last executing test programs:

8m35.651071765s ago: executing program 32 (id=344):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
r2 = accept4(r0, 0x0, 0x0, 0x0)
sendto(r2, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0)
recvfrom(r1, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0)

7m7.403698856s ago: executing program 1 (id=973):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ed)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0x1ed)
rmdir(&(0x7f00000001c0)='./config/usb_gadget/g1/functions/uac1.usb0\x00')

7m7.20585412s ago: executing program 1 (id=974):
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x178)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x20, 0x7fffffffffffffff, 0x3fff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000180)='net/tcp6\x00')

7m6.912352856s ago: executing program 1 (id=977):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2)
getsockname$packet(r2, &(0x7f0000000680)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001300)=@newtfilter={0x44, 0x28, 0x575ac7824d421509, 0x70bd29, 0x4, {0x0, 0x0, 0x0, r3, {0x9}, {0xf9d690b100bbf911}, {0x10, 0x5}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xfff3, 0xfff2}}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x11}, 0x40)
r4 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0)

7m6.009193464s ago: executing program 1 (id=984):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0))
r0 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0, &(0x7f0000000300)=<r3=>0x0)
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)=<r4=>0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup(r5)
syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x3, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x200015a, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x0, 0x10001, 0x142}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x1000003, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7a1a, 0x2000, 0x3, 0xba}}], 0x1, &(0x7f0000000340)={0x2e, 0x14, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x5c0, 0x0, 0x0}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94)

7m4.850050367s ago: executing program 1 (id=993):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c)
sendmmsg(r0, &(0x7f0000001100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4010)

7m4.455815545s ago: executing program 1 (id=995):
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x4})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x10)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0xf61cb000)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4)
syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r1)
mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}})
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)

7m4.17598885s ago: executing program 33 (id=995):
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x4})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x10)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0xf61cb000)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4)
syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r1)
mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}})
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)

6m11.927879311s ago: executing program 6 (id=1332):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x7fffffff, 0x4)
setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000080)=0x80000000, 0x4)
bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x1, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0)
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x2000018, {0x0, 0x0, 0x0, 0x7, 0x6, 0x0, 0xa, 0x19, 0x8, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7064b30c50997ffffffffffffffff7bfe55cd4a5d83cd4a524bd3ffec0c7f5d800b2f7b6aa54cc50a1fcaed1e831fa79a00", "67bf000000000000b80200", [0xfffffffffffffce8, 0x9]}})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0x10, 0xffff}, {0xffe0, 0x9}}}, 0x24}}, 0x0)
write(r0, &(0x7f0000000000)="01", 0x1)

6m11.46334701s ago: executing program 6 (id=1334):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002640)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="200e02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001680)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "33fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f00000009c0)=ANY=[@ANYBLOB="001602000000f610"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000200)={0x40, 0x12, 0x1, '\b'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)

6m8.312571522s ago: executing program 6 (id=1365):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x0, 0x0)
ioctl$COMEDI_CMD(r0, 0x80506409, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x10, 0x2710, 0x20, 0x1, 0x20, 0x1, &(0x7f0000000300)=[0x0], 0x1, 0x0})
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000500)={0x38, r3, 0x1, 0x0, 0x300, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x38}}, 0x0)
ptrace$ARCH_GET_GS(0x1e, r1, &(0x7f00000000c0), 0x1004)
capset(&(0x7f0000000000)={0x20080522, r1}, &(0x7f0000000040)={0x5, 0x9, 0xfffff7dd, 0x0, 0xe0, 0x2})
read(r0, 0x0, 0x0)

6m8.088611846s ago: executing program 6 (id=1369):
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20d42, 0x4)
fcntl$setstatus(r1, 0x4, 0x42000)
r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4)
fcntl$setstatus(r2, 0x4, 0x8e000)
r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4)
fcntl$setstatus(r3, 0x4, 0x42000)
close(0x3)

6m7.896762161s ago: executing program 6 (id=1372):
gettid()
prlimit64(0x0, 0xf, 0x0, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_PROBE_CLIENT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r0, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4004804)
r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f0000000040))
syz_read_part_table(0x4094, &(0x7f0000006600)="$eJzs071KK0EUAOCT3CL3hwtRfIDtRBBdY0wrKhYWMUUqwUZEISAR/CONjW/jI/kAvoKdrJhdY1xYg2AjfF9zZs45Oww7M/8e77ciorZ6PRyMoqQeEdl4tFmPqEVEu6jUSp1/iniWf1Uvr8QMz1mWfcw087/8e5I4ehqH27ti3pgullQcwOJcxH4SEX+vHhZ2vmPf/HCNpYN8kP0q4utNLL/vt+bpyf/Zi+9td5PebjdJO51Wf62VfNJ6mF/ZNE3T92TFNmaUvqJRWZlv9k9Hyc3JxeXgfJhsrKwvJ73jSXu78ukBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8MIOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADByQAAAAAgv6/bkegAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPwUAAD//zX7H14=")

6m6.613838066s ago: executing program 6 (id=1384):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x4a)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x1, 0x0)
write(r0, &(0x7f0000000500)='udp 2', 0x5)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000)
umount2(&(0x7f0000000040)='.\x00', 0x2)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
close_range(r3, 0xffffffffffffffff, 0x200000000000000)

5m51.542971393s ago: executing program 34 (id=1384):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x4a)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x1, 0x0)
write(r0, &(0x7f0000000500)='udp 2', 0x5)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000)
umount2(&(0x7f0000000040)='.\x00', 0x2)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
close_range(r3, 0xffffffffffffffff, 0x200000000000000)

5m37.742207776s ago: executing program 5 (id=1596):
memfd_create(0x0, 0x1)
r0 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000))
fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5, r0})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0)
r1 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3})
mq_timedsend(r1, 0x0, 0x0, 0x3, 0x0)
mq_timedsend(r1, 0x0, 0x0, 0x9, 0x0)
mq_timedreceive(r1, &(0x7f0000000500)=""/202, 0xca, 0x200000200009, 0x0)

5m37.348486323s ago: executing program 5 (id=1599):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x2000c015}, 0x2404c8c0)
socket(0x10, 0x3, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x4a, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x4, 0x3, 0x8, 0x20001}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r1], 0x4c}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x6293a, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40845}, 0x4000000)

5m34.47777352s ago: executing program 5 (id=1609):
r0 = getpid()
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000700)='./file0\x00', 0x0, &(0x7f00000006c0)={[{@minixdf}, {@init_itable}, {@errors_remount}]}, 0x1, 0x5c5, &(0x7f00000000c0)="$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")
socket$packet(0x11, 0x3, 0x300)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, 0x0, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
syz_pidfd_open(r0, 0x0)
syz_emit_vhci(&(0x7f0000000880)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x8, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x1, 0x7, 0xf, 0x69, 0x9, 0x7}}}, 0x14)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)

5m33.404534911s ago: executing program 5 (id=1613):
syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000c80)='./file1\x00', 0x80, &(0x7f0000000180)=ANY=[], 0x3, 0xc6b, &(0x7f0000000cc0)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0xa27b734c1a0bc97)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'})
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ce35af41090000000000000000298b070000000000004faa2ae2c084a0ea0000000000007700000c0000200000002000000000000400", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]})
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x10b442, 0x0)
unshare(0x22020600)
openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fsync(r1)

5m31.499693449s ago: executing program 5 (id=1624):
socket$pppoe(0x18, 0x1, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4091)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='rdma.current\x00', 0x26e1, 0x0)
socket$rxrpc(0x21, 0x2, 0xa)
r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000019380)={0x0, 0xed76, 0x40, 0x2, 0xca}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r5=>0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = dup(r6)
syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0xae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x0, 0x1f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)

5m30.692826155s ago: executing program 5 (id=1629):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x4000000, 0x2000, 0x2000, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/114, 0x0, 0x0, 0xd8, 0xc4, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b71119246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x0, 0x8000}, 0x24)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15)
ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000180)={0x2, 0xa3f1, 0xf7fffffffffffff9, 0x50ff, 0x9, 0x8})

5m29.548941877s ago: executing program 35 (id=1629):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x4000000, 0x2000, 0x2000, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/114, 0x0, 0x0, 0xd8, 0xc4, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b71119246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x0, 0x8000}, 0x24)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15)
ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000180)={0x2, 0xa3f1, 0xf7fffffffffffff9, 0x50ff, 0x9, 0x8})

2m34.411908403s ago: executing program 0 (id=2535):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3)

2m32.495662441s ago: executing program 0 (id=2539):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000004bb0000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100582e000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d10300000800034000000001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

2m32.196230177s ago: executing program 0 (id=2541):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
userfaultfd(0x80001)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
inotify_init1(0x80000)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
socket$netlink(0x10, 0x3, 0x10)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e00010028bd700008dcdf2500000000", @ANYRES32=r0, @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x400}, 0x20040840)

2m31.993499771s ago: executing program 0 (id=2544):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4)
bind$inet(r1, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000080)=0xd27, 0x4)
connect$inet(r1, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto(r1, &(0x7f0000000380)="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", 0x142, 0x4008044, 0x0, 0x0)
write$binfmt_misc(r1, &(0x7f0000000180)='}', 0x1)
sendto$inet(r1, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x0, 0x0, 0x0)

2m31.834627974s ago: executing program 0 (id=2546):
syz_open_dev$tty1(0xc, 0x4, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x1, 0x0)
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230)
r2 = socket$inet(0x2, 0x3, 0x2f)
unshare(0xe000000)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000140)='xfrm0\x00', 0x10)
sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x2, 0x7c00, @multicast1}, 0x10)

2m31.54708028s ago: executing program 0 (id=2547):
syz_usb_connect(0x0, 0x24, &(0x7f0000000740)={{0x12, 0x1, 0x700, 0x84, 0x98, 0xf3, 0x10, 0x13d8, 0x21, 0xc449, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x7, 0x38, 0x81, "", [{{0x9, 0x4, 0xdf, 0x40, 0x0, 0x34, 0x65, 0xba, 0x1}}]}}]}}, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0})
r0 = syz_open_dev$dvb_demux(0x0, 0x0, 0x62400)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r3 = dup(r1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r3, 0x2000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
sync()
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)

2m16.109074515s ago: executing program 36 (id=2547):
syz_usb_connect(0x0, 0x24, &(0x7f0000000740)={{0x12, 0x1, 0x700, 0x84, 0x98, 0xf3, 0x10, 0x13d8, 0x21, 0xc449, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x7, 0x38, 0x81, "", [{{0x9, 0x4, 0xdf, 0x40, 0x0, 0x34, 0x65, 0xba, 0x1}}]}}]}}, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0})
r0 = syz_open_dev$dvb_demux(0x0, 0x0, 0x62400)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r3 = dup(r1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r3, 0x2000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
sync()
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)

1m50.438424781s ago: executing program 8 (id=2707):
socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
fanotify_init(0x4, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$xdp(0x2c, 0x3, 0x0)
pselect6(0x40, &(0x7f0000000240)={0x0, 0xfffffffffffffffc, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000009, 0x400}, 0x0, 0x0)

1m49.055134008s ago: executing program 8 (id=2711):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, 0x0}], 0x1, 0x40, 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0x9, 0x0, 0x0, 0x0, 0x10, 0x4, 0x0, 0x7f, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0x3})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0xffff1000, 0x9, 0x10004, 0xfffffffe, 0x0, [{0x2, 0x1, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x40, '\x00', 0xb}, {0xff, 0x81, 0xd3, '\x00', 0x67}, {0x0, 0x5, 0xf5, '\x00', 0xf}, {0x7, 0x5, 0x6}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x71, 0xd5, 0xf1, '\x00', 0x2}, {0x3, 0x4, 0xc}, {0x7f, 0x5, 0xb, '\x00', 0xb}, {0xbc, 0xd, 0xa, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0xdc}, {0xff, 0x1, 0xfe, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0xcf, 0x3, 0x11, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x3c, 0x2, 0x6, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x5}, {0x5, 0xc, 0x5, '\x00', 0xc}, {0x7, 0xe1, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x5, 0x3, '\x00', 0x10}, {0xd, 0x23, 0xf3, '\x00', 0x4}, {0x0, 0x6, 0x4}]}})

1m47.516391359s ago: executing program 8 (id=2720):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
ioctl$KVM_IRQFD(r1, 0x4020ae76, 0x0)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000240)={0xffffffffffffffff, 0x58bd, 0x3})
dup(0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8)
bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c)
syz_emit_ethernet(0x4e, &(0x7f0000000200)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "24b780", 0x18, 0x6, 0x40, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x41424344, 0x0, 0x0, 0x6, 0x18, 0x1001, 0x0, 0x0, {[@generic={0x3, 0x2}]}}}}}}}}, 0x0)

1m45.751088023s ago: executing program 8 (id=2725):
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x7, 0x81}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r3, 0x1, 0x1}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xd, 0x4, 0x4, 0xa8, 0x0, r4, 0x0, '\x00', 0x0, r3, 0x0, 0x5}, 0x50)

1m42.513465787s ago: executing program 8 (id=2741):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040), 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x2002)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
readv(r1, &(0x7f00000000c0)=[{&(0x7f0000001000)=""/4096, 0x18}], 0x1)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000380)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)

1m41.229718663s ago: executing program 8 (id=2748):
sync()
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
userfaultfd(0x80001)
syz_open_procfs(0x0, 0x0)
fchdir(0xffffffffffffffff)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
sync()
syz_mount_image$udf(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="73657373696f6e3530303030303030303030303030303030303030352c62733d303030303030303030302c0000008000000000000000"], 0x1, 0x5c6, &(0x7f00000006c0)="$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")
pipe2$9p(&(0x7f0000000400), 0x80000)
write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x138)
io_getevents(0x0, 0x4, 0x0, 0x0, 0x0)

1m26.079343932s ago: executing program 37 (id=2748):
sync()
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
userfaultfd(0x80001)
syz_open_procfs(0x0, 0x0)
fchdir(0xffffffffffffffff)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
sync()
syz_mount_image$udf(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="73657373696f6e3530303030303030303030303030303030303030352c62733d303030303030303030302c0000008000000000000000"], 0x1, 0x5c6, &(0x7f00000006c0)="$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")
pipe2$9p(&(0x7f0000000400), 0x80000)
write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x138)
io_getevents(0x0, 0x4, 0x0, 0x0, 0x0)

17.866843338s ago: executing program 3 (id=3036):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
remap_file_pages(&(0x7f00003e3000/0x7000)=nil, 0x7000, 0x0, 0x4, 0x1000)
r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000180)='./file0\x00', 0x200008, &(0x7f0000000080)=ANY=[@ANYRES8=r1, @ANYRES32, @ANYRESOCT], 0x1, 0x392, &(0x7f0000001000)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x6042, 0x101)
syz_fuse_handle_req(r3, &(0x7f0000000c00)="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", 0x2000, &(0x7f000000a300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
sendfile(r3, r2, 0x0, 0xe3aa6ea)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)

12.809562248s ago: executing program 4 (id=3051):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x7, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, 0x0)
setns(0xc9, 0x0)
r2 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
fsmount(r2, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0)
write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="03031b003a00320006006300000000"], 0x76)
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4)

10.548209842s ago: executing program 3 (id=3059):
mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/batman_adv/parameters/routing_algo\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='BATMAN_V\n\x00', 0x9)
close(r0)
r1 = socket(0x10, 0x3, 0x0)
write(r1, &(0x7f0000000200)="2c000000110005000100000000000000000000000000000000000000000000000c0003006261746164763000", 0x2c)
write(r1, &(0x7f0000000240)="3c000000100005060200000000000000000000000000000000000000000000000c0003006261746164763000100012000b0001006261746164760000", 0x3c)
write(r1, &(0x7f0000000280)="2c000000100005000300000000000000000000000000000001000000010000000c0003006261746164763000", 0x2c)
r2 = socket(0x11, 0x3, 0x543)
write(r2, &(0x7f0000000300)="ffffffffffff0200000000024305030f02000000000200000001000003e8", 0x1e)
write(r2, &(0x7f0000000340)="ffffffffffff0200000000024305040f320000000001020000000002000c0098968001010008000003e8000003e8", 0x2e)
nanosleep(&(0x7f0000000380)={0x1}, 0x0)

10.415164545s ago: executing program 7 (id=3060):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000007c0)={'xfrm0\x00'})
r1 = syz_mount_image$ext4(&(0x7f0000000280)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x3008000, &(0x7f0000000040)={[{@block_validity}]}, 0xfe, 0x539, &(0x7f0000000700)="$eJzs3cFvI1cZAPBvvJu1dzfb3UIPBQFdSmFBq7U33jaqeqFckFBVFalwQmgbJd4oih1HsVOaEIn0zBWJSpzgT+CAxAFpT9y5wQGJSzkgFViBGgRCrmY8ziZOnFhpHO/Gv5808sybib/vWZr37DeZeQFMrJsRsR0RlyLinYi4npcn+RKvd5f0uI8fbc3vPNqaT6LTefsfF/Mjt+Z7x/dczd+zFPFWul08JG5rY3N5rl6vreXblXZjtdLa2Lyz1JhbrC3WVqrV2ZnZu6/ee6V6anV9ofHrj7699Mb3f/fbL374h+1v/DjN+Zv5vrRupxZoj+7nMhXTe8rST+6NUQQbgwt5fS6NOxFOpBARn4mIF/P1XaXx5QQAjFancz061/duD5YMcQwA8ORLf/NPR1Io57//p6NQKJezMbzSc3GlUG+22rcfNNdXFiIbw7oRU4UHS/Xa3Xys8EZMJen2TLb+eLvat30vIp6NiJ8VL2fb5flmfWFcX3oAYMJd7ev//13s9v9DcIUAAJ5menIAmDwH+/+pseQBAJwdv/8BYPLs6f8Pu1cXADiHSn33/mcOlgAA58ix4//Px09+eDapAABnxPV/AJgo333zzXTp7OTPv154d2N9ufnunYVaa7ncWJ8vzzfXVsuLzeZi9syexnHvV282V2dejvX3Ku1aq11pbWzebzTXV9r3s+d636+5sQAAxu/ZFx7+KYmI7dcuZ0v05nJw+R/OPac5TK4L404AGJuL404AGBvj8UByzP6B/yL0weC/ufwp8gFG79bnBoz/H/3d4P+ds0kPGCHj/zC5Ho//n6QleOhrADzFjP/D5Op0EvP5A8CEGeL6v38RhHPuxNf/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYIJNZ0tSKOczAE9HoVAuR1yLiBsxlTxYqtfuRsQzEfHH4lQx3Z4Zd9IAwKdU+FuSz/916/pL0/17LyX/KWavEfGjX7z98/fm2u21mbT8n7vl7Q/y8uqhAYqjrwMAsMfF/oJeP93rx3vz+378aGu+t5xlgh99qzu5aBp3J196qXeTL8VURFz5V7KvMskpTUy8/X5EPN9f/8Lu/hv5zKf98dPY10YWP7IaTu+LX9gXv5Dt676mn8VnTyEXmDQP0/bn9cPOv0LczF7z8y/Z35iW4qcHG9cT6LV/O53+9q97vr91rZS1NYe1fzeHjfHy778zcN/7Fzqfvxixc6D97c0IXcrWDov/0pDx//KFL704aF/nlxG34qj43bVKu7FaaW1s3llqzC3WFmsr1erszOzdV++9Uq1kY9SV3kj1QX9/7fYzg+sfcWVA/NIx9f/qkPX/1f/e+cGXj4j/9a8cFr8Qzx0RfzsivjZk/Lkrvxk4fXcaf+FA/f/b6XSS3f63G//Svr9Ly24PGf/Dv24uDHkoAHAGWhuby3P1em3tKVxJ8z+F90m/G51GPqVR1fTqvpI/PwGfvJUDKxei3huPGnGs4uhDpCvjbZeA0Xt80o87EwAAAAAAAAAAAAAAYJDW9/JH/p3yXUR7b4Ybdx0BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4vz4JAAD//y1Hyv4=")
ioctl$XFS_IOC_FSGROWFSLOG(r1, 0x4008586f, &(0x7f0000000000)={0x9})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x40040)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xfffffffffffffffa)
r2 = open(&(0x7f0000000100)='./file1\x00', 0x14f840, 0xa2)
preadv2(r2, &(0x7f0000001040)=[{&(0x7f0000001200)=""/4080, 0xff0}], 0x1, 0x4, 0xfffffffd, 0x18)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000001f40)={0x0, 0x2904c, 0x29, 0x10003, '\x00', [{0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x9500}, {0xffffffff, 0x0, 0x9, 0xa}]})

9.987193203s ago: executing program 7 (id=3062):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x2c)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1b, &(0x7f0000001800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000180100002020690000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0, &(0x7f0000000140)=<r6=>0x0)
syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r7=>0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = dup(r8)
syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0xfb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x6, 0x15e, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x8, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x1, 0x3, 0x0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x82, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r10=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r1, r10, 0x25, 0x0, @val=@tcx}, 0x1c)
syz_emit_ethernet(0x22, &(0x7f0000000500)={@multicast, @random="02bc00", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x2, 0x14, 0x66, 0x0, 0xfc, 0x2f, 0x0, @local, @loopback}}}}}, 0x0)
ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(0xffffffffffffffff, 0x4068aea3, 0x0)

9.884563965s ago: executing program 9 (id=3063):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0xf5d1b000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x6b4, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20)
r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000040)={r3, r3, r3}, &(0x7f00000000c0)=""/61, 0xfffffffffffffd7e, 0x0)

8.726263568s ago: executing program 9 (id=3064):
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet6_sctp(0xa, 0x5, 0x84)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
socket(0x10, 0x3, 0x0)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000640)={r0, &(0x7f0000000000), &(0x7f0000000600)=@udp=r1, 0x2}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'syz_tun\x00', <r4=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r2, r4, 0x25, 0x4, @void}, 0x2a)
syz_emit_ethernet(0xd81, &(0x7f00000013c0)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0xd73, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xe}}, "dd9dec79219eb5499325e16c96335bc5ff0e043319357749084ca9d0ae1378f4e88112a2f7c10fd1523b9007773fd2b2bd0ebabccd2e5c35fb3baff587585840f2530c6f4d025f118440ac22a8b34da7b5e1e873bd429686be3ef84439e05fc0fefedb8b897b09445a9e10cf24aec2ff3ca6a86d94df0c4a928ed904dcfb02e6c6c5918a839d33cb9b55dfb3cd89d80eb18dc06415d313b4ea240a65eff4b941ac018e8f81de044239960271333255291b5fbfdcf8db25e175640f36986b859aeb3370ca17e6a20aeeb5c5d27eb097fc1fab796a7ff8fcbe119bbe4be2c8a5c58890191c59bea20bfe4edf9c5453e59f610d3bd1d6eb49b02e464aee0480187c5717936add1347b08cdf5b056adb941708e8a0498900419e98b75658c6dd00f88eebf8c9aaee2e38c80eafcf6ca08ea305da9c7050948ef78a1457a2e933287fe8d2e100cb00078ed829985f8812d543cc5cdb71521f4113829551efe915e4d6773f2d285cc1e8813919356ca5ef202b0d2b8a3d7de51e4635e761ffd7efe5d51dd1325596f0e4e1c0b1ce73240cb931227892d66f3629c9d152372d5790c1c25e2f6f850a5eb83654f423b84adbbf4169d472b2cddaa7137ff14c2944ade3a57613806810707a2e6c078beb4b87cf8cf39c9950bcb3f9bb42308bd5e68d81f7f4d9e528541703059787f5e342be8ebb9841d587f7455b409115d511c130d9641fc74391228bda52d2fa58e2ca74b26583e73e2cfb881945d8ecbc77eb35e783057f6c35ba06b7f639ec516ee54bf3645f6ec436ba859e22ed480a862285aa21f3d5cd3734dde388a7f8920c4a6b4a952f830e0d2811f2f2714e660e961de0b3e0b8d5fd1007690a61e414e82245dbe4e47c73465ed40af1cee2eae4801ee408ad1fce81ff8db77082c5efd93fa9a1a3e3d78eff84f326df1c6fa656cc7d4dab842fe8e0d9ce47ad0a7e74dfe1a53776a346a22dc7a0e476754d385d99aa9cbd3f445ffb2ed61e01b28fc071d706ad204b1e8014481dba0cbc460b67e64d6e955184271cedef7f951021e3595ebe9c3384b53efafb67cbed2aa1ede5d7fcff3a9d27d05766fb8894d7948609441759f4c4dfa33b6d486d4fb7e231f04d4f0f9e98f4b156129d9307fb9ebf3b278232062e7fe9ec2db7c4c991f83733368a107bf5798a1df45c919d71cce45ed907240c2f2fa6a4227e8e11cef2e7968c63e7a1adc3edec2170c17ed2cc54d0ea2b34e99b81015ffe51a501c2b73ddac5223e69d0dd451d358c0cd2ff7db256850ec1e9e349901f168d854284da68d80c68298a75c5d859008c82fe08b4cf2e68a2c0190760a03aff1be2c9425b6d5ef5c67bafb6d16fffeeb0211d90abbade4db9d6a9e9c981dde14c1d54e9138f9760bcdccbf17e7416042cfe7bbd8bba2f739f7f900ee45b965316b950e8474f3be92081fb63f43a4858b39e20e14d5a38c0973d680f2fda9e310d0e088523bdcbb728bcd0074447b4ace876da5642cd7d781cdb023a31446e0a0c59d5388674a5c8a97927e014a73d0330bd5c5187db79f1c546a8bcca008263509c23b246dea58fb36c44d373c1c92ffdd1600c27d4b10b3fc86b88ecefe8743bb59a6b8e443f06d2ae3a6908b6bc25b647deee13262225b8879dd79413ffa3d4aef91a0a04d4dc3030b5beb081c5fdf9152c3a17e6b24457fd580d84d3006af27ff44d6ec3664c4955a1d1dc5eb041682644ae564390a3d0aa602b2a18cdd3f8a1efff7b8f3afc31c283c9b74b806a98bd9f1ad8ecce410160c0a27f7ef90a2b0c1bea64e187adc04a04bff7c435659bc4c3ce5c2730e121972541062102e93d2a136e1aaaf3e25d547cad6e2b0874500fc098469494d2654808ee88588fd167f4332061a9b4cae6b22d87624e325e89a269f61ce0d26465ddfedc1f0fa2a5cf1ee7fe3e6cb375f1ff04cf8d22667debe574b8395023bde9a8302376af2e119c4c88433d1722011ade605f3a4201860742b0392ac96cc138d9ddb952f4e4742a7fd9d625465dac35347c1662b2085c357120c6ff69dedc013c5fe46555a4448b0be41e21ad73162bf9aa1cfb70f4702c7051c0a13fae918133f123d33c5c02e66ae8fceb3109b2e13a7a3e71484d59dfcba16db2d21549be1ba6cd5ad7610eefda427982384961f18bd6857ad97e868c2914d0ba934a296eda52646031c4504864061f3cba1df65cd04ef6b1050fb30b5abbbe28f8f7adb8073e452f4c0c5492a5f8d427ddf451ae303a86639e5dbccfe2b2bedb911d534a77c012e2f8a24917d98ab14557caf3e66040f21767685644f0003459762d4ab25a0e33a92b54748cf46a977505074b79b9b0746b2b5b168876a2ca10bb903edc1d1992a4a94c0ee0dd7b37add092163b5fbaf16090f8143187d060b19e3822f3def14717e41558f9582467a5a5f89148450fde235e7a5bb900e4e9d14e2147bfd2a52f84a115eb170bf3d3b9b3de9781960be4e53025c7dce005e1458140bb9cf9da8fa1124ac558fb220d57c23a7f120f5171eb2208d9e6ab7186ae457973da564f1fd45b241c15596035f55034c3995a587b4471068076839420df947f10ab2fc211732d768c135d63cc5eeda1bdfc780e7ed90855fa5a364e63f529703cd0f691b0b6a41232bfd1c1f61ef6b16ed3b9055ca888c8ebcd16a0623ede9e4e37b7d6175e3d0ddba8e7d87639eb8b0ba246131951a581575f1adf4c598a9f2f087d5eb2a0a5834d8cb12b0ad76d9381a838ccfbfcc20bbb970474c48677f10aa57be1d607d5b049d397178035f7f3393cd9000336c83218850ecd64142a22f7ae7e6a7e62013d6d105eb7c862e13979698681d44121ee9e2e552315d4d3913ff7bcd90d6bed72d50107a971a37d5a1d75efeebf03cc91239b7e427fba8df6b79674c15acd2093289fe6155063af81d85840abf4635f66083b3707d34b2149dfdf95cb4deb71e1574118c242b160c770347e6b1f135a985e89fe8e6d7f40281cfb6dc05cd8b9d4f6680c0863acb34516092acdf2bea67f54ab4282ba2d898287f34d9384e335b2ddbb87aaea8cadb8f0b397e99a68a7a214fae5a1f56c95bcd901534c23cd5cff3c168813d7fa1191dd7437c96b07324a7b21b48e205b859dcd080bd62ab7cca4bd7a73959218d0eeb21c887483201eaf3afb19efe1741b57332c5441685a7bb8324d9e85faafc785312b58aabef2eef6a8048663bf13db9ae9edd4b1dcebc99890693f11b354b1f1aad19b66251b4bcaed0daed73b87dedd140fd680e7d3355362844d1d7ba2ae6be7ffae59d7b3c679b890448b0de1acf591abfe6f3096794b7e142e0ac0862ab8cb76eb79b17d1138be3747f907c3f11c636a0f0e0d315d1ff05aab0ce62fbac03a2b4ddeac7ee192bba2da93b7a926271f6d594aa14de2c294ad0c77770a624d1ce24cc8d8f5e9b629604fa7897f0cbd641f76a85dc8df33b5715eb100e30e53b85110d2252c22575a7365eb08006b4d62d305e780101965094ce2aaad170df470870e687fb280b772d41ad5d470b71e256af3a0d2c02df95821d38f28cdff26fa7a3f6e920edbd3174d2d2bde854ef68dae8a0a4a63753c825930903a2ca75d4321bad0ad9ff6852f94dd04972a45bb9625b3726dfbcc959e85242f0d327b181aee0fdab7af064dd97151b131a5c4a51a66692cbbd9f1348a16470cedef1b255e172cd2b15184177ad43744de941869af884ff8e59ef0e63ac5e1b99c851e0f915359ce12d9c380bb6f9c2bc773267157afeda7abcc120a31a1b72af6662bff7f5f194dad00b4ebfdcbb4dfc39854412db1ae99b449d741f841239159ea467cf1e38b95bcb7603ebcb400cb31410b2a4e25126caade0019bf667cc998bc4582578da0f8a6268f6d114ccf9dd8379995e8be1b934bb5645d72f97e05628129a7d2bc548e08796341f43dc3c9fcbe89d8284dc6633bee0d17e99f600425f0172b6bc478f5117dadf15e36e850ecc0ca75664ef8e4877a44b4ffa22a6f1d6719f8d81f9937928caa0690b77406a3298aaf446e2f78343267399bb7f64c60f82bf5d07210281eaad09a3810790720c98a041332c809be7aea1480b9e5eb989085c23b4aee75143068def3e89d1c417b63321e68d340a1472d2504088c17cd75de0e700508c55a7246ca9a762cc50ca35cbcaa7dcf4ae3264c32ff2cd67566ed501fb8182b5f16c58295783f3b2b554b06aae700f198c71ad7519868c1e6fbeb0246569b04beeb8b71bcbb9af93372bee365efb1d7424689e8241b1dc346a73a84b5773487f388356b8dbec1a108846e3f8dc74865b156e8ad18b353efc4ad0b11412a381fec8f5d45678b4f8b680591be8077303e7aff71acf9052ae3b73e41e19668f9b53bfd75b778970831b6891a78ffe0d4863e62cbbf6cf8c085032864479cd3a250842984dcc2860f057f86c8e2d4d2afefb8a45b7d5b8c94e752f369a1b434c827cd26cd0276a8b40019a95ebe7c16de4c1ce8efbd5c70e0c507631818aa4fbc937d212e428aefa895069656babdbd921af974da32c49f4ca6d1e1e28319b427c8bad4d650809c673ec6073770b4097e5700a8071110fd07acbc5a59f8d7b0735a98fd40ce03718a9a93c035948859215c59f54343b08bfd95a35d73c5f09a9ebe63c509fe8443fa74e6efd0fd87defc7cb16725ce3c3d5f7664cfe253faf2cbeb307052dd2269b6266acdb31e2006b9355f673ca5c9cb907605ce071824254b139607a069531f9598f4040ddeb9cd018e9dfa1808032dfb65a4af0820da810a7b58fbb65ac8e65b017a40ec2d445a5c7b78d1f0e717b19427ef1fe6cc08c5e9da"}}}}, 0x0)

8.324606886s ago: executing program 9 (id=3066):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
flock(r1, 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
flock(r2, 0x2)
r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x10a)
flock(r3, 0x2)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r4=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)

7.920572384s ago: executing program 7 (id=3067):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000005, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x8}, 0x50)

6.975670712s ago: executing program 3 (id=3069):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/rds/tcp/rds_tcp_rcvbuf\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='1048576\n\x00', 0x8)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/net/rds/tcp/rds_tcp_sndbuf\x00', 0x2, 0x0)
write(r1, &(0x7f00000001c0)='1048576\n\x00', 0x8)
close(r1)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r2, &(0x7f0000000200)={0x2, 0x4001, @loopback}, 0x10)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000280)={0xa, 0x4001, 0x0, @loopback}, 0x1c)
nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0)

5.540973481s ago: executing program 9 (id=3071):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
socket$kcm(0x21, 0x2, 0xa)
r1 = userfaultfd(0x1)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100})
readv(r1, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/114, 0x72}], 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa9525000)

5.540841611s ago: executing program 7 (id=3072):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c)
sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043)
r2 = dup(r0)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0x403, 0x3, 0xb4, 0x7f, 0x9}, 0x9c)
pipe2$9p(&(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a)
splice(r3, 0x0, r0, 0x0, 0xffff, 0x2)
syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000000002003043060000000000001090224"], 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x8e, 0xffffffb9, 0x3a}, 0x9c)

4.56431161s ago: executing program 3 (id=3074):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x6c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}]}]}, 0x6c}}, 0x0)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x4c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x4c}}, 0x0)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x4c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x4c}}, 0x0)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x4c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x4c}}, 0x0)
poll(0x0, 0x0, 0x4b0)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x4c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x4c}}, 0x0)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x4c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x4c}}, 0x0)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x4c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x4c}}, 0x0)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x4c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x4c}}, 0x0)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x4c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x4c}}, 0x0)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x4c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x4c}}, 0x0)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x4c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x4c}}, 0x0)

4.456315322s ago: executing program 4 (id=3075):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(&(0x7f0000000040), &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/target/usb_gadget\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/target/usb_gadget/naa.5001405000000001\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/target/usb_gadget/naa.5001405000000001/tpgt_1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/target/usb_gadget/naa.5001405000000001/tpgt_1/nexus\x00', 0x2, 0x0)
write(r0, &(0x7f0000000340)='naa.', 0x4)
close(r0)

4.324326895s ago: executing program 2 (id=3076):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000080)="2e26f3aa0f20e035004000000f22e066baf80cb8b88b318bef66bafc0ced6436660fc603030f01c50f20e035200000000f22e0c4e1e55fda0fc7190f320f08", 0x3f}], 0x1, 0x11, 0x0, 0x0)
r4 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(r4, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)
r5 = socket(0x15, 0x5, 0x0)
getsockopt(r5, 0x200000000114, 0x271c, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000017000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

4.184019018s ago: executing program 4 (id=3077):
socket(0x10, 0x3, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000006c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000003640)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)='i', 0x1}], 0x1, 0x0, 0x0, 0x2200c004}], 0x1, 0x8010)
r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r6=>0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = dup(r7)
syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)

4.122796929s ago: executing program 2 (id=3078):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000400)={'vcan0\x00', <r3=>0x0})
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18)
sendmsg$can_j1939(r4, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f0000000280)="4dfb0cf0d556f1327d", 0x9}, 0x1, 0x0, 0x0, 0x400c000}, 0xee)
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', <r6=>0x0})
bind$can_j1939(r5, &(0x7f0000000240)={0x1d, r6, 0x0, {0x0, 0x0, 0x2}}, 0x18)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r3, {0x6, 0xc}, {0x5, 0x10}, {0xd, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4)

3.544062871s ago: executing program 3 (id=3079):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x1}, 0x8)
sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000003c0)={0x0, 0x2f3, 0x30}, 0xc)
r1 = dup(r0)
write$cgroup_subtree(r1, &(0x7f00000001c0)=ANY=[], 0x32600)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0xffcc)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)

3.247063726s ago: executing program 2 (id=3080):
setns(0xc9, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x20, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67a021c03d2005e9, 0x4, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r0, 0x5)
r1 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r1, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r2 = socket$netlink(0x10, 0x3, 0x4)
io_setup(0x4, &(0x7f0000000340)=<r3=>0x0)
io_pgetevents(r3, 0x1, 0x0, 0x0, 0x0, 0x0)
io_getevents(r3, 0x8000000000000000, 0x0, 0x0, 0x0)
write(r2, &(0x7f00000002c0)="29000000140005b7ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d12595fbea5", 0x29)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x4010}, 0x18)

2.921460083s ago: executing program 2 (id=3081):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
flock(r1, 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
flock(r2, 0x2)
r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x10a)
flock(r3, 0x2)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r4=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)

2.653830178s ago: executing program 4 (id=3082):
socket$alg(0x26, 0x5, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]})
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
socket$packet(0x11, 0x2, 0x300)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x20040, 0x1ff)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x64, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r1], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0xc000)

1.972639161s ago: executing program 7 (id=3083):
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$key(0xf, 0x3, 0x2)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$kcm(0x2, 0xa, 0x2)
socket$kcm(0x11, 0x2, 0x300)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
r0 = gettid()
tkill(r0, 0x21)

1.788228625s ago: executing program 9 (id=3084):
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000002000040257d15a440000104000109026000420100000009040000010209000005"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x3, 0x40, &(0x7f00000006c0)=ANY=[], 0x0)
syz_usb_ep_write(r1, 0x81, 0xffffffffffffffac, &(0x7f0000000000)="9001000000000000")
syz_usb_ep_write(r1, 0x81, 0x0, 0x0)
socket(0x2, 0x3, 0xff)
syz_usb_control_io$hid(r1, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
capset(0x0, 0x0)
ptrace$setregs(0x1a, r2, 0xc, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

1.719504026s ago: executing program 2 (id=3085):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x3, &(0x7f0000000400)=@framed, &(0x7f0000000340)='syzkaller\x00', 0x1, 0xc5, &(0x7f0000000180)=""/197, 0x0, 0x0, '\x00', 0x0, 0x2b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2802}, 0x80)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x100)
lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="020000000100030000000000040001000000010020"], 0x1c, 0x2)
socket(0x1, 0xa, 0x7ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='./file0\x00')
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000480)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x5, 0x404, 0xffffffffffffffff}, {0xffffffff, 0x0, 0x9, 0xa}]})
r1 = fsopen(&(0x7f0000000180)='ext4\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000003dc0)='\x87+\x18\x93\x13\xb9\x1a[\x9f\xd8P\xb5\xb69\xc6\xa3\xd4\x8d\xfc\xa1\xc7JF>n\x9d\xb1\xda\xb6[\xcc\x84\xcc\xdfY9\xc6%/{\re\xa1\xac\x05\xd6~\x1c1\xe6<T@\v\xbb\x99\x03%E\xfe\xc0\xe4\x10{*\xfb>)g\x0e;\x1fF-\xdf\x9f\xa0\x06;>\xf9\xfd\x84\xd2\x1f%\xe4\xfc\xe6\xe1\x8e\xdc\xda\xd8\x9b\xd4\xd9\xe6\x9c\x91j\xd8\xc2\x900*\\\xb7\xfc4\x9f\x9d\x9d\xec\x8fEc\x15\xa3\xdb\xf0\xbct\xb7[4\x04w\xe7\xd4\x8d\xb9\xfb\'\xf2\xc0\xfd\x13\x8am\x82\x81y\xf5\xf8\xa4\xc1\xb0\xdc\x13\xd0\x15\x93\x03\xd1\x83@_\a\x06\xcf\xb2\x89\xa8\x8a\xc6\x9c\xd7\xa8\x93\xd2\xefswgL\xbc\xe4\xab\x99\xd33zd\x9d\xff\fO{\xd3\x12G\xc7$\x8f^\xba0}\xa8\x1ah\xd6\x82\xcf\xe2;\x03\x82\xac\xa9n\xe1\x0e\x15h\x9f\xfe\x17\xff2\\h7,\x96\xf1\x88\x95\xf4\xde\xdb1\x17\xe77\x01\xb0\xa2\xd2\x96\xc7\xb4\xa1\xecFc\xe1-\xff\ne\xab\x83B\x83\x17\"\x90\xb2D\xa2\xd3\x1f\x82Z\xca\xc412^Q\xb0zt\xa7*\xcc1\x9dr5ir\x13i\xcd(gp\x11\x8e\x81\x1a\xabVT\x1e\\\x01\xbb\xfa\x85\xd3\x17\xd5\x90Hu\x0f\xb2\xb5\xac\xf2\x00\x87\x81\xea\xa7\xf8\x15\xc1\xf0\xc0', 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x44b, 0x1ffffff, 0xfeff, {0x7a, 0x0, 0x0, 0x0, 0x4002, 0x29408}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x3}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x1}]}}}]}, 0x44}, 0x1, 0xfeff}, 0x2000000)
fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000080), &(0x7f00000000c0)={0x0, 0xfb, 0x15, 0x6, 0x10, "814d82ab40d4604c8fe6cb93128ca32a"}, 0x15, 0x0)

1.669363028s ago: executing program 7 (id=3086):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, 0x0, 0x0)
sendmmsg$unix(r1, 0x0, 0x0, 0x0)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0)
close_range(0xffffffffffffffff, r0, 0x2)

1.257154245s ago: executing program 2 (id=3087):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
remap_file_pages(&(0x7f00003e3000/0x7000)=nil, 0x7000, 0x0, 0x4, 0x1000)
r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000180)='./file0\x00', 0x200008, &(0x7f0000000080)=ANY=[@ANYRES8=r1, @ANYRES32, @ANYRESOCT], 0x1, 0x392, &(0x7f0000001000)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x6042, 0x101)
syz_fuse_handle_req(r3, &(0x7f0000000c00)="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", 0x2000, &(0x7f000000a300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
sendfile(r3, r2, 0x0, 0xe3aa6ea)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)

1.256379705s ago: executing program 4 (id=3088):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000780)='./bus\x00', 0x41, &(0x7f0000000840)={[{@delalloc}, {@noload}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}, {@noblock_validity}, {@nogrpid}, {@mblk_io_submit}, {@dioread_lock}, {@stripe={'stripe', 0x3d, 0x65cf}}], [], 0x3d}, 0x65, 0x51c, &(0x7f0000000200)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80000, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2505000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
open_by_handle_at(r0, &(0x7f0000000040)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0)

154.423777ms ago: executing program 9 (id=3089):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r3 = socket(0x1e, 0x805, 0x0)
connect$tipc(r3, &(0x7f0000000080)=@id={0x1e, 0x3, 0x2, {0x4e24, 0x2}}, 0x10)

58.986599ms ago: executing program 4 (id=3090):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000540)=@mangle={'mangle\x00', 0x64, 0x6, 0x798, 0x550, 0x1f0, 0x408, 0x550, 0x120, 0x6c8, 0x6c8, 0x6c8, 0x6c8, 0x6c8, 0x6, 0x0, {[{{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@inet=@length={{0x28}, {0x7, 0xb0, 0x81}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@mcast2, @loopback, [0x0, 0x0, 0xff0000ff], [0x0, 0x0, 0x0, 0xff000000], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}}, 0x0, 0x1d0, 0x218, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@recent0={{0xf8}, {0x9, 0x58, 0x4, 0x1, 'syz0\x00', 0x9}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv6=@private1, 0x0, 0x38}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}, {0xfffffffc, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe]}}, @common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x1, 0x8]}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@empty}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7f8)

0s ago: executing program 3 (id=3091):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x2c)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1b, &(0x7f0000001800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000180100002020690000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0, &(0x7f0000000140)=<r6=>0x0)
syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r7=>0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = dup(r8)
syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0xfb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x6, 0x15e, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x8, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x1, 0x3, 0x0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x82, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r10=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r1, r10, 0x25, 0x0, @val=@tcx}, 0x1c)
syz_emit_ethernet(0x22, &(0x7f0000000500)={@multicast, @random="02bc00", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x2, 0x14, 0x66, 0x0, 0xfc, 0x2f, 0x0, @local, @loopback}}}}}, 0x0)
ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(0xffffffffffffffff, 0x4068aea3, 0x0)

kernel console output (not intermixed with test programs):

)
[  375.670591][   T22] asix 8-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  375.696803][   T22] asix 8-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  375.754931][   T22] asix: probe of 8-1:0.188 failed with error -71
[  375.801744][   T22] usb 8-1: USB disconnect, device number 3
[  376.993753][T10677] loop8: detected capacity change from 0 to 512
[  377.185893][T10677] EXT4-fs (loop8): orphan cleanup on readonly fs
[  377.238858][T10677] EXT4-fs error (device loop8): ext4_xattr_inode_update_ref:984: inode #11: comm syz.8.1847: EA inode 11 ref wraparound: ref_count=0 ref_change=-1
[  377.399607][T10677] EXT4-fs (loop8): Remounting filesystem read-only
[  377.465453][T10677] EXT4-fs warning (device loop8): ext4_xattr_inode_dec_ref_all:1178: inode #11: comm syz.8.1847: ea_inode dec ref err=-117
[  377.580035][T10677] EXT4-fs (loop8): 1 orphan inode deleted
[  377.617218][T10677] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  378.190862][T10687] xt_hashlimit: max too large, truncated to 1048576
[  378.233802][ T9771] EXT4-fs (loop8): unmounting filesystem.
[  378.671884][   T41] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  378.724908][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  378.732024][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  378.893846][   T41] usb 8-1: config 0 has no interfaces?
[  378.899964][   T41] usb 8-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[  378.930316][   T41] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  378.962247][   T41] usb 8-1: config 0 descriptor??
[  381.417419][   T22] usb 8-1: USB disconnect, device number 4
[  381.622652][T10767] loop7: detected capacity change from 0 to 512
[  381.792789][T10767] EXT4-fs (loop7): orphan cleanup on readonly fs
[  381.803374][T10767] EXT4-fs error (device loop7): ext4_xattr_inode_update_ref:984: inode #11: comm syz.7.1862: EA inode 11 ref wraparound: ref_count=0 ref_change=-1
[  381.824930][T10767] EXT4-fs (loop7): Remounting filesystem read-only
[  381.831567][T10767] EXT4-fs warning (device loop7): ext4_xattr_inode_dec_ref_all:1178: inode #11: comm syz.7.1862: ea_inode dec ref err=-117
[  381.914000][T10767] EXT4-fs (loop7): 1 orphan inode deleted
[  381.919848][T10767] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  382.209376][ T9341] EXT4-fs (loop7): unmounting filesystem.
[  382.723682][T10796] Bluetooth: MGMT ver 1.22
[  384.536313][T10830] device bridge1 left promiscuous mode
[  384.605702][T10830] device bond2 left promiscuous mode
[  385.153059][T10836] device syz_tun left promiscuous mode
[  385.211175][T10836] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  385.272424][T10836] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  385.349093][T10836] 8021q: adding VLAN 0 to HW filter on device team0
[  385.407138][T10836] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  385.754520][T10855] xt_hashlimit: max too large, truncated to 1048576
[  387.158396][T10879] ptrace attach of ""[10880] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[10879]
[  391.790725][T10988] binder: 10987:10988 ioctl c0306201 2000000002c0 returned -14
[  391.909869][   T26] audit: type=1326 audit(1700000584.673:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10966 comm="syz.4.1913" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f457d59e199 code=0x7fc00000
[  392.002093][   T26] audit: type=1326 audit(1700000584.673:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10966 comm="syz.4.1913" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f457d59e199 code=0x7fc00000
[  392.046201][T10992] netlink: 'syz.7.1922': attribute type 11 has an invalid length.
[  392.094009][   T26] audit: type=1326 audit(1700000584.673:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10966 comm="syz.4.1913" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f457d59e199 code=0x7fc00000
[  392.200747][   T26] audit: type=1326 audit(1700000584.673:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10966 comm="syz.4.1913" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f457d59e199 code=0x7fc00000
[  392.327888][   T22] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  392.404621][   T26] audit: type=1326 audit(1700000584.673:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10966 comm="syz.4.1913" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f457d59e199 code=0x7fc00000
[  392.429519][   T26] audit: type=1326 audit(1700000584.673:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10966 comm="syz.4.1913" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f457d59e199 code=0x7fc00000
[  392.476501][   T26] audit: type=1326 audit(1700000584.673:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10966 comm="syz.4.1913" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f457d59e199 code=0x7fc00000
[  392.542771][   T22] usb 9-1: Using ep0 maxpacket: 32
[  392.578832][   T22] usb 9-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[  392.606494][   T22] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  392.792002][   T22] usb 9-1: config 0 descriptor??
[  392.862736][   T22] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  393.265817][T10997] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1924'.
[  393.291749][   T26] audit: type=1326 audit(1700000584.673:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10966 comm="syz.4.1913" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f457d59e199 code=0x7fc00000
[  393.370589][   T26] audit: type=1326 audit(1700000584.673:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10966 comm="syz.4.1913" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f457d59e199 code=0x7fc00000
[  393.410682][   T26] audit: type=1326 audit(1700000584.673:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10966 comm="syz.4.1913" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f457d59e199 code=0x7fc00000
[  394.708559][T11015] overlayfs: failed to clone upperpath
[  394.790026][   T22] gspca_vc032x: I2c Bus Busy Wait 00
[  395.040024][T11024] binder: 11023:11024 ioctl c0306201 200000000080 returned -14
[  395.192602][   T22] gspca_vc032x: reg_w err -71
[  395.197537][   T22] gspca_vc032x: I2c Bus Busy Wait 00
[  395.230771][   T22] gspca_vc032x: I2c Bus Busy Wait 00
[  395.256468][   T22] gspca_vc032x: I2c Bus Busy Wait 00
[  395.267639][   T22] gspca_vc032x: I2c Bus Busy Wait 00
[  395.279067][   T22] gspca_vc032x: I2c Bus Busy Wait 00
[  395.316593][   T22] gspca_vc032x: I2c Bus Busy Wait 00
[  395.336909][   T22] gspca_vc032x: I2c Bus Busy Wait 00
[  395.358797][   T22] gspca_vc032x: I2c Bus Busy Wait 00
[  395.375631][   T22] gspca_vc032x: I2c Bus Busy Wait 00
[  395.394072][   T22] gspca_vc032x: I2c Bus Busy Wait 00
[  395.411932][   T22] gspca_vc032x: I2c Bus Busy Wait 00
[  395.428584][   T22] gspca_vc032x: I2c Bus Busy Wait 00
[  395.447539][   T22] gspca_vc032x: I2c Bus Busy Wait 00
[  395.466698][   T22] gspca_vc032x: I2c Bus Busy Wait 00
[  395.486136][   T22] gspca_vc032x: I2c Bus Busy Wait 00
[  395.504850][   T22] gspca_vc032x: I2c Bus Busy Wait 00
[  395.537938][   T22] gspca_vc032x: I2c Bus Busy Wait 00
[  395.554828][   T22] gspca_vc032x: Unknown sensor...
[  395.567964][   T22] vc032x: probe of 9-1:0.0 failed with error -22
[  395.610170][   T22] usb 9-1: USB disconnect, device number 2
[  395.897230][T11039] IPVS: rr: UDP 172.20.20.11:20001 - no destination available
[  397.478884][T11056] loop8: detected capacity change from 0 to 1024
[  397.681153][T11060] batman_adv: batadv0: Adding interface: dummy0
[  397.717251][T11060] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  397.745648][T11060] batman_adv: batadv0: Interface activated: dummy0
[  397.772763][T11056] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  397.817761][T11065] batadv0: mtu less than device minimum
[  397.830899][T11065] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  397.844620][T11065] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  397.857398][T11065] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  397.870162][T11065] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  397.883045][T11065] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  397.895805][T11065] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  397.908846][T11065] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  397.920473][T11068] overlayfs: failed to clone upperpath
[  397.921566][T11065] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  398.856253][T11076] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1951'.
[  399.068464][ T9771] EXT4-fs (loop8): unmounting filesystem.
[  399.247313][T11089] loop8: detected capacity change from 0 to 512
[  399.282990][T11089] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  399.322008][T11089] EXT4-fs warning (device loop8): ext4_multi_mount_protect:298: Invalid MMP block in superblock
[  399.425486][T11093] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1956'.
[  399.647447][ T4287] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11
[  399.681201][T11102] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1962'.
[  400.313962][T11125] loop8: detected capacity change from 0 to 512
[  400.340627][T11125] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  400.370403][T11125] System zones: 1-12
[  400.377733][T11125] EXT4-fs error (device loop8): ext4_xattr_inode_iget:401: inode #12: comm syz.8.1970: missing EA_INODE flag
[  400.404514][T11125] EXT4-fs error (device loop8): ext4_xattr_inode_iget:406: comm syz.8.1970: error while reading EA inode 12 err=-117
[  400.532333][T11125] EXT4-fs (loop8): 1 orphan inode deleted
[  400.538383][T11125] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  402.516653][T11147] overlayfs: failed to clone upperpath
[  403.705935][T11126] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  403.715881][T11126] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  403.725486][T11126] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  403.735136][T11126] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  404.010652][ T9771] EXT4-fs (loop8): unmounting filesystem.
[  404.202613][T11170] trusted_key: encrypted_key: insufficient parameters specified
[  408.805278][T11216] bridge0: port 2(bridge_slave_1) entered disabled state
[  408.812819][T11216] bridge0: port 1(bridge_slave_0) entered disabled state
[  409.690319][T11216] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  409.752382][T11216] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  410.302803][T11216] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  410.311937][T11216] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  410.321541][T11216] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  410.331150][T11216] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  410.942522][T11285] futex_wake_op: syz.8.2013 tries to shift op by 144; fix this program
[  411.023204][    C1] vcan0: j1939_tp_rxtimer: 0xffff888053cc1800: rx timeout, send abort
[  411.523311][    C1] vcan0: j1939_tp_rxtimer: 0xffff888053cc0c00: rx timeout, send abort
[  411.533946][    C1] vcan0: j1939_tp_rxtimer: 0xffff888053cc1800: abort rx timeout. Force session deactivation
[  411.916876][T11302] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2021'.
[  412.031689][    C1] vcan0: j1939_tp_rxtimer: 0xffff888053cc0c00: abort rx timeout. Force session deactivation
[  412.892439][T11316] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2023'.
[  412.951124][T11316] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  412.960520][T11316] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  412.969798][T11316] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  412.978611][T11316] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  413.033504][T11316] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2023'.
[  413.129464][T11327] tipc: Failed to remove unknown binding: 66,0,0/0:2457229306/2457229308
[  413.138363][T11327] tipc: Failed to remove unknown binding: 66,0,0/0:2457229306/2457229307
[  413.154007][T11327] tipc: Failed to remove unknown binding: 66,0,0/0:2457229306/2457229308
[  413.163793][T11327] tipc: Failed to remove unknown binding: 66,0,0/0:2457229306/2457229307
[  413.183018][T11328] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2027'.
[  414.542751][T11346] tipc: Failed to remove unknown binding: 66,0,0/0:3415054769/3415054771
[  414.551285][T11346] tipc: Failed to remove unknown binding: 66,0,0/0:3415054769/3415054770
[  414.662271][T11351] tipc: Failed to remove unknown binding: 66,0,0/0:3415054769/3415054771
[  414.670806][T11351] tipc: Failed to remove unknown binding: 66,0,0/0:3415054769/3415054770
[  414.761506][T11353] loop8: detected capacity change from 0 to 256
[  414.798737][T11353] exFAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  414.850359][T11353] exFAT-fs (loop8): Medium has reported failures. Some data may be lost.
[  414.890772][T11353] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  414.935516][T11353] exFAT-fs (loop8): failed to load alloc-bitmap
[  414.944947][T11359] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  414.962978][T11353] exFAT-fs (loop8): failed to recognize exfat type
[  415.293201][T11367] netlink: 'syz.0.2041': attribute type 10 has an invalid length.
[  415.838486][T11375] loop8: detected capacity change from 0 to 2048
[  417.055916][T11391] netlink: 'syz.7.2049': attribute type 46 has an invalid length.
[  417.067390][T11391] Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored.
[  417.586421][T11405] loop7: detected capacity change from 0 to 65
[  417.645379][T11405] BFS-fs: bfs_fill_super(): NOTE: filesystem loop7 was created with 512 inodes, the real maximum is 511, mounting anyway
[  417.807437][   T26] kauditd_printk_skb: 57 callbacks suppressed
[  417.807455][   T26] audit: type=1326 audit(1700000610.573:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11404 comm="syz.7.2055" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e53b9e199 code=0x7ffc0000
[  417.916964][   T26] audit: type=1326 audit(1700000610.573:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11404 comm="syz.7.2055" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e53b9e199 code=0x7ffc0000
[  417.992745][   T26] audit: type=1326 audit(1700000610.573:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11404 comm="syz.7.2055" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e53b9e199 code=0x7ffc0000
[  418.018692][   T26] audit: type=1326 audit(1700000610.573:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11404 comm="syz.7.2055" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e53b9e199 code=0x7ffc0000
[  418.092012][   T26] audit: type=1326 audit(1700000610.593:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11404 comm="syz.7.2055" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f4e53b9e199 code=0x7ffc0000
[  418.176583][   T26] audit: type=1326 audit(1700000610.593:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11404 comm="syz.7.2055" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e53b9e199 code=0x7ffc0000
[  418.313380][T11429] netlink: 1355 bytes leftover after parsing attributes in process `syz.0.2061'.
[  418.389504][   T26] audit: type=1326 audit(1700000610.613:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11404 comm="syz.7.2055" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e53b9e199 code=0x7ffc0000
[  418.419417][   T26] audit: type=1326 audit(1700000610.613:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11404 comm="syz.7.2055" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e53b9e199 code=0x7ffc0000
[  418.497944][T11433] loop8: detected capacity change from 0 to 1024
[  418.540715][   T26] audit: type=1326 audit(1700000610.613:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11404 comm="syz.7.2055" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f4e53b9e199 code=0x7ffc0000
[  419.412460][   T26] audit: type=1326 audit(1700000610.613:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11404 comm="syz.7.2055" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e53b9e199 code=0x7ffc0000
[  420.828327][T11478] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  422.093789][T11491] futex_wake_op: syz.0.2078 tries to shift op by 144; fix this program
[  422.771101][T11519] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2089'.
[  424.574098][T11554] device lo entered promiscuous mode
[  424.579620][T11554] device tunl0 entered promiscuous mode
[  424.617681][T11554] device gre0 entered promiscuous mode
[  424.637286][T11554] device erspan0 entered promiscuous mode
[  424.662836][T11554] device ip_vti0 entered promiscuous mode
[  424.672530][T11554] device ip6_vti0 entered promiscuous mode
[  424.681238][T11554] device sit0 entered promiscuous mode
[  424.702780][T11554] device ip6tnl0 entered promiscuous mode
[  424.723381][T11554] device ip6gre0 entered promiscuous mode
[  424.744528][T11554] device syz_tun entered promiscuous mode
[  424.763170][T11554] device ip6gretap0 entered promiscuous mode
[  424.779264][T11554] device vcan0 entered promiscuous mode
[  424.810660][T11554] device bond0 entered promiscuous mode
[  424.835193][T11554] device team0 entered promiscuous mode
[  424.864451][T11554] batman_adv: batadv0: Interface deactivated: dummy0
[  424.906011][T11554] device dummy0 entered promiscuous mode
[  424.935984][T11554] device nlmon0 entered promiscuous mode
[  424.967024][T11554] device caif0 entered promiscuous mode
[  424.985614][T11554] device batadv0 entered promiscuous mode
[  425.003479][T11554] device vxcan0 entered promiscuous mode
[  425.027081][T11554] device vxcan1 entered promiscuous mode
[  425.062133][T11554] device veth0 entered promiscuous mode
[  425.085897][T11554] device veth1 entered promiscuous mode
[  425.099769][T11554] device wg0 entered promiscuous mode
[  425.120645][T11554] device wg1 entered promiscuous mode
[  425.131033][T11554] device veth0_to_bridge entered promiscuous mode
[  425.146538][T11554] device bridge_slave_0 entered promiscuous mode
[  425.158180][T11554] device veth1_to_bridge entered promiscuous mode
[  425.169715][T11554] device bridge_slave_1 entered promiscuous mode
[  425.181583][T11554] device veth0_to_bond entered promiscuous mode
[  425.197148][T11554] device bond_slave_0 entered promiscuous mode
[  425.215118][T11554] device veth1_to_bond entered promiscuous mode
[  425.233493][T11554] device bond_slave_1 entered promiscuous mode
[  425.249367][T11554] device veth0_to_team entered promiscuous mode
[  425.265272][T11554] device team_slave_0 entered promiscuous mode
[  425.265410][T11570] loop8: detected capacity change from 0 to 512
[  425.281206][T11554] device veth1_to_team entered promiscuous mode
[  425.312977][T11554] device team_slave_1 entered promiscuous mode
[  425.337003][T11554] device veth0_to_batadv entered promiscuous mode
[  425.353837][T11554] device batadv_slave_0 entered promiscuous mode
[  425.391989][T11570] EXT4-fs (loop8): 1 truncate cleaned up
[  425.399663][T11570] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  425.447841][T11554] device xfrm0 entered promiscuous mode
[  425.453920][T11554] device veth0_to_hsr entered promiscuous mode
[  425.460444][T11554] device veth1_to_hsr entered promiscuous mode
[  425.472213][T11554] device hsr0 entered promiscuous mode
[  425.482779][T11554] device veth1_virt_wifi entered promiscuous mode
[  425.501107][T11554] device veth0_virt_wifi entered promiscuous mode
[  425.509500][T11554] device virt_wifi0 entered promiscuous mode
[  425.532202][T11554] device vlan0 entered promiscuous mode
[  425.548338][T11554] device vlan1 entered promiscuous mode
[  425.555199][T11554] device macvlan0 entered promiscuous mode
[  425.561255][T11554] device macvlan1 entered promiscuous mode
[  425.567862][T11554] device ipvlan0 entered promiscuous mode
[  425.602985][ T9771] EXT4-fs (loop8): unmounting filesystem.
[  425.610723][T11554] device ipvlan1 entered promiscuous mode
[  425.621238][T11554] device macvtap0 entered promiscuous mode
[  425.628304][T11554] device macsec0 entered promiscuous mode
[  425.640657][T11554] device geneve0 entered promiscuous mode
[  425.646917][T11554] device geneve1 entered promiscuous mode
[  425.668793][T11554] device netdevsim0 entered promiscuous mode
[  425.675361][T11554] device netdevsim1 entered promiscuous mode
[  425.690025][T11554] device netdevsim2 entered promiscuous mode
[  425.696978][T11554] device netdevsim3 entered promiscuous mode
[  425.707530][T11554] device wlan0 entered promiscuous mode
[  425.721125][T11554] device wlan1 entered promiscuous mode
[  425.731510][T11554] device ipip0 entered promiscuous mode
[  425.737835][T11554] device macvlan2 entered promiscuous mode
[  425.744417][T11554] device bond1 entered promiscuous mode
[  425.750211][T11554] device bridge1 entered promiscuous mode
[  425.756666][T11554] device bond2 entered promiscuous mode
[  425.763856][T11554] device bond3 entered promiscuous mode
[  425.769730][T11554] device bond4 entered promiscuous mode
[  425.775450][T11554] device gretap1 entered promiscuous mode
[  425.781858][T11554] device batadv0.5 entered promiscuous mode
[  425.788130][T11554] device bridge0 entered promiscuous mode
[  425.801832][T11554] device veth2 entered promiscuous mode
[  425.807603][T11554] device veth3 entered promiscuous mode
[  425.819144][T11564] netlink: 'syz.7.2104': attribute type 10 has an invalid length.
[  425.834637][T11581] netlink: 'syz.4.2112': attribute type 8 has an invalid length.
[  426.169698][T11598] loop7: detected capacity change from 0 to 1024
[  426.215993][T11598] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  426.265026][T11598] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  427.714315][ T9341] EXT4-fs (loop7): unmounting filesystem.
[  427.989647][T11622] loop7: detected capacity change from 0 to 4096
[  428.159151][T11622] NILFS (loop7): invalid segment: Checksum error in segment payload
[  428.258969][T11622] NILFS (loop7): trying rollback from an earlier position
[  428.362224][T11622] NILFS (loop7): recovery complete
[  428.425837][T11625] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  430.211134][T11661] netlink: 'syz.0.2136': attribute type 1 has an invalid length.
[  430.269966][T11661] 8021q: adding VLAN 0 to HW filter on device bond5
[  430.278454][T11665] netlink: 'syz.8.2137': attribute type 1 has an invalid length.
[  430.330200][T11665] 8021q: adding VLAN 0 to HW filter on device bond1
[  430.387714][T11669] 8021q: adding VLAN 0 to HW filter on device batadv1
[  430.410283][T11669] bond1: (slave batadv1): making interface the new active one
[  430.419997][T11669] bond1: (slave batadv1): Enslaving as an active interface with an up link
[  430.429093][T11661] device syz_tun left promiscuous mode
[  430.440776][T11661] bond5: (slave syz_tun): Enslaving as a backup interface with an up link
[  430.450591][ T5740] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  430.451485][T11670] loop7: detected capacity change from 0 to 1024
[  430.751095][   T26] kauditd_printk_skb: 54 callbacks suppressed
[  430.751116][   T26] audit: type=1800 audit(1700000623.503:276): pid=11649 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2131" name="file2" dev="loop7" ino=5 res=0 errno=0
[  431.182721][T11665] bond1 (unregistering): (slave batadv1): Releasing active interface
[  431.247703][T11665] bond1 (unregistering): Released all slaves
[  431.340815][T11685] futex_wake_op: syz.2.2143 tries to shift op by 144; fix this program
[  431.354809][ T5730] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready
[  431.657425][T11697] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2147'.
[  433.907219][T11748] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  434.744498][T11757] overlayfs: failed to clone upperpath
[  434.748658][T11759] futex_wake_op: syz.4.2164 tries to shift op by 144; fix this program
[  434.858673][T11762] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2166'.
[  434.881912][T11762] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2166'.
[  434.891296][T11762] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2166'.
[  434.934747][T11762] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2166'.
[  435.356016][T11776] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2171'.
[  435.390075][T11777] loop7: detected capacity change from 0 to 1024
[  435.462303][T11776] device ip6erspan0 entered promiscuous mode
[  435.481696][T11777] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  435.502845][T11778] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2171'.
[  435.642647][T11784] netlink: 'syz.8.2174': attribute type 1 has an invalid length.
[  435.699210][ T9341] EXT4-fs (loop7): unmounting filesystem.
[  435.825181][T11784] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2174'.
[  435.882534][T11775] net_ratelimit: 11 callbacks suppressed
[  435.882551][T11775] ip_tables: iptables: counters copy to user failed while replacing table
[  435.898160][T11784] bond1: (slave bridge1): making interface the new active one
[  435.934075][T11784] bond1: (slave bridge1): Enslaving as an active interface with an up link
[  436.153603][T11796] loop7: detected capacity change from 0 to 512
[  436.218583][T11798] loop8: detected capacity change from 0 to 512
[  436.219451][T11796] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended
[  436.291909][T11796] EXT4-fs (loop7): couldn't mount as ext2 due to feature incompatibilities
[  436.320505][T11798] EXT4-fs error (device loop8): ext4_quota_enable:7045: comm syz.8.2180: Bad quota inum: 1, type: 2
[  436.391755][T11798] EXT4-fs warning (device loop8): ext4_enable_quotas:7093: Failed to enable quota tracking (type=2, err=-117, ino=1). Please run e2fsck to fix.
[  436.484021][T11798] EXT4-fs (loop8): mount failed
[  437.121857][ T4288] Bluetooth: hci2: command 0x0406 tx timeout
[  439.013867][T11844] loop7: detected capacity change from 0 to 512
[  439.107539][T11844] EXT4-fs (loop7): Test dummy encryption mode enabled
[  439.134969][T11844] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended
[  439.202954][T11844] EXT4-fs (loop7): Errors on filesystem, clearing orphan list.
[  439.225012][T11844] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  439.742878][T11848] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[  439.774537][ T9341] EXT4-fs error (device loop7): htree_dirblock_to_tree:1083: inode #2: comm syz-executor: Directory hole found for htree leaf block 0
[  440.049867][ T9341] EXT4-fs (loop7): unmounting filesystem.
[  440.235927][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  440.246825][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  440.612119][T11868] device dummy0 left promiscuous mode
[  440.642383][T11868] batman_adv: batadv0: Adding interface: dummy0
[  440.668211][T11868] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  440.752700][T11868] batman_adv: batadv0: Interface activated: dummy0
[  440.792476][T11869] batadv0: mtu less than device minimum
[  440.827214][T11869] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  440.839920][T11869] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  440.852715][T11869] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  440.865674][T11869] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  440.878855][T11869] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  440.891957][T11869] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  440.905243][T11869] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  440.918399][T11869] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  440.931452][T11869] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  440.944994][T11869] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  440.958226][T11869] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  440.970989][T11869] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  440.983772][T11869] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  440.996985][T11869] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  441.009650][T11869] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  442.327135][T11889] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2206'.
[  442.991031][T11901] loop8: detected capacity change from 0 to 512
[  443.076365][T11901] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  443.102614][T11901] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  443.440622][T11912] loop7: detected capacity change from 0 to 128
[  443.510049][T11910] 9pnet: p9_errstr2errno: server reported unknown error Àñ'IÓ$íÛ·=¼
[  443.522878][ T9771] EXT4-fs (loop8): unmounting filesystem.
[  443.903954][T11923] loop8: detected capacity change from 0 to 256
[  443.989196][T11923] exFAT-fs (loop8): failed to load upcase table (idx : 0x0001fe89, chksum : 0xcf07e9af, utbl_chksum : 0xe619d30d)
[  444.598673][T11939] loop7: detected capacity change from 0 to 1024
[  444.629528][T11941] netlink: 'syz.2.2224': attribute type 10 has an invalid length.
[  444.665442][T11939] EXT4-fs: Mount option(s) incompatible with ext3
[  444.731932][T11941] device syz_tun entered promiscuous mode
[  444.876676][T11941] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  445.211741][ T4317] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  445.415300][ T4317] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  445.425140][ T4317] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  445.433428][ T4317] usb 8-1: Product: syz
[  445.437770][ T4317] usb 8-1: Manufacturer: syz
[  445.442621][ T4317] usb 8-1: SerialNumber: syz
[  445.481536][ T4314] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  445.688172][T11960] VFS: Mount too revealing
[  445.970934][ T4317] usb 8-1: USB disconnect, device number 5
[  446.457512][T11971] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2245'.
[  446.501040][T11971] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  446.601856][T11971] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  446.623879][T11971] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  446.657543][T11971] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  446.742046][T11971] device geneve2 entered promiscuous mode
[  447.656524][ T4314] usb 8-1: Service connection timeout for: 256
[  447.731327][T11981] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2235'.
[  447.767912][ T4314] ath9k_htc 8-1:1.0: ath9k_htc: Unable to initialize HTC services
[  447.777945][ T4314] ath9k_htc: Failed to initialize the device
[  447.784328][ T4317] usb 8-1: ath9k_htc: USB layer deinitialized
[  447.891017][T11984] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2236'.
[  447.892207][T11985] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2237'.
[  449.456877][T12020] binder: 12016:12020 ioctl c0306201 2000000002c0 returned -14
[  455.393277][T12038] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2259'.
[  455.410256][T12078] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2272'.
[  455.590886][T12080] device erspan0 left promiscuous mode
[  455.891530][T12095] netlink: 'syz.4.2278': attribute type 1 has an invalid length.
[  455.955700][T12095] 8021q: adding VLAN 0 to HW filter on device bond3
[  456.096875][T12101] 8021q: adding VLAN 0 to HW filter on device batadv1
[  456.144748][T12101] bond3: (slave batadv1): making interface the new active one
[  456.168874][T12101] bond3: (slave batadv1): Enslaving as an active interface with an up link
[  457.175369][T12104] bond3 (unregistering): (slave batadv1): Releasing active interface
[  457.204855][T12104] bond3 (unregistering): Released all slaves
[  458.338711][T12130] ecryptfs_parse_options: eCryptfs: unrecognized option [ecryptfs_enable_filename_crypto=n]
[  458.351706][T12130] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README
[  458.382182][T12130] Error parsing options; rc = [-22]
[  459.636752][T12153] loop7: detected capacity change from 0 to 512
[  459.661545][T12153] EXT4-fs: inline encryption not supported
[  459.681004][T12153] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  459.730563][T12153] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2
[  459.773856][T12153] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.2297: invalid indirect mapped block 2683928664 (level 1)
[  459.911434][T12153] EXT4-fs (loop7): 1 truncate cleaned up
[  459.924488][T12153] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  460.070412][T12162] netlink: 'syz.2.2300': attribute type 10 has an invalid length.
[  460.096780][T12162] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  460.626190][ T9341] EXT4-fs (loop7): unmounting filesystem.
[  460.828649][T12178] loop7: detected capacity change from 0 to 512
[  460.887743][T12178] EXT4-fs error (device loop7): ext4_orphan_get:1409: inode #15: comm syz.7.2305: inode has both inline data and extents flags
[  460.901801][ T4317] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  460.920898][T12178] EXT4-fs error (device loop7): ext4_orphan_get:1414: comm syz.7.2305: couldn't read orphan inode 15 (err -117)
[  460.933935][T12178] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  460.998856][T12178] EXT4-fs warning (device loop7): ext4_expand_extra_isize_ea:2805: Unable to expand inode 2. Delete some EAs or run e2fsck.
[  461.051250][ T9341] EXT4-fs (loop7): unmounting filesystem.
[  461.103840][ T4317] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  461.135664][ T4317] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  461.171311][ T4317] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0
[  461.203159][ T4317] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  461.252764][ T4317] usb 9-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00
[  461.272028][ T4317] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  461.280518][ T4317] usb 9-1: Product: syz
[  461.301852][ T4317] usb 9-1: Manufacturer: syz
[  461.313435][ T4317] usb 9-1: SerialNumber: syz
[  461.347727][T12200] net_ratelimit: 4 callbacks suppressed
[  461.347744][T12200] ip_tables: iptables: counters copy to user failed while replacing table
[  461.367796][ T4317] usbserial_generic 9-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes.
[  461.404055][ T4317] usbserial_generic 9-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver.
[  461.440336][ T4317] usbserial_generic 9-1:1.0: generic converter detected
[  461.479992][ T4317] usb 9-1: generic converter now attached to ttyUSB0
[  461.613956][T12209] netlink: 'syz.0.2311': attribute type 1 has an invalid length.
[  461.706772][T12209] device bond7 entered promiscuous mode
[  461.713232][T12209] 8021q: adding VLAN 0 to HW filter on device bond7
[  461.725749][T12214] bond7: (slave erspan1): making interface the new active one
[  461.870595][T12214] device erspan1 entered promiscuous mode
[  461.879881][T12214] bond7: (slave erspan1): Enslaving as an active interface with an up link
[  461.913125][ T7047] IPv6: ADDRCONF(NETDEV_CHANGE): bond7: link becomes ready
[  462.265550][T12226] mmap: syz.7.2315 (12226) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  462.507626][ T4316] usb 9-1: USB disconnect, device number 3
[  462.527733][T12231] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2317'.
[  462.552740][ T4316] generic ttyUSB0: generic converter now disconnected from ttyUSB0
[  462.831682][ T4287] Bluetooth: hci4: command 0x0406 tx timeout
[  462.838895][ T4316] usbserial_generic 9-1:1.0: device disconnected
[  464.001863][ T4287] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  464.010962][ T4287] Bluetooth: hci2: Injecting HCI hardware error event
[  464.022966][ T4288] Bluetooth: hci2: hardware error 0x00
[  465.069643][   T26] audit: type=1800 audit(1700000657.833:277): pid=12256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2325" name="file0" dev="fuse" ino=0 res=0 errno=0
[  466.172045][ T4288] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  467.532504][T12284] loop7: detected capacity change from 0 to 2048
[  467.606812][T12284] UDF-fs: error (device loop7): udf_process_sequence: Primary Volume Descriptor not found!
[  467.664600][T12284] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  467.936940][T12288] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  467.944350][T12290] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2334'.
[  468.791967][T12300] netlink: 'syz.7.2339': attribute type 1 has an invalid length.
[  468.966251][T12300] device bond2 entered promiscuous mode
[  469.022217][T12300] 8021q: adding VLAN 0 to HW filter on device bond2
[  469.216550][T12302] bond2: (slave erspan1): making interface the new active one
[  469.275072][T12302] device erspan1 entered promiscuous mode
[  469.323478][T12302] bond2: (slave erspan1): Enslaving as an active interface with an up link
[  469.371893][ T5740] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready
[  469.711032][T12310] loop8: detected capacity change from 0 to 512
[  469.767930][T12310] EXT4-fs: inline encryption not supported
[  469.833031][T12310] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  469.881837][T12310] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended
[  469.994548][T12310] EXT4-fs warning (device loop8): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  470.056906][T12317] loop7: detected capacity change from 0 to 1024
[  470.076373][T12310] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.2341: bg 0: block 248: padding at end of block bitmap is not set
[  470.124563][T12317] EXT4-fs (loop7): revision level too high, forcing read-only mode
[  470.134243][T12317] EXT4-fs (loop7): orphan cleanup on readonly fs
[  470.141209][T12310] Quota error (device loop8): write_blk: dquota write failed
[  470.152792][T12317] EXT4-fs error (device loop7): ext4_free_blocks:6220: comm syz.7.2343: Freeing blocks not in datazone - block = 0, count = 4096
[  470.169061][T12310] Quota error (device loop8): qtree_write_dquot: Error -28 occurred while creating quota
[  470.177729][T12317] EXT4-fs (loop7): 1 orphan inode deleted
[  470.179853][T12310] EXT4-fs error (device loop8): ext4_acquire_dquot:6841: comm syz.8.2341: Failed to acquire dquot type 1
[  470.214611][T12310] EXT4-fs (loop8): 1 truncate cleaned up
[  470.220527][T12310] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  470.221741][T12317] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  470.415220][T12310] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2341'.
[  470.416178][ T9341] EXT4-fs (loop7): unmounting filesystem.
[  470.636479][ T9771] EXT4-fs (loop8): unmounting filesystem.
[  470.657437][ T7099] Quota error (device loop8): do_check_range: Getting block 0 out of range 1-5
[  470.684106][ T7099] EXT4-fs error (device loop8): ext4_release_dquot:6877: comm kworker/u4:76: Failed to release dquot type 1
[  472.377650][T12352] bond0: (slave bond_slave_0): Releasing backup interface
[  472.571743][ T4314] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  472.751943][ T4314] usb 8-1: Using ep0 maxpacket: 16
[  472.760257][ T4314] usb 8-1: config 0 interface 0 has no altsetting 0
[  472.790349][ T4314] usb 8-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00
[  472.797632][T12358] loop8: detected capacity change from 0 to 512
[  472.835534][ T4314] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  472.868439][T12358] EXT4-fs: inline encryption not supported
[  472.898681][T12358] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  472.904641][ T4314] usb 8-1: config 0 descriptor??
[  472.983925][T12358] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2
[  473.028661][T12358] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.2354: invalid indirect mapped block 2683928664 (level 1)
[  473.074501][T12358] EXT4-fs (loop8): 1 truncate cleaned up
[  473.080249][T12358] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  473.304971][   T26] audit: type=1326 audit(1700000666.073:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12368 comm="syz.2.2359" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4583b9e199 code=0x7fc00000
[  473.335833][ T4314] pantherlord 0003:0810:0002.0007: unknown main item tag 0x1
[  473.344853][ T4314] pantherlord 0003:0810:0002.0007: unknown main item tag 0x0
[  473.355197][ T4314] pantherlord 0003:0810:0002.0007: unknown main item tag 0x0
[  473.364336][   T26] audit: type=1326 audit(1700000666.073:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12368 comm="syz.2.2359" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f4583b9e199 code=0x7fc00000
[  473.389804][ T4314] pantherlord 0003:0810:0002.0007: unknown main item tag 0x0
[  473.398480][ T4314] pantherlord 0003:0810:0002.0007: unknown main item tag 0x0
[  473.407026][ T4314] pantherlord 0003:0810:0002.0007: unknown main item tag 0x3
[  473.415124][   T26] audit: type=1326 audit(1700000666.073:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12368 comm="syz.2.2359" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4583b9e199 code=0x7fc00000
[  473.455026][ T4314] pantherlord 0003:0810:0002.0007: hidraw0: USB HID v0.81 Device [HID 0810:0002] on usb-dummy_hcd.7-1/input0
[  473.478575][ T4314] pantherlord 0003:0810:0002.0007: Force feedback for PantherLord/GreenAsia devices by Anssi Hannula <anssi.hannula@gmail.com>
[  473.501806][   T26] audit: type=1326 audit(1700000666.073:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12368 comm="syz.2.2359" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4583b9e199 code=0x7fc00000
[  473.565886][ T4314] usb 8-1: USB disconnect, device number 6
[  473.575339][   T26] audit: type=1326 audit(1700000666.073:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12368 comm="syz.2.2359" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4583b9e199 code=0x7fc00000
[  473.656230][   T26] audit: type=1326 audit(1700000666.073:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12368 comm="syz.2.2359" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4583b9e199 code=0x7fc00000
[  473.751873][   T26] audit: type=1326 audit(1700000666.073:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12368 comm="syz.2.2359" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4583b9e199 code=0x7fc00000
[  473.782428][ T9771] EXT4-fs (loop8): unmounting filesystem.
[  473.817482][T12380] fido_id[12380]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory
[  474.315237][T12391] binder: 12390:12391 ioctl c0306201 2000000002c0 returned -14
[  476.402059][ T4287] Bluetooth: hci4: command 0x0409 tx timeout
[  477.212023][ T4287] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  477.221168][ T4287] Bluetooth: hci4: Injecting HCI hardware error event
[  477.248461][ T4288] Bluetooth: hci4: hardware error 0x00
[  477.494049][ T5742] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  479.452106][ T4288] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  479.494895][T12504] loop8: detected capacity change from 0 to 8
[  479.557880][T12236] udevd[12236]: symlink '../../loop8' '/dev/disk/by-diskseq/260.tmp-b7:8' failed: Read-only file system
[  479.672608][T12504] SQUASHFS error: Failed to read block 0x636: -5
[  479.707209][T12504] SQUASHFS error: Unable to read metadata cache entry [634]
[  480.152071][T12520] netlink: 'syz.2.2402': attribute type 1 has an invalid length.
[  480.328709][T12526] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2402'.
[  480.343173][T12526] 8021q: adding VLAN 0 to HW filter on device bond7
[  480.359638][T12236] udevd[12236]: symlink '../../loop8' '/dev/disk/by-diskseq/260.tmp-b7:8' failed: Read-only file system
[  480.459856][T12236] udevd[12236]: symlink '../../loop8' '/dev/disk/by-diskseq/260.tmp-b7:8' failed: Read-only file system
[  482.497372][T12579] device veth1_to_bond entered promiscuous mode
[  482.542999][T12579] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2417'.
[  482.693771][T12579] device veth1_to_bond left promiscuous mode
[  482.934920][T12579] bond0: (slave bond_slave_1): Releasing backup interface
[  485.026668][T12615] netem: change failed
[  489.020102][T12685] batman_adv: batadv0: Removing interface: dummy0
[  489.085957][T12685] bridge0: port 1(dummy0) entered blocking state
[  489.141854][T12685] bridge0: port 1(dummy0) entered disabled state
[  491.275174][T12727] netlink: 'syz.4.2462': attribute type 1 has an invalid length.
[  491.438201][T12731] device veth0_to_bond left promiscuous mode
[  491.480937][T12735] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2465'.
[  491.556185][T12731] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  491.596192][T12735] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2465'.
[  491.616543][T12735] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2465'.
[  491.674032][T12727] device macvlan2 entered promiscuous mode
[  491.710307][T12727] device bond3 entered promiscuous mode
[  491.744700][T12727] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  491.786160][T12727] device bond3 left promiscuous mode
[  492.304308][T12737] device syzkaller0 entered promiscuous mode
[  492.892749][T12755] netlink: 27 bytes leftover after parsing attributes in process `syz.0.2480'.
[  495.452958][   T26] kauditd_printk_skb: 2 callbacks suppressed
[  495.453001][   T26] audit: type=1804 audit(1700000688.213:287): pid=12779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.2476" name="bus" dev="ramfs" ino=62513 res=1 errno=0
[  495.564651][   T26] audit: type=1804 audit(1700000688.333:288): pid=12782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.2476" name="bus" dev="ramfs" ino=62513 res=1 errno=0
[  495.585783][T12781] 8021q: adding VLAN 0 to HW filter on device bond3
[  495.687489][T12781] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  495.752602][T12781] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  495.779989][T12781] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  495.819669][T12781] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  495.874395][T12781] bond3: (slave geneve2): making interface the new active one
[  495.904414][T12781] bond3: (slave geneve2): Enslaving as an active interface with an up link
[  495.936418][ T7101] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready
[  499.124964][   T26] audit: type=1326 audit(1700000691.893:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12808 comm="syz.8.2483" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7f8dfaf97f17 code=0x0
[  499.273287][T12819] capability: warning: `syz.4.2486' uses 32-bit capabilities (legacy support in use)
[  501.393016][   T26] audit: type=1326 audit(1700000694.163:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12866 comm="syz.8.2497" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dfaf9e199 code=0x7ffc0000
[  501.478371][   T26] audit: type=1326 audit(1700000694.163:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12866 comm="syz.8.2497" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dfaf9e199 code=0x7ffc0000
[  501.582479][   T26] audit: type=1326 audit(1700000694.163:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12866 comm="syz.8.2497" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dfaf9e199 code=0x7ffc0000
[  501.604924][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  501.613308][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  501.668074][   T26] audit: type=1326 audit(1700000694.163:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12866 comm="syz.8.2497" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dfaf9e199 code=0x7ffc0000
[  501.771960][   T26] audit: type=1326 audit(1700000694.163:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12866 comm="syz.8.2497" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7f8dfaf9e199 code=0x7ffc0000
[  501.841913][   T26] audit: type=1326 audit(1700000694.163:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12866 comm="syz.8.2497" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dfaf9e199 code=0x7ffc0000
[  501.928532][   T26] audit: type=1326 audit(1700000694.163:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12866 comm="syz.8.2497" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dfaf9e199 code=0x7ffc0000
[  502.004467][   T26] audit: type=1326 audit(1700000694.163:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12866 comm="syz.8.2497" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dfaf9e199 code=0x7ffc0000
[  502.124702][   T26] audit: type=1326 audit(1700000694.163:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12866 comm="syz.8.2497" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f8dfaf9e199 code=0x7ffc0000
[  502.208809][   T26] audit: type=1326 audit(1700000694.163:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12866 comm="syz.8.2497" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f8dfaf9e199 code=0x7ffc0000
[  504.281204][T12901] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2505'.
[  505.272147][T12927] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2512'.
[  506.113227][T12937] ip_tables: iptables: counters copy to user failed while replacing table
[  506.443930][ T4319] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  507.085585][T12946] netlink: 1 bytes leftover after parsing attributes in process `syz.7.2517'.
[  507.092192][ T4319] usb 9-1: Using ep0 maxpacket: 16
[  507.104694][ T4319] usb 9-1: config 0 interface 0 has no altsetting 0
[  507.135173][ T4319] usb 9-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00
[  507.174431][ T4319] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  507.194726][ T4319] usb 9-1: config 0 descriptor??
[  507.387710][T12953] netem: change failed
[  507.671352][ T4319] pantherlord 0003:0810:0002.0008: unknown main item tag 0x1
[  507.697403][ T4319] pantherlord 0003:0810:0002.0008: unknown main item tag 0x0
[  507.798923][ T4319] pantherlord 0003:0810:0002.0008: unknown main item tag 0x0
[  508.049666][ T4319] pantherlord 0003:0810:0002.0008: unknown main item tag 0x0
[  508.353442][ T4319] pantherlord 0003:0810:0002.0008: unknown main item tag 0x0
[  508.400009][ T4319] pantherlord 0003:0810:0002.0008: unknown main item tag 0x3
[  508.500854][ T4319] pantherlord 0003:0810:0002.0008: hidraw0: USB HID v0.81 Device [HID 0810:0002] on usb-dummy_hcd.8-1/input0
[  508.606050][ T4319] pantherlord 0003:0810:0002.0008: Force feedback for PantherLord/GreenAsia devices by Anssi Hannula <anssi.hannula@gmail.com>
[  508.691857][ T4319] usb 9-1: USB disconnect, device number 4
[  509.048124][T12976] fido_id[12976]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory
[  513.782559][T13043] ip_tables: iptables: counters copy to user failed while replacing table
[  516.458901][T13082] netlink: 'syz.2.2558': attribute type 1 has an invalid length.
[  516.513013][T13082] bond5: (slave veth0_to_bond): Releasing active interface
[  516.537551][T13082] bond8: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  516.566985][T13082] device macvlan2 entered promiscuous mode
[  516.592571][T13082] device bond8 entered promiscuous mode
[  516.599244][T13082] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  516.626141][T13082] device bond8 left promiscuous mode
[  522.081494][T13165] Mass Storage Function, version: 2009/09/11
[  522.107938][T13165] LUN: removable file: (no medium)
[  522.133281][T13168] smc: net device lo applied user defined pnetid SYZ0
[  522.141194][   T26] kauditd_printk_skb: 51 callbacks suppressed
[  522.141212][   T26] audit: type=1800 audit(1700000714.903:351): pid=13165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2580" name="file" dev="configfs" ino=62301 res=0 errno=0
[  523.522057][T13195] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  528.836837][T13245] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check.
[  529.593250][T13254] loop8: detected capacity change from 0 to 256
[  529.873549][T13263] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  531.725686][T13282] netdevsim netdevsim8 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  531.735327][T13282] netdevsim netdevsim8 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  531.744816][T13282] netdevsim netdevsim8 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  531.753900][T13282] netdevsim netdevsim8 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  532.077057][ T4287] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  532.089834][ T4287] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  532.099117][ T4287] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  532.112373][ T4287] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  532.124795][ T4287] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  532.132663][ T4287] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  532.343890][T13295] device team0 entered promiscuous mode
[  532.349532][T13295] device team_slave_0 entered promiscuous mode
[  532.403496][T13295] device team_slave_1 entered promiscuous mode
[  532.434214][T13295] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  532.502376][T13295] bond0: (slave macvlan2): Enslaving as an active interface with an up link
[  532.666654][T13303] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2628'.
[  533.150693][T13300] bridge0: port 3(vlan2) entered blocking state
[  533.261946][T13300] bridge0: port 3(vlan2) entered disabled state
[  533.618059][T13291] chnl_net:caif_netlink_parms(): no params data found
[  533.750559][T13291] bridge0: port 1(bridge_slave_0) entered blocking state
[  533.775711][T13291] bridge0: port 1(bridge_slave_0) entered disabled state
[  533.799822][T13291] device bridge_slave_0 entered promiscuous mode
[  533.831798][T13291] bridge0: port 2(bridge_slave_1) entered blocking state
[  533.855819][T13291] bridge0: port 2(bridge_slave_1) entered disabled state
[  533.884748][T13291] device bridge_slave_1 entered promiscuous mode
[  533.954487][T13291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  533.979000][T13291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  534.062868][T13291] team0: Port device team_slave_0 added
[  534.097167][T13291] team0: Port device team_slave_1 added
[  534.136734][T13291] batman_adv: batadv0: Adding interface: batadv_slave_0
[  534.154301][T13291] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  534.180653][ T4288] Bluetooth: hci5: command 0x0409 tx timeout
[  534.197449][T13291] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  534.214955][T13291] batman_adv: batadv0: Adding interface: batadv_slave_1
[  534.223057][T13291] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  534.250229][T13291] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  534.295095][T13291] device hsr_slave_0 entered promiscuous mode
[  534.312174][T13291] device hsr_slave_1 entered promiscuous mode
[  534.324607][T13291] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  534.333506][T13291] Cannot create hsr debugfs directory
[  535.350357][T13341] bond0 speed is unknown, defaulting to 1000
[  535.411826][T13291] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  535.422345][T13341] bond0 speed is unknown, defaulting to 1000
[  535.432936][T13291] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  535.458314][T13345] device ip6gre1 entered promiscuous mode
[  535.475807][T13341] bond0 speed is unknown, defaulting to 1000
[  535.497563][T13345] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  535.499844][T13291] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  535.531335][T13291] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  535.712917][T13291] 8021q: adding VLAN 0 to HW filter on device bond0
[  535.733281][    T7] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  535.746349][    T7] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  535.774769][ T7094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  535.792367][ T4314] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  535.812742][ T7094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  535.841272][T13291] 8021q: adding VLAN 0 to HW filter on device team0
[  535.977373][ T7060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  535.991478][T13341] infiniband syz2: set down
[  536.022978][ T7060] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  536.031867][T13341] infiniband syz2: added bond0
[  536.051947][ T7060] bridge0: port 1(bridge_slave_0) entered blocking state
[  536.059245][ T7060] bridge0: port 1(bridge_slave_0) entered forwarding state
[  536.067195][  T126] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  536.076016][T13341] rdma_rxe: unable to create cq
[  536.182381][T13341] infiniband syz2: Couldn't create ib_mad CQ
[  536.213479][ T7060] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  536.230344][T13341] infiniband syz2: Couldn't open port 1
[  536.242398][ T4288] Bluetooth: hci5: command 0x041b tx timeout
[  536.260309][  T126] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  536.272204][ T7060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  536.281954][ T7060] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  536.290831][ T7060] bridge0: port 2(bridge_slave_1) entered blocking state
[  536.298226][ T7060] bridge0: port 2(bridge_slave_1) entered forwarding state
[  536.306994][ T4314] bond0 speed is unknown, defaulting to 1000
[  536.318422][ T7060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  537.065298][T13341] RDS/IB: syz2: added
[  537.103945][ T7053] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  537.123668][T13341] smc: adding ib device syz2 with port count 1
[  537.130345][T13341] smc:    ib device syz2 port 1 has pnetid 
[  537.158156][ T7053] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  537.179521][   T26] audit: type=1326 audit(1700000729.943:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13363 comm="syz.4.2647" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f457d59e199 code=0x7ffc0000
[  537.210886][ T7053] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  537.223255][ T7053] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  537.239388][ T7053] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  537.248305][   T26] audit: type=1326 audit(1700000729.943:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13363 comm="syz.4.2647" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f457d59e199 code=0x7ffc0000
[  537.249168][ T7053] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  537.281625][   T26] audit: type=1326 audit(1700000729.943:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13363 comm="syz.4.2647" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f457d59e199 code=0x7ffc0000
[  537.310216][ T7053] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  537.319631][ T7053] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  537.328732][ T4319] bond0 speed is unknown, defaulting to 1000
[  537.328756][   T26] audit: type=1326 audit(1700000729.943:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13363 comm="syz.4.2647" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f457d59e199 code=0x7ffc0000
[  537.349875][   T26] audit: type=1326 audit(1700000729.943:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13363 comm="syz.4.2647" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f457d59e199 code=0x7ffc0000
[  537.392597][   T26] audit: type=1326 audit(1700000729.943:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13363 comm="syz.4.2647" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f457d59e199 code=0x7ffc0000
[  537.444674][   T26] audit: type=1326 audit(1700000729.943:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13363 comm="syz.4.2647" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f457d597f17 code=0x7ffc0000
[  537.465471][T13341] bond0 speed is unknown, defaulting to 1000
[  537.509363][   T26] audit: type=1326 audit(1700000729.943:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13363 comm="syz.4.2647" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f457d53f519 code=0x7ffc0000
[  537.539007][T13291] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  537.562070][T13291] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  537.581078][ T5728] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  537.593933][ T5728] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  537.608934][   T26] audit: type=1326 audit(1700000729.943:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13363 comm="syz.4.2647" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f457d59e199 code=0x7ffc0000
[  537.671902][   T26] audit: type=1326 audit(1700000729.943:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13363 comm="syz.4.2647" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f457d59e199 code=0x7ffc0000
[  538.023494][T13341] bond0 speed is unknown, defaulting to 1000
[  538.322302][ T4288] Bluetooth: hci5: command 0x040f tx timeout
[  538.364185][T13341] bond0 speed is unknown, defaulting to 1000
[  538.421118][ T7090] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  538.429604][ T7090] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  538.458702][T13291] 8021q: adding VLAN 0 to HW filter on device batadv0
[  538.648446][T13341] bond0 speed is unknown, defaulting to 1000
[  538.706536][T13384] loop8: detected capacity change from 0 to 8192
[  538.983028][T13341] bond0 speed is unknown, defaulting to 1000
[  540.083703][T13396] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2655'.
[  540.161783][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  540.188290][T13341] bond0 speed is unknown, defaulting to 1000
[  540.237067][ T7090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  540.262745][ T7090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  540.411900][ T4288] Bluetooth: hci5: command 0x0419 tx timeout
[  540.912104][T13396] bond4: (slave veth3): Enslaving as an active interface with an up link
[  541.412642][T13291] device veth0_vlan entered promiscuous mode
[  541.435885][ T7053] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  541.462650][ T7053] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  541.489554][T13341] bond0 speed is unknown, defaulting to 1000
[  541.503355][T13291] device veth1_vlan entered promiscuous mode
[  541.609379][ T7053] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  541.640612][ T7053] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  541.932258][T13291] device veth0_macvtap entered promiscuous mode
[  542.075539][ T7069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  542.158873][ T7069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  542.391012][T13291] device veth1_macvtap entered promiscuous mode
[  542.487566][ T7069] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  542.522551][ T7069] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  542.614438][T13341] bond0 speed is unknown, defaulting to 1000
[  542.646851][T13291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  542.701740][T13291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  542.731758][T13291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  542.781709][T13291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  542.811056][T13291] batman_adv: batadv0: Interface activated: batadv_slave_0
[  542.875034][ T7090] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  542.904804][T13415] loop8: detected capacity change from 0 to 256
[  542.912933][ T7090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  542.939672][T13415] exfat: Bad value for 'uid'
[  543.205758][T13291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  543.241733][T13291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  543.331938][T13291] batman_adv: batadv0: Interface activated: batadv_slave_1
[  543.386659][T13291] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  543.421740][T13291] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  543.458407][T13291] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  543.496317][T13291] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  543.752424][ T7098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  543.780583][ T7098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  543.871303][ T7098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  543.890963][ T7098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  543.971237][ T7090] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  544.012916][ T7090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  544.043268][ T7090] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  544.085852][ T7090] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  544.543746][T13434] tipc: Started in network mode
[  544.567992][T13434] tipc: Node identity 1001001, cluster identity 4711
[  544.605574][T13434] tipc: Node number set to 16781313
[  545.284296][T13449] futex_wake_op: syz.4.2667 tries to shift op by 144; fix this program
[  548.208937][T13487] device team0 entered promiscuous mode
[  548.264203][T13487] device team_slave_0 entered promiscuous mode
[  548.270717][T13487] device team_slave_1 entered promiscuous mode
[  548.321342][T13487] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  548.332141][T13487] bond0: (slave macvlan2): Enslaving as a backup interface with a down link
[  548.371841][T13492] batman_adv: batadv0: Adding interface: veth0
[  548.393879][T13492] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  548.762607][T13492] batman_adv: batadv0: Interface activated: veth0
[  548.983661][T13495] batman_adv: batadv0: Interface deactivated: veth0
[  549.329281][T13495] batman_adv: batadv0: Removing interface: veth0
[  549.448048][T13487] bridge0: port 3(vlan2) entered blocking state
[  549.471745][T13487] bridge0: port 3(vlan2) entered disabled state
[  549.489773][T13487] device vlan2 entered promiscuous mode
[  549.508341][T13487] device bond0 entered promiscuous mode
[  549.532290][T13487] device macvlan2 entered promiscuous mode
[  549.611887][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  553.251956][T13538] 9pnet: p9_errstr2errno: server reported unknown error Àñ'IÓ$íÛ·=¼¼
[  553.605176][T13547] 9pnet_fd: Insufficient options for proto=fd
[  553.765881][T13551] netlink: 'syz.4.2701': attribute type 12 has an invalid length.
[  556.864622][T13591] device syzkaller0 entered promiscuous mode
[  558.094341][T13606] device team0 entered promiscuous mode
[  558.099975][T13606] device team_slave_0 entered promiscuous mode
[  558.156134][T13606] device team_slave_1 entered promiscuous mode
[  558.192188][T13606] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  558.218562][T13606] bond0: (slave macvlan2): Enslaving as an active interface with an up link
[  559.607300][T13611] bridge0: port 3(vlan2) entered blocking state
[  559.729866][T13611] bridge0: port 3(vlan2) entered disabled state
[  559.739267][T13611] device vlan2 entered promiscuous mode
[  559.745031][T13611] device bond0 entered promiscuous mode
[  559.750787][T13611] device bond_slave_0 entered promiscuous mode
[  559.772149][T13611] device bond_slave_1 entered promiscuous mode
[  559.800621][   T26] kauditd_printk_skb: 154 callbacks suppressed
[  559.800639][   T26] audit: type=1326 audit(2000000021.330:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13627 comm="syz.7.2723" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e53b9e199 code=0x7ffc0000
[  559.801258][T13611] device macvlan2 entered promiscuous mode
[  559.817581][   T26] audit: type=1326 audit(2000000021.330:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13627 comm="syz.7.2723" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e53b9e199 code=0x7ffc0000
[  559.975332][   T26] audit: type=1326 audit(2000000021.330:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13627 comm="syz.7.2723" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e53b9e199 code=0x7ffc0000
[  560.065856][   T26] audit: type=1326 audit(2000000021.330:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13627 comm="syz.7.2723" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e53b9e199 code=0x7ffc0000
[  560.162905][   T26] audit: type=1326 audit(2000000021.340:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13627 comm="syz.7.2723" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f4e53b9e199 code=0x7ffc0000
[  560.261659][   T26] audit: type=1326 audit(2000000021.340:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13627 comm="syz.7.2723" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e53b9e199 code=0x7ffc0000
[  560.371666][   T26] audit: type=1326 audit(2000000021.340:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13627 comm="syz.7.2723" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e53b9e199 code=0x7ffc0000
[  560.451684][   T26] audit: type=1326 audit(2000000021.370:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13627 comm="syz.7.2723" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e53b9e199 code=0x7ffc0000
[  560.562216][   T26] audit: type=1326 audit(2000000021.370:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13627 comm="syz.7.2723" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e53b9e199 code=0x7ffc0000
[  560.701641][   T26] audit: type=1326 audit(2000000021.370:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13627 comm="syz.7.2723" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f4e53b9e199 code=0x7ffc0000
[  562.259105][T13661] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2733'.
[  563.052904][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  563.059467][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  563.596159][T13692] device wlan0 entered promiscuous mode
[  564.655242][T13698] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2747'.
[  566.776519][T13720] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2752'.
[  567.417559][T13733] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  567.431972][T13702] loop8: detected capacity change from 0 to 512
[  567.617206][T13702] UDF-fs: bad mount option "session500000000000000000005" or missing value
[  568.450188][T13748] netlink: 'syz.9.2761': attribute type 49 has an invalid length.
[  568.719743][T13748] device veth0_to_bond entered promiscuous mode
[  568.811963][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  571.925972][T13784] loop9: detected capacity change from 0 to 128
[  572.041913][T13784] FAT-fs (loop9): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  572.253653][T13791] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 1)
[  572.291756][T13791] FAT-fs (loop9): Filesystem has been set read-only
[  572.336459][T13784] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 1)
[  572.450430][T13796] fuse: Bad value for 'fd'
[  572.485058][T13291] FAT-fs (loop9): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  574.835475][T13842] loop9: detected capacity change from 0 to 256
[  574.935035][T13842] FAT-fs (loop9): error, corrupted directory (invalid entries)
[  574.962006][T13842] FAT-fs (loop9): Filesystem has been set read-only
[  574.996741][T13842] FAT-fs (loop9): error, corrupted directory (invalid entries)
[  575.566748][T13859] CIFS mount error: No usable UNC path provided in device string!
[  575.566748][T13859] 
[  575.577422][T13859] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  576.614373][T13865] xt_CT: No such helper "pptp"
[  578.343697][T13898] tipc: Started in network mode
[  578.348634][T13898] tipc: Node identity 4, cluster identity 4711
[  578.383957][T13898] tipc: Node number set to 4
[  578.460604][T13901] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  578.509800][ T7063] tipc: Subscription rejected, illegal request
[  578.882972][T13913] FAULT_INJECTION: forcing a failure.
[  578.882972][T13913] name failslab, interval 1, probability 0, space 0, times 0
[  578.912477][T13913] CPU: 0 PID: 13913 Comm: syz.9.2806 Not tainted syzkaller #0
[  578.920022][T13913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  578.930132][T13913] Call Trace:
[  578.933598][T13913]  <TASK>
[  578.936646][T13913]  dump_stack_lvl+0x188/0x24e
[  578.941508][T13913]  ? show_regs_print_info+0x12/0x12
[  578.946965][T13913]  ? load_image+0x410/0x410
[  578.951543][T13913]  ? __lock_acquire+0x7ea0/0x7ea0
[  578.956768][T13913]  should_fail_ex+0x390/0x4c0
[  578.961567][T13913]  should_failslab+0x5/0x20
[  578.966163][T13913]  slab_pre_alloc_hook+0x59/0x300
[  578.971226][T13913]  ? snd_seq_timer_new+0x51/0x6a0
[  578.976407][T13913]  __kmem_cache_alloc_node+0x4f/0x270
[  578.981825][T13913]  ? snd_seq_timer_new+0x51/0x6a0
[  578.986864][T13913]  kmalloc_trace+0x26/0xe0
[  578.991294][T13913]  snd_seq_timer_new+0x51/0x6a0
[  578.996170][T13913]  snd_seq_queue_alloc+0x165/0x740
[  579.001301][T13913]  snd_seq_ioctl_create_queue+0x7b/0x3b0
[  579.006953][T13913]  ? snd_seq_ioctl_unsubscribe_port+0x6d0/0x6d0
[  579.013214][T13913]  snd_seq_oss_open+0x622/0xf00
[  579.018233][T13913]  ? snd_seq_oss_delete_client+0x50/0x50
[  579.023913][T13913]  ? trace_raw_output_contention_end+0xd0/0xd0
[  579.030103][T13913]  ? odev_open+0x58/0x90
[  579.034480][T13913]  ? __lock_acquire+0x7ea0/0x7ea0
[  579.039585][T13913]  ? snd_seq_oss_process_event+0x2910/0x2910
[  579.045595][T13913]  ? async_call_lookup_ports+0x10/0x10
[  579.051131][T13913]  ? do_raw_spin_unlock+0x11d/0x230
[  579.056374][T13913]  ? soundcore_open+0x309/0x4b0
[  579.061415][T13913]  odev_open+0x63/0x90
[  579.065533][T13913]  chrdev_open+0x585/0x5f0
[  579.070135][T13913]  ? cd_forget+0x160/0x160
[  579.074587][T13913]  ? fsnotify_perm+0x39b/0x550
[  579.079413][T13913]  ? cd_forget+0x160/0x160
[  579.083850][T13913]  do_dentry_open+0x7dd/0x10b0
[  579.088846][T13913]  path_openat+0x2674/0x2f10
[  579.093490][T13913]  ? kasan_set_track+0x60/0x70
[  579.098322][T13913]  ? verify_lock_unused+0x140/0x140
[  579.103549][T13913]  ? do_sys_openat2+0xdd/0x4f0
[  579.108346][T13913]  ? do_filp_open+0x420/0x420
[  579.113050][T13913]  do_filp_open+0x1ee/0x420
[  579.117568][T13913]  ? vfs_tmpfile+0x470/0x470
[  579.122198][T13913]  ? _raw_spin_unlock+0x24/0x40
[  579.127120][T13913]  ? alloc_fd+0x590/0x640
[  579.131484][T13913]  do_sys_openat2+0x14b/0x4f0
[  579.136194][T13913]  ? do_sys_open+0xe0/0xe0
[  579.140635][T13913]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  579.146646][T13913]  ? lock_chain_count+0x20/0x20
[  579.151533][T13913]  __x64_sys_openat+0x135/0x160
[  579.156595][T13913]  do_syscall_64+0x4c/0xa0
[  579.161298][T13913]  ? clear_bhb_loop+0x60/0xb0
[  579.166038][T13913]  ? clear_bhb_loop+0x60/0xb0
[  579.170995][T13913]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  579.176909][T13913] RIP: 0033:0x7f6a18f9e199
[  579.181381][T13913] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  579.201133][T13913] RSP: 002b:00007f6a19d95028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  579.209604][T13913] RAX: ffffffffffffffda RBX: 00007f6a19225fa0 RCX: 00007f6a18f9e199
[  579.217681][T13913] RDX: 0000000000123482 RSI: 0000200000000040 RDI: 00000000ffffff9c
[  579.226552][T13913] RBP: 00007f6a19035888 R08: 0000000000000000 R09: 0000000000000000
[  579.234709][T13913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  579.242789][T13913] R13: 00007f6a19226038 R14: 00007f6a19225fa0 R15: 00007ffd0d1bb5e8
[  579.250875][T13913]  </TASK>
[  579.577423][T13919] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2809'.
[  580.265047][ T4287] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  580.278169][ T4287] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  580.288121][ T4285] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  580.299603][ T4285] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  580.307633][ T4287] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  580.317752][ T4287] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  581.337312][T13934] bond0 speed is unknown, defaulting to 1000
[  581.944761][T13960] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  581.967484][ T4317] wlan1: authenticate with 08:02:11:00:00:00
[  581.989872][ T4317] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[  582.057339][ T7063] wlan1: authenticated
[  582.062307][T11241] mac80211_hwsim hwsim21 wlan1: disabling HT/VHT/HE as WMM/QoS is not supported by the AP
[  582.073255][T13960] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  582.114585][T11241] wlan1: associating to AP 08:02:11:00:00:00 with corrupt probe response
[  582.214887][ T7098] wlan1: associate with 08:02:11:00:00:00 (try 1/3)
[  582.222140][T13960] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  582.224883][ T7098] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1)
[  582.268799][T13934] chnl_net:caif_netlink_parms(): no params data found
[  582.314293][T13966] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  582.332752][ T7098] wlan1: associated
[  582.401730][ T4287] Bluetooth: hci6: command 0x0409 tx timeout
[  582.523508][T13934] bridge0: port 1(bridge_slave_0) entered blocking state
[  582.530918][T13934] bridge0: port 1(bridge_slave_0) entered disabled state
[  582.539746][T13934] device bridge_slave_0 entered promiscuous mode
[  582.549415][T13934] bridge0: port 2(bridge_slave_1) entered blocking state
[  582.556809][T13934] bridge0: port 2(bridge_slave_1) entered disabled state
[  582.565782][T13934] device bridge_slave_1 entered promiscuous mode
[  582.597958][T13934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  582.613392][T13934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  582.711000][T13934] team0: Port device team_slave_0 added
[  582.732181][T13934] team0: Port device team_slave_1 added
[  582.752333][T13988] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2826'.
[  582.787317][T13934] batman_adv: batadv0: Adding interface: batadv_slave_0
[  582.804119][T13934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  582.856584][T13934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  582.881244][T13934] batman_adv: batadv0: Adding interface: batadv_slave_1
[  582.899586][T13934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  582.973184][T13934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  583.076988][T14001] loop9: detected capacity change from 0 to 136
[  583.107846][T13934] device hsr_slave_0 entered promiscuous mode
[  583.139029][T13934] device hsr_slave_1 entered promiscuous mode
[  583.181204][T13934] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  583.196287][T13934] Cannot create hsr debugfs directory
[  583.213469][T14001] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2828'.
[  583.259200][T14003] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2828'.
[  583.588982][ T3933] device veth0_vlan left promiscuous mode
[  583.635664][ T3933] device veth0_vlan entered promiscuous mode
[  583.684930][ T7035] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  583.725720][ T7035] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  583.762674][ T7035] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  583.894421][T14020] batman_adv: batadv0: Adding interface: veth0
[  583.906535][T14020] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  583.980182][T14020] batman_adv: batadv0: Interface activated: veth0
[  584.028377][   T26] kauditd_printk_skb: 24 callbacks suppressed
[  584.028397][   T26] audit: type=1326 audit(2000000051.561:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14021 comm="syz.7.2832" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e53b9e199 code=0x7ffc0000
[  584.145881][   T26] audit: type=1326 audit(2000000051.561:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14021 comm="syz.7.2832" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e53b9e199 code=0x7ffc0000
[  584.188538][   T26] audit: type=1326 audit(2000000051.561:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14021 comm="syz.7.2832" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e53b9e199 code=0x7ffc0000
[  584.265616][   T26] audit: type=1326 audit(2000000051.561:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14021 comm="syz.7.2832" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e53b9e199 code=0x7ffc0000
[  584.328998][   T26] audit: type=1326 audit(2000000051.561:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14021 comm="syz.7.2832" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f4e53b9e199 code=0x7ffc0000
[  584.394355][   T26] audit: type=1326 audit(2000000051.561:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14021 comm="syz.7.2832" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e53b9e199 code=0x7ffc0000
[  584.452103][T14028] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2834'.
[  584.468217][   T26] audit: type=1326 audit(2000000051.561:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14021 comm="syz.7.2832" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e53b9e199 code=0x7ffc0000
[  584.505156][ T4287] Bluetooth: hci6: command 0x041b tx timeout
[  584.517440][   T26] audit: type=1326 audit(2000000051.561:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14021 comm="syz.7.2832" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e53b9e199 code=0x7ffc0000
[  584.526417][T13934] netdevsim netdevsim3 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  584.595813][T14020] batman_adv: batadv0: Interface deactivated: veth0
[  584.671692][   T26] audit: type=1326 audit(2000000051.561:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14021 comm="syz.7.2832" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e53b9e199 code=0x7ffc0000
[  584.748101][   T26] audit: type=1326 audit(2000000051.561:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14021 comm="syz.7.2832" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e53b9e199 code=0x7ffc0000
[  584.783972][T14020] batman_adv: batadv0: Removing interface: veth0
[  584.896554][T14029] netlink: 60 bytes leftover after parsing attributes in process `syz.9.2834'.
[  585.117837][T13934] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  585.477949][T13934] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  585.748786][T13934] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  586.900124][ T4287] Bluetooth: hci6: command 0x040f tx timeout
[  587.164781][T13934] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  587.188769][T13934] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  587.237436][T13934] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  587.276397][T13934] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  587.338262][T14071] tipc: New replicast peer: 255.255.255.255
[  587.361178][T14071] tipc: Enabled bearer <udp:syz2>, priority 10
[  587.592777][T13934] 8021q: adding VLAN 0 to HW filter on device bond0
[  587.632822][T14074] netlink: 'syz.2.2845': attribute type 10 has an invalid length.
[  587.679541][T14074] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  587.717487][ T7065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  587.740883][ T7065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  587.793751][T13934] 8021q: adding VLAN 0 to HW filter on device team0
[  587.801280][T14074] netlink: 'syz.2.2845': attribute type 4 has an invalid length.
[  587.815025][T14074] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2845'.
[  587.878791][T14074] wlan1: mtu less than device minimum
[  587.919359][ T7035] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  587.953416][ T7035] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  587.987645][ T7035] bridge0: port 1(bridge_slave_0) entered blocking state
[  587.994874][ T7035] bridge0: port 1(bridge_slave_0) entered forwarding state
[  588.043989][ T7035] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  588.072386][ T7035] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  588.114949][ T7035] bridge0: port 2(bridge_slave_1) entered blocking state
[  588.122227][ T7035] bridge0: port 2(bridge_slave_1) entered forwarding state
[  588.164789][ T7035] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  588.200743][ T7035] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  588.282899][ T5728] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  588.300894][ T5728] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  588.334410][ T5728] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  588.379748][ T5728] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  588.510250][ T5728] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  588.610874][ T5728] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  588.716437][ T5728] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  588.917636][ T5728] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  588.948127][ T5728] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  588.972492][ T4287] Bluetooth: hci6: command 0x0419 tx timeout
[  588.992627][ T5728] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  590.056164][T13934] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  591.105137][T14108] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2851'.
[  591.122023][T14108] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2851'.
[  591.185452][T14108] device syz_tun entered promiscuous mode
[  591.244267][T14108] device syz_tun left promiscuous mode
[  591.338176][T14114] 8021q: adding VLAN 0 to HW filter on device bond0
[  591.374954][T14114] 8021q: adding VLAN 0 to HW filter on device team0
[  591.410206][T14114] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  593.027823][ T5728] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  593.042363][ T5728] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  593.056113][   T26] kauditd_printk_skb: 19 callbacks suppressed
[  593.056128][   T26] audit: type=1326 audit(2000000060.591:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14137 comm="syz.2.2859" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4583b9e199 code=0x7ffc0000
[  593.102264][T13934] 8021q: adding VLAN 0 to HW filter on device batadv0
[  593.175326][ T7035] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  593.181769][   T26] audit: type=1326 audit(2000000060.601:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14137 comm="syz.2.2859" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f4583b9e199 code=0x7ffc0000
[  593.204668][ T7035] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  593.280424][   T26] audit: type=1326 audit(2000000060.601:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14137 comm="syz.2.2859" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4583b9e199 code=0x7ffc0000
[  593.337477][ T7035] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  593.354944][ T7035] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  593.386070][T13934] device veth0_vlan entered promiscuous mode
[  593.392962][   T26] audit: type=1326 audit(2000000060.601:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14137 comm="syz.2.2859" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4583b9e199 code=0x7ffc0000
[  593.433304][ T7035] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  593.492482][ T7035] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  593.511665][   T26] audit: type=1326 audit(2000000060.601:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14137 comm="syz.2.2859" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f4583b9e199 code=0x7ffc0000
[  593.541736][   T26] audit: type=1326 audit(2000000060.601:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14137 comm="syz.2.2859" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4583b9e199 code=0x7ffc0000
[  593.577466][T13934] device veth1_vlan entered promiscuous mode
[  593.602485][   T26] audit: type=1326 audit(2000000060.601:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14137 comm="syz.2.2859" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4583b9e199 code=0x7ffc0000
[  594.035642][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  594.115616][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  594.290815][   T26] audit: type=1326 audit(2000000060.601:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14137 comm="syz.2.2859" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f4583b9e199 code=0x7ffc0000
[  594.336205][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  594.389719][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  594.428544][   T26] audit: type=1326 audit(2000000060.601:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14137 comm="syz.2.2859" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4583b9e199 code=0x7ffc0000
[  594.482285][   T26] audit: type=1326 audit(2000000060.601:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14137 comm="syz.2.2859" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4583b9e199 code=0x7ffc0000
[  594.512313][T13934] device veth0_macvtap entered promiscuous mode
[  594.562803][T13934] device veth1_macvtap entered promiscuous mode
[  594.634143][T13934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  594.665426][T14162] loop9: detected capacity change from 0 to 512
[  594.681981][T13934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  594.722025][T13934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  594.743465][T14162] EXT4-fs: Ignoring removed mblk_io_submit option
[  594.769962][T13934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  594.774495][T14162] EXT4-fs (loop9): VFS: Can't find ext4 filesystem
[  594.812692][T13934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  594.851961][T13934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  594.894213][T13934] batman_adv: batadv0: Interface activated: batadv_slave_0
[  594.946084][ T7057] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  594.975661][ T7057] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  595.005822][ T7057] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  595.033013][ T7057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  595.106652][T13934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  595.146018][T13934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  595.218312][T13934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  595.268980][T13934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  595.302397][T13934] batman_adv: batadv0: Interface activated: batadv_slave_1
[  595.343302][ T7065] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  595.364144][ T7065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  595.385461][T13934] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  595.412128][T13934] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  595.440945][T13934] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  595.490795][T13934] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  595.718138][ T7035] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  595.766554][ T7035] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  595.789174][T14180] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2869'.
[  595.871457][T14181] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2869'.
[  595.882676][T14181] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2869'.
[  595.899333][T14181] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2869'.
[  595.909090][T14181] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2869'.
[  596.067968][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  596.690051][ T5728] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  596.731884][ T5728] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  596.982076][ T5728] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  598.993680][T14203] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2873'.
[  599.761795][T14214] netlink: 300 bytes leftover after parsing attributes in process `syz.3.2876'.
[  601.304025][T14252] __vm_enough_memory: pid: 14252, comm: syz.4.2884, no enough memory for the allocation
[  603.305379][T14262] bridge0: port 2(bridge_slave_1) entered disabled state
[  603.312966][T14262] bridge0: port 1(bridge_slave_0) entered disabled state
[  604.747426][T14262] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  605.771290][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  605.855614][T14262] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  606.589865][T14262] device veth0_vlan left promiscuous mode
[  607.237630][T14262] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  607.261979][T14262] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  607.270966][T14262] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  607.316292][T14262] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  607.512658][T14262] device wlan0 left promiscuous mode
[  607.599615][T14262] device team0 left promiscuous mode
[  607.605576][T14262] device team_slave_0 left promiscuous mode
[  607.618213][T14262] device team_slave_1 left promiscuous mode
[  607.654133][T14316] device bridge0 entered promiscuous mode
[  607.692203][T14316] device vlan2 entered promiscuous mode
[  607.954344][T14327] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2901'.
[  607.991714][T14327] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2901'.
[  608.000800][T14327] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2901'.
[  608.022558][T14328] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2901'.
[  608.030351][T14327] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2901'.
[  608.098786][T14327] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2901'.
[  608.101213][T14333] IPVS: set_ctl: invalid protocol: 142 172.20.20.45:20004
[  608.201238][T14333] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2902'.
[  608.501717][ T4357] usb 10-1: new full-speed USB device number 2 using dummy_hcd
[  608.620372][T14355] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2906'.
[  608.693515][ T4357] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  608.725202][ T4357] usb 10-1: config 0 interface 0 has no altsetting 0
[  608.772398][ T4357] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  608.817796][ T4357] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  608.857467][ T4357] usb 10-1: Product: syz
[  608.879267][ T4357] usb 10-1: Manufacturer: syz
[  608.902241][ T4357] usb 10-1: SerialNumber: syz
[  608.942559][ T4357] usb 10-1: config 0 descriptor??
[  608.999091][ T4357] usb 10-1: selecting invalid altsetting 0
[  609.098143][T14366] xt_socket: unknown flags 0x4
[  609.360294][ T4317] usb 10-1: USB disconnect, device number 2
[  610.373227][T14380] CIFS: Attempting to mount \\127.0.0.1\share
[  610.380103][T14380] CIFS: VFS: Error connecting to socket. Aborting operation.
[  610.422150][T14380] CIFS: VFS: cifs_mount failed w/return code = -101
[  611.574558][T14404] netlink: 'syz.3.2917': attribute type 10 has an invalid length.
[  611.739758][T14404] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  611.831934][T14413] netlink: 'syz.2.2919': attribute type 1 has an invalid length.
[  611.875101][T14413] netlink: 'syz.2.2919': attribute type 4 has an invalid length.
[  611.907179][T14413] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.2919'.
[  611.954661][T14411] netlink: 'syz.3.2917': attribute type 4 has an invalid length.
[  611.986374][T14411] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2917'.
[  612.061175][T14411] wlan1: mtu less than device minimum
[  612.120043][T14418] netlink: 'syz.2.2919': attribute type 1 has an invalid length.
[  612.141842][T14418] netlink: 'syz.2.2919': attribute type 4 has an invalid length.
[  614.724584][T14455] __vm_enough_memory: pid: 14455, comm: syz.9.2929, no enough memory for the allocation
[  615.766700][T14464] device lo left promiscuous mode
[  615.861181][T14464] device tunl0 left promiscuous mode
[  615.903497][T14464] device gre0 left promiscuous mode
[  615.979131][T14464] device gretap0 left promiscuous mode
[  616.013679][T14464] device erspan0 left promiscuous mode
[  616.060514][T14464] device ip_vti0 left promiscuous mode
[  616.086956][T14464] device ip6_vti0 left promiscuous mode
[  616.126616][T14464] device sit0 left promiscuous mode
[  616.393929][T14464] device ip6tnl0 left promiscuous mode
[  616.416309][T14464] device ip6gre0 left promiscuous mode
[  616.448112][T14464] device ip6gretap0 left promiscuous mode
[  616.477475][T14464] device vcan0 left promiscuous mode
[  616.519771][T14464] device bond0 left promiscuous mode
[  616.551401][T14464] device team0 left promiscuous mode
[  616.579054][T14464] batman_adv: batadv0: Interface deactivated: dummy0
[  616.749858][T14464] device nlmon0 left promiscuous mode
[  616.780111][T14464] device caif0 left promiscuous mode
[  616.812221][T14464] device batadv0 left promiscuous mode
[  616.820503][T14464] device veth0 left promiscuous mode
[  616.851074][T14464] device veth1 left promiscuous mode
[  616.871362][T14464] device wg0 left promiscuous mode
[  616.903404][T14464] device wg1 left promiscuous mode
[  616.908635][T14464] device wg2 left promiscuous mode
[  616.941791][T14464] device veth0_to_bridge left promiscuous mode
[  616.981053][T14464] device veth1_to_bridge left promiscuous mode
[  616.992017][ T4317] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  617.022115][T14464] device bridge_slave_1 left promiscuous mode
[  617.112100][T14464] device bond_slave_0 left promiscuous mode
[  617.118129][T14464] device veth0_to_team left promiscuous mode
[  617.124977][T14464] device team_slave_0 left promiscuous mode
[  617.130995][T14464] device veth1_to_team left promiscuous mode
[  617.139873][T14464] device team_slave_1 left promiscuous mode
[  617.158164][T14464] device veth0_to_batadv left promiscuous mode
[  617.188782][T14464] device batadv_slave_0 left promiscuous mode
[  617.202065][ T4317] usb 10-1: Using ep0 maxpacket: 8
[  617.208079][T14464] device xfrm0 left promiscuous mode
[  617.215241][ T4317] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  617.226770][T14464] device veth0_to_hsr left promiscuous mode
[  617.231590][ T4317] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3
[  617.233326][T14464] device veth1_to_hsr left promiscuous mode
[  617.274361][T14464] device hsr0 left promiscuous mode
[  617.283531][ T4317] usb 10-1: New USB device found, idVendor=0e41, idProduct=534d, bcdDevice= 0.40
[  617.290137][T14464] device veth1_virt_wifi left promiscuous mode
[  617.300311][T14464] device veth0_virt_wifi left promiscuous mode
[  617.320648][T14464] device virt_wifi0 left promiscuous mode
[  617.330676][ T4317] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  617.337338][T14464] device vlan0 left promiscuous mode
[  617.355454][T14464] device vlan1 left promiscuous mode
[  617.359477][ T4317] usb 10-1: Product: syz
[  617.360978][T14464] device macvlan0 left promiscuous mode
[  617.391858][T14464] device macvlan1 left promiscuous mode
[  617.394433][ T4317] usb 10-1: Manufacturer: syz
[  617.403256][T14464] device ipvlan0 left promiscuous mode
[  617.411430][ T4317] usb 10-1: SerialNumber: syz
[  617.427075][T14464] device ipvlan1 left promiscuous mode
[  617.442597][T14464] device macvtap0 left promiscuous mode
[  617.462692][T14464] device macsec0 left promiscuous mode
[  617.468461][T14464] device geneve0 left promiscuous mode
[  617.505182][T14464] device geneve1 left promiscuous mode
[  617.510813][T14464] device netdevsim0 left promiscuous mode
[  617.521605][    C0] net_ratelimit: 23 callbacks suppressed
[  617.548781][T14464] device netdevsim1 left promiscuous mode
[  617.554959][T14464] device netdevsim2 left promiscuous mode
[  617.555069][T14464] device netdevsim3 left promiscuous mode
[  617.577326][T14464] device wlan0 left promiscuous mode
[  617.587424][T14464] device wlan1 left promiscuous mode
[  617.610125][T14464] device syztnl1 left promiscuous mode
[  617.616175][T14464] device geneve2 left promiscuous mode
[  617.632188][T14464] device vlan2 left promiscuous mode
[  617.641735][T14464] device bond1 left promiscuous mode
[  617.652702][T14464] device bond2 left promiscuous mode
[  617.662375][T14464] device gretap1 left promiscuous mode
[  617.672138][T14464] device sit1 left promiscuous mode
[  617.677502][T14464] device gretap2 left promiscuous mode
[  617.799073][ T4317] usb 10-1: unit 0 not found!
[  617.873316][ T4317] usb 10-1: USB disconnect, device number 3
[  618.212387][T14478] udevd[14478]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  619.463817][   T26] kauditd_printk_skb: 18 callbacks suppressed
[  619.463835][   T26] audit: type=1326 audit(2000000087.001:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14509 comm="syz.4.2944" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f457d59e199 code=0x7ffc0000
[  619.560579][   T26] audit: type=1326 audit(2000000087.011:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14509 comm="syz.4.2944" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f457d59e199 code=0x7ffc0000
[  619.625873][   T26] audit: type=1326 audit(2000000087.031:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14509 comm="syz.4.2944" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f457d59e199 code=0x7ffc0000
[  619.767592][   T26] audit: type=1326 audit(2000000087.031:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14509 comm="syz.4.2944" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f457d59e199 code=0x7ffc0000
[  619.793042][   T26] audit: type=1326 audit(2000000087.031:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14509 comm="syz.4.2944" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f457d59e199 code=0x7ffc0000
[  619.851704][   T26] audit: type=1326 audit(2000000087.031:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14509 comm="syz.4.2944" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f457d59e199 code=0x7ffc0000
[  620.024528][   T26] audit: type=1326 audit(2000000087.031:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14509 comm="syz.4.2944" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f457d59e199 code=0x7ffc0000
[  620.086806][   T26] audit: type=1326 audit(2000000087.031:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14509 comm="syz.4.2944" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f457d59e199 code=0x7ffc0000
[  620.157189][   T26] audit: type=1326 audit(2000000087.031:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14509 comm="syz.4.2944" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f457d59e199 code=0x7ffc0000
[  620.264774][   T26] audit: type=1326 audit(2000000087.031:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14509 comm="syz.4.2944" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f457d59e199 code=0x7ffc0000
[  622.708233][    C1] net_ratelimit: 33 callbacks suppressed
[  623.126983][T14574] netlink: 'syz.4.2958': attribute type 2 has an invalid length.
[  623.196801][T14574] __nla_validate_parse: 1 callbacks suppressed
[  623.196839][T14574] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2958'.
[  624.793311][T14586] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2960'.
[  624.808988][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  624.831467][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  624.874965][T14588] netlink: 'syz.4.2962': attribute type 8 has an invalid length.
[  624.881659][T14580] netlink: 'syz.7.2960': attribute type 30 has an invalid length.
[  625.032684][T14577] loop9: detected capacity change from 0 to 256
[  625.040206][T14577] exfat: Deprecated parameter 'utf8'
[  625.137238][T14577] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x72bddf51, utbl_chksum : 0xe619d30d)
[  626.212737][T14610] loop9: detected capacity change from 0 to 512
[  626.226902][T14610] EXT4-fs: Ignoring removed i_version option
[  626.233267][T14610] EXT4-fs: Ignoring removed oldalloc option
[  626.569807][T14610] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  627.389861][T14617] futex_wake_op: syz.3.2963 tries to shift op by 144; fix this program
[  627.497064][T14617] futex_wake_op: syz.3.2963 tries to shift op by 144; fix this program
[  627.841574][    C1] net_ratelimit: 28 callbacks suppressed
[  627.950668][   T26] kauditd_printk_skb: 46 callbacks suppressed
[  627.950683][   T26] audit: type=1326 audit(2000000095.481:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14628 comm="syz.2.2971" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4583b9e199 code=0x7ffc0000
[  627.993339][T14629] syz.2.2971 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  628.125033][   T26] audit: type=1326 audit(2000000095.531:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14628 comm="syz.2.2971" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f4583b9e199 code=0x7ffc0000
[  628.301706][   T26] audit: type=1326 audit(2000000095.611:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14628 comm="syz.2.2971" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4583b9e199 code=0x7ffc0000
[  628.438720][   T26] audit: type=1326 audit(2000000095.611:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14628 comm="syz.2.2971" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4583b9e199 code=0x7ffc0000
[  628.519679][   T26] audit: type=1326 audit(2000000095.631:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14628 comm="syz.2.2971" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f4583b9e199 code=0x7ffc0000
[  628.572345][   T26] audit: type=1326 audit(2000000095.631:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14628 comm="syz.2.2971" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4583b9e199 code=0x7ffc0000
[  628.637711][   T26] audit: type=1326 audit(2000000095.651:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14628 comm="syz.2.2971" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f4583b9e199 code=0x7ffc0000
[  628.731662][   T26] audit: type=1326 audit(2000000095.651:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14628 comm="syz.2.2971" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4583b9e199 code=0x7ffc0000
[  628.774781][T13291] EXT4-fs (loop9): unmounting filesystem.
[  628.857824][   T26] audit: type=1326 audit(2000000095.651:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14628 comm="syz.2.2971" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f4583b9e199 code=0x7ffc0000
[  628.976145][   T26] audit: type=1326 audit(2000000095.651:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14628 comm="syz.2.2971" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4583b9e199 code=0x7ffc0000
[  629.953136][T11241] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  630.289162][T11241] usb 10-1: config index 0 descriptor too short (expected 187, got 18)
[  630.820911][T11241] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  630.942040][T11241] usb 10-1: config 0 has no interfaces?
[  630.975117][T11241] usb 10-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac
[  631.013245][T11241] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  631.056249][T11241] usb 10-1: Product: syz
[  631.060660][T11241] usb 10-1: Manufacturer: syz
[  631.109663][T11241] usb 10-1: SerialNumber: syz
[  631.134135][T11241] usb 10-1: config 0 descriptor??
[  631.248925][T14675] netlink: 'syz.3.2982': attribute type 1 has an invalid length.
[  631.405542][T11241] usb 10-1: USB disconnect, device number 4
[  631.553397][T14678] device veth1_macvtap left promiscuous mode
[  631.573395][T14678] device macsec0 entered promiscuous mode
[  631.710208][T14680] device macvlan2 entered promiscuous mode
[  632.741758][   T14] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  633.041601][    C1] net_ratelimit: 30 callbacks suppressed
[  633.297646][T14706] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2989'.
[  633.902209][   T14] usb 10-1: Using ep0 maxpacket: 16
[  633.913441][   T14] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  633.960581][   T14] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  633.971830][T14711] bridge1: port 1(veth3) entered blocking state
[  633.993792][   T14] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  633.993825][   T14] usb 10-1: Product: syz
[  634.013178][T14711] bridge1: port 1(veth3) entered disabled state
[  634.028987][   T14] usb 10-1: Manufacturer: syz
[  634.043491][   T14] usb 10-1: SerialNumber: syz
[  634.057349][T14711] device veth3 entered promiscuous mode
[  634.084785][   T14] usb 10-1: config 0 descriptor??
[  634.122821][   T14] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  634.133255][   T14] em28xx 10-1:0.0: DVB interface 0 found: bulk
[  634.329055][T14706] bridge1: port 2(veth5) entered blocking state
[  634.368827][T14706] bridge1: port 2(veth5) entered disabled state
[  634.400793][T14706] device veth5 entered promiscuous mode
[  634.715570][   T14] em28xx 10-1:0.0: unknown em28xx chip ID (0)
[  635.178243][T14735] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  635.766790][   T14] em28xx 10-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  635.831643][   T14] em28xx 10-1:0.0: board has no eeprom
[  636.048843][T14740] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2996'.
[  636.628486][T14757] netlink: 'syz.2.2999': attribute type 1 has an invalid length.
[  636.916173][T14757] 8021q: adding VLAN 0 to HW filter on device bond9
[  637.043074][T14697] em28xx 10-1:0.0: reading from i2c device at 0xe failed (error=-5)
[  637.111587][   T14] em28xx 10-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  637.135734][   T14] em28xx 10-1:0.0: dvb set to bulk mode.
[  637.169621][   T14] usb 10-1: USB disconnect, device number 5
[  637.185487][    T7] em28xx 10-1:0.0: Binding DVB extension
[  637.205506][   T14] em28xx 10-1:0.0: Disconnecting em28xx
[  637.229798][T14767] bond9: (slave geneve3): making interface the new active one
[  637.334732][T14767] bond9: (slave geneve3): Enslaving as an active interface with an up link
[  637.412139][ T7073] IPv6: ADDRCONF(NETDEV_CHANGE): bond9: link becomes ready
[  637.574984][    T7] em28xx 10-1:0.0: Registering input extension
[  637.603035][   T14] em28xx 10-1:0.0: Closing input extension
[  637.719175][   T14] em28xx 10-1:0.0: Freeing device
[  637.788274][T14788] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  638.438991][T14804] netlink: 180 bytes leftover after parsing attributes in process `syz.3.3009'.
[  638.561669][    C0] net_ratelimit: 40 callbacks suppressed
[  640.670784][T14794] loop9: detected capacity change from 0 to 16
[  640.748269][T14794] erofs: (device loop9): mounted with root inode @ nid 36.
[  641.393612][T14839] netlink: 'syz.3.3019': attribute type 1 has an invalid length.
[  641.651372][T14850] fuse: Bad value for 'fd'
[  641.672948][T14839] 8021q: adding VLAN 0 to HW filter on device bond1
[  641.705548][T14853] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3022'.
[  641.784796][T14841] bond1: (slave gretap1): making interface the new active one
[  641.831000][T14841] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  641.880836][T14844] netlink: 'syz.9.3024': attribute type 1 has an invalid length.
[  641.985731][T14862] fuse: Bad value for 'fd'
[  642.042477][T14844] 8021q: adding VLAN 0 to HW filter on device bond1
[  643.647927][    C1] net_ratelimit: 23 callbacks suppressed
[  645.419820][T14847] device team0 left promiscuous mode
[  645.425611][T14847] device team_slave_0 left promiscuous mode
[  645.442230][T14847] device team_slave_1 left promiscuous mode
[  645.507830][T14847] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  645.517598][T14847] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  645.528409][T14847] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  645.538571][T14847] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  645.634861][T14851] bond1: (slave veth1): Enslaving as an active interface with a down link
[  645.652052][ T7094] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  645.755493][T14854] 8021q: adding VLAN 0 to HW filter on device batadv1
[  645.793472][T14854] bond1: (slave batadv1): making interface the new active one
[  645.814596][T14854] device batadv1 entered promiscuous mode
[  645.820970][T14854] bond1: (slave batadv1): Enslaving as an active interface with an up link
[  645.890739][T14856] bond1: (slave veth3): Enslaving as an active interface with a down link
[  646.021000][T14855] 8021q: adding VLAN 0 to HW filter on device bond0
[  646.049672][T14855] 8021q: adding VLAN 0 to HW filter on device team0
[  646.089171][T14855] batman_adv: batadv0: Interface activated: dummy0
[  646.215650][ T7089] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  647.781867][T14901] fuse: Bad value for 'fd'
[  648.721626][    C0] net_ratelimit: 29 callbacks suppressed
[  652.246436][T14949] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  652.271690][T14949] 8021q: adding VLAN 0 to HW filter on device bond0
[  652.302925][T14949] bridge0: port 3(vlan2) entered blocking state
[  652.309383][T14949] bridge0: port 3(vlan2) entered forwarding state
[  652.384369][T14949] 8021q: adding VLAN 0 to HW filter on device team0
[  652.554058][T14962] bond0: (slave netdevsim0): Error: Device is in use and cannot be enslaved
[  652.579030][ T7035] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  652.610846][T14969] tipc: Started in network mode
[  652.644535][T14969] tipc: Node identity 6ee034506219, cluster identity 4711
[  652.727308][T14969] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  653.195867][T14944] loop3: detected capacity change from 0 to 512
[  653.921594][    C0] net_ratelimit: 32 callbacks suppressed
[  654.655566][T14984] bond0: (slave wlan1): Releasing backup interface
[  654.830079][ T4357] tipc: Node number set to 217658448
[  655.199422][T15002] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  655.289928][T15002] batman_adv: batadv0: Removing interface: batadv_slave_0
[  655.369856][T15002] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  655.401793][T15002] batman_adv: batadv0: Removing interface: batadv_slave_1
[  655.992288][T15008] 8021q: adding VLAN 0 to HW filter on device batadv0
[  657.294464][ T4287] Bluetooth: hci5: command 0x0406 tx timeout
[  659.131550][    C0] net_ratelimit: 31 callbacks suppressed
[  660.536790][ T7051] device batadv1 left promiscuous mode
[  661.670508][T15095] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3078'.
[  664.171762][    C0] net_ratelimit: 30 callbacks suppressed
[  666.314866][   T27] INFO: task syz.0.2547:13051 blocked for more than 143 seconds.
[  666.348084][T15149] kcov: kcov_task_exit: t = ffff888080af8000, kcov->t = ffff888080af8000
[  666.356915][T15156] kcov: kcov_task_exit: t = ffff8880892e9e00, kcov->t = ffff8880892e9e00
[  666.365996][T15158] kcov: kcov_task_exit: t = ffff888025d23c00, kcov->t = ffff888025d23c00
[  666.367500][    C0] virtqueue callback for ffff888025cfcc00 (ffffffff858ab7a0)
[  666.381985][    C0] No more buffers in queue
[  666.387360][    C0] Receiving skb proto 0x0800 len 52 type 0
[  666.393450][    C0] No more buffers in queue
[  666.398021][    C0] tcp_conntracks: 
[  666.398039][    C0] syn=0 ack=1 fin=1 rst=0 old=3 new=4
[  666.417878][T15151] kcov: kcov_task_exit: t = ffff8880892ebc00, kcov->t = ffff8880892ebc00
[  666.426916][T15160] kcov: kcov_task_exit: t = ffff888076d4bc00, kcov->t = ffff888076d4bc00
[  666.438702][T15157] kcov: kcov_task_exit: t = ffff888025d25a00, kcov->t = ffff888025d25a00
[  666.447607][T15159] kcov: kcov_task_exit: t = ffff888076d4da00, kcov->t = ffff888076d4da00
[  666.544730][ T7094] sd 0:0:1:0: cmd ffff888027da22e0 CDB: 0x2a
[  666.558370][ T4314] Added buffer head 0 to ffff88814164e600
[  666.565221][T15161] kcov: kcov_start: t = ffff8880892eda00, size = 524288, area = ffffc90022237000
[  666.574828][    C0] nf_conntrack: normal packet for ffff888072882180
[  666.582113][    C0] virtqueue callback for ffff888025cfcc00 (ffffffff858ab7a0)
[  666.589574][    C0] tcp_conntracks: 
[  666.589587][    C0] syn=0 ack=1 fin=0 rst=0 old=4 new=5
[  666.599392][    C0] No more buffers in queue
[  666.604735][    C0] eth0: xmit ffff88803c959dc0 42:01:0a:80:00:01
[  666.611016][    C0] Added buffer head 0 to ffff888025cfce00
[  666.616790][    C0] virtqueue callback for ffff888025cfce00 (ffffffff858ab890)
[  666.624404][    C0] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff88802f32aa98 is addr:fc00:: for cmd:0 at entry:ffff888056df6e00
[  666.637623][    C0] sctp: sctp_addr_wq_timeout_handler: this is on DAD, trying 500 sec later
[  666.649631][    C0] Sent skb ffff88803c959dc0
[  666.652647][ T7098] bond7: (slave erspan1): Send learning packet: mac 72:d1:4b:85:c1:e8 vlan 0
[  666.654345][    C0] No more buffers in queue
[  666.668130][    C0] Receiving skb proto 0x0800 len 52 type 0
[  666.669304][ T7053] bond2: (slave erspan1): Send learning packet: mac c6:31:93:78:d2:3c vlan 0
[  666.674009][    C0] No more buffers in queue
[  666.674060][    C0] tcp_conntracks: 
[  666.674072][    C0] syn=0 ack=1 fin=1 rst=0 old=5 new=6
[  666.701541][   T27]       Not tainted syzkaller #0
[  666.706557][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  666.715339][ T7094] Added buffer head 59 to ffff888025ce4e00
[  666.721691][    C1] nf_conntrack: new packet for ffff8880281e2000
[  666.728950][    C1] nf_nat: Already setup manip DST for ct ffff8880281e2000 (status bits 0x188)
[  666.731592][ T7094] sd 0:0:1:0: cmd ffff888027da26a0 CDB: 0x2a
[  666.737892][    C1] nf_nat: Already setup manip SRC for ct ffff8880281e2000 (status bits 0x188)
[  666.743850][   T27] task:syz.0.2547      state:D stack:28528 pid:13051 ppid:4271   flags:0x00004004
[  666.743894][   T27] Call Trace:
[  666.743902][   T27]  <TASK>
[  666.753454][    C1] nf_conntrack: new packet for ffff8880281e2900
[  666.771546][ T7094] Added buffer head 88 to ffff888025ce4e00
[  666.775230][    C1] nf_nat: Already setup manip DST for ct ffff8880281e2900 (status bits 0x188)
[  666.782462][T15167] kcov: kcov_start: t = ffff88802a56bc00, size = 524288, area = ffffc90022638000
[  666.789978][    C1] nf_nat: Already setup manip SRC for ct ffff8880281e2900 (status bits 0x188)
[  666.799052][    C1] virtqueue callback for ffff888025ce4e00 (ffffffff85445db0)
[  666.799080][    C1] sd 0:0:1:0: cmd ffff888027da26a0 response 0 status 0x0 sense_len 0
[  666.799106][    C1] No more buffers in queue
[  666.802674][   T27]  __schedule+0x107f/0x4030
[  666.808280][    C1] virtqueue callback for ffff888025ce4e00 (ffffffff85445db0)
[  666.815673][   T27]  ? release_firmware_map_entry+0x187/0x187
[  666.823908][    C1] sd 0:0:1:0: cmd ffff888027da22e0 response 0 status 0x0 sense_len 0
[  666.823934][    C1] No more buffers in queue
[  666.829022][    C0] No more buffers in queue
[  666.833575][    C1] nf_nat: Already setup manip SRC for ct ffff8880281e2900 (status bits 0x188)
[  666.841735][ T4314] nf_conntrack: normal packet for ffff888078bbcc00
[  666.886858][ T4549] bond1: (slave veth1): Send learning packet: mac d2:95:45:21:a5:33 vlan 0
[  666.911588][ T7098] nf_conntrack: new packet for ffff888072883b00
[  666.918943][ T7098] nf_nat: Already setup manip DST for ct ffff888072883b00 (status bits 0x188)
[  666.919921][T15161] nf_conntrack: new packet for ffff888029349b00
[  666.927909][ T7098] nf_nat: Already setup manip SRC for ct ffff888072883b00 (status bits 0x188)
[  666.935051][T15161] nf_conntrack: nf_ct_destroy(ffff888029349b00)
[  666.935072][T15161] nf_conntrack: nf_ct_destroy: returning ct=ffff888029349b00 to slab
[  666.948886][   T27]  ? lock_chain_count+0x20/0x20
[  666.966835][ T4549] bond1: (slave batadv1): Send learning packet: mac fa:c5:13:f9:4f:f0 vlan 0
[  666.975115][ T7053] nf_conntrack: new packet for ffff888019b93680
[  666.982884][ T7053] nf_nat: Already setup manip DST for ct ffff888019b93680 (status bits 0x188)
[  666.987859][   T27]  ? _raw_spin_lock_irq+0xb7/0xf0
[  666.991827][ T7053] nf_nat: Already setup manip SRC for ct ffff888019b93680 (status bits 0x188)
[  667.013554][ T4549] bond1: (slave veth3): Send learning packet: mac 8a:23:2d:5c:9b:b0 vlan 0
[  667.028423][   T27]  ? _raw_spin_lock_irqsave+0x100/0x100
[  667.043153][   T27]  ? rwsem_down_read_slowpath+0x529/0x880
[  667.048999][   T27]  schedule+0xb9/0x180
[  667.053797][    C0] virtqueue callback for ffff88814164e600 (ffffffff84767210)
[  667.061653][    C0] virtqueue interrupt with no work for ffff88814164e400
[  667.061908][ T4259] nf_conntrack: normal packet for ffff888072882180
[  667.068602][    C0] virtqueue interrupt with no work for ffff88814164e200
[  667.082924][ T4314] Added buffer head 0 to ffff88814164e600
[  667.083264][ T4259] tcp_conntracks: 
[  667.089182][ T4259] syn=0 ack=1 fin=0 rst=0 old=6 new=7
[  667.101721][   T27]  schedule_preempt_disabled+0xf/0x20
[  667.107185][   T27]  rwsem_down_read_slowpath+0x513/0x880
[  667.122470][   T27]  ? down_write_killable_nested+0x90/0x90
[  667.123131][ T7089] bond5: (slave syz_tun): Periodic Machine: Port=1, Last State=3, Curr State=4
[  667.128260][   T27]  ? read_lock_is_recursive+0x10/0x10
[  667.128301][   T27]  ? __rwlock_init+0x140/0x140
[  667.151525][    C0] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff88802f32aa98 is addr:fc00:: for cmd:0 at entry:ffff888056df6e00
[  667.166412][    C0] sctp: sctp_addr_wq_timeout_handler: this is on DAD, trying 500 sec later
[  667.188784][   T27]  ? ksys_sync+0x170/0x170
[  667.191704][ T4259] No more buffers in queue
[  667.198629][ T4259] eth0: xmit ffff888065682b40 42:01:0a:80:00:01
[  667.198903][   T27]  down_read+0x94/0x2d0
[  667.205226][ T4259] Added buffer head 2 to ffff888025cfd200
[  667.205251][    C1] virtqueue callback for ffff888025cfd200 (ffffffff858ab890)
[  667.205339][    C1] Sent skb ffff888065682b40
[  667.205384][    C1] No more buffers in queue
[  667.233193][ T4314] nf_conntrack: normal packet for ffff888019b92480
[  667.242140][ T7089] bond3: (slave geneve2): Send learning packet: mac 4e:82:34:5e:1c:fa vlan 0
[  667.251324][ T7089] nf_conntrack: new packet for ffff888072883200
[  667.258470][ T7089] nf_nat: Already setup manip DST for ct ffff888072883200 (status bits 0x188)
[  667.261394][T15172] kcov: kcov_start: t = ffff88807d2a0000, size = 524288, area = ffffc90022a39000
[  667.267434][ T7089] nf_nat: Already setup manip SRC for ct ffff888072883200 (status bits 0x188)
[  667.286834][   T27]  ? ksys_sync+0x170/0x170
[  667.288675][ T7098] bond5: (slave syz_tun): Periodic Machine: Port=1, Last State=4, Curr State=3
[  667.291858][ T4314] nf_conntrack: normal packet for ffff888078bbc900
[  667.308809][   T27]  iterate_supers+0xa4/0x1d0
[  667.314365][   T27]  ksys_sync+0x9d/0x170
[  667.325172][   T27]  ? sync_filesystem+0x220/0x220
[  667.334868][   T27]  ? syscall_enter_from_user_mode+0x21/0x80
[  667.345555][   T27]  ? lockdep_hardirqs_on+0x94/0x140
[  667.356855][   T27]  __ia32_sys_sync+0xa/0x10
[  667.361656][    C0] bridge0: port 3(vlan2) forward delay timer
[  667.361791][    C0] bridge0: port 3(vlan2) event 16
[  667.361929][    C0] bridge0: br_fill_info event 16 port vlan2 master bridge0
[  667.403316][   T27]  do_syscall_64+0x4c/0xa0
[  667.413601][   T27]  ? clear_bhb_loop+0x60/0xb0
[  667.431099][   T27]  ? clear_bhb_loop+0x60/0xb0
[  667.441791][ T7089] bond5: (slave syz_tun): update lacpdu: actor port state 4d
[  667.442874][   T27]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  667.449567][ T7089] bond5: (slave syz_tun): Sent LACPDU on port 1
[  667.481351][   T27] RIP: 0033:0x7fc26d19e199
[  667.492716][T15140] kcov: kcov_task_exit: t = ffff888025e78000, kcov->t = ffff888025e78000
[  667.501913][   T27] RSP: 002b:00007fc26dfdd028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2
[  667.516278][   T27] RAX: ffffffffffffffda RBX: 00007fc26d426090 RCX: 00007fc26d19e199
[  667.525119][T15148] kcov: kcov_task_exit: t = ffff888053bcda00, kcov->t = ffff888053bcda00
[  667.538331][   T27] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  667.559533][T15161] kcov: kcov_task_exit: t = ffff8880892eda00, kcov->t = ffff8880892eda00
[  667.568446][   T27] RBP: 00007fc26d426090 R08: 0000000000000000 R09: 0000000000000000
[  667.583215][ T7089] bond1: (slave gretap1): Send learning packet: mac d6:d2:28:b1:36:a1 vlan 0
[  667.587783][   T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  667.603250][T15167] kcov: kcov_task_exit: t = ffff88802a56bc00, kcov->t = ffff88802a56bc00
[  667.605094][T15172] kcov: kcov_task_exit: t = ffff88807d2a0000, kcov->t = ffff88807d2a0000
[  667.630899][   T27] R13: 00007fc26d426128 R14: 00007fc26d426090 R15: 00007ffeb9978d38
[  667.648517][   T27]  </TASK>
[  667.652091][T15155] kcov: kcov_task_exit: t = ffff888074c51e00, kcov->t = ffff888074c51e00
[  667.656512][   T27] 
[  667.656512][   T27] Showing all locks held in the system:
[  667.681656][    C0] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff88802f32aa98 is addr:fc00:: for cmd:0 at entry:ffff888056df6e00
[  667.694826][    C0] sctp: sctp_addr_wq_timeout_handler: this is on DAD, trying 500 sec later
[  667.713585][   T27] 1 lock held by rcu_tasks_kthre/12:
[  667.727949][   T27]  #0: ffffffff8d92e230 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0
[  667.758976][   T27] 1 lock held by rcu_tasks_trace/13:
[  667.761628][    C1] nf_conntrack: new packet for ffff8880281e2900
[  667.770665][    C1] nf_nat: Already setup manip DST for ct ffff8880281e2900 (status bits 0x188)
[  667.779447][   T27]  #0: ffffffff8d92ea50 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0
[  667.779747][    C1] nf_nat: Already setup manip SRC for ct ffff8880281e2900 (status bits 0x188)
[  667.799889][    C1] nf_nat: Already setup manip SRC for ct ffff8880281e2900 (status bits 0x188)
[  667.803076][   T27] 1 lock held by khungtaskd/27:
[  667.809719][    C1] nf_conntrack: new packet for ffff8880281e2000
[  667.820059][    C1] nf_nat: Already setup manip DST for ct ffff8880281e2000 (status bits 0x188)
[  667.824876][   T27]  #0: 
[  667.828987][    C1] nf_nat: Already setup manip SRC for ct ffff8880281e2000 (status bits 0x188)
[  667.861716][   T27] ffffffff8d92d8a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290
[  667.880644][   T27] 2 locks held by getty/4027:
[  667.892848][   T27]  #0: ffff88814d8ff098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70
[  667.920588][   T27]  #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41e/0x1360
[  667.945133][   T27] 2 locks held by kworker/u4:8/4549:
[  667.956190][   T27]  #0: ffff888018479138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160
[  667.979859][   T27]  #1: ffffc900047cfd00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160
[  668.000112][   T27] 2 locks held by kworker/u4:69/7090:
[  668.006202][   T27]  #0: ffff888018479138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160
[  668.031848][   T27]  #1: ffffc9000c407d00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160
[  668.043985][   T27] 2 locks held by syz.6.1384/9010:
[  668.049212][   T27]  #0: ffff8880529f60e0 (&type->s_umount_key#116){++++}-{3:3}, at: deactivate_super+0xa0/0xd0
[  668.053827][    C0] virtqueue callback for ffff88814164e600 (ffffffff84767210)
[  668.059972][   T27]  #1: 
[  668.067068][    C0] virtqueue interrupt with no work for ffff88814164e400
[  668.067090][    C0] virtqueue interrupt with no work for ffff88814164e200
[  668.076888][ T4314] Added buffer head 0 to ffff88814164e600
[  668.090203][   T27] ffffffff8dbcc888 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_shutdown_threads+0x4f/0x1a0
[  668.099938][   T27] 1 lock held by syz.0.2547/13051:
[  668.105603][   T27]  #0: ffff8880529f60e0 (&type->s_umount_key#116){++++}-{3:3}, at: iterate_supers+0xa4/0x1d0
[  668.116233][   T27] 1 lock held by syz.8.2748/13700:
[  668.121462][   T27]  #0: ffff8880529f60e0 (&type->s_umount_key#116){++++}-{3:3}, at: iterate_supers+0xa4/0x1d0
[  668.134945][   T27] 1 lock held by syz.8.2748/13717:
[  668.140302][   T27]  #0: ffff8880529f60e0 (&type->s_umount_key#116){++++}-{3:3}, at: iterate_supers+0xa4/0x1d0
[  668.162864][   T27] 1 lock held by sed/15179:
[  668.167548][   T27] 
[  668.169906][   T27] =============================================
[  668.169906][   T27] 
[  668.181935][ T7035] bond7: (slave erspan1): Send learning packet: mac 72:d1:4b:85:c1:e8 vlan 0
[  668.190813][ T7035] nf_conntrack: new packet for ffff888072883b00
[  668.191632][    C1] percpu_ref_switch_to_atomic_rcu: global 9223372036854775801 percpu 8
[  668.197176][ T7035] nf_nat: Already setup manip DST for ct ffff888072883b00 (status bits 0x188)
[  668.206225][    C1] percpu_ref_switch_to_atomic_rcu: global 9223372036854773305 percpu 2504
[  668.215103][ T7035] nf_nat: Already setup manip SRC for ct ffff888072883b00 (status bits 0x188)
[  668.227169][ T7090] bond1: (slave veth1): Send learning packet: mac d2:95:45:21:a5:33 vlan 0
[  668.232793][    C0] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff88802f32aa98 is addr:fc00:: for cmd:0 at entry:ffff888056df6e00
[  668.243720][ T7090] bond1: (slave batadv1): Send learning packet: mac fa:c5:13:f9:4f:f0 vlan 0
[  668.254656][    C0] sctp: sctp_addr_wq_timeout_handler: this is on DAD, trying 500 sec later
[  668.278511][   T27] NMI backtrace for cpu 0
[  668.282905][   T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0
[  668.290225][   T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  668.300465][   T27] Call Trace:
[  668.303870][   T27]  <TASK>
[  668.304020][ T7090] bond1: (slave veth3): Send learning packet: mac 8a:23:2d:5c:9b:b0 vlan 0
[  668.306902][   T27]  dump_stack_lvl+0x188/0x24e
[  668.306936][   T27]  ? irq_work_queue+0xb8/0x140
[  668.325038][   T27]  ? show_regs_print_info+0x12/0x12
[  668.330290][   T27]  ? load_image+0x410/0x410
[  668.332271][ T7090] bond2: (slave erspan1): Send learning packet: mac c6:31:93:78:d2:3c vlan 0
[  668.334898][   T27]  ? vprintk_emit+0x59f/0x6a0
[  668.334936][   T27]  ? printk_sprint+0x460/0x460
[  668.353291][   T27]  nmi_cpu_backtrace+0x3e6/0x460
[  668.358293][   T27]  ? nmi_trigger_cpumask_backtrace+0x450/0x450
[  668.359736][ T7090] nf_conntrack: new packet for ffff888019b93680
[  668.364556][   T27]  ? _printk+0xda/0x130
[  668.364581][   T27]  ? load_image+0x410/0x410
[  668.364602][   T27]  ? load_image+0x410/0x410
[  668.364623][   T27]  ? nmi_trigger_cpumask_backtrace+0xf3/0x450
[  668.370863][ T7090] nf_nat: Already setup manip DST for ct ffff888019b93680 (status bits 0x188)
[  668.375033][   T27]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[  668.379611][ T7090] nf_nat: Already setup manip SRC for ct ffff888019b93680 (status bits 0x188)
[  668.384094][   T27]  nmi_trigger_cpumask_backtrace+0x1d4/0x450
[  668.384126][   T27]  watchdog+0xf0e/0xf50
[  668.384168][   T27]  ? watchdog+0x1ed/0xf50
[  668.384194][   T27]  kthread+0x29d/0x330
[  668.433461][   T27]  ? hungtask_pm_notify+0x40/0x40
[  668.438531][   T27]  ? kthread_blkcg+0xd0/0xd0
[  668.443168][   T27]  ret_from_fork+0x1f/0x30
[  668.447763][   T27]  </TASK>
[  668.451896][   T27] Sending NMI from CPU 0 to CPUs 1:
[  668.457404][    C1] NMI backtrace for cpu 1
[  668.457416][    C1] CPU: 1 PID: 7035 Comm: kworker/u4:27 Not tainted syzkaller #0
[  668.457433][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  668.457442][    C1] Workqueue: krdsd rds_connect_worker
[  668.457535][    C1] RIP: 0010:unwind_next_frame+0x1212/0x1fd0
[  668.457564][    C1] Code: c1 48 c1 f9 02 48 c1 e8 3f 48 01 c8 48 83 e0 fe 4c 8d 7c 45 00 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 <84> c0 75 27 49 63 07 4c 01 f8 49 8d 4f 04 4c 39 f0 48 0f 46 e9 49
[  668.457577][    C1] RSP: 0018:ffffc9000c177280 EFLAGS: 00000a02
[  668.457590][    C1] RAX: 0000000000000000 RBX: ffffc9000c177328 RCX: dffffc0000000000
[  668.457601][    C1] RDX: ffffffff8f8b3cc4 RSI: ffffffff8f17b31c RDI: 0000000000000001
[  668.457612][    C1] RBP: ffffffff8f17b340 R08: 000000000000000a R09: 0000000000000002
[  668.457622][    C1] R10: dffffc0000000000 R11: fffff5200182ee71 R12: ffffffff8f17b33c
[  668.457633][    C1] R13: ffffffff8f17b340 R14: ffffffff81d2fbea R15: ffffffff8f17b340
[  668.457644][    C1] FS:  0000000000000000(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000
[  668.457658][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  668.457669][    C1] CR2: 00007feee6c0b286 CR3: 000000000d68e000 CR4: 00000000003506e0
[  668.457684][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  668.457693][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  668.457704][    C1] Call Trace:
[  668.457709][    C1]  <TASK>
[  668.457718][    C1]  ? slab_post_alloc_hook+0x4b/0x490
[  668.457738][    C1]  ? stack_trace_save+0xf0/0xf0
[  668.457800][    C1]  arch_stack_walk+0x10c/0x140
[  668.457844][    C1]  ? slab_post_alloc_hook+0x4b/0x490
[  668.457862][    C1]  stack_trace_save+0xa6/0xf0
[  668.457880][    C1]  ? stack_trace_snprint+0xe0/0xe0
[  668.457898][    C1]  ? __stack_depot_save+0x35/0x480
[  668.457939][    C1]  ? __lock_acquire+0x142d/0x7ea0
[  668.457959][    C1]  ? memset+0x1e/0x40
[  668.457974][    C1]  kasan_set_track+0x4b/0x70
[  668.457992][    C1]  ? kasan_set_track+0x4b/0x70
[  668.458009][    C1]  ? __kasan_slab_alloc+0x6b/0x80
[  668.458027][    C1]  ? slab_post_alloc_hook+0x4b/0x490
[  668.458064][    C1]  __kasan_slab_alloc+0x6b/0x80
[  668.458084][    C1]  slab_post_alloc_hook+0x4b/0x490
[  668.458100][    C1]  ? slab_pre_alloc_hook+0x8c/0x300
[  668.458115][    C1]  ? slab_pre_alloc_hook+0x8c/0x300
[  668.458132][    C1]  kmem_cache_alloc+0x18b/0x2f0
[  668.458147][    C1]  ? inet_bind2_bucket_create+0x32/0x2f0
[  668.458193][    C1]  inet_bind2_bucket_create+0x32/0x2f0
[  668.458208][    C1]  ? inet_bind_bucket_create+0x17b/0x230
[  668.458226][    C1]  inet_csk_get_port+0x10a0/0x1880
[  668.458257][    C1]  __inet_bind+0x5b1/0xa50
[  668.458279][    C1]  kernel_bind+0x132/0x1b0
[  668.458316][    C1]  ? put_user_ifreq+0xb0/0xb0
[  668.458342][    C1]  rds_tcp_conn_path_connect+0x479/0x6e0
[  668.458360][    C1]  ? rds_tcp_state_change+0x1f0/0x1f0
[  668.458378][    C1]  ? __lock_acquire+0x7ea0/0x7ea0
[  668.458397][    C1]  ? read_lock_is_recursive+0x10/0x10
[  668.458416][    C1]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  668.458435][    C1]  rds_connect_worker+0x1ce/0x280
[  668.458451][    C1]  ? process_one_work+0x7b4/0x1160
[  668.458469][    C1]  process_one_work+0x8ab/0x1160
[  668.458491][    C1]  ? worker_detach_from_pool+0x240/0x240
[  668.458510][    C1]  ? _raw_spin_lock_irq+0xb7/0xf0
[  668.458524][    C1]  ? _raw_spin_lock_irqsave+0x100/0x100
[  668.458540][    C1]  ? wq_worker_running+0x97/0x190
[  668.458554][    C1]  worker_thread+0xaf5/0x12a0
[  668.458583][    C1]  kthread+0x29d/0x330
[  668.458595][    C1]  ? worker_clr_flags+0x1a0/0x1a0
[  668.458610][    C1]  ? kthread_blkcg+0xd0/0xd0
[  668.458624][    C1]  ret_from_fork+0x1f/0x30
[  668.458649][    C1]  </TASK>
[  668.801584][    C1] nf_conntrack: new packet for ffff8880281e2900
[  668.805129][    C0] wireguard: wg1: Handshake for peer 40 (127.0.0.1:20003) did not complete after 5 seconds, retrying (try 14)
[  668.810305][    C1] nf_nat: Already setup manip DST for ct ffff8880281e2900 (status bits 0x188)
[  668.810372][    C1] nf_nat: Already setup manip SRC for ct ffff8880281e2900 (status bits 0x188)
[  668.815985][    C0] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff88802f32aa98 is addr:fc00:: for cmd:0 at entry:ffff888056df6e00
[  668.820043][    C1] nf_nat: Already setup manip SRC for ct ffff8880281e2900 (status bits 0x188)
[  668.823019][    C0] sctp: sctp_addr_wq_timeout_handler: this is on DAD, trying 500 sec later
[  668.832766][ T7090] nf_conntrack: normal packet for ffff888019b93b00
[  668.877872][   T27] Kernel panic - not syncing: hung_task: blocked tasks
[  668.877890][   T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0
[  668.877908][   T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  668.877918][   T27] Call Trace:
[  668.877926][   T27]  <TASK>
[  668.877934][   T27]  dump_stack_lvl+0x188/0x24e
[  668.877962][   T27]  ? memcpy+0x3c/0x60
[  668.877981][   T27]  ? show_regs_print_info+0x12/0x12
[  668.878002][   T27]  ? load_image+0x410/0x410
[  668.878030][   T27]  panic+0x2d3/0x710
[  668.878054][   T27]  ? schedule_preempt_disabled+0x20/0x20
[  668.878079][   T27]  ? bpf_jit_dump+0xd0/0xd0
[  668.878103][   T27]  ? __irq_work_queue_local+0x12c/0x190
[  668.878132][   T27]  ? nmi_trigger_cpumask_backtrace+0x35b/0x450
[  668.878156][   T27]  ? nmi_trigger_cpumask_backtrace+0x360/0x450
[  668.878180][   T27]  watchdog+0xf4d/0xf50
[  668.878203][   T27]  ? watchdog+0x1ed/0xf50
[  668.878229][   T27]  kthread+0x29d/0x330
[  668.878244][   T27]  ? hungtask_pm_notify+0x40/0x40
[  668.878272][   T27]  ? kthread_blkcg+0xd0/0xd0
[  668.878290][   T27]  ret_from_fork+0x1f/0x30
[  668.878324][   T27]  </TASK>
[  668.881840][   T27] Kernel Offset: disabled
[  669.014258][   T27] Rebooting in 86400 seconds..