1R7DghKxYsEQv+CQKJFUt+AwvW7BALEDskkGcm0FAQlXBskj6PND5zr6/PnGtVlc5M5ACeWgvJzz+W4npcjojZiLgWkZ2XiiOzkYfnIuJGRMw8cpSK+d8nLkbElYi4Pkqe5ywVb316a3hz/Yc3fvrqm/kLVz/78tvp7RqYtucjorubnx9085i28vigmK8N21nsrg2LmL/RfViM0zweNLezDAe143W1LK628vXp7n5/FHc6tfootto72fxuL79gf9g6zpN94EFtLxs3mttZbPfTLLaO8roOj/L/2476gzxPo8j3QZY+BoPjmM83D5v5fnYfZrHeGxTzed600TwcxWERi8tFPe00sjq2/803/d/2Zru3f5gMm3v9dtpL1ivVFyrV2+XqXtpoDppr5Vq3cXstWWx1RsvKg2atu9FK01anWamn3aVksVWvl6vVZPFOc7td6yXVamW1slxeXyrObiWv3nsn6TSSxVF8ud3bH7Q7/WQn3UvyTywlK5XVF5eSm9Xkrc2tZOv+3bubW2+/d+fdey9tvv5KseixspLFleWVlXJ1ubxSXXp8T/Pndf8fFUX/w/5hYkrTLgDg7NH/A9Nwev3/3v2I0+//Q/8/Fmeq/33C/t/+YUL0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAT63v5j5/LTtZyMdXi/n/FVPPFONSRMxExK9/YTYunsg5W+SZ+5v1c3+q4etSZBlG15gvjisRsVEcv/z/tL8FAAAAOL+++PDGJ3m3nr8sTLsgJim/aTNz7f0x5StFxNzC92PKNjN6eXZMybJ/3xficEzZshtYl8aUbD675XZhTNmezOyJcOmRUMrDzETLAQAAJuJkJzDZLgQAAIBJ+njaBTAdpTh+lHn8LDj7y/s/HghePjECAAAAzqDStAsAAAAATl3W//v9PwAAADjf8t//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnbnKWBuI4AP9b3r7gVyTGvVdxB8fwCC5dGg7gJTiAC7yCF+AMuPMIBgydEUG6MOm0jeZ5kjJMW37MELqYmWQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgSN+a3frLxzef+uYcT/2U6Q0AAADQ5dDs1u2bZao/y+df5FOvcr2KiDoiusbus3i8yZzlnOb3/Z+v72/+aMPXiDbh/B3zfDyNiLf5+PFy6F8BAAAA/l/7zXaVRuvpZTl1gxhTmrSpn78rlFdFRLP8XiitPue9LhTW/r8f4kOhtHYCa1EoLE25PZRK+yvt436ZtVtcFVUq6s6PXRpZrO8AAMCIZjfFuKMQAAAAxvR+6gYwjSp+LWVelgLnqcjLe09uagAAAMA/qJq6AQAAAMDg2vH/SPv/nez/BwAAANNI+/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwpEOzW+8321XfnOPp3mO+1nHpTv+eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/2Z93FAiBMAiDves7k7n/YaVBY0OTKhA+/sZgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHjzu7/8n5gaZ5K518bS80iydmpsnRp758bRH8bXrwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBif15SIASCIArmjP+d9P0PKwl6BhEioOFRRS0aAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvuh3v/yfmBpnkrnTxtLxSLJ21di6auw9aBw9GG//BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBi535e46jiAIB/Z2Zna6pijJJDRBQ86MWm29ram3hQggf/BCGk2xq79Uebgy1FzMWb5NyL6FFEUOKt/0PPLfRSbz3soYJnZWZnstM24PprZpt8PvDmfXcY5n3fBEK+814WAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA2fnsaZ8VhcRKn1blb969tFP3th/rCjZ07K0Ur4qTNpB8PLzY/JMvdJQIAAMDhkdX1fUTczXfXij5dLOv/vL6mqPm/fXoS1/X8w3V/3de1f9F++fne83sDLU7GKW56bnM0PP5oKr3/b5bz7Zm/vKJXPvny3UsWC5FG+t72c+O8fJ7J1zdvvtMvwyNtZAsA/BPH6r4K6r+Hin7QZWIAHBq9RuFd1//ZYrc5AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALRhvB1P1nESESu9aVy4ff/axn79jZ07K3U7ff36Tnw5vWdxizwizm2Ohsdbnc18u3zl6oX10Wh4qf3gpYjoavS3qulf+GCGiyM6eT6C/yhIqx/2vOTzeAQd/lICAOBAyqtW1PV389214lyyFPHHdw/W/6824pix/r/34elbzbGa9f+gtRnOv9Wti5+uXr5y9fXNi+vnh+eHH79xYvDm4OSZU6fOrJbvSla9MQEAAODf6VetWf+nS4+u/x9txDFj/f/ZN4MvmmNl6v99TRf9us4EAADgcHv25d9/S/Y5n/T78fn61talweS49/nE5NhBqn/bkao16/9sqeusAAAAgDaMt5MH1v/PNuKYcf3/qe9f+LF5zywiFqr1/2Mbn4zOtjedudbGvxN3PUcAAAC6tVC15vp/Xu7/T/e2PKQR8dork7j6GsCZ6v/s3a9+aI7V3P9/sr0pzqV0efI8yn45orfcdUYAAAAcZE9UrSj2f8131z766ej7ffv/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANr2ZwAAAP//uCM2tw==")
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)

1.186088104s ago: executing program 4 (id=17884):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x5c, 0x0)
write(r0, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c0002800500010000000000470002800500010001"], 0xe4}}, 0x0)

731.892952ms ago: executing program 3 (id=17894):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, 0x0, 0x0)
bind$netlink(r2, &(0x7f0000000580)={0x10, 0x0, 0x25dfdbfd}, 0xc)

731.141392ms ago: executing program 6 (id=17895):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={0x28, 0x1e, 0x21, 0x70bd2d, 0x0, {0x7}, [@typed={0x14, 0x2, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x0)

651.23123ms ago: executing program 3 (id=17897):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write(r0, 0x0, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c010000150001002cbd7000fbdbdf256401010100000000000000000000000000000000000000000000ffff7f0000014e240a874e210009020020a02f000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="00000000020000000c0015"], 0x15c}, 0x1, 0x0, 0x0, 0x800}, 0x0)

594.664107ms ago: executing program 6 (id=17898):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r3, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a)

565.7467ms ago: executing program 9 (id=17899):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r2 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @loopback}, 0x1c)
sendto$inet6(r2, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c)

510.689965ms ago: executing program 6 (id=17900):
mkdir(&(0x7f0000000000)='./file0\x00', 0x2)
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB='no'])

490.693338ms ago: executing program 3 (id=17901):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0)
pread64(r2, &(0x7f0000002280)=""/4096, 0x1000, 0xd33)

470.14657ms ago: executing program 9 (id=17902):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0)
process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)

379.298049ms ago: executing program 9 (id=17903):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@updpolicy={0xcc, 0x1b, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@loopback, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x20000000000000f, 0x0, 0x9, 0x0, 0x3}, {0x0, 0x2, 0x2}, 0x7eb, 0x8}, [@srcaddr={0x14, 0xd, @in=@local}]}, 0xcc}}, 0x0)
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_ifreq(r2, 0x8948, &(0x7f0000000000)={'bond0\x00', @ifru_mtu=0x10000})
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'geneve0\x00', <r4=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000054)
socket(0x10, 0x3, 0x0)
sendto$packet(r3, &(0x7f0000000180)="0b032200e0ff25", 0x7, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14)
sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELTABLE={0x64, 0x2, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELTABLE={0xc8, 0x2, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0xa7, 0x6, "c8d335341a4676c871df7b90eb4538321363964e41d24c162b5643fe2c9498cf0ec2a86aee969f72a91e55235c50af4f0f046b1027c51b616f8fe10c4448e80ca7ff4490f22e22952540a9259cf4b9be1096ace40c77ef6da1779539112ca09d63f90c39c5219c9e971380478727bbe4d457d4646176d03b7dac0df19806ee5292dd1704b9758f27d8bdbb11c47f5d88efe924a5b6c523fa62df205b28e3e6b5561c12"}]}, @NFT_MSG_DELTABLE={0x48, 0x2, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_USERDATA={0xc, 0x6, "d49272e39ceb3b0f"}]}, @NFT_MSG_DELTABLE={0x1c, 0x2, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELSET={0x50, 0xb, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @tproxy={{0xb}, @void}}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x7}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, @NFT_MSG_DELOBJ={0x14, 0x14, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x7}, @NFT_OBJECT_SECMARK=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x290}, 0x1, 0x0, 0x0, 0x8080}, 0x20040010)

355.344022ms ago: executing program 6 (id=17904):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r2, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000004900010036560000000000000a0000800000200000000000140001"], 0x3c}}, 0x0)

318.010466ms ago: executing program 3 (id=17905):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
write(r0, 0x0, 0x0)
r2 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0xe, 0x80, 0x2, 0x3, 0xb819, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x3, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x2, 0x7, 0x4, 0x3c5b, 0x1, 0x1ff, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x8002, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0x2, 0xa, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x7, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x0, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0xa, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0xfff, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x8, 0x1, 0x2, 0x2, 0x20009, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x40000100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0xa, 0x5, 0x5, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x4, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x3, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0xfffffffe, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x6, 0x1, 0x2, 0x14c, 0x60a7, 0x4, 0x4, 0xffffffff, 0x80000000, 0x7, 0x4, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2d, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0x9, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

258.171252ms ago: executing program 9 (id=17906):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
write(r0, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f00000005c0)=ANY=[@ANYBLOB="0400000004000000040000000740000000000000", @ANYRES32, @ANYBLOB="0000000000000000f6ffffff000000000000f2cd", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000001"], 0x50)

241.314714ms ago: executing program 4 (id=17907):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0xc, 0x54404d0a08a4d8, 0x4})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r2, &(0x7f0000003780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014)
r3 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', <r4=>0x0})
ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r4})

182.39128ms ago: executing program 9 (id=17908):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0)
r3 = socket(0x1e, 0x4, 0x0)
sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000)

174.485521ms ago: executing program 6 (id=17909):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca)
r2 = inotify_init1(0x0)
inotify_add_watch(r2, &(0x7f00000004c0)='./file0\x00', 0x80000800)
inotify_add_watch(r2, &(0x7f0000000080)='./file0\x00', 0x20000004)

174.057591ms ago: executing program 3 (id=17910):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40010)
r3 = socket$netlink(0x10, 0x3, 0x4)
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000012380)="580000001500add427323b470c47b45602067fffffff81004e220700000000000000a8002000eaa57b00090080020efffeffe809020000ff0004f03a007357ac8ddc1fdd00000000000004ffffffe7ee0000000044c60000", 0x58}], 0x1)

86.20567ms ago: executing program 6 (id=17911):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x100080, 0x0)
ioctl$TIOCSSOFTCAR(r2, 0x5453, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0)

76.067351ms ago: executing program 9 (id=17912):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
write(r0, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
sync_file_range(r1, 0x6, 0x7, 0x1)

25.702407ms ago: executing program 3 (id=17913):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
sendmmsg$inet(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040)
r3 = socket(0x10, 0x803, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x0, 0x8000, 0x0, 0x402226, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @empty}}}})

0s ago: executing program 4 (id=17914):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0)
fstatfs(0xffffffffffffffff, 0x0)

kernel console output (not intermixed with test programs):

mounted at /185/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  663.342989][T22342] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  663.367279][T22342] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  663.422514][T22342] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  663.450779][T22342] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  663.485843][T22342] usb 8-1: config 0 descriptor??
[  663.518898][ T1908] netlink: 104 bytes leftover after parsing attributes in process `syz.8.12628'.
[  663.710670][ T1917] usb usb7: usbfs: process 1917 (syz.2.12631) did not claim interface 0 before use
[  663.790759][ T1922] netlink: 8 bytes leftover after parsing attributes in process `syz.8.12632'.
[  663.860650][ T1929] netlink: 44 bytes leftover after parsing attributes in process `syz.2.12634'.
[  664.002259][ T1937] loop2: detected capacity change from 0 to 512
[  664.076337][ T1942] IPv6: NLM_F_CREATE should be specified when creating new route
[  664.101197][T22342] usbhid 8-1:0.0: can't add hid device: -71
[  664.110428][ T1945] 9pnet: p9_errstr2errno: server reported unknown error �0x0000000000000009
[  664.118209][T22342] usbhid: probe of 8-1:0.0 failed with error -71
[  664.162263][ T1937] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  664.223312][T22342] usb 8-1: USB disconnect, device number 5
[  664.269394][ T1937] ext4 filesystem being mounted at /234/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  665.338483][ T2025] overlayfs: option "index=on" is useless in a non-upper mount, ignore
[  665.396615][ T2025] overlayfs: missing 'lowerdir'
[  665.402889][ T2031] 9pnet: p9_errstr2errno: server reported unknown error �0x0000000000000009
[  665.962588][ T2063] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12685'.
[  668.153379][ T2187] netlink: 182 bytes leftover after parsing attributes in process `syz.9.12734'.
[  668.344536][ T2203] netlink: 12 bytes leftover after parsing attributes in process `syz.9.12740'.
[  668.761782][   T26] audit: type=1326 audit(1763513022.913:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2230 comm="syz.7.12754" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa2e3b8c6c9 code=0x0
[  669.087162][ T2258] IPv6: NLM_F_CREATE should be specified when creating new route
[  669.362460][ T2277] netlink: 24 bytes leftover after parsing attributes in process `syz.9.12771'.
[  669.653670][ T2303] netlink: 'syz.9.12784': attribute type 4 has an invalid length.
[  669.661518][ T2303] netlink: 17 bytes leftover after parsing attributes in process `syz.9.12784'.
[  671.287671][ T2392] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  671.299092][ T2394] loop0: detected capacity change from 0 to 128
[  671.472982][ T2394] attempt to access beyond end of device
[  671.472982][ T2394] loop0: rw=2049, want=234, limit=128
[  671.531096][ T2410] attempt to access beyond end of device
[  671.531096][ T2410] loop0: rw=2049, want=242, limit=128
[  671.598701][ T2410] Buffer I/O error on dev loop0, logical block 241, lost async page write
[  672.072420][ T2444] veth0_virt_wifi: mtu less than device minimum
[  672.104561][ T2453] netlink: 57 bytes leftover after parsing attributes in process `syz.9.12845'.
[  672.215541][ T4613] attempt to access beyond end of device
[  672.215541][ T4613] loop0: rw=1, want=242, limit=128
[  672.966629][ T2534] netlink: 44 bytes leftover after parsing attributes in process `syz.9.12869'.
[  673.683202][ T2595] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12893'.
[  673.704762][ T2595] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12893'.
[  674.338400][ T2664] bond0: (slave bridge0): Releasing backup interface
[  674.392493][ T2664] bond0: (slave bridge0): last VLAN challenged slave left bond - VLAN blocking is removed
[  674.524419][ T2664] device team0 left promiscuous mode
[  674.561241][ T2664] bridge0: port 1(team0) entered disabled state
[  674.621300][ T2664] device hsr0 left promiscuous mode
[  674.633772][ T2664] bridge0: port 2(hsr0) entered disabled state
[  674.706768][ T2668] team0: Failed to send options change via netlink (err -105)
[  674.747254][ T2668] team0: Mode changed to "loadbalance"
[  674.825660][ T2696] netlink: 36 bytes leftover after parsing attributes in process `syz.8.12927'.
[  674.864248][ T2696] netlink: 12 bytes leftover after parsing attributes in process `syz.8.12927'.
[  674.912567][ T2696] netlink: 16 bytes leftover after parsing attributes in process `syz.8.12927'.
[  674.954277][ T2696] netlink: 16 bytes leftover after parsing attributes in process `syz.8.12927'.
[  675.812916][T32628] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  675.865897][ T2776] binder: BINDER_SET_CONTEXT_MGR already set
[  675.875580][ T2776] binder: 2771:2776 ioctl 40046207 0 returned -16
[  676.111270][T32628] usb 8-1: Using ep0 maxpacket: 16
[  676.472097][ T2826] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (aio_iiro_16)
[  676.481314][T32628] usb 8-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  676.505719][T32628] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  676.556617][T32628] usb 8-1: Product: syz
[  676.583086][T32628] usb 8-1: Manufacturer: syz
[  676.587719][T32628] usb 8-1: SerialNumber: syz
[  676.648479][T32628] usb 8-1: config 0 descriptor??
[  676.686282][ T2837] netlink: 4 bytes leftover after parsing attributes in process `syz.9.12984'.
[  676.749824][ T2837] tc_dump_action: action bad kind
[  676.976444][ T2854] netlink: 12 bytes leftover after parsing attributes in process `syz.8.12992'.
[  677.209402][T32628] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  677.278837][T32628] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  677.359005][T32628] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[  677.414658][T32628] usb 8-1: media controller created
[  677.477692][ T2877] loop2: detected capacity change from 0 to 4096
[  677.526825][T32628] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  677.763740][T32628] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[  677.784588][T32628] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[  677.863679][ T2912] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13016'.
[  678.409451][ T2943] netlink: 'syz.0.13028': attribute type 4 has an invalid length.
[  678.500942][ T2953] netlink: 12 bytes leftover after parsing attributes in process `syz.8.13029'.
[  678.629623][T30243] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22.
[  678.648852][T30243] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  678.667988][ T2965] netlink: 'syz.0.13035': attribute type 12 has an invalid length.
[  678.933981][ T2979] ipt_REJECT: ECHOREPLY no longer supported.
[  678.990450][ T4612] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  679.001874][ T2983] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (aio_iiro_16)
[  679.372585][ T3002] netlink: 12 bytes leftover after parsing attributes in process `syz.9.13051'.
[  679.499099][T32628] usb 8-1: USB disconnect, device number 6
[  679.681276][T32628] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[  679.893804][ T3038] 9pnet: Could not find request transport: 0xffffffffffffffff
[  679.956601][ T3041] 8021q: VLANs not supported on lo
[  680.237681][ T3060] loop2: detected capacity change from 0 to 1024
[  680.313997][ T3063] netlink: 'syz.7.13076': attribute type 4 has an invalid length.
[  680.327276][ T3060] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option
[  680.375249][ T3060] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  680.479419][ T3060] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003]
[  680.513604][ T3060] System zones: 0-1, 3-36
[  680.578035][ T3060] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback.
[  681.590783][ T3134] netlink: 182 bytes leftover after parsing attributes in process `syz.2.13104'.
[  681.616529][ T3135] netlink: 'syz.8.13107': attribute type 4 has an invalid length.
[  681.667893][ T3135] netlink: 17 bytes leftover after parsing attributes in process `syz.8.13107'.
[  682.792199][   T26] audit: type=1326 audit(1763513036.066:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3159 comm="syz.8.13117" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa91ac5d6c9 code=0x0
[  683.412035][ T3196] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  683.875604][ T3223] loop2: detected capacity change from 0 to 128
[  683.986641][ T3223] attempt to access beyond end of device
[  683.986641][ T3223] loop2: rw=2049, want=234, limit=128
[  684.060622][ T3229] attempt to access beyond end of device
[  684.060622][ T3229] loop2: rw=2049, want=242, limit=128
[  684.154748][ T3229] Buffer I/O error on dev loop2, logical block 241, lost async page write
[  684.363540][ T3244] xt_bpf: check failed: parse error
[  684.785210][ T5392] attempt to access beyond end of device
[  684.785210][ T5392] loop2: rw=1, want=242, limit=128
[  685.494200][ T3309] netlink: 28 bytes leftover after parsing attributes in process `syz.7.13182'.
[  685.552511][ T3314] xt_CT: You must specify a L4 protocol and not use inversions on it
[  685.871390][ T3339] netlink: 'syz.8.13196': attribute type 28 has an invalid length.
[  686.795643][ T3348] netlink: 12 bytes leftover after parsing attributes in process `syz.7.13201'.
[  686.965503][ T3364] netlink: 108 bytes leftover after parsing attributes in process `syz.7.13205'.
[  687.024819][ T3364] netlink: 40 bytes leftover after parsing attributes in process `syz.7.13205'.
[  687.040438][ T3363] bond0: (slave bridge0): Releasing backup interface
[  687.060018][ T3363] bridge0: port 2(bridge_slave_1) entered disabled state
[  687.067410][ T3363] bridge0: port 1(bridge_slave_0) entered disabled state
[  687.173973][ T3363] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  687.236193][ T3363] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  687.309105][ T3363] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  687.360908][ T3363] device bridge_slave_0 left promiscuous mode
[  687.406371][ T3363] bridge0: port 1(bridge_slave_0) entered disabled state
[  687.447678][ T3363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  687.499762][ T3363] device bridge_slave_1 left promiscuous mode
[  687.542226][ T3363] bridge0: port 2(bridge_slave_1) entered disabled state
[  687.627414][ T3363] bond0: (slave bond_slave_0): Releasing backup interface
[  687.671946][ T3363] bond0: (slave bond_slave_1): Releasing backup interface
[  687.685044][ T3403] netlink: 8 bytes leftover after parsing attributes in process `syz.9.13223'.
[  688.034613][ T3363] team0: Port device team_slave_0 removed
[  688.092214][ T3363] team0: Port device team_slave_1 removed
[  688.103704][ T3363] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  688.111214][ T3363] batman_adv: batadv0: Removing interface: batadv_slave_0
[  688.120715][ T3363] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  688.128476][ T3363] batman_adv: batadv0: Removing interface: batadv_slave_1
[  688.146417][ T3363] bond1: (slave geneve2): Releasing active interface
[  688.217649][ T3368] team0: Mode changed to "loadbalance"
[  688.942481][ T3476] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13255'.
[  689.240189][T24511] usb 8-1: new full-speed USB device number 7 using dummy_hcd
[  689.384203][ T3502] netlink: 108 bytes leftover after parsing attributes in process `syz.2.13266'.
[  689.702477][T24511] usb 8-1: config 1 has an invalid interface number: 1 but max is 0
[  689.714686][T24511] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  689.728961][T24511] usb 8-1: config 1 has no interface number 0
[  689.771077][T24511] usb 8-1: too many endpoints for config 1 interface 1 altsetting 0: 253, using maximum allowed: 30
[  689.830258][T24511] usb 8-1: config 1 interface 1 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  689.871229][T24511] usb 8-1: config 1 interface 1 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 253
[  690.232110][T24511] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  690.273120][T24511] usb 8-1: New USB device strings: Mfr=8, Product=0, SerialNumber=1
[  690.443455][T24511] usb 8-1: Manufacturer: syz
[  690.521888][T24511] usb 8-1: SerialNumber: syz
[  690.953592][ T3568] af_packet: tpacket_rcv: packet too big, clamped from 4087 to 4294967272. macoff=96
[  691.020961][T24499] usb 8-1: USB disconnect, device number 7
[  691.201160][ T3584] netlink: 72 bytes leftover after parsing attributes in process `syz.9.13298'.
[  691.644931][   T26] audit: type=1326 audit(1763513044.378:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3618 comm="syz.7.13317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2e3b8c6c9 code=0x7ffc0000
[  691.705053][ T3620] loop7: detected capacity change from 0 to 256
[  691.809211][ T3620] FAT-fs (loop7): Directory bread(block 64) failed
[  691.835906][ T3620] FAT-fs (loop7): Directory bread(block 65) failed
[  691.843900][   T26] audit: type=1326 audit(1763513044.416:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3618 comm="syz.7.13317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa2e3b8c6c9 code=0x7ffc0000
[  691.893918][ T3620] FAT-fs (loop7): Directory bread(block 66) failed
[  691.907194][ T3620] FAT-fs (loop7): Directory bread(block 67) failed
[  691.915551][ T3620] FAT-fs (loop7): Directory bread(block 68) failed
[  691.929595][   T26] audit: type=1326 audit(1763513044.416:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3618 comm="syz.7.13317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2e3b8c6c9 code=0x7ffc0000
[  691.957040][ T3620] FAT-fs (loop7): Directory bread(block 69) failed
[  691.965392][ T3620] FAT-fs (loop7): Directory bread(block 70) failed
[  691.981598][ T3620] FAT-fs (loop7): Directory bread(block 71) failed
[  691.988971][   T26] audit: type=1326 audit(1763513044.416:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3618 comm="syz.7.13317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa2e3b8c6c9 code=0x7ffc0000
[  692.020182][ T3620] FAT-fs (loop7): Directory bread(block 72) failed
[  692.029482][ T3620] FAT-fs (loop7): Directory bread(block 73) failed
[  692.078136][   T26] audit: type=1326 audit(1763513044.425:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3618 comm="syz.7.13317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2e3b8c6c9 code=0x7ffc0000
[  692.153018][   T26] audit: type=1326 audit(1763513044.425:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3618 comm="syz.7.13317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fa2e3b8c6c9 code=0x7ffc0000
[  692.180419][   T26] audit: type=1326 audit(1763513044.425:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3618 comm="syz.7.13317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa2e3b8c703 code=0x7ffc0000
[  692.212843][   T26] audit: type=1326 audit(1763513044.425:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3618 comm="syz.7.13317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa2e3b8b17f code=0x7ffc0000
[  692.267622][ T3645] netlink: 20 bytes leftover after parsing attributes in process `syz.9.13325'.
[  692.285246][   T26] audit: type=1326 audit(1763513044.425:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3618 comm="syz.7.13317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fa2e3b8c757 code=0x7ffc0000
[  692.332182][   T26] audit: type=1326 audit(1763513044.425:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3618 comm="syz.7.13317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa2e3b8af10 code=0x7ffc0000
[  693.300765][ T3695] netlink: 4 bytes leftover after parsing attributes in process `syz.8.13348'.
[  693.333482][ T3695] netlink: 12 bytes leftover after parsing attributes in process `syz.8.13348'.
[  693.722155][ T3728] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  694.524057][ T3757] netlink: 'syz.9.13372': attribute type 4 has an invalid length.
[  694.706216][ T3757] netlink: 'syz.9.13372': attribute type 5 has an invalid length.
[  694.714445][ T3757] netlink: 3657 bytes leftover after parsing attributes in process `syz.9.13372'.
[  695.527413][ T3798] netlink: 'syz.8.13392': attribute type 4 has an invalid length.
[  695.546943][ T3798] netlink: 'syz.8.13392': attribute type 5 has an invalid length.
[  695.572017][ T3798] netlink: 3657 bytes leftover after parsing attributes in process `syz.8.13392'.
[  696.087187][T24499] usb 1-1: new full-speed USB device number 11 using dummy_hcd
[  696.353795][ T3842] netlink: 'syz.7.13416': attribute type 4 has an invalid length.
[  696.361633][ T3842] netlink: 'syz.7.13416': attribute type 5 has an invalid length.
[  696.400361][ T3842] netlink: 3657 bytes leftover after parsing attributes in process `syz.7.13416'.
[  696.434262][ T3845] netlink: 4 bytes leftover after parsing attributes in process `syz.9.13418'.
[  696.541174][T24499] usb 1-1: config 1 has an invalid interface number: 1 but max is 0
[  696.600918][T24499] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  696.633294][T24499] usb 1-1: config 1 has no interface number 0
[  696.679703][T24499] usb 1-1: too many endpoints for config 1 interface 1 altsetting 0: 253, using maximum allowed: 30
[  696.716017][T24499] usb 1-1: config 1 interface 1 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  696.774161][T24499] usb 1-1: config 1 interface 1 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 253
[  696.790367][ T3861] netlink: 12 bytes leftover after parsing attributes in process `syz.7.13423'.
[  696.821610][ T3861] HTB: quantum of class 801A0005 is small. Consider r2q change.
[  696.989438][T24499] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  697.023821][T24499] usb 1-1: New USB device strings: Mfr=8, Product=0, SerialNumber=1
[  697.045056][T24499] usb 1-1: Manufacturer: syz
[  697.075558][T24499] usb 1-1: SerialNumber: syz
[  697.171844][ T3870] netlink: 72 bytes leftover after parsing attributes in process `syz.8.13427'.
[  697.439015][ T3880] cgroup: No subsys list or none specified
[  697.444801][T24499] usb 1-1: USB disconnect, device number 11
[  697.638691][ T3894] netlink: 72 bytes leftover after parsing attributes in process `syz.7.13440'.
[  699.197404][ T3931] loop2: detected capacity change from 0 to 7
[  699.215557][ T3902] xt_hashlimit: size too large, truncated to 1048576
[  699.237013][ T3931] Dev loop2: unable to read RDB block 7
[  699.252077][ T3931]  loop2: unable to read partition table
[  699.261275][ T3931] loop2: partition table beyond EOD, truncated
[  699.273196][ T3931] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  699.743404][T24499] usb 3-1: new full-speed USB device number 9 using dummy_hcd
[  700.169834][T24499] usb 3-1: config 1 has an invalid interface number: 1 but max is 0
[  700.193962][T24499] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  700.259526][T24499] usb 3-1: config 1 has no interface number 0
[  700.281835][T24499] usb 3-1: too many endpoints for config 1 interface 1 altsetting 0: 253, using maximum allowed: 30
[  700.337993][T24499] usb 3-1: config 1 interface 1 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  700.367591][   T26] kauditd_printk_skb: 20 callbacks suppressed
[  700.367605][   T26] audit: type=1326 audit(2000000000.759:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3939 comm="syz.9.13459" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6056d266c9 code=0x0
[  700.383118][T24499] usb 3-1: config 1 interface 1 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 253
[  700.610279][T24499] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  700.627768][T24499] usb 3-1: New USB device strings: Mfr=8, Product=0, SerialNumber=1
[  700.635778][T24499] usb 3-1: Manufacturer: syz
[  700.641612][T24499] usb 3-1: SerialNumber: syz
[  700.957290][ T3982] loop7: detected capacity change from 0 to 128
[  701.032777][ T3982] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  701.052478][ T4227] usb 3-1: USB disconnect, device number 9
[  701.067761][ T3982] FAT-fs (loop7): FAT read failed (blocknr 4128)
[  701.720256][ T4029] netlink: 'syz.7.13496': attribute type 46 has an invalid length.
[  701.763192][ T4029] netlink: 44 bytes leftover after parsing attributes in process `syz.7.13496'.
[  704.318419][ T4104] loop7: detected capacity change from 0 to 128
[  704.348763][ T4227] rtc_cmos 00:00: Alarms can be up to one day in the future
[  704.377954][ T4227] rtc_cmos 00:00: Alarms can be up to one day in the future
[  704.420726][ T4104] EXT4-fs (loop7): Test dummy encryption mode enabled
[  704.426834][ T4227] rtc_cmos 00:00: Alarms can be up to one day in the future
[  704.459428][ T4227] rtc_cmos 00:00: Alarms can be up to one day in the future
[  704.486103][ T4227] rtc rtc0: __rtc_set_alarm: err=-22
[  704.549358][ T4104] EXT4-fs (loop7): mounted filesystem without journal. Opts: test_dummy_encryption,usrjquota=,,errors=continue. Quota mode: none.
[  704.623119][ T4104] ext4 filesystem being mounted at /1438/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  704.955070][ T4135] loop0: detected capacity change from 0 to 8
[  705.086414][ T4135] SQUASHFS error: xz decompression failed, data probably corrupt
[  705.126435][ T4135] SQUASHFS error: Failed to read block 0x108: -5
[  705.148334][ T4135] SQUASHFS error: Unable to read metadata cache entry [106]
[  705.155673][ T4135] SQUASHFS error: Unable to read inode 0x11f
[  705.335552][ T4153] loop2: detected capacity change from 0 to 128
[  705.410904][ T4153] EXT4-fs (loop2): Test dummy encryption mode enabled
[  705.534717][ T4153] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,usrjquota=,,errors=continue. Quota mode: none.
[  705.548443][ T4153] ext4 filesystem being mounted at /392/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  705.873294][ T4178] netlink: 140 bytes leftover after parsing attributes in process `syz.0.13559'.
[  706.087620][ T4189] netlink: 'syz.2.13565': attribute type 10 has an invalid length.
[  706.124386][ T4189] netlink: 40 bytes leftover after parsing attributes in process `syz.2.13565'.
[  706.244481][ T4189] team0: Port device geneve0 added
[  706.496243][ T4226] netlink: 52 bytes leftover after parsing attributes in process `syz.2.13580'.
[  706.539444][ T4229] netlink: 8 bytes leftover after parsing attributes in process `syz.8.13581'.
[  706.595484][ T4239] netlink: 176 bytes leftover after parsing attributes in process `syz.0.13576'.
[  706.648281][ T4235] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  707.534839][ T4300] netlink: 28 bytes leftover after parsing attributes in process `syz.7.13611'.
[  707.655418][ T4308] overlayfs: unrecognized mount option "/C][Ij���J���{eJ�v��z/@�F����7���G����!�I�$�@V�\" or missing value
[  708.087495][ T4327] netlink: 176 bytes leftover after parsing attributes in process `syz.2.13620'.
[  708.133169][ T4329] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  708.263093][   T26] audit: type=1326 audit(2000032776.170:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4288 comm="syz.8.13607" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa91ac5d6c9 code=0x0
[  708.612316][ T4353] netlink: 8 bytes leftover after parsing attributes in process `syz.9.13632'.
[  708.670944][ T4357] netlink: 328 bytes leftover after parsing attributes in process `syz.9.13634'.
[  709.289951][ T4402] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  709.592755][ T4422] tipc: MTU too low for tipc bearer
[  710.441397][ T4442] loop7: detected capacity change from 0 to 512
[  710.673185][ T4442] EXT4-fs (loop7): Ignoring removed nomblk_io_submit option
[  710.700249][ T4442] EXT4-fs (loop7): Ignoring removed nomblk_io_submit option
[  710.760872][ T4442] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a816c099, mo2=0002]
[  710.817619][ T4442] System zones: 1-12
[  710.863562][ T4442] EXT4-fs error (device loop7): ext4_xattr_inode_iget:404: comm syz.7.13676: inode #1: comm syz.7.13676: iget: illegal inode #
[  711.009034][ T4442] EXT4-fs error (device loop7): ext4_xattr_inode_iget:409: comm syz.7.13676: error while reading EA inode 1 err=-117
[  711.096841][ T4442] EXT4-fs (loop7): 1 orphan inode deleted
[  711.135036][ T4442] EXT4-fs (loop7): mounted filesystem without journal. Opts: nodioread_nolock,usrjquota=,usrjquota=,journal_dev=0x0000000000000dcd,resgid=0x0000000000000000,minixdf,debug,grpquota,nombcache,minixdf,nomblk_io_submit,nomblk_io_submit,i_version,,errors=continue. Quota mode: writeback.
[  711.560449][ T4506] device sit0 entered promiscuous mode
[  711.609161][ T4506] netlink: 'syz.7.13704': attribute type 1 has an invalid length.
[  711.653693][ T4506] netlink: 1 bytes leftover after parsing attributes in process `syz.7.13704'.
[  711.675732][ T4511] netlink: 'syz.8.13709': attribute type 12 has an invalid length.
[  711.695142][ T4511] netlink: 4 bytes leftover after parsing attributes in process `syz.8.13709'.
[  711.811691][ T4511] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  711.821367][ T4511] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  711.829568][ T4511] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  711.837787][ T4511] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  711.926245][ T4523] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13714'.
[  711.953680][ T4511] netlink: 'syz.8.13709': attribute type 12 has an invalid length.
[  711.990494][ T4511] netlink: 4 bytes leftover after parsing attributes in process `syz.8.13709'.
[  712.844450][ T4543] netlink: 'syz.8.13723': attribute type 1 has an invalid length.
[  712.923174][ T4543] netlink: 1 bytes leftover after parsing attributes in process `syz.8.13723'.
[  713.109134][ T5392] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  713.425258][ T4563] 9pnet_virtio: no channels available for device syz
[  713.516152][ T4570] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13734'.
[  713.634120][ T4575] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  713.806984][ T4590] netlink: 68 bytes leftover after parsing attributes in process `syz.9.13746'.
[  714.194729][ T4610] overlayfs: missing 'lowerdir'
[  715.115542][ T4622] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  715.210255][ T4622] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  715.404886][ T4641] netlink: 'syz.9.13765': attribute type 13 has an invalid length.
[  715.440490][ T4641] erspan0: refused to change device tx_queue_len
[  715.668379][ T4660] netlink: 4 bytes leftover after parsing attributes in process `syz.8.13776'.
[  715.840564][ T1423] ieee802154 phy0 wpan0: encryption failed: -22
[  715.846983][ T1423] ieee802154 phy1 wpan1: encryption failed: -22
[  716.156296][ T4695] netlink: 312 bytes leftover after parsing attributes in process `syz.9.13792'.
[  716.818877][ T4736] netlink: 'syz.2.13814': attribute type 13 has an invalid length.
[  716.856047][ T4736] erspan0: refused to change device tx_queue_len
[  717.237476][ T4762] netlink: 72 bytes leftover after parsing attributes in process `syz.0.13824'.
[  717.330808][ T4766] overlayfs: missing 'lowerdir'
[  718.262579][ T9188] Bluetooth: hci3: command 0x0406 tx timeout
[  718.268803][ T9187] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  718.591721][ T9187] usb 8-1: Using ep0 maxpacket: 16
[  718.726409][ T9187] usb 8-1: config 1 has an invalid interface number: 64 but max is 0
[  718.768200][ T9187] usb 8-1: config 1 has no interface number 0
[  718.797300][ T9187] usb 8-1: config 1 interface 64 altsetting 0 endpoint 0xF has an invalid bInterval 121, changing to 7
[  719.024821][ T9187] usb 8-1: New USB device found, idVendor=19d2, idProduct=ffbf, bcdDevice=68.78
[  719.061663][ T9187] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  719.082167][ T9187] usb 8-1: Product: syz
[  719.092956][ T9187] usb 8-1: Manufacturer: syz
[  719.102326][ T9187] usb 8-1: SerialNumber: syz
[  719.418117][ T4797] tipc: Started in network mode
[  719.423304][ T4797] tipc: Node identity 0000000000002d210000000000000001, cluster identity 4711
[  719.449133][ T4797] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  719.495869][ T9187] option 8-1:1.64: GSM modem (1-port) converter detected
[  719.543797][ T4801] loop0: detected capacity change from 0 to 256
[  719.551714][ T9187] usb 8-1: USB disconnect, device number 8
[  719.596261][ T9187] option 8-1:1.64: device disconnected
[  719.636460][ T4801] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  719.746003][   T26] audit: type=1804 audit(2000000003.912:529): pid=4801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.13838" name="/newroot/434/file1/file0" dev="loop0" ino=1048682 res=1 errno=0
[  721.917152][ T4852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13859'.
[  722.214686][ T4868] netlink: 12 bytes leftover after parsing attributes in process `syz.7.13865'.
[  722.718002][ T4887] IPv6: NLM_F_CREATE should be specified when creating new route
[  723.376799][ T4920] loop0: detected capacity change from 0 to 512
[  723.386843][ T4923] netlink: 12 bytes leftover after parsing attributes in process `syz.9.13894'.
[  723.486422][ T4925] cgroup: Invalid name
[  723.516315][ T4920] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  723.776064][ T4936] netlink: 8 bytes leftover after parsing attributes in process `syz.8.13908'.
[  724.553181][ T4977] netlink: 'syz.0.13919': attribute type 32 has an invalid length.
[  724.747094][ T4982] loop2: detected capacity change from 0 to 1024
[  724.800510][ T4987] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13924'.
[  724.854182][ T4982] EXT4-fs (loop2): inline encryption not supported
[  724.903600][ T4982] EXT4-fs (loop2): Ignoring removed nobh option
[  724.942671][ T4982] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option
[  724.950105][ T4982] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  725.056221][ T4982] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,nouid32,init_itable=0x0000000000000003,inlinecrypt,data_err=ignore,nodiscard,data_err=ignore,grpquota,nobh,nomblk_io_submit,grpid,dioread_nolock,,errors=continue. Quota mode: writeback.
[  725.458681][ T5023] netlink: 'syz.9.13941': attribute type 28 has an invalid length.
[  726.554759][ T5082] netlink: 24 bytes leftover after parsing attributes in process `syz.8.13969'.
[  726.684237][ T5091] netlink: 'syz.2.13973': attribute type 12 has an invalid length.
[  726.723375][ T5082] netlink: 4 bytes leftover after parsing attributes in process `syz.8.13969'.
[  726.978402][ T5113] netlink: 8 bytes leftover after parsing attributes in process `syz.8.13983'.
[  727.241559][ T5133] netlink: 72 bytes leftover after parsing attributes in process `syz.0.13993'.
[  727.364718][ T5140] netlink: 24 bytes leftover after parsing attributes in process `syz.9.13994'.
[  727.498457][ T4227] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  727.520054][ T5146] netlink: 4 bytes leftover after parsing attributes in process `syz.9.13994'.
[  727.665801][ T5155] loop7: detected capacity change from 0 to 1024
[  727.741576][ T5155] EXT4-fs (loop7): inline encryption not supported
[  727.761877][ T5155] EXT4-fs (loop7): Ignoring removed nobh option
[  727.786097][ T4227] usb 3-1: Using ep0 maxpacket: 32
[  727.807532][ T5155] EXT4-fs (loop7): Ignoring removed nomblk_io_submit option
[  727.836816][ T5155] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  727.914813][ T4227] usb 3-1: config 0 has an invalid interface number: 217 but max is 0
[  727.923017][ T4227] usb 3-1: config 0 has no interface number 0
[  727.946750][ T4227] usb 3-1: config 0 interface 217 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  727.995754][ T5180] can: request_module (can-proto-0) failed.
[  727.996128][ T5155] EXT4-fs (loop7): mounted filesystem without journal. Opts: delalloc,nouid32,init_itable=0x0000000000000003,inlinecrypt,data_err=ignore,nodiscard,data_err=ignore,grpquota,nobh,nomblk_io_submit,grpid,dioread_nolock,,errors=continue. Quota mode: writeback.
[  728.143245][ T4227] usb 3-1: New USB device found, idVendor=1532, idProduct=d2a2, bcdDevice=f7.ed
[  728.157844][ T4227] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  728.174653][ T4227] usb 3-1: Product: syz
[  728.192427][ T4227] usb 3-1: Manufacturer: syz
[  728.197146][ T4227] usb 3-1: SerialNumber: syz
[  728.217245][ T4227] usb 3-1: config 0 descriptor??
[  728.396630][ T5199] netlink: 24 bytes leftover after parsing attributes in process `syz.7.14017'.
[  728.540413][ T4227] usb 3-1: USB disconnect, device number 10
[  730.860430][ T5246] loop0: detected capacity change from 0 to 512
[  730.863142][ T5240] netlink: 'syz.8.14036': attribute type 6 has an invalid length.
[  730.946151][ T5246] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  731.020152][ T5246] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  731.293739][ T5246] EXT4-fs (loop0): 1 truncate cleaned up
[  731.303539][ T5246] EXT4-fs (loop0): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000000,noquota,init_itable=0x000000000000005c,dioread_nolock,dax=never,,errors=continue. Quota mode: none.
[  733.918818][ T5306] loop7: detected capacity change from 0 to 256
[  734.001758][ T5306] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  734.035254][ T5306] exFAT-fs (loop7): Medium has reported failures. Some data may be lost.
[  734.094485][ T5306] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d)
[  734.188879][   T26] audit: type=1800 audit(2000000017.459:530): pid=5306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.14062" name="bus" dev="loop7" ino=1048683 res=0 errno=0
[  734.272555][ T5458] Trying to write to read-only block-device loop7
[  734.290013][ T5458] Trying to write to read-only block-device loop7
[  734.296626][T17454] Trying to write to read-only block-device loop7
[  734.558051][ T5332] binder: 5329:5332 unknown command 0
[  734.585098][ T5332] binder: 5329:5332 ioctl c0306201 200000000080 returned -22
[  734.642268][ T5337] devpts: called with bogus options
[  735.665306][ T5357] __nla_validate_parse: 2 callbacks suppressed
[  735.665341][ T5357] netlink: 28 bytes leftover after parsing attributes in process `syz.7.14086'.
[  737.535290][ T5422] netlink: 5 bytes leftover after parsing attributes in process `syz.8.14115'.
[  737.560951][ T5422] device gretap0 entered promiscuous mode
[  737.590120][ T5422] netlink: 'syz.8.14115': attribute type 1 has an invalid length.
[  737.614655][ T5422] netlink: 3 bytes leftover after parsing attributes in process `syz.8.14115'.
[  737.881797][ T5435] netlink: 'syz.8.14121': attribute type 11 has an invalid length.
[  739.095479][ T5516] netlink: 720 bytes leftover after parsing attributes in process `syz.8.14156'.
[  739.173219][ T5520] tipc: Enabled bearer <udp:syz0>, priority 10
[  739.221189][ T5522] netlink: 40 bytes leftover after parsing attributes in process `syz.8.14160'.
[  739.313316][ T5522] device ip6gre1 entered promiscuous mode
[  739.841440][ T5554] netlink: 5 bytes leftover after parsing attributes in process `syz.0.14174'.
[  739.873402][T24524] Bluetooth: hci0: command 0x0406 tx timeout
[  739.934396][ T5554] device gretap0 entered promiscuous mode
[  740.002835][ T5554] netlink: 'syz.0.14174': attribute type 1 has an invalid length.
[  740.044548][ T5554] netlink: 3 bytes leftover after parsing attributes in process `syz.0.14174'.
[  740.221094][ T5568] loop0: detected capacity change from 0 to 16
[  740.304965][ T5568] erofs: (device loop0): mounted with root inode @ nid 36.
[  740.374477][T24511] tipc: Node number set to 11552
[  740.672482][ T5575] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 360447 of nid 36
[  740.690973][ T5575] erofs: (device loop0): z_erofs_readahead: readahead error at page 87 @ nid 36
[  740.704372][ T5575] erofs: (device loop0): z_erofs_readahead: readahead error at page 86 @ nid 36
[  740.734791][ T5575] erofs: (device loop0): z_erofs_extent_lookback: unknown type 3 @ lcn 84 of nid 36
[  740.744674][ T5575] erofs: (device loop0): z_erofs_readahead: readahead error at page 85 @ nid 36
[  740.765568][ T5575] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 348159 of nid 36
[  740.778005][ T5575] erofs: (device loop0): z_erofs_readahead: readahead error at page 84 @ nid 36
[  740.834962][ T5575] attempt to access beyond end of device
[  740.834962][ T5575] loop0: rw=524288, want=32, limit=16
[  741.121248][ T5583] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  741.197969][ T5586] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  741.605245][ T5608] netlink: 4096 bytes leftover after parsing attributes in process `syz.7.14197'.
[  743.010849][ T5708] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14243'.
[  743.857278][ T5761] loop2: detected capacity change from 0 to 16
[  743.968079][ T5761] erofs: (device loop2): mounted with root inode @ nid 36.
[  744.402048][ T5776] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 360447 of nid 36
[  744.412683][ T5776] erofs: (device loop2): z_erofs_readahead: readahead error at page 87 @ nid 36
[  744.422931][ T5776] erofs: (device loop2): z_erofs_readahead: readahead error at page 86 @ nid 36
[  744.438450][ T5776] erofs: (device loop2): z_erofs_extent_lookback: unknown type 3 @ lcn 84 of nid 36
[  744.448344][ T5776] erofs: (device loop2): z_erofs_readahead: readahead error at page 85 @ nid 36
[  744.459958][ T5776] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 348159 of nid 36
[  744.470938][ T5776] erofs: (device loop2): z_erofs_readahead: readahead error at page 84 @ nid 36
[  744.491717][ T5776] attempt to access beyond end of device
[  744.491717][ T5776] loop2: rw=524288, want=32, limit=16
[  744.739587][ T5785] netlink: 44 bytes leftover after parsing attributes in process `syz.7.14278'.
[  744.772289][ T5785] netlink: 43 bytes leftover after parsing attributes in process `syz.7.14278'.
[  744.800515][ T5785] netlink: 'syz.7.14278': attribute type 6 has an invalid length.
[  744.829289][ T5785] netlink: 'syz.7.14278': attribute type 5 has an invalid length.
[  744.861510][ T5785] netlink: 43 bytes leftover after parsing attributes in process `syz.7.14278'.
[  745.712201][ T5789] loop0: detected capacity change from 0 to 32768
[  745.766273][ T5789] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.14289 (5789)
[  745.858093][ T5789] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  745.911921][ T5789] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  745.949508][ T5789] BTRFS info (device loop0): force zstd compression, level 3
[  745.982396][ T5789] BTRFS info (device loop0): turning on sync discard
[  746.002834][ T5789] BTRFS info (device loop0): force clearing of disk cache
[  746.010735][ T5834] netlink: 4 bytes leftover after parsing attributes in process `syz.8.14300'.
[  746.031906][ T5789] BTRFS info (device loop0): enabling disk space caching
[  746.060850][ T5789] BTRFS info (device loop0): turning off discard
[  746.091812][ T5789] BTRFS info (device loop0): disk space caching is enabled
[  746.127860][ T5789] BTRFS info (device loop0): has skinny extents
[  746.368627][ T5789] BTRFS info (device loop0): enabling ssd optimizations
[  746.426997][ T5789] BTRFS info (device loop0): clearing free space tree
[  746.494609][ T5789] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  746.515122][ T5872] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  746.531427][ T5875] netlink: 68 bytes leftover after parsing attributes in process `syz.8.14312'.
[  746.565158][ T5789] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  746.827825][ T5888] netlink: 76 bytes leftover after parsing attributes in process `syz.7.14318'.
[  747.217773][ T4612] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  747.310238][ T5918] netlink: 'syz.9.14330': attribute type 11 has an invalid length.
[  747.462938][ T5922] netlink: 52 bytes leftover after parsing attributes in process `syz.9.14334'.
[  748.037123][ T5950] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  749.297996][ T5999] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14364'.
[  750.136784][ T6035] fuse: Bad value for 'fd'
[  752.043927][ T6096] overlayfs: failed to clone upperpath
[  752.574291][ T6102] netlink: 'syz.9.14413': attribute type 13 has an invalid length.
[  752.710591][ T6104] netlink: 4 bytes leftover after parsing attributes in process `syz.8.14414'.
[  754.444684][ T6185] device sit0 entered promiscuous mode
[  754.486966][ T6185] netlink: 'syz.2.14453': attribute type 1 has an invalid length.
[  754.527178][ T6185] netlink: 1 bytes leftover after parsing attributes in process `syz.2.14453'.
[  754.806692][ T6207] trusted_key: encrypted_key: master key parameter '' is invalid
[  755.095242][ T6222] netlink: 104 bytes leftover after parsing attributes in process `syz.9.14470'.
[  755.593231][ T6260] overlayfs: missing 'lowerdir'
[  755.658780][T24524] usb 8-1: new full-speed USB device number 9 using dummy_hcd
[  756.063999][T24524] usb 8-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  756.113494][T24524] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  756.181537][T24524] usb 8-1: config 0 descriptor??
[  756.757990][ T6325] loop2: detected capacity change from 0 to 40427
[  756.793391][T24524] [drm] Initialized udl 0.0.1 20120220 for 8-1:0.0 on minor 2
[  756.816878][ T6325] F2FS-fs (loop2): invalid crc value
[  756.822587][T24524] [drm] Initialized udl on minor 2
[  756.847535][ T6325] F2FS-fs (loop2): Found nat_bits in checkpoint
[  756.884630][ T6325] F2FS-fs (loop2): Start checkpoint disabled!
[  756.907942][ T6325] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  756.986985][T24524] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9
[  757.051996][T24524] udl 8-1:0.0: [drm] Cannot find any crtc or sizes
[  757.081005][T24524] usb 8-1: USB disconnect, device number 9
[  757.104062][T32628] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed
[  757.160073][T32628] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed
[  757.173775][T32628] udl 8-1:0.0: [drm] Cannot find any crtc or sizes
[  757.304605][T30243] attempt to access beyond end of device
[  757.304605][T30243] loop2: rw=524288, want=45072, limit=40427
[  757.320884][T30243] attempt to access beyond end of device
[  757.320884][T30243] loop2: rw=0, want=45072, limit=40427
[  757.618808][ T5392] attempt to access beyond end of device
[  757.618808][ T5392] loop2: rw=2049, want=40992, limit=40427
[  757.900231][ T6386] loop7: detected capacity change from 0 to 2048
[  757.991541][ T6386] Alternate GPT is invalid, using primary GPT.
[  758.000967][ T6386]  loop7: p1 p2 p3
[  758.592171][T21713] udevd[21713]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory
[  758.593637][ T4199] udevd[4199]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory
[  758.634369][ T4174] udevd[4174]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory
[  759.515181][ T6450] netlink: 60 bytes leftover after parsing attributes in process `syz.9.14580'.
[  759.528562][ T6451] netlink: 756 bytes leftover after parsing attributes in process `syz.7.14582'.
[  760.157111][ T6490] input: syz0 as /devices/virtual/input/input32
[  760.454301][ T6463] chnl_net:caif_netlink_parms(): no params data found
[  760.597008][ T6511] netlink: 8 bytes leftover after parsing attributes in process `syz.7.14607'.
[  760.830121][ T6463] bridge0: port 1(bridge_slave_0) entered blocking state
[  760.895343][ T6463] bridge0: port 1(bridge_slave_0) entered disabled state
[  760.946866][ T6463] device bridge_slave_0 entered promiscuous mode
[  760.965334][ T6463] bridge0: port 2(bridge_slave_1) entered blocking state
[  760.975916][ T6463] bridge0: port 2(bridge_slave_1) entered disabled state
[  761.028514][ T6463] device bridge_slave_1 entered promiscuous mode
[  761.056798][ T6463] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  761.081990][ T6463] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  761.189404][ T6463] team0: Port device team_slave_0 added
[  761.231081][ T6463] team0: Port device team_slave_1 added
[  761.315524][ T6463] batman_adv: batadv0: Adding interface: batadv_slave_0
[  761.346498][ T6463] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  761.360379][ T6561] mmap: syz.9.14629 (6561): VmData 50036736 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data.
[  761.416793][ T6463] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  761.465617][ T6565] netlink: 'syz.8.14631': attribute type 4 has an invalid length.
[  761.478820][ T6563] netlink: 32 bytes leftover after parsing attributes in process `syz.7.14630'.
[  761.491947][ T6565] netlink: 3657 bytes leftover after parsing attributes in process `syz.8.14631'.
[  761.521262][ T6463] batman_adv: batadv0: Adding interface: batadv_slave_1
[  761.549942][ T6463] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  761.639254][ T6463] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  761.660186][ T6571] netlink: 12 bytes leftover after parsing attributes in process `syz.7.14634'.
[  761.810388][ T6463] device hsr_slave_0 entered promiscuous mode
[  761.853283][ T6463] device hsr_slave_1 entered promiscuous mode
[  761.888633][ T6463] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  761.903364][ T6463] Cannot create hsr debugfs directory
[  761.969207][T24524] Bluetooth: hci3: command 0x0409 tx timeout
[  763.104551][ T6648] netlink: 104 bytes leftover after parsing attributes in process `syz.9.14665'.
[  763.304620][ T6463] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  763.366041][ T6463] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  763.404167][ T6463] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  763.456088][ T6463] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  763.794842][ T6463] 8021q: adding VLAN 0 to HW filter on device bond0
[  763.846300][ T5392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  763.856432][ T5392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  763.892638][ T6463] 8021q: adding VLAN 0 to HW filter on device team0
[  763.960220][ T5458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  763.973858][ T5458] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  763.985552][ T5458] bridge0: port 1(bridge_slave_0) entered blocking state
[  763.992625][ T5458] bridge0: port 1(bridge_slave_0) entered forwarding state
[  764.064712][ T5458] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  764.080994][ T5458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  764.108025][ T5458] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  764.169149][ T5458] bridge0: port 2(bridge_slave_1) entered blocking state
[  764.178542][ T5458] bridge0: port 2(bridge_slave_1) entered forwarding state
[  764.185639][T24524] Bluetooth: hci3: command 0x041b tx timeout
[  764.213076][  T590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  764.253360][  T590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  764.314407][  T590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  764.358070][  T590] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  764.399172][  T590] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  764.439619][  T590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  764.495359][  T590] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  764.514812][ T6463] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  764.536980][ T6463] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  764.591048][  T590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  764.610537][  T590] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  764.652532][  T590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  764.683920][ T6746] netlink: 68 bytes leftover after parsing attributes in process `syz.7.14701'.
[  764.694156][  T590] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  764.738100][ T6743] netlink: 32 bytes leftover after parsing attributes in process `syz.8.14700'.
[  764.779563][  T590] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  764.831471][ T6755] netlink: 'syz.7.14704': attribute type 1 has an invalid length.
[  764.867876][ T6755] netlink: 1 bytes leftover after parsing attributes in process `syz.7.14704'.
[  765.423096][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  765.445677][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  765.486744][ T6463] 8021q: adding VLAN 0 to HW filter on device batadv0
[  766.083175][ T5392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  766.124167][ T5392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  766.182962][ T5458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  766.197772][ T5458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  766.224633][ T6463] device veth0_vlan entered promiscuous mode
[  766.241704][ T5458] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  766.251526][ T5458] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  766.278369][ T6463] device veth1_vlan entered promiscuous mode
[  766.367281][ T5392] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  766.386420][ T5392] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  766.403162][T24511] Bluetooth: hci3: command 0x040f tx timeout
[  766.408050][ T5392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  766.429934][ T5392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  766.449084][ T6463] device veth0_macvtap entered promiscuous mode
[  766.469408][ T6463] device veth1_macvtap entered promiscuous mode
[  766.501701][ T5458] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  766.521863][ T5458] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  766.572689][ T6463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  766.598151][ T6463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  766.611013][ T6463] batman_adv: batadv0: Interface activated: batadv_slave_0
[  766.624088][ T5392] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  766.657654][ T5392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  766.678082][ T6463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  766.728732][ T6463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  766.745438][ T6885] overlayfs: missing 'workdir'
[  766.751520][ T6463] batman_adv: batadv0: Interface activated: batadv_slave_1
[  766.772009][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  766.784763][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  766.799353][ T6463] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  766.808553][ T6463] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  766.823726][ T6463] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  766.833053][ T6463] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  767.032844][ T4612] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  767.051717][ T4612] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  767.182637][ T6899] netlink: 'syz.0.14754': attribute type 27 has an invalid length.
[  767.204916][  T590] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  767.251422][ T5458] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  767.277498][ T5458] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  767.332948][  T590] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  767.441188][ T6918] netlink: 32 bytes leftover after parsing attributes in process `syz.7.14760'.
[  767.492026][ T6918] netlink: 12 bytes leftover after parsing attributes in process `syz.7.14760'.
[  767.544428][ T6918] netlink: 40 bytes leftover after parsing attributes in process `syz.7.14760'.
[  767.608574][ T6918] netlink: 40 bytes leftover after parsing attributes in process `syz.7.14760'.
[  767.659540][ T6932] batman_adv: Cannot find parent device
[  767.962226][ T6958] netlink: 104 bytes leftover after parsing attributes in process `syz.0.14773'.
[  768.278616][ T6979] netlink: 68 bytes leftover after parsing attributes in process `syz.8.14784'.
[  768.424597][ T6986] overlayfs: failed to clone lowerpath
[  768.610999][T32628] Bluetooth: hci3: command 0x0419 tx timeout
[  769.547730][ T7077] netlink: 7 bytes leftover after parsing attributes in process `syz.8.14826'.
[  769.737478][ T7088] batman_adv: Cannot find parent device
[  769.938518][ T7094] xt_CT: No such helper "pptp"
[  770.017328][ T7107] netlink: 'syz.0.14838': attribute type 6 has an invalid length.
[  770.084792][ T7111] netlink: 76 bytes leftover after parsing attributes in process `syz.7.14841'.
[  770.613785][ T7150] netlink: 152 bytes leftover after parsing attributes in process `syz.6.14857'.
[  770.844843][ T7159] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14861'.
[  771.753391][T22342] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  772.020117][T22342] usb 7-1: Using ep0 maxpacket: 8
[  772.073278][ T7231] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  772.147978][T22342] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  772.187533][T22342] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  772.212421][T22342] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  772.243737][T22342] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 256
[  772.280970][T22342] usb 7-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  772.318193][T22342] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  772.364928][T22342] usb 7-1: config 0 descriptor??
[  772.404109][ T7198] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  772.655350][T22342] usb 7-1: USB disconnect, device number 2
[  773.567119][ T7318] tipc: Started in network mode
[  773.601467][ T7318] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711
[  773.642292][ T7318] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  773.692046][ T7329] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (aio_iiro_16)
[  773.837761][ T7335] netlink: 'syz.7.14925': attribute type 1 has an invalid length.
[  773.889283][ T7338] nfs: Unknown parameter 'a'
[  774.344410][ T7370] netlink: 'syz.8.14940': attribute type 1 has an invalid length.
[  775.448270][ T7423] __nla_validate_parse: 1 callbacks suppressed
[  775.448286][ T7423] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14956'.
[  776.231726][ T7472] cgroup: subsys name conflicts with all
[  776.386814][ T7479] loop6: detected capacity change from 0 to 512
[  776.469812][ T7479] EXT4-fs (loop6): Mount option "nodioread_nolock" incompatible with ext2
[  779.899430][ T7673] futex_wake_op: syz.8.15050 tries to shift op by 32; fix this program
[  780.491194][ T7715] netlink: 32 bytes leftover after parsing attributes in process `syz.0.15068'.
[  781.042301][ T7758] netlink: 44 bytes leftover after parsing attributes in process `syz.0.15083'.
[  781.090575][ T7758] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15083'.
[  781.129520][ T7758] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15083'.
[  781.213153][ T7758] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15083'.
[  781.314602][  T590] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  781.325302][ T1423] ieee802154 phy0 wpan0: encryption failed: -22
[  781.331588][ T1423] ieee802154 phy1 wpan1: encryption failed: -22
[  781.913783][ T7821] netlink: 96 bytes leftover after parsing attributes in process `syz.7.15111'.
[  783.806571][ T7920] loop7: detected capacity change from 0 to 1024
[  784.221420][ T7940] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15155'.
[  784.640337][ T7960] netlink: 156 bytes leftover after parsing attributes in process `syz.0.15162'.
[  785.289812][ T8002] netlink: 68 bytes leftover after parsing attributes in process `syz.9.15179'.
[  785.355768][ T8008] overlayfs: failed to clone lowerpath
[  786.666775][ T8086] tmpfs: Unknown parameter 'noswap'
[  786.974384][   T26] audit: type=1326 audit(2000000046.741:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8103 comm="syz.8.15218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91ac5d6c9 code=0x7ffc0000
[  787.150921][   T26] audit: type=1326 audit(2000000046.741:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8103 comm="syz.8.15218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91ac5d6c9 code=0x7ffc0000
[  787.286018][   T26] audit: type=1326 audit(2000000046.741:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8103 comm="syz.8.15218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7fa91ac5d6c9 code=0x7ffc0000
[  787.443315][   T26] audit: type=1326 audit(2000000046.741:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8103 comm="syz.8.15218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91ac5d6c9 code=0x7ffc0000
[  787.900389][ T8163] overlayfs: workdir and upperdir must be separate subtrees
[  789.536214][ T8287] netlink: 56 bytes leftover after parsing attributes in process `syz.7.15294'.
[  789.780678][ T8307] netlink: 'syz.9.15303': attribute type 10 has an invalid length.
[  789.828411][ T8307] netlink: 40 bytes leftover after parsing attributes in process `syz.9.15303'.
[  789.906687][   T26] audit: type=1326 audit(2000000049.490:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8311 comm="syz.0.15304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5947ced6c9 code=0x7ffc0000
[  789.910199][ T8307] device geneve0 entered promiscuous mode
[  789.966024][ T8307] team0: Port device geneve0 added
[  790.007777][   T26] audit: type=1326 audit(2000000049.518:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8311 comm="syz.0.15304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5947ced6c9 code=0x7ffc0000
[  790.124091][ T8326] netlink: 36 bytes leftover after parsing attributes in process `syz.0.15309'.
[  790.164732][   T26] audit: type=1326 audit(2000000049.518:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8311 comm="syz.0.15304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7f5947ced6c9 code=0x7ffc0000
[  790.229948][ T8326] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15309'.
[  790.249897][ T8336] netlink: 20 bytes leftover after parsing attributes in process `syz.6.15311'.
[  790.270423][ T8326] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15309'.
[  790.321169][ T8326] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15309'.
[  790.330242][   T26] audit: type=1326 audit(2000000049.518:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8311 comm="syz.0.15304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5947ced6c9 code=0x7ffc0000
[  790.494043][   T26] audit: type=1326 audit(2000000049.518:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8311 comm="syz.0.15304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5947ced6c9 code=0x7ffc0000
[  791.107902][ T8383] netlink: 'syz.7.15332': attribute type 1 has an invalid length.
[  791.148360][ T8383] netlink: 1 bytes leftover after parsing attributes in process `syz.7.15332'.
[  791.793868][ T8415] netlink: 76 bytes leftover after parsing attributes in process `syz.6.15345'.
[  792.210491][ T8441] netlink: 8 bytes leftover after parsing attributes in process `syz.7.15355'.
[  792.247703][ T8441] erspan0: default FDB implementation only supports local addresses
[  792.715855][ T8435] infiniband sy�: set down
[  792.779003][ T8435] infiniband sy�: added bond_slave_0
[  793.144098][ T8435] RDS/IB: sy�: added
[  793.182972][ T8435] smc: adding ib device sy� with port count 1
[  793.243381][ T8435] smc:    ib device sy� port 1 has pnetid 
[  794.609531][ T8583] netlink: 'syz.7.15414': attribute type 10 has an invalid length.
[  794.649457][ T8583] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  794.666933][ T8583] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  794.720635][ T8583] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  794.758925][ T8583] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  794.863909][ T8583] team0: Failed to send options change via netlink (err -105)
[  794.871442][ T8583] team0: Port device geneve0 added
[  796.088640][ T8651] tmpfs: Bad value for 'mpol'
[  796.428982][ T8665] netlink: 'syz.8.15456': attribute type 1 has an invalid length.
[  796.450846][ T8665] __nla_validate_parse: 5 callbacks suppressed
[  796.450860][ T8665] netlink: 4 bytes leftover after parsing attributes in process `syz.8.15456'.
[  796.691037][ T8629] loop6: detected capacity change from 0 to 40427
[  796.765067][ T8629] F2FS-fs (loop6): build fault injection attr: rate: 771, type: 0x1ffff
[  796.852811][ T8629] F2FS-fs (loop6): invalid crc value
[  796.885540][ T8629] F2FS-fs (loop6): Found nat_bits in checkpoint
[  797.143754][ T8629] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  797.330880][ T6463] attempt to access beyond end of device
[  797.330880][ T6463] loop6: rw=2049, want=45104, limit=40427
[  797.461791][ T8685] chnl_net:caif_netlink_parms(): no params data found
[  797.627549][ T8685] bridge0: port 1(bridge_slave_0) entered blocking state
[  797.640621][ T8685] bridge0: port 1(bridge_slave_0) entered disabled state
[  797.679431][ T8685] device bridge_slave_0 entered promiscuous mode
[  797.719554][ T8685] bridge0: port 2(bridge_slave_1) entered blocking state
[  797.726991][ T8685] bridge0: port 2(bridge_slave_1) entered disabled state
[  797.762309][ T8685] device bridge_slave_1 entered promiscuous mode
[  797.846460][ T8685] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  797.872462][ T8685] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  797.920092][ T8685] team0: Port device team_slave_0 added
[  797.937304][ T8685] team0: Port device team_slave_1 added
[  797.975771][ T8685] batman_adv: batadv0: Adding interface: batadv_slave_0
[  797.982723][ T8685] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  798.011218][ T8685] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  798.026352][ T8685] batman_adv: batadv0: Adding interface: batadv_slave_1
[  798.033750][ T8685] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  798.060494][ T8685] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  798.124766][ T8685] device hsr_slave_0 entered promiscuous mode
[  798.131697][ T8685] device hsr_slave_1 entered promiscuous mode
[  798.140710][ T8685] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  798.148339][ T8685] Cannot create hsr debugfs directory
[  798.924723][ T4613] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  798.983521][ T4613] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  799.052561][ T4613] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  799.099903][ T4613] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  799.135763][   T21] Bluetooth: hci0: command 0x0409 tx timeout
[  799.356991][ T8685] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  799.382779][ T8685] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  799.405727][ T4613] tipc: Left network mode
[  799.410886][ T8685] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  799.437383][ T8685] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  799.580353][ T8685] 8021q: adding VLAN 0 to HW filter on device bond0
[  799.621371][ T8685] 8021q: adding VLAN 0 to HW filter on device team0
[  799.637588][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  799.646082][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  799.699558][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  799.709823][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  799.730079][ T4612] bridge0: port 1(bridge_slave_0) entered blocking state
[  799.737236][ T4612] bridge0: port 1(bridge_slave_0) entered forwarding state
[  799.759000][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  799.771194][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  799.785264][ T4612] bridge0: port 2(bridge_slave_1) entered blocking state
[  799.792389][ T4612] bridge0: port 2(bridge_slave_1) entered forwarding state
[  799.810566][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  799.871050][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  799.879634][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  799.898429][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  799.921280][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  799.944255][ T8685] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  799.963548][ T8685] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  799.998763][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  800.006854][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  800.022070][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  800.030518][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  800.040119][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  800.048924][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  800.058220][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  800.067678][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  800.260851][  T746] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  800.277889][  T746] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  800.291633][ T8685] 8021q: adding VLAN 0 to HW filter on device batadv0
[  800.341209][  T746] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  800.351593][  T746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  800.373609][  T746] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  800.383564][  T746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  800.395069][ T8685] device veth0_vlan entered promiscuous mode
[  800.404834][  T746] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  800.413317][  T746] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  800.428297][ T8685] device veth1_vlan entered promiscuous mode
[  800.485300][  T746] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  800.517432][  T746] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  800.527764][  T746] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  800.543156][  T746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  800.555436][ T8685] device veth0_macvtap entered promiscuous mode
[  800.603749][ T8685] device veth1_macvtap entered promiscuous mode
[  800.656784][ T8685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  800.679284][ T8685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  800.690343][ T8685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  800.701248][ T8685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  800.715238][ T8685] batman_adv: batadv0: Interface activated: batadv_slave_0
[  800.736515][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  800.752528][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  800.763568][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  800.777183][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  800.788808][ T8685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  800.799309][ T8685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  800.810317][ T8685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  800.821007][ T8685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  800.832454][ T8685] batman_adv: batadv0: Interface activated: batadv_slave_1
[  800.840371][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  800.849325][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  800.866213][ T8685] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  800.882448][ T8685] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  800.891764][ T8685] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  800.901307][ T8685] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  801.066327][ T4612] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  801.074913][ T4612] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  801.108311][  T746] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  801.164042][ T4612] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  801.178022][ T4612] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  801.207530][  T746] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  801.353129][ T4263] Bluetooth: hci0: command 0x041b tx timeout
[  801.488545][ T8849] overlayfs: failed to clone lowerpath
[  801.770161][ T8870] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  801.839896][ T4613] device hsr_slave_0 left promiscuous mode
[  801.881033][ T4613] device hsr_slave_1 left promiscuous mode
[  801.993939][ T4613] device hsr_slave_0 left promiscuous mode
[  802.007710][ T4613] device hsr_slave_1 left promiscuous mode
[  802.039909][ T4613] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  802.066804][ T4613] batman_adv: batadv0: Removing interface: batadv_slave_0
[  802.131448][ T4613] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  802.159380][ T4613] batman_adv: batadv0: Removing interface: batadv_slave_1
[  802.191850][ T4613] device bridge_slave_1 left promiscuous mode
[  802.219661][ T4613] bridge0: port 2(bridge_slave_1) entered disabled state
[  802.266113][ T4613] device bridge_slave_0 left promiscuous mode
[  802.276667][ T4613] bridge0: port 1(bridge_slave_0) entered disabled state
[  802.319578][ T4613] device veth1_macvtap left promiscuous mode
[  802.333803][ T4613] device veth0_macvtap left promiscuous mode
[  802.593507][ T4613] bond0 (unregistering): (slave bond1): Releasing backup interface
[  802.608541][ T4613] bond1 (unregistering): Released all slaves
[  802.643826][ T4613] bond0 (unregistering): Released all slaves
[  803.265668][ T4613] team0 (unregistering): Port device team_slave_1 removed
[  803.280419][ T4613] team0 (unregistering): Port device team_slave_0 removed
[  803.295651][ T4613] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  803.309617][ T4613] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  803.380659][ T4613] bond0 (unregistering): (slave bridge0): Releasing backup interface
[  803.390588][ T4613] bond0 (unregistering): Released all slaves
[  803.455262][ T8901] device wg2 entered promiscuous mode
[  803.627701][ T4263] Bluetooth: hci0: command 0x040f tx timeout
[  803.657908][ T8955] IPv6: syztnl0: Disabled Multicast RS
[  803.667647][   T26] audit: type=1326 audit(2000524350.396:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8956 comm="syz.7.15517" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa2e3b8c6c9 code=0x0
[  805.787144][ T9190] Bluetooth: hci0: command 0x0419 tx timeout
[  806.387145][ T9078] xt_bpf: check failed: parse error
[  806.950091][ T9123] netlink: 'syz.9.15579': attribute type 28 has an invalid length.
[  807.798053][ T9167] netlink: 4 bytes leftover after parsing attributes in process `syz.9.15596'.
[  807.893144][ T9167] device geneve0 left promiscuous mode
[  807.949686][ T9167] team0 (unregistering): Port device geneve0 removed
[  808.530563][ T9216] netlink: 8 bytes leftover after parsing attributes in process `syz.9.15612'.
[  809.265198][ T9270] netlink: 8 bytes leftover after parsing attributes in process `syz.9.15634'.
[  809.614266][   T21] usb 8-1: new full-speed USB device number 10 using dummy_hcd
[  810.072799][   T21] usb 8-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  810.121316][   T21] usb 8-1: config 0 interface 0 has no altsetting 0
[  810.129282][ T9333] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (aio_iiro_16)
[  810.153707][   T21] usb 8-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00
[  810.171146][   T21] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  810.191840][   T21] usb 8-1: config 0 descriptor??
[  810.222088][ T9274] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  810.440094][ T9351] loop3: detected capacity change from 0 to 512
[  810.528257][ T9351] EXT4-fs (loop3): Ignoring removed oldalloc option
[  810.563204][   T21] usbhid 8-1:0.0: can't add hid device: -71
[  810.569303][   T21] usbhid: probe of 8-1:0.0 failed with error -71
[  810.639194][   T21] usb 8-1: USB disconnect, device number 10
[  810.653330][ T9351] EXT4-fs (loop3): 1 truncate cleaned up
[  810.659684][ T9351] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,bsdgroups,nouid32,errors=remount-ro,jqfmt=vfsv1,oldalloc,stripe=0x0000000000000005,. Quota mode: writeback.
[  811.207982][ T9402] overlayfs: failed to clone upperpath
[  812.096679][ T9458] netlink: 108 bytes leftover after parsing attributes in process `syz.3.15708'.
[  812.566543][ T9496] xt_CT: You must specify a L4 protocol and not use inversions on it
[  812.648474][ T9500] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15726'.
[  812.779094][ T9500] bond0: (slave bond_slave_1): Releasing backup interface
[  814.783770][ T9639] netlink: 4 bytes leftover after parsing attributes in process `syz.6.15781'.
[  815.175202][ T9639] team0 (unregistering): Port device team_slave_0 removed
[  815.270904][ T9639] team0 (unregistering): Port device team_slave_1 removed
[  815.916032][   T26] audit: type=1326 audit(2000524361.887:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9704 comm="syz.8.15809" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa91ac5d6c9 code=0x0
[  815.994597][ T9708] netlink: 12 bytes leftover after parsing attributes in process `syz.9.15810'.
[  816.053883][ T9711] netlink: 72 bytes leftover after parsing attributes in process `syz.3.15811'.
[  816.423829][ T9740] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15822'.
[  816.819369][ T9766] netlink: 24 bytes leftover after parsing attributes in process `syz.3.15833'.
[  817.126608][ T9792] loop6: detected capacity change from 0 to 512
[  817.309989][ T9792] EXT4-fs (loop6): mounted filesystem without journal. Opts: init_itable=0x0000000000000003,stripe=0x0000000000000005,,errors=continue. Quota mode: writeback.
[  817.428086][ T9792] ext4 filesystem being mounted at /212/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  818.474485][ T9884] netlink: 16 bytes leftover after parsing attributes in process `syz.8.15879'.
[  818.646291][ T9898] binder: 9896:9898 ioctl 401c5820 200000000000 returned -22
[  818.748807][ T9907] netlink: 28 bytes leftover after parsing attributes in process `syz.8.15889'.
[  818.944624][ T9920] netlink: 16 bytes leftover after parsing attributes in process `syz.6.15895'.
[  819.385938][ T9956] netlink: 28 bytes leftover after parsing attributes in process `syz.9.15909'.
[  820.220822][T10009] syz.7.15929[10009] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  820.221347][T10009] syz.7.15929[10009] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  820.342794][T10016] binder: Unknown parameter 'context'
[  820.580915][T10027] netlink: 'syz.6.15937': attribute type 3 has an invalid length.
[  820.942811][T10050] netlink: 96 bytes leftover after parsing attributes in process `syz.6.15946'.
[  820.993708][T10052] netlink: 'syz.8.15949': attribute type 1 has an invalid length.
[  821.075368][T10052] 8021q: adding VLAN 0 to HW filter on device bond0
[  821.111654][T10057] bond0: (slave gretap2): making interface the new active one
[  821.235867][T10057] bond0: (slave gretap2): Enslaving as an active interface with an up link
[  821.235993][ T5392] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  821.580891][T10086] netlink: 8 bytes leftover after parsing attributes in process `syz.7.15961'.
[  821.861733][T10103] 9pnet: p9_fd_create_unix (10103): problem connecting socket: ./bus: -2
[  821.876564][T10105] tipc: Started in network mode
[  821.886436][T10105] tipc: Node identity aaaaaaaaaa3, cluster identity 4711
[  821.913502][T10105] tipc: Enabled bearer <eth:ipvlan1>, priority 0
[  823.090616][T10185] netlink: 16 bytes leftover after parsing attributes in process `syz.6.16000'.
[  823.102014][ T9190] tipc: Node number set to 10136234
[  823.132916][T10192] loop7: detected capacity change from 0 to 512
[  824.399523][   T26] audit: type=1326 audit(2000524369.833:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10267 comm="syz.9.16036" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6056d266c9 code=0x0
[  824.773448][T10292] loop6: detected capacity change from 0 to 128
[  824.795659][   T26] audit: type=1326 audit(2000524370.217:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10291 comm="syz.9.16045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6056d266c9 code=0x7ffc0000
[  824.851042][   T26] audit: type=1326 audit(2000524370.217:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10291 comm="syz.9.16045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6056d266c9 code=0x7ffc0000
[  824.982863][T10307] netlink: 182 bytes leftover after parsing attributes in process `syz.8.16051'.
[  825.009557][   T26] audit: type=1326 audit(2000524370.217:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10291 comm="syz.9.16045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f6056d266c9 code=0x7ffc0000
[  825.179535][   T26] audit: type=1326 audit(2000524370.255:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10291 comm="syz.9.16045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6056d266c9 code=0x7ffc0000
[  825.357145][   T26] audit: type=1326 audit(2000524370.264:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10291 comm="syz.9.16045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f6056d266c9 code=0x7ffc0000
[  825.518684][   T26] audit: type=1326 audit(2000524370.264:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10291 comm="syz.9.16045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f6056d266c9 code=0x7ffc0000
[  826.080709][T10396] netlink: 182 bytes leftover after parsing attributes in process `syz.9.16091'.
[  826.173879][T10399] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  826.200733][T10402] netlink: 84 bytes leftover after parsing attributes in process `syz.7.16094'.
[  827.221374][T10467] netlink: 188 bytes leftover after parsing attributes in process `syz.3.16118'.
[  828.499962][T10497] loop3: detected capacity change from 0 to 32768
[  828.652663][T10497] XFS (loop3): Mounting V5 Filesystem
[  828.821916][T10570] netlink: 56 bytes leftover after parsing attributes in process `syz.7.16155'.
[  828.863306][T10497] XFS (loop3): Ending clean mount
[  828.926208][T10573] �Z,�)�u�G�@-֚�)��@��(j
[  829.007808][T10588] netlink: 'syz.7.16164': attribute type 32 has an invalid length.
[  829.109933][ T8685] XFS (loop3): Unmounting Filesystem
[  829.496853][T10623] overlayfs: failed to clone upperpath
[  829.875587][T10646] netlink: 92 bytes leftover after parsing attributes in process `syz.9.16191'.
[  830.331451][T10681] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16200'.
[  830.485486][T10690] netlink: 40 bytes leftover after parsing attributes in process `syz.8.16206'.
[  830.610241][T10681] team0 (unregistering): Port device team_slave_0 removed
[  830.661515][T10681] team0 (unregistering): Port device team_slave_1 removed
[  830.729815][T10695] netlink: 12 bytes leftover after parsing attributes in process `syz.6.16208'.
[  831.440237][T10744] 9pnet: Insufficient options for proto=fd
[  831.734333][T10769] netlink: 17 bytes leftover after parsing attributes in process `syz.8.16238'.
[  832.105939][T10799] netlink: 288 bytes leftover after parsing attributes in process `syz.6.16250'.
[  832.225514][T10810] netlink: 12 bytes leftover after parsing attributes in process `syz.9.16255'.
[  832.481957][T10826] loop6: detected capacity change from 0 to 8
[  832.614097][T10835] netlink: 'syz.3.16266': attribute type 4 has an invalid length.
[  832.680003][T10835] netlink: 'syz.3.16266': attribute type 21 has an invalid length.
[  832.730073][T10835] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.16266'.
[  833.567645][ T4263] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  833.586708][T10889] loop7: detected capacity change from 0 to 1024
[  833.823558][ T4263] usb 7-1: Using ep0 maxpacket: 32
[  833.962348][ T4263] usb 7-1: config 0 has an invalid interface number: 250 but max is 1
[  833.991922][ T4263] usb 7-1: config 0 has no interface number 1
[  834.022904][ T4263] usb 7-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  834.250158][ T4263] usb 7-1: New USB device found, idVendor=0408, idProduct=3090, bcdDevice=a6.3f
[  834.266732][ T4263] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  834.284683][ T4263] usb 7-1: Product: syz
[  834.292867][ T4263] usb 7-1: Manufacturer: syz
[  834.297683][ T4263] usb 7-1: SerialNumber: syz
[  834.331112][ T4263] usb 7-1: config 0 descriptor??
[  834.380004][ T4263] usb 7-1: Found UVC 0.00 device syz (0408:3090)
[  834.395450][ T4263] usb 7-1: No valid video chain found.
[  834.407031][T10928] 
@0�: renamed from bond_slave_1
[  834.677482][T22342] usb 7-1: USB disconnect, device number 3
[  836.223731][T10965] chnl_net:caif_netlink_parms(): no params data found
[  836.260770][T11022] netlink: 'syz.3.16335': attribute type 8 has an invalid length.
[  836.401448][T11031] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16338'.
[  836.649330][ T4612] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  836.714333][T10965] bridge0: port 1(bridge_slave_0) entered blocking state
[  836.732449][T10965] bridge0: port 1(bridge_slave_0) entered disabled state
[  836.771505][T10965] device bridge_slave_0 entered promiscuous mode
[  836.827267][ T4612] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  836.891920][T10965] bridge0: port 2(bridge_slave_1) entered blocking state
[  836.907147][T10965] bridge0: port 2(bridge_slave_1) entered disabled state
[  836.958065][T10965] device bridge_slave_1 entered promiscuous mode
[  836.986666][ T4612] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  837.214632][T10965] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  837.281287][ T4612] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  837.337067][T10965] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  837.426941][ T9190] Bluetooth: hci2: command 0x0409 tx timeout
[  837.491217][T10965] team0: Port device team_slave_0 added
[  837.551072][T10965] team0: Port device team_slave_1 added
[  837.735217][T10965] batman_adv: batadv0: Adding interface: batadv_slave_0
[  837.756837][T10965] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  837.807282][T11092] tipc: Failed to remove unknown binding: 66,1,1/4:456459848/456459850
[  837.841855][T11092] tipc: Failed to remove unknown binding: 66,1,1/4:456459848/456459850
[  837.850612][T10965] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  837.862392][T11092] tipc: Failed to remove unknown binding: 66,1,1/4:456459848/456459850
[  837.917672][T10965] batman_adv: batadv0: Adding interface: batadv_slave_1
[  837.928255][T10965] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  838.055678][T10965] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  838.155708][T24499] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  838.242316][T10965] device hsr_slave_0 entered promiscuous mode
[  838.302281][T10965] device hsr_slave_1 entered promiscuous mode
[  838.326165][T10965] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  838.367991][T10965] Cannot create hsr debugfs directory
[  838.428924][T24499] usb 4-1: Using ep0 maxpacket: 32
[  838.557021][T24499] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  838.565051][T24499] usb 4-1: config 0 has no interface number 0
[  838.604163][T24499] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  838.643359][T24499] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  838.657966][T11142] netlink: 'syz.9.16381': attribute type 25 has an invalid length.
[  838.698106][T24499] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[  838.735534][T24499] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  838.781885][T24499] usb 4-1: config 0 descriptor??
[  839.271216][T11183] overlayfs: missing 'lowerdir'
[  839.484797][ T4612] device hsr_slave_0 left promiscuous mode
[  839.494510][ T4612] device hsr_slave_1 left promiscuous mode
[  839.554385][T24499] input: HID 28bd:0094 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:28BD:0094.0007/input/input33
[  839.644588][ T4227] Bluetooth: hci2: command 0x041b tx timeout
[  839.674704][T24499] uclogic 0003:28BD:0094.0007: input,hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.3-1/input1
[  839.805582][T24499] usb 4-1: USB disconnect, device number 10
[  839.963339][ T4612] team0 (unregistering): Port device geneve0 removed
[  840.293463][ T4612] bond0 (unregistering): Released all slaves
[  840.876844][T11237] netlink: 40 bytes leftover after parsing attributes in process `syz.3.16419'.
[  841.166597][T10965] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  841.228541][T10965] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  841.296454][T10965] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  841.350667][T11265] device hsr0 left promiscuous mode
[  841.357784][T11265] bridge0: port 1(hsr0) entered disabled state
[  841.469830][T10965] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  841.617731][T11284] netlink: 52 bytes leftover after parsing attributes in process `syz.3.16434'.
[  841.711828][T11293] netlink: 36 bytes leftover after parsing attributes in process `syz.9.16437'.
[  841.799591][T10965] 8021q: adding VLAN 0 to HW filter on device bond0
[  841.868820][ T5392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  841.876424][   T21] Bluetooth: hci2: command 0x040f tx timeout
[  841.900697][ T5392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  841.943527][T10965] 8021q: adding VLAN 0 to HW filter on device team0
[  841.983427][ T5392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  842.011277][ T5392] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  842.043562][ T5392] bridge0: port 1(bridge_slave_0) entered blocking state
[  842.050666][ T5392] bridge0: port 1(bridge_slave_0) entered forwarding state
[  842.108359][ T5392] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  842.190417][ T5392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  842.222699][ T5392] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  842.287937][ T5392] bridge0: port 2(bridge_slave_1) entered blocking state
[  842.295044][ T5392] bridge0: port 2(bridge_slave_1) entered forwarding state
[  842.370381][ T5392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  842.438911][ T5392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  842.518027][T10965] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  842.578127][T10965] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  842.633802][  T746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  842.660133][  T746] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  842.737940][  T746] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  843.476619][  T746] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  843.511423][  T746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  843.546975][  T746] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  843.671688][  T746] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  843.748911][  T746] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  843.781156][  T746] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  843.911949][  T746] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  844.078958][   T21] Bluetooth: hci2: command 0x0419 tx timeout
[  844.967941][ T4611] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  845.000282][ T4611] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  845.063479][T10965] 8021q: adding VLAN 0 to HW filter on device batadv0
[  845.749759][ T4611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  845.771626][ T4611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  845.858288][ T5458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  845.881442][ T5458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  845.909876][T10965] device veth0_vlan entered promiscuous mode
[  845.932044][ T5458] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  845.943934][ T5458] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  845.981426][T10965] device veth1_vlan entered promiscuous mode
[  846.041223][ T5458] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  846.063709][ T5458] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  846.111591][ T5458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  846.142343][ T5458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  846.195343][T10965] device veth0_macvtap entered promiscuous mode
[  846.244154][T10965] device veth1_macvtap entered promiscuous mode
[  846.312725][T10965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  846.353435][T10965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  846.384976][T10965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  846.423963][T10965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  846.465109][T10965] batman_adv: batadv0: Interface activated: batadv_slave_0
[  846.507263][T11441] netlink: 12 bytes leftover after parsing attributes in process `syz.6.16483'.
[  846.539728][  T746] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  846.554990][  T746] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  846.585805][  T746] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  846.613326][  T746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  846.646160][T10965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  846.668433][T10965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  846.729151][T10965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  846.786357][T10965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  846.811012][ T1423] ieee802154 phy0 wpan0: encryption failed: -22
[  846.817411][ T1423] ieee802154 phy1 wpan1: encryption failed: -22
[  846.851398][T10965] batman_adv: batadv0: Interface activated: batadv_slave_1
[  846.883416][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  846.901994][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  846.969000][T10965] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  846.977736][T10965] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  847.031544][T10965] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  847.040268][T10965] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  847.404278][ T5458] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  847.421662][ T5458] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  847.493242][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  847.570330][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  847.637918][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  847.692279][ T5458] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  848.126231][T11503] netlink: 68 bytes leftover after parsing attributes in process `syz.4.16506'.
[  848.855761][T11556] 9pnet: Insufficient options for proto=fd
[  850.005162][T11621] netlink: 16 bytes leftover after parsing attributes in process `syz.3.16556'.
[  851.346557][T11646] netlink: 68 bytes leftover after parsing attributes in process `syz.3.16568'.
[  851.444105][T11650] netlink: 4 bytes leftover after parsing attributes in process `syz.9.16569'.
[  851.582667][T11657] netlink: 44 bytes leftover after parsing attributes in process `syz.9.16573'.
[  851.603597][T11657] netlink: 12 bytes leftover after parsing attributes in process `syz.9.16573'.
[  851.608184][T11659] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  851.626456][T11657] netlink: 16 bytes leftover after parsing attributes in process `syz.9.16573'.
[  851.659109][T11657] netlink: 16 bytes leftover after parsing attributes in process `syz.9.16573'.
[  852.098714][T11689] loop6: detected capacity change from 0 to 128
[  852.989985][T11738] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16605'.
[  853.321418][ T9188] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  853.404649][T11765] netlink: 16 bytes leftover after parsing attributes in process `syz.9.16615'.
[  853.716032][ T9188] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  853.742157][ T9188] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  853.774047][ T9188] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  853.827900][ T9188] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  853.901155][ T9188] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  854.078240][ T9188] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  854.094862][ T9188] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  854.103369][ T9188] usb 5-1: Product: syz
[  854.107567][ T9188] usb 5-1: Manufacturer: syz
[  854.164059][ T9188] cdc_wdm 5-1:1.0: skipping garbage
[  854.169754][ T9188] cdc_wdm 5-1:1.0: skipping garbage
[  854.196177][ T9188] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  854.202115][ T9188] cdc_wdm 5-1:1.0: Unknown control protocol
[  854.421650][   T21] usb 5-1: USB disconnect, device number 14
[  855.471023][T11898] 9pnet_virtio: no channels available for device ./bus
[  855.842917][T11917] netlink: 12 bytes leftover after parsing attributes in process `syz.6.16647'.
[  856.490490][T11961] loop4: detected capacity change from 0 to 512
[  856.604932][T11961] EXT4-fs (loop4): Ignoring removed oldalloc option
[  856.611642][T11961] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  856.707466][T11961] EXT4-fs (loop4): 1 truncate cleaned up
[  856.723059][T11961] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,oldalloc,barrier=0x0000000000000003,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: writeback.
[  856.784656][T11978] netlink: 8 bytes leftover after parsing attributes in process `syz.9.16669'.
[  856.879340][T11985] netlink: 12 bytes leftover after parsing attributes in process `syz.6.16671'.
[  857.021141][T11985] device macvlan2 entered promiscuous mode
[  857.028736][T11985] device bond1 entered promiscuous mode
[  857.145144][T11985] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  857.176458][T11985] device bond1 left promiscuous mode
[  857.260631][T12005] loop4: detected capacity change from 0 to 1024
[  857.346610][T12005] hfsplus: invalid btree flag
[  857.375667][T12005] hfsplus: failed to load extents file
[  857.407234][T12005] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0
[  857.574000][T12014] user requested TSC rate below hardware speed
[  858.818462][T12092] veth0_virt_wifi: mtu less than device minimum
[  859.103891][T12104] sch_tbf: burst 512 is lower than device syzkaller0 mtu (1500) !
[  861.557476][T12193] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16737'.
[  861.592427][T12193] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  861.660706][T12193] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  861.665692][T12198] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16744'.
[  861.757695][T12198] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16744'.
[  862.087152][T12218] netlink: 88 bytes leftover after parsing attributes in process `syz.6.16750'.
[  862.665725][T12235] rtc_cmos 00:00: Alarms can be up to one day in the future
[  862.946135][T12262] netlink: 148 bytes leftover after parsing attributes in process `syz.6.16768'.
[  862.995556][T12262] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  863.379511][T12287] rtc_cmos 00:00: Alarms can be up to one day in the future
[  863.484352][T32628] rtc_cmos 00:00: Alarms can be up to one day in the future
[  863.504637][T32628] rtc_cmos 00:00: Alarms can be up to one day in the future
[  863.547720][T32628] rtc_cmos 00:00: Alarms can be up to one day in the future
[  863.619239][T32628] rtc_cmos 00:00: Alarms can be up to one day in the future
[  863.626559][T32628] rtc rtc0: __rtc_set_alarm: err=-22
[  863.638860][T12303] netlink: 20 bytes leftover after parsing attributes in process `syz.9.16785'.
[  863.759476][T12311] 9p: Unknown access argument a
[  864.768010][T12376] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[  864.829912][T12376] overlayfs: missing 'lowerdir'
[  864.971492][T12384] netlink: 8 bytes leftover after parsing attributes in process `syz.9.16816'.
[  865.057496][T24527] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  865.351039][T24527] usb 7-1: Using ep0 maxpacket: 16
[  865.507645][T24527] usb 7-1: config 8 has an invalid interface number: 108 but max is 0
[  865.534109][T24527] usb 7-1: config 8 has no interface number 0
[  865.718369][T24527] usb 7-1: New USB device found, idVendor=0421, idProduct=04c9, bcdDevice=6e.97
[  865.756088][T24527] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  865.796950][T24527] usb 7-1: Product: syz
[  865.801152][T24527] usb 7-1: Manufacturer: syz
[  865.825431][T24527] usb 7-1: SerialNumber: syz
[  866.163438][T24527] usb 7-1: bad CDC descriptors
[  866.169762][T24527] usb 7-1: bad CDC descriptors
[  866.180887][T24527] cdc_acm 7-1:8.108: Zero length descriptor references
[  866.218542][T24527] cdc_acm: probe of 7-1:8.108 failed with error -22
[  866.251001][T24527] usb 7-1: USB disconnect, device number 4
[  866.876045][T12505] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16857'.
[  867.102020][T12520] netlink: 24 bytes leftover after parsing attributes in process `syz.9.16863'.
[  867.384748][T12540] ptrace attach of "./syz-executor exec"[12542] was attempted by "./syz-executor exec"[12540]
[  867.784461][   T26] audit: type=1326 audit(2000524410.537:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12568 comm="syz.6.16882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c008006c9 code=0x7ffc0000
[  867.895740][   T26] audit: type=1326 audit(2000524410.537:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12568 comm="syz.6.16882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c008006c9 code=0x7ffc0000
[  867.995208][   T26] audit: type=1326 audit(2000524410.537:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12568 comm="syz.6.16882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1c008006c9 code=0x7ffc0000
[  868.122866][   T26] audit: type=1326 audit(2000524410.537:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12568 comm="syz.6.16882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c008006c9 code=0x7ffc0000
[  868.199644][   T26] audit: type=1326 audit(2000524410.537:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12568 comm="syz.6.16882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c008006c9 code=0x7ffc0000
[  868.307069][   T26] audit: type=1326 audit(2000524410.537:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12568 comm="syz.6.16882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1c008006c9 code=0x7ffc0000
[  868.346106][   T26] audit: type=1326 audit(2000524410.537:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12568 comm="syz.6.16882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c008006c9 code=0x7ffc0000
[  868.425910][   T26] audit: type=1326 audit(2000524410.537:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12568 comm="syz.6.16882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c008006c9 code=0x7ffc0000
[  868.449019][   T26] audit: type=1326 audit(2000524410.537:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12568 comm="syz.6.16882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1c008006c9 code=0x7ffc0000
[  868.471978][   T26] audit: type=1326 audit(2000524410.537:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12568 comm="syz.6.16882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c008006c9 code=0x7ffc0000
[  870.666128][T12634] loop6: detected capacity change from 0 to 8
[  870.829713][T12634] SQUASHFS error: zlib decompression failed, data probably corrupt
[  870.850638][T12634] SQUASHFS error: Failed to read block 0x9b: -5
[  870.859757][T12634] SQUASHFS error: Unable to read metadata cache entry [99]
[  870.873407][T12634] SQUASHFS error: Unable to read inode 0x127
[  871.594440][T12732] usb usb9: usbfs: process 12732 (syz.6.16938) did not claim interface 0 before use
[  872.534840][T12789] fuse: Bad value for 'fd'
[  873.726421][T12825] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16969'.
[  873.771254][T12825] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  873.786875][T12825] batman_adv: batadv0: Removing interface: batadv_slave_0
[  873.819631][T12825] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  873.841085][T12825] batman_adv: batadv0: Removing interface: batadv_slave_1
[  873.942756][T12839] netlink: 12 bytes leftover after parsing attributes in process `syz.9.16975'.
[  874.519772][T12876] overlayfs: bad mount option "redirect_dir=nofollow:/"
[  874.564852][T12874] loop4: detected capacity change from 0 to 1024
[  874.567843][T12879] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16992'.
[  874.628901][T12874] EXT4-fs (loop4): Ignoring removed nobh option
[  874.648091][T12874] EXT4-fs (loop4): Ignoring removed bh option
[  874.665220][T12874] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  874.739393][T12874] EXT4-fs (loop4): mounted filesystem without journal. Opts: resuid=0x0000000000000000,data_err=abort,barrier=0x0000000000000001,dioread_nolock,grpjquota=,quota,data_err=ignore,grpquota,nobh,user_xattr,bh,minixdf,,errors=continue. Quota mode: writeback.
[  875.195655][T12909] netlink: 288 bytes leftover after parsing attributes in process `syz.3.17003'.
[  875.480897][T12923] netlink: 8 bytes leftover after parsing attributes in process `syz.9.17008'.
[  876.628786][T12955] loop6: detected capacity change from 0 to 164
[  877.190349][T12989] netlink: 8 bytes leftover after parsing attributes in process `syz.9.17033'.
[  877.228195][T12989] netlink: 8 bytes leftover after parsing attributes in process `syz.9.17033'.
[  877.329927][T12997] netlink: 'syz.6.17037': attribute type 15 has an invalid length.
[  877.369833][T12997] netlink: 24 bytes leftover after parsing attributes in process `syz.6.17037'.
[  877.375463][T13002] overlayfs: conflicting options: userxattr,metacopy=on
[  877.562552][T13013] overlayfs: bad mount option "redirect_dir=nofollow:/"
[  877.710816][T13019] overlayfs: conflicting options: nfs_export=on,metacopy=on
[  877.855925][T13028] netlink: 48 bytes leftover after parsing attributes in process `syz.9.17049'.
[  877.888091][T13031] loop6: detected capacity change from 0 to 128
[  878.090987][T13031] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  878.120631][T13031] ext4 filesystem being mounted at /519/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  878.181836][T13036] netlink: 'syz.3.17051': attribute type 15 has an invalid length.
[  878.228457][T13036] netlink: 24 bytes leftover after parsing attributes in process `syz.3.17051'.
[  879.740894][T13105] __nla_validate_parse: 1 callbacks suppressed
[  879.740947][T13105] netlink: 44 bytes leftover after parsing attributes in process `syz.8.17064'.
[  879.838109][T13105] netlink: 'syz.8.17064': attribute type 6 has an invalid length.
[  879.906515][T13109] loop3: detected capacity change from 0 to 128
[  879.965213][T13105] netlink: 'syz.8.17064': attribute type 5 has an invalid length.
[  880.091412][T13128] 8021q: adding VLAN 0 to HW filter on device bond0
[  880.103676][T13105] netlink: 'syz.8.17064': attribute type 4 has an invalid length.
[  880.132476][T13128] bond0: (slave ip6gretap1): making interface the new active one
[  880.147218][T13128] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link
[  880.165422][ T4613] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  880.177744][T13137] netlink: 28 bytes leftover after parsing attributes in process `syz.8.17085'.
[  880.202061][T13109] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  880.245945][T13109] ext4 filesystem being mounted at /293/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  880.788036][T13169] netlink: 12 bytes leftover after parsing attributes in process `syz.6.17098'.
[  881.095745][T13189] ptrace attach of "./syz-executor exec"[6463] was attempted by ""[13189]
[  883.511180][T13320] netlink: 37 bytes leftover after parsing attributes in process `syz.9.17146'.
[  884.833826][T13406] netlink: 252 bytes leftover after parsing attributes in process `syz.4.17175'.
[  885.392049][T13438] loop6: detected capacity change from 0 to 4096
[  885.519752][T13438] EXT4-fs (loop6): Test dummy encryption mode enabled
[  885.598326][T13438] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption=v1,dioread_nolock,,errors=continue. Quota mode: writeback.
[  885.676209][T13438] EXT4-fs (loop6): Test dummy encryption mode enabled
[  885.698503][T13438] EXT4-fs (loop6): re-mounted. Opts: test_dummy_encryption=v1,dioread_nolock,. Quota mode: writeback.
[  886.856157][T13463] loop4: detected capacity change from 0 to 32768
[  886.938349][T13463] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.17204 (13463)
[  887.059102][T13522] binder: BINDER_SET_CONTEXT_MGR already set
[  887.065315][T13463] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm
[  887.110052][T13522] binder: 13516:13522 ioctl 40046207 0 returned -16
[  887.116886][T13463] BTRFS info (device loop4): force zlib compression, level 3
[  887.166046][T13463] BTRFS info (device loop4): force clearing of disk cache
[  887.214859][T13463] BTRFS info (device loop4): setting nodatasum
[  887.265033][T13463] BTRFS info (device loop4): allowing degraded mounts
[  887.302310][T13463] BTRFS info (device loop4): enabling disk space caching
[  887.332939][T13463] BTRFS info (device loop4): disk space caching is enabled
[  887.367795][T13463] BTRFS info (device loop4): has skinny extents
[  887.421802][T13548] netlink: 337 bytes leftover after parsing attributes in process `syz.6.17217'.
[  887.562804][T13463] BTRFS info (device loop4): clearing free space tree
[  887.572326][T13463] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  887.618913][T13463] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  888.527377][T13608] loop6: detected capacity change from 0 to 512
[  888.618733][T13608] EXT4-fs (loop6): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nodiscard,quota,,errors=continue. Quota mode: writeback.
[  888.681755][T13608] ext4 filesystem being mounted at /573/file0/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  888.773945][T13608] EXT4-fs error (device loop6): ext4_do_update_inode:5218: inode #2: comm syz.6.17234: corrupted inode contents
[  888.818713][T13608] EXT4-fs error (device loop6): ext4_dirty_inode:6054: inode #2: comm syz.6.17234: mark_inode_dirty error
[  888.874008][T13608] EXT4-fs error (device loop6): ext4_do_update_inode:5218: inode #2: comm syz.6.17234: corrupted inode contents
[  888.910286][T13608] EXT4-fs error (device loop6): __ext4_ext_dirty:183: inode #2: comm syz.6.17234: mark_inode_dirty error
[  888.958894][T13629] netlink: 104 bytes leftover after parsing attributes in process `syz.4.17242'.
[  889.895276][T13685] loop4: detected capacity change from 0 to 128
[  890.010671][T13685] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  890.041734][T13685] ext4 filesystem being mounted at /149/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  890.865585][T13729] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17286'.
[  892.285753][   T26] kauditd_printk_skb: 4 callbacks suppressed
[  892.285768][   T26] audit: type=1326 audit(2000524433.523:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13774 comm="syz.9.17302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6056d266c9 code=0x7fc00000
[  892.684516][ T9190] Bluetooth: hci3: command 0x0406 tx timeout
[  892.693898][T13806] netlink: 28 bytes leftover after parsing attributes in process `syz.8.17308'.
[  892.984910][   T26] audit: type=1326 audit(2000524434.189:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13774 comm="syz.9.17302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6056cc2789 code=0x7fc00000
[  893.057479][   T26] audit: type=1326 audit(2000524434.189:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13774 comm="syz.9.17302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f6056cc284f code=0x7fc00000
[  893.058423][T13827] netlink: 20 bytes leftover after parsing attributes in process `syz.9.17312'.
[  894.113096][T13880] SET target dimension over the limit!
[  895.206812][T13910] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17336'.
[  895.262242][T13910] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready
[  895.361635][T13910] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17336'.
[  895.884886][T13939] syz.4.17345[13939] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  895.884986][T13939] syz.4.17345[13939] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  897.038372][T14009] netlink: 40 bytes leftover after parsing attributes in process `syz.6.17371'.
[  897.063894][T13999] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  898.359617][T14099] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[  899.105604][T14130] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  899.854851][T14162] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  900.185501][T14176] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17421'.
[  900.531237][T14195] netlink: 'syz.9.17426': attribute type 4 has an invalid length.
[  900.563491][T14195] netlink: 3649 bytes leftover after parsing attributes in process `syz.9.17426'.
[  900.632505][T14200] netlink: 24 bytes leftover after parsing attributes in process `syz.3.17428'.
[  902.234387][T14304] netlink: 72 bytes leftover after parsing attributes in process `syz.3.17469'.
[  902.482480][T14315] kvm [14311]: vcpu0, guest rIP: 0xfff0 Hyper-V unhandled wrmsr: 0x40000034 data 0x8
[  902.837438][T14344] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (aio_iiro_16)
[  902.908456][T14344] netlink: 'syz.4.17483': attribute type 10 has an invalid length.
[  902.935395][T14350] netlink: 104 bytes leftover after parsing attributes in process `syz.3.17484'.
[  902.962957][T14344] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  903.009157][ T4612] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  903.022359][ T4612] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  903.292128][T14367] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  904.962159][T14435] device veth0 entered promiscuous mode
[  904.968352][T14433] device veth0 left promiscuous mode
[  905.075037][T14439] overlayfs: conflicting lowerdir path
[  905.311148][T14451] cgroup: Unknown subsys name 'audit'
[  905.890846][T14487] 9pnet_virtio: no channels available for device syz
[  906.730062][T14552] netlink: 24 bytes leftover after parsing attributes in process `syz.9.17556'.
[  906.890525][   T26] audit: type=1326 audit(2000524447.230:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14560 comm="syz.3.17560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe478ef16c9 code=0x7ffc0000
[  906.983487][   T26] audit: type=1326 audit(2000524447.258:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14560 comm="syz.3.17560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe478ef16c9 code=0x7ffc0000
[  907.086448][   T26] audit: type=1326 audit(2000524447.258:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14560 comm="syz.3.17560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe478ef16c9 code=0x7ffc0000
[  907.122642][T14578] netlink: 'syz.4.17563': attribute type 2 has an invalid length.
[  907.140634][   T26] audit: type=1326 audit(2000524447.267:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14560 comm="syz.3.17560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe478ef16c9 code=0x7ffc0000
[  907.240292][   T26] audit: type=1326 audit(2000524447.267:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14560 comm="syz.3.17560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe478ef16c9 code=0x7ffc0000
[  907.313932][   T26] audit: type=1326 audit(2000524447.267:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14560 comm="syz.3.17560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe478ef16c9 code=0x7ffc0000
[  907.342043][   T26] audit: type=1326 audit(2000524447.267:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14560 comm="syz.3.17560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe478ef16c9 code=0x7ffc0000
[  907.379997][   T26] audit: type=1326 audit(2000524447.267:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14560 comm="syz.3.17560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe478ef16c9 code=0x7ffc0000
[  907.474016][   T26] audit: type=1326 audit(2000524447.267:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14560 comm="syz.3.17560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe478ef16c9 code=0x7ffc0000
[  907.525410][   T26] audit: type=1326 audit(2000524447.267:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14560 comm="syz.3.17560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe478ef16c9 code=0x7ffc0000
[  908.522111][T14675] tipc: Resetting bearer <eth:ipvlan1>
[  908.727897][T14689] loop4: detected capacity change from 0 to 512
[  908.821285][T14689] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  909.063549][T14710] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (aio_iiro_16)
[  909.269054][T14719] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  910.339355][T14763] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17630'.
[  910.631318][T14782] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17640'.
[  912.171639][T14832] netlink: 28 bytes leftover after parsing attributes in process `syz.4.17659'.
[  912.192947][T14835] netlink: 24 bytes leftover after parsing attributes in process `syz.3.17661'.
[  912.299377][ T1423] ieee802154 phy0 wpan0: encryption failed: -22
[  912.305725][ T1423] ieee802154 phy1 wpan1: encryption failed: -22
[  912.506759][T14856] netlink: 4 bytes leftover after parsing attributes in process `syz.9.17666'.
[  912.602847][T14862] overlayfs: missing 'lowerdir'
[  912.737208][T14870] netlink: 44 bytes leftover after parsing attributes in process `syz.3.17674'.
[  912.770324][T14870] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17674'.
[  913.104678][T14896] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17684'.
[  913.366524][T14914] netlink: 'syz.3.17691': attribute type 16 has an invalid length.
[  913.413707][T14914] netlink: 64114 bytes leftover after parsing attributes in process `syz.3.17691'.
[  915.083707][T15013] netlink: 'syz.9.17728': attribute type 1 has an invalid length.
[  915.891238][T15071] loop6: detected capacity change from 0 to 512
[  915.997080][T15071] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002]
[  916.011128][T15071] System zones: 1-12
[  916.065375][T15071] EXT4-fs error (device loop6): dx_probe:823: inode #2: comm syz.6.17751: Directory hole found for htree index block 0
[  916.120186][T15071] EXT4-fs (loop6): Remounting filesystem read-only
[  916.127996][T15071] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -117
[  916.137143][T15071] EXT4-fs error (device loop6): dx_probe:823: inode #2: comm syz.6.17751: Directory hole found for htree index block 0
[  916.154052][T15071] EXT4-fs (loop6): Remounting filesystem read-only
[  916.161541][T15071] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117
[  916.170298][T15071] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpjquota=Jdebug,jqfmt=vfsold,noquota,bsdgroups,usrjquota="nojournal_checksum,errors=remount-ro,,. Quota mode: writeback.
[  917.461056][T15162] netlink: 52 bytes leftover after parsing attributes in process `syz.6.17784'.
[  917.587344][T15174] tmpfs: Bad value for 'mpol'
[  917.790043][T15184] tipc: Started in network mode
[  917.795577][T15184] tipc: Node identity ac14142f, cluster identity 4711
[  917.818323][T15184] tipc: New replicast peer: 0.0.0.0
[  917.834919][T15184] tipc: Enabled bearer <udp:syz2>, priority 10
[  917.882126][T15187] netlink: 756 bytes leftover after parsing attributes in process `syz.9.17794'.
[  919.038995][ T9190] tipc: Node number set to 2886997039
[  919.905333][T15273] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  920.021924][T15281] netlink: 'syz.9.17831': attribute type 4 has an invalid length.
[  921.803785][T15336] tipc: Started in network mode
[  921.813198][T15336] tipc: Node identity ac14142f, cluster identity 4711
[  921.853186][T15336] tipc: New replicast peer: 0.0.0.0
[  921.904146][T15336] tipc: Enabled bearer <udp:syz2>, priority 10
[  922.006446][   T26] kauditd_printk_skb: 37 callbacks suppressed
[  922.028534][   T26] audit: type=1326 audit(2000524461.402:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15345 comm="syz.3.17859" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe478ef16c9 code=0x0
[  922.343481][T15362] netlink: 'syz.3.17867': attribute type 4 has an invalid length.
[  922.955607][   T21] tipc: Node number set to 2886997039
[  923.201612][T15366] loop4: detected capacity change from 0 to 40427
[  923.295201][T15366] F2FS-fs (loop4): invalid crc value
[  923.366315][T15366] F2FS-fs (loop4): Found nat_bits in checkpoint
[  923.451532][T15366] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  924.356569][T10965] attempt to access beyond end of device
[  924.356569][T10965] loop4: rw=2049, want=45104, limit=40427
[  924.857862][T15435] netlink: 12 bytes leftover after parsing attributes in process `syz.6.17895'.
[  924.988104][T15440] netlink: 256 bytes leftover after parsing attributes in process `syz.3.17897'.
[  925.106786][T15447] tmpfs: Unknown parameter 'no'
[  925.120718][T15452] netlink: 44 bytes leftover after parsing attributes in process `syz.4.17884'.
[  925.170053][T15452] netlink: 59 bytes leftover after parsing attributes in process `syz.4.17884'.
[  925.193106][T15456] netlink: 12 bytes leftover after parsing attributes in process `syz.9.17903'.
[  925.202667][T15452] netlink: 59 bytes leftover after parsing attributes in process `syz.4.17884'.
[  925.234497][T15458] netlink: 12 bytes leftover after parsing attributes in process `syz.6.17904'.
[  925.523048][T15474] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (aio_iiro_16)
[  925.556095][    C0] divide error: 0000 [#1] PREEMPT SMP KASAN
[  925.556207][T15474] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (aio_iiro_16)
[  925.561995][    C0] CPU: 0 PID: 5458 Comm: kworker/u4:14 Not tainted syzkaller #0
[  925.578254][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  925.588308][    C0] Workqueue: netns cleanup_net
[  925.593091][    C0] RIP: 0010:comedi_inc_scan_progress+0x19e/0x430
[  925.599423][    C0] Code: b6 0c 19 84 c9 0f 85 b8 01 00 00 03 45 34 4c 8d a5 88 00 00 00 4c 89 e1 48 c1 e9 03 0f b6 0c 19 84 c9 0f 85 c7 01 00 00 31 d2 <41> f7 34 24 41 89 17 45 89 ec eb 0f e8 a1 b1 07 fa 48 bb 00 00 00
[  925.619033][    C0] RSP: 0018:ffffc90000007c68 EFLAGS: 00010046
[  925.625104][    C0] RAX: 0000000000000001 RBX: dffffc0000000000 RCX: 0000000000000000
[  925.633077][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  925.641053][    C0] RBP: ffff88806148b800 R08: ffff88806148b800 R09: fffff52000850201
[  925.649025][    C0] R10: fffff52000850201 R11: 1ffff92000850200 R12: ffff88806148b888
[  925.657004][    C0] R13: 0000000000000004 R14: 0000000000000000 R15: ffff88806148b834
[  925.664977][    C0] FS:  0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000
[  925.673911][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  925.680501][    C0] CR2: 0000001b32823ffc CR3: 00000000298c9000 CR4: 00000000003506f0
[  925.688478][    C0] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083
[  925.696453][    C0] DR3: ffffffffefffff15 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  925.704430][    C0] Call Trace:
[  925.707708][    C0]  <IRQ>
[  925.710559][    C0]  comedi_buf_write_samples+0x371/0x5e0
[  925.716121][    C0]  aio_iiro_16_cos+0x160/0x1b0
[  925.720891][    C0]  ? aio_iiro_16_attach+0x760/0x760
[  925.726096][    C0]  ? lockdep_softirqs_on+0x2f4/0x570
[  925.731391][    C0]  ? aio_iiro_16_attach+0x760/0x760
[  925.736603][    C0]  __handle_irq_event_percpu+0x291/0x9b0
[  925.742242][    C0]  ? __irq_wake_thread+0x150/0x150
[  925.747364][    C0]  ? __irq_exit_rcu+0x12f/0x220
[  925.752217][    C0]  ? do_raw_spin_lock+0x11d/0x280
[  925.757247][    C0]  ? do_raw_spin_unlock+0x11d/0x230
[  925.762450][    C0]  handle_irq_event+0xa5/0x220
[  925.767221][    C0]  handle_edge_irq+0x243/0xb20
[  925.771988][    C0]  __common_interrupt+0xd7/0x1e0
[  925.777190][    C0]  common_interrupt+0xb0/0xd0
[  925.781874][    C0]  </IRQ>
[  925.784810][    C0]  <TASK>
[  925.787740][    C0]  asm_common_interrupt+0x22/0x40
[  925.792768][    C0] RIP: 0010:finish_lock_switch+0x134/0x280
[  925.798582][    C0] Code: be ff ff ff ff e8 7c fc 55 08 85 c0 74 4a 4d 85 ff 75 66 0f 1f 44 00 00 48 89 df e8 76 67 5f 08 e8 11 76 2a 00 fb 48 83 c4 08 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 48 89 df e8 d9 0f fe ff 43 80 3c
[  925.818189][    C0] RSP: 0018:ffffc9000356f368 EFLAGS: 00000282
[  925.824262][    C0] RAX: e289bfce173f5c00 RBX: ffff8880b903a340 RCX: e289bfce173f5c00
[  925.832324][    C0] RDX: dffffc0000000000 RSI: ffffffff8a0b1c60 RDI: ffffffff8a59e580
[  925.840301][    C0] RBP: 1ffff11017207613 R08: dffffc0000000000 R09: fffffbfff1ff7c3d
[  925.848283][    C0] R10: fffffbfff1ff7c3d R11: 1ffffffff1ff7c3c R12: 1ffff110172075c1
[  925.856260][    C0] R13: dffffc0000000000 R14: ffff8880b903ae08 R15: 0000000000000000
[  925.864244][    C0]  finish_task_switch+0x12f/0x640
[  925.869284][    C0]  ? __switch_to_asm+0x34/0x60
[  925.874057][    C0]  __schedule+0x11c3/0x4390
[  925.878584][    C0]  ? __lock_acquire+0x7c60/0x7c60
[  925.883616][    C0]  ? release_firmware_map_entry+0x190/0x190
[  925.889525][    C0]  ? verify_lock_unused+0x140/0x140
[  925.894733][    C0]  ? mark_lock+0x94/0x320
[  925.899068][    C0]  ? kthread_data+0x4b/0xc0
[  925.903586][    C0]  schedule+0x11b/0x1e0
[  925.907749][    C0]  schedule_timeout+0x97/0x280
[  925.912527][    C0]  ? console_conditional_schedule+0x40/0x40
[  925.918427][    C0]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  925.924416][    C0]  ? lock_chain_count+0x20/0x20
[  925.929279][    C0]  ? _raw_spin_unlock_irq+0x1f/0x40
[  925.934493][    C0]  ? lockdep_hardirqs_on+0x94/0x140
[  925.939700][    C0]  do_wait_for_common+0x29a/0x440
[  925.944737][    C0]  ? console_conditional_schedule+0x40/0x40
[  925.950625][    C0]  ? wait_for_completion_killable_timeout+0x60/0x60
[  925.957199][    C0]  ? _raw_spin_lock_irq+0xab/0xe0
[  925.962200][    C0]  ? _raw_spin_lock_irqsave+0xf0/0xf0
[  925.967553][    C0]  wait_for_completion+0x48/0x60
[  925.972490][    C0]  rcu_barrier+0x3f5/0x4b0
[  925.977153][    C0]  ? cond_synchronize_rcu+0x20/0x20
[  925.982329][    C0]  ? unregister_netdevice_many+0x172f/0x18f0
[  925.988301][    C0]  netdev_run_todo+0x2ee/0xa40
[  925.993130][    C0]  ? alloc_netdev_mqs+0xc40/0xc40
[  925.998133][    C0]  ? netdev_refcnt_read+0x50/0x50
[  926.003134][    C0]  ? unregister_netdevice_queue+0x1aa/0x360
[  926.009008][    C0]  ? list_netdevice+0x450/0x450
[  926.013842][    C0]  ? remove_wait_queue+0x2f/0x120
[  926.018905][    C0]  default_device_exit_batch+0x33b/0x390
[  926.024544][    C0]  ? default_device_exit+0x360/0x360
[  926.029822][    C0]  ? wait_woken+0x1b0/0x1b0
[  926.034318][    C0]  ? mutex_lock_nested+0x17/0x20
[  926.039240][    C0]  ? default_device_exit+0x360/0x360
[  926.044533][    C0]  cleanup_net+0x77b/0xb80
[  926.048945][    C0]  ? ops_free_list+0x330/0x330
[  926.053689][    C0]  ? _raw_spin_unlock_irqrestore+0xaa/0x100
[  926.059571][    C0]  ? _raw_spin_unlock+0x40/0x40
[  926.064397][    C0]  ? _raw_spin_unlock_irq+0x1f/0x40
[  926.069574][    C0]  process_one_work+0x863/0x1000
[  926.074504][    C0]  ? worker_detach_from_pool+0x240/0x240
[  926.080123][    C0]  ? lockdep_hardirqs_off+0x70/0x100
[  926.085389][    C0]  ? _raw_spin_lock_irq+0xab/0xe0
[  926.090389][    C0]  ? _raw_spin_lock_irqsave+0xf0/0xf0
[  926.095737][    C0]  ? wq_worker_running+0x97/0x170
[  926.100750][    C0]  worker_thread+0xaa8/0x12a0
[  926.105415][    C0]  ? lockdep_hardirqs_on+0x94/0x140
[  926.110686][    C0]  ? lockdep_hardirqs_on+0x94/0x140
[  926.115861][    C0]  ? _raw_spin_unlock_irqrestore+0xaa/0x100
[  926.121735][    C0]  kthread+0x436/0x520
[  926.125782][    C0]  ? rcu_lock_release+0x20/0x20
[  926.130618][    C0]  ? kthread_blkcg+0xd0/0xd0
[  926.135270][    C0]  ret_from_fork+0x1f/0x30
[  926.139680][    C0]  </TASK>
[  926.142687][    C0] Modules linked in:
[  926.146575][    C0] ---[ end trace d3837cfa68185220 ]---
[  926.152010][    C0] RIP: 0010:comedi_inc_scan_progress+0x19e/0x430
[  926.158321][    C0] Code: b6 0c 19 84 c9 0f 85 b8 01 00 00 03 45 34 4c 8d a5 88 00 00 00 4c 89 e1 48 c1 e9 03 0f b6 0c 19 84 c9 0f 85 c7 01 00 00 31 d2 <41> f7 34 24 41 89 17 45 89 ec eb 0f e8 a1 b1 07 fa 48 bb 00 00 00
[  926.177903][    C0] RSP: 0018:ffffc90000007c68 EFLAGS: 00010046
[  926.183951][    C0] RAX: 0000000000000001 RBX: dffffc0000000000 RCX: 0000000000000000
[  926.191901][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  926.199936][    C0] RBP: ffff88806148b800 R08: ffff88806148b800 R09: fffff52000850201
[  926.208063][    C0] R10: fffff52000850201 R11: 1ffff92000850200 R12: ffff88806148b888
[  926.216016][    C0] R13: 0000000000000004 R14: 0000000000000000 R15: ffff88806148b834
[  926.223965][    C0] FS:  0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000
[  926.232871][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  926.239457][    C0] CR2: 0000001b32823ffc CR3: 00000000298c9000 CR4: 00000000003506f0
[  926.247416][    C0] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083
[  926.255377][    C0] DR3: ffffffffefffff15 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  926.263426][    C0] Kernel panic - not syncing: Fatal exception in interrupt
[  926.270832][    C0] Kernel Offset: disabled
[  926.275137][    C0] Rebooting in 86400 seconds..