last executing test programs:

32m2.985437595s ago: executing program 32 (id=67):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020)
r1 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r1, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e)
dup(r1)
openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000009, 0x10010, 0xffffffffffffffff, 0x85f0d000)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x25, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x1, 0x0, 0x8}, 0x9c)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCMIWAIT(r2, 0x545c, 0x3000000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x1, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newtaction={0x108, 0x30, 0xffff, 0xfffffffe, 0x25dfdbfc, {}, [{0xf4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x5, 0x0, 0x0, 0x0, {0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x4}, 0x0, 0x7}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x84, 0x2, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x5, 0xffffffffffffffff, 0x9, 0x6}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1f3a, 0x8}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x21c6, 0x3}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1b02, 0x10000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x8, 0xa7, 0x7, 0x6, 0x7}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x108}}, 0x0)

31m5.491669465s ago: executing program 33 (id=175):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, 0x0, 0x4000850)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8923, &(0x7f0000000040)={'bond0\x00', 0x1001})
sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x81)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000100)='sched_switch\x00', r6, 0x0, 0xed}, 0x18)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x3c1, 0x3, 0x560, 0x0, 0xffffff80, 0x178, 0x330, 0x178, 0x490, 0x230, 0x258, 0x490, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x308, 0x330, 0x340, {0x1e0002a8, 0x7203000000000c00}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}]}}, @common=@unspec=@cluster={{0x30}}]}, @common=@unspec=@AUDIT={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_bridge\x00', 'geneve1\x00'}, 0x0, 0x100, 0x160, 0x0, {}, [@common=@ah={{0x30}}, @common=@ipv6header={{0x28}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private0, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x1612b8f1d59f0950, 0x0, 0x39)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x7b, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8)
write$P9_RVERSION(r0, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x15)
r8 = dup(r0)
write$FUSE_BMAP(r8, &(0x7f0000000000)={0x18}, 0x18)
write$FUSE_INIT(r8, &(0x7f0000000200)={0x50}, 0x50)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r6, @ANYBLOB="e5d7cccf5e76a1ea63b264883a0000", @ANYRESHEX=r8, @ANYBLOB=',cache=fscache,\x00'])

30m6.223146249s ago: executing program 34 (id=284):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000840)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x4, 0x6, 0x80, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={0x0}, 0x18)
syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="757466383d312c757466383d312c756e695f786c6174653d312c636f6465706167653d3835322c696f636861727365743d69736f383835392d372c756e695f786c6174653d302c73686f72746e616d653d77696e39352c696f636861727365743d6b6f69382d752c726f6469722c6e6f6e756d7461696c3d302c696f636861727365740500703733372c6e6f6e756d7461696c3d302c757466383d302c73686f72746e616d653d6d697865642c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c00"], 0x1, 0x2ad, &(0x7f0000000580)="$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")
pread64(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

28m8.005947358s ago: executing program 35 (id=478):
mknod(&(0x7f00000000c0)='./file0\x00', 0x8001414, 0x0)
r0 = open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01)
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0)
landlock_create_ruleset(0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0xb}, {0x5, 0x2, 0x13, 0x2}], 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
r4 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x108000)
ioctl$LOOP_SET_CAPACITY(r4, 0x4c07)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x24, 0x0, 0x201, 0xfffffffe, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x10000}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000002040)='ns/uts\x00')
getpgid(0x0)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000500), 0x80000, 0x0)
ioctl$TIOCVHANGUP(r6, 0x5437, 0x2)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r6, {0xb0}}, './file0\x00'})
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x448, 0x278, 0x168, 0x9, 0x0, 0xb, 0x378, 0x250, 0x250, 0x378, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x230, 0x278, 0x0, {0x0, 0x28e}, [@common=@inet=@hashlimit3={{0x158}, {'veth1_to_batadv\x00', {0x0, 0x7ff, 0x0, 0x0, 0x0, 0x6, 0x1000}}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}, {{0x278}}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)

24m19.346939511s ago: executing program 36 (id=891):
syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000240)='./file0\x00', 0x18000, &(0x7f0000002f40)=ANY=[@ANYRES8=0x0, @ANYRES64, @ANYRES16=0x0, @ANYRESDEC, @ANYRES32, @ANYRES32], 0x1, 0x2ee, &(0x7f00000006c0)="$eJzs3M9PE1sUwPHTH5S2BMri5b28l7xwoxvdTKC6VhoDibGJBKnxR2IywFSbji2ZaTA1RnTl1vhHuCAs2ZEo/wAbd7px446NiQtZGMd0OkNpGUBKaRG+n4TMYe49nXtnBnLuhGHzzuvHxbyt5fWKhONKQiIiWyLDEhZfyNuG3TgmO72QiwPfPv5/6+69G5lsdmJaqcnMzKW0Umpo5N2TZwmv21q/bAw/2Pya/rLx98a/mz9nHhVsVbBVqVxRupotf67os6ah5gt2UVNqyjR021CFkm1Y9fZyvT1vlhcWqkovzQ8mFyzDtpVeqqqiUVWVsqpYVRV5qBdKStM0NZgUHCS3PD2tZ9pMnuvwYHBMLCujR0Qksaslt9yTAQEAgJ5qrf/DojpZ/6+cW68M3F4d8ur/tVhQ/X/5U/2zmur/uIgE1v/+8QPrf/1w9f/uiuhsOVL9j5NhJLZrV6gR1hqtjJ70fn5dL++vjLoB9T8AAAAAAAAAAAAAAAAAAAAAAH+CLcdJOY6T8rf+V7+IxEXE/z4gNSIiV3swZHTQEa4/ToHGi3vRIRHz1WJuMVffeh3WRcQUQ0YlJT/c+8FTi/03j1TNsLw3l7z8pcVcxG3J5KXg5o9Jqk9a8x1n8np2YkzVNef3SXJnflpS8ldwfjowPyYXzu/I1yQlH+akLKbMu+No5D8fU+razWxLfsLtBwAAAADAaaCpbYHrd03bq72ev72+bn0+EGmsr0cD1+dR+S/a27kDAAAAAHBW2NWnRd00DWufICEH92k/iB7TJ/sz/N0s/28Zjm+m+wT+wZua4t7Ojp+W0CFOyx5BWNrJGqnNRh11Fv5jo736yNR4965g0zD+efP2e+cOcWU1fsBM2w8i+98AfV37BQQAAACgaxpFv79nvLcDAgAAAAAAAAAAAAAAAAAAAAAAAAAAAADgDOrGv0nr9RwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAk+JXAAAA//+qDgR1")
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
accept4$unix(r1, &(0x7f0000000340)=@abs, &(0x7f0000000180)=0x6e, 0x0)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
write(r1, 0x0, 0x640270e0988cb8c2)
r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0xac, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x98, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xac}}, 0x0)

23m6.415061279s ago: executing program 37 (id=1035):
syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000240)='./file0\x00', 0x18000, &(0x7f0000002f40)=ANY=[@ANYRES8=0x0, @ANYRES64, @ANYRES16=0x0, @ANYRESDEC, @ANYRES32, @ANYRES32], 0x1, 0x2ee, &(0x7f00000006c0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
accept4$unix(r1, &(0x7f0000000340)=@abs, &(0x7f0000000180)=0x6e, 0x0)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
write(r1, 0x0, 0x640270e0988cb8c2)
r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0xac, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x98, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xac}}, 0x0)

21m56.035897485s ago: executing program 38 (id=1183):
syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f0000000300)=ANY=[@ANYBLOB="6a6f75726e616c5f6173796e635f636f6d6d69742c6865617274626561743d6e6f6e652c6c6f63616c666c6f636b732c696e6f646536342c6c6f63616c616c6c6f633d31383434363734343037333730393535313631302c6e6f61636c2c007ebec1e66f524c6371cc70bd"], 0x1, 0x4703, &(0x7f0000004800)="$eJzs212IXFcBB/BzJ6vZpMl2P9ImafoxSQQXLcumT9X6ENeqjabNh7bVVFlnN9vN6uzMujujBYPUIIiCoARBxQ+qQulLLYiBvtQiFPxAWoVSUbS+iBSq4INBG+jKzNybnXtntneyk7S0/f2gnb3n3nPumf3vPXfOPZNCrHZqYaW4sFIsVYrV2ftXbil+rlquL86FwqvktT4/vbkSOcn+tXPkfR/4yD23hPCHY1/70Orq6mpoGA5dHWj7+fy/T8+2vyYKmTqNdru31vLH+iMv/fwtr3REnhMhhB0d/WrYFEL42C9C2BxCGInLRuPXLSGEbSGEKITw6G/+9ePBfrrQ5uy9Lzx37MzhfWemHn/smQvzR9c9MArhu+XdN88vvrh/023Pv+MynR4AAF7RB48fufvo5IHwZBSGzg10fl7fGb8mn4/vfNun7np4YG3/Kr3Z9CqGCgAAABlr8//h6OUu63XJylqyJPjEAyfufipa229i+/p26K4jt79/8kC8/ht17L81Lvrnezc111Cz677Z9d+RTP3u679r53n4q8/+svLWjfc/6V9y3uEQFSZS24XCxEQIx6Za27uirYVydaX2zvur9crJjZ/3jSKdf3b1fm1Bv9f8RzPV89b/d3/i8z/bMtDPOxgL2b/axnax80+ZLtL5rz+W/+RLUU/5j2Xq5eV/x9Pbz/9qcz/vIHtGLkU6/9aFuK/9gGJrAGjk/82B/Px3ZNrPy//7U+cePbGB7/80xpnhqNHXwdQI8HJcvs5XmMhI598KIjV0xr/I9a7//2XyvybTfl7+d1b/8bu/9XH/X2/8H5/qp803j3T+rSCKqSPWrv+RQv71f22m/bz8f3vqz89+sq97dWf+jf6Pu//3JJ1/fCNOD57N32Sv4//OTPt5+e8au++hhQ30+8Nb4n4ORWGs7Vun5xq3sKG19ermlKaxe2kDJ3kTSOff+q2lLp2h1kvz+h/OH/93ZdrPy/+hPV9/z+m+vv/bffyfNP73JJ3/lmbZpeT/Uib/3Zn28/L/4em//+W+yzz+N7YPyr8n6fy3duxfe/5T6Gn+d12mft7zn32jTz3y1z7m/0n/kvMmz3+S5xDjUev5D92l879q3eN6vf/vydTLu/6/9Z/nn97fz/gfDXoC0Id0/ttahV0mgL3mf32m/bz8v3DPlz/+pw3M/5qf+AaT/Nvm/5tb5UeN/z1J57+9VZj6x1APNv/fvP9Hnbn/N5P/DZn28/K/cGhi4CuX+f7f6P94l0fZdErnP7TucY38f9/D/f/GTL28/L+496cv3tzX5/8QJs31Nyyd/9XrHte8/gfz878pUy8v/+9849dPPNhH/9/eR12y+bfu9anLKf5s3uv8v5hpPy//H42fP7v/Csz/bnX/70k6/9aq+aXkn53/7820n5f/9478YHngCjz/uUP+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGzIavw6HqDCR2i4UJiZCGIu3d4Wt0Uzp5PRMuTr7mZUQdsTlxTAazZerM6Xy9EKlenJuulQuV2dDuCbevyMMRivlam16sbR07cW2tkSn5krLtZm5Ui2EsDMuvz5sT9qaWagtlpaaxyZ1ropKn61Xa6WJ+srccth9sXxbUj6/XK0vXXexrasL1eWlU6XK9MmF5XdPTk5Ohj0X+zwSzT1Qm6vUWr1t7W3USeoOR21vprn7hrbzfbpaX66Uys3yG9vqlKuzpXJbnZvazldbrldmS7W56XJ1Pjlfsa1u23tr7t4b7xsPI6n3l9TNOhi/3n7o+EePHz7Qsb8YpfOu1BfnJrd3/5sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4I3rydve9e0QwkBrqxBCOJj8EMX/pZy994Xnjp05vO/M1OOPPXNh/mi3YwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4PztwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYuZ+XKro4DsBnxve+FkgpbYRcBoaI6E7Cgn4RSeU1smWb1kGtEjIoCgwjWhYEQVC7qCBoFVT+BVELl62qTS1aGERQMTqTlzvCDS90zHkeGM4Mc++ZLwzcO3M+hwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALB+nN2x2JW1l3ZtXtq6+0PozM/9H0IYTZb3P+/tCD0hhK9fZk6HVdpCT1P/bybnxstXTX7v7R9/eH00WXv9xXeL63aHJB1qON6ZpOnQ0Nr736juDD6bHkxCSGMXQhQLY0/O1EIIHbELIYqfH+cvZr/v/8UuhCj6P9ztyu5/LXYhRLF196e+Wv6MR/Wcr18YbPzvb/UI3sYjOuvQ25NX3qVuauW9zN//k3zzPlgNsyeOvH8euwiimZ2bOhq7BgAA4O861yL/D1uW9+9fTkJPdzn3/9aU//c29b96/r/i3vYbYzNthRDbSmOT2fHwvnb63PhODVy9/bpmvKeq5P/VJv+vNvl/tcn/q03+X23yfzKv5P+V9PjmnsUXsYsgGvk/AABUz6HjE1P14ZHs5X/Tj85yXt+Xt/U8T39wa3rgUcO4kfzw33b42MSBg8Mj+X0vDwiurP+QLp39ns/3aG4Lk03zLlqt/9D7dGH+Wmf5E/U/nL9R1Fdc1/oPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAvdueehkEwCsPod1sRtdGqaMLCT4IPNDAiACnMaEAHEwZgIAQUMJBzlnuTZ3kBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA5/tXeV18f2mM9Foj0lR22bV/jqfZz9y3w/I+e9y4FQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADZ24EAGAAAAQJi/dR7tBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4KkAAAD//8Oayzs=")
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f0000000480), 0x400034f, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000900c000000000000000000009500000000000000a89be609790c5b0c58851cf8bd25dded8e27b397707f7a67e85ae82e5a4fb97874728bac9fc592aba97197070d206216bb41a11a661783159bac54a47929e85bcd83"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
clock_adjtime(0x0, &(0x7f0000000580)={0x3ff, 0x2, 0x4100, 0xb, 0x0, 0x3, 0x400000000, 0xff, 0x0, 0x100, 0x3, 0x200, 0x7, 0x0, 0x9f, 0x2, 0x0, 0x0, 0x300000000000, 0x9, 0x8001, 0x3, 0x7, 0x3, 0x0, 0xe})

17m23.726533664s ago: executing program 39 (id=1811):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x8202, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
write$cgroup_subtree(r0, 0x0, 0x66)

17m23.665892433s ago: executing program 40 (id=1810):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0)
r4 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x121040, 0x0)
r5 = socket(0x28, 0x5, 0x0)
r6 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r6, &(0x7f0000000040), 0x10)
listen(r6, 0x0)
connect$vsock_stream(r5, &(0x7f0000000080), 0x10)
r7 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
sendmmsg(r7, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000380)="d65ccb7405817ec0844a37828d227daa3a408325754e1978a7f3d952c372dfdcdc1af3cc575b82aaaabc64d4df5f6a5daf5d1e56125960ef073f1aa93a14776c8314cef7c3b0b92a0e6e056ca490c9ee0d0f5b235bd1d9300c819bd3ecf826b0ab7be72399", 0x65}], 0x1}}], 0x1, 0x200000c0)
r8 = accept4$unix(r6, 0x0, 0x0, 0x0)
recvfrom$unix(r8, &(0x7f0000000140)=""/281, 0x119, 0xa2, 0x0, 0x0)
close(r2)
ioctl$SOUND_MIXER_READ_VOLUME(r4, 0x40086603, &(0x7f0000000040))
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000008c0)=@newtaction={0x5c, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x48, 0x1, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x20000000, 0x0, 0xfffffffe}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0)
syz_usb_connect(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYRES16=r3], 0x0)

13m27.33210362s ago: executing program 6 (id=2350):
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xffffffff, 0x4)
getsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, 0x0, &(0x7f00000004c0))

13m26.544210497s ago: executing program 6 (id=2352):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
ioctl$SNDRV_PCM_IOCTL_PREPARE(0xffffffffffffffff, 0x4140, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
add_key$keyring(&(0x7f0000000300), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)

13m25.458433834s ago: executing program 2 (id=2355):
r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000280)=0x14)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000400)={0x4})
r1 = syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1218088, &(0x7f0000000d40)=ANY=[], 0x0, 0x2c2, &(0x7f00000008c0)="$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")
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
listen(0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r2 = getpid()
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_normal', 0x2382, 0x9)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
pipe(0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073114200000000008510000002000000b7000000428173959500c200000000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
r4 = openat(r1, &(0x7f0000000080)='./file0/../file0\x00', 0x202800, 0x182)
r5 = inotify_init1(0x0)
inotify_add_watch(r5, &(0x7f00000000c0)='./file0\x00', 0x440000a0)
ioctl$FITRIM(r4, 0x40047211, &(0x7f0000000100))
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)

13m23.822161978s ago: executing program 2 (id=2357):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b)
r3 = dup(r1)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)

13m17.599753817s ago: executing program 6 (id=2369):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
tkill(r0, 0x26)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000300)={{{@in=@broadcast, @in6=@mcast1}}, {{@in=@dev}, 0x0, @in=@loopback}}, 0x0)
unshare(0x480)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
sendto$inet6(r3, 0x0, 0x0, 0x20004041, 0x0, 0x0)
connect$inet6(r3, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
io_uring_setup(0x30d7, &(0x7f00000003c0)={0x0, 0x0, 0x800})
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1001ec)
pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{}], 0x1, 0x7c00, 0x0, 0x3)
ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000013c0)={0x3, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x1, 0x43353039, [0x1, 0x8000000], [0x8200, 0x1], 0x13a}}})
ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x10, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "00000100"}, 0x4, 0x2, {}, 0x58603})
syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x28}}, 0x0)

13m15.110714289s ago: executing program 6 (id=2372):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000)

13m13.921921035s ago: executing program 2 (id=2377):
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0xb8802, 0x0)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000040))
syz_mount_image$nilfs2(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0x1014800, &(0x7f0000001880)=ANY=[@ANYRES16=0x0, @ANYBLOB="f9cba1923b054572145c2e67b885838cb353bc831573228abfb498e7f1fd8103aceb50858482ddb69dd9112c10e3d66c32cab6609b02bf9f07615fb29a27d49a24de56c84013a0c47945492852bdc34e69ddc25ffb9f4d1dd1af98558daa9974edd7d1abd46ee9d69da503b22758321d5031603da076b28cfc7d9477af38586cb482ad3a187ab4c7b916fad188280cee", @ANYRESOCT=0x0, @ANYRES8, @ANYRES8=0x0, @ANYRES64, @ANYRESOCT, @ANYRES64, @ANYBLOB="7540c430e8d8cb55e0610f65aa69c7eb0e142a7517e581064ff06e9ce239e0442bbf8cf256a108d756ee68844798521e40cb7b7963cd4041f65dc013adbd4ccf55477d30e5c56ff7db509a5cef7b7db994b9626f3e1e66ff309fa925885a36b49f6a215f7990ea209bdf87f38e08ed924527c0e45f594c78d32118cd03202a8875"], 0x1, 0xda6, &(0x7f0000003c80)="$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")
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
recvmmsg(r4, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x400000000000193, 0x48, 0x0)
mknod(&(0x7f0000000540)='./file1\x00', 0x0, 0x0)
mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000640)='./file1\x00', &(0x7f00000002c0)='qnx6\x00', 0x2008000, 0x0)

13m8.972197788s ago: executing program 2 (id=2382):
socket(0x10, 0x803, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x20000)
socket(0x10, 0x80002, 0x0)
r0 = socket$netlink(0x10, 0x3, 0xf)
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009b23fd406d04c1088dee000000010902240001000000000904000000ff0100000724", @ANYRES16=r0], 0x0)

13m8.902488118s ago: executing program 6 (id=2383):
syz_io_uring_setup(0x68e7, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x301000, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
fsmount(r0, 0x1, 0x2)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@grpquota}, {@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0xdcc}}]}, 0x3, 0x44a, &(0x7f0000000400)="$eJzs281vG0UbAPBn10n6vv1KKOWjpUCgQkR8JE1aoAcuIJA4FIEEh3IMTlpVdRvUBIlWFQ0IlQsSqgRnxBGJv4AbFwSckLjCHVWqoJcWTkG73m1t106b1rFD/ftJm8x4x555PDve2R07gIE1nv1JIrZGxG8RMVrPNhcYr/+7evls9e/LZ6tJrKy89WeSl7ty+Wy1LFo+b0uRmUgj0k+SopJmi6fPHJ+t1eZPFfmppRPvTS2ePvPssROzR+ePzp+cOXjwwP7pF56fea4rcWZxXdn94cKeXa+9c+H16uEL7/70bdbercX+xji6ZTwL/K+VXOu+J7pdWZ9ta0gnQ31sCGtSiYisu4bz8T8albjeeaPx6sd9bRywrrJz06bOu5dXgLtYEv1uAdAf5Yk+u/4ttx5NPTaESy/VL4CyuK8WW33PUKRFmeGW69tuGo+Iw8v/fJVtsU73IQAAGn1W/fJQPNNu/pfG/Q3lthdrKGMRcU9E7IiIeyNiZ0TcF5GXfSAiHlxj/a1LQzfOf9KLtxXYLcrmfy8Wa1vN879y9hdjlSK3LY9/ODlyrDa/r3hPJmJ4U5afXqWO71/59fNO+xrnf9mW1V/OBYt2XBxquUE3N7s0m09Ku+DSRxG7h9rFn1xbCUgiYldE7F7bS28vE8ee+mZPp0I3j38VXVhnWvk64sl6/y9HS/ylZPX1yan/RW1+31R5VNzo51/Ov9mp/juKvwuy/t/cfPy3FhlLGtdrF9dex/nfP+14TXO7x/9I8nbeLyPFYx/MLi2dmo4YSQ7l+abHZ64/t8yX5bP4J/a2H/87iudk9TwUEdlB/HBEPBIRjxZtfywiHo+IvavE/+PLnfdthP6fa/v5d+34b+n/tScqx3/4rlP9t9b/B/LURPFI/vl3E7fawDt57wAAAOC/Is2/A5+kk9fSaTo5Wf8O/87YnNYWFpeePrLw/sm5+nflx2I4Le90jTbcD51OlotXrOdninvF5f79xX3jLyr/z/OT1YXaXJ9jh0G3pcP4z/xR6XfrgHXXbh1tZqQPDQF6rnX8p83Zc2/0sjFAT/m9Ngyum4z/tFftAHrP+R8GV7vxf64lby0A7k7O/zC4jH8YXMY/DC7jHwbSnfyuX2KQE5FuiGZIrFOi359MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3fFvAAAA//+uEO7O")
chdir(&(0x7f0000000400)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x401c5820, &(0x7f0000000080)={@desc={0xd32780, 0x0, @desc2}})
rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file1\x00')
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x26e1, 0x0)

13m5.056148895s ago: executing program 2 (id=2390):
ioctl$KVM_GET_PIT2(0xffffffffffffffff, 0x8070ae9f, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b24, &(0x7f0000000000)={'wlan0\x00'})
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40800)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1})

13m3.595270981s ago: executing program 6 (id=2391):
syz_open_dev$tty1(0xc, 0x4, 0x1)
gettid()
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x2, &(0x7f0000000300)=""/4096, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
r1 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="1400000016000b63d25a80648c25940121", 0x11}], 0x1}, 0x40050)
r2 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749})
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
r3 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'team0\x00', &(0x7f0000000080)=@ethtool_rxfh={0x1, 0x0, 0x0, 0x0, 0x0, "31c53b"}})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58)
accept4(r3, 0x0, 0x0, 0x80800)

12m55.470660453s ago: executing program 2 (id=2404):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x1, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x98f909, 0x8000, '\x00', @string=&(0x7f0000000200)=0x7d}})

12m48.62095269s ago: executing program 41 (id=2391):
syz_open_dev$tty1(0xc, 0x4, 0x1)
gettid()
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x2, &(0x7f0000000300)=""/4096, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
r1 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="1400000016000b63d25a80648c25940121", 0x11}], 0x1}, 0x40050)
r2 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749})
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
r3 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'team0\x00', &(0x7f0000000080)=@ethtool_rxfh={0x1, 0x0, 0x0, 0x0, 0x0, "31c53b"}})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58)
accept4(r3, 0x0, 0x0, 0x80800)

12m40.180364702s ago: executing program 42 (id=2404):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x1, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x98f909, 0x8000, '\x00', @string=&(0x7f0000000200)=0x7d}})

8m28.036318283s ago: executing program 3 (id=2954):
mknod(&(0x7f00000000c0)='./file0\x00', 0x8001414, 0x0)
r0 = open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01)
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0)
landlock_create_ruleset(0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0xb}, {0x5, 0x2, 0x13, 0x2}], 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
r4 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x108000)
ioctl$LOOP_SET_CAPACITY(r4, 0x4c07)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x24, r6, 0x201, 0xfffffffe, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x10000}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000002040)='ns/uts\x00')
getpgid(0x0)
r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000500), 0x80000, 0x0)
ioctl$TIOCVHANGUP(r7, 0x5437, 0x2)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r7, {0xb0}}, './file0\x00'})
setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x418, 0x278, 0x168, 0x9, 0x0, 0xb, 0x378, 0x250, 0x250, 0x378, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x200, 0x248, 0x0, {0x0, 0x28e}, [@common=@inet=@hashlimit3={{0x158}, {'veth1_to_batadv\x00', {0x0, 0x7ff, 0x0, 0x0, 0x0, 0x6, 0x1000}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}, {{0x278}}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x478)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)

8m22.670147255s ago: executing program 3 (id=2968):
syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./bus\x00', 0x0, &(0x7f0000000100)=ANY=[], 0x1, 0x150b, &(0x7f0000001580)="$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")
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = fanotify_init(0x81, 0x0)
fanotify_mark(r0, 0x105, 0x40001032, 0xffffffffffffffff, 0x0)
r1 = signalfd(0xffffffffffffffff, &(0x7f0000006540), 0x8)
fcntl$lock(r1, 0x7, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = gettid()
rt_sigqueueinfo(r4, 0x11, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.self_freezing\x00', 0x275a, 0x0)
ftruncate(0xffffffffffffffff, 0x9)
r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r5, 0xc4c85512, &(0x7f0000000280)={{0xc, 0x0, 0x0, 0x0, '\x00', 0x10}, 0x0, [0x0, 0x0, 0x2000000000, 0x3, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x829f, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1035, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]})
truncate(0x0, 0xb73d)
mkdir(&(0x7f0000000240)='./bus\x00', 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)

8m18.459550931s ago: executing program 3 (id=2971):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=<r1=>0x0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x1a6cc7, 0x390, 0x0, 0x5802, 0x294, 0x0, 0x294, 0x2c0, 0x378, 0x378, 0x2c0, 0x378, 0x3, 0x0, {[{{@ipv6={@mcast2, @remote, [0xffffff00, 0xff, 0xff000000, 0xff000000], [0xff, 0xff, 0xff, 0xff000000], 'veth0_to_hsr\x00', 'vlan0\x00', {0xff}, {0xff}, 0x0, 0x0, 0x2, 0x80}, 0x0, 0xa8, 0x1d0, 0x52020000}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xe5f6, 'system_u:object_r:etc_aliases_t:s0\x00'}}}, {{@ipv6={@loopback, @remote, [], [0x0, 0x0, 0x0, 0xffffffff], 'ip6erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x81}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x1, 0x0, 'netbios-ns\x00', {0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0)
timer_settime(r1, 0x1, &(0x7f0000000480)={{}, {0x77359400}}, 0x0)

8m16.080563223s ago: executing program 3 (id=2977):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00')
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000180)={r0, r2})
write$binfmt_script(r3, &(0x7f0000000100), 0xfecc)
preadv(r1, &(0x7f00000014c0)=[{&(0x7f00000001c0)=""/190, 0xbe}], 0x1, 0x0, 0x0)

8m14.484725888s ago: executing program 3 (id=2981):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, 0x0, 0x20000000)

8m13.541757924s ago: executing program 3 (id=2984):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r1 = getpid()
r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x2)
connect$bt_rfcomm(r2, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xb}, 0xa)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x23108000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = socket$inet6(0xa, 0x2, 0x3a)
sendto$inet6(r5, &(0x7f0000000080)="800009e92208a1ce", 0xfdef, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c)
bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0)
r6 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
close(r6)
capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd})
mq_open(&(0x7f0000000080)=',&\x00', 0x40, 0x26, &(0x7f0000000200)={0x2, 0x3, 0xffffffff, 0xd})
listen(0xffffffffffffffff, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000134000000020a03000000000000000000020000000900010073797a30000000000800"], 0x98}}, 0x0)
faccessat2(0xffffffffffffffff, 0x0, 0x10, 0x1200)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5})
ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0)
socket$packet(0x11, 0x2, 0x300)

7m58.444987214s ago: executing program 43 (id=2984):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r1 = getpid()
r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x2)
connect$bt_rfcomm(r2, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xb}, 0xa)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x23108000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = socket$inet6(0xa, 0x2, 0x3a)
sendto$inet6(r5, &(0x7f0000000080)="800009e92208a1ce", 0xfdef, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c)
bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0)
r6 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
close(r6)
capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd})
mq_open(&(0x7f0000000080)=',&\x00', 0x40, 0x26, &(0x7f0000000200)={0x2, 0x3, 0xffffffff, 0xd})
listen(0xffffffffffffffff, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000134000000020a03000000000000000000020000000900010073797a30000000000800"], 0x98}}, 0x0)
faccessat2(0xffffffffffffffff, 0x0, 0x10, 0x1200)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5})
ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0)
socket$packet(0x11, 0x2, 0x300)

7m7.207596842s ago: executing program 4 (id=3097):
syz_open_dev$evdev(&(0x7f0000000040), 0x3, 0x81f42)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
timer_create(0x0, 0x0, &(0x7f0000000400))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0xcc53, &(0x7f0000000140), 0x4, 0x520, &(0x7f00000002c0)="$eJzs3d9rHFsdAPDvbLJp06Q3ueqDXvDeq72SXrS7yQ23DT7UCqJPBbW+15hsQsgmW7KbtgnFpvgHCCIq+KQvvgj+AYIUfPFRhII+KyqKaKsPCtqR3Z1N02Q3yU23u2ny+cB0zo+d+Z6z7czOmZnOBHBqXcump2mavhsRY1l5Lpsu1DNbEW9HxJPH9+bqUxJpeuPvSSRZWWtdacOZGGku0ljBV78U8Y1kb9zqxubybLlcWsvyxdrKrWJ1Y/PS0srsYmmxtDo9PXV55srM+zOTL9K9hZEscT4irn7hz9/79k++ePUXn7nzh5t/vfjNpNnm+7GrHx/Q4H6Vza7n4+yOsvp3uXbEYMfRYNa7Rl+HD7fMg+yfCAAAvVU/5v9QRHyykR6Lgf0PZ59Jos1RPQAAAHAcpZ8bjf8mrWt3ewx1KAcAAABeIbmIGI0kV8ju9x2NXK5QiMY9vB+Jc7lypVr79EJlfXW+XhcxHvncwlK5NJndKzwe+aSen2qkn+Xf25WfjojXI+K7Y8ONfGGuUp7v98kPAAAAOCVGdo3//zXWHP8DAAAAJ8x4vxsAAAAAvHTG/wAAAHDyGf8DAADAifbl69frU9p6//X87Y315crtS/Ol6nJhZX2uMFdZu1VYrFQWG8/sW9l3ZduvDlxdv1uslaq1YnVj8+ZKZX21dnPpuVdgAwAAAD30+lsPf5dExNZnhxtT3dCO+v9k7wnoWwOBl2b7lF0k2Xxo74d+/1pz/qceNQroiYF+NwDom8F+NwDom3y/GwD0XXJAfcebd36dzT/R3fYAAADdN/Gxztf/c/suubV/NXDs2Yjh9Dry9X8XDuCV17j+3+aWv7YcLMCJkncHIJx6L3z9/0D+DxEAAPTbaGNKcoXs9N5o5HKFQsT5xmsB8snCUrk0GRGvRcRvx/Jn6vmpxpLJgWMGAAAAAAAAAAAAAAAAAAAAAAAAAKApTZNIAQAAgBMtIveX5JfNZ/lPjL0zuvv8wFDy77HIXhF654c3vn93tlZbm6qX/2O7vPaDrPy9fpzBAAAAAHZrjdNb43gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6KYnj+/NtaZexv3b5yNivF38wTjbmJ+NfESc+2cSgzuWSyJioAvxtx5ExEfbxU/qzdoO2S7+8MuPH+PZt9Au/kgX4sNp9rC+/7nWbvvLxduNefvtbzDiufxRdd7/xfb+b6DD9n/+kDHeePSzYsf4DyLeGGy//2nFTzrEv3DI+F//2uZmp7r0RxETbX9/kudiFWsrt4rVjc1LSyuzi6XF0ur09NTlmSsz789MFheWyqXsz7YxvvPxnz/dr//nOsQfP6D/7xyy//97dPfxh5vJfLv4Fy+0if+rH2ef2Bs/l/32fSpL1+snWumtZnqnN3/6mzf36/98h/4f9Pd/8ZD9f/cr3/rjIT8KAPRAdWNzebZcLq2d2ER9lH4MmvGKJKbPHItm9Chxf2/VW3HkFaZpmta3qRdoWHL06N1JJNsl/d4zAQAA3fbs6L/fLQEAAAAAAAAAAAAAAAAAAIDTqxfPFdsdc2s7lXTjEdoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF3x/wAAAP//SXfo7Q==")
r1 = syz_open_procfs(0x0, &(0x7f0000000340)='net\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000400)}, 0x10)
syz_clone(0xae003400, 0x0, 0xffffff39, 0xfffffffffffffffd, 0x0, 0x0)
socket$inet6(0xa, 0x2, 0x0)
setresgid(0x0, 0x0, 0x0)
setfsgid(0x0)
setfsgid(0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0)
ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246)
r6 = dup(r5)
r7 = dup3(r6, r4, 0x80000)
ioctl$F2FS_IOC_DEFRAGMENT(r7, 0xc010f508, 0x0)
r8 = dup(r2)
sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x20048080}, 0x4008040)
fchdir(r1)
r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents(r9, &(0x7f0000000080)=""/49, 0x31)
getdents(r9, 0xfffffffffffffffd, 0xbb)

7m2.601264416s ago: executing program 4 (id=3102):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto, @enum]}}, &(0x7f0000000600)=""/152, 0x32, 0x98, 0x1, 0x0, 0x0, @void, @value}, 0x28)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
fcntl$lock(0xffffffffffffffff, 0x26, 0x0)
r2 = userfaultfd(0x1)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000300))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00'})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, 0x0, 0x40000880)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'veth1_to_team\x00', <r6=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f00000000c0)={@remote, 0xc, r6})
pipe2$watch_queue(&(0x7f0000000100), 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4, 0xec, &(0x7f00000004c0)=""/236, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

7m0.236789348s ago: executing program 4 (id=3104):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_read_part_table(0x5c0, &(0x7f0000000000)="$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")
r2 = dup(r1)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001a000100000000000000000002000001000000"], 0x24}}, 0x20004000)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000a40)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000bc0)=[@textreal={0x8, 0x0}], 0x1, 0x25, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000200)={[{@data_err_abort}, {@nodelalloc}]}, 0x26, 0x756, &(0x7f00000002c0)="$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")
ioctl$KVM_NMI(r3, 0xae9a)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000})
mkdir(0x0, 0x0)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

6m57.349468828s ago: executing program 4 (id=3112):
memfd_create(0x0, 0x1)
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r2, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0xfffffd0c)
recvfrom$inet6(r2, &(0x7f0000000000)=""/20, 0xfffffd56, 0x0, 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1)
write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x400000, 0x0)

6m52.847350554s ago: executing program 4 (id=3120):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x53cb1000)
syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sendto(0xffffffffffffffff, 0x0, 0xfffffffffffffe2a, 0x0, 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
gettid()
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xda}, [@printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x70}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e09f547ed3f02dc1fd3d6487775b", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90ff}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x89}, {0x3, 0x3, 0x6, 0xa, 0xa}, {0x7, 0x1, 0x2, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x3, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

6m49.534901273s ago: executing program 4 (id=3127):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000200850000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x6b5, 0x41)
ioctl$sock_proto_private(0xffffffffffffffff, 0x89e0, &(0x7f0000001340))
ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000140)={0x80, 0x6, 0x103, 0x0, 0x0, 0x0, 0x0})

6m33.766173299s ago: executing program 44 (id=3127):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000200850000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x6b5, 0x41)
ioctl$sock_proto_private(0xffffffffffffffff, 0x89e0, &(0x7f0000001340))
ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000140)={0x80, 0x6, 0x103, 0x0, 0x0, 0x0, 0x0})

1m30.535669512s ago: executing program 0 (id=3767):
r0 = socket(0x2, 0x80805, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000380)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xa}}, @in6={0xa, 0x4e21, 0x46e, @remote, 0x6}], 0x2d)
r1 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
listen(r2, 0x101)
r3 = socket$inet_dccp(0x2, 0x6, 0x0)
memfd_create(0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000040}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r3], 0x48)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, 0x0)
setsockopt(r3, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1)
connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
accept4(r2, 0x0, 0x0, 0x0)
ioctl$VIDIOC_QUERYCTRL(r1, 0xc0205649, &(0x7f0000000200)={0x8000002, 0x0, "6794a9ecbc83d1e200", 0x0, 0x0, 0x0, 0x0, 0x20})
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c001000491201020000000000000000020000020900020073797a3100000000050001000700000004000880c064cc6f148dc747f3828b86924751dd8937eeffd64306d398efe46b324157a779d303936a993dea36ddf7b888235ff12aebe20d467c5d98f5b2c2878ed07493d9cf9c74de4d31a14945c8e360d1ade60b6b4ea41a6cd7a0fea314db12228763ab59f0c08bef32aeb465acbc1353acc64771eacd3430508b98808d71fac237301ebd4ed600c440ab555129915e092809086fca15b63aae6fc1be6014a6c5a9036a66e458cd4f08ae7edc8c09e96f6078c188233ae7fd34740374bd4458c97a1cb9cdc8ff9690d22c7948b667345ece01ddeb47ed8f25fc9c0d95b1e27c4295f6f00af6"], 0x2c}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080)

1m28.013725073s ago: executing program 0 (id=3771):
syz_io_uring_setup(0x594c, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x800714, &(0x7f00000004c0)={[{@orlov}, {@nodelalloc}, {@errors_remount}, {@grpquota}, {@quota}, {@dioread_nolock}, {@quota}, {@grpjquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x20000}}]}, 0x0, 0x493, &(0x7f0000000640)="$eJzs3M1vFGUYAPBnth9804qIgqCraCR+tLSgcvCgRhMPmpjoAY+1LYgs1NCaCGm0GINHQ+LdeDTxL/DmxagHY+JVE4+GhGhjQvFUM1+w3W5LW9oudH+/ZDvvO5/vMzPv7jvzdiaAtlVN/yQR2yPi94joybNzZ6jmg5npyeHr05PDSczOvvV3ks13bXpyuJy1XG5bkTlUiah8lsSLyfztjp+/cHqoVhs9V+T7J8580D9+/sIzp84MnRw9OXp28Nixo0cGnn9u8NlViTON69q+j8f2733tnctvDB+//O5P36bF2nMgn14fxy1dbxJQE9V0r/0zm2mc9vgyyn432FGXTjpbWBCWpSMi0sPVldX/nuiImwevJ179tKWFA9ZU+tu0aeHJU7PABpZEq0sAtEb5Q59e/5afdWp63BGuvhTRXaRnpieHZ27E3xmVYnzXGm6/GhHHp/77Kv3Ecu9DAACsQNa2ebpZ+68Se7Jh3texs+hD6Y2IeyJiV0TcGxG7I+K+iGze+yPigXzh2Z4lbr/akJ/f/qlcaVrmVZK2/16oa/vN1MVfDHo7ityOLP6u5MSp2ujhYp8ciq5NaX5gkW18/8pvXyw0rb79l37S7ZdtwaIAVzobbtCNDE0MrdZOuHoxYl9ns/iTGz0B6RmwNyL2LW/VO8vEqSe/2b/QTLeOfxGr0M80+3XEE/nxn4qG+EvJ4v2T/ZujNnq4vzwr5vv510tvFsnuxmm3Ff8qSI//1rnnfzHlYjHs+TfJ+2u7olYbPTe+/G1c+uPzBa9pVnr+dydvZ33Wv7yXj/toaGLi3EBEd/J6li93dDZ+8OayZb6cP43/0MHm9X9XsUwa/4MRkZ7EByLioYh4uCj7IxHxaEQcXCT+H19+7P1F4k8iiZYe/5Gm3383zv/epL6/fgWJjtM/fLdQj/nSjv/RmMq+a3PZ998tLLWAt7n7AAAA4K5QiYjtkVT68nR1e1QqfX35//Dvjq2V2tj4xFMnxj48O5I/I9AbXZXyTldP3f3QgWSqWGOeHyzuFZfTjxT3jb/s2JLl+4bHaiMtjh3a3ba59T/K+p/6q6PVpQPWnOe1oH011v9Ki8oBrL+l/P67FoCNqUn939KKcgDrz/U/tK9m9f+Thrz2P2xM8+v/n01eWQdsRNr/0L7Uf2hf6j+0paU+xV++T2HFLwGYkygfFlj5ejYv+Qn/Oy9RXZM1l0doLQu/JW6OicodsTPbJJHWmPXdaJOX1QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANyF/g8AAP//Z0bjpw==")
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = msgget(0x2, 0x3a8)
msgctl$IPC_RMID(r2, 0x0)

1m24.171560711s ago: executing program 0 (id=3779):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0)
read$msr(r1, &(0x7f00000000c0)=""/124, 0x7c)

1m22.748631266s ago: executing program 0 (id=3781):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
socket$kcm(0x2, 0xa, 0x2)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f2f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000100)="050000000e", 0x5}, {&(0x7f0000000080)="f24bff20", 0x4}], 0x3)

1m20.437177058s ago: executing program 0 (id=3785):
r0 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r0, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x26e1, 0x0)
close(r1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_generic(0x10, 0x3, 0x10)
socket$unix(0x1, 0x1, 0x0)
pipe2$9p(0x0, 0x800)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0)
r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8000)
syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040f5746e666f22e2441fb03ea3e5472d45e0401fa4b20"], 0x7)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, 0x0)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
r7 = socket$inet(0x2, 0x3, 0x4)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', <r8=>0x0})
sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r8, @ANYRES16=r6, @ANYBLOB="01002bbd7000fddbdf2525000a002000018008000100", @ANYRES32=r8, @ANYBLOB="14000200626f6e645f736c6176655f3000000000"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"})

1m18.08449162s ago: executing program 0 (id=3789):
syz_io_uring_setup(0x594c, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x800714, &(0x7f00000004c0)={[{@orlov}, {@nodelalloc}, {@errors_remount}, {@grpquota}, {@quota}, {@dioread_nolock}, {@quota}, {@grpjquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x20000}}]}, 0x0, 0x493, &(0x7f0000000640)="$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")
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = msgget(0x2, 0x3a8)
msgctl$IPC_RMID(r2, 0x0)

1m1.903961006s ago: executing program 45 (id=3789):
syz_io_uring_setup(0x594c, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x800714, &(0x7f00000004c0)={[{@orlov}, {@nodelalloc}, {@errors_remount}, {@grpquota}, {@quota}, {@dioread_nolock}, {@quota}, {@grpjquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x20000}}]}, 0x0, 0x493, &(0x7f0000000640)="$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")
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = msgget(0x2, 0x3a8)
msgctl$IPC_RMID(r2, 0x0)

22.970152205s ago: executing program 8 (id=3905):
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0000000000000000002", 0x11)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_io_uring_setup(0x10d, &(0x7f0000000500)={0x0, 0x4690, 0x1000, 0x1, 0x151}, &(0x7f0000000100)=<r4=>0x0, &(0x7f00000004c0)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1})
io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0)
r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
accept4$x25(r6, 0x0, 0x0, 0x80800)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="021380eec9a5b84ed5"], 0x10}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300090c00000000420b00000000000200130002000000000000000000001f0300060000000051020049e4f0000001c99a00000000000002000100002000100000000200000000030005"], 0x60}}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000010000173c2e5864a2fad65000000000a28000000000a010400000000000000000100004008000240000000020900010073797a300000000014000000110001689b2d8a34d4f6e2ed81529cc3bd67fb918b960b73d57807d6eb210309d1020d32d0a1278620bec91d7749d881a25f2c1555397aa42411734085db93e9672a334879bf70905d77220e43c3deffb03c449b0cda7196a4f19e402618385ad6dc86d67070978a79d433269100000000"], 0x50}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a3c000000090a050600001900000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001414000000110001"], 0x64}}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c0000000d0a010e0000000000000000010000000900010073797a30000000000900020073797a3200000000cb97d6513e5986c29fe24fffb436f3144d8b419c1118e495d11031278cdf691ed1c927eb85f567223772542f5b3ee45adbbed11d0e24f729d09ad57307776bef6b40eb5871f3a93015684942000000000000000810a9b1ab216e8cbbc0c4ffbdb873193c0bc449b3375050f820795426ec0cce6a13a91825ea7a7a70c0245a698faa7cbbcd7859cb27a6ec53aab79a3b2ba9b08509c881805190891aae10845f1cba4b33d8893df1a0a8524a208bd4acab9d765e8b572fabaf02efbcc1bc9ead3a9a35cb771b0db53edb00"/259], 0x2c}}, 0x0)

21.31030057s ago: executing program 8 (id=3908):
unshare(0x22020600)
r0 = socket(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc)

20.941594858s ago: executing program 8 (id=3910):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="180800000000000000000000000000008510000003000000180000000000000000000000000000009500000000000000ddaa000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e00000000000000001801", @ANYRES32], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
fcntl$lock(0xffffffffffffffff, 0x26, 0x0)
r3 = userfaultfd(0x1)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000300))
r4 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f00000000c0)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "4b0a00c13cd6cfef5df35e1d5c2cd83ec8331c81a09875c137d35494701f22acbd1c110c6ab4c8829dfb7154e1476a3cfeab3096b43788d7c435b4a89e2fdc93"}, 0x48, 0xffffffffffffffff)
keyctl$setperm(0x5, r4, 0x0)
keyctl$get_security(0x11, r4, 0x0, 0x0)
ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000bfd000/0x400000)=nil, &(0x7f0000bd1000/0x2000)=nil, 0x400000, 0x3})

18.863900972s ago: executing program 7 (id=3914):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040))
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000380)=0x200000000)
r1 = dup2(r0, r0)
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000040)=0x1)
preadv(r1, 0x0, 0x0, 0x2, 0xa13c996b)
write$vhost_msg(r1, &(0x7f0000000200)={0x1, {&(0x7f0000000140)=""/121, 0x79, 0x0, 0x3, 0x2}}, 0x48)

17.621110277s ago: executing program 1 (id=3917):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c10"], 0x4c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES64], 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io(r3, &(0x7f0000000b00)={0x2c, &(0x7f0000000400)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d096471908"], 0x0, 0x0, 0x0, 0x0}, 0x0)

15.53840698s ago: executing program 7 (id=3921):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, 0x0)
r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x7, 0x2, 0x0, "b43d70dde5dbbbe40f00f401bbe6c9000000c67f00"})
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
tkill(0x0, 0x2)
prlimit64(0x0, 0x0, 0x0, &(0x7f0000000480))
r4 = fsopen(&(0x7f0000000180)='virtiofs\x00', 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f00000000c0)={0x0, 0x0, {0x0, 0x1, 0x2018, 0x0, 0x8, 0x8, 0x5, 0x657ef077e46ea00d}})
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan0\x00'})
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/handlers\x00', 0x0, 0x0)
preadv2(r6, &(0x7f0000000840)=[{&(0x7f0000000200)=""/100, 0x64}], 0x1, 0x2b, 0x0, 0x0)

14.399226117s ago: executing program 8 (id=3924):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="180800000000000000000000000000008510000003000000180000000000000000000000000000009500000000000000ddaa000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e00000000000000001801", @ANYRES32], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
fcntl$lock(0xffffffffffffffff, 0x26, 0x0)
r2 = userfaultfd(0x1)
r3 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f00000000c0)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "4b0a00c13cd6cfef5df35e1d5c2cd83ec8331c81a09875c137d35494701f22acbd1c110c6ab4c8829dfb7154e1476a3cfeab3096b43788d7c435b4a89e2fdc93"}, 0x48, 0xffffffffffffffff)
keyctl$setperm(0x5, r3, 0x0)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000bfd000/0x400000)=nil, &(0x7f0000bd1000/0x2000)=nil, 0x400000, 0x3})

14.179728816s ago: executing program 1 (id=3925):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0)

13.337955673s ago: executing program 1 (id=3926):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$6lowpan_control(r1, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x40000, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newtaction={0x74, 0x30, 0x9, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x81, 0x2, {{0x0, 0x0, 0x0, 0x3, 0x2}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x0, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_ID={0x0, 0x3, 0x3b6}]}, {0xfffffffffffffce8}, {0xc}, {0xc}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x20040800}, 0x20044884)

10.795357945s ago: executing program 8 (id=3929):
fsopen(&(0x7f0000005880)='zonefs\x00', 0x0)
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
ptrace$ARCH_MAP_VDSO_64(0x1e, 0xffffffffffffffff, 0x1, 0x2003)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
socket$packet(0x11, 0x2, 0x300)
listen(0xffffffffffffffff, 0x0)
mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000002e80)='syz1\x00', 0x1ff)
ioctl$sock_qrtr_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
write(0xffffffffffffffff, &(0x7f0000000040), 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SWAP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, 0x6, 0x6, 0x605, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000240)={0x8, @sliced={0x3, [0xc88f, 0xe565, 0x4, 0xedfb, 0x0, 0x6, 0x1, 0x9, 0x1, 0x1ff, 0x9, 0x5, 0x1, 0xc, 0x100, 0xfffe, 0x89f6, 0xffff, 0x2, 0x2, 0x1, 0x81, 0x800, 0x8, 0x9, 0x4, 0x4, 0xa2, 0x6, 0x0, 0x3, 0x9328, 0xffff, 0x5, 0x8, 0x6, 0x6, 0xd4, 0x3, 0xe0, 0x6, 0x9, 0xfffb, 0x0, 0x2, 0x3, 0x6, 0x7], 0x40}})
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f00000001c0), 0x0)

10.569303574s ago: executing program 5 (id=3930):
syz_open_dev$evdev(&(0x7f0000000040), 0x3, 0x81f42)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
timer_create(0x0, 0x0, &(0x7f0000000400))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0xcc53, &(0x7f0000000140), 0x4, 0x520, &(0x7f00000002c0)="$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")
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000400)}, 0x10)
syz_clone(0xae003400, 0x0, 0xffffff39, 0xfffffffffffffffd, 0x0, 0x0)
socket$inet6(0xa, 0x2, 0x0)
setresgid(0x0, 0x0, 0x0)
setfsgid(0x0)
setfsgid(0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0)
ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246)
r4 = dup(r3)
r5 = dup3(r4, r2, 0x80000)
ioctl$F2FS_IOC_DEFRAGMENT(r5, 0xc010f508, 0x0)

9.601001231s ago: executing program 1 (id=3932):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000100001000000006961061c000000000a20000000000a03000000000000000000010000000900010073797a300000000060000000160a01010000000000000000010000000900020073797a30000000000900010073797a300000000008000740000000032c0003800800024000000000080001400000000018000380140001006e657464657673696d30000000000000140000001000010000000000000000000000000a"], 0xa8}, 0x1, 0x0, 0x0, 0x4080}, 0x0)

9.559152901s ago: executing program 7 (id=3933):
syz_pidfd_open(0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
userfaultfd(0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r5 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
fallocate(r5, 0x0, 0x0, 0x1000f4)

9.41877307s ago: executing program 1 (id=3935):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0x72, 0x0, 0x0)
r5 = syz_open_dev$usbfs(&(0x7f0000000040), 0x7, 0x1000)
ioctl$USBDEVFS_RESET(r5, 0x5514)
syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x7)
r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000740), 0x802, 0x0)
write$uinput_user_dev(r6, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x200], [0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf3a], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5]}, 0x45c)
ioctl$UI_SET_PROPBIT(r6, 0x5501, 0x0)
sendmsg$NFNL_MSG_ACCT_NEW(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, 0x0, 0x7, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x9}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x2c}}, 0x8000000)
pipe2$9p(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x0)
io_setup(0x9, &(0x7f0000003080)=<r8=>0x0)
io_getevents(r8, 0x1, 0x1, &(0x7f0000000000)=[{}], 0x0)
io_submit(r8, 0x1, &(0x7f0000000940)=[&(0x7f0000001940)={0x0, 0x0, 0x0, 0x7, 0x0, r7, 0x0}])

9.36948816s ago: executing program 5 (id=3936):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0)

8.208792006s ago: executing program 9 (id=3937):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socket$igmp(0x2, 0x3, 0x2)
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0x1, 0x1000, 0x21, 0x3bc}, &(0x7f0000000100)=<r4=>0x0, &(0x7f00000000c0)=<r5=>0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, r7, 0x0, 0x30, 0x0}, 0x30)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9})
io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9)

8.189252587s ago: executing program 7 (id=3938):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8)
io_uring_setup(0x177f, &(0x7f0000000140)={0x0, 0x0, 0x1})
r1 = socket(0x2b, 0x1, 0x1)
setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x2, 0x2, 0x1, 0x0, [@mcast2]}, 0x18)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c)
setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000000), 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = openat(0xffffffffffffffff, 0x0, 0x42, 0x0)
fcntl$lock(r5, 0x7, &(0x7f0000000140)={0x1})
r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}})
ioctl$SNDRV_TIMER_IOCTL_START(r6, 0x54a0)
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000001ac0))

6.15315055s ago: executing program 5 (id=3939):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="180800000000000000000000000000008510000003000000180000000000000000000000000000009500000000000000ddaa000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e00000000000000001801", @ANYRES32], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
fcntl$lock(0xffffffffffffffff, 0x26, 0x0)
r2 = userfaultfd(0x1)
r3 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f00000000c0)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "4b0a00c13cd6cfef5df35e1d5c2cd83ec8331c81a09875c137d35494701f22acbd1c110c6ab4c8829dfb7154e1476a3cfeab3096b43788d7c435b4a89e2fdc93"}, 0x48, 0xffffffffffffffff)
keyctl$setperm(0x5, r3, 0x0)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000bfd000/0x400000)=nil, &(0x7f0000bd1000/0x2000)=nil, 0x400000, 0x3})

5.639505478s ago: executing program 9 (id=3940):
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0xf, 0x0, &(0x7f0000000000))
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018400110800395032303030"], 0x15)
r1 = dup(r0)
write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2f4, &(0x7f0000000880)="$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")
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x20cf01)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x3, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r6}, 0x0, &(0x7f00000002c0)}, 0x20)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10)
r8 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r8, &(0x7f00000000c0), 0x10)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCADDRT(r9, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @private}, 0xd0})

5.170355517s ago: executing program 7 (id=3941):
r0 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r0, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x26e1, 0x0)
close(r1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x3, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_generic(0x10, 0x3, 0x10)
socket$unix(0x1, 0x1, 0x0)
pipe2$9p(0x0, 0x800)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0)
r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8000)
syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040f5746e666f22e2441fb03ea3e5472d45e0401fa4b20"], 0x7)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, 0x0)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
r6 = socket$inet(0x2, 0x3, 0x4)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', <r7=>0x0})
sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r7, @ANYRES16=r5, @ANYBLOB="01002bbd7000fddbdf2525000a002000018008000100", @ANYRES32=r7, @ANYBLOB="14000200626f6e645f736c6176655f3000000000"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"})

3.498834442s ago: executing program 9 (id=3942):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f2f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000100)="050000000e", 0x5}, {&(0x7f0000000080)="f24bff20", 0x4}], 0x3)

2.943561229s ago: executing program 1 (id=3943):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, 0x0)
r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x7, 0x2, 0x0, "b43d70dde5dbbbe40f00f401bbe6c9000000c67f00"})
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
tkill(0x0, 0x2)
prlimit64(0x0, 0x0, 0x0, &(0x7f0000000480))
r4 = fsopen(&(0x7f0000000180)='virtiofs\x00', 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f00000000c0)={0x0, 0x0, {0x0, 0x1, 0x2018, 0x0, 0x8, 0x8, 0x5, 0x657ef077e46ea00d}})
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan0\x00'})
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/handlers\x00', 0x0, 0x0)
preadv2(r6, &(0x7f0000000840)=[{&(0x7f0000000200)=""/100, 0x64}], 0x1, 0x2b, 0x0, 0x0)

2.456026318s ago: executing program 5 (id=3944):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vxcan1\x00', <r1=>0x0})
connect$can_bcm(r0, &(0x7f0000000080)={0x1d, r1}, 0x10)
sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x0, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x3, 0x2, 0x0, 0x0, "b68c52d2be3c0d90"}}, 0x48}}, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000540)={'vxcan0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f00)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r3, {0x10, 0xb}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)

1.946939656s ago: executing program 9 (id=3945):
syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040e0c20031000", @ANYBLOB], 0xf)

1.859564276s ago: executing program 8 (id=3946):
syz_open_dev$evdev(&(0x7f0000000040), 0x3, 0x81f42)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
timer_create(0x0, 0x0, &(0x7f0000000400))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0xcc53, &(0x7f0000000140), 0x4, 0x520, &(0x7f00000002c0)="$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")
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000400)}, 0x10)
syz_clone(0xae003400, 0x0, 0xffffff39, 0xfffffffffffffffd, 0x0, 0x0)
socket$inet6(0xa, 0x2, 0x0)
setresgid(0x0, 0x0, 0x0)
setfsgid(0x0)
setfsgid(0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0)
ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246)
r4 = dup(r3)
r5 = dup3(r4, r2, 0x80000)
ioctl$F2FS_IOC_DEFRAGMENT(r5, 0xc010f508, 0x0)

1.734139806s ago: executing program 7 (id=3947):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="180800000000000000000000000000008510000003000000180000000000000000000000000000009500000000000000ddaa000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e00000000000000001801", @ANYRES32], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
fcntl$lock(0xffffffffffffffff, 0x26, 0x0)
r3 = userfaultfd(0x1)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000300))
r4 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f00000000c0)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "4b0a00c13cd6cfef5df35e1d5c2cd83ec8331c81a09875c137d35494701f22acbd1c110c6ab4c8829dfb7154e1476a3cfeab3096b43788d7c435b4a89e2fdc93"}, 0x48, 0xffffffffffffffff)
keyctl$setperm(0x5, r4, 0x0)
keyctl$get_security(0x11, r4, 0x0, 0x0)
ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000bfd000/0x400000)=nil, &(0x7f0000bd1000/0x2000)=nil, 0x400000, 0x3})

1.708545316s ago: executing program 9 (id=3948):
syz_open_dev$usbfs(0x0, 0x205, 0x8401)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
pread64(0xffffffffffffffff, &(0x7f0000000080)=""/237, 0xed, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
syz_open_dev$hiddev(0x0, 0x4006, 0x4000c2)
r0 = socket$inet6(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r3 = dup2(r2, r2)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f00000003c0)={0x2, 0x0, "f19f371dcce8eaf158082a45c62f76f2b0bdd0364045946e7d31fa3b2c237366807a0cb997d4c4c835db39abab8d1dc3465d079bf280285dd24bf0e4d9814630253483aa04a73679809eac1725e7aee22ed092c2becf45cb885b508e161da97f50f278576d29a6e2abe4a5ce52e6bc6a414dc5725ca57732e8555d3f9f1def657b0431182165bfd54663349579fe76954758b679e747ee4d45c674505e94510317fc7fd93f7762d419b9afe75ce350267c468aef3cc2bcabbc8a0b94f2f84f2d2c2493e31924e923acacd43bd521129d2bc4bc662c4c6ae169bcce0fc0ce4d1266016f75dcdc672c73817ccd9290075a7da2f1153d8beea6d053e8f00b8e1327"})
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f00000001c0)={'\x00', 0x40, 0x1000, 0x404, 0x40000004, 0x10})
ioctl$BLKTRACESTART(r2, 0x1274, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
socket$packet(0x11, 0x2, 0x300)

1.470600705s ago: executing program 5 (id=3949):
r0 = socket$inet(0x2, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r5, &(0x7f0000000080), 0x12)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0xc)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8)
r7 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r7, 0x0, 0x0)
r8 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000001d00), 0x0, 0x0)
read$FUSE(r8, 0x0, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)

157.399151ms ago: executing program 5 (id=3950):
r0 = socket(0x2, 0x3, 0x81)
socket(0x11, 0x800000003, 0x0)
unshare(0x4000400)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@cgroup, 0xffffffffffffffff, 0x2f, 0x2020, 0x4, @void, @void, @value}, 0x20)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00'})
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000001c0)={@empty, 0x22})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000))
ioctl$F2FS_IOC_GET_PIN_FILE(r2, 0x8004f50e, 0x0)
ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000700)={0x1, @default, @bpq0, 0x2, 'syz0\x00', @null, 0x1, 0x1, [@null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @bcast, @default, @default]})
ioctl$SIOCNRDECOBS(r1, 0x89e2)
bind$inet(r0, 0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)=[{{&(0x7f0000000240)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}, 0x1c, &(0x7f00000002c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="140000000000000029000000080000000001"], 0x18}}], 0x1, 0x0)

0s ago: executing program 9 (id=3951):
io_uring_setup(0xdac, 0x0)
openat$kvm(0x0, &(0x7f0000000080), 0x2382, 0x0)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
socket$key(0xf, 0x3, 0x2)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe05000000000000000000009500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sched_switch\x00', r5, 0x0, 0x3}, 0x18)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x40002)
mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRES16=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYRES64=r0])
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, 0x0, 0x0)
r7 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0)
fsmount(r7, 0x0, 0x0)
tkill(0x0, 0xb)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f000000000000000000000000000039d1c723"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000000214010028bd7000fddbdf250900020073797a3100000000080001000000000008004400", @ANYRES32, @ANYBLOB="050054000100b2ac08000100000000000900020073"], 0x48}, 0x1, 0x0, 0x0, 0x4000801}, 0x0)

kernel console output (not intermixed with test programs):

imeout
[ 1427.339515][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1427.352725][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1427.398575][T16904] trusted_key: encrypted_key: insufficient parameters specified
[ 1427.417245][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1427.427901][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1427.449825][T16722] device veth0_vlan entered promiscuous mode
[ 1427.484318][T16906] loop8: detected capacity change from 0 to 512
[ 1427.491954][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1427.508652][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1427.533500][T16722] device veth1_vlan entered promiscuous mode
[ 1427.577238][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1427.612836][T16906] EXT4-fs error (device loop8): ext4_do_update_inode:5224: inode #3: comm syz.8.2679: corrupted inode contents
[ 1427.628548][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1427.647066][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1427.662513][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1427.675085][T16722] device veth0_macvtap entered promiscuous mode
[ 1427.678132][T16906] EXT4-fs error (device loop8): ext4_dirty_inode:6089: inode #3: comm syz.8.2679: mark_inode_dirty error
[ 1427.690860][T16722] device veth1_macvtap entered promiscuous mode
[ 1427.712924][T16722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1427.723841][T16722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1427.734058][T16722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1427.744822][T16722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1427.755117][T16722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1427.770006][T16722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1427.780311][T16722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1427.791907][T16722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1427.816073][T16906] EXT4-fs error (device loop8): ext4_do_update_inode:5224: inode #3: comm syz.8.2679: corrupted inode contents
[ 1427.833282][T16722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1427.850831][T16906] EXT4-fs error (device loop8): __ext4_ext_dirty:202: inode #3: comm syz.8.2679: mark_inode_dirty error
[ 1427.865242][T16722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1427.911591][T16722] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1427.921336][T16906] Quota error (device loop8): write_blk: dquota write failed
[ 1427.938203][T16906] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota
[ 1428.321842][T16906] EXT4-fs error (device loop8): ext4_acquire_dquot:6794: comm syz.8.2679: Failed to acquire dquot type 0
[ 1428.616133][T16906] EXT4-fs error (device loop8): ext4_do_update_inode:5224: inode #16: comm syz.8.2679: corrupted inode contents
[ 1428.659545][T16906] EXT4-fs error (device loop8): ext4_dirty_inode:6089: inode #16: comm syz.8.2679: mark_inode_dirty error
[ 1428.697388][T16906] EXT4-fs error (device loop8): ext4_do_update_inode:5224: inode #16: comm syz.8.2679: corrupted inode contents
[ 1428.706958][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1428.719156][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1428.729564][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1428.738597][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1428.750397][T16722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1428.768488][T16722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1428.782183][T16722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1428.796873][T16722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1428.807145][T16722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1428.838513][T16906] EXT4-fs error (device loop8): __ext4_ext_dirty:202: inode #16: comm syz.8.2679: mark_inode_dirty error
[ 1428.870311][T16722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1428.881669][T16906] EXT4-fs error (device loop8): ext4_do_update_inode:5224: inode #16: comm syz.8.2679: corrupted inode contents
[ 1428.903982][T16722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1428.916867][T16722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1428.917326][T16906] EXT4-fs error (device loop8) in ext4_orphan_del:305: Corrupt filesystem
[ 1428.949092][T16722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1428.968998][T16722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1428.984095][T16906] EXT4-fs error (device loop8): ext4_do_update_inode:5224: inode #16: comm syz.8.2679: corrupted inode contents
[ 1430.103099][T16906] EXT4-fs error (device loop8): ext4_truncate:4311: inode #16: comm syz.8.2679: mark_inode_dirty error
[ 1430.145964][T16906] EXT4-fs error (device loop8) in ext4_process_orphan:347: Corrupt filesystem
[ 1430.159012][T16722] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1430.188854][T16906] EXT4-fs (loop8): 1 truncate cleaned up
[ 1430.194617][T16906] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[ 1430.241017][T16722] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1430.276010][T16722] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1430.285029][T16906] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1430.320600][T16722] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1430.366911][T16722] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1430.493233][T16933] netlink: 892 bytes leftover after parsing attributes in process `syz.4.2685'.
[ 1430.538485][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1430.568442][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1430.640186][T16351] EXT4-fs (loop8): unmounting filesystem.
[ 1430.723745][ T4355] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1430.762799][ T4355] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1430.851875][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1430.883173][   T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1430.900765][   T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1430.933976][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1430.945974][T12791] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[ 1430.988217][T16940] tipc: Started in network mode
[ 1431.014003][T16940] tipc: Node identity 10000, cluster identity 4711
[ 1431.031402][T16940] tipc: Node number set to 65536
[ 1431.138034][T12791] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[ 1431.149390][T16940] Cannot find set identified by id 632 to match
[ 1431.168332][T12791] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1431.214268][T16942] loop8: detected capacity change from 0 to 1024
[ 1431.334640][T16947] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2622'.
[ 1431.415695][T12791] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1431.431735][T12791] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1431.453596][T12791] usb 5-1: config 0 descriptor??
[ 1431.459432][T16934] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1431.485987][T12791] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 1432.377435][T16953] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2689'.
[ 1433.522459][T16969] Cannot find set identified by id 632 to match
[ 1434.141655][   T27] usb 5-1: USB disconnect, device number 18
[ 1434.590057][T16983] loop8: detected capacity change from 0 to 47
[ 1435.651191][   T52] block nbd0: Attempted send on invalid socket
[ 1435.657492][   T52] I/O error, dev nbd0, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[ 1435.667547][T16981] qnx6: unable to read the first superblock
[ 1435.674969][   T52] block nbd0: Attempted send on invalid socket
[ 1435.681234][   T52] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[ 1435.691078][T16981] qnx6: unable to read the first superblock
[ 1435.704233][T16981] qnx6: unable to read the first superblock
[ 1435.781946][T16993] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2700'.
[ 1436.719475][T17002] loop8: detected capacity change from 0 to 128
[ 1436.727155][T17000] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2703'.
[ 1436.812621][T17002] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256
[ 1436.926349][T17002] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1437.613033][T17016] Cannot find set identified by id 632 to match
[ 1438.353300][T17018] tipc: Started in network mode
[ 1438.416042][T17018] tipc: Node identity 10000, cluster identity 4711
[ 1438.460404][T17019] Cannot find set identified by id 632 to match
[ 1438.468792][T17018] tipc: Node number set to 65536
[ 1438.645887][ T4366] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[ 1438.848666][ T4366] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[ 1438.865080][ T4366] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1438.893106][ T4366] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1438.912798][ T4366] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1438.974282][ T4366] usb 5-1: config 0 descriptor??
[ 1439.008962][T17012] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1439.028292][ T4366] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 1440.208114][T17036] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2714'.
[ 1440.500787][ T6162] usb 5-1: USB disconnect, device number 19
[ 1442.759043][T17060] Cannot find set identified by id 632 to match
[ 1445.580244][T17072] Cannot find set identified by id 632 to match
[ 1445.865010][T17083] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2729'.
[ 1446.224162][ T4296] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[ 1446.504623][ T4296] usb 9-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[ 1446.590991][ T4296] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1446.998760][ T4296] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1447.042021][ T4296] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1447.103033][ T4296] usb 9-1: config 0 descriptor??
[ 1447.126819][T17078] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[ 1447.147198][ T4296] usbhid 9-1:0.0: couldn't find an input interrupt endpoint
[ 1447.175068][T17090] trusted_key: encrypted_key: insufficient parameters specified
[ 1448.468220][T17097] Cannot find set identified by id 632 to match
[ 1448.860369][T12791] usb 9-1: USB disconnect, device number 6
[ 1449.264173][T17110] Cannot find set identified by id 632 to match
[ 1449.954842][T17121] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2741'.
[ 1451.366929][T17133] trusted_key: encrypted_key: insufficient parameters specified
[ 1451.690593][   T93] block nbd3: Attempted send on invalid socket
[ 1451.696944][   T93] I/O error, dev nbd3, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[ 1451.706996][T17128] qnx6: unable to read the first superblock
[ 1451.713281][   T93] block nbd3: Attempted send on invalid socket
[ 1451.720752][   T93] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[ 1451.730046][T17128] qnx6: unable to read the first superblock
[ 1451.736070][T17128] qnx6: unable to read the first superblock
[ 1452.833093][T17145] Cannot find set identified by id 632 to match
[ 1453.325426][T17149] Cannot find set identified by id 632 to match
[ 1458.497662][T17198] Cannot find set identified by id 632 to match
[ 1459.969165][T17199] Cannot find set identified by id 632 to match
[ 1460.392287][T17205] trusted_key: encrypted_key: master key parameter 'us' is invalid
[ 1460.807798][T15916] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[ 1461.603843][T15916] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[ 1461.620357][T15916] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1461.640996][T15916] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1461.651692][T15916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1461.679637][T15916] usb 4-1: config 0 descriptor??
[ 1461.692705][T17203] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1461.704829][T15916] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[ 1464.462398][T15916] usb 4-1: USB disconnect, device number 18
[ 1466.749693][T17244] Cannot find set identified by id 632 to match
[ 1466.806193][T17245] Cannot find set identified by id 632 to match
[ 1471.514337][T17281] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2789'.
[ 1471.794361][   T52] block nbd7: Attempted send on invalid socket
[ 1471.802714][   T52] I/O error, dev nbd7, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[ 1471.813311][T17284] qnx6: unable to read the first superblock
[ 1471.828410][   T52] block nbd7: Attempted send on invalid socket
[ 1471.835316][   T52] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[ 1473.111445][T17290] tipc: Started in network mode
[ 1473.116406][T17290] tipc: Node identity 10000, cluster identity 4711
[ 1473.122929][T17290] tipc: Node number set to 65536
[ 1473.134729][T17290] Cannot find set identified by id 632 to match
[ 1473.705856][T17284] qnx6: unable to read the first superblock
[ 1473.711818][T17284] qnx6: unable to read the first superblock
[ 1473.783987][T17297] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2791'.
[ 1473.839198][T17298] Cannot find set identified by id 632 to match
[ 1476.385934][ T4262] Bluetooth: hci5: command 0x0406 tx timeout
[ 1478.432969][T17333] netlink: 72 bytes leftover after parsing attributes in process `syz.7.2802'.
[ 1479.115698][T17345] Cannot find set identified by id 632 to match
[ 1479.650666][T17347] Cannot find set identified by id 632 to match
[ 1480.379948][   T52] block nbd7: Attempted send on invalid socket
[ 1480.386458][   T52] I/O error, dev nbd7, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1480.397794][T17351] qnx6: unable to read the first superblock
[ 1480.458809][   T93] block nbd7: Attempted send on invalid socket
[ 1480.465142][   T93] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1480.475265][T17351] qnx6: unable to read the first superblock
[ 1480.538401][T17351] qnx6: unable to read the first superblock
[ 1484.596488][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[ 1484.602893][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[ 1484.746112][T17379] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2817'.
[ 1484.793541][T17381] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2818'.
[ 1486.090158][T17391] Cannot find set identified by id 632 to match
[ 1486.649974][T17393] Cannot find set identified by id 632 to match
[ 1486.719338][ T4262] Bluetooth: hci1: command 0x0406 tx timeout
[ 1487.291437][T17402] loop8: detected capacity change from 0 to 128
[ 1490.537177][T17424] netlink: 72 bytes leftover after parsing attributes in process `syz.8.2829'.
[ 1494.817997][T17442] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2833'.
[ 1495.796929][T17454] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2838'.
[ 1497.056286][T17466] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2842'.
[ 1501.207722][T17497] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2850'.
[ 1503.423242][T17515] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2853'.
[ 1503.453511][T17517] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2855'.
[ 1506.695955][T17551] virtio-fs: tag <(null)> not found
[ 1506.736239][   T26] audit: type=1400 audit(1736523359.939:99): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3AFFFEFE80 pid=17545 comm="syz.8.2864"
[ 1509.348745][T17568] netlink: 72 bytes leftover after parsing attributes in process `syz.7.2869'.
[ 1510.959455][T17583] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2872'.
[ 1512.955942][   T26] audit: type=1400 audit(1736523366.249:100): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3AFFFEFE80 pid=17598 comm="syz.3.2877"
[ 1515.336016][T17612] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2881'.
[ 1519.360303][   T26] audit: type=1400 audit(1736523372.669:101): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3AFFFEFE80 pid=17647 comm="syz.8.2891"
[ 1519.496409][   T52] block nbd0: Attempted send on invalid socket
[ 1519.502700][   T52] I/O error, dev nbd0, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1519.513585][T17657] qnx6: unable to read the first superblock
[ 1520.069897][   T93] block nbd0: Attempted send on invalid socket
[ 1520.076280][   T93] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1520.085679][T17657] qnx6: unable to read the first superblock
[ 1520.146054][T17657] qnx6: unable to read the first superblock
[ 1520.897665][T17669] loop8: detected capacity change from 0 to 128
[ 1520.959459][T17669] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256
[ 1521.067778][T17669] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1521.299121][T17672] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2898'.
[ 1526.200396][T17707] netlink: 72 bytes leftover after parsing attributes in process `syz.8.2909'.
[ 1527.240057][   T26] audit: type=1400 audit(1736523380.549:102): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3AFFFEFE80 pid=17711 comm="syz.4.2907"
[ 1529.734434][T17738] virtio-fs: tag <(null)> not found
[ 1530.578126][T17743] Cannot find set identified by id 632 to match
[ 1532.706003][   T47] Bluetooth: hci2: command 0x0406 tx timeout
[ 1534.657374][T17755] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2922'.
[ 1536.296721][   T26] audit: type=1400 audit(1736523389.259:103): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3AFFFEFE80 pid=17765 comm="syz.0.2925"
[ 1536.873525][T17774] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2928'.
[ 1539.347552][T17795] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2930'.
[ 1540.740743][T17802] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2935'.
[ 1542.506009][T17816] virtio-fs: tag <(null)> not found
[ 1543.533846][T17824] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2940'.
[ 1546.007453][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[ 1546.013869][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[ 1547.645211][T17848] netlink: 72 bytes leftover after parsing attributes in process `syz.8.2946'.
[ 1549.605382][T17862] netlink: 68 bytes leftover after parsing attributes in process `syz.8.2952'.
[ 1551.589268][T17878] Cannot find set identified by id 632 to match
[ 1552.988088][T17889] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2958'.
[ 1553.518909][T17892] loop8: detected capacity change from 0 to 128
[ 1554.856101][T17904] loop8: detected capacity change from 0 to 256
[ 1554.863689][T17904] exfat: Deprecated parameter 'utf8'
[ 1555.027315][T17904] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[ 1556.583956][T17918] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2964'.
[ 1560.148171][T17938] overlayfs: failed to resolve './file1': -2
[ 1560.241350][T17939] loop8: detected capacity change from 0 to 2048
[ 1560.386306][T17939] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[ 1560.584162][T17939] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[ 1560.608508][T17939] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 22 with error 28
[ 1561.435794][T17939] EXT4-fs (loop8): This should not happen!! Data will be lost
[ 1561.435794][T17939] 
[ 1561.517217][T17939] EXT4-fs (loop8): Total free blocks count 0
[ 1561.578199][T17950] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 1 with error 28
[ 1561.607369][T17939] EXT4-fs (loop8): Free/Dirty block details
[ 1561.641571][T17939] EXT4-fs (loop8): free_blocks=2415919504
[ 1561.655918][T17950] EXT4-fs (loop8): This should not happen!! Data will be lost
[ 1561.655918][T17950] 
[ 1561.705965][T17939] EXT4-fs (loop8): dirty_blocks=32
[ 1561.711222][T17939] EXT4-fs (loop8): Block reservation details
[ 1564.217035][T17973] loop8: detected capacity change from 0 to 256
[ 1564.251938][T17973] exfat: Deprecated parameter 'utf8'
[ 1564.284166][T17973] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[ 1564.367170][   T93] block nbd7: Attempted send on invalid socket
[ 1564.373396][   T93] I/O error, dev nbd7, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[ 1564.382743][T17981] qnx6: unable to read the first superblock
[ 1564.389961][   T93] block nbd7: Attempted send on invalid socket
[ 1564.396279][   T93] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[ 1564.405430][T17981] qnx6: unable to read the first superblock
[ 1564.411733][T17981] qnx6: unable to read the first superblock
[ 1564.471948][T17983] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2983'.
[ 1565.165111][   T26] audit: type=1400 audit(1736523418.469:104): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3AFFFEFE80 pid=17985 comm="syz.4.2985"
[ 1565.786065][   T27] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[ 1565.982689][   T27] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1566.050492][   T27] usb 9-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d
[ 1566.260987][   T27] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1566.349451][   T27] usb 9-1: config 0 descriptor??
[ 1566.564212][ T6889] usb 9-1: USB disconnect, device number 7
[ 1570.221096][T18013] overlayfs: failed to resolve './file1': -2
[ 1572.787930][T18024] loop8: detected capacity change from 0 to 128
[ 1579.469963][T18061] loop8: detected capacity change from 0 to 128
[ 1580.086167][ T4295] usb 8-1: new high-speed USB device number 34 using dummy_hcd
[ 1580.295982][ T4295] usb 8-1: Using ep0 maxpacket: 8
[ 1580.415815][ T4295] usb 8-1: config 4 has an invalid interface number: 244 but max is 0
[ 1580.446650][ T4295] usb 8-1: config 4 has no interface number 0
[ 1580.452838][ T4295] usb 8-1: config 4 interface 244 altsetting 1 endpoint 0x1 has an invalid bInterval 41, changing to 7
[ 1580.517155][ T4295] usb 8-1: config 4 interface 244 altsetting 1 endpoint 0x2 has invalid maxpacket 11380, setting to 1024
[ 1580.558600][ T4295] usb 8-1: config 4 interface 244 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 1024
[ 1580.616624][ T4295] usb 8-1: config 4 interface 244 has no altsetting 0
[ 1580.686217][ T4295] usb 8-1: New USB device found, idVendor=05ac, idProduct=fa33, bcdDevice=cb.aa
[ 1580.695336][ T4295] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1580.745983][ T4295] usb 8-1: Product: syz
[ 1580.750217][ T4295] usb 8-1: Manufacturer: syz
[ 1580.754838][ T4295] usb 8-1: SerialNumber: syz
[ 1580.812497][T18068] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[ 1581.030274][ T4262] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1581.084789][ T4262] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1581.095433][ T4262] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1581.105059][ T4295] ipheth 8-1:4.244: Unable to find endpoints
[ 1581.121538][ T4262] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1581.129341][ T4262] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 1581.136874][ T4262] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1581.148591][ T4295] usb 8-1: USB disconnect, device number 34
[ 1581.272952][T18073] loop8: detected capacity change from 0 to 128
[ 1581.283813][T18070] lo speed is unknown, defaulting to 1000
[ 1582.738145][T18070] chnl_net:caif_netlink_parms(): no params data found
[ 1582.980134][   T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1583.185882][   T47] Bluetooth: hci4: command 0x0409 tx timeout
[ 1583.246562][T18097] virtio-fs: tag <(null)> not found
[ 1584.042844][   T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1587.155810][   T47] Bluetooth: hci4: command 0x041b tx timeout
[ 1588.843154][   T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1589.186096][   T47] Bluetooth: hci4: command 0x040f tx timeout
[ 1589.466523][T18070] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1589.473723][T18070] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1589.588132][T18070] device bridge_slave_0 entered promiscuous mode
[ 1589.839124][T18070] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1590.717799][T18070] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1590.746731][T18070] device bridge_slave_1 entered promiscuous mode
[ 1591.148327][T18133] virtio-fs: tag <(null)> not found
[ 1592.072067][ T4262] Bluetooth: hci4: command 0x0419 tx timeout
[ 1592.173973][   T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1592.523146][T18070] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1592.620179][T18070] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1592.912172][T18070] team0: Port device team_slave_0 added
[ 1593.533581][T18070] team0: Port device team_slave_1 added
[ 1597.366907][T18070] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1597.373923][T18070] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1597.516018][T18070] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1597.535014][T18070] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1597.569620][T18161] loop8: detected capacity change from 0 to 128
[ 1597.583175][T18070] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1597.656227][T18070] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1597.890353][T18070] device hsr_slave_0 entered promiscuous mode
[ 1598.486471][T18070] device hsr_slave_1 entered promiscuous mode
[ 1598.735990][T18070] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1598.753880][T18070] Cannot create hsr debugfs directory
[ 1599.892588][T18170] loop8: detected capacity change from 0 to 2048
[ 1599.907765][   T11] tipc: Left network mode
[ 1599.933685][T18170] UDF-fs: error (device loop8): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[ 1599.983419][T18170] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1600.177017][   T26] audit: type=1326 audit(1736523453.489:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18174 comm="syz.7.3041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb919385d29 code=0x7ffc0000
[ 1600.219434][T18176] trusted_key: encrypted_key: key user:syz not found
[ 1600.284867][   T26] audit: type=1326 audit(1736523453.509:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18174 comm="syz.7.3041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb919385d29 code=0x7ffc0000
[ 1600.365323][   T26] audit: type=1326 audit(1736523453.509:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18174 comm="syz.7.3041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb919385d29 code=0x7ffc0000
[ 1600.389687][   T26] audit: type=1326 audit(1736523453.509:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18174 comm="syz.7.3041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb919385d29 code=0x7ffc0000
[ 1600.425884][   T26] audit: type=1326 audit(1736523453.509:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18174 comm="syz.7.3041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fb919385d29 code=0x7ffc0000
[ 1600.450935][   T26] audit: type=1326 audit(1736523453.509:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18174 comm="syz.7.3041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb919385d29 code=0x7ffc0000
[ 1601.452659][ T4262] Bluetooth: hci4: command 0x0405 tx timeout
[ 1601.824386][   T26] audit: type=1326 audit(1736523453.509:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18174 comm="syz.7.3041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb919385d29 code=0x7ffc0000
[ 1601.897212][   T26] audit: type=1326 audit(1736523453.519:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18174 comm="syz.7.3041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb919385d29 code=0x7ffc0000
[ 1602.253316][   T26] audit: type=1326 audit(1736523453.519:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18174 comm="syz.7.3041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb919385d29 code=0x7ffc0000
[ 1602.377731][   T26] audit: type=1326 audit(1736523453.519:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18174 comm="syz.7.3041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb919385d29 code=0x7ffc0000
[ 1602.801557][T18201] loop8: detected capacity change from 0 to 128
[ 1603.015243][T18070] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1605.049441][T18070] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1606.820596][T18070] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1606.869129][T18070] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1607.451216][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[ 1607.458180][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[ 1608.147521][T18070] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1608.168799][T18070] 8021q: adding VLAN 0 to HW filter on device team0
[ 1608.437459][T18070] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1608.509141][T18070] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1608.956046][ T7389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1608.976684][ T7389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1608.985157][ T7389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1609.023302][ T7389] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1609.034186][ T7389] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1609.041442][ T7389] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1609.068356][T18242] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3065'.
[ 1609.076378][ T7389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1609.108878][ T7389] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1609.135456][ T7389] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1609.142791][ T7389] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1609.212295][ T7389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1609.235424][ T7389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1609.282927][ T7389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1609.299116][ T7389] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1609.309000][ T7389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1609.320086][ T7389] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1609.329564][ T7389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1609.338665][ T7389] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1609.513438][ T7389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1609.611698][ T7389] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1609.706600][ T7389] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1609.825779][ T7389] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1610.519849][ T7389] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1613.756236][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1613.763958][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1613.818715][T18070] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1614.318493][   T11] device hsr_slave_0 left promiscuous mode
[ 1614.387262][   T11] device hsr_slave_1 left promiscuous mode
[ 1614.406472][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1614.444775][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1614.524623][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1614.554319][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1614.594304][   T11] device bridge_slave_1 left promiscuous mode
[ 1614.603804][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1614.647325][   T11] device bridge_slave_0 left promiscuous mode
[ 1614.653625][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1615.256158][   T11] device veth1_macvtap left promiscuous mode
[ 1615.262260][   T11] device veth0_macvtap left promiscuous mode
[ 1615.352321][   T11] device veth1_vlan left promiscuous mode
[ 1615.467211][   T11] device veth0_vlan left promiscuous mode
[ 1625.148154][   T11] team0 (unregistering): Port device team_slave_1 removed
[ 1625.221654][   T11] team0 (unregistering): Port device team_slave_0 removed
[ 1625.323770][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1625.384245][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1626.504512][   T11] bond0 (unregistering): Released all slaves
[ 1626.752158][T18338] lo speed is unknown, defaulting to 1000
[ 1628.837479][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1628.857801][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1628.923173][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1628.935087][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1628.969189][T18070] device veth0_vlan entered promiscuous mode
[ 1629.020808][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1629.041859][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1629.126151][T18070] device veth1_vlan entered promiscuous mode
[ 1630.542776][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1630.623618][ T4619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1630.663498][ T4619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1630.688882][T18070] device veth0_macvtap entered promiscuous mode
[ 1630.717735][T18070] device veth1_macvtap entered promiscuous mode
[ 1630.797570][T18070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1630.832505][T18070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1630.874970][T18070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1630.902357][T18070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1630.942442][T18070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1630.982670][T18070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1631.002628][T18070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1631.032420][T18070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1631.052441][T18070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1631.092180][T18070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1631.124685][T18070] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1631.153184][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1631.165075][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1631.197361][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1631.227094][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1631.258200][T18070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1631.299167][T18070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1631.346054][T18070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1631.382685][T18070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1631.413130][T18070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1631.434163][T18070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1631.454432][T18070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1631.475724][T18070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1631.497981][T18070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1631.517353][T18070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1631.547183][T18070] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1631.596670][T18070] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1631.645802][T18070] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1631.685313][T18070] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1631.744229][T18070] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1633.606864][ T4619] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1633.624570][ T4619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1633.759906][T18369] xt_time: unknown flags 0xc
[ 1633.932744][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1633.956119][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1634.023551][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1634.074545][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1634.105258][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1634.172879][T17688] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1635.274384][T18382] tipc: Started in network mode
[ 1635.279431][T18382] tipc: Node identity 10000, cluster identity 4711
[ 1635.286050][T18382] tipc: Node number set to 65536
[ 1635.318397][T18382] Cannot find set identified by id 632 to match
[ 1638.186630][ T4262] Bluetooth: Wrong link type (-71)
[ 1639.272900][T18401] kvm: emulating exchange as write
[ 1639.303666][T18411] loop8: detected capacity change from 0 to 128
[ 1639.321406][T18413] input: syz1 as /devices/virtual/input/input77
[ 1639.513621][T18415] lo speed is unknown, defaulting to 1000
[ 1639.590649][   T26] kauditd_printk_skb: 3 callbacks suppressed
[ 1639.590666][   T26] audit: type=1326 audit(1736523492.899:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18414 comm="syz.0.3111" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0d8dd85d29 code=0x0
[ 1646.175752][ T4366] usb 10-1: new high-speed USB device number 13 using dummy_hcd
[ 1646.369927][ T4366] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1646.425731][ T4366] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1646.454448][ T4366] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1646.499994][ T4366] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1646.525838][ T4366] usb 10-1: SerialNumber: syz
[ 1646.624543][T18446] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3122'.
[ 1646.773471][ T4366] usb 10-1: 0:2 : does not exist
[ 1646.782978][ T4366] usb 10-1: unit 5: unexpected type 0x09
[ 1646.827613][ T4366] usb 10-1: USB disconnect, device number 13
[ 1648.742784][T18467] Cannot find set identified by id 632 to match
[ 1654.152447][T18483] loop8: detected capacity change from 0 to 2048
[ 1654.216761][T18483] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[ 1654.259128][T18491] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3133'.
[ 1654.318145][T18483] EXT4-fs error (device loop8): ext4_find_extent:936: inode #2: comm syz.8.3132: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[ 1655.952530][T16351] EXT4-fs (loop8): unmounting filesystem.
[ 1656.088051][T18511] Cannot find set identified by id 632 to match
[ 1657.309181][T18514] loop8: detected capacity change from 0 to 8192
[ 1657.791293][   T93] block nbd0: Attempted send on invalid socket
[ 1657.797687][   T93] I/O error, dev nbd0, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[ 1657.807430][T18525] qnx6: unable to read the first superblock
[ 1657.814309][   T93] block nbd0: Attempted send on invalid socket
[ 1657.820836][   T93] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[ 1658.074213][T18525] qnx6: unable to read the first superblock
[ 1658.080244][T18525] qnx6: unable to read the first superblock
[ 1658.781856][T18535] loop8: detected capacity change from 0 to 1024
[ 1658.810652][T18535] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1658.935484][T18540] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3148'.
[ 1662.001800][T18555] Cannot find set identified by id 632 to match
[ 1663.554199][   T52] block nbd9: Attempted send on invalid socket
[ 1663.560587][   T52] I/O error, dev nbd9, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[ 1663.569888][T18567] qnx6: unable to read the first superblock
[ 1663.576650][   T52] block nbd9: Attempted send on invalid socket
[ 1663.582928][   T52] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[ 1663.939750][T18567] qnx6: unable to read the first superblock
[ 1663.945758][T18567] qnx6: unable to read the first superblock
[ 1664.123168][T18573] loop8: detected capacity change from 0 to 128
[ 1664.131211][T18573] ext4: Unknown parameter 'func'
[ 1666.985946][   T47] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1666.999903][   T47] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1667.008884][   T47] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1667.017077][   T47] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1667.028315][   T47] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 1667.035602][   T47] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1667.371849][ T1181] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1667.585505][T18592] lo speed is unknown, defaulting to 1000
[ 1668.791995][ T1181] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1668.869214][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[ 1668.880147][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[ 1669.105832][   T47] Bluetooth: hci3: command 0x0409 tx timeout
[ 1670.366714][ T1181] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1673.002748][   T47] Bluetooth: hci3: command 0x041b tx timeout
[ 1673.040908][ T1181] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1673.327116][T18628] raw_sendmsg: syz.8.3176 forgot to set AF_INET. Fix it!
[ 1673.721008][ T1181] tipc: Left network mode
[ 1673.726453][T18592] chnl_net:caif_netlink_parms(): no params data found
[ 1675.026011][   T47] Bluetooth: hci3: command 0x040f tx timeout
[ 1675.431514][T18649] loop8: detected capacity change from 0 to 128
[ 1675.669167][T18592] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1675.710108][T18592] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1676.997539][T18592] device bridge_slave_0 entered promiscuous mode
[ 1677.186198][   T47] Bluetooth: hci3: command 0x0419 tx timeout
[ 1677.732123][T18592] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1677.755423][T18592] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1677.803490][T18592] device bridge_slave_1 entered promiscuous mode
[ 1677.979611][T18592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1679.088021][T18592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1679.626894][T18592] team0: Port device team_slave_0 added
[ 1679.853079][T18592] team0: Port device team_slave_1 added
[ 1680.685971][T18592] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1680.695334][T18592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1680.774994][T18592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1681.208603][T18692] loop8: detected capacity change from 0 to 512
[ 1681.224120][T18692] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem
[ 1681.242538][T18692] EXT4-fs (loop8): invalid journal inode
[ 1681.248827][T18692] EXT4-fs (loop8): can't get journal size
[ 1681.540455][T18692] EXT4-fs (loop8): 1 truncate cleaned up
[ 1681.546282][T18692] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[ 1681.600619][T18692] EXT4-fs (loop8): unmounting filesystem.
[ 1684.229904][T18592] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1684.279678][T18592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1684.369497][T18592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1685.106361][T18592] device hsr_slave_0 entered promiscuous mode
[ 1685.142711][T18592] device hsr_slave_1 entered promiscuous mode
[ 1685.149671][T18592] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1685.169930][T18592] Cannot create hsr debugfs directory
[ 1685.385165][T18712] loop8: detected capacity change from 0 to 512
[ 1685.436560][T18712] EXT4-fs (loop8): revision level too high, forcing read-only mode
[ 1685.446767][T18712] EXT4-fs (loop8): orphan cleanup on readonly fs
[ 1685.453574][T18712] EXT4-fs warning (device loop8): ext4_enable_quotas:7029: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[ 1685.468274][T18712] EXT4-fs (loop8): Cannot turn on quotas: error -22
[ 1685.475312][T18712] EXT4-fs error (device loop8): ext4_orphan_get:1400: inode #16: comm syz.8.3201: casefold flag without casefold feature
[ 1685.488572][T18712] EXT4-fs error (device loop8): ext4_orphan_get:1405: comm syz.8.3201: couldn't read orphan inode 16 (err -117)
[ 1685.506053][T18712] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[ 1685.798285][ T1181] device hsr_slave_0 left promiscuous mode
[ 1685.837057][ T1181] device hsr_slave_1 left promiscuous mode
[ 1685.893744][ T1181] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1685.914211][ T1181] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1685.937154][ T1181] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1685.977188][ T1181] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1686.002970][ T1181] device bridge_slave_1 left promiscuous mode
[ 1686.020543][ T1181] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1686.044341][ T1181] device bridge_slave_0 left promiscuous mode
[ 1686.062041][ T1181] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1686.164525][ T1181] device veth1_macvtap left promiscuous mode
[ 1686.186108][ T1181] device veth0_macvtap left promiscuous mode
[ 1686.193573][T16351] EXT4-fs (loop8): unmounting filesystem.
[ 1686.207516][ T1181] device veth1_vlan left promiscuous mode
[ 1686.220221][ T1181] device veth0_vlan left promiscuous mode
[ 1690.932997][T18764] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3216'.
[ 1691.404375][ T1181] team0 (unregistering): Port device team_slave_1 removed
[ 1691.534482][   T52] block nbd9: Attempted send on invalid socket
[ 1691.542863][   T52] I/O error, dev nbd9, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[ 1691.554344][T18770] qnx6: unable to read the first superblock
[ 1691.562156][   T52] block nbd9: Attempted send on invalid socket
[ 1691.570234][   T52] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[ 1691.580560][T18770] qnx6: unable to read the first superblock
[ 1691.586677][T18770] qnx6: unable to read the first superblock
[ 1692.015117][ T1181] team0 (unregistering): Port device team_slave_0 removed
[ 1692.289727][ T1181] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1692.486845][ T1181] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1694.630088][ T1181] bond0 (unregistering): Released all slaves
[ 1696.142124][T18802] loop8: detected capacity change from 0 to 512
[ 1696.173593][T18802] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem
[ 1696.193045][T18802] EXT4-fs (loop8): invalid journal inode
[ 1696.199264][T18802] EXT4-fs (loop8): can't get journal size
[ 1696.265791][T18802] EXT4-fs (loop8): 1 truncate cleaned up
[ 1696.273588][T18802] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[ 1696.291864][T18802] EXT4-fs (loop8): unmounting filesystem.
[ 1696.866187][T18814] process 'syz.8.3227' launched './file1' with NULL argv: empty string added
[ 1697.296378][T18592] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1697.588721][T18592] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1697.781027][    C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[ 1698.234110][T18592] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1698.280783][T18592] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1698.334178][T18817] loop8: detected capacity change from 0 to 4096
[ 1698.421589][T18817] NILFS (loop8): invalid segment: Checksum error in segment payload
[ 1698.454457][T18821] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3231'.
[ 1698.467035][T18817] NILFS (loop8): trying rollback from an earlier position
[ 1698.496445][T18817] NILFS (loop8): recovery complete
[ 1698.517099][T18822] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1698.595472][T18592] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1699.025722][ T4302] usb 8-1: new high-speed USB device number 35 using dummy_hcd
[ 1699.421176][T13923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1699.450680][T13923] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1699.633123][ T4302] usb 8-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[ 1699.647211][T18592] 8021q: adding VLAN 0 to HW filter on device team0
[ 1699.657391][ T4302] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[ 1699.686028][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1699.694329][ T4302] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1699.703671][ T4302] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1699.713573][ T4302] usb 8-1: config 0 descriptor??
[ 1699.722898][ T4302] usbhid 8-1:0.0: couldn't find an input interrupt endpoint
[ 1699.728475][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1699.748930][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1699.756178][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1699.773971][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1699.783989][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1699.942766][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1699.950135][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1699.991654][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1700.001523][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1700.026720][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1700.939752][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1700.970158][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1700.995911][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1701.013642][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1701.028464][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1701.163922][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1701.518028][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1701.613045][ T4329] usb 8-1: USB disconnect, device number 35
[ 1702.097666][T18592] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1702.109417][T18592] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1702.125432][   T47] Bluetooth: hci3: command 0x0405 tx timeout
[ 1702.157432][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1702.177537][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1702.335289][T18854] input: syz1 as /devices/virtual/input/input78
[ 1703.551635][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1703.560045][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1703.582347][T18592] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1705.510732][T18887] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3248'.
[ 1707.092944][   T47] Bluetooth: hci4: command 0x0406 tx timeout
[ 1707.185895][ T4329] usb 8-1: new high-speed USB device number 36 using dummy_hcd
[ 1707.377757][ T4329] usb 8-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[ 1707.406693][ T4329] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[ 1707.432020][ T4329] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1707.442494][ T4329] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1707.453279][ T4329] usb 8-1: config 0 descriptor??
[ 1707.463144][ T4329] usbhid 8-1:0.0: couldn't find an input interrupt endpoint
[ 1707.562288][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1707.573201][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1707.608350][T18903] loop8: detected capacity change from 0 to 128
[ 1707.621839][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1707.634655][T18903] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256
[ 1707.650386][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1707.662452][T18903] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1707.680001][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1707.702364][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1707.723478][T18592] device veth0_vlan entered promiscuous mode
[ 1707.906806][T18592] device veth1_vlan entered promiscuous mode
[ 1708.696323][ T9748] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1708.729199][ T9748] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1708.809418][ T9748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1708.832870][ T9748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1708.843346][ T4302] usb 8-1: USB disconnect, device number 36
[ 1708.850777][T18592] device veth0_macvtap entered promiscuous mode
[ 1708.901106][T18592] device veth1_macvtap entered promiscuous mode
[ 1708.961444][T18592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1709.004523][T18592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1709.093987][T18592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1709.125278][T18592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1709.162714][T18592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1709.193857][T18592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1709.220151][T18592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1710.126864][T18592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1710.167554][T18592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1710.199505][T18592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1710.253113][T18592] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1710.294738][T13923] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1710.310330][T13923] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1710.333398][T13923] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1710.364129][T13923] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1710.412098][T18592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1710.434522][T18592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1710.471628][T18592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1710.482599][T18592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1710.492953][T18592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1710.503696][T18592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1710.520731][T18592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1710.531704][T18592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1710.543544][T18592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1710.554806][T18592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1710.572779][T18592] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1710.583377][T13923] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1710.599902][T13923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1710.656535][T18592] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1710.675010][T18592] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1710.704934][T18592] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1710.727140][T18592] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1711.179366][T18927] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3260'.
[ 1716.461628][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1716.495832][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1716.532424][T13923] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1716.588868][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1716.637972][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1716.712757][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1721.277706][T18962] loop8: detected capacity change from 0 to 128
[ 1721.312072][T18962] ext4: Unknown parameter 'func'
[ 1723.608452][T18978] loop8: detected capacity change from 0 to 2048
[ 1723.692245][ T4262] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1723.703991][ T4262] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1723.713508][ T4262] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1723.721759][ T4262] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1723.732522][ T4262] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1723.740618][ T4262] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1723.828134][T18982] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1723.964665][T18974] could not allocate digest TFM handle tgr192
[ 1724.065748][T18980] lo speed is unknown, defaulting to 1000
[ 1724.550260][ T9748] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1724.906928][ T9748] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1724.931996][T18992] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3278'.
[ 1725.165311][ T9748] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1725.937621][T19002] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1726.517922][ T4262] Bluetooth: hci0: command 0x0409 tx timeout
[ 1726.601355][T19008] loop8: detected capacity change from 0 to 128
[ 1726.716148][ T9748] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1726.729949][T19008] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256
[ 1726.781445][T19008] UDF-fs: error (device loop8): udf_process_sequence: Primary Volume Descriptor not found!
[ 1726.821900][T18980] chnl_net:caif_netlink_parms(): no params data found
[ 1726.859488][T19008] UDF-fs: error (device loop8): udf_process_sequence: Primary Volume Descriptor not found!
[ 1726.930582][T19008] UDF-fs: Scanning with blocksize 512 failed
[ 1727.037353][T19008] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256
[ 1727.066519][T19008] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=512, location=512
[ 1727.542684][   T26] audit: type=1400 audit(1736523580.769:119): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3AFFFEFE80 pid=19009 comm="syz.5.3282"
[ 1727.850361][T19008] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found
[ 1727.971644][T19008] UDF-fs: Scanning with blocksize 1024 failed
[ 1728.086904][T19008] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256
[ 1728.150237][T19008] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=512, location=512
[ 1728.180502][T19008] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found
[ 1729.011304][ T4262] Bluetooth: hci0: command 0x041b tx timeout
[ 1729.105750][T19008] UDF-fs: Scanning with blocksize 2048 failed
[ 1729.126084][T19008] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256
[ 1729.197125][T19008] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=512, location=512
[ 1729.209010][T18980] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1729.225877][T18980] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1729.234271][T18980] device bridge_slave_0 entered promiscuous mode
[ 1729.243684][T18980] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1729.246373][T19008] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found
[ 1729.250941][T18980] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1729.268102][T18980] device bridge_slave_1 entered promiscuous mode
[ 1729.284038][T19008] UDF-fs: Scanning with blocksize 4096 failed
[ 1729.290444][T19008] UDF-fs: warning (device loop8): udf_fill_super: No partition found (1)
[ 1729.397113][ T9748] tipc: Left network mode
[ 1729.404209][T18980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1729.450768][T18980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1729.963440][T19028] loop8: detected capacity change from 0 to 2048
[ 1731.396656][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[ 1731.399497][ T4262] Bluetooth: hci0: command 0x040f tx timeout
[ 1731.403037][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[ 1731.475307][T19028] EXT4-fs error (device loop8): __ext4_fill_super:5388: inode #2: comm syz.8.3280: iget: bad extended attribute block 281474976710655
[ 1731.490023][T19028] EXT4-fs (loop8): get root inode failed
[ 1731.495749][T19028] EXT4-fs (loop8): mount failed
[ 1731.828246][T18980] team0: Port device team_slave_0 added
[ 1731.868923][T18980] team0: Port device team_slave_1 added
[ 1732.997115][T18980] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1733.029252][T18980] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1733.269493][T18980] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1733.427126][   T47] Bluetooth: hci0: command 0x0419 tx timeout
[ 1733.539250][T18980] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1733.563912][T18980] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1733.618649][T18980] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1737.585370][T18980] device hsr_slave_0 entered promiscuous mode
[ 1737.601059][T18980] device hsr_slave_1 entered promiscuous mode
[ 1737.615761][T18980] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1737.623487][T18980] Cannot create hsr debugfs directory
[ 1738.101484][T19079] netlink: 68 bytes leftover after parsing attributes in process `syz.9.3300'.
[ 1738.794939][T19084] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[ 1739.271397][T19089] loop8: detected capacity change from 0 to 1024
[ 1740.630718][ T9748] device hsr_slave_0 left promiscuous mode
[ 1740.648562][ T9748] device hsr_slave_1 left promiscuous mode
[ 1740.657878][ T9748] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1740.673209][ T9748] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1740.684441][ T9748] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1740.693964][ T9748] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1740.703315][ T9748] device bridge_slave_1 left promiscuous mode
[ 1740.710087][ T9748] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1742.273784][ T9748] device bridge_slave_0 left promiscuous mode
[ 1742.316085][ T9748] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1742.466831][ T9748] device veth1_macvtap left promiscuous mode
[ 1742.474119][ T9748] device veth0_macvtap left promiscuous mode
[ 1742.488979][ T9748] device veth1_vlan left promiscuous mode
[ 1742.525804][ T9748] device veth0_vlan left promiscuous mode
[ 1743.595932][   T26] audit: type=1400 audit(1736523596.719:120): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3AFFFEFE80 pid=19108 comm="syz.8.3310"
[ 1744.209283][T19113] netlink: 68 bytes leftover after parsing attributes in process `syz.8.3311'.
[ 1744.751568][T19119] netlink: 312 bytes leftover after parsing attributes in process `syz.9.3308'.
[ 1745.253076][T19123] loop8: detected capacity change from 0 to 16
[ 1745.260969][T19123] MTD: Attempt to mount non-MTD device "/dev/loop8"
[ 1745.598939][ T9748] team0 (unregistering): Port device team_slave_1 removed
[ 1745.697124][ T9748] team0 (unregistering): Port device team_slave_0 removed
[ 1745.767053][ T9748] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1745.851929][ T9748] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1746.337182][T19130] loop8: detected capacity change from 0 to 512
[ 1746.377627][T19130] EXT4-fs: Ignoring removed orlov option
[ 1746.394803][T19130] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1746.439390][T19130] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1746.534766][T19130] EXT4-fs error (device loop8): ext4_orphan_get:1400: inode #15: comm syz.8.3317: casefold flag without casefold feature
[ 1746.573785][T19130] EXT4-fs (loop8): Remounting filesystem read-only
[ 1746.580578][T19130] EXT4-fs error (device loop8): ext4_orphan_get:1405: comm syz.8.3317: couldn't read orphan inode 15 (err -117)
[ 1746.595291][T19130] EXT4-fs (loop8): Remounting filesystem read-only
[ 1746.611515][T19130] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[ 1747.170384][T19136] EXT4-fs error (device loop8): ext4_empty_dir:3136: inode #2: comm syz.8.3317: invalid size
[ 1748.038534][T19136] EXT4-fs (loop8): Remounting filesystem read-only
[ 1748.628080][T16351] EXT4-fs (loop8): unmounting filesystem.
[ 1748.846535][ T9748] bond0 (unregistering): Released all slaves
[ 1750.379651][   T26] audit: type=1400 audit(1736523603.679:121): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3AFFFEFE80 pid=19147 comm="syz.9.3321"
[ 1751.032376][T19152] device vlan2 entered promiscuous mode
[ 1751.099371][T19106] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3309'.
[ 1751.112861][ T4295] lo speed is unknown, defaulting to 1000
[ 1751.242492][T18980] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1751.314079][T18980] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1751.419956][T18980] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1751.489641][T18980] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1752.855177][T18980] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1752.986782][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1753.044916][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1753.157000][T18980] 8021q: adding VLAN 0 to HW filter on device team0
[ 1753.252871][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1753.393494][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1753.517036][ T4503] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1753.524268][ T4503] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1753.609726][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1753.724786][T19187] loop8: detected capacity change from 0 to 128
[ 1753.744819][T19187] affs: Unrecognized mount option "ÿÿrbose" or missing value
[ 1753.752948][T19187] affs: Error parsing options
[ 1754.901566][T19195] netlink: 68 bytes leftover after parsing attributes in process `syz.8.3334'.
[ 1755.305431][T19199] netlink: 'syz.8.3336': attribute type 29 has an invalid length.
[ 1756.234564][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1756.255846][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1756.274239][ T4503] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1756.281474][ T4503] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1756.297166][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1757.130113][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1757.144085][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1757.168757][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1757.182711][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1757.207358][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1757.217082][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1757.228109][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1757.238314][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1757.645826][T19199] netlink: 'syz.8.3336': attribute type 29 has an invalid length.
[ 1757.659844][T18980] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1757.919847][T13930] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1757.997323][T13930] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1758.065660][   T47] Bluetooth: hci0: command 0x0405 tx timeout
[ 1759.214693][T18980] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1759.246254][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1759.253874][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1759.404196][T19238] netlink: 68 bytes leftover after parsing attributes in process `syz.9.3346'.
[ 1760.027378][T19249] netlink: 'syz.5.3349': attribute type 21 has an invalid length.
[ 1760.035475][T19249] netlink: 'syz.5.3349': attribute type 1 has an invalid length.
[ 1761.164540][T19259] tipc: Started in network mode
[ 1761.169605][T19259] tipc: Node identity 10000, cluster identity 4711
[ 1761.176237][T19259] tipc: Node number set to 65536
[ 1763.615851][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1763.656945][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1763.821228][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1763.825981][T19286] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3360'.
[ 1763.835207][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1763.911166][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1764.018230][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1764.056969][T18980] device veth0_vlan entered promiscuous mode
[ 1764.108403][T18980] device veth1_vlan entered promiscuous mode
[ 1764.201915][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1764.220885][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1764.257384][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1764.339632][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1764.363112][T18980] device veth0_macvtap entered promiscuous mode
[ 1764.384410][T18980] device veth1_macvtap entered promiscuous mode
[ 1764.419157][T18980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1764.434645][T18980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1764.464012][T18980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1764.503567][T18980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1764.513777][T18980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1764.533105][T18980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1765.527586][T18980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1765.542391][T18980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1765.552596][T18980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1766.162335][T18980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1766.210438][T18980] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1766.236089][T13930] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1766.250693][T13930] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1766.276049][T13930] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1766.285310][T13930] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1766.429001][T18980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1766.465354][T18980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1766.501932][T18980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1766.885031][T18980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1766.986039][T18980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1767.035699][T18980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1767.089739][T18980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1767.145864][T18980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1767.175719][T18980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1767.192983][T18980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1767.222748][T18980] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1767.399562][T13923] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1769.032797][T13923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1769.109167][T19320] netlink: 68 bytes leftover after parsing attributes in process `syz.8.3371'.
[ 1769.122433][T18980] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1769.158088][T18980] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1769.190399][T18980] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1769.218277][T18980] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1769.379498][T13923] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1769.396005][T13923] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1769.513605][   T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1769.559751][   T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1769.596704][T13923] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1771.796407][T13923] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1775.693064][T19361] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3384'.
[ 1777.784812][T19379] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3392'.
[ 1777.819484][T19379] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3392'.
[ 1777.867601][T19376] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3392'.
[ 1778.588342][T19386] netlink: 'syz.9.3378': attribute type 33 has an invalid length.
[ 1778.616746][T19386] netlink: 120 bytes leftover after parsing attributes in process `syz.9.3378'.
[ 1778.643911][T19389] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3394'.
[ 1778.682007][T19389] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3394'.
[ 1778.767793][T19385] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3394'.
[ 1778.945608][T19391] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3394'.
[ 1779.589361][T19399] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3398'.
[ 1786.390128][T19452] netlink: 'syz.9.3406': attribute type 29 has an invalid length.
[ 1787.156316][T19452] netlink: 'syz.9.3406': attribute type 29 has an invalid length.
[ 1787.174728][T19453] netlink: 'syz.9.3406': attribute type 29 has an invalid length.
[ 1787.207866][T19454] netlink: 'syz.9.3406': attribute type 29 has an invalid length.
[ 1787.243268][T19455] netlink: 'syz.9.3406': attribute type 29 has an invalid length.
[ 1792.561829][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[ 1792.568222][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[ 1792.803208][T19495] netlink: 'syz.0.3429': attribute type 29 has an invalid length.
[ 1792.843540][T19495] netlink: 'syz.0.3429': attribute type 29 has an invalid length.
[ 1792.880448][T19496] netlink: 'syz.0.3429': attribute type 29 has an invalid length.
[ 1792.924055][T19495] netlink: 'syz.0.3429': attribute type 29 has an invalid length.
[ 1792.936887][T19495] netlink: 'syz.0.3429': attribute type 29 has an invalid length.
[ 1794.625700][   T47] Bluetooth: hci3: command 0x0406 tx timeout
[ 1795.080860][T19512] tipc: Started in network mode
[ 1795.086041][T19512] tipc: Node identity 10000, cluster identity 4711
[ 1795.092611][T19512] tipc: Node number set to 65536
[ 1808.644096][T19570] could not allocate digest TFM handle tgr192
[ 1817.051429][T19631] device team0 entered promiscuous mode
[ 1817.085648][T19631] device team_slave_0 entered promiscuous mode
[ 1817.092182][T19631] device team_slave_1 entered promiscuous mode
[ 1817.471882][T19630] device team0 left promiscuous mode
[ 1817.480529][T19630] device team_slave_0 left promiscuous mode
[ 1817.544386][T19630] device team_slave_1 left promiscuous mode
[ 1825.828881][T19675] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3485'.
[ 1833.837073][T19727] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3501'.
[ 1833.921844][T19727] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3501'.
[ 1834.496055][T19723] could not allocate digest TFM handle tgr192
[ 1838.333835][T19750] 9pnet_fd: Insufficient options for proto=fd
[ 1838.342522][T19750] lo speed is unknown, defaulting to 1000
[ 1838.348365][T19750] lo speed is unknown, defaulting to 1000
[ 1838.354585][T19750] lo speed is unknown, defaulting to 1000
[ 1838.369504][T19750] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[ 1838.440625][T19750] lo speed is unknown, defaulting to 1000
[ 1838.447571][T19750] lo speed is unknown, defaulting to 1000
[ 1838.454318][T19750] lo speed is unknown, defaulting to 1000
[ 1838.461080][T19750] lo speed is unknown, defaulting to 1000
[ 1838.467885][T19750] lo speed is unknown, defaulting to 1000
[ 1838.474818][T19750] lo speed is unknown, defaulting to 1000
[ 1841.236760][T19777] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3514'.
[ 1841.297869][T19777] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3514'.
[ 1842.885612][T19781] could not allocate digest TFM handle tgr192
[ 1843.108020][   T26] audit: type=1326 audit(1736523696.419:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19799 comm="syz.9.3521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadd1385d29 code=0x7ffc0000
[ 1843.188875][   T26] audit: type=1326 audit(1736523696.419:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19799 comm="syz.9.3521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadd1385d29 code=0x7ffc0000
[ 1843.387369][   T26] audit: type=1326 audit(1736523696.439:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19799 comm="syz.9.3521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fadd1385d29 code=0x7ffc0000
[ 1843.436644][   T26] audit: type=1326 audit(1736523696.439:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19799 comm="syz.9.3521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadd1385d29 code=0x7ffc0000
[ 1844.541523][   T26] audit: type=1326 audit(1736523696.439:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19799 comm="syz.9.3521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadd1385d29 code=0x7ffc0000
[ 1844.564919][   T26] audit: type=1326 audit(1736523696.439:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19799 comm="syz.9.3521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fadd1385d29 code=0x7ffc0000
[ 1845.182992][   T26] audit: type=1326 audit(1736523696.439:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19799 comm="syz.9.3521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadd1385d29 code=0x7ffc0000
[ 1845.500376][   T26] audit: type=1326 audit(1736523696.439:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19799 comm="syz.9.3521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadd1385d29 code=0x7ffc0000
[ 1848.089458][T19823] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3527'.
[ 1848.098771][T19823] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3527'.
[ 1850.145979][   T47] Bluetooth: hci0: command 0x0406 tx timeout
[ 1853.935409][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[ 1853.941801][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[ 1854.555775][   T26] audit: type=1400 audit(1736523707.669:130): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3AFFFEFE80 pid=19877 comm="syz.5.3546"
[ 1855.128458][T19885] could not allocate digest TFM handle tgr192
[ 1856.524281][T19907] loop8: detected capacity change from 0 to 512
[ 1856.947655][T19907] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem
[ 1859.088623][T19907] EXT4-fs (loop8): invalid journal inode
[ 1859.109595][T19907] EXT4-fs (loop8): can't get journal size
[ 1859.504133][T19907] EXT4-fs: error -4 creating inode table initialization thread
[ 1859.729713][T19907] EXT4-fs (loop8): mount failed
[ 1860.492531][T19936] could not allocate digest TFM handle tgr192
[ 1864.662080][T19979] loop8: detected capacity change from 0 to 512
[ 1864.747424][T19979] EXT4-fs (loop8): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[ 1864.797390][T19979] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[ 1864.844949][T19979] EXT4-fs (loop8): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[ 1864.904104][T19979] EXT4-fs (loop8): revision level too high, forcing read-only mode
[ 1864.914511][T19979] [EXT4 FS bs=4096, gc=2, bpg=35, ipg=32, mo=e040e01c, mo2=0000]
[ 1864.935204][T19979] EXT4-fs (loop8): failed to initialize system zone (-117)
[ 1864.954354][T19979] EXT4-fs (loop8): mount failed
[ 1865.076595][T19974] block device autoloading is deprecated and will be removed.
[ 1865.706050][T19988] could not allocate digest TFM handle tgr192
[ 1870.222411][T20026] sctp: [Deprecated]: syz.5.3586 (pid 20026) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1870.222411][T20026] Use struct sctp_sack_info instead
[ 1882.478676][   T26] audit: type=1400 audit(1736523735.559:131): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3AFFFEFE80 pid=20103 comm="syz.9.3607"
[ 1882.563990][T20097] could not allocate digest TFM handle tgr192
[ 1884.254680][T20128] block device autoloading is deprecated and will be removed.
[ 1884.861946][T20140] Invalid ELF header type: 0 != 1
[ 1889.105978][T20163] netlink: set zone limit has 8 unknown bytes
[ 1889.445864][T20161] could not allocate digest TFM handle tgr192
[ 1894.055630][   T26] audit: type=1400 audit(1736523747.039:132): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3AFFFEFE80 pid=20190 comm="syz.9.3624"
[ 1895.303202][T20199] block device autoloading is deprecated and will be removed.
[ 1896.254430][T20208] could not allocate digest TFM handle tgr192
[ 1896.447763][T20224] loop8: detected capacity change from 0 to 128
[ 1899.902225][T20236] loop0: detected capacity change from 0 to 512
[ 1899.963512][T20236] EXT4-fs (loop0): revision level too high, forcing read-only mode
[ 1899.980374][T20236] EXT4-fs (loop0): orphan cleanup on readonly fs
[ 1900.078415][T20236] EXT4-fs warning (device loop0): ext4_enable_quotas:7029: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[ 1900.093151][T20236] EXT4-fs (loop0): Cannot turn on quotas: error -22
[ 1900.103421][T20236] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #16: comm syz.0.3646: casefold flag without casefold feature
[ 1900.169756][T20236] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.3646: couldn't read orphan inode 16 (err -117)
[ 1900.186421][T20236] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[ 1900.626683][T16722] EXT4-fs (loop0): unmounting filesystem.
[ 1903.820459][T20266] could not allocate digest TFM handle tgr192
[ 1907.656249][T20298] ebt_among: dst integrity fail: 101
[ 1910.175392][T20317] loop8: detected capacity change from 0 to 512
[ 1910.976270][T20317] EXT4-fs (loop8): revision level too high, forcing read-only mode
[ 1910.986019][T20317] EXT4-fs (loop8): orphan cleanup on readonly fs
[ 1910.993036][T20317] EXT4-fs warning (device loop8): ext4_enable_quotas:7029: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[ 1911.007686][T20317] EXT4-fs (loop8): Cannot turn on quotas: error -22
[ 1911.018544][T20317] EXT4-fs error (device loop8): ext4_orphan_get:1400: inode #16: comm syz.8.3660: casefold flag without casefold feature
[ 1911.031839][T20317] EXT4-fs error (device loop8): ext4_orphan_get:1405: comm syz.8.3660: couldn't read orphan inode 16 (err -117)
[ 1911.044260][T20317] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[ 1911.286010][T16351] EXT4-fs (loop8): unmounting filesystem.
[ 1914.634410][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[ 1914.641054][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[ 1919.686588][T20365] Invalid ELF header type: 0 != 1
[ 1924.412386][T20378] loop8: detected capacity change from 0 to 512
[ 1924.486398][T20378] EXT4-fs: Ignoring removed orlov option
[ 1924.515841][T20378] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1924.595609][T20378] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1924.750313][T20378] EXT4-fs error (device loop8): ext4_orphan_get:1400: inode #15: comm syz.8.3690: casefold flag without casefold feature
[ 1924.925137][T20378] EXT4-fs (loop8): Remounting filesystem read-only
[ 1924.939425][T20378] EXT4-fs error (device loop8): ext4_orphan_get:1405: comm syz.8.3690: couldn't read orphan inode 15 (err -117)
[ 1925.105797][T20378] EXT4-fs (loop8): Remounting filesystem read-only
[ 1925.142936][T20378] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[ 1925.433521][T20384] EXT4-fs error (device loop8): ext4_empty_dir:3136: inode #2: comm syz.8.3690: invalid size
[ 1926.500868][T20384] EXT4-fs (loop8): Remounting filesystem read-only
[ 1932.265770][T16351] EXT4-fs (loop8): unmounting filesystem.
[ 1932.295316][T20419] netlink: 'syz.0.3701': attribute type 10 has an invalid length.
[ 1934.930759][T20419] bond0: (slave wlan1): Enslaving as an active interface with an up link
[ 1936.878533][T20459] Invalid ELF header type: 0 != 1
[ 1936.943922][   T26] audit: type=1107 audit(1736523790.239:133): pid=20449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='p?€†vãÊ&_q•	¨<ñ,PÊ~1çéîwOBÓ�i•ëÔ¿;Ì‹È÷$e5Ðø}rxÃ]X�f“êÆ?‡âÖG·iMò]4Ð0p„ÕêtÖ�³�ñh`»ö~¬È
ŠÙÑYшxeGǦª<#u�¸á-…ã]êÇÜ\=G!íy-œ÷
[ 1936.943922][   T26] hõ'ÃÆd�”ÓÙù¶A)Œ×‚ßsó7©­ˆy	†µ>|Ç3Weæ|¾¾üÜ¥#1ézŽ_R§?='
[ 1940.311401][T20470] loop0: detected capacity change from 0 to 512
[ 1940.368592][T20470] EXT4-fs: Ignoring removed orlov option
[ 1940.426334][T20470] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1940.475812][T20470] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1940.755639][T20470] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.3714: casefold flag without casefold feature
[ 1940.789033][T20470] EXT4-fs (loop0): Remounting filesystem read-only
[ 1940.830681][T20470] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.3714: couldn't read orphan inode 15 (err -117)
[ 1940.910183][T20470] EXT4-fs (loop0): Remounting filesystem read-only
[ 1940.951334][T20470] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[ 1941.204264][T20477] EXT4-fs error (device loop0): ext4_empty_dir:3136: inode #2: comm syz.0.3714: invalid size
[ 1941.297158][T20477] EXT4-fs (loop0): Remounting filesystem read-only
[ 1941.778449][T16722] EXT4-fs (loop0): unmounting filesystem.
[ 1951.895053][T20540] loop8: detected capacity change from 0 to 2048
[ 1951.993418][T20540] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[ 1952.011586][T20540] ext4 filesystem being mounted at /217/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1952.257209][T16351] EXT4-fs (loop8): unmounting filesystem.
[ 1955.187727][T20576] Invalid ELF header type: 0 != 1
[ 1956.531253][T20582] loop8: detected capacity change from 0 to 2048
[ 1958.175720][T20582] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[ 1958.184348][T20582] ext4 filesystem being mounted at /222/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1958.828936][T16351] EXT4-fs (loop8): unmounting filesystem.
[ 1959.088276][T20600] loop8: detected capacity change from 0 to 512
[ 1959.141930][T20600] EXT4-fs: Ignoring removed orlov option
[ 1959.192982][T20600] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1959.235620][T20600] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1960.063571][T20600] EXT4-fs error (device loop8): ext4_orphan_get:1400: inode #15: comm syz.8.3753: casefold flag without casefold feature
[ 1960.201190][T20600] EXT4-fs (loop8): Remounting filesystem read-only
[ 1960.214256][T20600] EXT4-fs error (device loop8): ext4_orphan_get:1405: comm syz.8.3753: couldn't read orphan inode 15 (err -117)
[ 1960.245885][T20600] EXT4-fs (loop8): Remounting filesystem read-only
[ 1960.252574][T20600] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[ 1961.057503][T20607] EXT4-fs error (device loop8): ext4_empty_dir:3136: inode #2: comm syz.8.3753: invalid size
[ 1961.462490][T20607] EXT4-fs (loop8): Remounting filesystem read-only
[ 1962.376742][T20622] loop0: detected capacity change from 0 to 512
[ 1963.176201][T20622] EXT4-fs (loop0): revision level too high, forcing read-only mode
[ 1963.184908][T20622] EXT4-fs (loop0): orphan cleanup on readonly fs
[ 1963.191885][T20622] EXT4-fs warning (device loop0): ext4_enable_quotas:7029: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[ 1963.206555][T20622] EXT4-fs (loop0): Cannot turn on quotas: error -22
[ 1963.215710][T20622] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #16: comm syz.0.3738: casefold flag without casefold feature
[ 1963.230479][T20622] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.3738: couldn't read orphan inode 16 (err -117)
[ 1963.243608][T20622] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[ 1963.566428][T16722] EXT4-fs (loop0): unmounting filesystem.
[ 1963.666948][   T26] audit: type=1400 audit(1736523816.979:134): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3AFFFEFE80 pid=20619 comm="syz.5.3759"
[ 1966.032997][T16351] EXT4-fs (loop8): unmounting filesystem.
[ 1966.077065][T20639] loop0: detected capacity change from 0 to 2048
[ 1966.130450][T20639]  loop0: p3 < > p4 < >
[ 1966.345598][T20639] loop0: partition table partially beyond EOD, truncated
[ 1966.352818][T20639] loop0: p3 start 4284289 is beyond EOD, truncated
[ 1967.408669][T20655] Invalid ELF header type: 0 != 1
[ 1969.225599][T20659] syz.8.3768 uses obsolete (PF_INET,SOCK_PACKET)
[ 1969.867294][T20668] loop0: detected capacity change from 0 to 512
[ 1969.874272][T20668] EXT4-fs: Ignoring removed orlov option
[ 1969.926326][T20668] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1969.952403][T20668] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1970.109994][T20668] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.3771: casefold flag without casefold feature
[ 1970.130778][T20668] EXT4-fs (loop0): Remounting filesystem read-only
[ 1970.200288][T20667] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3770'.
[ 1970.205636][T20668] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.3771: couldn't read orphan inode 15 (err -117)
[ 1970.326044][T20668] EXT4-fs (loop0): Remounting filesystem read-only
[ 1970.332642][T20668] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[ 1973.554346][T16722] EXT4-fs (loop0): unmounting filesystem.
[ 1976.135294][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[ 1976.145973][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[ 1978.184444][T20714] sctp: [Deprecated]: syz.5.3786 (pid 20714) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1978.184444][T20714] Use struct sctp_sack_info instead
[ 1980.897402][T20730] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3788'.
[ 1981.305046][T18989] usb 6-1: new high-speed USB device number 42 using dummy_hcd
[ 1981.831037][T18989] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[ 1981.865498][T18989] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1981.925348][T18989] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1981.955537][T18989] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1981.988617][T18989] usb 6-1: config 0 descriptor??
[ 1982.013133][T20730] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1982.040815][T18989] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 1982.513595][T20747] sctp: [Deprecated]: syz.8.3798 (pid 20747) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1982.513595][T20747] Use struct sctp_sack_info instead
[ 1984.036566][T13401] usb 6-1: USB disconnect, device number 42
[ 1987.516586][T20777] 9pnet_fd: Insufficient options for proto=fd
[ 1987.530494][T20777] siw: device registration error -23
[ 1989.518816][T20779] loop8: detected capacity change from 0 to 2048
[ 1989.670085][T20779]  loop8: p3 < > p4 < >
[ 1989.674320][T20779] loop8: partition table partially beyond EOD, truncated
[ 1989.785724][T20779] loop8: p3 start 4284289 is beyond EOD, truncated
[ 1991.816798][T20800] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3812'.
[ 1991.826978][T20799] loop0: detected capacity change from 0 to 512
[ 1991.834159][T20799] EXT4-fs: Ignoring removed orlov option
[ 1992.047373][T20799] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1992.105613][T20799] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1992.345618][ T6889] usb 10-1: new high-speed USB device number 14 using dummy_hcd
[ 1992.767608][ T6889] usb 10-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[ 1992.945863][ T6889] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1992.959413][ T6889] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1992.968737][ T6889] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1993.068140][ T6889] usb 10-1: config 0 descriptor??
[ 1993.091822][T20799] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.3789: casefold flag without casefold feature
[ 1993.109292][T20799] EXT4-fs (loop0): Remounting filesystem read-only
[ 1993.225825][T20805] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[ 1993.234834][ T6889] usbhid 10-1:0.0: couldn't find an input interrupt endpoint
[ 1993.245653][T20799] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.3789: couldn't read orphan inode 15 (err -117)
[ 1993.432581][T20799] EXT4-fs (loop0): Remounting filesystem read-only
[ 1993.470221][T20799] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[ 1995.846523][ T4295] usb 10-1: USB disconnect, device number 14
[ 1996.612716][T20695] EXT4-fs (loop0): unmounting filesystem.
[ 1996.665644][ T7537] usb 6-1: new high-speed USB device number 43 using dummy_hcd
[ 1997.555829][ T7537] usb 6-1: Using ep0 maxpacket: 8
[ 1997.585174][ T7537] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1997.921241][ T7537] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1997.929671][ T7537] usb 6-1: Product: syz
[ 1997.934297][ T7537] usb 6-1: Manufacturer: syz
[ 1997.965458][ T7537] usb 6-1: SerialNumber: syz
[ 1997.991307][ T7537] usb 6-1: config 0 descriptor??
[ 1998.280306][ T7537] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1998.537102][ T4262] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1998.579866][ T4262] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1998.590440][ T4262] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1998.598709][ T4262] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1998.606633][ T4262] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[ 1998.614113][ T4262] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1999.522013][   T51] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2000.599210][ T7537] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -71
[ 2000.636594][ T7537] usb 6-1: USB disconnect, device number 43
[ 2000.705812][   T47] Bluetooth: hci5: command 0x0409 tx timeout
[ 2000.747022][T20857] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3828'.
[ 2000.862473][   T51] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2000.910150][T20846] lo speed is unknown, defaulting to 1000
[ 2001.092867][   T51] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2001.115551][ T6889] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[ 2001.317838][ T6889] usb 9-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[ 2001.327942][   T51] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2001.877098][ T6889] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 2001.904906][ T6889] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2001.926109][ T6889] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2001.961144][ T6889] usb 9-1: config 0 descriptor??
[ 2001.975365][T20858] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[ 2001.998545][ T6889] usbhid 9-1:0.0: couldn't find an input interrupt endpoint
[ 2002.227196][T20846] chnl_net:caif_netlink_parms(): no params data found
[ 2002.305507][T20874] 9pnet_fd: Insufficient options for proto=fd
[ 2002.319139][T20874] siw: device registration error -23
[ 2002.889173][   T47] Bluetooth: hci5: command 0x041b tx timeout
[ 2003.143413][   T51] tipc: Left network mode
[ 2005.070106][   T26] audit: type=1400 audit(1736523858.379:135): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3AFFFEFE80 pid=20882 comm="syz.7.3827"
[ 2005.095917][   T47] Bluetooth: hci5: command 0x040f tx timeout
[ 2005.165989][ T4295] usb 9-1: USB disconnect, device number 8
[ 2005.306504][T20846] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2005.313664][T20846] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2005.338942][T20846] device bridge_slave_0 entered promiscuous mode
[ 2005.543593][T20846] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2005.573463][T20846] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2005.599776][T20846] device bridge_slave_1 entered promiscuous mode
[ 2005.792486][T20846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2005.842522][T20846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2005.935506][ T4295] usb 6-1: new high-speed USB device number 44 using dummy_hcd
[ 2005.972019][T20846] team0: Port device team_slave_0 added
[ 2006.875472][ T4295] usb 6-1: Using ep0 maxpacket: 16
[ 2007.026903][ T4295] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2007.068672][T20846] team0: Port device team_slave_1 added
[ 2007.105533][   T47] Bluetooth: hci5: command 0x0419 tx timeout
[ 2007.128646][T20916] 9pnet_fd: Insufficient options for proto=fd
[ 2007.884296][ T4295] usb 6-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=2c.ae
[ 2007.903614][ T4295] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2007.923877][ T4295] usb 6-1: Product: syz
[ 2007.933991][ T4295] usb 6-1: Manufacturer: syz
[ 2007.938771][ T4295] usb 6-1: SerialNumber: syz
[ 2008.023577][ T4295] usb 6-1: config 0 descriptor??
[ 2008.037814][ T4295] gspca_main: etoms-2.14.0 probing 102c:6151
[ 2008.484122][ T4295] usb 6-1: USB disconnect, device number 44
[ 2009.106940][T20846] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2009.114303][T20846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2009.128889][T20925] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3845'.
[ 2009.175500][T20846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2009.207010][T20846] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2009.232382][T20846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2009.274620][T20928] loop8: detected capacity change from 0 to 128
[ 2009.294195][T20846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2010.382774][T20846] device hsr_slave_0 entered promiscuous mode
[ 2010.416626][T20846] device hsr_slave_1 entered promiscuous mode
[ 2010.454521][T20846] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2010.497326][T20846] Cannot create hsr debugfs directory
[ 2011.452646][   T26] audit: type=1400 audit(1736523864.179:136): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3AFFFEFE80 pid=20932 comm="syz.5.3848"
[ 2011.667683][   T51] bond0: (slave wlan1): Releasing backup interface
[ 2012.118327][T20949] loop8: detected capacity change from 0 to 512
[ 2012.229841][T20949] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem
[ 2012.313071][T20949] EXT4-fs (loop8): invalid journal inode
[ 2012.334111][T20949] EXT4-fs (loop8): can't get journal size
[ 2012.810116][T20961] 9pnet_fd: Insufficient options for proto=fd
[ 2012.845448][T20961] siw: device registration error -23
[ 2014.159386][T20955] virtio-fs: tag <(null)> not found
[ 2014.197055][T20949] EXT4-fs (loop8): 1 truncate cleaned up
[ 2014.202783][T20949] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[ 2014.248253][T20965] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3857'.
[ 2014.278674][   T51] device hsr_slave_0 left promiscuous mode
[ 2014.279573][T20949] EXT4-fs (loop8): unmounting filesystem.
[ 2014.293119][   T51] device hsr_slave_1 left promiscuous mode
[ 2014.320713][   T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2014.328497][   T51] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2014.336880][   T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2014.344400][   T51] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2014.353780][   T51] device bridge_slave_1 left promiscuous mode
[ 2014.361326][   T51] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2014.371163][   T51] device bridge_slave_0 left promiscuous mode
[ 2014.377507][   T51] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2014.469271][   T51] device veth1_macvtap left promiscuous mode
[ 2014.482021][   T51] device veth0_macvtap left promiscuous mode
[ 2014.497824][   T51] device veth1_vlan left promiscuous mode
[ 2014.504001][   T51] device veth0_vlan left promiscuous mode
[ 2014.756207][ T7537] usb 6-1: new high-speed USB device number 45 using dummy_hcd
[ 2014.947858][ T7537] usb 6-1: too many configurations: 9, using maximum allowed: 8
[ 2015.009377][ T7537] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 2015.140455][ T7537] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 2015.349324][ T7537] usb 6-1: config 0 interface 0 has no altsetting 0
[ 2015.412265][ T7537] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 2015.422899][ T7537] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 2015.434123][ T7537] usb 6-1: config 0 interface 0 has no altsetting 0
[ 2015.474210][ T7537] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 2015.484188][ T7537] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 2015.495737][ T7537] usb 6-1: config 0 interface 0 has no altsetting 0
[ 2015.508091][ T7537] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 2015.542512][ T7537] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 2015.570035][ T7537] usb 6-1: config 0 interface 0 has no altsetting 0
[ 2015.628987][ T7537] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 2015.638116][ T7537] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 2015.649117][ T7537] usb 6-1: config 0 interface 0 has no altsetting 0
[ 2015.657127][ T7537] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 2015.709444][ T7537] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 2015.784376][ T7537] usb 6-1: config 0 interface 0 has no altsetting 0
[ 2015.832805][ T7537] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 2015.879643][ T7537] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 2015.934041][ T7537] usb 6-1: config 0 interface 0 has no altsetting 0
[ 2015.941643][   T26] audit: type=1400 audit(1736523869.039:137): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3AFFFEFE80 pid=20975 comm="syz.8.3859"
[ 2016.004367][ T7537] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 2016.052209][ T7537] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 2016.111271][ T7537] usb 6-1: config 0 interface 0 has no altsetting 0
[ 2016.166120][ T7537] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[ 2016.215872][ T7537] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[ 2016.249451][ T7537] usb 6-1: Product: syz
[ 2016.253870][ T7537] usb 6-1: Manufacturer: syz
[ 2016.262030][ T7537] usb 6-1: SerialNumber: syz
[ 2016.274316][ T7537] usb 6-1: config 0 descriptor??
[ 2016.313670][ T7537] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0
[ 2016.623565][ T4366] usb 6-1: USB disconnect, device number 45
[ 2016.639256][ T4366] yurex 6-1:0.0: USB YUREX #0 now disconnected
[ 2016.708992][T20982] loop8: detected capacity change from 0 to 2048
[ 2016.770990][T20982]  loop8: p3 < > p4 < >
[ 2016.775280][T20982] loop8: partition table partially beyond EOD, truncated
[ 2016.799404][T20982] loop8: p3 start 4284289 is beyond EOD, truncated
[ 2016.925848][T20982] loop8: detected capacity change from 0 to 2048
[ 2017.082766][   T51] team0 (unregistering): Port device team_slave_1 removed
[ 2017.154388][   T51] team0 (unregistering): Port device team_slave_0 removed
[ 2017.224325][   T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2017.324338][   T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2018.136937][   T51] bond0 (unregistering): Released all slaves
[ 2019.701921][T21001] 9pnet_fd: Insufficient options for proto=fd
[ 2019.712173][T21001] siw: device registration error -23
[ 2021.229480][T21022] virtio-fs: tag <(null)> not found
[ 2023.881353][T20846] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 2023.910151][T20846] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 2023.922239][T20846] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 2023.966214][T20846] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 2024.848373][T20846] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2024.927069][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2024.956688][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2025.000932][T20846] 8021q: adding VLAN 0 to HW filter on device team0
[ 2025.055463][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2025.072313][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2025.103930][   T51] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2025.111168][   T51] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2025.173417][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 2025.186558][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2025.207952][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2025.229686][   T51] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2025.236995][   T51] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2025.281712][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 2025.314134][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 2025.353817][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 2025.393761][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 2025.433908][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 2026.796612][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 2026.825210][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 2026.858149][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 2026.873523][T21063] virtio-fs: tag <(null)> not found
[ 2026.880673][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2026.919020][ T6010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 2026.936529][ T6010] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2026.968795][T20846] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 2028.979391][T18989] usb 10-1: new high-speed USB device number 15 using dummy_hcd
[ 2028.994782][T20361] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 2029.023112][T20361] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 2029.058018][T20846] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2029.102249][T20361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2029.140880][T20361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2029.175022][T20361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2029.196960][T20361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2029.197507][T18989] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 2029.224458][T20846] device veth0_vlan entered promiscuous mode
[ 2029.237590][T20361] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2029.246806][T20361] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2029.256725][T18989] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 2029.291796][T18989] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 2029.292135][T20846] device veth1_vlan entered promiscuous mode
[ 2029.322584][T18989] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2029.368557][T21072] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[ 2029.401587][T20361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2029.426391][T20361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2029.444141][T20846] device veth0_macvtap entered promiscuous mode
[ 2029.487901][T20846] device veth1_macvtap entered promiscuous mode
[ 2029.530930][T20846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2029.555496][T20846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2029.585510][T20846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2029.607827][T20846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2029.628077][T20846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2029.651799][T20846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2029.675538][T20846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2029.699956][T20846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2029.735428][T20846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2029.837794][T20846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2029.868964][T20846] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2029.888104][T18989] usb 10-1: USB disconnect, device number 15
[ 2029.908978][ T7389] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 2029.928396][ T7389] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2029.941975][ T7389] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2029.954695][ T7389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2029.982810][T20846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2030.017955][T20846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2030.075059][T20846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2030.123255][T20846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2030.180391][T20846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2030.196789][T20846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2030.213490][T20846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2030.239267][T20846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2030.268581][T20846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2030.351972][T20846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2030.398298][T20846] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2031.031838][T20361] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2031.062880][T20361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2031.076633][T20846] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2031.110740][T20846] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2031.131781][T20846] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2031.142714][T20846] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2034.703752][ T7389] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2034.775839][ T7389] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2034.783193][ T4418] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2034.805680][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 2034.824647][ T4418] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2035.008765][ T4619] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 2036.880783][T21144] virtio-fs: tag <(null)> not found
[ 2037.747960][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[ 2037.754390][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[ 2040.841461][T21171] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3917'.
[ 2041.302709][ T6889] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[ 2041.515108][ T6889] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[ 2041.565597][ T6889] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 2041.608045][ T6889] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2041.641511][ T6889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2041.689891][ T6889] usb 2-1: config 0 descriptor??
[ 2041.716038][T21171] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 2041.732571][ T6889] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[ 2042.915623][T21197] virtio-fs: tag <(null)> not found
[ 2043.438244][ T4302] usb 2-1: USB disconnect, device number 16
[ 2044.826773][T21211] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3926'.
[ 2044.883270][T21211] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3926'.
[ 2044.963979][T21211] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3926'.
[ 2045.007892][T21210] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2045.095899][T21210] Bluetooth: hci1: Opcode 0x0406 failed: -4
[ 2046.216187][T21210] Bluetooth: hci1: Suspend notifier action (1) failed: -4
[ 2046.225177][T21210] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2046.885713][ T4262] Bluetooth: hci1: command 0x0c1a tx timeout
[ 2046.887942][   T47] Bluetooth: hci5: command 0x0405 tx timeout
[ 2046.905658][T21210] Bluetooth: hci4: Opcode 0x0406 failed: -4
[ 2046.968405][T21210] Bluetooth: hci4: Suspend notifier action (1) failed: -4
[ 2047.078560][T21210] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 2047.110167][T21210] Bluetooth: hci3: Opcode 0x0406 failed: -4
[ 2047.140054][T21210] Bluetooth: hci3: Suspend notifier action (1) failed: -4
[ 2047.199085][T21210] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 2047.235731][T21210] Bluetooth: hci0: Opcode 0x0406 failed: -4
[ 2047.254445][T21210] Bluetooth: hci0: Suspend notifier action (1) failed: -4
[ 2047.552746][T21210] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 2047.671754][T21210] Bluetooth: hci5: Opcode 0x0406 failed: -4
[ 2047.876002][T21210] Bluetooth: hci5: Suspend notifier action (1) failed: -4
[ 2048.091550][   T47] Bluetooth: hci4: unexpected event for opcode 0x1003
[ 2048.991575][   T47] Bluetooth: hci1: command 0x0406 tx timeout
[ 2049.108577][   T47] Bluetooth: hci3: command 0x0c1a tx timeout
[ 2049.460396][   T47] Bluetooth: hci0: command 0x0c1a tx timeout
[ 2049.585518][ T4250] Bluetooth: hci5: command 0x0c1a tx timeout
[ 2049.936118][T21247] input: syz0 as /devices/virtual/input/input79
[ 2051.374464][ T4250] Bluetooth: hci3: command 0x0406 tx timeout
[ 2051.515568][ T4250] Bluetooth: hci0: command 0x0406 tx timeout
[ 2051.855073][   T47] Bluetooth: hci5: command 0x0406 tx timeout
[ 2054.561327][   T47] Bluetooth: hci0: unexpected event for opcode 0xf266
[ 2055.318112][T21281] virtio-fs: tag <(null)> not found
[ 2055.828688][T21284] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3944'.
[ 2055.902817][   T47] Bluetooth: hci4: unexpected event for opcode 0x1003
[ 2056.009489][T21288] loop8: detected capacity change from 0 to 512
[ 2056.085598][T21288] EXT4-fs (loop8): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[ 2056.103620][T21288] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[ 2056.157218][T21288] EXT4-fs (loop8): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[ 2056.255170][T21288] EXT4-fs (loop8): revision level too high, forcing read-only mode
[ 2056.302039][T21288] [EXT4 FS bs=4096, gc=2, bpg=35, ipg=32, mo=e040e01c, mo2=0000]
[ 2056.340084][T21288] EXT4-fs (loop8): failed to initialize system zone (-117)
[ 2056.378280][T21288] EXT4-fs (loop8): mount failed
[ 2057.603744][T21290] blktrace: Concurrent blktraces are not allowed on loop18
[ 2057.748570][T21301] 
[ 2057.751003][T21301] ======================================================
[ 2057.758053][T21301] WARNING: possible circular locking dependency detected
[ 2057.765102][T21301] 6.1.124-syzkaller #0 Not tainted
[ 2057.770243][T21301] ------------------------------------------------------
[ 2057.777291][T21301] syz.5.3950/21301 is trying to acquire lock:
[ 2057.783372][T21301] ffffffff8e6537b8 (nr_neigh_list_lock){+...}-{2:2}, at: nr_rt_ioctl+0x394/0xfb0
[ 2057.792551][T21301] 
[ 2057.792551][T21301] but task is already holding lock:
[ 2057.799914][T21301] ffff88814d04b470 (&nr_node->node_lock){+...}-{2:2}, at: nr_rt_ioctl+0x18e/0xfb0
[ 2057.809158][T21301] 
[ 2057.809158][T21301] which lock already depends on the new lock.
[ 2057.809158][T21301] 
[ 2057.819562][T21301] 
[ 2057.819562][T21301] the existing dependency chain (in reverse order) is:
[ 2057.828578][T21301] 
[ 2057.828578][T21301] -> #2 (&nr_node->node_lock){+...}-{2:2}:
[ 2057.836578][T21301]        lock_acquire+0x1f8/0x5a0
[ 2057.841618][T21301]        _raw_spin_lock_bh+0x31/0x40
[ 2057.846911][T21301]        nr_rt_ioctl+0x18e/0xfb0
[ 2057.851857][T21301]        sock_do_ioctl+0x152/0x450
[ 2057.856970][T21301]        sock_ioctl+0x47f/0x770
[ 2057.861823][T21301]        __se_sys_ioctl+0xf1/0x160
[ 2057.866939][T21301]        do_syscall_64+0x3b/0xb0
[ 2057.871882][T21301]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2057.878310][T21301] 
[ 2057.878310][T21301] -> #1 (nr_node_list_lock){+...}-{2:2}:
[ 2057.886140][T21301]        lock_acquire+0x1f8/0x5a0
[ 2057.891173][T21301]        _raw_spin_lock_bh+0x31/0x40
[ 2057.896461][T21301]        nr_rt_device_down+0xb1/0x7b0
[ 2057.901837][T21301]        nr_device_event+0x12b/0x140
[ 2057.907129][T21301]        raw_notifier_call_chain+0xd0/0x170
[ 2057.913026][T21301]        __dev_notify_flags+0x304/0x610
[ 2057.918579][T21301]        dev_change_flags+0xe7/0x190
[ 2057.923865][T21301]        dev_ifsioc+0x177/0x1160
[ 2057.928804][T21301]        dev_ioctl+0x508/0xf70
[ 2057.933586][T21301]        sock_do_ioctl+0x26b/0x450
[ 2057.938695][T21301]        sock_ioctl+0x47f/0x770
[ 2057.943543][T21301]        __se_sys_ioctl+0xf1/0x160
[ 2057.948654][T21301]        do_syscall_64+0x3b/0xb0
[ 2057.953599][T21301]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2057.960023][T21301] 
[ 2057.960023][T21301] -> #0 (nr_neigh_list_lock){+...}-{2:2}:
[ 2057.967934][T21301]        validate_chain+0x1661/0x5950
[ 2057.973310][T21301]        __lock_acquire+0x125b/0x1f80
[ 2057.978693][T21301]        lock_acquire+0x1f8/0x5a0
[ 2057.983729][T21301]        _raw_spin_lock_bh+0x31/0x40
[ 2057.989022][T21301]        nr_rt_ioctl+0x394/0xfb0
[ 2057.993975][T21301]        sock_do_ioctl+0x152/0x450
[ 2057.999086][T21301]        sock_ioctl+0x47f/0x770
[ 2058.003935][T21301]        __se_sys_ioctl+0xf1/0x160
[ 2058.009063][T21301]        do_syscall_64+0x3b/0xb0
[ 2058.014012][T21301]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2058.020522][T21301] 
[ 2058.020522][T21301] other info that might help us debug this:
[ 2058.020522][T21301] 
[ 2058.030745][T21301] Chain exists of:
[ 2058.030745][T21301]   nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock
[ 2058.030745][T21301] 
[ 2058.044571][T21301]  Possible unsafe locking scenario:
[ 2058.044571][T21301] 
[ 2058.052017][T21301]        CPU0                    CPU1
[ 2058.057379][T21301]        ----                    ----
[ 2058.062738][T21301]   lock(&nr_node->node_lock);
[ 2058.067510][T21301]                                lock(nr_node_list_lock);
[ 2058.074618][T21301]                                lock(&nr_node->node_lock);
[ 2058.081898][T21301]   lock(nr_neigh_list_lock);
[ 2058.086578][T21301] 
[ 2058.086578][T21301]  *** DEADLOCK ***
[ 2058.086578][T21301] 
[ 2058.094717][T21301] 2 locks held by syz.5.3950/21301:
[ 2058.099907][T21301]  #0: ffffffff8e653818 (nr_node_list_lock){+...}-{2:2}, at: nr_rt_ioctl+0xfc/0xfb0
[ 2058.109331][T21301]  #1: ffff88814d04b470 (&nr_node->node_lock){+...}-{2:2}, at: nr_rt_ioctl+0x18e/0xfb0
[ 2058.119008][T21301] 
[ 2058.119008][T21301] stack backtrace:
[ 2058.124901][T21301] CPU: 1 PID: 21301 Comm: syz.5.3950 Not tainted 6.1.124-syzkaller #0
[ 2058.133059][T21301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 2058.143118][T21301] Call Trace:
[ 2058.146413][T21301]  <TASK>
[ 2058.149348][T21301]  dump_stack_lvl+0x1e3/0x2cb
[ 2058.154041][T21301]  ? nf_tcp_handle_invalid+0x642/0x642
[ 2058.159516][T21301]  ? print_circular_bug+0x12b/0x1a0
[ 2058.164718][T21301]  check_noncircular+0x2fa/0x3b0
[ 2058.169661][T21301]  ? add_chain_block+0x850/0x850
[ 2058.174600][T21301]  ? lockdep_lock+0x11f/0x2a0
[ 2058.179287][T21301]  ? _find_first_zero_bit+0xd0/0x100
[ 2058.184588][T21301]  validate_chain+0x1661/0x5950
[ 2058.189440][T21301]  ? kernel_text_address+0x9f/0xd0
[ 2058.194567][T21301]  ? stack_trace_save+0x113/0x1c0
[ 2058.199600][T21301]  ? reacquire_held_locks+0x660/0x660
[ 2058.204975][T21301]  ? stack_trace_snprint+0xe0/0xe0
[ 2058.210104][T21301]  ? lockdep_unlock+0x165/0x300
[ 2058.214961][T21301]  ? 0xffffffffa0000954
[ 2058.219130][T21301]  ? mark_lock+0x9a/0x340
[ 2058.223473][T21301]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[ 2058.229470][T21301]  ? mark_lock+0x9a/0x340
[ 2058.233809][T21301]  __lock_acquire+0x125b/0x1f80
[ 2058.238679][T21301]  lock_acquire+0x1f8/0x5a0
[ 2058.243190][T21301]  ? nr_rt_ioctl+0x394/0xfb0
[ 2058.247786][T21301]  ? kasan_save_free_info+0x27/0x40
[ 2058.252988][T21301]  ? ____kasan_slab_free+0xd6/0x120
[ 2058.258191][T21301]  ? read_lock_is_recursive+0x10/0x10
[ 2058.263576][T21301]  ? nr_rt_ioctl+0x394/0xfb0
[ 2058.268170][T21301]  ? __bpf_trace_softirq+0x10/0x10
[ 2058.273299][T21301]  ? __rwlock_init+0x140/0x140
[ 2058.278072][T21301]  ? nr_rt_ioctl+0x394/0xfb0
[ 2058.282668][T21301]  _raw_spin_lock_bh+0x31/0x40
[ 2058.287445][T21301]  ? nr_rt_ioctl+0x394/0xfb0
[ 2058.292041][T21301]  nr_rt_ioctl+0x394/0xfb0
[ 2058.296468][T21301]  ? nr_dev_get+0x370/0x370
[ 2058.300976][T21301]  ? lockdep_hardirqs_on+0x94/0x130
[ 2058.306185][T21301]  ? apparmor_capable+0x12e/0x190
[ 2058.311226][T21301]  ? capable+0x84/0xe0
[ 2058.315329][T21301]  ? nr_ioctl+0x128/0x300
[ 2058.319678][T21301]  sock_do_ioctl+0x152/0x450
[ 2058.324276][T21301]  ? sock_show_fdinfo+0xb0/0xb0
[ 2058.329135][T21301]  ? do_futex+0x3b5/0x490
[ 2058.333497][T21301]  sock_ioctl+0x47f/0x770
[ 2058.337828][T21301]  ? sock_poll+0x410/0x410
[ 2058.342246][T21301]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[ 2058.348266][T21301]  ? print_irqtrace_events+0x210/0x210
[ 2058.353741][T21301]  ? print_irqtrace_events+0x210/0x210
[ 2058.359214][T21301]  ? bpf_lsm_file_ioctl+0x5/0x10
[ 2058.364158][T21301]  ? security_file_ioctl+0x7d/0xa0
[ 2058.369272][T21301]  ? sock_poll+0x410/0x410
[ 2058.373696][T21301]  __se_sys_ioctl+0xf1/0x160
[ 2058.378295][T21301]  do_syscall_64+0x3b/0xb0
[ 2058.382721][T21301]  ? clear_bhb_loop+0x45/0xa0
[ 2058.387422][T21301]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2058.393327][T21301] RIP: 0033:0x7f413a785d29
[ 2058.397741][T21301] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2058.417362][T21301] RSP: 002b:00007f413b50b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2058.425809][T21301] RAX: ffffffffffffffda RBX: 00007f413a975fa0 RCX: 00007f413a785d29
[ 2058.433783][T21301] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000006
[ 2058.441751][T21301] RBP: 00007f413a801b08 R08: 0000000000000000 R09: 0000000000000000
[ 2058.449746][T21301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2058.457721][T21301] R13: 0000000000000000 R14: 00007f413a975fa0 R15: 00007ffe0956ed08
[ 2058.465703][T21301]  </TASK>
[ 2058.753013][T21306] 9pnet_fd: Insufficient options for proto=fd
[ 2058.765302][T21306] siw: device registration error -23