last executing test programs:

9.792341311s ago: executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2002}, [@IFLA_IFNAME={0x14, 0x3, 'wlan1\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', <r3=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x5014}}, 0x20}}, 0x0)

9.509210114s ago: executing program 2:
openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
unlink(&(0x7f0000000000)='./file0\x00')
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x0, 0x0, 0x1})
ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000000)=0x1)
close_range(r3, 0xffffffffffffffff, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)

5.294223779s ago: executing program 2:
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0xffff0000, 0xe, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xfeffffff, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50)

5.085566521s ago: executing program 3:
bind$unix(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'tunl0\x00'})
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380), 0x0)
read(r0, &(0x7f0000000200)=""/209, 0xd1)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x335, @time})
ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0xc0a85322, &(0x7f0000000500))
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0x80045300, 0x0)
tkill(0x0, 0x7)

4.326456218s ago: executing program 2:
bpf$MAP_CREATE(0x0, &(0x7f00000009c0), 0x48)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000009c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581"], 0x0)
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000840)=ANY=[@ANYRES32, @ANYBLOB="297c00f9c21980234eab918ac814309e197710e2d610b50fc9fa30d71b80aa11665fc7ff638d11ea1f12", @ANYRES32, @ANYRES16, @ANYRESHEX, @ANYBLOB="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", @ANYRES8, @ANYRESDEC], 0x2, 0x1e8, &(0x7f00000001c0)="$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")
getdents64(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220f00000003a8407a730bf85edacab3"], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f0000000000)={0x3})
syz_usb_control_io$hid(r0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)

4.194404898s ago: executing program 0:
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18030000fffffffb000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000d000000b7020000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001ac0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$inet(r2, &(0x7f0000000cc0)={0x0, 0x0, 0x0}, 0x0)
close(r2)
sendmsg$inet(r3, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x0)

4.123071069s ago: executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x7, 0x0, &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

4.075459926s ago: executing program 0:
r0 = timerfd_create(0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000040)={'syztnl0\x00', 0x0})
openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
futex(&(0x7f0000000700)=0x2, 0x0, 0x2, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0)
rt_sigreturn()
syz_read_part_table(0x401f, &(0x7f0000000000)="$eJzs0DEOAUEUBuB/NqKgUbuERk2UjrKNTqLRuIrKMSQaB3EBJ9CMZElIVuv7mvlnMjMv741vp1WSMttu2l1eNJ28bJKSZF73Jf/nvedrsjgnGfX5pDvUtPcvNycfzveHGoZ96j4N6ro+Ti+/vAcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAe7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3AgAwAAACDM3zqP9gMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwEsBAAD//4IoCls=")
r1 = socket(0x1, 0x2, 0x0)
sendto$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff})
write$binfmt_script(r2, &(0x7f0000000340), 0xffffff46)
sendmsg$unix(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{0x0}], 0x1}, 0x0)
rt_sigreturn()
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write$FUSE_ENTRY(r3, &(0x7f0000001400)={0x47, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xfff6)
write$FUSE_NOTIFY_DELETE(r3, 0x0, 0x2a)

4.046194001s ago: executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2002}, [@IFLA_IFNAME={0x14, 0x3, 'wlan1\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', <r3=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x5014}}, 0x20}}, 0x0)

4.028217173s ago: executing program 3:
openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
unlink(&(0x7f0000000000)='./file0\x00')
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x8})
ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000000)=0x1)
close_range(r3, 0xffffffffffffffff, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)

3.925421939s ago: executing program 4:
r0 = socket$inet(0x2, 0x3, 0x5)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, 0x0, 0x0)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @local, 0x0, 0x1, [@empty]}, 0x14)
syz_emit_ethernet(0x36, &(0x7f0000000280)={@random="fd9c8d593e07", @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x9}}}}}, 0x0)

3.870310277s ago: executing program 0:
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
epoll_create1(0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0xa, 0x801, 0x0)
socket$inet(0xa, 0x801, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet(0xa, 0x801, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0)
getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newtfilter={0x24, 0x10, 0xc27, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {0x0, 0x2}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)

3.859045849s ago: executing program 4:
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4)
bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
sendfile(r0, 0xffffffffffffffff, 0x0, 0xffffffff004)

3.662362049s ago: executing program 0:
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000a40)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0008004500201c000000000011907864010102ac1414aa00004e2300089078"], 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r0}, 0x10)
syz_usb_connect(0x0, 0x10b, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b24b4a10e60407007501000005010902240001010000000904000002ccb8280009050b02000000000009058a02"], 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r1, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000040)="76389e147583ddd0569ba56a5cfd55", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000240)={0x80}, 0x8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00'}, 0x10)
r3 = socket(0x200000100000011, 0x803, 0x0)
socket$packet(0x11, 0x3, 0x300)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000008c0), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000b00)={&(0x7f0000000800), 0xc, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x28, r5, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}]}, 0x28}}, 0x20044039)
sendmsg$netlink(r1, &(0x7f0000000780)={&(0x7f00000002c0)=@kern={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)=[{&(0x7f0000000300)={0x2c, 0x1f, 0x100, 0x70bd25, 0x25dfdbff, "", [@nested={0x19, 0x9, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @ipv4=@local}, @generic="3f6bcba1603d4b1aa0bd13d873"]}]}, 0x2c}, {&(0x7f0000000540)={0x228, 0x18, 0x200, 0x70bd28, 0x25dfdbfd, "", [@generic="810d2e5c0e6461ea91b3f78e03ac580f0f2564aa5220d76bd5d37cf683696239e9085d438779434ab5899910bba87e1e93ea4a706f6b08e4387c63219afb5e91d0e8ad6fc803d1d06e55a0b387aee37d6bf33a825750ccdf4fa92dfd3f116b356c737b029d6ed80df29d350f3c36ff0857722c6d084f9567a3c4536a7c2858d741187985cfbe", @typed={0x8, 0x112, 0x0, 0x0, @ipv4=@remote}, @generic="f473caba21c41a7331c0cb0cc725eef490af80da418524627f9f4f4e2ac1d7bcbeaff6ff884c63", @generic="ca69c1f00249ce74f8a24914dbdf34970cc9b6cb82aae6b14e2537fa3571dfe40c094939748eda33b3eccfda5237de9c62b9c3ffde2f87a03a5bf3461e6212db3a954815332eb204906efbf8ca78235e763607d206e1926afe6e9d12117c61721f1af010354134b2f102a14556ee5c6abcd50088", @generic="e74c70e5770b96af5bc2902b", @typed={0x14, 0x13b, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x40}}, @typed={0x8, 0x7e, 0x0, 0x0, @fd=r0}, @typed={0x14, 0x1c, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @generic="cefa0edea0b45a02b8a51cfafa4b134fe0b661840160df357ed863b68882ea720495af2c1762d87568b0a79590ca2a720566f730634afc9e843d8eb8985f471b6d42331a1f38a8aba9bb8554aa7e696baca16872c2dd9b6a8d841115962239ce68d467403d6bd74c4aa2cd6cd3f779eed01d2b2117f2d037521a1f4160f27524ca3fe379489ebe115a784ae0560f00e486ba9d418d9ec9300317826ad89463ef8b2a998e8714cb398aa1deebbc504d805bd4"]}, 0x228}], 0x2, &(0x7f00000004c0)=[@cred={{0x1c}}], 0x20, 0x4001}, 0x20008880)
sendto$packet(r3, &(0x7f0000000100)="4dcdc7d96a760000000100050000000000060000", 0x34, 0x0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)

2.906610135s ago: executing program 4:
bind$unix(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'tunl0\x00'})
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380), 0x0)
read(r0, &(0x7f0000000200)=""/209, 0xd1)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x335, @time})
ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0xc0a85322, &(0x7f0000000500))
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0x80045300, 0x0)
tkill(0x0, 0x7)

2.435970277s ago: executing program 1:
rt_sigreturn()
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/class/dmi', 0x0, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140))
futex(&(0x7f0000000700)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom1\x00', 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
recvmsg(r1, &(0x7f0000000000)={&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0)
close(r2)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}], 0x1, 0x0)
rt_sigreturn()
clock_gettime(0x0, &(0x7f00000001c0)={<r3=>0x0, <r4=>0x0})
timer_settime(0x0, 0x1, &(0x7f000006b000)={{}, {r3, r4+60000000}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=<r5=>0x0)
timer_settime(r5, 0x0, &(0x7f0000000280)={{}, {0x0, 0x989680}}, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0x5451, 0x0)

2.245150646s ago: executing program 1:
poll(0x0, 0x0, 0x64)
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff})
write$binfmt_script(r1, &(0x7f0000000340), 0x120842e0d0dad189)
r2 = socket$inet6(0xa, 0x1, 0x0)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000340))
sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
timer_create(0x0, &(0x7f00000001c0)={0x0, 0x14}, &(0x7f0000000b80)=<r3=>0x0)
timer_settime(r3, 0x0, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x989680}}, 0x0)
rt_sigreturn()
futex(&(0x7f0000000700)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0)
r4 = semget$private(0x0, 0x4, 0x0)
semop(r4, &(0x7f00000000c0)=[{0x0, 0x5}, {}], 0x2)
semctl$SEM_STAT_ANY(0x0, 0x0, 0x14, 0x0)

2.172144817s ago: executing program 3:
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc))
pipe2(&(0x7f0000000140)={<r1=>0xffffffffffffffff}, 0x0)
read$char_usb(r1, &(0x7f0000000840)=""/160, 0xa0)
close(r1)
dup3(0xffffffffffffffff, r1, 0x0)
rt_sigreturn()
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
futex(&(0x7f0000000000)=0x2, 0x0, 0x2, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x3938700}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
recvmsg(r2, &(0x7f00000000c0)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x49, 0x0}, 0x0)
close(r3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1000, 0x0)
syz_mount_image$erofs(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x1890040, &(0x7f0000000200)={[], [{@uid_gt}, {@fsname={'fsname', 0x3d, '\x1b\x96\x85\xd7\x0e\t\x81\x92\x83f\xc5\x99\xeb\xbdi%\xdf\xc9\xf2\xba<6\n\x810<\x89:i+1T\x16\xb0vk\xf2\x89\xdbPy\x8bQ\b\x83x\xf6@\xe6\xb7/\xb6\x9f\xd7\xe1V\xf3b\xaf\x9e\x84\x110\x1e'}}, {@smackfsdef={'smackfsdef', 0x3d, 'CONNSECMARK\x00'}}, {@obj_role={'obj_role', 0x3d, 'func'}}, {@fowner_eq}, {@dont_appraise}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@appraise_type}, {@dont_measure}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@dont_measure}]}, 0x4, 0x0, 0xfffffffffffffffe)

2.079969331s ago: executing program 1:
r0 = socket$unix(0x1, 0x2, 0x0)
recvmmsg$unix(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f0000004540)=[{&(0x7f0000002080)=""/127, 0x7f}], 0x1}}], 0x1, 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10)
write$binfmt_elf32(r1, 0x0, 0x0)
r2 = msgget$private(0x0, 0x0)
socket$inet(0x2, 0x0, 0x0)
msgrcv(r2, 0x0, 0x0, 0x0, 0x0)
rt_sigreturn()
shutdown(r1, 0x0)
r3 = socket$inet(0x2, 0x2, 0x0)
recvfrom$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0)
msgget(0x1, 0x0)

2.063934934s ago: executing program 3:
r0 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000100))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
syz_open_procfs(0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000000180))
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
socket$xdp(0x2c, 0x3, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bca75fdc7accc038baafb8c2ab7a5293a3617fc6d0", @ANYRES32=0x0], 0x40}}, 0x2400484c)

1.984423066s ago: executing program 1:
r0 = socket$inet(0x2, 0x3, 0x5)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, 0x0, 0x0)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @local, 0x0, 0x1, [@empty]}, 0x14)
syz_emit_ethernet(0x36, &(0x7f0000000280)={@random="fd9c8d593e07", @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x9}}}}}, 0x0)

1.011261295s ago: executing program 2:
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
epoll_create1(0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0xa, 0x801, 0x0)
socket$inet(0xa, 0x801, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet(0xa, 0x801, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0)
getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newtfilter={0x24, 0x10, 0xc27, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {0x0, 0x2}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)

1.003325406s ago: executing program 3:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0)
r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
syz_open_dev$dmmidi(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r6)
sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0)
fgetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)=""/2, 0x2)
ppoll(&(0x7f0000000200)=[{r2, 0x2002}], 0x1, &(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, 0x0)
acct(0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
madvise(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0xe)
r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
ioctl$BLKZEROOUT(r7, 0x127f, &(0x7f0000000240)={0x0, 0x1000000})

994.133647ms ago: executing program 0:
r0 = socket$unix(0x1, 0x2, 0x0)
recvmmsg$unix(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f0000004540)=[{&(0x7f0000002080)=""/127, 0x7f}], 0x1}}], 0x1, 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10)
write$binfmt_elf32(r1, 0x0, 0x0)
r2 = msgget$private(0x0, 0x0)
msgrcv(r2, 0x0, 0x0, 0x0, 0x0)
rt_sigreturn()
shutdown(r1, 0x0)
r3 = socket$inet(0x2, 0x2, 0x0)
recvfrom$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)

982.044179ms ago: executing program 4:
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4)
bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
sendfile(r0, r1, 0x0, 0x0)

971.571141ms ago: executing program 1:
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, &(0x7f0000000080), 0x58)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
getpgid(0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
accept4$unix(r2, &(0x7f0000000300)=@abs, &(0x7f0000000380)=0x6e, 0x80800)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000400), 0x6e, &(0x7f0000000940)=[{0x0}, {&(0x7f0000000500)=""/184, 0xb8}, {&(0x7f00000005c0)=""/45, 0x2d}, {&(0x7f0000000600)=""/10, 0xa}, {0x0}, {&(0x7f0000000740)=""/24, 0x18}, {&(0x7f0000000780)=""/227, 0xe3}, {&(0x7f0000000880)=""/141, 0x8d}], 0x8, &(0x7f0000000a40)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}, 0x2000)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x4, 0x0, 0xc}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000008500", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x200}, 0x1c)
listen(r5, 0x2)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae03, 0x3c)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r6, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000000000000000000000000002850000000f000000a50000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)

618.737095ms ago: executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000700)=ANY=[], 0x1, 0x22a, &(0x7f0000000f00)="$eJzs3T9rU20YB+A7b9u3pSDpIBRF8IiLU2gr7i1SQQwoSgadLLZFaWLBQECH1s0voV+hjq6Cg7j6BVSQKrjYrYMQqSc2bRrbSJocaa9r6c05z+/503PIIYE8uXumsjS/XF3c2FiPkZFcDE7HdGzmYiz+i4FIPQ0A4CjZrNfjez2V9VwAgP7w/AeA46fD5/+NPk4JAOixzt//f/T5AAAcEbdu37k2UyzO3kySkYjKs1qpVkr/pudnFuNBlGMhJiIfPyLq29L6ytXi7ESy5ctYlCqrjfxqrTSwOz8Z+Rhrn59MUrvzQzHayH8YjYWYinycbJ+fapv/Py6c3zF+IfLx/l4sRznmYyvbzK9MJsnl68WW/PCvdgAAAAAAAAAAAAAAAAAAAAAA0AuFZFvb/XsKhT+dT/Od7w/Uuj/PYJwezHbtAAAAAAAAAAAAAAAAAAAA8K+oPn6yNFcuLzzar3j4bu3NQW06LHKNcbvtp/vixLnPz9Mjw9HaZuDv/j+HW7w+29sh1iKi637ert8/dbE6fimzKzi0ZxVD+91a3/Kx5yofUvEy09v496oPbDz+Ynru1cqnr5323PeXIgAAAAAAAAAAAAAAAAAAOPaaX/rdeTSX3YQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAPN3//vXZH1GgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4GcAAAD//wMDnd0=")
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48)
getdents64(r0, &(0x7f0000000300)=""/231, 0xe7)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00'}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000a00), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_PORT_GET(r7, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x3c, r6, 0x9, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}}, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0)
mkdirat(r8, &(0x7f0000000140)='./bus\x00', 0x0)
unlinkat(r8, &(0x7f0000000340)='./bus\x00', 0x200)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r2, 0x0, 0x0)
preadv(r9, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x42000)
syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

221.140235ms ago: executing program 2:
openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
unlink(&(0x7f0000000000)='./file0\x00')
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x8})
ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000000)=0x1)
close_range(r3, 0xffffffffffffffff, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)

11.558978ms ago: executing program 1:
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(0xffffffffffffffff)
read$FUSE(0xffffffffffffffff, &(0x7f0000000b00)={0x2020, 0x0, <r1=>0x0}, 0x2020)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000004000000020000000000001103000000ffffffff00000000000000040000000002000000000000080200000000005f00a23844f1786c3575c938f271c918"], 0x0, 0x44}, 0x20)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, r2, 0x1, 0x4}, 0x48)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000200)=0x8, 0x4)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
splice(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
write$FUSE_INIT(r0, &(0x7f0000000180)={0xfffffffffffffe61, 0x0, r1, {0x7, 0x1f, 0x5, 0x0, 0xfffc, 0x1, 0x8000003, 0x34}}, 0xfffffffffffffda8)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48)

0s ago: executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15)
r2 = dup(r1)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f00000005c0)={0xb8, 0x0, 0x0, [{{}, {0x0, 0x0, 0x9, 0x0, 'trans=fd,'}}]}, 0xb8)
write$FUSE_INIT(r2, &(0x7f0000000240)={0x50}, 0x50)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f50850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10)
newfstatat(0xffffffffffffff9c, &(0x7f0000000b40)='./file0\x00', &(0x7f0000000bc0), 0x0)

kernel console output (not intermixed with test programs):

32
[  255.081006][ T6362] F2FS-fs (loop4): invalid crc value
[  255.108636][ T6362] F2FS-fs (loop4): Found nat_bits in checkpoint
[  255.438396][ T6362] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  255.749899][ T1255] ieee802154 phy0 wpan0: encryption failed: -22
[  255.756345][ T1255] ieee802154 phy1 wpan1: encryption failed: -22
[  255.925227][  T151] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  255.935522][ T3892] usb 4-1: Using ep0 maxpacket: 8
[  255.941184][  T151] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  255.952289][  T151] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  255.962336][  T151] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  255.975605][  T151] usb 2-1: New USB device found, idVendor=1b96, idProduct=9f0a, bcdDevice= 0.15
[  255.986442][  T151] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  256.027487][  T151] usb 2-1: config 0 descriptor??
[  256.057939][ T3892] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  256.072700][ T3892] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  256.089284][ T3892] usb 4-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  256.106711][ T3892] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  256.122751][ T3892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  256.175504][ T3892] usbtmc 4-1:16.0: bulk endpoints not found
[  256.699495][  T151] hid-generic 0003:1B96:9F0A.0002: unknown main item tag 0x0
[  256.711759][  T151] hid-generic 0003:1B96:9F0A.0002: unknown main item tag 0x0
[  256.730686][  T151] hid-generic 0003:1B96:9F0A.0002: unknown main item tag 0x0
[  256.742363][  T151] hid-generic 0003:1B96:9F0A.0002: unknown main item tag 0x0
[  256.752845][  T151] hid-generic 0003:1B96:9F0A.0002: unknown main item tag 0x0
[  256.772678][  T151] hid-generic 0003:1B96:9F0A.0002: hidraw0: USB HID v0.00 Device [HID 1b96:9f0a] on usb-dummy_hcd.1-1/input0
[  257.030093][ T3569] syz-executor.4: attempt to access beyond end of device
[  257.030093][ T3569] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  257.364714][ T6400] loop2: detected capacity change from 0 to 256
[  257.405847][ T6400] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  257.751089][ T3892] usb 4-1: USB disconnect, device number 5
[  257.999145][ T3774] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  258.197627][ T3774] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  258.304211][ T3774] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  258.330555][ T3892] usb 2-1: USB disconnect, device number 7
[  258.480743][ T3774] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  259.113278][ T3573] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  259.125912][ T3573] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  259.134780][ T3573] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  259.142726][ T3573] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  259.161054][ T3573] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  259.168550][ T3573] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  259.302051][ T6425] lo speed is unknown, defaulting to 1000
[  259.505074][ T6406] loop4: detected capacity change from 0 to 32768
[  259.609641][ T6406] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  259.646695][ T6406] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  259.789580][ T6406] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[  259.856610][ T3629] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  259.863744][ T3629] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  260.083267][ T3629] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 219ms
[  260.133341][ T3629] gfs2: fsid=syz:syz.0: jid=0: Done
[  260.149500][ T3774] device hsr_slave_0 left promiscuous mode
[  260.162577][ T6406] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  260.176253][ T3774] device hsr_slave_1 left promiscuous mode
[  260.215392][ T6423] loop3: detected capacity change from 0 to 40427
[  260.223373][ T3774] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  260.257714][ T3774] batman_adv: batadv0: Removing interface: batadv_slave_0
[  260.294664][ T6423] F2FS-fs (loop3): invalid crc value
[  260.306352][ T3774] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  260.313814][ T3774] batman_adv: batadv0: Removing interface: batadv_slave_1
[  260.327057][ T6423] F2FS-fs (loop3): Found nat_bits in checkpoint
[  260.368349][ T3774] device bridge_slave_1 left promiscuous mode
[  260.405026][ T3774] bridge0: port 2(bridge_slave_1) entered disabled state
[  260.439995][ T3774] device bridge_slave_0 left promiscuous mode
[  260.465959][ T3774] bridge0: port 1(bridge_slave_0) entered disabled state
[  260.509632][ T6423] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  260.548739][ T3774] device veth1_macvtap left promiscuous mode
[  260.573368][ T3774] device veth0_macvtap left promiscuous mode
[  260.611527][ T3774] device veth1_vlan left promiscuous mode
[  260.647113][ T3774] device veth0_vlan left promiscuous mode
[  261.236263][ T3589] Bluetooth: hci3: command tx timeout
[  261.625501][ T3774] team0 (unregistering): Port device team_slave_1 removed
[  261.700963][ T3774] team0 (unregistering): Port device team_slave_0 removed
[  261.749959][ T3774] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  261.784650][ T3774] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  262.613022][ T3774] bond0 (unregistering): Released all slaves
[  262.716471][ T6460] loop0: detected capacity change from 0 to 128
[  262.737326][ T6460] FAT-fs (loop0): bogus sectors per cluster 0
[  262.743472][ T6460] FAT-fs (loop0): Can't find a valid FAT filesystem
[  263.157941][ T6464] loop4: detected capacity change from 0 to 256
[  263.335145][ T3589] Bluetooth: hci3: command tx timeout
[  263.523390][ T6464] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  263.757894][ T6425] chnl_net:caif_netlink_parms(): no params data found
[  264.095978][ T6477] loop4: detected capacity change from 0 to 512
[  264.241404][ T4150] syz-executor.3: attempt to access beyond end of device
[  264.241404][ T4150] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  264.283188][ T6477] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002]
[  264.293710][ T6425] bridge0: port 1(bridge_slave_0) entered blocking state
[  264.302183][ T6425] bridge0: port 1(bridge_slave_0) entered disabled state
[  264.310708][ T6425] device bridge_slave_0 entered promiscuous mode
[  264.320304][ T6425] bridge0: port 2(bridge_slave_1) entered blocking state
[  264.342380][ T6425] bridge0: port 2(bridge_slave_1) entered disabled state
[  264.397707][ T6425] device bridge_slave_1 entered promiscuous mode
[  264.472264][ T6477] EXT4-fs (loop4): orphan cleanup on readonly fs
[  264.570560][ T6477] EXT4-fs warning (device loop4): ext4_enable_quotas:7012: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  264.950374][ T6425] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  264.969945][ T6477] EXT4-fs (loop4): Cannot turn on quotas: error -22
[  264.994740][ T6477] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #13: comm syz-executor.4: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  265.047772][ T6425] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  265.096415][ T6477] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz-executor.4: couldn't read orphan inode 13 (err -117)
[  265.314436][ T6477] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  265.394360][ T3589] Bluetooth: hci3: command tx timeout
[  265.551264][ T6425] team0: Port device team_slave_0 added
[  265.642619][ T6425] team0: Port device team_slave_1 added
[  265.683950][ T6477] Invalid ELF section header overflow
[  265.795432][ T6425] batman_adv: batadv0: Adding interface: batadv_slave_0
[  265.802540][ T6425] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  265.802570][ T6425] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  265.924952][ T6425] batman_adv: batadv0: Adding interface: batadv_slave_1
[  265.924971][ T6425] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  265.924998][ T6425] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  266.089508][    C1] vkms_vblank_simulate: vblank timer overrun
[  266.382214][ T6425] device hsr_slave_0 entered promiscuous mode
[  266.413977][ T6425] device hsr_slave_1 entered promiscuous mode
[  266.442690][ T6425] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  266.460738][ T6425] Cannot create hsr debugfs directory
[  266.583786][ T6511] loop3: detected capacity change from 0 to 1024
[  266.724187][ T3569] EXT4-fs (loop4): unmounting filesystem.
[  266.811006][ T4479] hfsplus: b-tree write err: -5, ino 4
[  267.905174][ T3589] Bluetooth: hci3: command tx timeout
[  268.224619][   T14] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  268.474629][   T14] usb 5-1: Using ep0 maxpacket: 32
[  268.614583][   T14] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  268.648459][   T14] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  268.693382][   T14] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  268.744945][   T14] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  268.790588][   T14] usb 5-1: New USB device found, idVendor=1b96, idProduct=9f0a, bcdDevice= 0.15
[  268.846706][   T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  268.913497][   T14] usb 5-1: config 0 descriptor??
[  269.330776][ T6425] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  269.375639][ T6425] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  269.423170][ T6425] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  269.442058][   T14] hid-generic 0003:1B96:9F0A.0003: unknown main item tag 0x0
[  269.460537][   T14] hid-generic 0003:1B96:9F0A.0003: unknown main item tag 0x0
[  269.495908][ T6425] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  269.501058][   T14] hid-generic 0003:1B96:9F0A.0003: unknown main item tag 0x0
[  269.550755][   T14] hid-generic 0003:1B96:9F0A.0003: unknown main item tag 0x0
[  269.595878][   T14] hid-generic 0003:1B96:9F0A.0003: unknown main item tag 0x0
[  269.644657][   T14] hid-generic 0003:1B96:9F0A.0003: hidraw0: USB HID v0.00 Device [HID 1b96:9f0a] on usb-dummy_hcd.4-1/input0
[  269.807075][ T6525] loop0: detected capacity change from 0 to 32768
[  269.901203][ T6425] 8021q: adding VLAN 0 to HW filter on device bond0
[  270.003146][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  270.033643][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  270.075928][ T6425] 8021q: adding VLAN 0 to HW filter on device team0
[  270.106442][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  270.127020][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  270.136080][ T3592] bridge0: port 1(bridge_slave_0) entered blocking state
[  270.143297][ T3592] bridge0: port 1(bridge_slave_0) entered forwarding state
[  270.152373][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  270.167445][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  270.178338][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  270.187385][ T3592] bridge0: port 2(bridge_slave_1) entered blocking state
[  270.194622][ T3592] bridge0: port 2(bridge_slave_1) entered forwarding state
[  270.213888][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  270.258047][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  270.343825][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  270.371919][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  270.427731][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  270.465762][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  270.513569][ T6425] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  270.562900][ T6425] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  270.602298][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  270.621500][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  270.647918][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  270.673469][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  270.697602][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  270.751876][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  271.043272][ T3629] usb 5-1: USB disconnect, device number 10
[  271.367784][ T6568] loop0: detected capacity change from 0 to 64
[  271.529431][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  271.554599][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  271.583624][ T6425] 8021q: adding VLAN 0 to HW filter on device batadv0
[  271.655422][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  271.675096][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  271.751660][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  271.780970][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  271.807770][ T6425] device veth0_vlan entered promiscuous mode
[  271.825961][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  271.833982][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  271.869761][ T6425] device veth1_vlan entered promiscuous mode
[  271.969135][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  271.978401][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  272.006136][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  272.031756][ T6549] loop1: detected capacity change from 0 to 40427
[  272.035410][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  272.070140][ T6425] device veth0_macvtap entered promiscuous mode
[  272.093498][ T6549] F2FS-fs (loop1): invalid crc value
[  272.121938][ T6425] device veth1_macvtap entered promiscuous mode
[  272.142323][ T6549] F2FS-fs (loop1): Found nat_bits in checkpoint
[  272.220960][ T6425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  272.252005][ T6425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  272.284460][ T6425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  272.323789][ T6563] loop4: detected capacity change from 0 to 32768
[  272.330068][ T6425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  272.360700][ T6425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  272.373642][ T6563] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (6563)
[  272.374394][ T6549] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  272.425769][ T6425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  272.444371][ T6425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  272.492552][ T6425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  272.536328][ T6425] batman_adv: batadv0: Interface activated: batadv_slave_0
[  272.565143][ T6425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  272.576343][ T6563] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  272.598574][ T6425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  272.620871][ T6563] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm
[  272.647938][ T6425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  272.664500][ T6563] BTRFS info (device loop4): force zlib compression, level 3
[  272.682178][ T6425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  272.692632][ T6563] BTRFS info (device loop4): force clearing of disk cache
[  272.712699][ T6563] BTRFS info (device loop4): setting nodatasum
[  272.719308][ T6425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  272.749189][ T6563] BTRFS info (device loop4): allowing degraded mounts
[  272.756432][ T6425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  272.777258][ T6563] BTRFS info (device loop4): enabling disk space caching
[  272.801259][ T6425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  272.817833][ T6563] BTRFS info (device loop4): disk space caching is enabled
[  272.842119][ T6425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  272.923346][ T6425] batman_adv: batadv0: Interface activated: batadv_slave_1
[  272.967134][ T5320] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  272.997590][ T5320] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  273.007227][ T5320] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  273.016513][ T5320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  273.035199][ T5320] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  273.044910][ T5320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  273.063391][ T6425] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  273.093778][ T6425] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  273.140109][ T6425] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  273.173471][ T6425] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  273.173950][ T6563] BTRFS info (device loop4): rebuilding free space tree
[  273.293581][ T6563] BTRFS info (device loop4): disabling free space tree
[  273.311098][ T6563] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  273.564182][ T6563] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  273.677560][   T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  273.706142][   T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  273.804166][ T3774] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  273.854447][ T3774] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  274.126434][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  274.158895][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  274.426313][ T3572] syz-executor.1: attempt to access beyond end of device
[  274.426313][ T3572] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  275.378884][ T3569] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  275.507036][ T6627] loop3: detected capacity change from 0 to 128
[  275.589788][ T6627] FAT-fs (loop3): bogus sectors per cluster 0
[  275.618077][ T6627] FAT-fs (loop3): Can't find a valid FAT filesystem
[  278.119278][ T6664] team0: Port device wlan1 removed
[  278.636538][ T6676] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  278.956693][ T6667] loop3: detected capacity change from 0 to 32768
[  278.984743][ T6667] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (6667)
[  279.090279][ T6667] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  279.138470][ T6667] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm
[  279.168609][ T6667] BTRFS info (device loop3): force zlib compression, level 3
[  279.194145][ T6667] BTRFS info (device loop3): force clearing of disk cache
[  279.221932][ T6667] BTRFS info (device loop3): setting nodatasum
[  279.242030][ T6667] BTRFS info (device loop3): allowing degraded mounts
[  279.266991][ T6667] BTRFS info (device loop3): enabling disk space caching
[  279.292028][ T6667] BTRFS info (device loop3): disk space caching is enabled
[  279.668695][ T6667] BTRFS info (device loop3): rebuilding free space tree
[  279.679083][ T6713] loop4: detected capacity change from 0 to 128
[  279.724861][ T6667] BTRFS info (device loop3): disabling free space tree
[  279.742946][ T6713] FAT-fs (loop4): bogus sectors per cluster 0
[  279.758973][ T6667] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  279.761361][ T6713] FAT-fs (loop4): Can't find a valid FAT filesystem
[  279.793469][ T6718] loop1: detected capacity change from 0 to 1024
[  279.814363][ T6667] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  279.872762][ T6718] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  282.075962][ T6731] BTRFS info (device loop3): balance: start -s
[  282.096222][ T6731] BTRFS info (device loop3): relocating block group 1048576 flags system
[  282.148960][ T6731] BTRFS info (device loop3): balance: ended with status: 0
[  282.346405][ T4150] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  282.630491][ T6323] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 16 /dev/loop3 scanned by udevd (6323)
[  282.640317][ T6738] loop2: detected capacity change from 0 to 4096
[  282.688846][ T6738] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512)
[  282.715656][ T6738] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  283.002847][ T6750] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  283.072943][   T26] audit: type=1800 audit(1719033591.470:40): pid=6738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=33 res=0 errno=0
[  283.157622][ T3572] EXT4-fs (loop1): unmounting filesystem.
[  283.614527][ T6742] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  283.954464][ T6742] usb 2-1: Using ep0 maxpacket: 32
[  284.084565][ T6742] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  284.143897][ T6742] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  284.241230][ T6742] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  284.274994][ T6771] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  284.315136][ T6742] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  284.376431][ T6742] usb 2-1: config 0 descriptor??
[  284.621428][   T27] usb 2-1: USB disconnect, device number 8
[  284.911881][ T6425] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22.
[  284.963101][ T6776] loop3: detected capacity change from 0 to 128
[  284.996985][ T6776] FAT-fs (loop3): bogus sectors per cluster 0
[  285.045487][ T6776] FAT-fs (loop3): Can't find a valid FAT filesystem
[  286.358194][ T6800] loop4: detected capacity change from 0 to 1024
[  286.502331][ T6800] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  286.658636][ T6795] loop3: detected capacity change from 0 to 32768
[  286.700647][ T6795] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  286.747043][ T6795] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm
[  286.777114][ T6795] BTRFS info (device loop3): force zlib compression, level 3
[  286.809154][ T6795] BTRFS info (device loop3): force clearing of disk cache
[  286.854414][ T6795] BTRFS info (device loop3): setting nodatasum
[  286.894347][ T6795] BTRFS info (device loop3): allowing degraded mounts
[  286.901189][ T6795] BTRFS info (device loop3): enabling disk space caching
[  286.962046][ T6795] BTRFS info (device loop3): disk space caching is enabled
[  287.090294][ T6795] BTRFS info (device loop3): rebuilding free space tree
[  287.192585][ T6795] BTRFS info (device loop3): disabling free space tree
[  287.222078][ T6795] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  287.244405][ T6795] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  288.202695][ T6833] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  288.321992][ T6835] loop2: detected capacity change from 0 to 256
[  288.365006][ T6835] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  288.403579][ T4150] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  289.120958][ T6844] loop1: detected capacity change from 0 to 128
[  289.159298][ T6844] FAT-fs (loop1): bogus sectors per cluster 0
[  289.174478][ T6838] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  289.192960][ T6844] FAT-fs (loop1): Can't find a valid FAT filesystem
[  289.424377][ T6838] usb 3-1: Using ep0 maxpacket: 32
[  289.573166][ T3620] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  289.825080][ T3620] usb 4-1: Using ep0 maxpacket: 32
[  289.944566][ T3620] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  289.993160][ T3620] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  290.019110][ T3620] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  290.049107][ T3620] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  290.090850][ T3620] usb 4-1: config 0 descriptor??
[  290.234339][ T6838] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  290.266797][ T6838] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  290.280408][ T6838] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  290.290680][ T6838] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  290.303770][ T6838] usb 3-1: New USB device found, idVendor=1b96, idProduct=9f0a, bcdDevice= 0.15
[  290.313233][ T6838] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  290.332925][ T6838] usb 3-1: config 0 descriptor??
[  290.352112][ T3620] usb 4-1: USB disconnect, device number 6
[  290.403459][ T3569] EXT4-fs (loop4): unmounting filesystem.
[  290.824414][ T6838] hid-generic 0003:1B96:9F0A.0004: unknown main item tag 0x0
[  290.831889][ T6838] hid-generic 0003:1B96:9F0A.0004: unknown main item tag 0x0
[  290.858820][ T6838] hid-generic 0003:1B96:9F0A.0004: unknown main item tag 0x0
[  290.867576][ T6838] hid-generic 0003:1B96:9F0A.0004: unknown main item tag 0x0
[  290.898939][ T6838] hid-generic 0003:1B96:9F0A.0004: unknown main item tag 0x0
[  290.910098][ T6838] hid-generic 0003:1B96:9F0A.0004: hidraw0: USB HID v0.00 Device [HID 1b96:9f0a] on usb-dummy_hcd.2-1/input0
[  290.972806][ T6874] loop3: detected capacity change from 0 to 256
[  290.998472][ T6874] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  291.764082][ T6876] loop3: detected capacity change from 0 to 32768
[  292.322312][ T6876] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (6876)
[  292.591127][ T6742] usb 3-1: USB disconnect, device number 8
[  292.840860][ T6876] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  292.873620][ T6876] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm
[  292.900959][ T6876] BTRFS info (device loop3): force zlib compression, level 3
[  292.924487][ T6876] BTRFS info (device loop3): force clearing of disk cache
[  292.933061][ T6876] BTRFS info (device loop3): setting nodatasum
[  292.949894][ T6876] BTRFS info (device loop3): allowing degraded mounts
[  292.970137][ T6876] BTRFS info (device loop3): enabling disk space caching
[  293.000520][ T6876] BTRFS info (device loop3): disk space caching is enabled
[  293.078132][ T6903] loop1: detected capacity change from 0 to 128
[  293.134779][ T6903] FAT-fs (loop1): bogus sectors per cluster 0
[  293.145795][ T6903] FAT-fs (loop1): Can't find a valid FAT filesystem
[  293.246461][ T6323] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  293.264657][ T6876] BTRFS info (device loop3): rebuilding free space tree
[  293.347615][ T6876] BTRFS info (device loop3): disabling free space tree
[  293.394582][ T6876] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  293.460058][ T6876] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  295.059325][ T6838] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  295.071121][ T4150] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  295.334693][ T6838] usb 2-1: Using ep0 maxpacket: 32
[  295.454753][ T6838] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  295.484816][ T6838] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  295.494198][ T6838] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  295.518692][ T6838] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  295.552388][ T6838] usb 2-1: config 0 descriptor??
[  295.802303][ T6935] loop3: detected capacity change from 0 to 256
[  295.822681][ T6629] usb 2-1: USB disconnect, device number 9
[  295.848006][ T6935] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  296.206434][ T6931] loop2: detected capacity change from 0 to 32768
[  296.444677][ T6838] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  296.484528][ T6948] syz-executor.1[6948] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  296.484644][ T6948] syz-executor.1[6948] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  296.553483][ T6948] device veth0_vlan left promiscuous mode
[  296.608559][ T6948] device veth0_vlan entered promiscuous mode
[  296.630602][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  296.655877][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  296.673000][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  296.726150][ T6838] usb 1-1: Using ep0 maxpacket: 32
[  296.874668][ T6838] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  296.894675][ T6838] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  296.931833][ T6838] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  296.961246][ T6838] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  296.984385][ T6838] usb 1-1: New USB device found, idVendor=1b96, idProduct=9f0a, bcdDevice= 0.15
[  297.013950][ T6838] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  297.043581][ T6838] usb 1-1: config 0 descriptor??
[  297.184351][   T27] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  297.464598][   T27] usb 2-1: Using ep0 maxpacket: 32
[  297.544786][ T6838] hid-generic 0003:1B96:9F0A.0005: unknown main item tag 0x0
[  297.552350][ T6838] hid-generic 0003:1B96:9F0A.0005: unknown main item tag 0x0
[  297.563608][ T6968] loop3: detected capacity change from 0 to 256
[  297.575745][ T6968] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  297.590856][ T6838] hid-generic 0003:1B96:9F0A.0005: unknown main item tag 0x0
[  297.591702][ T6952] loop4: detected capacity change from 0 to 40427
[  297.604872][   T27] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  297.604983][   T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  297.654610][ T6838] hid-generic 0003:1B96:9F0A.0005: unknown main item tag 0x0
[  297.666898][ T6838] hid-generic 0003:1B96:9F0A.0005: unknown main item tag 0x0
[  297.674652][   T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  297.708500][ T6838] hid-generic 0003:1B96:9F0A.0005: hidraw0: USB HID v0.00 Device [HID 1b96:9f0a] on usb-dummy_hcd.0-1/input0
[  297.719657][ T6952] F2FS-fs (loop4): Found nat_bits in checkpoint
[  297.722548][   T27] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  297.799532][   T27] usb 2-1: New USB device found, idVendor=1b96, idProduct=9f0a, bcdDevice= 0.15
[  297.819061][   T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  297.843301][   T27] usb 2-1: config 0 descriptor??
[  297.872591][ T6952] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  297.973204][ T3569] syz-executor.4: attempt to access beyond end of device
[  297.973204][ T3569] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  298.637570][   T27] hid-generic 0003:1B96:9F0A.0006: unknown main item tag 0x0
[  298.731531][   T27] hid-generic 0003:1B96:9F0A.0006: unknown main item tag 0x0
[  298.885563][   T27] hid-generic 0003:1B96:9F0A.0006: unknown main item tag 0x0
[  298.971274][   T27] hid-generic 0003:1B96:9F0A.0006: unknown main item tag 0x0
[  299.004391][   T27] hid-generic 0003:1B96:9F0A.0006: unknown main item tag 0x0
[  299.074967][   T27] hid-generic 0003:1B96:9F0A.0006: hidraw1: USB HID v0.00 Device [HID 1b96:9f0a] on usb-dummy_hcd.1-1/input0
[  299.153828][   T27] usb 2-1: USB disconnect, device number 10
[  299.199764][  T154] usb 1-1: USB disconnect, device number 8
[  299.654507][ T3592] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  299.964590][ T3592] usb 5-1: Using ep0 maxpacket: 32
[  299.980383][ T6985] loop0: detected capacity change from 0 to 32768
[  300.114791][ T3592] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  300.143716][ T3592] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  300.190049][ T3592] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  300.270037][ T3592] usb 5-1: config 0 descriptor??
[  300.349921][ T7001] loop2: detected capacity change from 0 to 256
[  300.418766][ T7001] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  300.577551][   T27] usb 5-1: USB disconnect, device number 11
[  301.418576][   T26] audit: type=1326 audit(1719033609.800:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7008 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8327d0a9 code=0x7ffc0000
[  301.445546][   T26] audit: type=1326 audit(1719033609.800:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7008 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8327d0a9 code=0x7ffc0000
[  301.470625][   T26] audit: type=1326 audit(1719033609.800:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7008 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbf8327d0a9 code=0x7ffc0000
[  301.514449][   T26] audit: type=1326 audit(1719033609.800:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7008 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8327d0a9 code=0x7ffc0000
[  301.573870][   T26] audit: type=1326 audit(1719033609.800:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7008 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8327d0a9 code=0x7ffc0000
[  301.624931][   T26] audit: type=1326 audit(1719033609.800:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7008 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fbf8327d0a9 code=0x7ffc0000
[  301.697525][   T26] audit: type=1326 audit(1719033609.800:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7008 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8327d0a9 code=0x7ffc0000
[  301.729665][   T26] audit: type=1326 audit(1719033609.800:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7008 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8327d0a9 code=0x7ffc0000
[  301.793076][   T26] audit: type=1326 audit(1719033609.800:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7008 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fbf8327d0a9 code=0x7ffc0000
[  301.824445][ T6633] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  301.844744][   T26] audit: type=1326 audit(1719033609.800:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7008 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8327d0a9 code=0x7ffc0000
[  302.092948][ T6633] usb 2-1: Using ep0 maxpacket: 32
[  302.216057][ T6633] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  302.231999][ T6633] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  302.263662][ T6633] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  302.283598][ T6633] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  302.304329][ T6633] usb 2-1: New USB device found, idVendor=1b96, idProduct=9f0a, bcdDevice= 0.15
[  302.324358][ T6633] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  302.341070][ T6633] usb 2-1: config 0 descriptor??
[  302.732124][ T7041] loop4: detected capacity change from 0 to 32768
[  302.858007][ T6633] hid-generic 0003:1B96:9F0A.0007: unknown main item tag 0x0
[  302.898512][ T6633] hid-generic 0003:1B96:9F0A.0007: unknown main item tag 0x0
[  302.931445][ T6633] hid-generic 0003:1B96:9F0A.0007: unknown main item tag 0x0
[  302.958152][ T6633] hid-generic 0003:1B96:9F0A.0007: unknown main item tag 0x0
[  302.968602][ T6633] hid-generic 0003:1B96:9F0A.0007: unknown main item tag 0x0
[  303.003448][ T6633] hid-generic 0003:1B96:9F0A.0007: hidraw0: USB HID v0.00 Device [HID 1b96:9f0a] on usb-dummy_hcd.1-1/input0
[  303.812582][ T7078] mmap: syz-executor.4 (7078) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  303.962620][ T7087] loop3: detected capacity change from 0 to 128
[  304.142773][ T7089] loop3: detected capacity change from 0 to 256
[  304.168419][ T7089] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  304.331349][ T7081] loop2: detected capacity change from 0 to 32768
[  304.537271][ T6633] usb 2-1: USB disconnect, device number 11
[  305.227060][ T7117] loop1: detected capacity change from 0 to 256
[  305.272678][ T7117] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  305.564457][ T6633] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  305.814834][ T6633] usb 1-1: Using ep0 maxpacket: 32
[  305.934440][ T6633] usb 1-1: unable to read config index 0 descriptor/start: -71
[  305.974728][ T6633] usb 1-1: can't read configurations, error -71
[  306.085810][    C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  306.104497][ T7135] loop1: detected capacity change from 0 to 256
[  306.182612][ T7135] FAT-fs (loop1): Directory bread(block 64) failed
[  306.200710][ T7135] FAT-fs (loop1): Directory bread(block 65) failed
[  306.207724][ T7135] FAT-fs (loop1): Directory bread(block 66) failed
[  306.214385][ T7135] FAT-fs (loop1): Directory bread(block 67) failed
[  306.221952][ T7135] FAT-fs (loop1): Directory bread(block 68) failed
[  306.228774][ T7135] FAT-fs (loop1): Directory bread(block 69) failed
[  306.236717][ T7135] FAT-fs (loop1): Directory bread(block 70) failed
[  306.248856][ T7135] FAT-fs (loop1): Directory bread(block 71) failed
[  306.257100][ T7135] FAT-fs (loop1): Directory bread(block 72) failed
[  306.264707][ T7135] FAT-fs (loop1): Directory bread(block 73) failed
[  306.310820][ T7129] loop3: detected capacity change from 0 to 32768
[  307.610018][ T7149] loop1: detected capacity change from 0 to 256
[  307.641861][ T7149] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  307.684952][ T7151] loop2: detected capacity change from 0 to 512
[  307.692280][ T7151] =======================================================
[  307.692280][ T7151] WARNING: The mand mount option has been deprecated and
[  307.692280][ T7151]          and is ignored by this kernel. Remove the mand
[  307.692280][ T7151]          option from the mount to silence this warning.
[  307.692280][ T7151] =======================================================
[  307.727390][    C0] vkms_vblank_simulate: vblank timer overrun
[  307.839719][   T26] kauditd_printk_skb: 42 callbacks suppressed
[  307.839735][   T26] audit: type=1326 audit(1719033616.240:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7160 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7347d0a9 code=0x7ffc0000
[  307.880848][ T7151] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz-executor.2: invalid block
[  307.923854][   T26] audit: type=1326 audit(1719033616.250:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7160 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7347d0a9 code=0x7ffc0000
[  307.946639][    C0] vkms_vblank_simulate: vblank timer overrun
[  307.967897][ T7151] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz-executor.2: invalid indirect mapped block 4294967295 (level 1)
[  308.071487][ T7151] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz-executor.2: invalid indirect mapped block 4294967295 (level 1)
[  308.138662][   T26] audit: type=1326 audit(1719033616.280:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7160 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f3d7347d0a9 code=0x7ffc0000
[  308.161494][    C0] vkms_vblank_simulate: vblank timer overrun
[  308.218981][ T7151] EXT4-fs (loop2): 2 truncates cleaned up
[  308.251748][ T7151] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  308.342140][ T7151] EXT4-fs error (device loop2): ext4_inlinedir_to_tree:1432: inode #12: block 7: comm syz-executor.2: path /root/syzkaller-testdir2815350442/syzkaller.JK9qDT/32/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0
[  308.372172][   T26] audit: type=1326 audit(1719033616.280:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7160 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7347d0a9 code=0x7ffc0000
[  308.394931][    C0] vkms_vblank_simulate: vblank timer overrun
[  308.402635][   T26] audit: type=1326 audit(1719033616.280:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7160 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7347d0a9 code=0x7ffc0000
[  308.443955][ T6425] EXT4-fs (loop2): unmounting filesystem.
[  308.514527][ T3621] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  308.633789][ T7186] loop4: detected capacity change from 0 to 128
[  308.662373][ T7186] FAT-fs (loop4): bogus sectors per cluster 0
[  308.670082][ T7186] FAT-fs (loop4): Can't find a valid FAT filesystem
[  308.944454][ T3621] usb 4-1: Using ep0 maxpacket: 32
[  310.214519][ T3621] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  310.230986][ T3621] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  310.248977][ T7177] loop2: detected capacity change from 0 to 32768
[  310.263706][ T3621] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  310.283750][ T3621] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  310.323397][ T3621] usb 4-1: New USB device found, idVendor=1b96, idProduct=9f0a, bcdDevice= 0.15
[  310.358273][ T3621] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  310.371793][ T7208] loop0: detected capacity change from 0 to 512
[  310.388485][ T3621] usb 4-1: config 0 descriptor??
[  310.415985][ T7208] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz-executor.0: invalid block
[  310.430048][ T7208] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz-executor.0: invalid indirect mapped block 4294967295 (level 1)
[  310.451066][ T7208] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz-executor.0: invalid indirect mapped block 4294967295 (level 1)
[  310.472545][ T7208] EXT4-fs (loop0): 2 truncates cleaned up
[  310.478713][ T7208] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  310.526416][ T7208] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1432: inode #12: block 7: comm syz-executor.0: path /root/syzkaller-testdir421964669/syzkaller.UtBKY7/227/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0
[  310.642433][ T3570] EXT4-fs (loop0): unmounting filesystem.
[  310.740206][ T7223] loop2: detected capacity change from 0 to 1024
[  310.753745][ T7223] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  310.887670][ T3621] hid-generic 0003:1B96:9F0A.0008: unknown main item tag 0x0
[  310.918933][ T3621] hid-generic 0003:1B96:9F0A.0008: unknown main item tag 0x0
[  310.957735][ T3621] hid-generic 0003:1B96:9F0A.0008: unknown main item tag 0x0
[  310.992784][ T3621] hid-generic 0003:1B96:9F0A.0008: unknown main item tag 0x0
[  311.027480][ T3621] hid-generic 0003:1B96:9F0A.0008: unknown main item tag 0x0
[  311.052615][ T7229] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  311.079962][ T6425] EXT4-fs (loop2): unmounting filesystem.
[  311.144758][ T3621] hid-generic 0003:1B96:9F0A.0008: hidraw0: USB HID v0.00 Device [HID 1b96:9f0a] on usb-dummy_hcd.3-1/input0
[  311.360904][ T7233] loop2: detected capacity change from 0 to 128
[  311.369337][ T7233] FAT-fs (loop2): bogus sectors per cluster 0
[  311.378275][ T7233] FAT-fs (loop2): Can't find a valid FAT filesystem
[  312.464303][ T3592] usb 4-1: USB disconnect, device number 7
[  312.625083][ T7254] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.3'.
[  313.036558][   T26] audit: type=1326 audit(1719033621.440:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7263 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8327d0a9 code=0x7ffc0000
[  313.286458][ T7254] syz-executor.3 (7254) used greatest stack depth: 18712 bytes left
[  313.296512][   T26] audit: type=1326 audit(1719033621.510:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7263 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf8327d0a9 code=0x7ffc0000
[  313.321088][    C1] Dead loop on virtual device ipvlan1, fix it urgently!
[  313.455680][   T26] audit: type=1326 audit(1719033621.540:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7263 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8327d0a9 code=0x7ffc0000
[  313.502591][   T26] audit: type=1326 audit(1719033621.570:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7263 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8327d0a9 code=0x7ffc0000
[  313.525435][    C0] vkms_vblank_simulate: vblank timer overrun
[  313.544884][   T26] audit: type=1326 audit(1719033621.570:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7263 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf8327d0a9 code=0x7ffc0000
[  313.582535][   T26] audit: type=1326 audit(1719033621.590:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7263 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8327d0a9 code=0x7ffc0000
[  313.653809][   T26] audit: type=1326 audit(1719033621.600:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7263 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbf8327a827 code=0x7ffc0000
[  313.675927][ T7282] loop1: detected capacity change from 0 to 512
[  313.676598][    C0] vkms_vblank_simulate: vblank timer overrun
[  313.700999][   T26] audit: type=1326 audit(1719033621.600:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7263 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbf832404e9 code=0x7ffc0000
[  313.737777][ T7282] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz-executor.1: invalid block
[  313.760925][ T7282] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz-executor.1: invalid indirect mapped block 4294967295 (level 1)
[  313.775806][   T26] audit: type=1326 audit(1719033621.610:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7263 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7fbf8327d0a9 code=0x7ffc0000
[  313.798863][ T7282] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz-executor.1: invalid indirect mapped block 4294967295 (level 1)
[  313.820139][ T7282] EXT4-fs (loop1): 2 truncates cleaned up
[  313.826528][ T7282] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  313.836826][   T26] audit: type=1326 audit(1719033621.630:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7263 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbf8327a827 code=0x7ffc0000
[  313.864831][ T7282] EXT4-fs error (device loop1): ext4_inlinedir_to_tree:1432: inode #12: block 7: comm syz-executor.1: path /root/syzkaller-testdir4100469594/syzkaller.XEVwUe/198/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0
[  313.916111][ T7293] loop4: detected capacity change from 0 to 256
[  313.930958][ T7293] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  313.965533][ T3572] EXT4-fs (loop1): unmounting filesystem.
[  314.128477][ T7301] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'.
[  314.177942][ T6838] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  314.209535][ T7301] Dead loop on virtual device ipvlan1, fix it urgently!
[  314.312840][ T7301] syz-executor.4 (7301) used greatest stack depth: 9504 bytes left
[  314.355091][    C1] Dead loop on virtual device ipvlan1, fix it urgently!
[  314.484457][ T6838] usb 1-1: Using ep0 maxpacket: 32
[  314.614518][ T6838] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  314.641935][ T6838] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  314.768800][ T6838] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  314.935490][ T6838] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  315.112232][ T6838] usb 1-1: New USB device found, idVendor=1b96, idProduct=9f0a, bcdDevice= 0.15
[  315.211069][ T6838] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  315.320483][ T6838] usb 1-1: config 0 descriptor??
[  315.404732][    C1] Dead loop on virtual device ipvlan1, fix it urgently!
[  315.558669][ T7319] loop2: detected capacity change from 0 to 512
[  315.588346][ T7319] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz-executor.2: invalid block
[  315.612303][ T7319] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz-executor.2: invalid indirect mapped block 4294967295 (level 1)
[  315.653750][ T7319] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz-executor.2: invalid indirect mapped block 4294967295 (level 1)
[  315.706263][ T7319] EXT4-fs (loop2): 2 truncates cleaned up
[  315.714653][ T7319] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  315.728229][ T7325] loop4: detected capacity change from 0 to 512
[  315.752837][ T7319] EXT4-fs error (device loop2): ext4_inlinedir_to_tree:1432: inode #12: block 7: comm syz-executor.2: path /root/syzkaller-testdir2815350442/syzkaller.JK9qDT/45/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0
[  315.784014][ T7325] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz-executor.4: invalid block
[  315.841158][ T7325] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz-executor.4: invalid indirect mapped block 4294967295 (level 1)
[  315.880974][ T6838] hid-generic 0003:1B96:9F0A.0009: unknown main item tag 0x0
[  315.893924][ T6838] hid-generic 0003:1B96:9F0A.0009: unknown main item tag 0x0
[  315.911552][ T7325] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz-executor.4: invalid indirect mapped block 4294967295 (level 1)
[  315.935077][ T7325] EXT4-fs (loop4): 2 truncates cleaned up
[  315.942106][ T7325] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  315.944571][ T6838] hid-generic 0003:1B96:9F0A.0009: unknown main item tag 0x0
[  315.978870][ T7325] EXT4-fs error (device loop4): ext4_inlinedir_to_tree:1432: inode #12: block 7: comm syz-executor.4: path /root/syzkaller-testdir3700315625/syzkaller.05tg8e/198/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0
[  315.986250][ T6838] hid-generic 0003:1B96:9F0A.0009: unknown main item tag 0x0
[  316.050134][ T6838] hid-generic 0003:1B96:9F0A.0009: unknown main item tag 0x0
[  316.065707][ T6838] hid-generic 0003:1B96:9F0A.0009: hidraw0: USB HID v0.00 Device [HID 1b96:9f0a] on usb-dummy_hcd.0-1/input0
[  316.109366][ T7338] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.1'.
[  316.141215][ T6425] EXT4-fs (loop2): unmounting filesystem.
[  316.158625][ T3569] EXT4-fs (loop4): unmounting filesystem.
[  316.158888][ T7338] Dead loop on virtual device ipvlan1, fix it urgently!
[  316.434834][    C1] Dead loop on virtual device ipvlan1, fix it urgently!
[  317.234753][ T1255] ieee802154 phy0 wpan0: encryption failed: -22
[  317.241112][ T1255] ieee802154 phy1 wpan1: encryption failed: -22
[  317.474794][    C1] Dead loop on virtual device ipvlan1, fix it urgently!
[  317.538869][ T6633] usb 1-1: USB disconnect, device number 11
[  317.841895][ T7382] loop1: detected capacity change from 0 to 512
[  317.866357][ T7384] lo speed is unknown, defaulting to 1000
[  318.012456][ T7382] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz-executor.1: invalid block
[  318.075771][ T7382] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz-executor.1: invalid indirect mapped block 4294967295 (level 1)
[  318.164777][ T7382] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz-executor.1: invalid indirect mapped block 4294967295 (level 1)
[  318.222888][ T7382] EXT4-fs (loop1): 2 truncates cleaned up
[  318.242766][ T7382] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  318.299828][ T7382] EXT4-fs error (device loop1): ext4_inlinedir_to_tree:1432: inode #12: block 7: comm syz-executor.1: path /root/syzkaller-testdir4100469594/syzkaller.XEVwUe/210/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0
[  318.392950][ T3572] EXT4-fs (loop1): unmounting filesystem.
[  318.516962][    C1] Dead loop on virtual device ipvlan1, fix it urgently!
[  318.935425][ T7411] Context (ID=0x0) not attached to queue pair (handle=0x0:0x0)
[  319.124653][ T6838] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  319.364824][ T7410] lo speed is unknown, defaulting to 1000
[  319.424450][ T6838] usb 3-1: Using ep0 maxpacket: 32
[  319.564711][    C1] Dead loop on virtual device ipvlan1, fix it urgently!
[  319.572193][ T6838] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  319.583232][ T6838] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  319.655785][ T6838] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  319.713335][ T6838] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  319.746411][ T6838] usb 3-1: New USB device found, idVendor=1b96, idProduct=9f0a, bcdDevice= 0.15
[  319.770453][ T6838] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  319.782761][ T6838] usb 3-1: config 0 descriptor??
[  320.210956][ T7396] loop1: detected capacity change from 0 to 40427
[  320.243377][ T7396] F2FS-fs (loop1): invalid crc value
[  320.269203][ T6838] hid-generic 0003:1B96:9F0A.000A: unknown main item tag 0x0
[  320.285774][ T7396] F2FS-fs (loop1): Found nat_bits in checkpoint
[  320.307025][ T6838] hid-generic 0003:1B96:9F0A.000A: unknown main item tag 0x0
[  320.335718][ T6838] hid-generic 0003:1B96:9F0A.000A: unknown main item tag 0x0
[  320.369575][ T6838] hid-generic 0003:1B96:9F0A.000A: unknown main item tag 0x0
[  320.377325][ T6838] hid-generic 0003:1B96:9F0A.000A: unknown main item tag 0x0
[  320.386433][ T6838] hid-generic 0003:1B96:9F0A.000A: hidraw0: USB HID v0.00 Device [HID 1b96:9f0a] on usb-dummy_hcd.2-1/input0
[  320.545681][ T7396] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  320.594723][    C1] Dead loop on virtual device ipvlan1, fix it urgently!
[  320.732492][ T7410] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'.
[  321.406486][ T3572] syz-executor.1: attempt to access beyond end of device
[  321.406486][ T3572] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  321.485157][ T3573] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  321.494868][ T3573] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  321.502721][ T3573] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  321.526894][ T7447] lo speed is unknown, defaulting to 1000
[  321.634902][    C1] Dead loop on virtual device ipvlan1, fix it urgently!
[  321.667003][   T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  321.676850][   T48] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  321.684325][   T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  321.745330][   T26] kauditd_printk_skb: 31 callbacks suppressed
[  321.745346][   T26] audit: type=1326 audit(1719033630.150:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7446 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f060227d0a9 code=0x0
[  321.829818][ T7444] lo speed is unknown, defaulting to 1000
[  321.871461][  T154] usb 3-1: USB disconnect, device number 9
[  322.284595][ T7454] Context (ID=0x0) not attached to queue pair (handle=0x0:0x0)
[  322.684868][    C1] Dead loop on virtual device ipvlan1, fix it urgently!
[  323.088679][ T7458] loop2: detected capacity change from 0 to 512
[  323.204355][  T154] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  323.233048][ T7458] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002]
[  323.291898][ T7458] EXT4-fs (loop2): orphan cleanup on readonly fs
[  323.332055][ T7458] EXT4-fs warning (device loop2): ext4_enable_quotas:7012: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  323.407969][ T7458] EXT4-fs (loop2): Cannot turn on quotas: error -22
[  323.441049][ T7458] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #13: comm syz-executor.2: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  323.511666][ T7458] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz-executor.2: couldn't read orphan inode 13 (err -117)
[  323.524682][ T7468] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  323.568227][ T7458] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  323.589678][ T7444] chnl_net:caif_netlink_parms(): no params data found
[  323.597309][  T154] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  323.620864][  T154] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  323.661741][  T154] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  323.701504][  T154] usb 1-1: config 0 descriptor??
[  323.714534][   T48] Bluetooth: hci0: command tx timeout
[  323.715553][    C1] Dead loop on virtual device ipvlan1, fix it urgently!
[  323.787501][ T3774] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  323.809562][ T7470] Invalid ELF section header overflow
[  323.921802][ T3774] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  324.007696][ T7444] bridge0: port 1(bridge_slave_0) entered blocking state
[  324.042070][ T7444] bridge0: port 1(bridge_slave_0) entered disabled state
[  324.079537][ T7444] device bridge_slave_0 entered promiscuous mode
[  324.122226][ T6425] EXT4-fs (loop2): unmounting filesystem.
[  324.159851][ T3774] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  324.195885][  T154] keytouch 0003:0926:3333.000B: fixing up Keytouch IEC report descriptor
[  324.204624][ T7444] bridge0: port 2(bridge_slave_1) entered blocking state
[  324.211735][ T7444] bridge0: port 2(bridge_slave_1) entered disabled state
[  324.227340][  T154] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.000B/input/input7
[  324.240199][ T7444] device bridge_slave_1 entered promiscuous mode
[  324.288840][ T3774] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  324.344172][  T154] keytouch 0003:0926:3333.000B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0
[  324.349380][ T7444] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  324.396421][ T7444] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  324.540657][ T7444] team0: Port device team_slave_0 added
[  324.553851][ T7490] lo speed is unknown, defaulting to 1000
[  324.577298][ T7444] team0: Port device team_slave_1 added
[  324.600990][ T6629] usb 1-1: USB disconnect, device number 12
[  324.754872][    C1] Dead loop on virtual device ipvlan1, fix it urgently!
[  324.922820][ T7499] Context (ID=0x0) not attached to queue pair (handle=0x0:0x0)
[  325.070183][ T7444] batman_adv: batadv0: Adding interface: batadv_slave_0
[  325.124072][ T7444] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  325.455028][ T7444] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  325.545147][ T7444] batman_adv: batadv0: Adding interface: batadv_slave_1
[  325.552451][ T7444] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  325.661280][ T7444] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  325.683676][ T7505] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  325.695377][ T7507] loop2: detected capacity change from 0 to 512
[  325.738443][ T7507] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz-executor.2: invalid block
[  325.753797][ T7507] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz-executor.2: invalid indirect mapped block 4294967295 (level 1)
[  325.781501][ T7507] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz-executor.2: invalid indirect mapped block 4294967295 (level 1)
[  325.794357][   T48] Bluetooth: hci0: command tx timeout
[  325.796977][    C1] Dead loop on virtual device ipvlan1, fix it urgently!
[  325.833629][ T7493] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'.
[  325.860043][ T7507] EXT4-fs (loop2): 2 truncates cleaned up
[  325.880664][ T7507] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  325.939768][ T7444] device hsr_slave_0 entered promiscuous mode
[  325.949665][ T6425] EXT4-fs (loop2): unmounting filesystem.
[  325.957769][ T7444] device hsr_slave_1 entered promiscuous mode
[  325.967305][ T7444] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  325.981224][ T7444] Cannot create hsr debugfs directory
[  326.132145][ T7520] loop0: detected capacity change from 0 to 7
[  326.203452][ T7520] Dev loop0: unable to read RDB block 7
[  326.212990][ T7520]  loop0: unable to read partition table
[  326.227612][ T7520] loop0: partition table beyond EOD, truncated
[  326.239504][ T7520] loop_reread_partitions: partition scan of loop0 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨�â·û
[  326.239504][ T7520] 
) failed (rc=-5)
[  326.835062][    C1] Dead loop on virtual device ipvlan1, fix it urgently!
[  327.874962][    C1] Dead loop on virtual device ipvlan1, fix it urgently!
[  328.131017][   T48] Bluetooth: hci0: command tx timeout
[  328.466646][ T7444] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  328.566900][ T7444] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  328.858317][ T7547] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  328.894816][ T7444] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  328.915071][    C1] Dead loop on virtual device ipvlan1, fix it urgently!
[  329.162158][ T7560] loop0: detected capacity change from 0 to 7
[  329.210467][ T7560] Dev loop0: unable to read RDB block 7
[  329.220601][ T7560]  loop0: unable to read partition table
[  329.240421][ T7560] loop0: partition table beyond EOD, truncated
[  329.261171][ T7560] loop_reread_partitions: partition scan of loop0 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨�â·û
[  329.261171][ T7560] 
) failed (rc=-5)
[  329.302865][ T3774] device hsr_slave_0 left promiscuous mode
[  329.336048][ T3774] device hsr_slave_1 left promiscuous mode
[  329.361186][ T3774] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  329.382613][ T3774] batman_adv: batadv0: Removing interface: batadv_slave_0
[  329.426892][ T3774] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  329.444841][ T3774] batman_adv: batadv0: Removing interface: batadv_slave_1
[  329.477469][ T3774] device bridge_slave_0 left promiscuous mode
[  329.516997][ T3774] bridge0: port 1(bridge_slave_0) entered disabled state
[  329.712639][ T3774] device veth1_macvtap left promiscuous mode
[  329.723516][ T3774] device veth0_macvtap left promiscuous mode
[  329.749573][ T3774] device veth1_vlan left promiscuous mode
[  329.770088][ T3774] device veth0_vlan left promiscuous mode
[  329.954942][    C1] Dead loop on virtual device ipvlan1, fix it urgently!
[  330.194634][ T3589] Bluetooth: hci0: command tx timeout
[  330.445627][ T3774] team0 (unregistering): Port device team_slave_1 removed
[  330.485196][ T3774] team0 (unregistering): Port device team_slave_0 removed
[  330.509646][ T3774] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  330.552558][ T3774] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  330.643274][ T3774] bond0 (unregistering): Released all slaves
[  330.712829][ T7444] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  330.838114][ T3634] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  330.994729][    C1] Dead loop on virtual device ipvlan1, fix it urgently!
[  331.046138][ T7444] 8021q: adding VLAN 0 to HW filter on device bond0
[  331.114384][ T3634] usb 2-1: Using ep0 maxpacket: 16
[  331.140689][ T7444] 8021q: adding VLAN 0 to HW filter on device team0
[  331.159404][ T6633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  331.176566][ T6633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  331.642239][ T3634] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  331.655808][ T3634] usb 2-1: config 1 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  331.670185][ T3634] usb 2-1: config 1 interface 0 has no altsetting 0
[  331.768872][ T7444] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  331.819245][ T7444] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  331.873774][ T6629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  331.883317][ T6629] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  331.892506][ T6629] bridge0: port 1(bridge_slave_0) entered blocking state
[  331.899698][ T6629] bridge0: port 1(bridge_slave_0) entered forwarding state
[  331.907682][ T6629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  331.916599][ T6629] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  331.925399][ T6629] bridge0: port 2(bridge_slave_1) entered blocking state
[  331.932541][ T6629] bridge0: port 2(bridge_slave_1) entered forwarding state
[  331.941398][ T6629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  331.980225][ T6629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  331.999966][ T6629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  332.022855][ T6629] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  332.034716][    C1] Dead loop on virtual device ipvlan1, fix it urgently!
[  332.039129][ T3634] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  332.059075][ T3634] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  332.068943][ T6629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  332.087846][ T3634] usb 2-1: Product: syz
[  332.092066][ T3634] usb 2-1: Manufacturer: syz
[  332.104607][ T6629] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  332.121835][ T3634] usb 2-1: SerialNumber: syz
[  332.133124][ T6629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  332.152221][ T6629] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  332.174117][ T6629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  332.225814][ T6629] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  332.243975][ T6633] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  332.287588][ T6633] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  332.370969][ T6633] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  332.464298][ T7572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  332.585015][ T7596] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  332.610361][ T7572] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  332.964782][ T3634] usb 2-1: MIDIStreaming interface descriptor not found
[  333.075710][    C1] Dead loop on virtual device ipvlan1, fix it urgently!
[  333.100864][ T3634] usb 2-1: USB disconnect, device number 12
[  333.473709][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  333.504788][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  333.518826][ T7444] 8021q: adding VLAN 0 to HW filter on device batadv0
[  333.561116][ T7613] loop2: detected capacity change from 0 to 512
[  333.612943][ T7613] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz-executor.2: invalid block
[  333.626798][ T7613] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz-executor.2: invalid indirect mapped block 4294967295 (level 1)
[  333.644902][ T7613] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz-executor.2: invalid indirect mapped block 4294967295 (level 1)
[  333.662873][ T7613] EXT4-fs (loop2): 2 truncates cleaned up
[  333.688855][ T7613] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  333.728131][ T7613] EXT4-fs error (device loop2): ext4_inlinedir_to_tree:1432: inode #12: block 7: comm syz-executor.2: path /root/syzkaller-testdir2815350442/syzkaller.JK9qDT/69/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0
[  333.824700][ T3592] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  333.852210][ T6425] EXT4-fs (loop2): unmounting filesystem.
[  334.024565][ T3592] usb 1-1: device descriptor read/64, error -71
[  334.114799][    C1] Dead loop on virtual device ipvlan1, fix it urgently!
[  334.304656][ T3592] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  334.575693][ T3592] usb 1-1: device descriptor read/64, error -71
[  335.154744][    C1] Dead loop on virtual device ipvlan1, fix it urgently!
[  335.255086][ T3592] usb usb1-port1: attempt power cycle
[  336.535020][    C1] Dead loop on virtual device ipvlan1, fix it urgently!
[  336.902349][ T6837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  336.921791][ T6837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  337.037246][ T7444] device veth0_vlan entered promiscuous mode
[  337.043977][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  337.069226][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  337.115222][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  337.138626][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  337.146658][ T6837] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  337.172918][ T7444] device veth1_vlan entered promiscuous mode
[  337.269117][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  337.283388][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  337.309762][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  337.311138][    C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies.  Check SNMP counters.
[  337.337530][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  337.383228][ T7444] device veth0_macvtap entered promiscuous mode
[  337.394306][ T6837] usb 3-1: Using ep0 maxpacket: 16
[  337.419512][ T7444] device veth1_macvtap entered promiscuous mode
[  337.476355][ T7444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  337.507057][ T7444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  337.548637][ T7444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  337.555073][    C1] Dead loop on virtual device ipvlan1, fix it urgently!
[  337.605840][ T7444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  337.674375][ T7444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  337.694429][ T6837] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  337.705242][ T6837] usb 3-1: config 1 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  337.716563][ T7444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  337.727118][ T6837] usb 3-1: config 1 interface 0 has no altsetting 0
[  337.790538][ T7444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  337.890346][ T7444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  338.049508][ T7643] loop3: detected capacity change from 0 to 32768
[  338.081027][ T7444] batman_adv: batadv0: Interface activated: batadv_slave_0
[  338.304898][ T7444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  338.337692][ T7444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  338.378739][ T7444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  338.410095][ T7444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  338.439268][ T7444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  338.466191][ T7444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  338.484623][ T7444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  338.496285][ T7444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  338.507881][ T7444] batman_adv: batadv0: Interface activated: batadv_slave_1
[  338.520374][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  338.546166][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  338.570027][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  338.581609][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  338.590571][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  338.594744][    C1] Dead loop on virtual device ipvlan1, fix it urgently!
[  338.600010][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  338.622091][ T7444] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  338.631901][ T7444] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  338.640703][ T7444] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  338.649962][ T6837] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  338.659207][ T7444] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  338.668302][ T6837] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  338.695358][ T6837] usb 3-1: Product: syz
[  338.699879][ T6837] usb 3-1: Manufacturer: syz
[  338.714403][ T6837] usb 3-1: SerialNumber: syz
[  338.894351][  T154] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  338.999295][ T4479] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  339.008109][ T4479] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  339.087020][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  339.749931][    C1] Dead loop on virtual device ipvlan1, fix it urgently!
[  339.914344][  T154] usb 1-1: Using ep0 maxpacket: 32
[  339.974671][ T6837] usb 3-1: MIDIStreaming interface descriptor not found
[  342.928976][    C1] Dead loop on virtual device ipvlan1, fix it urgently!
[  343.020857][ T4479] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  343.062640][ T4479] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  343.171503][  T154] usb 1-1: unable to read config index 0 descriptor/start: -71
[  343.911706][  T154] usb 1-1: can't read configurations, error -71
[  343.954714][    C1] Dead loop on virtual device ipvlan1, fix it urgently!
[  343.974953][ T6837] usb 3-1: USB disconnect, device number 10
[  344.041281][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  344.361750][ T7702] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  345.109471][    C1] Dead loop on virtual device ipvlan1, fix it urgently!
[  347.921158][ T3634] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  347.994453][ T3621] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  348.155824][    C1] Dead loop on virtual device ipvlan1, fix it urgently!
[  348.412097][ T7737] syz-executor.3 sent an empty control message without MSG_MORE.
[  348.556880][   T26] audit: type=1326 audit(1719033656.910:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7735 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc8547d0a9 code=0x7ffc0000
[  348.585452][ T7739] loop1: detected capacity change from 0 to 1024
[  348.827192][ T7739] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  349.050956][   T26] audit: type=1326 audit(1719033656.910:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7735 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc8547d0a9 code=0x7ffc0000
[  349.234946][    C1] Dead loop on virtual device ipvlan1, fix it urgently!
[  349.293256][ T7743] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  349.347717][ T3572] EXT4-fs (loop1): unmounting filesystem.
[  349.351718][   T26] audit: type=1326 audit(1719033656.910:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7735 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7efc8547d0a9 code=0x7ffc0000
[  349.419588][   T26] audit: type=1326 audit(1719033656.910:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7735 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc8547d0a9 code=0x7ffc0000
[  349.481169][   T26] audit: type=1326 audit(1719033656.910:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7735 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc8547d0a9 code=0x7ffc0000
[  349.540759][   T26] audit: type=1326 audit(1719033656.910:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7735 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7efc8547d0a9 code=0x7ffc0000
[  349.589185][ T7763] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  349.594337][  T151] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  349.633350][   T26] audit: type=1326 audit(1719033656.910:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7735 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc8547d0a9 code=0x7ffc0000
[  349.677207][   T26] audit: type=1326 audit(1719033656.910:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7735 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc8547d0a9 code=0x7ffc0000
[  349.743333][   T26] audit: type=1326 audit(1719033656.920:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7735 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7efc8547d0a9 code=0x7ffc0000
[  349.772908][ T3892] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  349.809854][   T26] audit: type=1326 audit(1719033656.920:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7735 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc8547d0a9 code=0x7ffc0000
[  349.904539][  T151] usb 5-1: Using ep0 maxpacket: 32
[  349.929559][ T7772] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[  349.940231][ T7772] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[  349.964742][ T7772] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[  350.034983][ T3892] usb 4-1: Using ep0 maxpacket: 16
[  350.040920][  T151] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  350.068877][ T7774] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[  350.106433][  T151] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  350.174891][ T3892] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  350.189563][ T7772] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[  350.236808][  T151] usb 5-1: config 0 descriptor??
[  350.247643][ T3892] usb 4-1: config 1 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  350.274884][    C1] Dead loop on virtual device ipvlan1, fix it urgently!
[  350.375914][  T151] as10x_usb: device has been detected
[  350.383976][ T7775] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[  350.426755][ T3892] usb 4-1: config 1 interface 0 has no altsetting 0
[  350.456526][  T151] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  350.493705][ T7774] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[  350.566868][  T151] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  350.582729][  T151] as10x_usb: error during firmware upload part1
[  350.592426][  T151] Registered device nBox DVB-T Dongle
[  350.599253][  T151] usb 5-1: USB disconnect, device number 12
[  350.647151][  T151] Unregistered device nBox DVB-T Dongle
[  350.648276][  T151] as10x_usb: device has been disconnected
[  350.694764][ T3892] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  350.712573][ T3892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  350.720843][ T3892] usb 4-1: Product: syz
[  350.725813][ T3892] usb 4-1: Manufacturer: syz
[  350.730582][ T3892] usb 4-1: SerialNumber: syz
[  351.060332][ T7754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  351.096544][ T7754] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  351.234904][ T3892] usb 4-1: MIDIStreaming interface descriptor not found
[  351.260535][ T3892] usb 4-1: USB disconnect, device number 8
[  351.314873][    C1] Dead loop on virtual device ipvlan1, fix it urgently!
[  351.415786][ T7794] loop4: detected capacity change from 0 to 1024
[  352.269910][ T7794] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  352.355013][    C1] Dead loop on virtual device ipvlan1, fix it urgently!
[  352.482706][ T7444] EXT4-fs (loop4): unmounting filesystem.
[  352.530247][ T7808] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  352.684642][ T7814] netlink: 'syz-executor.1': attribute type 29 has an invalid length.
[  352.701172][ T7814] netlink: 'syz-executor.1': attribute type 29 has an invalid length.
[  352.732703][ T7814] netlink: 'syz-executor.1': attribute type 29 has an invalid length.
[  352.813247][ T7815] team0: Port device wlan1 added
[  353.394735][    C1] Dead loop on virtual device ipvlan1, fix it urgently!
[  353.838684][ T7842] loop3: detected capacity change from 0 to 512
[  353.895570][ T7842] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz-executor.3: invalid block
[  354.010180][ T7842] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz-executor.3: invalid indirect mapped block 4294967295 (level 1)
[  354.034816][ T7842] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz-executor.3: invalid indirect mapped block 4294967295 (level 1)
[  354.065085][ T7842] EXT4-fs (loop3): 2 truncates cleaned up
[  354.070898][ T7842] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  354.113584][ T7842] EXT4-fs error (device loop3): ext4_inlinedir_to_tree:1432: inode #12: block 7: comm syz-executor.3: path /root/syzkaller-testdir98739695/syzkaller.OQVNf7/209/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0
[  354.307283][ T4150] EXT4-fs (loop3): unmounting filesystem.
[  354.434790][    C1] Dead loop on virtual device ipvlan1, fix it urgently!
[  355.113029][ T7885] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  355.341801][ T7895] loop1: detected capacity change from 0 to 128
[  355.381540][ T7898] loop2: detected capacity change from 0 to 512
[  355.382578][ T7895] FAT-fs (loop1): bogus sectors per cluster 0
[  355.401713][ T7895] FAT-fs (loop1): Can't find a valid FAT filesystem
[  355.413993][ T7898] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz-executor.2: invalid block
[  355.427810][ T7898] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz-executor.2: invalid indirect mapped block 4294967295 (level 1)
[  355.449183][ T7898] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz-executor.2: invalid indirect mapped block 4294967295 (level 1)
[  355.474833][    C1] Dead loop on virtual device ipvlan1, fix it urgently!
[  355.548935][ T7898] EXT4-fs (loop2): 2 truncates cleaned up
[  355.559077][ T7898] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  355.591661][ T7898] EXT4-fs error (device loop2): ext4_inlinedir_to_tree:1432: inode #12: block 7: comm syz-executor.2: path /root/syzkaller-testdir2815350442/syzkaller.JK9qDT/89/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0
[  355.778169][ T6425] EXT4-fs (loop2): unmounting filesystem.
[  356.197808][ T7914] validate_nla: 10 callbacks suppressed
[  356.197829][ T7914] netlink: 'syz-executor.3': attribute type 29 has an invalid length.
[  356.291711][ T7914] netlink: 'syz-executor.3': attribute type 29 has an invalid length.
[  356.332332][ T7915] netlink: 'syz-executor.3': attribute type 29 has an invalid length.
[  356.409953][ T7916] netlink: 'syz-executor.3': attribute type 29 has an invalid length.
[  356.455992][ T7918] netlink: 'syz-executor.3': attribute type 29 has an invalid length.
[  356.474749][ T7914] netlink: 'syz-executor.3': attribute type 29 has an invalid length.
[  356.495813][ T7914] netlink: 'syz-executor.3': attribute type 29 has an invalid length.
[  356.511332][   T26] kauditd_printk_skb: 52 callbacks suppressed
[  356.511348][   T26] audit: type=1326 audit(1719033664.910:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7917 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd89827d0a9 code=0x0
[  356.514913][    C1] Dead loop on virtual device ipvlan1, fix it urgently!
[  357.183206][ T7929] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  357.209514][ T7929] CIFS mount error: No usable UNC path provided in device string!
[  357.209514][ T7929] 
[  357.219858][ T7929] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  357.495956][ T7940] loop1: detected capacity change from 0 to 512
[  357.523821][ T7940] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz-executor.1: invalid block
[  357.544018][ T7940] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz-executor.1: invalid indirect mapped block 4294967295 (level 1)
[  357.559495][    C1] Dead loop on virtual device ipvlan1, fix it urgently!
[  357.581721][ T7940] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz-executor.1: invalid indirect mapped block 4294967295 (level 1)
[  357.615084][ T7940] EXT4-fs (loop1): 2 truncates cleaned up
[  357.622207][ T7940] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  357.633654][ T7947] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  357.642505][ T7940] EXT4-fs error (device loop1): ext4_inlinedir_to_tree:1432: inode #12: block 7: comm syz-executor.1: path /root/syzkaller-testdir4100469594/syzkaller.XEVwUe/243/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0
[  357.669669][ T6837] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  357.699274][ T3572] EXT4-fs (loop1): unmounting filesystem.
[  357.894316][ T6629] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  357.907779][ T7959] loop1: detected capacity change from 0 to 128
[  357.916327][ T7959] FAT-fs (loop1): bogus sectors per cluster 0
[  357.922471][ T7959] FAT-fs (loop1): Can't find a valid FAT filesystem
[  358.034567][ T6837] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  358.055061][ T6837] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  358.072483][ T6837] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  358.092133][ T6837] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  358.102522][ T6837] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  358.117637][    C0] Dead loop on virtual device ipvlan1, fix it urgently!
[  358.120922][ T6837] usb 4-1: config 0 descriptor??
[  358.149766][ T7934] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  358.454744][ T6629] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  358.535871][ T6629] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  358.594801][    C1] Dead loop on virtual device ipvlan1, fix it urgently!
[  358.664764][ T6629] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  358.812852][ T6629] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  358.843337][ T6629] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  358.925736][ T6629] usb 1-1: config 0 descriptor??
[  358.950340][ T7963] team0: Port device wlan1 added
[  358.956053][ T7948] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  359.017505][ T6837] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0
[  359.029198][ T6837] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0
[  359.043721][ T6837] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0
[  359.051535][ T6837] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0
[  359.059453][ T6837] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0
[  359.075244][ T6837] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0
[  359.102599][ T6837] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0
[  359.120592][ T6837] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0
[  359.166474][ T6837] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0
[  359.452720][ T7948] loop0: detected capacity change from 0 to 16
[  359.674413][ T7982] CIFS mount error: No usable UNC path provided in device string!
[  359.674413][ T7982] 
[  359.684481][ T7982] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  359.764667][ T7948] erofs: Unknown parameter 'ÿÿÿÿ)|'
[  359.989168][    C1] Dead loop on virtual device ipvlan1, fix it urgently!
[  360.037546][ T6837] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0
[  360.046139][ T6837] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0
[  360.054768][ T6837] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving
[  360.095511][ T6837] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  360.417353][ T7988] loop1: detected capacity change from 0 to 2048
[  360.547285][ T7988] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  360.612031][    C0] operation not supported error, dev loop1, sector 0 op 0x9:(WRITE_ZEROES) flags 0x8000800 phys_seg 0 prio class 1
[  360.793188][ T7990] UDF-fs: error (device loop1): udf_read_inode: (ino 1345) failed !bh
[  360.816448][ T6629] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0
[  360.905045][ T6629] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving
[  360.938120][ T7994] loop3: detected capacity change from 0 to 512
[  360.978762][ T7997] loop2: detected capacity change from 0 to 256
[  360.986976][ T6629] plantronics 0003:047F:FFFF.000D: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  360.994734][    C1] Dead loop on virtual device ipvlan1, fix it urgently!
[  361.033040][ T7994] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz-executor.3: invalid block
[  361.055622][ T7997] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  361.063549][ T6837] usb 4-1: USB disconnect, device number 9
[  361.075870][ T3572] UDF-fs: error (device loop1): udf_read_inode: (ino 1440) failed !bh
[  361.090613][ T7994] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz-executor.3: invalid indirect mapped block 4294967295 (level 1)
[  361.116511][ T7994] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz-executor.3: invalid indirect mapped block 4294967295 (level 1)
[  361.123241][ T3572] UDF-fs: error (device loop1): udf_read_inode: (ino 1440) failed !bh
[  361.132001][ T7994] EXT4-fs (loop3): 2 truncates cleaned up
[  361.146090][ T7994] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  361.210794][ T7994] EXT4-fs error (device loop3): ext4_inlinedir_to_tree:1432: inode #12: block 7: comm syz-executor.3: path /root/syzkaller-testdir98739695/syzkaller.OQVNf7/215/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0
[  361.310900][ T4150] EXT4-fs (loop3): unmounting filesystem.
[  361.519340][ T3643] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  361.715345][ T8011] loop3: detected capacity change from 0 to 128
[  361.853109][ T8011] FAT-fs (loop3): bogus sectors per cluster 0
[  361.927363][ T8011] FAT-fs (loop3): Can't find a valid FAT filesystem
[  361.986753][ T3643] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  362.034819][    C1] Dead loop on virtual device ipvlan1, fix it urgently!
[  362.489475][ T6629] usb 1-1: USB disconnect, device number 18
[  362.511975][ T8016] Cannot find set identified by id 0 to match
[  362.986000][ T3643] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  363.074598][    C1] Dead loop on virtual device ipvlan1, fix it urgently!
[  363.614494][   T27] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  364.114742][    C1] Dead loop on virtual device ipvlan1, fix it urgently!
[  364.140860][ T3643] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  364.177432][   T48] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  364.190330][   T48] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  364.198817][   T48] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  364.208171][   T48] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  364.215881][   T48] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  364.223383][   T48] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  364.306439][ T8042] loop4: detected capacity change from 0 to 512
[  364.319428][ T8042] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz-executor.4: invalid block
[  364.332990][ T8042] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz-executor.4: invalid indirect mapped block 4294967295 (level 1)
[  364.348971][ T8042] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz-executor.4: invalid indirect mapped block 4294967295 (level 1)
[  364.390811][ T8035] lo speed is unknown, defaulting to 1000
[  364.405814][ T8042] EXT4-fs (loop4): 2 truncates cleaned up
[  364.411603][ T8042] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  364.454331][   T27] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  364.467148][   T27] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  364.477223][   T27] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  364.489563][   T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  364.504604][ T8042] EXT4-fs error (device loop4): ext4_inlinedir_to_tree:1432: inode #12: block 7: comm syz-executor.4: path /root/syzkaller-testdir155432591/syzkaller.qRkbiF/23/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0
[  364.545638][ T8027] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  364.653995][ T8051] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  364.712952][ T7444] EXT4-fs (loop4): unmounting filesystem.
[  364.997851][   T27] usb 4-1: USB disconnect, device number 10
[  365.155184][    C1] Dead loop on virtual device ipvlan1, fix it urgently!
[  365.330402][ T8035] chnl_net:caif_netlink_parms(): no params data found
[  365.418949][ T8035] bridge0: port 1(bridge_slave_0) entered blocking state
[  365.427197][ T8035] bridge0: port 1(bridge_slave_0) entered disabled state
[  365.436749][ T8035] device bridge_slave_0 entered promiscuous mode
[  365.445858][ T8035] bridge0: port 2(bridge_slave_1) entered blocking state
[  365.453584][ T8035] bridge0: port 2(bridge_slave_1) entered disabled state
[  365.464798][ T8035] device bridge_slave_1 entered promiscuous mode
[  365.483475][ T3643] team0: Port device wlan1 removed
[  365.533231][ T8035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  365.579919][ T8035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  365.589296][   T27] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  365.637845][ T8035] team0: Port device team_slave_0 added
[  365.679866][ T8035] team0: Port device team_slave_1 added
[  365.763144][ T8035] batman_adv: batadv0: Adding interface: batadv_slave_0
[  365.784427][ T8035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  365.931227][ T8035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  365.954670][   T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  365.978204][   T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  365.997020][   T27] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  366.014066][   T27] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  366.030647][   T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  366.041767][   T27] usb 3-1: config 0 descriptor??
[  366.194710][    C1] Dead loop on virtual device ipvlan1, fix it urgently!
[  366.306762][   T48] Bluetooth: hci2: command tx timeout
[  366.331374][ T8064] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  366.775000][ T3643] device hsr_slave_0 left promiscuous mode
[  366.789931][ T3643] device hsr_slave_1 left promiscuous mode
[  366.796439][ T3643] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  366.804006][ T3643] batman_adv: batadv0: Removing interface: batadv_slave_0
[  366.814913][ T3643] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  366.822479][ T3643] batman_adv: batadv0: Removing interface: batadv_slave_1
[  366.832610][ T3643] device bridge_slave_0 left promiscuous mode
[  366.839610][ T3643] bridge0: port 1(bridge_slave_0) entered disabled state
[  366.865181][ T3643] device veth1_macvtap left promiscuous mode
[  366.871575][ T3643] device veth0_macvtap left promiscuous mode
[  366.881044][ T3643] device veth1_vlan left promiscuous mode
[  366.894750][ T3643] device veth0_vlan left promiscuous mode
[  366.993927][ T8064] loop2: detected capacity change from 0 to 16
[  367.010900][ T8064] erofs: Unknown parameter 'ÿÿÿÿ)|'
[  367.234685][    C1] Dead loop on virtual device ipvlan1, fix it urgently!
[  367.306668][   T27] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0
[  367.320024][   T27] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving
[  367.338410][   T27] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  367.359329][ T3643] team0 (unregistering): Port device team_slave_1 removed
[  367.378242][ T3643] team0 (unregistering): Port device team_slave_0 removed
[  367.393085][ T3643] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  367.411991][ T3643] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  367.548673][ T3643] bond0 (unregistering): Released all slaves
[  367.640976][ T8035] batman_adv: batadv0: Adding interface: batadv_slave_1
[  367.666615][ T8035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  367.733887][ T8035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  367.858020][  T151] usb 3-1: USB disconnect, device number 12
[  367.858221][ T8035] device hsr_slave_0 entered promiscuous mode
[  367.890922][ T8035] device hsr_slave_1 entered promiscuous mode
[  367.911590][ T8035] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  367.931239][ T8035] Cannot create hsr debugfs directory
[  368.274731][    C1] Dead loop on virtual device ipvlan1, fix it urgently!
[  368.365551][ T3589] Bluetooth: hci2: command tx timeout
[  368.616454][ T8098] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  368.870081][ T8035] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  368.926841][ T8035] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  368.972809][ T8035] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  369.016985][ T8035] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  369.204083][ T8091] loop3: detected capacity change from 0 to 40427
[  369.250999][ T8091] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  369.281488][ T8091] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  369.314698][    C1] Dead loop on virtual device ipvlan1, fix it urgently!
[  369.332312][ T8035] 8021q: adding VLAN 0 to HW filter on device bond0
[  369.349400][ T8091] F2FS-fs (loop3): invalid crc value
[  369.410301][ T8091] F2FS-fs (loop3): Found nat_bits in checkpoint
[  369.422338][ T6629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  369.436610][ T6629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  369.482216][ T8035] 8021q: adding VLAN 0 to HW filter on device team0
[  369.523999][ T6629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  369.543181][ T6629] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  369.573655][ T6629] bridge0: port 1(bridge_slave_0) entered blocking state
[  369.580895][ T6629] bridge0: port 1(bridge_slave_0) entered forwarding state
[  369.650591][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  369.653177][ T8091] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  369.667430][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  369.687593][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  369.713443][   T14] bridge0: port 2(bridge_slave_1) entered blocking state
[  369.720705][   T14] bridge0: port 2(bridge_slave_1) entered forwarding state
[  369.725313][ T8091] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  369.740409][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  369.789813][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  369.809403][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  369.939895][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  370.724099][ T3589] Bluetooth: hci2: command tx timeout
[  370.743971][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  370.746661][    C1] Dead loop on virtual device ipvlan1, fix it urgently!
[  370.761721][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  370.786984][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  370.803228][ T8120] overlayfs: missing 'lowerdir'
[  370.818829][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  371.016678][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  371.025966][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  371.035378][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  371.046115][ T8035] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  371.352602][ T3774] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  371.507654][ T3774] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  371.794846][    C1] Dead loop on virtual device ipvlan1, fix it urgently!
[  372.322782][ T8035] 8021q: adding VLAN 0 to HW filter on device batadv0
[  372.355225][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  372.363381][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  372.402382][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  372.415147][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  372.490073][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  372.505726][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  372.539636][ T8035] device veth0_vlan entered promiscuous mode
[  372.559104][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  372.575081][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  372.599558][ T8035] device veth1_vlan entered promiscuous mode
[  372.670026][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  372.687112][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  372.708721][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  372.741882][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  372.763376][ T8035] device veth0_macvtap entered promiscuous mode
[  372.773804][ T3589] Bluetooth: hci2: command tx timeout
[  372.812971][ T8146] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  372.834741][    C1] Dead loop on virtual device ipvlan1, fix it urgently!
[  372.919388][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  372.934423][ T8035] device veth1_macvtap entered promiscuous mode
[  373.015054][ T8035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  373.041956][ T8035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  373.062398][ T8035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  373.085577][ T8035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  373.123991][ T8035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  373.158769][ T8035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  373.188697][ T8035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  373.219648][ T8035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  373.254928][ T8035] batman_adv: batadv0: Interface activated: batadv_slave_0
[  373.283778][ T8157] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  373.313596][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  373.322951][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  373.347989][ T8035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  373.378521][ T8035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  373.391557][ T8035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  373.412794][ T8035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  373.429478][ T8035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  373.453850][ T8035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  373.474072][ T8035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  373.511192][ T8035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  373.552316][ T8035] batman_adv: batadv0: Interface activated: batadv_slave_1
[  373.594512][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  373.629366][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  373.666029][ T8035] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  373.692725][ T8035] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  373.723330][ T8035] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  373.761706][ T8035] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  373.825522][ T8167] 9pnet_fd: p9_fd_create_unix (8167): problem connecting socket: ./file0: -111
[  373.874649][    C1] Dead loop on virtual device ipvlan1, fix it urgently!
[  374.157001][ T8172] device wireguard0 entered promiscuous mode
[  374.533636][   T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  374.612801][   T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  374.914723][    C1] Dead loop on virtual device ipvlan1, fix it urgently!
[  375.012258][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  375.042015][   T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  375.065700][ T8178] 9pnet_fd: Insufficient options for proto=fd
[  375.080154][   T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  375.519806][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  375.880393][ T8178] loop4: detected capacity change from 0 to 8192
[  375.926235][ T8178] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  375.944458][ T8178] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal
[  375.955006][    C1] Dead loop on virtual device ipvlan1, fix it urgently!
[  376.011339][ T8185] team0: Port device wlan1 added
[  376.016782][ T8178] REISERFS (device loop4): using ordered data mode
[  376.023346][ T8178] reiserfs: using flush barriers
[  376.084300][ T8187] team0: Device syz_tun is up. Set it down before adding it as a team port
[  376.108761][ T8178] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  376.173167][ T8178] REISERFS (device loop4): checking transaction log (loop4)
[  376.221075][ T8178] REISERFS (device loop4): Using r5 hash to sort names
[  376.253492][ T8178] REISERFS (device loop4): using 3.5.x disk format
[  376.290540][ T8178] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  376.349157][ T8195] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  376.995530][    C1] Dead loop on virtual device ipvlan1, fix it urgently!
[  377.076465][ T8209] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  377.202576][ T8208] device syzkaller0 entered promiscuous mode
[  377.524716][ T3653] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  377.529372][ T8225] team0: Device syz_tun is up. Set it down before adding it as a team port
[  377.704566][ T8234] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  377.884564][ T3653] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  377.904927][ T3653] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  377.921638][ T3653] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  377.938874][ T3653] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  377.948959][ T3653] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  377.973233][ T3653] usb 3-1: config 0 descriptor??
[  377.994969][ T8214] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  378.034719][    C1] Dead loop on virtual device ipvlan1, fix it urgently!
[  378.057088][ T8240] Cannot find set identified by id 0 to match
[  378.223520][ T8214] loop2: detected capacity change from 0 to 16
[  378.234388][ T3621] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  378.245459][ T8214] erofs: Unknown parameter 'ÿÿÿÿ)|'
[  378.247046][ T8243] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  378.359299][    C1] vxcan0: j1939_xtp_rx_dat: no tx connection found
[  378.365983][    C1] vxcan0: j1939_xtp_rx_dat: no rx connection found
[  378.373176][    C1] vxcan0: j1939_xtp_rx_dat: no tx connection found
[  378.379774][    C1] vxcan0: j1939_xtp_rx_dat: no rx connection found
[  378.386465][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  378.394428][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  378.402502][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  378.410473][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  378.418548][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  378.426611][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  378.434642][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  378.442567][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  378.450621][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  378.458591][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  378.466631][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  378.474591][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  378.482579][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  378.490586][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  378.498612][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  378.506585][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  378.514600][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  378.522540][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  378.530612][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  378.538582][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  378.546650][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  378.554607][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  378.562594][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  378.570570][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  378.578590][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  378.585552][ T3621] usb 1-1: Using ep0 maxpacket: 16
[  378.586565][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  378.599629][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  378.607623][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  378.615657][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  378.623678][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  378.625182][ T1255] ieee802154 phy0 wpan0: encryption failed: -22
[  378.631769][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  378.641481][ T1255] ieee802154 phy1 wpan1: encryption failed: -22
[  378.645880][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  378.645979][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  378.668087][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  378.676150][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  378.684112][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  378.692182][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  378.700172][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  378.708222][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  378.716193][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  378.724280][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  378.730542][ T3621] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  378.732188][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  378.732276][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  378.758142][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  378.761414][ T3621] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  378.766192][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  378.766213][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  378.766289][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  378.766305][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  378.766363][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  378.766379][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  378.766438][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  378.766454][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  378.766515][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  378.766531][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  378.766590][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  378.821383][ T3621] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  378.823871][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  378.823980][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  378.866867][ T3621] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0
[  378.873267][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  378.873385][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  378.914907][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  378.922915][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  378.930905][    C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  378.946439][ T3653] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0
[  378.954782][ T3653] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving
[  378.964700][ T3653] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  379.024672][ T3621] usb 1-1: New USB device found, idVendor=04e6, idProduct=0007, bcdDevice= 1.75
[  379.033732][ T3621] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=5
[  379.074658][    C1] Dead loop on virtual device ipvlan1, fix it urgently!
[  379.084669][ T3621] usb 1-1: SerialNumber: syz
[  379.175391][ T3621] usb-storage 1-1:1.0: USB Mass Storage device detected
[  379.200271][ T3621] usb-storage 1-1:1.0: Quirks match for vid 04e6 pid 0007: 1
[  379.224356][ T3621] scsi host1: usb-storage 1-1:1.0
[  379.380372][ T3621] usb 3-1: USB disconnect, device number 13
[  379.420277][ T6633] usb 1-1: USB disconnect, device number 19
[  379.794599][ T8270] device wireguard0 entered promiscuous mode
[  380.114705][    C1] Dead loop on virtual device ipvlan1, fix it urgently!
[  380.609649][ T8282] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  380.786671][ T8290] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  381.154780][    C1] Dead loop on virtual device ipvlan1, fix it urgently!
[  381.468943][ T8294] loop0: detected capacity change from 0 to 256
[  381.688062][ T8299] ------------[ cut here ]------------
[  381.693601][ T8299] WARNING: CPU: 1 PID: 8299 at kernel/bpf/btf.c:1943 btf_type_id_size+0x904/0x990
[  381.703013][ T8299] Modules linked in:
[  381.707285][ T8299] CPU: 1 PID: 8299 Comm: syz-executor.1 Not tainted 6.1.94-syzkaller #0
[  381.715816][ T8299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  381.725982][ T8299] RIP: 0010:btf_type_id_size+0x904/0x990
[  381.731650][ T8299] Code: 04 3b 00 e9 d1 fa ff ff 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 03 fb ff ff 48 89 ef e8 46 05 3b 00 e9 f6 fa ff ff e8 8c 84 e3 ff <0f> 0b 45 31 f6 e9 f1 fa ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f
[  381.751366][ T8299] RSP: 0018:ffffc9000466fbc0 EFLAGS: 00010283
[  381.757492][ T8299] RAX: ffffffff81a70ec4 RBX: 0000000011000000 RCX: 0000000000040000
[  381.765545][ T8299] RDX: ffffc90003e11000 RSI: 0000000000000093 RDI: 0000000000000094
[  381.773624][ T8299] RBP: 0000000000000009 R08: ffffffff81a709f2 R09: ffffffff81a7090e
[  381.781699][ T8299] R10: 0000000000000005 R11: ffff88807a749dc0 R12: ffff88802723d800
[  381.789927][ T8299] R13: dffffc0000000000 R14: ffff888072c6ee98 R15: 0000000000000001
[  381.798003][ T8299] FS:  00007f3d4bf1a6c0(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
[  381.807003][ T8299] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  381.813595][ T8299] CR2: 0000001b31424000 CR3: 0000000078707000 CR4: 00000000003506e0
[  381.821632][ T8299] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  381.829656][ T8299] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  381.837699][ T8299] Call Trace:
[  381.840987][ T8299]  <TASK>
[  381.843929][ T8299]  ? __warn+0x15a/0x520
[  381.848143][ T8299]  ? btf_type_id_size+0x904/0x990
[  381.853177][ T8299]  ? report_bug+0x2af/0x500
[  381.857719][ T8299]  ? btf_type_id_size+0x904/0x990
[  381.862773][ T8299]  ? handle_bug+0x3d/0x70
[  381.867136][ T8299]  ? exc_invalid_op+0x16/0x40
[  381.871814][ T8299]  ? asm_exc_invalid_op+0x16/0x20
[  381.876877][ T8299]  ? btf_type_id_size+0x34e/0x990
[  381.881911][ T8299]  ? btf_type_id_size+0x432/0x990
[  381.886968][ T8299]  ? btf_type_id_size+0x904/0x990
[  381.891999][ T8299]  ? btf_type_id_size+0x904/0x990
[  381.897062][ T8299]  map_check_btf+0x134/0xb90
[  381.901653][ T8299]  ? __fget_files+0x435/0x4a0
[  381.906447][ T8299]  ? __fget_files+0x28/0x4a0
[  381.911037][ T8299]  ? bpf_prog_bind_map+0x610/0x610
[  381.916193][ T8299]  ? btf_get_by_fd+0x133/0x170
[  381.920979][ T8299]  map_create+0x7bc/0xd20
[  381.925370][ T8299]  __sys_bpf+0x2d3/0x6c0
[  381.929625][ T8299]  ? bpf_link_show_fdinfo+0x2d0/0x2d0
[  381.935053][ T8299]  ? print_irqtrace_events+0x210/0x210
[  381.940535][ T8299]  ? print_irqtrace_events+0x210/0x210
[  381.946063][ T8299]  ? syscall_enter_from_user_mode+0x2e/0x230
[  381.952054][ T8299]  ? lockdep_hardirqs_on+0x94/0x130
[  381.957376][ T8299]  __x64_sys_bpf+0x78/0x90
[  381.961803][ T8299]  do_syscall_64+0x3b/0xb0
[  381.966381][ T8299]  ? clear_bhb_loop+0x45/0xa0
[  381.971079][ T8299]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  381.977114][ T8299] RIP: 0033:0x7f3d4b27d0a9
[  381.981548][ T8299] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  382.001193][ T8299] RSP: 002b:00007f3d4bf1a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  382.009644][ T8299] RAX: ffffffffffffffda RBX: 00007f3d4b3b3f80 RCX: 00007f3d4b27d0a9
[  382.017675][ T8299] RDX: 0000000000000048 RSI: 0000000020000800 RDI: 0000000000000000
[  382.025681][ T8299] RBP: 00007f3d4b2ec074 R08: 0000000000000000 R09: 0000000000000000
[  382.033783][ T8299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  382.041824][ T8299] R13: 000000000000000b R14: 00007f3d4b3b3f80 R15: 00007ffc27592d28
[  382.049872][ T8299]  </TASK>
[  382.052949][ T8299] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  382.060220][ T8299] CPU: 1 PID: 8299 Comm: syz-executor.1 Not tainted 6.1.94-syzkaller #0
[  382.068554][ T8299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  382.078603][ T8299] Call Trace:
[  382.081893][ T8299]  <TASK>
[  382.084828][ T8299]  dump_stack_lvl+0x1e3/0x2cb
[  382.089536][ T8299]  ? nf_tcp_handle_invalid+0x642/0x642
[  382.095015][ T8299]  ? panic+0x764/0x764
[  382.099085][ T8299]  ? 0xffffffffa0001f94
[  382.103234][ T8299]  ? vscnprintf+0x59/0x80
[  382.107576][ T8299]  panic+0x318/0x764
[  382.111513][ T8299]  ? __warn+0x169/0x520
[  382.115676][ T8299]  ? memcpy_page_flushcache+0xfc/0xfc
[  382.121089][ T8299]  __warn+0x348/0x520
[  382.125079][ T8299]  ? btf_type_id_size+0x904/0x990
[  382.130106][ T8299]  report_bug+0x2af/0x500
[  382.134428][ T8299]  ? btf_type_id_size+0x904/0x990
[  382.139472][ T8299]  handle_bug+0x3d/0x70
[  382.143619][ T8299]  exc_invalid_op+0x16/0x40
[  382.148118][ T8299]  asm_exc_invalid_op+0x16/0x20
[  382.152989][ T8299] RIP: 0010:btf_type_id_size+0x904/0x990
[  382.158622][ T8299] Code: 04 3b 00 e9 d1 fa ff ff 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 03 fb ff ff 48 89 ef e8 46 05 3b 00 e9 f6 fa ff ff e8 8c 84 e3 ff <0f> 0b 45 31 f6 e9 f1 fa ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f
[  382.178226][ T8299] RSP: 0018:ffffc9000466fbc0 EFLAGS: 00010283
[  382.184295][ T8299] RAX: ffffffff81a70ec4 RBX: 0000000011000000 RCX: 0000000000040000
[  382.192268][ T8299] RDX: ffffc90003e11000 RSI: 0000000000000093 RDI: 0000000000000094
[  382.200275][ T8299] RBP: 0000000000000009 R08: ffffffff81a709f2 R09: ffffffff81a7090e
[  382.208259][ T8299] R10: 0000000000000005 R11: ffff88807a749dc0 R12: ffff88802723d800
[  382.216233][ T8299] R13: dffffc0000000000 R14: ffff888072c6ee98 R15: 0000000000000001
[  382.224227][ T8299]  ? btf_type_id_size+0x34e/0x990
[  382.229305][ T8299]  ? btf_type_id_size+0x432/0x990
[  382.234368][ T8299]  ? btf_type_id_size+0x904/0x990
[  382.239447][ T8299]  map_check_btf+0x134/0xb90
[  382.244054][ T8299]  ? __fget_files+0x435/0x4a0
[  382.248761][ T8299]  ? __fget_files+0x28/0x4a0
[  382.253351][ T8299]  ? bpf_prog_bind_map+0x610/0x610
[  382.258464][ T8299]  ? btf_get_by_fd+0x133/0x170
[  382.263232][ T8299]  map_create+0x7bc/0xd20
[  382.267569][ T8299]  __sys_bpf+0x2d3/0x6c0
[  382.271819][ T8299]  ? bpf_link_show_fdinfo+0x2d0/0x2d0
[  382.277231][ T8299]  ? print_irqtrace_events+0x210/0x210
[  382.282696][ T8299]  ? print_irqtrace_events+0x210/0x210
[  382.288163][ T8299]  ? syscall_enter_from_user_mode+0x2e/0x230
[  382.294143][ T8299]  ? lockdep_hardirqs_on+0x94/0x130
[  382.299341][ T8299]  __x64_sys_bpf+0x78/0x90
[  382.303795][ T8299]  do_syscall_64+0x3b/0xb0
[  382.308216][ T8299]  ? clear_bhb_loop+0x45/0xa0
[  382.312900][ T8299]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  382.318814][ T8299] RIP: 0033:0x7f3d4b27d0a9
[  382.323232][ T8299] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  382.342834][ T8299] RSP: 002b:00007f3d4bf1a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  382.351242][ T8299] RAX: ffffffffffffffda RBX: 00007f3d4b3b3f80 RCX: 00007f3d4b27d0a9
[  382.359213][ T8299] RDX: 0000000000000048 RSI: 0000000020000800 RDI: 0000000000000000
[  382.367194][ T8299] RBP: 00007f3d4b2ec074 R08: 0000000000000000 R09: 0000000000000000
[  382.375180][ T8299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  382.383158][ T8299] R13: 000000000000000b R14: 00007f3d4b3b3f80 R15: 00007ffc27592d28
[  382.391132][ T8299]  </TASK>
[  382.394489][ T8299] Kernel Offset: disabled
[  382.398830][ T8299] Rebooting in 86400 seconds..