last executing test programs:

7m6.242899828s ago: executing program 32 (id=237):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000300), 0x4, 0xbaf, &(0x7f00000017c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x40, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12)
write(r1, &(0x7f0000000200)="c7", 0x1)
sendfile(r1, r0, 0x0, 0x3ffff)
sendfile(r1, r0, 0x0, 0x7ffff000)

7m2.923149764s ago: executing program 33 (id=171):
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000640)={0x9, 0x182, 0x0, &(0x7f0000000540)="3cae164d6124d1f44ccf2b2b462d0fe75496fb36458ca269f9eb494b334a2ac6829cf1f290a2e97713129e85d9dfb9711c75be7439aebb0e65324e9b6f", 0x0, 0x3d})
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20)
sendmmsg$inet6(r0, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000180), 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)='.', 0xc400}], 0x7}}], 0x44, 0x0)

5m52.569234958s ago: executing program 6 (id=709):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x7, 0x2, 0x1, 0x8}}]}}]}, 0x44}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x170, 0x24, 0x41f, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0xa, 0x64, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0xbe}}, @TCA_GRED_STAB={0x104, 0x2, "013c00"}]}}]}, 0x170}}, 0x0)

5m52.304629721s ago: executing program 6 (id=715):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@hyper, 0x1})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0x8})
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000240)={@hyper})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e})

5m52.103654151s ago: executing program 6 (id=717):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x12, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000010000000000000000000000711812000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x4)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r1, r3, 0x1e, 0x0, @void}, 0x10)
close(0x3)
close_range(r0, 0xffffffffffffffff, 0x0)

5m51.978147146s ago: executing program 6 (id=718):
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x804000, &(0x7f0000000f00)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$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")
creat(&(0x7f0000000100)='./bus\x00', 0x44)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000002040)='./bus\x00', 0x0, 0x321001, 0x0)
r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x47)
pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, 0x0)

5m51.015632091s ago: executing program 6 (id=721):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000100)=0xfffffffa, 0x4)
bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@filter={'filter\x00', 0xe, 0x4, 0x368, 0xffffffff, 0x1c8, 0x0, 0x1c8, 0xffffffff, 0xffffffff, 0x298, 0x298, 0x298, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty, [0xff, 0x0, 0xff000000], [], '\x00', '\x00', {}, {0xff}}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ipv6header={{0x28}, {0x8b, 0x0, 0x1}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1c8}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xf8}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x3c8)
sendto$inet(r0, 0x0, 0x0, 0x28040041, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10)
sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="17", 0x1}], 0x1}, 0x48c0)
recvmmsg(r0, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0)

5m50.60836359s ago: executing program 6 (id=726):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="05"], 0x10)
close(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1, <r3=>0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)=r0}, 0x20)
close(r3)
close(r2)

5m50.162108401s ago: executing program 34 (id=726):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="05"], 0x10)
close(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1, <r3=>0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)=r0}, 0x20)
close(r3)
close(r2)

5m45.187090304s ago: executing program 5 (id=774):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000009c0)=@delchain={0x24, 0x66, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xfff2, 0xffff}, {0x0, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0)

5m43.303627722s ago: executing program 5 (id=780):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x30, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000140)={0x100, r1}, 0x0)
r2 = landlock_create_ruleset(&(0x7f0000000240)={0x20}, 0x30, 0x0)
landlock_restrict_self(r2, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file1\x00', 0x81c0, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1\x00', 0x0)

5m43.156445219s ago: executing program 5 (id=782):
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fchown(r2, 0xee00, 0xee01)
fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x408, 0x103)

5m42.870836192s ago: executing program 5 (id=785):
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x804000, &(0x7f0000000f00)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$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")
creat(&(0x7f0000000100)='./bus\x00', 0x44)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000002040)='./bus\x00', 0x0, 0x321001, 0x0)
r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x47)
pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, 0x0)

5m41.979002065s ago: executing program 5 (id=790):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r1 = semget$private(0x0, 0x1, 0x210)
semctl$SETVAL(r1, 0x3, 0x10, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
umount2(0x0, 0x2)

5m41.259686448s ago: executing program 5 (id=795):
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r2=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000440)={0x0, 0x9}, &(0x7f0000000480)=0x8)

5m40.653337387s ago: executing program 35 (id=795):
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r2=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000440)={0x0, 0x9}, &(0x7f0000000480)=0x8)

4m59.339445141s ago: executing program 8 (id=1079):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_ublk_setup_io_uring(0x354a, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r4=>0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup(r5)
syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x80, 0x0, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x3, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f0000000580)={0x0, 0x5}, 0x0)

4m58.155558897s ago: executing program 8 (id=1091):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r3, @ANYBLOB="60005080110001004abee339084eeef16f162471f40000000800030009ac0f000500020007"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0)

4m56.710612095s ago: executing program 8 (id=1109):
socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$key(0xffffffffffffffff, 0x0, 0x40)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100)='::1\x00', 0x0)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000))
pipe2$9p(&(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
write$P9_RLERRORu(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="5300000007000046009d4063", @ANYRES64=r0, @ANYRES32=r1], 0x53)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}})

4m56.408902759s ago: executing program 8 (id=1105):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)
mkdir(&(0x7f00000003c0)='./file0/../file0\x00', 0x190)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x6000, 0x0)

4m56.178398369s ago: executing program 8 (id=1108):
r0 = memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1)
r1 = dup(r0)
write$binfmt_elf64(r1, &(0x7f0000000800)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0xff, 0x7f, 0xa3, 0x23e, 0x3, 0x3e, 0xc9, 0x3c9, 0x40, 0x2ea, 0x10000, 0x5, 0x38, 0x1, 0x6, 0x6b1, 0x400}, [{0x3, 0x81, 0x7, 0xff5, 0x5, 0x1ba, 0xfffffffffffffffc}]}, 0x78)
execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r3, 0x3)
bind$inet6(r2, &(0x7f0000000080)={0xa, 0x14e22, 0xfffffff8, @ipv4}, 0x1c)

4m55.666988633s ago: executing program 8 (id=1114):
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc)
copy_file_range(r0, &(0x7f0000000000)=0x7, r0, 0x0, 0x2, 0x0)

4m55.061363862s ago: executing program 36 (id=1114):
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc)
copy_file_range(r0, &(0x7f0000000000)=0x7, r0, 0x0, 0x2, 0x0)

4m8.391931817s ago: executing program 7 (id=1430):
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x2, 0x4, 0x7, 0x2})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000004000000000000000300000784"], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x9}, 0x94)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4014001}, 0x9590f6cc3ea35512)
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
r1 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10)
sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001200b7a339f2d30afddbdf4d200f070700000000000025862f00000001ffffffc3000000060000000087c32be695bfd3ead0084f", @ANYRES32=0x0, @ANYBLOB="de00fbffa611195cc93f034708000000080003"], 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000)
recvmmsg(r0, &(0x7f00000045c0)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x20, 0x0)

4m8.106618531s ago: executing program 7 (id=1432):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
ioprio_get$pid(0x2, 0x0)

4m6.018651489s ago: executing program 7 (id=1434):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', 0x200841a, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0x1, 0x553b, &(0x7f00000024c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

4m5.198932217s ago: executing program 7 (id=1440):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x2010888, &(0x7f0000007400)=ANY=[], 0x1, 0x6174, &(0x7f0000001280)="$eJzs3b2PHGcdB/Dfvt6LiXNKEQULoYsTXkKIX4MxBEhSQEGTArmhQLYul8jCAWQb5EQWvugaCipqChASJUKUiII/IAUtHRUVlmwkkCsGzd3z+OY2u95zzrezd8/nI51nf/vM7D5z353bWc/MPgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAxHe/872znYi4/LN0x0rEp6IX0Y1YquvViFhaXcnz9yPiudhqjmcjYrAQUS+/9c/TEa9GxEfHI+7dv71W331uj/349h///rsfHHvrb38YnP7vn272Xps0361bv/zPn+/sb50BAACgNFVVVZ30Mf9E+nzfbbtTAMBM5Pf/Ksn3H/n6V/986y/z1B+1Wq1Wq2dQN1Xj3WkWEbHRXKbeZ3A4HgAOmY140HYXaJH8i9aPiGNtdwKYa522O8CBuHf/9lon5dtpvh+sbrfnc0F25b/ReXh9x6TpNKPnmMzq9bUZvXhmQn+WZtSHeZLz747mf3m7fZjmO+j8Z2VS/sPtS5+Kk/PvjeY/4ujk3x2bf6ly/v3Hyr8nfwAAAAAAmGP5//9XWj7+u7D/VdmTRx3/XZ1RHwAAAAAAAADgSdvv+H8PGf8PAAAA5lb9Wb32m+M79036Lrb6/kudiKdG5gcKky6WWW67HwAAAAAAAAAAAABQkv72ObyXOhGDiHhqebmqqvqnabR+XPtd/rArff2hZG3/kQcAgG0fHR+5lr8TsRgRl9J3/Q2Wl5eranFpuVqulhby/uxwYbFaanyuzdP6voXhHnaI+8OqfrDFxnJN0z4vT2sffbz6uYZVbw8de0IG6bc5obmlsAEg2X43uucd6Yipqqcn7XzALrb/o8f2z160/ToFAAAADl5VVVUnfZ33iXTMv9t2pwCAmcjv/6PHBQ6kjjjYx5/3emHn9z4X/VGr1Wp1cXVTNd6dZhERG81l6n0Gw/EDwCGzEQ/a7gItkn/R+hHxXNudAOZap+0OcCDu3b+91kn5dprvB2l893wuyK78Nzpby+Xlx02nGT3HZFavr83oxTMT+vPsjPowT3L+3dH8L2+3D9N8B53/rEzKv17PlRb607acf280/xFHJ//u2PxLlfPvP1b+PfkDAAAAAMAcy///v+L4b15lAAAAAAAAADh07t2/vZave83H/z8zZj7Xfx5NOf+O/IuU8++O5P/Fkfl6jdt339zJ/9/3b6/9/ua/Pp2ne81/IT9kJ72yOukV0UnP1Omn6T5XcMTmoDesn2nQ6fb66ZyfavBOXI1rsR5nds3bTb+Pnfazu9rrng52tZ/b1d7/WPv5Xe2D9L0D1VJuPxVr8eO4Fm9vtddtC1PWf3FKezWlPeffs/0XKeffb/zU+S+n9s7ItHb3w+7HtvvmdNzzvHH1s784c/CrM9Vm9B6uW1O9fidb6M+ZiF8/iIif3li/furWlZs3r5+NNDk2bNx7LtLkCcv5D7Z+Fnb+/r+w3Z7/7je317sfDh87/3mxGf2J+b/QuF2v70sz7lsbcv7D9JPzfzu1j9/+D3P+k7f/l1voDwAAAAAAAAAAAAAAADxKVVVbl4i+EREX0vU/bV2bCQDMxvE0ze//9f7A9xvtVaJWq9Vqtfro1E3VeK83i4j4a3OZep/h5+MeDACYZ/+LiH+03QlaI/+C5e/7q6cvtt0ZYKZuvP/BD69cu7Z+/UbbPQEAAAAAAAAAPqk8/udqY/znFyNiZWS+XeO/vhmr+x3/s59vPBxg9AkP9D3BZnfY6zaGG38+tsbnPjVp/O+T8ejxv/tTnm8wpX04pX1hSvvi2Ht30hp7oUdDzv/5xnjndf4nRoZfL2H819Ex70uQ8z/ZeD3X+X9hZL5m/tVv5y7/jb3OuBndXfmfvvneT07feP+DV66+d+Xd9XfXf3T+7Nkz5y9cuHjx4ul3rl5bP7P978H0eg7k/PPY184DLUvOP2cu/7Lk/D+XavmXJef/+VTLvyw5/7y/J/+y5PzzZx/5lyXn/1Kq5V+WnP+XUi3/suT8X061/MuS8/9yquVflpz/K6mWf1ly/qdSLf+y5PxPp3oP+ft6+CMk55+PcNn+y5Lzz2c2yL8sOf9zqZZ/WXL+51Mt/7Lk/F9NtfzLkvP/SqrlX5ac/4VUy78sOf+vplr+Zcn5X0y1/MuS8/9aquVflpz/11Mt/7Lk/F9LtfzLkvP/RqrlX5ac/zdTLf+y5Py/lWr5lyXn/3qq5V+Wne//d8MNN9zIN9r+ywQAAAAAAAAAAAAAjJrF6cRtryMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPB/duBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFvbuLkeus7wd+Zl/stUOIgRCc/A1sEhNCsmTXduIX/k0xAQINUAokFPqC7XrXZsFveO0SKJJNDSUSRkUVVdMLWkCojVpVWBUXtKI0F1Vfrkp7QW8qqkpIjaqAAhJSXyBbzZzneTwzOztn7R2vZ8/z+Uj2b3fmzJwzZ87M7nft7x4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADa3f7Guc80iqJo/mn9taUoXtD8eNPkltZlr7veWwgAAACs1k9bfz93U7pg/wpu1LbM373iH7++uLi4WLxv9HfHv7C4mK6YLIrxjUXRui669O/vb7QvE1woJhojbZ+PVKx+tOL6sYrrxyuu31Bx/caK6ycqrl+yA5bYVP48pnVn21sfbil3aXFzMd66bnuPW11obBwZiT/LaWm0brM4fqSYL44Vc8VMx/Llso3W8t+8vbmutxZxXSNt69rWPEJ++InDcRsaYR9v71jX5fuMvv+GYvJHP/zE4T868+ytvWblbui4v3I7776juZ2fCpeU29ooNqZ9ErdzpG07t/V4TkY7trPRul3z4+7tfG6F2zl6eTPXVPdzPlGMtD7+dms/jbX/WC/tp23hsv+6syiK85c3u3uZJesqRorNHZeMXH5+JsojsnkfzUPpxcXYFR2nt6/gOG3O2e2dx2n3ayI+/7eH240tsw3tT9P3P7lhyfN+pcdp1HzUy71Wuo/BQb9WhuUYjMfFt1sP+omex+D28Pg/cdfyx2DPY6fHMZged9sxeEfVMTiyYbS1zelJaLRuc/kY3NGx/GhrTY3WfOau/sfg9Jnjp6YXPvbx184fP3R07ujciV07dszs2r17796900fmj83NlH9f5d4efpuLkfQauCPsu/gaeHXXsu2H6uKXB/c6nOjzOtzSteygX4dj3Q+usTYvyKXHdPnaeLS50ycujhTLvMZaz889q38dpsfd9joca3sd9vya0uN1OLaC12FzmVP3rOx7lrG2P7224Vp9LdjSdgx2fz/SfQwO+vuRYTkGJ8Jx8a/3LP+1YFvY3iemrvT7kdElx2B6uOG9p3lJ+n5/Ym9r9Doub2teccOG4uzC3On7Hj905szpHUUYa+IlbcdK9/G6ue0xFUuO15ErPl73z7/iidt6XL4l7KuJ1zb/mlj2uWouc/99/Z+r1le33vuz49KdRRgDttb7s9dX8+b+TFmyz/5sLvOp6dV/L55yadv77/gy778x9z9fri/d1YXR8bHy9Tua9s54x/tx51M11nrvarTW/dz0yt6Px8OftX4/vrnP+/HWrmUH/X483v3g4vtxo+qnHavT/XxOhOPk2Ez/9+PmMlt3XukxOdb3/fjOMBth/78mJIWUi9qOneWO27SusbHx8LjG4ho6j9NdHcuPh2zWXNdTO6/uOL37zvK+RtOju2ytjtPJrmUHfZym96vljtNG1U/frk738zkRjoubd/U/TpvLPH3/6t87N8UP2947N1Qdg+OjG5rbPJ4OwvL9fnFTPAbvKw4XJ4tjxWzr2g2t46nRWtfUAys7BjeEP2v9Xrm1zzF4d9eygz4G09ex5Y69xtjSBz8A3c/nRDgunnyg/zHYXOZNewb7vevd4ZK0TNv3rt0/X1vuZ163de2ma/kzr+Z2/s2e/j+bbS5zbO+V5sz+++necMkNPfZT9+t3udfUbLE2+2lr2M5n9y6/n5rb01zmC/tWeDztL4ri3Eceav28N/z7yp+f/c7XO/7dpde/6Zz7yEM/uPHI317J9gOw/j1fjs3l17q2f5layb//AwAAAOtCzP0jYSbyPwAAANRGzP3xf4Un8j8AAADURsz9Y2EmmeT/rW96dv75c0Vq5i8G8fq0Gx4pl4sd15nw+eTiZc3LH/rq3I//8tzK1j1SFMVPHvmNnstvfSRuV2kybOelN3devvSG51a0/oOPXV6uvb/+pXD/8fGs9DDoVcGdKYrimzd9rrWeyfdfbM2nHznYmu8+/8SF5jLP7Ss/j7d/5iXl8l8M5d/9Rw513P6ZsB++F+bM23rvj3i7r118zbY97728vni7xh0vbD3sJz9Q3m/8PTmfv1AuH/fzctv/V5996mvN5R9/Ve/tPzfSe/ufCvf71TD/++Xl8u3PQfPzeLtPh+2P64u3u+8r3+q5/Zc+Uy5/6uFyuYNhxvXfHT7f/vCz8+376/HGoY7HVbylXC6uf+Y7v926Pt5fvP/u7Z84cLFjf3QfH0//c3k/013Lx8vjeqK/6Fp/837aj8+4/qd+62DHfq5a/6V3P/Py5v12r//eruVGu27f/Rub/uDTn+u5vrg9+//sVMfj2f+u8DoO63/yA+F4DNf/z6XPdaw3OviuzvefuPyXtpzreDzRW39Urv/S64+25n9M/vj3b3jBjS88/8rmviuKb7+nvL+q9R/9w5Md2//lW+5pPR/x+tjR717/cuL6T3906sTJhbPzs217tfW7c95ebs/GiU2bm9t7U3hv7f78wMkzH5w7PTkzOVMUk/X9FXpX7Sth/qAc56/09vc8Fp7P237vm5vv+qfPxsv/5dHy8otvK79uvTos9/lw+Zby+VtsrHL9T95+S+v13Xi6/Lyjxz4A27b/594VLRgef/f3BfF4P/XSD7b2Q/O61teN+Lpe5fZ/d7a8n2+E/boYfjPzHbdcXl/78vF3I1x8T/l6X/X+C29z8Xn94/B8v+N75f3H7YqP97vh+5hvbe18v4vHxzfOjXTff+u3eJwP7yfF+fL6uFTc3xefu6Xn5sXfQ1Kcv7X1+e+k+7n1ih7mchY+tjB9bP7E2cenz8wtnJle+NjHDxw/efbEmQOt3+V54ENVt7/8/rS59f40O7f7/mJmU1EUJ4uZNXjDujbb3/xoZdt/6rHDs3tm7pqdO3Lo7JEzj52aO3308MLC4bnZhbsOHTky99Gq28/PPrhj575de3ZOHZ2ffXDvvn279k3NnzjZ3Ixyoyrsnvnw1InTB1o3WXjw/n07Hnjg/pmp4ydn5x7cMzMzdbbq9q2vTVPNW//61Om5Y4fOzB+fm1qY//jcgzv27d69s/K3AR4/dWRhcvr02RPTZxfmTk+Xj2XyTOvi5te+qttTTwv/Vn4/261R/iK+4p337k6/n7Xpq59c9q7KRbp+geiz4XfR/MOLTu1dyecx94+HmWSS/wEAACAHMfdvCDOR/wEAAKA2Yu7fGGYi/wMAAEBtxNw/EWaSSf7X/9f/X1n/v7xe/z+v/v+pj5S90vXe/4/9ef3/PFzn/v+q16//r/9fv/7/yvvz63379f/1/1lq2Pr/MfdvKoos8z8AAADkIOb+zWEm8j8AAADURsz9N4SZyP8AAABQGzH3vyDMJJP8r/+/ov7/zqrCVf37/87/r/9frM/+f3xy9P+zccX9+/c+2vGp/n+g/6//r/+v/6//z6qNL3vN9er/x9x/Y5hJJvkfAAAAchBz/wvDTOR/AAAAqI2Y+28KM5H/AQAAoDZi7t8SZpJJ/tf/d/5//X/9/3XU/+8o0q7J+f/bNkb/f32o3/n/f6r/vy76/xP6/+ux/z8+2O0f7v5/5ebr/3NNDNv5/2Puf1GYSSb5HwAAAHIQc/+Lw0zkfwAAAKiNmPtfEmYi/wMAAEBtxNx/c5hJJvlf/1//f4X9/y/p/+v/D0H/v+PxrEn/v+/5/8uP9P+HS/36/87/X6yL/r/z/xfrsf8/4O0f7v7/oM//P/7m7tvr/9PLsPX/Y+5/aZhJJvkfAAAAchBz/y1hJvI/AAAA1EbM/S8LM5H/AQAAoDZi7t8aZpJJ/tf/1/93/n/9f/3/3uuv7v+X9P+Hi/5/f/r/FfT/9f/1/1fW/+/xza/+P70MW/8/5v5bw0wyyf8AAACQg5j7bwszkf8BAACgNmLu/39hJvI/AAAA1EbM/dvCTDLJ//r/+v/6/3n1/+/doP+v/19v+v/96f9X0P/X/9f/X+H5/5e6kv7/xqo7ozaGrf8fc//Lw0wyyf8AAACQg5j7XxFmIv8DAABAbcTc/8owE/kfAAAAaiPm/skwk0zyv/5/vfr/f/rXT76y0P/X/69Yf037//Ew0P/PnP5/f/r/FfT/9f/1/9ek/08+hq3/H3P/7WEmmeR/AAAAyEHM/XeEmcj/AAAAUBsx998ZZiL/AwAAQG3E3L89zCST/K//X6/+f6T/v4b9/y8+nO5H/7/k/P+96f+vDf3/HtpepPr/FfT/9f+z7//H7371/xmMYev/x9z/qjCTTPI/AAAA5CDm/rvCTOR/AAAAqI2Y+18dZiL/AwAAQG3E3H93mEkm+V//X/9f/9/5//X/e69f/3990v/vT/+/gv6//n/2/X/n/2ewhq3/H3P/a8JMMsn/AAAAkIOY++8JM5H/AQAAoDbi/98s/9+r/A8AAAB1FHP/VJhJJvlf/1//P6f+f0P/X/9f/7/29P/70/+voP+v/6//r//PQA1b/z/m/teGmWSS/wEAACAHMfffF2Yi/wMAAEBtxNw/HWYi/wMAAEBtxNw/E2aSSf7X/9f/z6n/7/z/+v/rof/f0P9fFf3//vT/K+j/6//Xrf9fFPr/XFfD1v+PuX9HmEkm+R8AAAByEHP/zjAT+R8AAABqI+b+XWEm8j8AAADURsz994eZZJL/9f/1//X/9f/1/3uv3/n/1yf9//70/yvo/+v/163/7/z/XGfD1v+Puf+BMJNM8j8AAADkIOb+3WEm8j8AAADURsz9e8JM5H8AAACojZj794aZZJL/9f9r0v//zb/vWLf+v/5/v/UPpv+/Sf8/TP3/4VLT/n/3y+Kq6f9X0P/X/9f/1/9noIat/x9z/74wk0zyPwAAAOQg5v7XhZl05P8Lf7LGmwUAAAAMUMz9/z/MxL//AwAAQG3E3P8zYSaZ5H/9/5r0/7vo/+v/91u/8//r/9dZTfv/A6P/XyHX/n94Q7ve/fnVut7br/+v/89S177/Hz9aWf8/5v4Hw0wyyf8AAACQg5j7fzbMRP4HAACA2oi5//VhJvI/AAAA1EbM/fvDTDLJ//r/+v/6//r/16b///qi2zD2/5sHj/5/vej/96f/XyHX/n9wvfvz63379f/1/1lq2M7/H3P/G8JMMsn/AAAAkIOY+x8KM5H/AQAAoDZi7n9jmIn8DwAAALURc/+bwkwyyf/6//r/+v/6/87/33v9+v/rk/5/f/r/FfT/9f/1//X/Gahh6//H3P/mMJNM8j8AAADkIOb+h8NM5H8AAACojZj73xJmIv8DAABAbcTc/9Ywk0zyv/6//r/+v/6//n/v9ev/r0/6//3p/1fQ/9f/797+1pu9/r/+P1dr2Pr/Mff/XJhJJvkfAAAAchBz/yNhJvI/AAAA1EbM/W8LM5H/AQAAoDZi7n97mEkm+V//X/9f/1//X/+/9/r1/9cn/f/+9P8r6P/r/zv/v/4/AzVs/f+Y+98RZpJJ/gcAAIAcxNz/82Em8j8AAADURsz97wwzkf8BAACgNmLu/4Uwk0zyv/6//r/+v/5/Fv3/5o30/7Og/9+f/n+FHv3/jfr/A+vPbxrIVl6/7a+i/6//z1LD1v+Puf9dYSaZ5H8AAADIQcz97w4zkf8BAACgNmLuf0+YifwPAAAAtRFz/6NhJpnkf/3/LPv/6SHr/5f0/zPo/zv/fzb0//vT/6/g/P/O/6//r//PQA1b/z/m/sfCTDLJ/wAAAJCDmPvfG2Yi/wMAAEBtxNz/i2Em8j8AAADURsz97wszyST/6/9n2f93/v816/+PdRwfOfX/J9qez3Rc6v/r/68B/f/+9P8r6P/r/w9z/z8czZuWub3+P8No2Pr/Mfe/P8wkk/wPAAAAOYi5/5fCTOR/AAAAqI2Y+385zET+BwAAgNqIuf9Xwkwyyf/6//r/+v/O/+/8/73Xr/+/Pun/96f/X0H/X/9/mPv/FfT/GUbD1v+Puf9Xw0wyyf8AAACQg5j7PxBmIv8DAABAbcTcfyDMRP4HAACA2oi5/2CYSSb5X/+/u/8fz6iq/6//r/+v/6//vx4Nrv//shuLQv9f/1//X/9f/1//n9UYtv5/zP2Hwkwyyf8AAACQg5j7fy3MRP4HAACA2oi5/3CYifwPAAAAtRFz/2yYSSb5X///Wp3/P16ST///J/r/+v+B/n9v+v9rw/n/+9P/r6D/r/+v/6//z0ANW/8/5v65MJNM8j8AAADUWPpxcMz9R8JM5H8AAACojZj7j4aZyP8AAABQGzH3fzDMJJP8r/9/rfr/zv/fa/v1/2P/f6xjef3/kv6//v8g6P/3p/9fQf9f/1//X/+fgRq2/n/M/fNhJpnkfwAAAMhBzP0fCjOR/wEAAKA2Yu7/cJiJ/A8AAAC1EXP/sTCTTPJ/ffr//1tus/5/x+30/6v7/42iOO/8//r/vdav/78+6f/3p/9fQf9f/1//X/+fgRq2/n/M/cfDTDLJ/wAAAJCDmPtPhJnI/wAAwP+xdx9Nct1VH8f78WNb0gpeAlXsWLGEFW+BLTuq2LChSCYHY3IwweRkggkm5xxNzjlnk3M0yYaqoTw650gz07otadoz9/7P57PgoEHjblmD4Oepb11gGLn77xu32P8AAAAwjNz994tbmuz/cfr//ET9/0r/v4Dn/+/9+fr/0/T/+v9tONDfX3phn3/O/v/Od7ninvp//b/+f5L+X/+v/2e/ufX/ufvvH7c02f8AAADQQe7+B8Qt9j8AAAAMI3f/A+MW+x8AAACGkbv/irilyf7X/+v/9f/6/z39/w36//Ps/++YH9f/z4vn/0/T/2+wnf7//1f6f/2//l//z6659f+5+x8UtzTZ/wAAANBB7v4Hxy32PwAAAAwjd/9D4hb7HwAAAIaRu/+hcUuT/a//1//r//X/nv+//vU9/3+Z9P/T9P8beP6//l//r/9nq+bW/+fuf1jc0mT/AwAAQAe5+x8et9j/AAAAMIzc/Y+IW+x/AAAAGEbu/kfGLU32v/5f/6//1//r/9e/vv5/ma5bnfkzQf9/kP5/gw39/2ql/59y3v38+l/ect7/Oej/9f8cNLf+P3f/o+KWJvsfAAAAOsjd/+i4xf4HAACAYeTuvzJusf8BAABgGLn7HxO3NNn/+n/9v/5f/6//X//6+v9l8vz/aYfv/+90+/vcq2//7/n/0zz/X/+v/2e/ufX/ufuvilua7H8AAADoIHf/Y+MW+x8AAACGkbv/cXGL/Q8AAADDyN3/+Lilyf7X/7fp/3drF/2//l//r/8fnf5/muf/b7D7x9yp+qH+X/+v/9f/czhz6/9z9z8hbmmy/wEAAKCD3P1PjFvsfwAAABhG7v4nxS32PwAAAAwjd/+T45Ym+1//36b/9/x//b/+X//fgv5/mv5/g1Ge/3+RXzXH3c8f1nG/f/2//p+D5tb/5+5/StzSZP8DAABAB7n7nxq32P8AAAAwjNz9T4tb7H8AAAAYRu7+q+OWJvtf/7+l/v+ygx/T/2+z/89X0P/r//X/+v9p+v9p+v8NRun/L9Jx9/NLf//6f/0/B82t/8/d//S4pcn+BwAAgA5y9z8jbrH/AQAAYBi5+58Zt9j/AAAAMIzc/c+KW5rsf/2/5/9fTP9/b8//1//r//X/M6X/n6b/30D/r//X/+v/2aq59f+5+6+JW5rsfwAAAOggd/+z4xb7HwAAAIaRu/85cYv9DwAAAMPI3f/cuKXJ/tf/6/+X8fx//b/+X/+v/z8/+v9p+v8N9P/6f/2//p+tmlH/f9ZnnVw9L25psv8BAACgg9z9z49b7H8AAAAYRu7+F8Qt9j8AAAAMI3f/C+OWJvtf/z+b/n835xur/z+1Wq30/6um/f+ps34/6+tS/6//PwL6/2n6/w30//p//b/+n62aUf+/++Pc/S+KW5rsfwAAAOggd/+L4xb7HwAAAIaRu/8lcYv9DwAAAMPI3f/SuGWo/X/inP+J/n82/f+usfp/z//f//Ux5/7/1p/k+f/6/xHo/6fp/zfQ/+v/9f/6f7Zqbv1/7v5rb/0z9Oozf53LL7v4XyMAAAAwL9fu/uvJ1cvilqG+/w8AAAC95e5/edxi/wMAAMBCXXPgI7n7XxG3NNn/+v/t9v+Xn/Ux/b/+f//Xx5z7/20//1//f5D+/2jo/6fp/zfQ/+v/9f/6f7Zqbv1/7v5Xxi1N9j8AAAB0kLv/urjF/gcAAIBh5O5/Vdxi/wMAAMAwcve/Om5psv/1/57/r//X/+v/17++/n+Z9P/T9P8b6P/1/8fb/58482/1/4zhAvr/nZ2dK2/z/j93/2vilib7HwAAADrI3f/auGXP/r9+/7ejAAAAgAXJ3X993OL7/wAAADCM3P2vi1ua7H/9f9P+P7/U9f+79P/6/3Wvr/9fJv3/NP3/Bvp//b/n/+v/2aq5Pf8/d//r45Ym+x8AAAA6yN3/hrjF/gcAAIBh5O5/Y9xi/wMAAMAwcve/KW5psv/1/037f8//1//r/4+6/79lpf8/Eovo/0+d+/Xn3v9fpf/X/09o1//f/a57fqj/1/9z0Nz6/9z9b45bmux/AAAA6CB3/1viFvsfAAAAhpG7/61xi/0PAAAAw8jd/7a46dIm+1//r//X/+v/9f/rX/+In/9/+Wq10v9vwSL6/wlz7/89/1//P6Vd/7+P/l//z0Fz6/9z9789bmmy/wEAAKCD3P3viFvsfwAAABhG7v53xi32PwAAAAwjd/+74pYm+1//r//X/194/3/zzs6O/n9B/f9Vi+j/Pf9/S/T/0/T/G+j/9f/6f/0/R+K4+v/c/e+OW5rsfwAAAOggd/974hb7HwAAAIaRu/+9cYv9DwAAAMPI3f++uKXJ/tf/6//1/57/f2J2/f/JPX+9Js//1/9vif5/2hz7/7P/DNH/6/+X/P4H6f+v0f+zTXN7/n/u/vfHLU32PwAAAHSQu/8Dcesf3dr/AAAAMIzc/R+MW+x/AAAAGEbu/g/FLU32v/5f/6//1/8P//x//X8r+v9pc+z/z6b/1/8v+f0P0v97/j9bNbf+P3f/h+OWJvsfAAAAOsjd/5G4xf4HAACAYeTu/2jcYv8DAADAMHL33xC3NNn/+n/9v/5f/6//P/17qP8fg/5/2tH0/6f0//r/6uf/L/5boP/X/2/6fMY0t/4/d//H4pYm+x8AAAA6yN3/8bjF/gcAAIBh5O7/RNxi/wMAAMAiXbrmY7n7Pxm3NNn/+n/9v/5f/6//X//6+v9l0v9P8/z/DfT/F9jP32HPj5b2/P/9//ul/9f/s31z6/9z938qbmmy/wEAAKCD3P2fjlvsfwAAABhG7v7PxC32PwAAAAwjd/9n45Ym+1//r//X/+v/9f/rX1//v0z6/2n6/w30/8f6/Pylv3/9v/6fg+bW/+fu/1zc0mT/AwAAQAe5+z8ft9j/AAAAMIzc/V+IW+x/AAAAGMbu7s+4rOH+1//r//X/+n/9//rX1/8vk/5/mv5/A/2//l//r/9nq+bW/39x97NOrr4UtzTZ/wAAANBB7v4vxy32PwAAAAwjd/9X4hb7HwAAAIaRu/+rcUuT/a//1/8vo//f2dm5Uv+v/9/76znT/9+o/6fo/6fp/zfQ/+v/9f/6f7Zqbv1/7v6vxS1N9j8AAAB0kLv/63GL/Q8AAADDyN3/jbjF/gcAAIBh5O7/ZtzSZP/r/2fQ/5/U/3v+v/5/5fn/+v8t0f9P0/9vMGL/f/L8f/nH3c8f1nG/f/2//p+D5tb/5+7/VtzSZP8DAABAB7n7vx232P8AAAAwjNz934lb7H8AAAAYRu7+78YtTfa//v/o+v9b/951ef7/qdX696//1//r//X/tzX9/zT9/wYj9v8X4Lj7+aW/f/2//p+D5tb/5+7/XtzSZP8DAABAB7n7vx+32P8AAAAwjNz9P4hb7H8AAAAYRu7+H8YtTfa//n8Gz/8fsP/3/P/1Xx/6/1n3/5fo/8eg/5+m/99A/6//1/9vqf/Pr2b9f3dz6/9z9/8obmmy/wEAAKCD3P0/jlvsfwAAABhG7v6fxC32PwAAAAwjd/+NcctZ+39d2z0K/b/+X/+v/9f/r399/f8y6f+nnW//f2J1uP4/6f/1//r/rv2/5/9z2tz6/9z9P41bfP8fAAAAFueyc3w8d//P4hb7HwAAAIaRu//ncYv9DwAAAMPI3f+LuOWmS47rLR0p/b/+X/+v/9f/r399/f8y6f+nef7/Bovv/3d2ds7z/4ets6V+/m76/zH6/9VK/8/hza3/z93/y7jF9/8BAABgGLn7fxW32P8AAAAwjNz9v45b7H8AAAAYRu7+38QtTfa//l//f8j+fzfN1P+fpv8/Tf+/nv7/aOj/p+n/N1h8/384x93PL/39j9b/e/4/2zC3/j93/2/jlib7HwAAADrI3f+7uMX+BwAAgGHk7v993GL/AwAAwDBy9/8hbmmy/4+t/4+/1fr/xff/nv+v/9f/6/9nRf8/Tf+/gf5f/6//1/+zVXPr/3P3/zFuabL/AQAAoIPc/X+KW+x/AAAAGEbu/j/HLfY/AAAADCN3/1/ilib73/P/9f/6f/2//n/96+v/l0n/P03/v179Run/9f/6f/0/WzW3/j93/1/jlib7HwAAADrI3f+3uMX+BwAAgGHk7r8pbrH/AQAAYBi5+/8etzTZ//p//b/+X/+v/1//+vr/ZdL/TzvO/v8et9v8sp7/f+z9f74F/b/+X//PVsyt/8/d/4+4pcn+BwAAgA5y9/8zbrH/AQAAYBi5+/8Vt9j/AAAAMIzc/f+OW5rs/w39/4n6ifr/Sfr/ve9f/7/+60P/r//X/9/29P/TPP9/A/2/5//r//X/bNXc+v/c/TfHLU32PwAAAHSQu/+WuMX+BwAAgGHk7v9P3GL/AwAAwDBy9/83bmmy/z3/X/+v/9f/6//Xv77+f5n0/9P0/xvo//X/+n/9P1s1t/4/d///AgAA//+XbGLE")
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101042, 0x15)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c)

4m3.85529436s ago: executing program 7 (id=1446):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x9, 0xc95a, 0xf, 0x8, 0x80, 0x8, 0x3, 0x10007e, 0x20000006, 0x53, 0x6, 0x10000, 0x80005, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x1, 0xd, 0x1, 0x6, 0x7, 0xe65f, 0x4, 0x7, 0x6, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x800080ee, 0xa, 0x17, 0x1, 0x9, 0x200, 0x3e, 0x8c, 0x6, 0xca9, 0x0, 0x5, 0x4, 0x8, 0x400, 0x7f, 0x10001, 0x5, 0x6, 0x6, 0x5, 0x1, 0x5], [0x10000007, 0x9, 0x80000130, 0x8, 0x5, 0xfffffff3, 0x2, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0xb, 0x0, 0x5, 0x42f, 0x0, 0x312, 0x78, 0x1, 0x0, 0x2, 0x7, 0x3, 0x6, 0x4400, 0x401, 0x6, 0x1, 0xfc, 0x5, 0x1000005, 0x5f31, 0xd, 0x40000101, 0x1, 0x4, 0xffff80f1, 0x8, 0x6, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0xfffffe01, 0x4, 0x9, 0x4000003, 0x3, 0x9, 0x400, 0x3, 0x3, 0xbc45, 0x48c93694, 0xa74, 0x9], [0x7, 0x8, 0x0, 0x5, 0xfbfffffc, 0x100, 0x9, 0xb42a, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x5, 0x8, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x200000, 0x2, 0x6d03, 0x6, 0xd, 0x800003, 0x200, 0x400080, 0x3, 0x7, 0x2950bfaf, 0x2, 0x4, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x6d, 0x7, 0x0, 0x2, 0x2, 0x120000, 0x6, 0x0, 0x80aaed, 0x4, 0x24], [0x9, 0x40bb33, 0x7ffffffd, 0xb, 0x5, 0x93a, 0x1, 0x1000006, 0x100, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x1000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000001, 0x7, 0x4, 0xc8, 0xfffffffd, 0xfffff000, 0x4010080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d69b, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x928, 0xb1e, 0x2140738a, 0x200, 0xffff2441, 0xfff]}, 0x45c)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x3}, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x801, 0xf84, 0x3}, 0x1c)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0xffff, @local}, 0x10)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x2d, 0x0)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

4m2.159616029s ago: executing program 7 (id=1453):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8)
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r2, @ANYBLOB="0100000002"], 0x40)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c00)={{r4}, &(0x7f0000001b80), &(0x7f0000001bc0)}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000001100)={r3, &(0x7f0000000100), &(0x7f0000000000)=""/95, 0x2}, 0x20)

4m1.682346152s ago: executing program 37 (id=1453):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8)
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r2, @ANYBLOB="0100000002"], 0x40)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c00)={{r4}, &(0x7f0000001b80), &(0x7f0000001bc0)}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000001100)={r3, &(0x7f0000000100), &(0x7f0000000000)=""/95, 0x2}, 0x20)

3m26.451515012s ago: executing program 0 (id=1718):
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r1 = socket$unix(0x1, 0x2, 0x0)
r2 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0)
connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
ppoll(&(0x7f0000000000)=[{r1, 0x9044}, {r2, 0x2600}, {r2, 0x1089}], 0x3, 0x0, 0x0, 0x0)
close(r0)

3m26.160111255s ago: executing program 0 (id=1723):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r1=>0x0})
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r2, r1, 0x25, 0x8, @void}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'netdevsim0\x00', <r5=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r3, r1, 0x25, 0x4, @void}, 0x10)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r3, r5, 0x25, 0x0, @void}, 0x10)

3m23.914941251s ago: executing program 0 (id=1739):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
setsockopt(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000000)="030000001e00040000071a80010061cc", 0x10)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0)
add_key(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3m23.51006133s ago: executing program 0 (id=1742):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x3005840, 0x0, 0x5, 0x0, 0x0)
mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x104000, 0x0)
mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0)
mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x88000, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2125099, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000001040)='./file0/file0\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)

3m23.265013041s ago: executing program 0 (id=1746):
r0 = socket$key(0xf, 0x3, 0x2)
socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1}, @in6=@mcast2, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x28c, 0x1, 0x0, 0x0, 0x3}, {0x7}, 0x0, 0x0, 0x1, 0x0, 0x873f24456926a1a5}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000, 0x3}}, 0xe8)
capset(&(0x7f00000000c0)={0x20071026}, 0x0)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0)

3m22.775295314s ago: executing program 0 (id=1751):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000280)={'ipvlan1\x00', 0x400})
r2 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r3, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4044084}, 0x0)

3m22.251591658s ago: executing program 38 (id=1751):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000280)={'ipvlan1\x00', 0x400})
r2 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r3, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4044084}, 0x0)

7.663142362s ago: executing program 3 (id=3221):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r2)
listen(0xffffffffffffffff, 0x6f6)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r5, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8)

7.48344885s ago: executing program 2 (id=3223):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x80)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x50}}}, &(0x7f0000000300)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup(r3)
syz_ublk_setup_queues(r4, r2, &(0x7f0000000880)={0x0, 0xfffffffe, 0x0, 0x4, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x0, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x8000, 0x3, 0xbaa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8684, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0)

7.25529485s ago: executing program 9 (id=3226):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0)
sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@rand_addr=0x64010101, 0x0, 0x32}, 0x0, @in=@private=0xa0100fe, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c)

7.201689433s ago: executing program 3 (id=3228):
socket$nl_route(0x10, 0x3, 0x0)
io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f00000004c0)=[@ioring_restriction_sqe_flags_required={0x3, 0x1a}], 0x1)
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@private2, 0x800, 0x0, 0x2, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@mcast2, 0x800, 0x0, 0x2, 0x0, 0x6109, 0xc2}, 0x20)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x4, 0x0, 0xff, 0x0, 0x6, 0x800}, &(0x7f0000000240)=0x20)
socket(0x1, 0x1, 0x0)
mknod(&(0x7f0000000080)='./bus\x00', 0x8000, 0x6)
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]})
close_range(r1, 0xffffffffffffffff, 0x0)

5.732620832s ago: executing program 9 (id=3231):
r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="0200000001"], 0x48)
r3 = fsmount(r0, 0x1, 0xe)
fchdir(r3)
bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r2}, 0x18)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0)
pread64(r4, &(0x7f0000002240)=""/131, 0x83, 0x5b)

5.539131381s ago: executing program 2 (id=3232):
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x40400, 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfc5, 0xb080, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x9, 0x3, 0x1, {0x22, 0x2c}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x10, 0x4}}}}}]}}]}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched_retired(r0, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084)
sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000000306010400000000000000000200000505000100070000003d9799e79f49050000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080)

5.33410016s ago: executing program 3 (id=3234):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="8580f83288e1", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x1, 0x5, 0x1c, 0x67, 0x0, 0x0, 0x2, 0x0, @private=0xa010102, @multicast1}, {0x11, 0x81, 0x0, @multicast1}}}}}, 0x0)

5.071567933s ago: executing program 4 (id=3235):
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000002c0)=r3, 0x4)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0xff6c}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0x56, 0x0, &(0x7f0000000100)="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", 0x0, 0xfb, 0x60006000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x2c)

4.689694211s ago: executing program 4 (id=3236):
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0)
r1 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0xffffff1f}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000000d000000040000000200000000000000"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2, <r3=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r3, <r4=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000400)=r0}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r4, &(0x7f0000000000), &(0x7f0000000500)=""/216}, 0x20)

4.539206458s ago: executing program 2 (id=3237):
socket$pppoe(0x18, 0x1, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4091)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='rdma.current\x00', 0x26e1, 0x0)
socket$rxrpc(0x21, 0x2, 0xa)
r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000019380)={0x0, 0xed76, 0x40, 0x2, 0xca}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r5=>0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = dup(r6)
syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0xae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x0, 0x1f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)

4.409252904s ago: executing program 3 (id=3238):
r0 = fsopen(&(0x7f0000000000)='nfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000080)='127.0.0.1:/export\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='addr\x00', &(0x7f0000000100)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='vers\x00', &(0x7f0000000180)='3\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='proto\x00', &(0x7f0000000200)='tcp\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)='mountproto\x00', &(0x7f0000000280)='tcp\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000002c0)='port\x00', &(0x7f0000000300)='2049\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000340)='mountport\x00', &(0x7f0000000380)='2049\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000003c0)='nconnect\x00', &(0x7f0000000400)='2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
nanosleep(&(0x7f0000000440)={0x2}, 0x0)

4.26790859s ago: executing program 4 (id=3239):
socket$packet(0x11, 0x3, 0x300)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c)
ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x2)
r1 = fcntl$dupfd(r0, 0x0, r0)
r2 = getpid()
fcntl$setownex(r1, 0xf, &(0x7f0000000000)={0x2, r2})
sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000400)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x400c000}, 0x1)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r1)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000002c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4040001)

3.731724395s ago: executing program 9 (id=3240):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80000)
splice(r1, 0x0, r2, 0x0, 0x38f9, 0x0)
write(r0, &(0x7f0000000040), 0xffffff4a)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r3, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x4370, 0x6})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

3.519021345s ago: executing program 1 (id=3241):
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = gettid()
timer_create(0x5, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040))
r1 = syz_clone(0xc80ec000, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_open_procfs(r1, 0x0)
timer_create(0x0, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="300000001900010000000000000000000a0000000000000a0000000c140005"], 0x30}}, 0x0)

3.078934666s ago: executing program 4 (id=3242):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0xa0}, 0x80)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup(r3)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0))
syz_ublk_setup_queues(r4, r2, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0)

3.037407978s ago: executing program 2 (id=3243):
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x18e)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000240), 0x3af4701e)
close(r0)

2.928898833s ago: executing program 1 (id=3244):
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x1ff)
inotify_init1(0x0)
userfaultfd(0x1)
r0 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x345})
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x70}}, 0x0)
r1 = syz_io_uring_setup(0xa95, &(0x7f0000000080)={0x0, 0x91c1, 0x400, 0x1, 0x149}, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000180)=<r4=>0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0100000006"], 0x50)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f00000003c0)=@ublk_get_features_sqe={0x2e, 0x69, 0x0, 0xffffffffffffffff, 0x80207513, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffbb1, 0x0, 0x0, '\x00', {0x0, 0xffff, 0x0, 0x0}})
io_uring_enter(r1, 0x20, 0x20, 0x1, 0x0, 0x0)

2.606602268s ago: executing program 1 (id=3245):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
close_range(r0, 0xffffffffffffffff, 0x200000000000000)
socket$vsock_stream(0x28, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)=<r1=>0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r1, &(0x7f0000000200)={0x2e, 0x33, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup(r3)
syz_ublk_setup_queues(r4, r2, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x80000, 0x1000000, 0x33d, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x20, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a6c, 0x6449, 0x0, 0xfffffffd, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x40, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0)

2.531646992s ago: executing program 3 (id=3246):
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0xfffffffd}}, 0x10)
bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10)
bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10)
bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10)
bind$tipc(r1, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10)
bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x5}}, 0x10)
bind$tipc(r0, 0x0, 0x0)

1.943278959s ago: executing program 1 (id=3247):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'ipvlan1\x00', <r2=>0x0})
bind$packet(r0, &(0x7f0000000300)={0x11, 0x5, r2, 0x1, 0x5, 0x6, @broadcast}, 0x14)
r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000200)={0x0, 0x1, 0x0, &(0x7f0000000480)=""/39, 0x0, 0x8000000})
ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000001740))
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='statm\x00')
dup3(r0, r4, 0x0)
ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f00000000c0)={0x0, r4})

1.93098721s ago: executing program 3 (id=3248):
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f00000001c0)='./file1\x00', 0x8000, &(0x7f0000000040)=ANY=[], 0x1, 0x14fe, &(0x7f0000002a80)="$eJzs3AuYjlXXOPC99t43Y5r0NMlh2GuvmycNtkmSHBJySJIkSXJKSJokSUgMOSUNSchxkhyGkBymMWmcz4eckyavNEkSEhL2/9J78L5v7/f1ff/e/993fbN+17Wv2WvuZ61n3bPmmue+n+ua57ueo+q1qF+7GRGJPwT+/CVFCBEjhBgmhLhOCBEIISrFV4q/fLyAgpQ/9iTs3+vh9KvdAbuaeP55G88/b+P55208/7yN55+38fzzNp5/3sbzZywv2z6n2PW88u7i9//zMn79/18kt/zkrzaWv7HXfyOF55+38fzzNp5/3sbzz9t4/nkbz/9/v1r/yTGef97G82csL9sOWoj/Ae9D87o662r//jHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYyxvO+Su0EOKv+6vdF2OMMcYYY4wxxv59fP6r3QFjjDHGGGOMMcb+3wMhhRJaBCKfyC9iRAERK64RceJaUVBcJyLiehEvbhCFxI2isCgiiopiIkEUFyWEESisIBGKkqKUiIqbRGlxs0gUZURZUU44UV4kiVtEBXGrqChuE5XE7aKyuENUEVVFNVFd3ClqiLtETVFL1BZ3izqirqgn6ot7RANxr2go7hONxP2isXhANBEPiqbiIdFMPCyai0dEC/GoaCkeE61Ea9FGtBXt/q/yXxJ9xcuin+gvUsQAMVC8IgaJwWKIGCqGiVfFcPGaGCFeF6lipBgl3hCjxZtijHhLjBXjxHjxtpggJopJYrKYIqaKNPGOmCbeFdPFe2KGmClmidkiXcwRc8X7Yp6YLxaID8RC8aFYJBaLJWKpyBAfiUyxTGSJj8Vy8YnIFivESrFKrBZrxFqxTqwXG8RGsUlsFlvEVrFNbBefih1ip9gldos9Yq/YJz4T+8Xn4oD4QuSIL/+b+Wf/Kb8XCBAgQYIGDfkgH8RADMRCLMRBHBSEghCBCMRDPBSCQlAYCkNRKAoJkAAloAQgIBAQlISSEIUolIbSkAiJUBbKggMHSZAEFeBWqAgVoRJUgspQGapAVagK1aE61IAaUBNqQm2oDXWgDtSDenAP3AP3QkNoCI2gETSGxtAEmkBTaArNoBk0h+bQAlpAS2gJraAVtIE20A7aQXtoDx2gA3SCTtAZOkMX6ALJkAxdoSt0g27QHbpDD+gBPaEn9ILe0BtegpfgZXgZ+kMdOQAGwkAYBINgCAyFofAqDIfX4DV4HVJhJIyCN+ANeBPGwBkYC+NgPIyHGnIiTILJQHIqpEEaTINpMB2mwwyYCTNhNqTDHJgLc2EezIf58AEshA/hQ1gMi2EpZEAGZMIyyIIsWA5nIRtWwEpYBathDayGdbAe1sFG2AQbYQtsgW2wDT6FT2En7ITdsBv2wl74DD6Dz+FzSIUcyIGDcBAOwSE4DIchF3LhCByBo3AUjsExOA7H4QSchFNwEk7DaTgDZ+EcnIPzcB4uwAsJ3zTfW2ZDqpCXaallPplPxsgYGStjZZyMkwVlQRmRERkv42UhWUgWloVlUVlUJsgEWUKWkChRkgxlSVlSRmVUlpalZaJMlGVlWemkk0kySVaQFWRFWVFWkrfLyvIOWUVWlR1ddVld1pCdXE1ZS9aWtWUdWVfWk/VlfdlANpANZUPZSDaSjWVj2UQ+KJvKATAEHpaXJ9NCjoSWchS0kq1lG9lWvgmPy/ZyDHSQHWUn+aQcB2Ohi2zvkuUzsqucBN3kc3IyPC97yKnQU74oe8neso98SfaVHVw/2V/OgAFyoJwNg+RgOUQOlfOgrrw8sXrydZkqR8pR8g25FN6UY+RbcqwcJ8fLt+UEOVFOkpPlFDlVpsl35DT5rpwu35Mz5Ew5S86W6XKOnCvfl/PkfLlAfiAXyg/lIrlYLpFLZYb8SGbKZTJLfiyXy09ktlwhV8pVcrVcI9fKdXK93CA3yk1ys9wit8ptcrv8VO6QO+UuuVvukXvlPvmZ3C8/lwfkFzJHfikPyj/JQ/IreVh+LXPlN/KI/FYeld/JY/J7eVz+IE/Ik/KU/FGelj/JM/KsPCd/luflL/KCvCgvSS+FAiWVUloFKp/Kr2JUARWrrlFx6lpVUF2nIup6Fa9uUIXUjaqwKqKKqmIqQRVXJZRRqKwiFaqSqpSKqptUaXWzSlRlVFlVTjlVXiWpW1QFdauqqG5TldTtqrK6Q1VRVVU1VV3dqWqou1RNVUvVVnerOqquqqfqq3tUA3WvaqjuU43U/aqxekA1UQ+qpuoh1Uw9rJqrR1QL9ahqqR5TrVRr1Ua1Ve3U46q9ekJ1UB1VJ/Wk6qyeUl3U0ypZPaO6qmdVN/Wc6q6eVz3UC6qnelH1Ur1VH3VRXVJe9VP9VYoaoAaqV9QgNVgNUUPVMPWqGq5eUyPU6ypVjVSj1BtqtHpTjVFvqbFqnBqv3lYT1EQ1SU1WU9RUlabeUdPUu2q6ek/NUDPVLDVbpas5ashfKi34L+S/+y/yR/z67NvUdvWp2qF2ql1qt9qj9qp9ap/ar/arA+qAylE56qA6qA6pQ+qwOqxyVa46oo6oo+qoOqaOqePquDqhTqqf1Y/qtPpJnVFn1Vn1szqvzqsLf/kZCA1aaqW1DnQ+nV/H6AI6Vl+j4/S1uqC+Tkf09Tpe36AL6Rt1YV1EF9XFdIIurktoo1FbTTrUJXUpHdU36dL6Zp2oy+iyupx2urxO0rf84fzf66+dbqfb6/a6g+6gO+lOurPurLvoLjpZJ+uuuqvuprvp7rq77qF76J66p+6le+k+uo/uq/vqfrqfTtEpeqB+RQ/Sg/UQPVQP06/q4Xq4HqFH6FSdqkfpUXq0Hq3H6DF6rB6rx+vxeoKeoCfpSXqKnqLTdJqepqfp6Xq6nqFn6Fl6lk7X6Xqunqvn6Xl6gV6gF+qFepFepJfoJTpDZ+hMnamzdJZerpfrbL1Cr9Cr9Cq9Rq/R6/Q6vUFv0Jv0Jr1Fb9HZervernfoHXqX3qX36D16n96n9+v9+oA+oHN0jj6oD+pD+pA+rA/rXJ2rj+gj+qg+qo/pY/q4Pq5P6BP6lD6lT+vT+ow+o8/pc/q8Pq8v6Av6kr50+bIvkIEMdKCDfEG+ICaICWKD2CAuiAsKBgWDSBAJ4oP4oFBwY1A4KBIUDYoFCUHxoERgAgxsQEEYlAxKBdHgpqB0cHOQGJQJygblAheUD5KCW4IKwa1BxeC2oFJwe1A5uCOoUkAE1YLqwZ1BjeCuoGZQK6gd3B3UCeoG9YL6wT1Bg+DeoGFwX9AouD9oHDwQNAkeDJoGDwXNgoeD5sEjQYvg0aBl8FjQKmgdtAnaBu3+uX5Q9Q/U9/5MkSdcP9PfpJgBZqB5xQwyg80QM9QMM6+a4eY1M8K8blLNSDPKvGFGmzfNGPOWGWvGmfHmbTPBTDSTzGQzxUw1aeYdM828a6ab98wMM9PMMrNNuplj5pr3zTwz3ywwH5iF5kOzyCw2S8xSk2E+MplmmckyH5vl5hOTbVaYlWaVWW3WmLVmnVlvNpiNZpPZbLaYrWab2W4+NTvMTrPL7DZ7zF6zz3xm9pvPzQHzhckxX5qD5k/mkPnKHDZfm1zzjTlivjVHzXfmmPneHDc/mBPmpDllfjSnzU/mjDlrzpmfzXnzi7lgLppLxl++uL/88o4aNebDfBiDMRiLsRiHcVgQC2IEIxiP8VgIC2FhLIxFsSgmYAKWwBJ4GSFhSSyJUYxiaSyNiZiIZbEsOnSYhElYAStgRayIlbASVsbKWAWrYDWshnfinXgX3oW1sBbejXdjXayL9bE+NsAG2BAbYiNshI2xMTbBJtgUm2IzbIbNsTm2wBbYEltiK2yFbbANtsN22B7bYwfsgJ2wE3bGztgFu2AyJmNX7IrdsBt2x+7YA3tgT+yJvbAX9sE+2Bf7Yj/shymYggNxIA7CQTgEh+AwHIbDcTiOwBGYiqk4CkfhaByNY3AMjsVxOB7fxgk4ESfhZJyCUzEN03AaTsPpOB1n4AychbMwHdNxLs7FeTgPF+ACXIgLcREuwiW4BDMwAzMxE7MwC5fjcszGbFyJK3E1rsa1uBbX43rciBtxM27GrbgVt+N23IE7cBfuwj24B/fhPtyP+/EAHsAczMGDeBAP4SE8jIcxF3PxCB7Bo3gUj+ExPI7H8QSewFN4Ck/jaTyDZ/AcnsPz+AtewIt4CT3GWCli7TU2zl5rC9rrbIwtYP8+LmqL2QRb3Jawxha2Rf4hRmttoi1jy9py1tnyNsne8pu4iq1qq9nq9k5bw95la/4mbmDvtQ3tfbaRvd/Wt/f8Q9zYPmCb2EdtU/uYbWZb2+a2rW1hH7Ut7WO2lW1t29i2trN9ynaxT9tk+4ztap/9TZxpl9n1doPdaDfZ/fZze87+bI/a7+x5+4vtZ/vbYfZVO9y+ZkfY122qHfmbeLx9206wE+0kO9lOsVN/E8+ys226nWPn2vftPDv/N3GG/cgutFl2kV1sl9ilv8aXe8qyH9vl9hObbVfYlXaVXW3X2LV23d96XWW32K12m91nP7M77E67y+62e+zeX+PL53HAfmFz7Jf2iP3WHrJf2cP2mM213/waXz6/Y/Z7e9z+YE/Yk/aU/dGetj/ZM/bsr+d/+dx/tBftJeutICBJijQFlI/yUwwVoFi6huLoWipI11GErqd4uoEK0Y1UmIpQUSpGCVScSpAhJEtEIZWkUhSlm6g03UyJVIbKUjlyVJ6S6BaqQLdSRbqNKtHtVJnuoCpUlapRdbqTatBdVJNqUW26m+pQXapH9ekeakD3UkO6jxrR/dSYHqAm9CA1pYeoGT1MzekRakGPUkt6jFpRa2pDbakdPU7t6QnqQB2pEz1Jnekp6kJPUzI9Q13pWepGz1F3ep560AvUk16kXtSb+tBL1Jdepn7Un1JoAA2kV2gQDaYhNJSG0as0nF6jEfQ6pdJIGkVv0Gh6k8bQWzSWxtF4epsm0ESaRJNpCk2lNHqHptG7NJ3eoxk0k2bRbEqnOTSX3qd5NJ8W0Ae0kD6kRbSYltBSyqCPKJOWURZ9TMvpE8qmFbSSVtFqWkNraR2tpw20kTbRZtpCW2kbbadPaQftpF20m/bQXtpHn9F++pwO0BeUQ1/SQfoTHaKv6DB9Tbn0DR2hb+kofUfH6Hs6Tj/QCTpJp+hHOk0/0Rk6S+foZzpPv9AFukiXyJMIIZShCnUYhPnC/GFMWCCMDa8J48Jrw4LhdWEkvD6MD28IC4U3hoXDImHRsFiYEBYPS4QmxNCGFIZhybBUGA1vCkuHN4eJYZmwbFgudGH5MCm8JawQ3hpWDG8LK4W3h5XDO8IqYdXw0furh3eGNcK7wpphrbB2eHdYJ6wb1gvrh/eEDcJ7w4bhfWGj8P6wYvhA2CR8MGwaPhQ2Cx8Om4ePhC3CR8OW4WNhq7B12CZsG7YLHw/bh0+EHcKOYafwybBz+FTYJXw6TA6fCbuGz/7u8ZRwQDgwfCV8JfT+PrUkujSaEf0omhldFs2KfhxdHv0kmh1dEV0ZXRVdHV0TXRtdF10f3RDdGN0U3RzdEt0a3Rb1vn5+4cBJp5x2gcvn8rsYV8DFumtcnLvWFXTXuYi73sW7G1whd6Mr7Iq4oq6YS3DFXQlnHDrryIWupCvlou4mV9rd7BJdGVfWlXPOlXdJrq1r59q59u4J18F1dJ3ck+5J95R7yj3tnnbPuK7uWdfNPee6u+ddD/eCe8G96Hq53q6Pe8n1dS+7fq6/S3EpbqAb6Aa5QW6IG+KGuWFuuBvuRrgRLtWlulFulBvtRrsxbowb68a68W68m+AmuElukpviprg0l+amuWluupvuZrgZbpab5dJdupvr5rp5bp5b4Ba4hYkL3SK3yC1xS1yGy3CZLtNluSy33C132S7brXQr3Wq32q11a916t95tdBvdZrfZbXVb3Xa33e1wO9wut8vtcXvcPrfP7Xf73QF3wOW4HHfQHXSH3CF32H3tct037oj71h1137lj7nt33P3gTriT7pT70Z12P7kz7qw75352590v7oK76C4579Ii70SmRd6NTI+8F5kRmRmZFZkdSY/MicyNvB+ZF5kfWRD5ILIw8mFkUWRxZElkaSQj8lEkM7IskhX5OLI88kkkO7IisjKyKrI6sibiffEdoS/pS/mov8mX9jf7RF/Gl/XlvPPlfZK/xVfwt/qK/jZfyd/uK/s7fBVf1Vfzj/lWvrVv49v6dv5x394/4Tv4jr6Tf9J39k/5Lv5pn+yf8V39s76bf85398/7Hv4F39O/6Hv53r6Pf8n39S/7fr6/T/ED/ED/ih/kB/shfqgf5l/1w/1rfoR/3af6kX6Uf8OP9m/6Mf4tP9aP8+P9236Cn+gn+cl+ip/q0/w7fpp/10/37/kZfqaf5Wf7dD/Hz/Xv+3l+vl/gP/AL/Yd+kV/sl/ilPsN/5DP9Mp/lP/bL/Sc+26/wK/0qv9qv8Wv9Or/eb/Ab/Sa/2W/xW/02v91/6nf4nX6X3+33+L1+n//M7/ef+wP+C5/jv/QH/Z/8If+VP+y/9rn+G3/Ef+uP+u/8Mf+9P+5/8Cf8SX/K/+hP+5/8GX/Wn/M/+/P+F3/BX/SX+H/WGGOMMcb+S9TvHB/wL74n/7IuGyiEuHZnsdx/rrm58J/3g2VC54gQ4pn+PR/+66pTJyUl5S+PzVYiKLVYCBG5kp9PXIlXiE7iKZEsOooK/7K/wbL3efqd+tHbhYj9W+dCxIi/xn9f/9b/oP7jT47PrByei/9P6i8WIrHUlZwC4kp8pX7F/6B+kfa/03+Br9KE6PB3OXHiSnylfpJ4Qjwrkv/hkYwxxhhjjDHG2J8NltW6/9798+X78wR9JSe/uBL/3v05Y4wxxhhjjDHGrr7ne/d5+vHk5I7decMb3vDmb5ur/ZeJMcYYY4wx9u925aL/anfCGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4zlXf8/Pk7sap8jY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxdrX9nwAAAP//JhA6YA==")
r1 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f)
sendfile(r1, r1, &(0x7f0000000100)=0x4, 0x8112)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002740)=ANY=[@ANYBLOB="280000001000010025bd7000f9dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="158804000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4)

1.699591681s ago: executing program 1 (id=3249):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
close(0x3)
r1 = socket(0x2, 0x80805, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={<r3=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in={{0x2, 0xce23, @broadcast}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r1, &(0x7f0000000d40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
setsockopt(r0, 0x84, 0x14, &(0x7f0000000040)="020000000980ffff", 0x8)

1.696748231s ago: executing program 4 (id=3250):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48)

1.453676722s ago: executing program 1 (id=3251):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000002f00090027bd7000fbdbdf25040000040c0017000c0000000000000004001900"], 0x24}}, 0x0)
nanosleep(&(0x7f0000000200)={0x0, 0x5f5e100}, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', <r2=>0x0})
sendmsg$nl_generic(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050001000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050003000000"], 0x24}}, 0x0)
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000400)={'\x00', 0x1})
sendmsg$nl_generic(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050002000000000000009400000008000300", @ANYRES32=r2, @ANYBLOB="05003901010000000a0006000200000001000000"], 0x30}}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050003000000000000001300000008000300", @ANYRES32=r2, @ANYBLOB="0a0006000200000002000000080013000c1830600600100001000000"], 0x38}}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050004000000000000009600000008000300", @ANYRES32=r2, @ANYBLOB="0a003a0102000000020000000a00060002000000020100000500390101000000080013000c183060"], 0x44}}, 0x0)

1.372437016s ago: executing program 2 (id=3252):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @broadcast}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4)
pipe2(0x0, 0x0)
read$watch_queue(0xffffffffffffffff, 0x0, 0x0)
sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x20004004)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x4b9aa107, @remote, 0x6}, 0x1c)
listen(r0, 0x0)

556.440134ms ago: executing program 4 (id=3253):
syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]})
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
r1 = fcntl$dupfd(r0, 0x0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4)
sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x304}, "3c5fc71652f55582", "922b100cfc4aad2b0b4f847732bed748d83b6ea3ad7b6275f9842dca34ac322b", "70139bf8", "7bb2a19ab2360a62"}, 0x38)
write$binfmt_elf64(r1, &(0x7f0000000740)=ANY=[], 0x4a2)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1)

399.020002ms ago: executing program 9 (id=3254):
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x800)
r1 = syz_io_uring_setup(0xf08, &(0x7f0000000400)={0x0, 0x8000595d, 0x1000, 0x20002, 0x3c7, 0x0, r0}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000001080)=<r3=>0x0, &(0x7f0000000340)=<r4=>0x0)
syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x1, {0xa366}, 0x1})
io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r5=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
readv(r6, &(0x7f00000001c0)=[{&(0x7f0000000400)=""/157, 0x9d}], 0x1)

155.665283ms ago: executing program 9 (id=3255):
r0 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1)
chdir(&(0x7f00000003c0)='./bus\x00')
r2 = fanotify_init(0x40, 0x80000)
readv(r2, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/175, 0xaf}], 0x1)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97)
fanotify_mark(r2, 0x1, 0x40001019, r3, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)
getdents64(r3, 0x0, 0x0)

69.465797ms ago: executing program 2 (id=3256):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6)
ioprio_get$uid(0x3, 0x0)

0s ago: executing program 9 (id=3257):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
r1 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2, 0xf5ff}, 0x10)
sendmsg$tipc(r2, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10)

kernel console output (not intermixed with test programs):

9e159
[  280.771971][ T8846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  280.791623][ T8846] RSP: 002b:00007fb3a8415028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[  280.800121][ T8846] RAX: ffffffffffffffda RBX: 00007fb3a7825fa0 RCX: 00007fb3a759e159
[  280.808225][ T8846] RDX: 0000200000000400 RSI: 0000200000000280 RDI: 0000200000000180
[  280.816269][ T8846] RBP: 00007fb3a763506b R08: fffffffffffffffe R09: 0000000000000000
[  280.824288][ T8846] R10: 00000000000fffff R11: 0000000000000246 R12: 0000000000000000
[  280.832339][ T8846] R13: 00007fb3a7826038 R14: 00007fb3a7825fa0 R15: 00007ffef438d5f8
[  280.840385][ T8846]  </TASK>
[  281.380426][   T76] device batadv1 left promiscuous mode
[  281.527795][ T4261] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  281.697722][ T1172] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  281.719347][ T4261] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  281.755652][ T4261] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  281.777684][ T4261] usb 8-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  281.807085][ T4261] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  281.836835][ T4261] usb 8-1: config 0 descriptor??
[  281.889737][ T1172] usb 10-1: config index 0 descriptor too short (expected 1572, got 36)
[  281.908160][ T1172] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  281.945088][ T1172] usb 10-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40
[  281.980435][ T1172] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  282.008096][ T1172] usb 10-1: Product: syz
[  282.022914][ T1172] usb 10-1: Manufacturer: syz
[  282.040206][ T1172] usb 10-1: SerialNumber: syz
[  282.080543][ T1172] input: bcm5974 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/input/input6
[  282.266143][ T4261] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0
[  282.294187][ T4261] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0
[  282.324536][ T4261] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0
[  282.344922][ T3624] bcm5974 10-1:1.0: could not read from device
[  282.360210][ T4261] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0
[  282.367243][ T4261] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0
[  282.405154][ T4261] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0
[  282.435615][ T4261] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0
[  282.476497][ T4261] cp2112 0003:10C4:EA90.0002: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.7-1/input0
[  282.535000][ T1172] bcm5974 10-1:1.0: could not read from device
[  282.585752][ T3624] bcm5974 10-1:1.0: could not read from device
[  282.599147][ T4261] cp2112 0003:10C4:EA90.0002: Part Number: 0x00 Device Version: 0x00
[  282.698313][ T1172] input: failed to attach handler mousedev to device input6, error: -5
[  282.733033][ T3624] bcm5974 10-1:1.0: could not read from device
[  282.758667][ T1172] usb 10-1: USB disconnect, device number 2
[  282.789922][ T3624] bcm5974 10-1:1.0: could not read from device
[  283.210217][ T4261] cp2112 0003:10C4:EA90.0002: error reading lock byte: -71
[  283.257682][ T4261] usb 8-1: USB disconnect, device number 4
[  284.084535][ T8924] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1296'.
[  284.166090][ T8924] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  284.174998][ T8924] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  284.184049][ T8924] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  284.192935][ T8924] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  284.329755][ T8924] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1296'.
[  284.422492][ T4822] device batadv1 left promiscuous mode
[  284.443511][ T8936] ip_tables: iptables: counters copy to user failed while replacing table
[  284.673059][ T8939] loop7: detected capacity change from 0 to 4096
[  284.737075][ T8950] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1305'.
[  284.772729][ T8943] loop9: detected capacity change from 0 to 512
[  284.816656][ T8939] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  284.849446][ T8939] Quota error (device loop7): do_check_range: Getting block 3573547013 out of range 1-5
[  284.860064][ T8939] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0
[  284.870383][ T8939] EXT4-fs error (device loop7): ext4_acquire_dquot:6841: comm syz.7.1301: Failed to acquire dquot type 1
[  284.911892][ T8939] fs-verity: sha256 using implementation "sha256-avx2"
[  284.968721][ T8943] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  284.968730][ T8939] Quota error (device loop7): do_check_range: Getting block 3573547013 out of range 1-5
[  284.990156][ T8943] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  285.046731][ T8939] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0
[  285.056742][ T8939] EXT4-fs error (device loop7): ext4_acquire_dquot:6841: comm syz.7.1301: Failed to acquire dquot type 1
[  285.180734][   T26] audit: type=1800 audit(1789543953.205:216): pid=8943 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1302" name="bus" dev="loop9" ino=18 res=0 errno=0
[  285.259675][   T26] audit: type=1800 audit(1789543953.205:217): pid=8960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1302" name="bus" dev="loop9" ino=18 res=0 errno=0
[  285.343286][ T6798] EXT4-fs (loop7): unmounting filesystem.
[  285.367775][   T26] audit: type=1326 audit(1789543953.355:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8942 comm="syz.9.1302" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb3a759e159 code=0x0
[  285.702568][ T8201] EXT4-fs (loop9): unmounting filesystem.
[  285.771100][ T4359] Process accounting resumed
[  285.976724][ T8985] loop9: detected capacity change from 0 to 16
[  286.012912][ T8985] erofs: Unknown parameter '18446744073709551615'
[  286.047781][ T8988] ip_tables: iptables: counters copy to user failed while replacing table
[  286.090347][ T8985] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  286.150871][ T8985] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  286.201082][ T8985] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  286.232958][ T8985] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  286.280064][ T8985] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  286.333655][ T8985] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  286.410230][ T8985] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  286.439638][ T8985] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  286.503476][ T8985] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  288.987041][ T9094] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1347'.
[  289.978730][ T9143] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1356'.
[  290.377127][ T9152] overlayfs: failed to clone upperpath
[  290.611347][ T9162] syz.1.1363 sent an empty control message without MSG_MORE.
[  290.783248][ T9164] netlink: 'syz.3.1364': attribute type 1 has an invalid length.
[  290.847142][ T9164] 8021q: adding VLAN 0 to HW filter on device bond8
[  290.874705][ T4287] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  290.883967][ T4287] Bluetooth: hci0: Injecting HCI hardware error event
[  290.894370][ T4289] Bluetooth: hci0: hardware error 0x00
[  291.004453][ T9164] bond8: (slave geneve2): making interface the new active one
[  291.023105][ T9164] bond8: (slave geneve2): Enslaving as an active interface with an up link
[  291.035386][ T4814] IPv6: ADDRCONF(NETDEV_CHANGE): bond8: link becomes ready
[  291.311324][ T9186] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1370'.
[  291.855101][ T9205] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  291.925861][ T9198] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  291.936229][ T9209] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1376'.
[  292.525656][ T9208] loop7: detected capacity change from 0 to 40427
[  292.585017][ T9208] F2FS-fs (loop7): invalid crc value
[  292.611169][ T9208] F2FS-fs (loop7): Found nat_bits in checkpoint
[  292.690766][ T9223] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1388'.
[  292.833295][ T9208] F2FS-fs (loop7): Start checkpoint disabled!
[  292.909271][ T9208] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6
[  293.034180][ T4289] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  293.041944][ T4822] kworker/u4:15: attempt to access beyond end of device
[  293.041944][ T4822] loop7: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  293.137116][ T9247] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1382'.
[  293.169907][ T9248] syz.7.1377: attempt to access beyond end of device
[  293.169907][ T9248] loop7: rw=524288, sector=45064, nr_sectors = 8 limit=40427
[  293.334112][ T9248] syz.7.1377: attempt to access beyond end of device
[  293.334112][ T9248] loop7: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  293.523107][ T4289] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201'
[  293.533547][ T4289] CPU: 0 PID: 4289 Comm: kworker/u5:8 Not tainted syzkaller #0
[  293.541150][ T4289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  293.551430][ T4289] Workqueue: hci4 hci_rx_work
[  293.556172][ T4289] Call Trace:
[  293.559496][ T4289]  <TASK>
[  293.562462][ T4289]  dump_stack_lvl+0x188/0x24e
[  293.567200][ T4289]  ? show_regs_print_info+0x12/0x12
[  293.572453][ T4289]  ? load_image+0x410/0x410
[  293.577024][ T4289]  sysfs_create_dir_ns+0x26a/0x290
[  293.582192][ T4289]  ? __lock_acquire+0x7c40/0x7c40
[  293.587280][ T4289]  ? sysfs_warn_dup+0xa0/0xa0
[  293.592032][ T4289]  ? do_raw_spin_unlock+0x11d/0x230
[  293.597294][ T4289]  kobject_add_internal+0x617/0xca0
[  293.602562][ T4289]  kobject_add+0x160/0x230
[  293.607125][ T4289]  ? kobject_init+0x1c0/0x1c0
[  293.611847][ T4289]  ? __raw_spin_lock_init+0x41/0x100
[  293.617170][ T4289]  ? klist_children_get+0x50/0x50
[  293.622226][ T4289]  ? get_device_parent+0x121/0x3e0
[  293.627358][ T4289]  device_add+0x470/0x1050
[  293.631800][ T4289]  hci_conn_add_sysfs+0xd1/0x1e0
[  293.636747][ T4289]  le_conn_complete_evt+0xf93/0x15c0
[  293.642099][ T4289]  ? hci_le_big_info_adv_report_evt+0x300/0x300
[  293.648374][ T4289]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  293.654025][ T4289]  ? mutex_unlock+0x10/0x10
[  293.658537][ T4289]  ? skb_pull_data+0xec/0x1f0
[  293.663233][ T4289]  hci_le_conn_complete_evt+0x183/0x440
[  293.668811][ T4289]  ? hci_remote_host_features_evt+0x230/0x230
[  293.674891][ T4289]  hci_event_packet+0x7b3/0x1290
[  293.679846][ T4289]  ? lock_chain_count+0x20/0x20
[  293.684719][ T4289]  ? bis_list+0x280/0x280
[  293.689081][ T4289]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  293.694993][ T4289]  ? kcov_remote_start+0x50f/0x810
[  293.700119][ T4289]  ? lockdep_hardirqs_on+0x94/0x140
[  293.705339][ T4289]  ? hci_send_to_monitor+0x9c/0x4a0
[  293.710579][ T4289]  hci_rx_work+0x3eb/0xd40
[  293.715015][ T4289]  ? _raw_spin_unlock+0x40/0x40
[  293.719910][ T4289]  ? process_one_work+0x7b4/0x1160
[  293.725032][ T4289]  process_one_work+0x8ab/0x1160
[  293.730020][ T4289]  ? worker_detach_from_pool+0x240/0x240
[  293.735679][ T4289]  ? _raw_spin_lock_irq+0xb7/0xf0
[  293.740735][ T4289]  ? _raw_spin_lock_irqsave+0x100/0x100
[  293.746309][ T4289]  ? wq_worker_running+0x97/0x190
[  293.751346][ T4289]  worker_thread+0xaf5/0x12a0
[  293.756067][ T4289]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  293.761984][ T4289]  kthread+0x29d/0x330
[  293.766061][ T4289]  ? worker_clr_flags+0x1a0/0x1a0
[  293.771095][ T4289]  ? kthread_blkcg+0xd0/0xd0
[  293.775714][ T4289]  ret_from_fork+0x1f/0x30
[  293.780181][ T4289]  </TASK>
[  293.785958][ T4289] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  293.799285][ T4289] Bluetooth: hci4: failed to register connection device
[  294.240392][ T9266] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1390'.
[  294.372192][ T9270] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1390'.
[  294.656763][ T9278] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  294.735480][ T9278] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  294.796657][ T9278] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  294.838698][ T9278] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  294.874219][ T9278] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  294.903518][ T9278] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  294.922383][ T9278] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  294.953653][ T9278] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  294.966286][ T9278] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  294.984263][ T9284] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1396'.
[  295.009160][ T9290] loop9: detected capacity change from 0 to 128
[  295.020503][ T9288] HTB: quantum of class 80060007 is big. Consider r2q change.
[  295.098812][ T9290] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  295.184640][ T9290] ext4 filesystem being mounted at /39/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  295.389603][ T9290] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:3861: comm syz.9.1398: Allocating blocks 19-20 which overlap fs metadata
[  295.580942][ T8201] EXT4-fs (loop9): unmounting filesystem.
[  296.461467][ T9352] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  297.574927][ T9375] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  297.719976][ T9375] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  297.848872][ T9375] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  297.898755][ T9375] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  297.958263][ T9375] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  298.009266][ T9375] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  298.061183][ T9375] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  298.221919][ T9392] netlink: 'syz.3.1420': attribute type 1 has an invalid length.
[  298.321816][ T9392] 8021q: adding VLAN 0 to HW filter on device bond9
[  298.791705][ T9399] bond9: (slave dummy0): Enslaving as a backup interface with an up link
[  298.826151][   T47] bond9: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  299.002260][ T4816] bond9: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  299.013070][ T9398] bond9: (slave veth13): Enslaving as a backup interface with a down link
[  299.058997][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): bond9: link becomes ready
[  299.071637][ T9392] netlink: 'syz.3.1420': attribute type 10 has an invalid length.
[  299.106289][ T9392] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1420'.
[  299.115310][ T9392] device dummy0 entered promiscuous mode
[  299.137839][ T9392] bond9: (slave dummy0): Removing an active aggregator
[  299.158086][ T4810] bond9: Warning: Found an uninitialized port
[  299.165128][ T9392] bond9: (slave dummy0): Releasing backup interface
[  299.194318][ T9392] bond9: (slave dummy0): the permanent HWaddr of slave - aa:aa:aa:aa:aa:24 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  299.293073][ T9410] netlink: 'syz.7.1424': attribute type 1 has an invalid length.
[  299.342580][ T9410] 8021q: adding VLAN 0 to HW filter on device bond0
[  299.369733][ T9413] bond0: (slave gretap1): making interface the new active one
[  299.453230][ T9413] bond0: (slave gretap1): Enslaving as an active interface with an up link
[  299.527200][ T4818] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  299.608417][   T26] audit: type=1326 audit(1789543967.628:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9424 comm="syz.4.1429" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8fe0d9e159 code=0x0
[  301.365203][ T9446] loop7: detected capacity change from 0 to 40427
[  301.384859][ T9446] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12
[  301.392762][ T9446] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  302.076061][ T9446] F2FS-fs (loop7): Found nat_bits in checkpoint
[  302.286528][ T9446] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  302.294029][ T9446] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  302.549790][ T9446] syz.7.1434: attempt to access beyond end of device
[  302.549790][ T9446] loop7: rw=2049, sector=77824, nr_sectors = 520 limit=40427
[  303.878413][ T9437] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  303.955423][ T9489] loop7: detected capacity change from 0 to 32768
[  304.010144][ T9489] jffs2: notice: (9489) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  304.129632][ T9437] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  304.210318][ T6798] ERROR: (device loop7): xtSearch: XT_GETPAGE: xtree page corrupt
[  304.210318][ T6798] 
[  304.230136][ T6798] ERROR: (device loop7): remounting filesystem as read-only
[  304.237479][ T6798] xtLookup: xtSearch returned -5
[  304.249974][ T6798] free_index: error reading directory table
[  304.256992][ T6798] ERROR: (device loop7): xtSearch: XT_GETPAGE: xtree page corrupt
[  304.256992][ T6798] 
[  304.267864][ T6798] xtLookup: xtSearch returned -5
[  304.275279][ T6798] free_index: error reading directory table
[  304.281711][ T6798] ERROR: (device loop7): xtSearch: XT_GETPAGE: xtree page corrupt
[  304.281711][ T6798] 
[  304.292356][ T6798] xtLookup: xtSearch returned -5
[  304.297455][ T6798] free_index: error reading directory table
[  304.305346][ T6798] ERROR: (device loop7): xtSearch: XT_GETPAGE: xtree page corrupt
[  304.305346][ T6798] 
[  304.315988][ T6798] xtLookup: xtSearch returned -5
[  304.321333][ T6798] free_index: error reading directory table
[  304.328287][ T6798] ERROR: (device loop7): xtSearch: XT_GETPAGE: xtree page corrupt
[  304.328287][ T6798] 
[  304.340147][ T6798] xtLookup: xtSearch returned -5
[  304.345208][ T6798] free_index: error reading directory table
[  304.376397][ T6798] non-latin1 character 0x2e66 found in JFS file name
[  304.388693][ T6798] mount with iocharset=utf8 to access
[  305.243896][ T9437] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  305.253814][ T9437] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  305.263029][ T9437] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  305.272014][ T9437] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  305.320117][ T9453] netlink: 'syz.1.1436': attribute type 1 has an invalid length.
[  305.350838][ T9495] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  305.371565][ T9495] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  305.379066][ T9495] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  305.395686][ T9495] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  305.421614][ T9495] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  305.429234][ T9495] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  305.469710][ T9495] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  305.607694][ T9506] IPVS: rr: TCP 127.0.0.1:21 - no destination available
[  306.721099][ T9540] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1459'.
[  306.750203][ T9540] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1459'.
[  306.780403][ T9540] netlink: 'syz.4.1459': attribute type 6 has an invalid length.
[  306.790709][ T9540] netlink: 'syz.4.1459': attribute type 5 has an invalid length.
[  306.840315][ T9540] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1459'.
[  307.267242][ T4287] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  307.277349][ T4287] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  307.286150][ T4287] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  307.330982][ T4279] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  307.338999][ T4279] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  307.347698][ T4287] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  308.050528][ T9549] chnl_net:caif_netlink_parms(): no params data found
[  308.493927][ T9549] bridge0: port 1(bridge_slave_0) entered blocking state
[  308.528712][ T9549] bridge0: port 1(bridge_slave_0) entered disabled state
[  308.594618][ T9549] device bridge_slave_0 entered promiscuous mode
[  308.615504][ T9549] bridge0: port 2(bridge_slave_1) entered blocking state
[  308.651314][ T9549] bridge0: port 2(bridge_slave_1) entered disabled state
[  308.681014][    T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!!
[  308.691032][    T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!!
[  308.701020][    T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!!
[  308.711028][    T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!!
[  308.721023][    T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!!
[  308.744057][ T9549] device bridge_slave_1 entered promiscuous mode
[  308.774523][ T9549] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  308.853996][ T9549] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  308.927378][ T9549] team0: Port device team_slave_0 added
[  308.976256][ T9549] team0: Port device team_slave_1 added
[  309.049271][ T9549] batman_adv: batadv0: Adding interface: batadv_slave_0
[  309.091293][ T9549] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  309.204652][ T9549] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  309.265814][ T9549] batman_adv: batadv0: Adding interface: batadv_slave_1
[  309.295229][ T9549] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  309.378536][ T9549] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  309.441896][ T4279] Bluetooth: hci2: command 0x0409 tx timeout
[  309.569141][ T9549] device hsr_slave_0 entered promiscuous mode
[  309.601875][ T9549] device hsr_slave_1 entered promiscuous mode
[  309.631870][ T9549] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  309.659853][ T9549] Cannot create hsr debugfs directory
[  310.160103][ T9549] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  310.353864][ T9549] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  310.524422][ T9549] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  310.761237][ T9549] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  311.181740][ T9549] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  311.197526][ T9644] overlayfs: failed to clone upperpath
[  311.216338][ T9549] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  311.256903][ T9549] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  311.299773][ T9549] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  311.512433][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  311.522438][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  311.532435][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  311.542436][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  311.552433][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  311.558932][ T4279] Bluetooth: hci2: command 0x041b tx timeout
[  311.635218][ T9549] 8021q: adding VLAN 0 to HW filter on device bond0
[  311.709769][ T4816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  311.727935][ T4816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  311.762954][ T9549] 8021q: adding VLAN 0 to HW filter on device team0
[  311.799542][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  311.813616][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  311.838072][   T33] bridge0: port 1(bridge_slave_0) entered blocking state
[  311.845296][   T33] bridge0: port 1(bridge_slave_0) entered forwarding state
[  311.881469][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  311.902511][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  311.937077][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  311.951544][   T33] bridge0: port 2(bridge_slave_1) entered blocking state
[  311.958769][   T33] bridge0: port 2(bridge_slave_1) entered forwarding state
[  311.977381][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  312.019503][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  312.040703][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  312.065772][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  312.083935][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  312.103177][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  312.111944][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  312.138817][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  312.146979][ T9663] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  312.169198][ T9549] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  312.204030][ T9549] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  312.227759][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  312.239233][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  312.274288][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  312.298369][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  312.688800][ T4816] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  312.714996][ T4816] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  312.759471][ T9549] 8021q: adding VLAN 0 to HW filter on device batadv0
[  312.836650][ T4818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  312.860833][ T4818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  312.942431][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  312.983011][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  313.013922][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  313.051162][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  313.084539][ T9549] device veth0_vlan entered promiscuous mode
[  313.128602][ T9549] device veth1_vlan entered promiscuous mode
[  313.204552][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  313.234298][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  313.284052][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  313.315125][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  313.350537][ T9549] device veth0_macvtap entered promiscuous mode
[  313.374718][ T9686] netlink: 'syz.4.1497': attribute type 1 has an invalid length.
[  313.464437][ T9686] 8021q: adding VLAN 0 to HW filter on device bond1
[  313.603647][ T4279] Bluetooth: hci2: command 0x040f tx timeout
[  313.611504][ T9687] bond1: (slave veth11): Enslaving as a backup interface with a down link
[  313.674578][ T9690] bond1: (slave dummy0): Enslaving as a backup interface with an up link
[  313.706760][ T4816] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  313.720140][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  313.729141][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  313.739518][ T9696] netlink: 'syz.4.1497': attribute type 10 has an invalid length.
[  313.747845][ T9696] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1497'.
[  313.758280][ T9696] device dummy0 entered promiscuous mode
[  313.781983][ T4816] bond1: (slave dummy0): link status up again after 0 ms
[  313.796020][ T9696] bond1: (slave dummy0): Removing an active aggregator
[  313.818414][ T4816] bond1: (slave dummy0): link status up again after 0 ms
[  313.844326][ T9696] bond1: (slave dummy0): Releasing backup interface
[  313.879719][ T9549] device veth1_macvtap entered promiscuous mode
[  313.897683][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  313.947486][ T9549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  314.004017][ T9549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  314.032635][ T9549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  314.064523][ T9549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  314.079253][ T9549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  314.098971][ T9549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  314.114070][ T9549] batman_adv: batadv0: Interface activated: batadv_slave_0
[  314.123214][ T4818] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  314.133548][ T4818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  314.145796][ T9549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  314.157315][ T9549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  314.173518][ T9549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  314.202099][ T9549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  314.212879][ T9549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  314.224118][ T9549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  314.260775][ T9549] batman_adv: batadv0: Interface activated: batadv_slave_1
[  314.307066][ T4818] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  314.324806][ T4818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  314.355104][ T9549] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  314.370507][ T9549] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  314.392254][ T9549] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  314.430833][ T9549] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  314.642793][   T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  314.658379][   T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  314.683499][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  314.734179][ T4816] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  314.761328][ T4816] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  314.791915][ T4816] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  315.515572][ T9760] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1525'.
[  315.685149][ T4279] Bluetooth: hci2: command 0x0419 tx timeout
[  315.947631][   T26] audit: type=1326 audit(1789543983.960:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9772 comm="syz.9.1530" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3a759e159 code=0x7ffc0000
[  316.023806][   T26] audit: type=1326 audit(1789543983.990:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9772 comm="syz.9.1530" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fb3a759e159 code=0x7ffc0000
[  316.158160][   T26] audit: type=1326 audit(1789543983.990:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9772 comm="syz.9.1530" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3a759e159 code=0x7ffc0000
[  316.228352][   T26] audit: type=1326 audit(1789543983.990:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9772 comm="syz.9.1530" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3a759e159 code=0x7ffc0000
[  316.298048][   T26] audit: type=1326 audit(1789543984.000:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9772 comm="syz.9.1530" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb3a759e159 code=0x7ffc0000
[  316.405760][   T26] audit: type=1326 audit(1789543984.000:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9772 comm="syz.9.1530" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3a759e159 code=0x7ffc0000
[  316.481284][   T26] audit: type=1326 audit(1789543984.000:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9772 comm="syz.9.1530" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3a759e159 code=0x7ffc0000
[  316.556692][   T26] audit: type=1326 audit(1789543984.000:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9772 comm="syz.9.1530" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3a759e159 code=0x7ffc0000
[  316.632076][   T26] audit: type=1326 audit(1789543984.000:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9772 comm="syz.9.1530" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3a759e159 code=0x7ffc0000
[  316.696253][ T9789] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1535'.
[  316.734725][   T26] audit: type=1326 audit(1789543984.000:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9772 comm="syz.9.1530" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb3a759e159 code=0x7ffc0000
[  317.048632][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  317.054997][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  321.665337][ T9925] netlink: 'syz.4.1573': attribute type 12 has an invalid length.
[  323.768741][ T4301] wlan1: Trigger new scan to find an IBSS to join
[  324.007794][  T127] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  324.086801][ T9994] loop0: detected capacity change from 0 to 512
[  324.221946][ T9994] EXT4-fs error (device loop0): ext4_orphan_get:1409: inode #15: comm syz.0.1592: iget: bad i_size value: 38620345925642
[  324.239727][  T127] usb 1-1: Dual-Role OTG device on HNP port
[  324.249021][  T127] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.01
[  324.258123][  T127] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  324.289988][ T9994] EXT4-fs error (device loop0): ext4_orphan_get:1414: comm syz.0.1592: couldn't read orphan inode 15 (err -117)
[  324.313261][  T127] cdc_acm 1-1:1.0: ttyACM0: USB ACM device
[  324.399324][ T9994] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  324.683628][   T76] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm kworker/u4:4: bg 0: block 5: invalid block bitmap
[  324.759500][   T76] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28
[  324.809292][   T76] EXT4-fs (loop0): This should not happen!! Data will be lost
[  324.809292][   T76] 
[  324.837027][   T76] EXT4-fs (loop0): Total free blocks count 0
[  324.863867][   T76] EXT4-fs (loop0): Free/Dirty block details
[  324.891123][   T76] EXT4-fs (loop0): free_blocks=0
[  324.912923][   T76] EXT4-fs (loop0): dirty_blocks=1
[  324.935953][   T76] EXT4-fs (loop0): Block reservation details
[  324.963338][   T76] EXT4-fs (loop0): i_reserved_data_blocks=1
[  325.004869][ T9549] EXT4-fs (loop0): unmounting filesystem.
[  326.343233][T10062] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1610'.
[  326.839618][T10067] netlink: 'syz.4.1614': attribute type 3 has an invalid length.
[  327.089388][T10081] netlink: 15143 bytes leftover after parsing attributes in process `syz.1.1616'.
[  327.986810][T10119] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[  328.075310][T10119] batman_adv: batadv0: Adding interface: gretap2
[  328.094400][T10119] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  328.183827][T10119] batman_adv: batadv0: Interface activated: gretap2
[  328.812795][   T33] wlan1: Trigger new scan to find an IBSS to join
[  329.243259][T10156] netlink: 'syz.0.1639': attribute type 12 has an invalid length.
[  329.761385][   T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  329.789640][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  330.149622][T10184] netlink: 11575 bytes leftover after parsing attributes in process `syz.4.1648'.
[  330.200897][T10184] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1648'.
[  335.305116][T10292] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1674'.
[  335.341782][T10292] device ip6gre1 entered promiscuous mode
[  335.815374][T10296] netlink: 'syz.1.1674': attribute type 6 has an invalid length.
[  335.833432][T10296] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1674'.
[  335.962511][T10309] overlayfs: failed to clone upperpath
[  336.576683][ T4810] bond0: (slave gretap1): Releasing active interface
[  338.222934][   T26] kauditd_printk_skb: 12 callbacks suppressed
[  338.222951][   T26] audit: type=1326 audit(1789544006.219:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10366 comm="syz.1.1696" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc24c99e159 code=0x7ffc0000
[  338.326613][   T26] audit: type=1326 audit(1789544006.269:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10366 comm="syz.1.1696" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc24c99e159 code=0x7ffc0000
[  338.407019][   T26] audit: type=1326 audit(1789544006.269:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10366 comm="syz.1.1696" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc24c99e159 code=0x7ffc0000
[  338.479285][ T4810] device hsr_slave_0 left promiscuous mode
[  338.516379][ T4810] device hsr_slave_1 left promiscuous mode
[  338.556018][   T26] audit: type=1326 audit(1789544006.269:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10366 comm="syz.1.1696" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc24c99e159 code=0x7ffc0000
[  338.581667][ T4810] batman_adv: batadv0: Removing interface: batadv_slave_0
[  338.597034][ T4810] batman_adv: batadv0: Removing interface: batadv_slave_1
[  338.636049][   T26] audit: type=1326 audit(1789544006.269:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10366 comm="syz.1.1696" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7fc24c99e159 code=0x7ffc0000
[  338.657700][ T4810] device bridge_slave_1 left promiscuous mode
[  338.727196][ T4810] bridge0: port 2(bridge_slave_1) entered disabled state
[  338.748776][   T26] audit: type=1326 audit(1789544006.269:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10366 comm="syz.1.1696" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc24c99e159 code=0x7ffc0000
[  338.827708][ T4810] device bridge_slave_0 left promiscuous mode
[  338.829058][   T26] audit: type=1326 audit(1789544006.269:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10366 comm="syz.1.1696" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc24c99e159 code=0x7ffc0000
[  338.834217][ T4810] bridge0: port 1(bridge_slave_0) entered disabled state
[  338.956224][   T26] audit: type=1326 audit(1789544006.269:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10366 comm="syz.1.1696" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fc24c99e159 code=0x7ffc0000
[  339.051981][   T26] audit: type=1326 audit(1789544006.269:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10366 comm="syz.1.1696" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fc24c99e159 code=0x7ffc0000
[  339.907272][ T4810] bond0 (unregistering): Released all slaves
[  340.231512][ T4810] bond1 (unregistering): (slave veth3): Releasing active interface
[  340.890251][T10426] overlayfs: failed to clone upperpath
[  340.905568][ T4810] bond1 (unregistering): Released all slaves
[  342.541329][ T4810] team0 (unregistering): Port device team_slave_1 removed
[  342.667553][ T4810] team0 (unregistering): Port device team_slave_0 removed
[  343.612409][T10392] tipc: Started in network mode
[  343.617344][T10392] tipc: Node identity 1001001, cluster identity 4711
[  343.635002][T10392] tipc: Node number set to 16781313
[  343.673584][T10449] bridge0: port 2(bridge_slave_1) entered disabled state
[  343.680942][T10449] bridge0: port 1(bridge_slave_0) entered disabled state
[  343.740906][T10454] device vlan2 left promiscuous mode
[  343.768860][T10454] device vlan0 left promiscuous mode
[  343.802791][T10454] bridge0: port 3(vlan2) entered disabled state
[  343.830177][T10454] device bridge_slave_1 left promiscuous mode
[  343.836886][T10454] bridge0: port 2(bridge_slave_1) entered disabled state
[  343.870956][T10454] device bridge_slave_0 left promiscuous mode
[  343.877832][T10454] bridge0: port 1(bridge_slave_0) entered disabled state
[  344.189275][T10492] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1737'.
[  344.329367][T10492] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1737'.
[  344.387631][T10492] bond10 (unregistering): Released all slaves
[  345.430245][ T4814] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  345.633261][ T4814] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  345.793415][ T4814] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  345.968423][ T4814] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  346.041470][T10548] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1754'.
[  346.157759][T10548] 8021q: adding VLAN 0 to HW filter on device bond0
[  346.269294][T10559] overlayfs: failed to clone upperpath
[  346.287777][T10552] bond0: (slave ip6erspan0): making interface the new active one
[  346.335489][T10552] bond0: (slave ip6erspan0): Enslaving as an active interface with an up link
[  346.377273][ T4818] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  346.496785][ T4289] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  346.508985][ T4289] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  346.518347][ T4289] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  346.526939][ T4289] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  346.535489][ T4289] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  346.543272][ T4289] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  346.856405][T10574] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  346.916291][T10574] bridge0: port 2(bridge_slave_1) entered disabled state
[  346.923876][T10574] bridge0: port 1(bridge_slave_0) entered disabled state
[  347.378387][T10562] chnl_net:caif_netlink_parms(): no params data found
[  347.776340][T10602] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1769'.
[  347.803736][T10562] bridge0: port 1(bridge_slave_0) entered blocking state
[  347.830660][T10562] bridge0: port 1(bridge_slave_0) entered disabled state
[  347.838250][T10602] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1769'.
[  347.859669][T10562] device bridge_slave_0 entered promiscuous mode
[  347.866598][T10602] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1769'.
[  347.966752][T10562] bridge0: port 2(bridge_slave_1) entered blocking state
[  347.981030][T10562] bridge0: port 2(bridge_slave_1) entered disabled state
[  348.008345][T10562] device bridge_slave_1 entered promiscuous mode
[  348.043111][T10615] netlink: 2028 bytes leftover after parsing attributes in process `syz.9.1771'.
[  348.060890][T10615] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1771'.
[  348.347600][T10562] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  348.378118][T10562] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  348.540798][T10562] team0: Port device team_slave_0 added
[  348.582129][ T4289] Bluetooth: hci2: command 0x0409 tx timeout
[  348.620292][T10562] team0: Port device team_slave_1 added
[  348.889372][T10562] batman_adv: batadv0: Adding interface: batadv_slave_0
[  348.902428][T10562] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  349.001233][T10562] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  349.287687][T10562] batman_adv: batadv0: Adding interface: batadv_slave_1
[  349.297312][T10562] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  349.345032][T10562] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  349.431908][ T4814] device hsr_slave_0 left promiscuous mode
[  349.445290][ T4814] device hsr_slave_1 left promiscuous mode
[  349.466985][ T4814] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  349.480935][ T4814] batman_adv: batadv0: Removing interface: batadv_slave_0
[  349.503719][ T4814] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  349.530700][ T4814] batman_adv: batadv0: Removing interface: batadv_slave_1
[  349.545190][ T4814] device bridge_slave_1 left promiscuous mode
[  349.551603][ T4814] bridge0: port 2(bridge_slave_1) entered disabled state
[  349.572853][ T4814] device bridge_slave_0 left promiscuous mode
[  349.579138][ T4814] bridge0: port 1(bridge_slave_0) entered disabled state
[  349.712848][ T4814] device veth1_macvtap left promiscuous mode
[  349.733221][ T4814] device veth0_macvtap left promiscuous mode
[  349.739542][ T4814] device veth1_vlan left promiscuous mode
[  349.753798][ T4814] device veth0_vlan left promiscuous mode
[  350.539609][ T4814] team0 (unregistering): Port device team_slave_1 removed
[  350.592395][ T4814] team0 (unregistering): Port device team_slave_0 removed
[  350.644606][ T4814] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  350.672084][ T4289] Bluetooth: hci2: command 0x041b tx timeout
[  350.706785][ T4814] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  351.086902][ T4814] bond0 (unregistering): Released all slaves
[  351.211914][T10662] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1784'.
[  351.440828][T10662] team0: Port device team_slave_0 removed
[  351.637654][T10562] device hsr_slave_0 entered promiscuous mode
[  351.662925][T10562] device hsr_slave_1 entered promiscuous mode
[  352.744887][ T4289] Bluetooth: hci2: command 0x040f tx timeout
[  353.014156][T10711] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1799'.
[  353.055636][T10713] overlayfs: failed to clone upperpath
[  353.920157][T10562] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  353.945926][T10562] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  353.964728][T10562] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  353.991347][T10562] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  354.021243][T10747] netlink: 'syz.4.1810': attribute type 1 has an invalid length.
[  354.131307][T10747] 8021q: adding VLAN 0 to HW filter on device bond2
[  354.210668][T10754] bond2: (slave geneve2): making interface the new active one
[  354.297158][T10754] bond2: (slave geneve2): Enslaving as an active interface with an up link
[  354.343278][ T4818] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready
[  354.580894][T10562] 8021q: adding VLAN 0 to HW filter on device bond0
[  354.654679][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  354.663225][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  354.689442][T10562] 8021q: adding VLAN 0 to HW filter on device team0
[  354.717427][T10766] netlink: 'syz.4.1814': attribute type 1 has an invalid length.
[  354.832644][T10770] 8021q: adding VLAN 0 to HW filter on device bond4
[  354.839475][ T4289] Bluetooth: hci2: command 0x0419 tx timeout
[  354.890327][T10770] bond3: (slave bond4): making interface the new active one
[  354.930238][T10770] bond3: (slave bond4): Enslaving as an active interface with an up link
[  354.969468][ T4816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  354.991525][ T4816] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  355.015037][ T4816] bridge0: port 1(bridge_slave_0) entered blocking state
[  355.022244][ T4816] bridge0: port 1(bridge_slave_0) entered forwarding state
[  355.047231][ T4816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  355.077491][ T4816] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  355.112126][ T4816] bridge0: port 2(bridge_slave_1) entered blocking state
[  355.119342][ T4816] bridge0: port 2(bridge_slave_1) entered forwarding state
[  355.129233][T10781] sock: sock_set_timeout: `syz.3.1818' (pid 10781) tries to set negative timeout
[  355.157593][T10766] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1814'.
[  355.195181][T10766] device bond3 entered promiscuous mode
[  355.204583][T10766] device bond4 entered promiscuous mode
[  355.234197][T10766] 8021q: adding VLAN 0 to HW filter on device bond3
[  355.264887][ T4816] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  355.276310][ T4816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  355.314592][ T4816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  355.332797][ T4816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  355.349836][  T127] kernel read not supported for file [userfaultfd] (pid: 127 comm: kworker/1:2)
[  355.372387][ T4816] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  355.406764][ T4816] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  355.424108][ T4816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  355.450646][ T4816] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  355.479480][ T4816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  355.497905][ T4816] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  355.521535][T10562] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  355.544041][T10562] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  355.570501][ T4816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  355.583375][ T4816] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  355.979953][ T4816] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  356.000574][ T4816] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  356.022576][T10562] 8021q: adding VLAN 0 to HW filter on device batadv0
[  356.087125][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  356.107158][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  356.208935][T10562] device veth0_vlan entered promiscuous mode
[  356.246254][ T4816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  356.270051][ T4816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  356.319665][ T4816] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  356.342867][ T4816] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  356.377391][T10562] device veth1_vlan entered promiscuous mode
[  356.492011][ T4816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  356.513950][ T4816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  356.557920][T10562] device veth0_macvtap entered promiscuous mode
[  356.595811][T10562] device veth1_macvtap entered promiscuous mode
[  356.647966][T10562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  356.691102][T10562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  356.729557][T10562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  356.767427][T10562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  356.809928][T10562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  356.854005][T10562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  356.893541][T10562] batman_adv: batadv0: Interface activated: batadv_slave_0
[  356.925348][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  356.947083][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  356.984452][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  357.021932][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  357.051717][T10562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  357.076315][T10562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  357.107457][T10562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  357.149447][T10562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  357.192455][T10562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  357.238734][T10562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  357.257034][T10562] batman_adv: batadv0: Interface activated: batadv_slave_1
[  357.267856][ T4818] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  357.287042][ T4818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  357.330959][T10562] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  357.359890][T10562] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  357.387851][T10562] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  357.430840][T10562] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  357.702595][ T4816] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  357.731584][ T4816] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  357.762557][ T4814] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  357.826862][ T4818] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  357.834752][ T4818] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  357.885323][ T4818] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  358.680186][T10874] netlink: 'syz.3.1842': attribute type 1 has an invalid length.
[  358.730290][T10874] device bond10 entered promiscuous mode
[  358.738287][T10874] 8021q: adding VLAN 0 to HW filter on device bond10
[  358.820159][T10876] bond10: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  358.932103][T10876] bond10: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  358.986176][T10876] bond10: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[  359.331456][T10890] ip_tables: iptables: counters copy to user failed while replacing table
[  359.821879][T10902] overlayfs: failed to clone upperpath
[  361.867660][   T47] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  362.110027][T10977] device bridge0 entered promiscuous mode
[  362.115993][ T4289] Bluetooth: hci1: Malformed MSFT vendor event: 0x02
[  362.139725][T10975] device bridge0 left promiscuous mode
[  363.273231][T11021] loop2: detected capacity change from 0 to 128
[  363.774628][T11021] loop2: detected capacity change from 128 to 1
[  363.900499][T11029] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF
[  363.948454][T11029] FAT-fs (loop2): Filesystem has been set read-only
[  364.241969][T10001] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  365.221844][T11075] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1903'.
[  365.299546][T11077] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1903'.
[  365.756141][T11099] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1908'.
[  366.000860][T11107] netlink: 'syz.9.1911': attribute type 1 has an invalid length.
[  366.232970][T11110] 8021q: adding VLAN 0 to HW filter on device bond2
[  366.241004][T11110] bond1: (slave bond2): making interface the new active one
[  366.248697][T11110] bond1: (slave bond2): Enslaving as an active interface with an up link
[  366.328824][T11113] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1911'.
[  366.388969][T11113] device bond1 entered promiscuous mode
[  366.430050][T11113] device bond2 entered promiscuous mode
[  366.456575][T11113] 8021q: adding VLAN 0 to HW filter on device bond1
[  366.556948][T11118] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  366.629681][T11122] netlink: 'syz.1.1916': attribute type 1 has an invalid length.
[  366.706233][T11122] 8021q: adding VLAN 0 to HW filter on device bond4
[  366.825612][T11126] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  366.857646][T11126] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  366.890236][T11126] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  366.915766][T11126] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  366.962742][T11126] bond4: (slave geneve2): making interface the new active one
[  366.989253][T11126] bond4: (slave geneve2): Enslaving as an active interface with an up link
[  367.025464][ T4816] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready
[  367.434576][T11147] bond5: (slave vlan4): Opening slave failed
[  368.772345][T11175] mmap: syz.3.1928 (11175) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  369.374272][T11184] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  369.431651][T11184] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  369.678370][T11184] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  369.714808][T11184] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  369.944902][T11184] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  369.972960][T11184] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  370.220337][T11184] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  370.245306][T11184] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  370.595403][T11184] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  370.622302][T11184] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  370.674109][T11184] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  370.764797][T11184] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  370.820002][T11184] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  370.900943][T11226] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1947'.
[  370.921110][T11184] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  370.967816][T11184] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  370.987902][T11184] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  372.098064][T11257] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  372.221480][T11257] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  373.457561][T11294] netlink: 'syz.2.1964': attribute type 2 has an invalid length.
[  373.537472][T11298] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1966'.
[  373.676119][T11298] device bond6 entered promiscuous mode
[  373.682082][T11298] 8021q: adding VLAN 0 to HW filter on device bond6
[  373.934942][T11298] 8021q: adding VLAN 0 to HW filter on device bond6
[  373.995346][T11298] bond6: (slave sit1): The slave device specified does not support setting the MAC address
[  374.025043][T11298] bond6: (slave sit1): Error -95 calling set_mac_address
[  374.361233][T11332] netlink: 'syz.1.1974': attribute type 1 has an invalid length.
[  374.534736][T11336] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  374.605437][T11336] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  374.625672][T11336] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  374.670894][T11336] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  374.707996][T11336] bond7: (slave geneve3): making interface the new active one
[  374.738780][T11336] bond7: (slave geneve3): Enslaving as an active interface with an up link
[  375.247077][T11344] netlink: 4096 bytes leftover after parsing attributes in process `syz.1.1976'.
[  376.364121][T11382] overlayfs: failed to clone upperpath
[  376.380417][T11380] netlink: 2028 bytes leftover after parsing attributes in process `syz.2.1983'.
[  376.494075][T11380] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1983'.
[  378.522917][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  378.529660][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  379.007799][T11451] netlink: 'syz.4.2003': attribute type 11 has an invalid length.
[  380.607064][ T4279] Bluetooth: hci1: command 0x0406 tx timeout
[  380.836243][T11500] FAULT_INJECTION: forcing a failure.
[  380.836243][T11500] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  380.933194][T11500] CPU: 0 PID: 11500 Comm: syz.2.2014 Not tainted syzkaller #0
[  380.940827][T11500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  380.950925][T11500] Call Trace:
[  380.954242][T11500]  <TASK>
[  380.957207][T11500]  dump_stack_lvl+0x188/0x24e
[  380.961937][T11500]  ? show_regs_print_info+0x12/0x12
[  380.967185][T11500]  ? load_image+0x410/0x410
[  380.971755][T11500]  ? __lock_acquire+0x7c40/0x7c40
[  380.976845][T11500]  should_fail_ex+0x390/0x4c0
[  380.981615][T11500]  _copy_to_user+0x2c/0x130
[  380.986168][T11500]  ucma_create_id+0x2ce/0x370
[  380.990893][T11500]  ? __lock_acquire+0x7c40/0x7c40
[  380.995975][T11500]  ? ucma_close+0x170/0x170
[  381.000580][T11500]  ? __might_fault+0xa6/0x120
[  381.005318][T11500]  ? __might_fault+0xc2/0x120
[  381.010033][T11500]  ? __might_fault+0xa6/0x120
[  381.014782][T11500]  ucma_write+0x24e/0x2f0
[  381.019170][T11500]  ? ucma_get_global_nl_info+0x70/0x70
[  381.024675][T11500]  ? common_file_perm+0x171/0x1c0
[  381.029751][T11500]  ? fsnotify_perm+0x5a/0x550
[  381.034500][T11500]  ? security_file_permission+0x75/0xa0
[  381.040098][T11500]  ? ucma_get_global_nl_info+0x70/0x70
[  381.045628][T11500]  vfs_write+0x2dc/0x9a0
[  381.049912][T11500]  ? file_end_write+0x250/0x250
[  381.054795][T11500]  ? __fget_files+0x28/0x460
[  381.059415][T11500]  ? __fget_files+0x3fc/0x460
[  381.064156][T11500]  ? __fdget_pos+0x1d4/0x360
[  381.068796][T11500]  ? ksys_write+0x70/0x260
[  381.073254][T11500]  ksys_write+0x14d/0x260
[  381.077652][T11500]  ? __ia32_sys_read+0x80/0x80
[  381.082475][T11500]  ? lockdep_hardirqs_on+0x94/0x140
[  381.087712][T11500]  do_syscall_64+0x4c/0xa0
[  381.092236][T11500]  ? clear_bhb_loop+0x60/0xb0
[  381.096929][T11500]  ? clear_bhb_loop+0x60/0xb0
[  381.101628][T11500]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  381.107574][T11500] RIP: 0033:0x7f8fddb9e159
[  381.112047][T11500] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  381.131675][T11500] RSP: 002b:00007f8fdeb39028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  381.140114][T11500] RAX: ffffffffffffffda RBX: 00007f8fdde25fa0 RCX: 00007f8fddb9e159
[  381.148111][T11500] RDX: 0000000000000020 RSI: 00002000000005c0 RDI: 0000000000000005
[  381.156799][T11500] RBP: 00007f8fddc3506b R08: 0000000000000000 R09: 0000000000000000
[  381.164791][T11500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  381.172782][T11500] R13: 00007f8fdde26038 R14: 00007f8fdde25fa0 R15: 00007ffea9440938
[  381.180812][T11500]  </TASK>
[  381.739264][T11520] loop2: detected capacity change from 0 to 1024
[  381.928715][T11520] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  382.409206][   T26] audit: type=1326 audit(1789544050.377:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11533 comm="syz.3.2022" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0e479e159 code=0x7ffc0000
[  382.476909][   T26] audit: type=1326 audit(1789544050.417:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11533 comm="syz.3.2022" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0e479e159 code=0x7ffc0000
[  382.567945][   T26] audit: type=1326 audit(1789544050.417:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11533 comm="syz.3.2022" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0e479e159 code=0x7ffc0000
[  382.634776][T10562] EXT4-fs (loop2): unmounting filesystem.
[  382.653840][   T26] audit: type=1326 audit(1789544050.417:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11533 comm="syz.3.2022" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0e479e159 code=0x7ffc0000
[  382.759565][   T26] audit: type=1326 audit(1789544050.417:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11533 comm="syz.3.2022" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7ff0e479e159 code=0x7ffc0000
[  382.865117][   T26] audit: type=1326 audit(1789544050.417:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11533 comm="syz.3.2022" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0e479e159 code=0x7ffc0000
[  382.978178][   T26] audit: type=1326 audit(1789544050.417:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11533 comm="syz.3.2022" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0e479e159 code=0x7ffc0000
[  383.071662][   T26] audit: type=1326 audit(1789544050.427:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11533 comm="syz.3.2022" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0e479e159 code=0x7ffc0000
[  383.188545][   T26] audit: type=1326 audit(1789544050.427:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11533 comm="syz.3.2022" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0e479e159 code=0x7ffc0000
[  383.301823][   T26] audit: type=1326 audit(1789544050.427:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11533 comm="syz.3.2022" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0e479e159 code=0x7ffc0000
[  383.350353][T11562] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  383.458244][T11562] CIFS: Attempting to mount \\127.0.0.1\share
[  384.122085][T11562] CIFS: VFS: Error connecting to socket. Aborting operation.
[  384.147137][T11562] CIFS: VFS: cifs_mount failed w/return code = -4
[  384.770426][T11596] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2041'.
[  386.652013][T11648] netlink: 'syz.1.2055': attribute type 10 has an invalid length.
[  386.746271][T11648] team0: Failed to send port change of device netdevsim0 via netlink (err -105)
[  386.815024][T11648] team0: Failed to send options change via netlink (err -105)
[  386.876028][T11648] team0: Port device netdevsim0 added
[  386.920746][T11655] netlink: 'syz.2.2057': attribute type 4 has an invalid length.
[  387.168809][T11664] overlayfs: failed to clone upperpath
[  388.128505][T11708] loop2: detected capacity change from 0 to 1024
[  388.170057][T11708] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  388.245573][T11708] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  388.311479][T11708] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002]
[  388.319722][T11708] System zones: 0-1, 3-36
[  388.390368][T11708] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  389.253749][T10562] EXT4-fs (loop2): unmounting filesystem.
[  389.528779][T11745] 9pnet: p9_errstr2errno: server reported unknown error �@c0x0000000000000006
[  390.189376][T11773] overlayfs: failed to clone upperpath
[  391.734855][T11818] mroute: pending queue full, dropping entries
[  392.215258][T11825] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2097'.
[  392.434254][T11825] device bond5 entered promiscuous mode
[  392.704561][T11834] overlayfs: failed to clone upperpath
[  393.245439][ T4818] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  395.735729][T11901] netlink: 236 bytes leftover after parsing attributes in process `syz.9.2117'.
[  396.089749][T11913] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2118'.
[  398.749661][T11971] overlayfs: failed to clone upperpath
[  400.204395][T12003] overlayfs: failed to clone lowerpath
[  400.251060][T12003] overlayfs: failed to clone lowerpath
[  400.798367][T12025] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2149'.
[  400.906154][T12025] 8021q: adding VLAN 0 to HW filter on device bond8
[  400.962863][T12031] device macvlan2 entered promiscuous mode
[  401.047405][T12031] bond8: (slave macvlan2): Error -22 calling dev_set_mtu
[  402.439551][T12079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2160'.
[  403.441693][T12105] overlayfs: failed to clone lowerpath
[  404.466609][T12075] syz.3.2158 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0
[  404.576335][T12075] CPU: 1 PID: 12075 Comm: syz.3.2158 Not tainted syzkaller #0
[  404.583880][T12075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  404.594008][T12075] Call Trace:
[  404.597323][T12075]  <TASK>
[  404.600300][T12075]  dump_stack_lvl+0x188/0x24e
[  404.605036][T12075]  ? ___ratelimit+0x14e/0x610
[  404.609778][T12075]  ? show_regs_print_info+0x12/0x12
[  404.615028][T12075]  ? load_image+0x410/0x410
[  404.619570][T12075]  ? ___ratelimit+0x474/0x610
[  404.624268][T12075]  ? radix_tree_cpu_dead+0x160/0x160
[  404.629590][T12075]  dump_header+0xd8/0x820
[  404.633982][T12075]  oom_kill_process+0x361/0x550
[  404.638873][T12075]  out_of_memory+0xe25/0x1220
[  404.643609][T12075]  ? mutex_lock_nested+0x10/0x10
[  404.648574][T12075]  ? unregister_oom_notifier+0x20/0x20
[  404.654085][T12075]  mem_cgroup_out_of_memory+0x2c0/0x390
[  404.659664][T12075]  ? mem_cgroup_oom_trylock+0x210/0x210
[  404.665253][T12075]  ? do_raw_spin_unlock+0x11d/0x230
[  404.670485][T12075]  try_charge_memcg+0xc9d/0x17c0
[  404.675482][T12075]  ? percpu_ref_put+0x180/0x180
[  404.680382][T12075]  ? get_mem_cgroup_from_mm+0x34/0x290
[  404.685878][T12075]  charge_memcg+0x117/0x3b0
[  404.690419][T12075]  ? __mem_cgroup_charge+0x80/0x80
[  404.695563][T12075]  ? get_mem_cgroup_from_mm+0x34/0x290
[  404.701046][T12075]  ? get_mem_cgroup_from_mm+0x34/0x290
[  404.706541][T12075]  ? get_mem_cgroup_from_mm+0x1ae/0x290
[  404.712143][T12075]  __mem_cgroup_charge+0x21/0x80
[  404.717112][T12075]  handle_mm_fault+0x207c/0x3d40
[  404.722088][T12075]  ? numa_migrate_prep+0x250/0x250
[  404.727238][T12075]  __get_user_pages+0x40d/0xec0
[  404.732128][T12075]  ? populate_vma_page_range+0x2b0/0x2b0
[  404.737809][T12075]  populate_vma_page_range+0x214/0x2b0
[  404.743300][T12075]  __mm_populate+0x25c/0x380
[  404.748026][T12075]  ? check_vma_flags+0x4c0/0x4c0
[  404.753016][T12075]  ? up_write+0x1b6/0x410
[  404.757412][T12075]  vm_mmap_pgoff+0x212/0x2d0
[  404.762055][T12075]  ? account_locked_vm+0xe0/0xe0
[  404.767035][T12075]  ? ksys_mmap_pgoff+0xef/0x720
[  404.771917][T12075]  ? lockdep_hardirqs_on+0x94/0x140
[  404.777171][T12075]  do_syscall_64+0x4c/0xa0
[  404.781618][T12075]  ? clear_bhb_loop+0x60/0xb0
[  404.786329][T12075]  ? clear_bhb_loop+0x60/0xb0
[  404.791038][T12075]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  404.796969][T12075] RIP: 0033:0x7ff0e479e159
[  404.801415][T12075] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  404.821056][T12075] RSP: 002b:00007ff0e56f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  404.829517][T12075] RAX: ffffffffffffffda RBX: 00007ff0e4a25fa0 RCX: 00007ff0e479e159
[  404.837529][T12075] RDX: 000000000000000f RSI: 0000000000b36000 RDI: 0000200000000000
[  404.845532][T12075] RBP: 00007ff0e483506b R08: ffffffffffffffff R09: 0000000000000000
[  404.853530][T12075] R10: 0000000004008032 R11: 0000000000000246 R12: 0000000000000000
[  404.861529][T12075] R13: 00007ff0e4a26038 R14: 00007ff0e4a25fa0 R15: 00007ffd86d4e148
[  404.869541][T12075]  </TASK>
[  404.884695][T12075] memory: usage 307200kB, limit 307200kB, failcnt 19688
[  404.924961][T12075] memory+swap: usage 432196kB, limit 9007199254740988kB, failcnt 0
[  404.985211][T12075] kmem: usage 39964kB, limit 9007199254740988kB, failcnt 0
[  405.030029][T12075] Memory cgroup stats for /syz3:
[  405.031049][T12075] anon 8323072
[  405.031049][T12075] file 265326592
[  405.031049][T12075] kernel 40923136
[  405.031049][T12075] kernel_stack 196608
[  405.031049][T12075] pagetables 827392
[  405.031049][T12075] sec_pagetables 0
[  405.031049][T12075] percpu 34768
[  405.031049][T12075] sock 0
[  405.031049][T12075] vmalloc 35663872
[  405.031049][T12075] shmem 265289728
[  405.031049][T12075] zswap 0
[  405.031049][T12075] zswapped 0
[  405.031049][T12075] file_mapped 161923072
[  405.031049][T12075] file_dirty 36864
[  405.031049][T12075] file_writeback 0
[  405.031049][T12075] swapcached 140152832
[  405.031049][T12075] anon_thp 0
[  405.031049][T12075] file_thp 0
[  405.031049][T12075] shmem_thp 0
[  405.031049][T12075] inactive_anon 71077888
[  405.031049][T12075] active_anon 202534912
[  405.031049][T12075] inactive_file 0
[  405.031049][T12075] active_file 36864
[  405.031049][T12075] unevictable 0
[  405.031049][T12075] slab_reclaimable 1164600
[  405.311770][T12136] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2175'.
[  405.392585][T12136] bridge0: port 2(bridge_slave_1) entered disabled state
[  405.595863][T12075] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1918,pid=11133,uid=0
[  405.634641][T12075] Memory cgroup out of memory: Killed process 11133 (syz.3.1918) total-vm:202600kB, anon-rss:1548kB, file-rss:20608kB, shmem-rss:84608kB, UID:0 pgtables:268kB oom_score_adj:0
[  405.640687][T12136] device bridge_slave_1 left promiscuous mode
[  405.682983][T12136] bridge0: port 2(bridge_slave_1) entered disabled state
[  406.218358][T12162] raw_sendmsg: syz.9.2181 forgot to set AF_INET. Fix it!
[  407.816284][   T29] oom_reaper: reaped process 11133 (syz.3.1918), now anon-rss:0kB, file-rss:20480kB, shmem-rss:19856kB
[  407.872226][T11135] syz.3.1918 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0
[  408.098244][T11135] CPU: 0 PID: 11135 Comm: syz.3.1918 Not tainted syzkaller #0
[  408.105796][T11135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  408.115898][T11135] Call Trace:
[  408.119216][T11135]  <TASK>
[  408.122181][T11135]  dump_stack_lvl+0x188/0x24e
[  408.126908][T11135]  ? ___ratelimit+0x14e/0x610
[  408.131643][T11135]  ? show_regs_print_info+0x12/0x12
[  408.136887][T11135]  ? load_image+0x410/0x410
[  408.141439][T11135]  ? ___ratelimit+0x474/0x610
[  408.146174][T11135]  ? radix_tree_cpu_dead+0x160/0x160
[  408.151519][T11135]  dump_header+0xd8/0x820
[  408.155907][T11135]  oom_kill_process+0x361/0x550
[  408.160805][T11135]  out_of_memory+0xe25/0x1220
[  408.165534][T11135]  ? mutex_lock_nested+0x10/0x10
[  408.170525][T11135]  ? unregister_oom_notifier+0x20/0x20
[  408.176044][T11135]  mem_cgroup_out_of_memory+0x2c0/0x390
[  408.181653][T11135]  ? mem_cgroup_oom_trylock+0x210/0x210
[  408.187263][T11135]  ? do_raw_spin_unlock+0x11d/0x230
[  408.192520][T11135]  try_charge_memcg+0xc9d/0x17c0
[  408.197538][T11135]  ? percpu_ref_put+0x180/0x180
[  408.202467][T11135]  ? get_mem_cgroup_from_mm+0x34/0x290
[  408.207983][T11135]  charge_memcg+0x117/0x3b0
[  408.212541][T11135]  ? __mem_cgroup_charge+0x80/0x80
[  408.217708][T11135]  ? get_mem_cgroup_from_mm+0x34/0x290
[  408.223219][T11135]  ? get_mem_cgroup_from_mm+0x34/0x290
[  408.228734][T11135]  ? get_mem_cgroup_from_mm+0x1ae/0x290
[  408.234335][T11135]  __mem_cgroup_charge+0x21/0x80
[  408.239330][T11135]  shmem_add_to_page_cache+0x8d7/0x1c90
[  408.244933][T11135]  ? __filemap_get_folio+0x10f/0xde0
[  408.250284][T11135]  ? __filemap_get_folio+0x10f/0xde0
[  408.255634][T11135]  ? put_page+0x270/0x270
[  408.260030][T11135]  ? mark_lock+0x94/0x320
[  408.264523][T11135]  shmem_get_folio_gfp+0x1663/0x35e0
[  408.269904][T11135]  shmem_write_begin+0xee/0x3f0
[  408.274824][T11135]  generic_perform_write+0x2fa/0x5c0
[  408.280195][T11135]  ? generic_file_direct_write+0x330/0x330
[  408.286061][T11135]  ? __file_remove_privs+0x5f0/0x5f0
[  408.291406][T11135]  ? rwsem_write_trylock+0x135/0x1c0
[  408.296758][T11135]  ? clear_nonspinnable+0x60/0x60
[  408.301832][T11135]  ? generic_write_checks_count+0x363/0x440
[  408.307788][T11135]  __generic_file_write_iter+0x148/0x2a0
[  408.313487][T11135]  generic_file_write_iter+0xab/0x2e0
[  408.318917][T11135]  __kernel_write_iter+0x298/0x690
[  408.324094][T11135]  ? vfs_read+0x960/0x960
[  408.328489][T11135]  ? dump_user_range+0x5dd/0x840
[  408.333490][T11135]  ? iov_iter_bvec+0x4a/0x1f0
[  408.338224][T11135]  dump_user_range+0x40a/0x840
[  408.343072][T11135]  ? dump_skip+0x40/0x40
[  408.347385][T11135]  ? dump_emit+0x74/0xe0
[  408.351699][T11135]  ? dump_emit+0xa2/0xe0
[  408.355997][T11135]  ? elf_core_dump+0x2aa9/0x3630
[  408.360984][T11135]  elf_core_dump+0x30ca/0x3630
[  408.365827][T11135]  ? load_elf_binary+0x2820/0x2820
[  408.370995][T11135]  ? dump_vma_snapshot+0xaea/0xe40
[  408.376182][T11135]  ? verify_lock_unused+0x140/0x140
[  408.381440][T11135]  ? __lock_acquire+0x7c40/0x7c40
[  408.386522][T11135]  ? mas_next_entry+0xe03/0xe90
[  408.391472][T11135]  ? rcu_read_lock_any_held+0xb0/0x130
[  408.396981][T11135]  ? 0xffffffffff600000
[  408.401181][T11135]  ? getname_kernel+0x142/0x2f0
[  408.406083][T11135]  do_coredump+0x16c1/0x2480
[  408.410761][T11135]  ? nfs_stat_to_errno+0x170/0x170
[  408.415950][T11135]  ? lock_chain_count+0x20/0x20
[  408.420852][T11135]  ? _raw_spin_unlock_irq+0x1f/0x40
[  408.426107][T11135]  ? lockdep_hardirqs_on+0x94/0x140
[  408.431544][T11135]  get_signal+0x1093/0x1340
[  408.436147][T11135]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  408.442222][T11135]  arch_do_signal_or_restart+0xc4/0x1310
[  408.447926][T11135]  ? get_sigframe_size+0x10/0x10
[  408.452922][T11135]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  408.458974][T11135]  ? exit_to_user_mode_loop+0x3b/0x110
[  408.464502][T11135]  exit_to_user_mode_loop+0x70/0x110
[  408.469852][T11135]  exit_to_user_mode_prepare+0xee/0x180
[  408.475494][T11135]  irqentry_exit_to_user_mode+0x5/0x30
[  408.481023][T11135]  exc_page_fault+0x88/0x100
[  408.485668][T11135]  asm_exc_page_fault+0x22/0x30
[  408.490566][T11135] RIP: 0033:0x7ff0e4653bd7
[  408.495029][T11135] Code: e8 fe f9 ff ff 89 f2 48 8d 3d 8d 4f 1b 00 48 8d 35 0a 0b 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8
[  408.514685][T11135] RSP: 002b:00007ff0e56b1120 EFLAGS: 00010202
[  408.520813][T11135] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007ff0e479e159
[  408.528830][T11135] RDX: 00007ff0e56b1140 RSI: 00007ff0e56b1270 RDI: 000000000000000b
[  408.536849][T11135] RBP: 00007ff0e483506b R08: 0000000000000000 R09: 0000000000000000
[  408.544862][T11135] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  408.552861][T11135] R13: 00007ff0e4a26128 R14: 00007ff0e4a26090 R15: 00007ffd86d4e148
[  408.560910][T11135]  </TASK>
[  408.668216][T11135] memory: usage 307200kB, limit 307200kB, failcnt 20024
[  408.713600][T11135] memory+swap: usage 432196kB, limit 9007199254740988kB, failcnt 0
[  408.755757][T11135] kmem: usage 40080kB, limit 9007199254740988kB, failcnt 0
[  408.822122][T11135] Memory cgroup stats for /syz3:
[  408.822616][T11135] anon 888832
[  408.822616][T11135] file 272642048
[  408.822616][T11135] kernel 41033728
[  408.822616][T11135] kernel_stack 262144
[  408.822616][T11135] pagetables 565248
[  408.822616][T11135] sec_pagetables 0
[  408.822616][T11135] percpu 34768
[  408.822616][T11135] sock 0
[  408.822616][T11135] vmalloc 35663872
[  408.822616][T11135] shmem 272605184
[  408.822616][T11135] zswap 0
[  408.822616][T11135] zswapped 0
[  408.822616][T11135] file_mapped 77729792
[  408.822616][T11135] file_dirty 36864
[  408.822616][T11135] file_writeback 0
[  408.822616][T11135] swapcached 140152832
[  408.822616][T11135] anon_thp 0
[  408.822616][T11135] file_thp 0
[  408.822616][T11135] shmem_thp 0
[  408.822616][T11135] inactive_anon 71909376
[  408.822616][T11135] active_anon 201584640
[  408.822616][T11135] inactive_file 0
[  408.822616][T11135] active_file 36864
[  408.822616][T11135] unevictable 0
[  408.822616][T11135] slab_reclaimable 1190200
[  408.822616][T11135] slab_unreclaimable 2961096
[  409.129849][T12223] loop2: detected capacity change from 0 to 2048
[  409.178404][T12223] UDF-fs: bad mount option "0xffffffffffffffff" or missing value
[  409.235529][T12224] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2198'.
[  409.401574][T11135] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1918,pid=11135,uid=0
[  409.574926][T11135] Memory cgroup out of memory: Killed process 11135 (syz.3.1918) total-vm:202732kB, anon-rss:1556kB, file-rss:20608kB, shmem-rss:75632kB, UID:0 pgtables:252kB oom_score_adj:0
[  410.293180][T12252] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.2206'.
[  411.815850][   T29] oom_reaper: reaped process 11135 (syz.3.1918), now anon-rss:0kB, file-rss:9092kB, shmem-rss:0kB
[  413.614817][T12338] netlink: 'syz.2.2232': attribute type 11 has an invalid length.
[  415.925643][T12412] FAULT_INJECTION: forcing a failure.
[  415.925643][T12412] name failslab, interval 1, probability 0, space 0, times 0
[  415.969042][T12412] CPU: 1 PID: 12412 Comm: syz.2.2251 Not tainted syzkaller #0
[  415.976578][T12412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  415.986683][T12412] Call Trace:
[  415.990006][T12412]  <TASK>
[  415.992980][T12412]  dump_stack_lvl+0x188/0x24e
[  415.997741][T12412]  ? show_regs_print_info+0x12/0x12
[  416.003002][T12412]  ? load_image+0x410/0x410
[  416.007570][T12412]  ? __might_sleep+0xd0/0xd0
[  416.012226][T12412]  ? __lock_acquire+0x7c40/0x7c40
[  416.017314][T12412]  ? memset+0x1e/0x40
[  416.021343][T12412]  should_fail_ex+0x390/0x4c0
[  416.026082][T12412]  should_failslab+0x5/0x20
[  416.030628][T12412]  slab_pre_alloc_hook+0x59/0x300
[  416.035704][T12412]  kmem_cache_alloc+0x56/0x2f0
[  416.040512][T12412]  ? posix_lock_inode+0x365/0x32f0
[  416.045675][T12412]  posix_lock_inode+0x365/0x32f0
[  416.050640][T12412]  ? aa_path_link+0x8a0/0x8a0
[  416.055361][T12412]  ? lockdep_softirqs_off+0x430/0x430
[  416.060763][T12412]  ? __kasan_slab_alloc+0x6b/0x80
[  416.065818][T12412]  ? slab_pre_alloc_hook+0x59/0x300
[  416.071048][T12412]  ? posix_lock_file+0x50/0x50
[  416.075951][T12412]  ? bpf_lsm_file_lock+0x5/0x10
[  416.080847][T12412]  fcntl_setlk+0xaa7/0x10e0
[  416.085392][T12412]  ? vfs_lock_file+0xd0/0xd0
[  416.090016][T12412]  ? __might_fault+0xa6/0x120
[  416.094727][T12412]  ? __might_fault+0xc2/0x120
[  416.099433][T12412]  ? __might_fault+0xa6/0x120
[  416.104157][T12412]  do_fcntl+0x543/0x1280
[  416.108436][T12412]  ? __ia32_sys_get_robust_list+0x100/0x100
[  416.114354][T12412]  ? kill_fasync+0x4b0/0x4b0
[  416.118982][T12412]  ? __fget_files+0x28/0x460
[  416.123619][T12412]  ? __fget_files+0x3fc/0x460
[  416.128339][T12412]  ? tomoyo_file_fcntl+0x74/0x210
[  416.133403][T12412]  ? bpf_lsm_file_fcntl+0x5/0x10
[  416.138463][T12412]  ? security_file_fcntl+0x7c/0xa0
[  416.143608][T12412]  __se_sys_fcntl+0xc9/0x190
[  416.148237][T12412]  do_syscall_64+0x4c/0xa0
[  416.152697][T12412]  ? clear_bhb_loop+0x60/0xb0
[  416.157398][T12412]  ? clear_bhb_loop+0x60/0xb0
[  416.162102][T12412]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  416.168050][T12412] RIP: 0033:0x7f8fddb9e159
[  416.172486][T12412] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  416.192139][T12412] RSP: 002b:00007f8fdeb39028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048
[  416.200583][T12412] RAX: ffffffffffffffda RBX: 00007f8fdde25fa0 RCX: 00007f8fddb9e159
[  416.208588][T12412] RDX: 00002000000000c0 RSI: 0000000000000026 RDI: 0000000000000004
[  416.216584][T12412] RBP: 00007f8fddc3506b R08: 0000000000000000 R09: 0000000000000000
[  416.224579][T12412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  416.232574][T12412] R13: 00007f8fdde26038 R14: 00007f8fdde25fa0 R15: 00007ffea9440938
[  416.240581][T12412]  </TASK>
[  416.948733][T12435] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2258'.
[  419.207529][T12484] 9pnet_fd: p9_fd_create_tcp (12484): problem binding to privport
[  419.624576][T12461] loop2: detected capacity change from 0 to 65536
[  419.715239][T12461] XFS (loop2): Mounting V5 Filesystem
[  419.798880][T12461] XFS (loop2): Ending clean mount
[  419.868652][T12461] XFS (loop2): Quotacheck needed: Please wait.
[  419.921372][T12508] device ip6gre1 entered promiscuous mode
[  419.968936][T12508] bond3: (slave ip6gre1): The slave device specified does not support setting the MAC address
[  420.009423][T12508] bond3: (slave ip6gre1): Error -95 calling set_mac_address
[  420.057168][T12461] XFS (loop2): Quotacheck: Done.
[  420.397342][T10562] XFS (loop2): Unmounting Filesystem
[  422.602107][T11133] syz.3.1918 (11133) used greatest stack depth: 17712 bytes left
[  423.053063][T12602] device gretap0 entered promiscuous mode
[  423.083836][T12602] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2304'.
[  423.536586][T12611] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2307'.
[  424.072667][T12623] tipc: Started in network mode
[  424.089125][T12623] tipc: Node identity 1000001, cluster identity 4369
[  424.114369][T12623] tipc: Node number set to 16777217
[  424.147196][T12623] lo: MTU too low for tipc bearer
[  424.168883][T12623] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  425.263838][ T4818] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  426.913715][T12658] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  427.003469][T12658] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  427.628408][T12658] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  427.640887][T12658] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  427.670653][T12658] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  427.680121][T12658] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  427.825420][T12658] netdevsim netdevsim9 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  427.834486][T12658] netdevsim netdevsim9 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  427.843539][T12658] netdevsim netdevsim9 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  427.852550][T12658] netdevsim netdevsim9 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  427.965659][T12672] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2325'.
[  427.998903][T12675] device vcan0 entered promiscuous mode
[  428.225237][T12711] netlink: 'syz.1.2340': attribute type 11 has an invalid length.
[  428.541572][T12724] overlayfs: failed to clone upperpath
[  434.729027][T12935] netlink: 'syz.4.2405': attribute type 1 has an invalid length.
[  434.848135][T12935] 8021q: adding VLAN 0 to HW filter on device bond6
[  435.311988][T12954] netlink: 'syz.3.2411': attribute type 1 has an invalid length.
[  435.337103][T12954] netlink: 64363 bytes leftover after parsing attributes in process `syz.3.2411'.
[  435.506382][T12960] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2412'.
[  435.538217][T12960] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2412'.
[  435.625388][T12960] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2412'.
[  436.186797][T12983] CIFS: Attempting to mount \\127.0.0.1\share
[  436.286343][T12983] CIFS: VFS: Error connecting to socket. Aborting operation.
[  436.340625][T12983] CIFS: VFS: cifs_mount failed w/return code = -4
[  436.359402][   T26] kauditd_printk_skb: 167 callbacks suppressed
[  436.359425][   T26] audit: type=1326 audit(1789544104.310:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12987 comm="syz.3.2421" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0e479e159 code=0x7ffc0000
[  436.481699][   T26] audit: type=1326 audit(1789544104.310:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12987 comm="syz.3.2421" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0e479e159 code=0x7ffc0000
[  436.612528][   T26] audit: type=1326 audit(1789544104.360:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12987 comm="syz.3.2421" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0e479e159 code=0x7ffc0000
[  436.737061][   T26] audit: type=1326 audit(1789544104.360:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12987 comm="syz.3.2421" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0e479e159 code=0x7ffc0000
[  436.857020][   T26] audit: type=1326 audit(1789544104.360:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12987 comm="syz.3.2421" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff0e479e159 code=0x7ffc0000
[  436.943691][   T26] audit: type=1326 audit(1789544104.360:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12987 comm="syz.3.2421" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0e479e159 code=0x7ffc0000
[  437.054202][   T26] audit: type=1326 audit(1789544104.360:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12987 comm="syz.3.2421" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0e479e159 code=0x7ffc0000
[  437.142919][   T26] audit: type=1326 audit(1789544104.370:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12987 comm="syz.3.2421" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0e479e159 code=0x7ffc0000
[  437.219048][   T26] audit: type=1326 audit(1789544104.370:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12987 comm="syz.3.2421" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0e479e159 code=0x7ffc0000
[  437.289440][   T26] audit: type=1326 audit(1789544104.370:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12987 comm="syz.3.2421" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7ff0e479e159 code=0x7ffc0000
[  438.609356][T13061] overlayfs: failed to clone upperpath
[  438.628234][T13061] overlayfs: failed to clone upperpath
[  438.841579][T13067] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  439.990014][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  439.996428][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  441.213348][T13135] overlayfs: failed to clone upperpath
[  442.487209][T13186] netlink: 'syz.9.2477': attribute type 4 has an invalid length.
[  442.525203][T13186] netlink: 'syz.9.2477': attribute type 4 has an invalid length.
[  443.739274][ T4319] libceph: connect (1)[c::]:6789 error -101
[  443.746350][ T4319] libceph: mon0 (1)[c::]:6789 connect error
[  443.891673][T13228] ceph: No mds server is up or the cluster is laggy
[  444.376609][T13253] batman_adv: batadv0: Interface deactivated: gretap2
[  444.717849][T13262] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2493'.
[  446.065241][T13306] device vlan2 entered promiscuous mode
[  446.089752][T13306] device syz_tun entered promiscuous mode
[  446.146521][T13311] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  446.186178][T13311] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  446.213838][T13311] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  446.247297][T13311] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  446.277416][T13311] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  446.305428][T13311] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  446.331891][T13311] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  446.386649][T13311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  446.417027][T13311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  446.432832][T13311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  446.465185][T13311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  446.500960][T13311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  446.525874][T13311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  446.547339][T13311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  446.583968][T13311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  446.747295][T13316] device gretap3 entered promiscuous mode
[  448.007545][T13344] 8021q: adding VLAN 0 to HW filter on device bond0
[  448.023702][T13344] 8021q: adding VLAN 0 to HW filter on device team0
[  448.088777][T13344] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  449.339123][T13381] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  452.170654][T13471] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check.
[  453.991770][T13521] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2565'.
[  455.638343][T13548] netlink: 'syz.1.2573': attribute type 1 has an invalid length.
[  455.850242][T13549] 8021q: adding VLAN 0 to HW filter on device bond10
[  455.876383][T13549] bond9: (slave bond10): making interface the new active one
[  455.975950][T13549] bond9: (slave bond10): Enslaving as an active interface with an up link
[  458.259467][T13610] netlink: 'syz.2.2590': attribute type 2 has an invalid length.
[  458.287642][T13610] netlink: 11575 bytes leftover after parsing attributes in process `syz.2.2590'.
[  458.335816][T13610] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2590'.
[  459.292721][T13645] xt_hashlimit: max too large, truncated to 1048576
[  460.164141][T13670] x_tables: ip_tables: osf match: only valid for protocol 6
[  461.446252][T13705] relay: one or more items not logged [item size (56) > sub-buffer size (10)]
[  462.664439][   T26] kauditd_printk_skb: 39 callbacks suppressed
[  462.664453][   T26] audit: type=1326 audit(1789544130.597:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13742 comm="syz.2.2628" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fddb9e159 code=0x7fc00000
[  462.796835][   T26] audit: type=1326 audit(1789544130.636:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13742 comm="syz.2.2628" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f8fddb9e159 code=0x7fc00000
[  464.872620][T13794] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2641'.
[  465.136845][T13800] device ip6gretap1 entered promiscuous mode
[  465.194338][T13800] bond11: (slave ip6gretap1): no link monitoring support
[  465.261317][T13800] bond11: (slave ip6gretap1): MII and ETHTOOL support not available for slave, and arp_interval/arp_ip_target module parameters not specified, thus bonding will not detect link failures! see bonding.txt for details
[  465.339142][T13800] bond11: (slave ip6gretap1): Enslaving as an active interface with an up link
[  465.376475][T13794] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2641'.
[  467.450573][T13883] netlink: 'syz.3.2666': attribute type 1 has an invalid length.
[  467.623080][T13883] device bond12 entered promiscuous mode
[  467.629039][T13883] 8021q: adding VLAN 0 to HW filter on device bond12
[  467.881137][T13887] 8021q: adding VLAN 0 to HW filter on device bond13
[  467.890407][T13887] bond12: (slave bond13): making interface the new active one
[  467.990775][T13887] device bond13 entered promiscuous mode
[  467.997303][T13887] bond12: (slave bond13): Enslaving as an active interface with an up link
[  468.044951][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): bond12: link becomes ready
[  471.873181][T13953] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  471.891444][T13953] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  471.918363][T13953] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  471.942114][T13953] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  472.000510][T13953] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[  472.022700][T13953] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[  472.040185][T13953] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[  472.069801][T13953] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[  472.813086][ T4289] Bluetooth: hci2: command 0x0406 tx timeout
[  473.066737][T14035] netlink: 'syz.4.2697': attribute type 1 has an invalid length.
[  473.186902][T14035] 8021q: adding VLAN 0 to HW filter on device bond7
[  473.338074][T14037] team0 (unregistering): Port device team_slave_0 removed
[  473.357099][T14037] team0 (unregistering): Port device team_slave_1 removed
[  473.429094][T14041] bond7: (slave veth13): Enslaving as an active interface with a down link
[  473.473464][T14043] device dummy0 left promiscuous mode
[  473.565162][T14043] bond7: (slave dummy0): making interface the new active one
[  473.615421][T14043] device dummy0 entered promiscuous mode
[  473.647745][T14043] bond7: (slave dummy0): Enslaving as an active interface with an up link
[  473.726131][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): bond7: link becomes ready
[  474.314023][T14055] ceph: No mds server is up or the cluster is laggy
[  474.483290][T14087] overlayfs: failed to clone lowerpath
[  474.532883][T14097] overlayfs: failed to clone lowerpath
[  474.871334][T14102] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2713'.
[  474.918183][ T4289] Bluetooth: Frame is too long (len 20, expected len 4)
[  475.007278][T14109] tipc: Failed to remove unknown binding: 66,1,1/2886997162:2717171284/2717171286
[  475.035545][T14109] tipc: Failed to remove unknown binding: 66,1,1/2886997162:2717171284/2717171286
[  475.051815][T14109] tipc: Failed to remove unknown binding: 66,1,1/2886997162:2717171284/2717171286
[  475.135119][T14111] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2713'.
[  475.716965][T14106] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2713'.
[  477.353074][T14159] netlink: 'syz.2.2734': attribute type 1 has an invalid length.
[  477.411352][T14159] device bond1 entered promiscuous mode
[  477.418651][T14159] 8021q: adding VLAN 0 to HW filter on device bond1
[  477.665775][T14161] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  477.712107][T14159] 8021q: adding VLAN 0 to HW filter on device bond2
[  477.776778][T14159] bond1: (slave bond2): making interface the new active one
[  477.825225][T14159] device bond2 entered promiscuous mode
[  477.855363][T14159] bond1: (slave bond2): Enslaving as an active interface with an up link
[  477.923741][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  479.069709][T14192] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  479.090642][T14192] batman_adv: batadv0: Removing interface: batadv_slave_0
[  479.117322][T14192] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  479.152094][T14192] batman_adv: batadv0: Removing interface: batadv_slave_1
[  481.737969][T14267] netlink: 11575 bytes leftover after parsing attributes in process `syz.2.2764'.
[  482.169297][T14291] (unnamed net_device) (uninitialized): up delay (9) is not a multiple of miimon (5), value rounded to 5 ms
[  482.230387][T14294] tipc: Failed to remove unknown binding: 66,0,0/16777217:3922383939/3922383940
[  482.278709][T14294] tipc: Failed to remove unknown binding: 66,0,0/16777217:3922383939/3922383940
[  482.292551][T14296] device bridge0 entered promiscuous mode
[  482.435662][T14296] bond8: (slave bridge0): Enslaving as an active interface with an up link
[  482.577350][T14302] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2773'.
[  483.059527][T14320] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2780'.
[  483.887347][T14353] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2786'.
[  485.589831][ T4289] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11
[  486.173681][   T47] device dummy0 left promiscuous mode
[  488.623319][T14471] netlink: 1319 bytes leftover after parsing attributes in process `syz.3.2818'.
[  488.790558][   T26] audit: type=1326 audit(1789544156.703:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14473 comm="syz.4.2820" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fe0d9e159 code=0x7fc00000
[  488.885888][   T26] audit: type=1326 audit(1789544156.733:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14473 comm="syz.4.2820" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f8fe0d9e159 code=0x7fc00000
[  492.044273][T14577] overlayfs: failed to clone upperpath
[  493.539425][T14618] overlayfs: failed to clone upperpath
[  493.589761][T14618] overlayfs: failed to clone upperpath
[  495.665803][T14670] netlink: 'syz.1.2892': attribute type 1 has an invalid length.
[  495.720042][T14670] 8021q: adding VLAN 0 to HW filter on device bond11
[  495.742033][T14672] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2893'.
[  495.784547][T14674] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  495.833733][T14674] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  495.881383][T14674] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  495.915949][T14674] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  495.954144][T14674] bond11: (slave geneve4): making interface the new active one
[  495.975560][T14674] bond11: (slave geneve4): Enslaving as an active interface with an up link
[  495.986203][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): bond11: link becomes ready
[  496.021174][T14675] bridge2: port 1(veth15) entered blocking state
[  496.036950][T14675] bridge2: port 1(veth15) entered disabled state
[  496.052856][T14675] device veth15 entered promiscuous mode
[  496.201848][T14685] overlayfs: failed to clone upperpath
[  497.874452][T14715] overlayfs: failed to clone upperpath
[  497.907965][T14715] overlayfs: failed to clone upperpath
[  497.952684][T14720] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2909'.
[  498.389427][T14737] io-wq is not configured for unbound workers
[  498.709157][T14752] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2922'.
[  498.842853][T14752] batman_adv: batadv0: Removing interface: batadv_slave_1
[  499.729713][T14773] xt_hashlimit: size too large, truncated to 1048576
[  500.256479][T14786] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2935'.
[  501.040679][T14809] syz.1.2942: attempt to access beyond end of device
[  501.040679][T14809] loop2: rw=4096, sector=2, nr_sectors = 2 limit=0
[  501.072582][T14809] EXT4-fs (loop2): unable to read superblock
[  501.461595][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  501.468160][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  502.042519][T14826] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2948'.
[  506.190974][T14826] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  506.199412][T14826] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  506.208171][T14826] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  506.216641][T14826] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  506.471731][T14826] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  506.490249][T14826] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  506.507886][T14826] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  506.522575][T14826] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  507.075542][T14869] netlink: 'syz.2.2961': attribute type 1 has an invalid length.
[  507.199909][T14877] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2964'.
[  507.217921][T14877] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2964'.
[  507.264773][T14877] device erspan0 entered promiscuous mode
[  507.286436][T14877] device gretap0 entered promiscuous mode
[  507.314557][T14877] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network
[  507.326801][T14887] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2967'.
[  507.359048][T14877] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network
[  507.378358][T14878] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2964'.
[  507.401184][T14878] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2964'.
[  508.425147][ T4289] Bluetooth: hci2: unexpected cc 0x0c2d length: 65 > 4
[  509.658315][T14953] netlink: 'syz.2.2989': attribute type 2 has an invalid length.
[  511.209106][   T26] audit: type=1326 audit(1789544179.122:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14983 comm="syz.4.3000" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fe0d9e159 code=0x7ffc0000
[  511.312346][   T26] audit: type=1326 audit(1789544179.152:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14983 comm="syz.4.3000" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fe0d9e159 code=0x7ffc0000
[  511.407851][   T26] audit: type=1326 audit(1789544179.152:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14983 comm="syz.4.3000" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fe0d9e159 code=0x7ffc0000
[  511.469275][   T26] audit: type=1326 audit(1789544179.152:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14983 comm="syz.4.3000" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fe0d9e159 code=0x7ffc0000
[  511.542454][   T26] audit: type=1326 audit(1789544179.152:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14983 comm="syz.4.3000" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f8fe0d9e159 code=0x7ffc0000
[  511.602208][   T26] audit: type=1326 audit(1789544179.152:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14983 comm="syz.4.3000" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fe0d9e159 code=0x7ffc0000
[  511.682638][   T26] audit: type=1326 audit(1789544179.152:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14983 comm="syz.4.3000" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fe0d9e159 code=0x7ffc0000
[  511.824474][   T26] audit: type=1326 audit(1789544179.152:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14983 comm="syz.4.3000" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fe0d9e159 code=0x7ffc0000
[  511.849038][T15005] netlink: 'syz.3.3007': attribute type 4 has an invalid length.
[  511.877335][T15005] netlink: 'syz.3.3007': attribute type 17 has an invalid length.
[  511.912693][   T26] audit: type=1326 audit(1789544179.152:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14983 comm="syz.4.3000" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fe0d9e159 code=0x7ffc0000
[  511.964390][T15005] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  512.009289][   T26] audit: type=1326 audit(1789544179.152:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14983 comm="syz.4.3000" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f8fe0d9e159 code=0x7ffc0000
[  513.509779][T15059] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3023'.
[  516.364028][T15121] device wlan0 entered promiscuous mode
[  516.394157][T15125] device geneve0 entered promiscuous mode
[  516.792969][T15143] netlink: 'syz.9.3053': attribute type 4 has an invalid length.
[  516.831378][T15146] netlink: 'syz.1.3054': attribute type 1 has an invalid length.
[  516.947823][T15146] 8021q: adding VLAN 0 to HW filter on device bond12
[  517.067533][T15148] bond12: (slave veth9): Enslaving as an active interface with a down link
[  517.100368][T15151] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3055'.
[  517.114238][T15151] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3055'.
[  517.160471][T15147] netlink: 'syz.9.3053': attribute type 17 has an invalid length.
[  517.190464][T15147] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  517.204411][T15153] bond12: (slave dummy0): making interface the new active one
[  517.221872][T15153] bond12: (slave dummy0): Enslaving as an active interface with an up link
[  517.264410][ T4812] IPv6: ADDRCONF(NETDEV_CHANGE): bond12: link becomes ready
[  517.305277][T15146] netlink: 'syz.1.3054': attribute type 10 has an invalid length.
[  517.343619][T15146] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3054'.
[  517.394400][T15146] device dummy0 entered promiscuous mode
[  517.421565][T15146] bond12: (slave dummy0): Releasing active interface
[  518.144918][ T3934] netdevsim netdevsim6 eth5: set [1, 0] type 2 family 0 port 6081 - 0
[  518.164560][ T3934] netdevsim netdevsim6 eth6: set [1, 0] type 2 family 0 port 6081 - 0
[  518.199198][ T3934] netdevsim netdevsim6 eth7: set [1, 0] type 2 family 0 port 6081 - 0
[  518.212572][ T3934] netdevsim netdevsim6 eth8: set [1, 0] type 2 family 0 port 6081 - 0
[  518.224483][ T3934] netdevsim netdevsim5 eth9: set [1, 0] type 2 family 0 port 6081 - 0
[  518.238422][ T3934] netdevsim netdevsim5 eth10: set [1, 0] type 2 family 0 port 6081 - 0
[  518.248074][ T3934] netdevsim netdevsim5 eth11: set [1, 0] type 2 family 0 port 6081 - 0
[  518.260227][ T3934] netdevsim netdevsim5 eth12: set [1, 0] type 2 family 0 port 6081 - 0
[  518.290007][ T3934] netdevsim netdevsim8 eth13: set [1, 0] type 2 family 0 port 6081 - 0
[  518.316072][ T3934] netdevsim netdevsim8 eth14: set [1, 0] type 2 family 0 port 6081 - 0
[  518.342814][ T3934] netdevsim netdevsim8 eth15: set [1, 0] type 2 family 0 port 6081 - 0
[  518.402819][ T3934] netdevsim netdevsim8 eth16: set [1, 0] type 2 family 0 port 6081 - 0
[  518.437146][ T3934] netdevsim netdevsim7 eth17: set [1, 0] type 2 family 0 port 6081 - 0
[  518.463812][ T3934] netdevsim netdevsim7 eth18: set [1, 0] type 2 family 0 port 6081 - 0
[  518.487787][ T3934] netdevsim netdevsim7 eth19: set [1, 0] type 2 family 0 port 6081 - 0
[  518.512224][ T3934] netdevsim netdevsim7 eth20: set [1, 0] type 2 family 0 port 6081 - 0
[  518.531753][ T3934] netdevsim netdevsim0 eth21: set [1, 0] type 2 family 0 port 6081 - 0
[  518.545741][ T3934] netdevsim netdevsim0 eth22: set [1, 0] type 2 family 0 port 6081 - 0
[  518.565510][ T3934] netdevsim netdevsim0 eth23: set [1, 0] type 2 family 0 port 6081 - 0
[  518.574408][ T3934] netdevsim netdevsim0 eth24: set [1, 0] type 2 family 0 port 6081 - 0
[  519.060470][T15213] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3067'.
[  519.623803][   T26] kauditd_printk_skb: 30 callbacks suppressed
[  519.623819][   T26] audit: type=1326 audit(1789544187.528:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15225 comm="syz.3.3072" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0e479e159 code=0x7ffc0000
[  519.704255][   T26] audit: type=1326 audit(1789544187.538:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15225 comm="syz.3.3072" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0e479e159 code=0x7ffc0000
[  519.814387][   T26] audit: type=1326 audit(1789544187.538:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15225 comm="syz.3.3072" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0e479e159 code=0x7ffc0000
[  519.938410][   T26] audit: type=1326 audit(1789544187.538:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15225 comm="syz.3.3072" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7ff0e479e159 code=0x7ffc0000
[  520.223050][   T26] audit: type=1326 audit(1789544187.538:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15225 comm="syz.3.3072" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0e479e159 code=0x7ffc0000
[  520.341962][   T26] audit: type=1326 audit(1789544187.538:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15225 comm="syz.3.3072" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0e479e159 code=0x7ffc0000
[  520.431015][   T26] audit: type=1326 audit(1789544187.538:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15225 comm="syz.3.3072" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0e479e159 code=0x7ffc0000
[  520.521927][   T26] audit: type=1326 audit(1789544187.538:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15225 comm="syz.3.3072" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0e479e159 code=0x7ffc0000
[  520.607008][   T26] audit: type=1326 audit(1789544187.538:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15225 comm="syz.3.3072" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7ff0e479e159 code=0x7ffc0000
[  520.675364][   T26] audit: type=1326 audit(1789544187.538:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15225 comm="syz.3.3072" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0e479e159 code=0x7ffc0000
[  522.073660][T15282] netlink: 'syz.3.3087': attribute type 1 has an invalid length.
[  522.109824][T15282] 8021q: adding VLAN 0 to HW filter on device bond14
[  522.193012][T15282] bond14: (slave veth15): Enslaving as an active interface with a down link
[  522.211767][T15286] lo speed is unknown, defaulting to 1000
[  522.242005][T15286] lo speed is unknown, defaulting to 1000
[  522.247325][T15282] device dummy0 left promiscuous mode
[  522.256063][T15282] bond14: (slave dummy0): making interface the new active one
[  522.273277][T15282] bond14: (slave dummy0): Enslaving as an active interface with an up link
[  522.292939][T15286] lo speed is unknown, defaulting to 1000
[  522.300404][T14995] IPv6: ADDRCONF(NETDEV_CHANGE): bond14: link becomes ready
[  522.321021][T15289] netlink: 'syz.3.3087': attribute type 10 has an invalid length.
[  522.338235][T15289] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3087'.
[  522.361243][T15289] device dummy0 entered promiscuous mode
[  522.408179][T15289] bond14: (slave dummy0): Releasing active interface
[  522.678163][ T4322] lo speed is unknown, defaulting to 1000
[  522.705591][T15286] infiniband syz0: set active
[  522.718167][T15286] infiniband syz0: added lo
[  522.848917][T15308] netlink: 'syz.4.3094': attribute type 1 has an invalid length.
[  522.883785][T15286] RDS/IB: syz0: added
[  522.899463][T15286] smc: adding ib device syz0 with port count 1
[  522.924627][T15286] smc:    ib device syz0 port 1 has pnetid 
[  522.972851][ T4320] lo speed is unknown, defaulting to 1000
[  522.997655][T15286] lo speed is unknown, defaulting to 1000
[  523.464755][T15286] lo speed is unknown, defaulting to 1000
[  523.831363][T15286] lo speed is unknown, defaulting to 1000
[  524.185995][T15286] lo speed is unknown, defaulting to 1000
[  524.606580][T15286] lo speed is unknown, defaulting to 1000
[  524.670535][T15336] netlink: 'syz.4.3102': attribute type 1 has an invalid length.
[  524.729251][T15336] 8021q: adding VLAN 0 to HW filter on device bond10
[  524.817901][T15340] bond10: (slave veth17): Enslaving as an active interface with a down link
[  524.890116][T15336] bond7: (slave dummy0): Releasing active interface
[  524.919627][T15336] bond10: (slave dummy0): making interface the new active one
[  524.934405][T15336] bond10: (slave dummy0): Enslaving as an active interface with an up link
[  524.948091][T15286] lo speed is unknown, defaulting to 1000
[  524.964487][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): bond10: link becomes ready
[  525.021264][T15336] netlink: 'syz.4.3102': attribute type 10 has an invalid length.
[  525.039301][T15336] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3102'.
[  525.058640][T15336] device dummy0 entered promiscuous mode
[  525.767975][T15336] bond10: (slave dummy0): Releasing active interface
[  526.555416][T15367] batman_adv: batadv0: Adding interface: dummy0
[  526.584485][T15367] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  526.693824][T15367] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  526.745322][T15369] Set syz1 is full, maxelem 14 reached
[  527.624805][   T26] kauditd_printk_skb: 50 callbacks suppressed
[  527.624818][   T26] audit: type=1326 audit(1789544196.525:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15401 comm="syz.3.3124" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff0e479e159 code=0x0
[  527.970171][T15414] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3128'.
[  528.554558][T15442] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3138'.
[  528.618219][T15442] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  529.919295][T15474] syz.9.3146 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  530.313781][T15481] netlink: 'syz.2.3147': attribute type 1 has an invalid length.
[  530.445496][T15481] 8021q: adding VLAN 0 to HW filter on device bond3
[  530.481210][T15483] bond3: (slave veth5): Enslaving as an active interface with a down link
[  530.539637][T15481] netlink: 'syz.2.3147': attribute type 10 has an invalid length.
[  530.582272][T15481] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3147'.
[  530.626665][T15481] device dummy0 entered promiscuous mode
[  533.104746][T15576] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.3171'.
[  533.142198][T15576] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.3171'.
[  534.083435][T15607] Cannot find add_set index 0 as target
[  534.187184][T15609] netlink: 'syz.4.3180': attribute type 1 has an invalid length.
[  534.311022][T15609] 8021q: adding VLAN 0 to HW filter on device bond11
[  535.673267][T15613] bond11 (unregistering): Released all slaves
[  538.550690][T15714] 8021q: adding VLAN 0 to HW filter on device bond5
[  538.637390][T15714] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  538.677162][T15714] bond5: (slave macvlan2): Enslaving as a backup interface with an up link
[  538.777364][ T4301] bond5: (slave macvlan2): link status up again after 0 ms
[  538.824508][ T4301] bond5: (slave macvlan2): failed to get link speed/duplex
[  538.856735][T14484] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  538.886472][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready
[  538.963392][T15723] device ifb1 entered promiscuous mode
[  538.989996][T15723] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3207'.
[  539.009694][T15723] device ifb1 left promiscuous mode
[  539.027177][ T4301] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  539.058823][ T4301] bond5: (slave macvlan2): failed to get link speed/duplex
[  539.198179][ T4301] bond5: (slave macvlan2): failed to get link speed/duplex
[  539.306548][T14998] bond5: (slave macvlan2): failed to get link speed/duplex
[  539.426473][T14998] bond5: (slave macvlan2): failed to get link speed/duplex
[  539.555706][ T4301] bond5: (slave macvlan2): failed to get link speed/duplex
[  539.628473][T15745] netlink: 1355 bytes leftover after parsing attributes in process `syz.1.3214'.
[  539.706636][T14998] bond5: (slave macvlan2): failed to get link speed/duplex
[  539.837741][ T4301] bond5: (slave macvlan2): failed to get link speed/duplex
[  540.280242][T15758] netlink: 'syz.1.3218': attribute type 11 has an invalid length.
[  543.885522][ T4301] net_ratelimit: 30 callbacks suppressed
[  543.885541][ T4301] bond5: (slave macvlan2): failed to get link speed/duplex
[  544.141148][ T4301] bond5: (slave macvlan2): failed to get link speed/duplex
[  544.308881][T15000] bond5: (slave macvlan2): failed to get link speed/duplex
[  544.419004][ T4335] bond5: (slave macvlan2): failed to get link speed/duplex
[  544.529074][ T4812] bond5: (slave macvlan2): failed to get link speed/duplex
[  544.649461][ T4301] bond5: (slave macvlan2): failed to get link speed/duplex
[  544.769093][T15000] bond5: (slave macvlan2): failed to get link speed/duplex
[  544.889227][T14995] bond5: (slave macvlan2): failed to get link speed/duplex
[  545.011975][T15000] bond5: (slave macvlan2): failed to get link speed/duplex
[  545.130463][ T4301] bond5: (slave macvlan2): failed to get link speed/duplex
[  546.483136][T15861] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  546.552281][T15861] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  547.445920][T15861] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  547.623480][T15861] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  547.681277][T15861] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  547.689458][T15861] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  547.822481][T15861] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  547.959559][T15861] batman_adv: batadv0: Interface activated: dummy0
[  548.041573][T15869] ------------[ cut here ]------------
[  548.048056][T15869] WARNING: CPU: 1 PID: 15869 at net/mac80211/chan.c:2017 ieee80211_link_release_channel+0x150/0x180
[  548.059371][T15869] Modules linked in:
[  548.063772][T15869] CPU: 1 PID: 15869 Comm: syz.1.3251 Not tainted syzkaller #0
[  548.071324][T15869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  548.081456][T15869] RIP: 0010:ieee80211_link_release_channel+0x150/0x180
[  548.088399][T15869] Code: 7c 2d 00 00 74 08 48 89 df e8 0c 17 19 f8 bf 18 1e 00 00 48 03 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 15 19 81 00 e8 30 d2 c7 f7 <0f> 0b eb c5 48 c7 c1 24 e9 20 8e 80 e1 07 80 c1 03 38 c1 0f 8c 51
[  548.108127][T15869] RSP: 0018:ffffc90003967250 EFLAGS: 00010283
[  548.114304][T15869] RAX: ffffffff89ba60b0 RBX: ffff88807be655a8 RCX: 0000000000080000
[  548.122388][T15869] RDX: ffffc90005cb9000 RSI: 0000000000005b7f RDI: 0000000000005b80
[  548.130415][T15869] RBP: 0000000000000000 R08: ffffffff8e20b46f R09: 1ffffffff1c4168d
[  548.138488][T15869] R10: dffffc0000000000 R11: fffffbfff1c4168e R12: ffff88807be66ab0
[  548.146559][T15869] R13: 1ffff1100f7ccab5 R14: ffff88807be66228 R15: dffffc0000000000
[  548.154660][T15869] FS:  00007fc24d8e66c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  548.163686][T15869] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  548.170319][T15869] CR2: 00007fb3a77ed158 CR3: 000000003a7ae000 CR4: 00000000003506e0
[  548.178398][T15869] Call Trace:
[  548.181763][T15869]  <TASK>
[  548.184744][T15869]  ieee80211_if_change_type+0x205/0xa80
[  548.190351][T15869]  ? cfg80211_mgmt_registrations_update_wk+0xa0/0xa0
[  548.197156][T15869]  ? cfg80211_mlme_purge_registrations+0x1d0/0x200
[  548.204033][T15869]  ieee80211_change_iface+0x58/0x4c0
[  548.209387][T15869]  cfg80211_change_iface+0x786/0xf10
[  548.214824][T15869]  nl80211_set_interface+0x601/0x860
[  548.220170][T15869]  ? lockdep_hardirqs_on+0x94/0x140
[  548.225472][T15869]  ? nl80211_dump_interface+0x560/0x560
[  548.231138][T15869]  genl_family_rcv_msg_doit+0x22f/0x350
[  548.236829][T15869]  ? end_current_label_crit_section+0x170/0x170
[  548.243178][T15869]  ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0
[  548.249143][T15869]  ? bpf_lsm_capable+0x5/0x10
[  548.253912][T15869]  ? security_capable+0x85/0xb0
[  548.258837][T15869]  genl_rcv_msg+0x601/0x790
[  548.263430][T15869]  ? asm_sysvec_reschedule_ipi+0x16/0x20
[  548.269125][T15869]  ? genl_bind+0x360/0x360
[  548.273647][T15869]  ? nl80211_dump_interface+0x560/0x560
[  548.279251][T15869]  ? lock_acquire+0x225/0x4a0
[  548.284027][T15869]  netlink_rcv_skb+0x1ef/0x440
[  548.288850][T15869]  ? genl_bind+0x360/0x360
[  548.293369][T15869]  ? netlink_ack+0x1160/0x1160
[  548.298205][T15869]  ? down_read+0x1a8/0x2d0
[  548.302720][T15869]  genl_rcv+0x24/0x40
[  548.306766][T15869]  netlink_unicast+0x7ad/0x920
[  548.311644][T15869]  netlink_sendmsg+0x8ad/0xbd0
[  548.316488][T15869]  ? netlink_getsockopt+0x550/0x550
[  548.321791][T15869]  ? apparmor_socket_sendmsg+0x8a/0x330
[  548.327406][T15869]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  548.332790][T15869]  ? security_socket_sendmsg+0x7c/0xa0
[  548.338325][T15869]  ? netlink_getsockopt+0x550/0x550
[  548.343625][T15869]  ____sys_sendmsg+0x5ed/0x9a0
[  548.348455][T15869]  ? __sys_sendmsg_sock+0x30/0x30
[  548.353588][T15869]  ? __import_iovec+0x306/0x510
[  548.358509][T15869]  ? import_iovec+0x6f/0xa0
[  548.363166][T15869]  ___sys_sendmsg+0x2a2/0x360
[  548.367897][T15869]  ? release_firmware_map_entry+0x187/0x187
[  548.373890][T15869]  ? __sys_sendmsg+0x2a0/0x2a0
[  548.378716][T15869]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  548.384805][T15869]  ? asm_sysvec_reschedule_ipi+0x16/0x20
[  548.390494][T15869]  ? lockdep_hardirqs_on+0x94/0x140
[  548.395830][T15869]  ? __se_sys_sendmsg+0xee/0x2b0
[  548.400849][T15869]  ? kasan_check_range+0x84/0x290
[  548.405953][T15869]  __se_sys_sendmsg+0x1c3/0x2b0
[  548.410926][T15869]  ? __x64_sys_sendmsg+0x80/0x80
[  548.415938][T15869]  ? lockdep_hardirqs_on+0x94/0x140
[  548.421233][T15869]  do_syscall_64+0x4c/0xa0
[  548.425697][T15869]  ? clear_bhb_loop+0x60/0xb0
[  548.430440][T15869]  ? clear_bhb_loop+0x60/0xb0
[  548.435209][T15869]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  548.441219][T15869] RIP: 0033:0x7fc24c99e159
[  548.445679][T15869] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  548.465464][T15869] RSP: 002b:00007fc24d8e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  548.473978][T15869] RAX: ffffffffffffffda RBX: 00007fc24cc25fa0 RCX: 00007fc24c99e159
[  548.482042][T15869] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003
[  548.490062][T15869] RBP: 00007fc24ca3506b R08: 0000000000000000 R09: 0000000000000000
[  548.498126][T15869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  548.506203][T15869] R13: 00007fc24cc26038 R14: 00007fc24cc25fa0 R15: 00007fff3ddac9b8
[  548.514285][T15869]  </TASK>
[  548.517365][T15869] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  548.524672][T15869] CPU: 1 PID: 15869 Comm: syz.1.3251 Not tainted syzkaller #0
[  548.532164][T15869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  548.542344][T15869] Call Trace:
[  548.545656][T15869]  <TASK>
[  548.548628][T15869]  dump_stack_lvl+0x188/0x24e
[  548.553348][T15869]  ? memcpy+0x3c/0x60
[  548.557409][T15869]  ? show_regs_print_info+0x12/0x12
[  548.562665][T15869]  ? load_image+0x410/0x410
[  548.567234][T15869]  panic+0x2d3/0x710
[  548.571184][T15869]  ? bpf_jit_dump+0xd0/0xd0
[  548.575844][T15869]  __warn+0x2f8/0x4f0
[  548.579868][T15869]  ? ieee80211_link_release_channel+0x150/0x180
[  548.586163][T15869]  ? ieee80211_link_release_channel+0x150/0x180
[  548.592454][T15869]  report_bug+0x2ba/0x4f0
[  548.596821][T15869]  ? ieee80211_link_release_channel+0x150/0x180
[  548.603120][T15869]  handle_bug+0x3a/0x70
[  548.607323][T15869]  exc_invalid_op+0x16/0x40
[  548.611871][T15869]  asm_exc_invalid_op+0x16/0x20
[  548.616764][T15869] RIP: 0010:ieee80211_link_release_channel+0x150/0x180
[  548.623661][T15869] Code: 7c 2d 00 00 74 08 48 89 df e8 0c 17 19 f8 bf 18 1e 00 00 48 03 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 15 19 81 00 e8 30 d2 c7 f7 <0f> 0b eb c5 48 c7 c1 24 e9 20 8e 80 e1 07 80 c1 03 38 c1 0f 8c 51
[  548.643301][T15869] RSP: 0018:ffffc90003967250 EFLAGS: 00010283
[  548.649483][T15869] RAX: ffffffff89ba60b0 RBX: ffff88807be655a8 RCX: 0000000000080000
[  548.657474][T15869] RDX: ffffc90005cb9000 RSI: 0000000000005b7f RDI: 0000000000005b80
[  548.665464][T15869] RBP: 0000000000000000 R08: ffffffff8e20b46f R09: 1ffffffff1c4168d
[  548.673457][T15869] R10: dffffc0000000000 R11: fffffbfff1c4168e R12: ffff88807be66ab0
[  548.681460][T15869] R13: 1ffff1100f7ccab5 R14: ffff88807be66228 R15: dffffc0000000000
[  548.689461][T15869]  ? ieee80211_link_release_channel+0x150/0x180
[  548.695767][T15869]  ieee80211_if_change_type+0x205/0xa80
[  548.701339][T15869]  ? cfg80211_mgmt_registrations_update_wk+0xa0/0xa0
[  548.708033][T15869]  ? cfg80211_mlme_purge_registrations+0x1d0/0x200
[  548.714568][T15869]  ieee80211_change_iface+0x58/0x4c0
[  548.719886][T15869]  cfg80211_change_iface+0x786/0xf10
[  548.725215][T15869]  nl80211_set_interface+0x601/0x860
[  548.730532][T15869]  ? lockdep_hardirqs_on+0x94/0x140
[  548.735762][T15869]  ? nl80211_dump_interface+0x560/0x560
[  548.741339][T15869]  genl_family_rcv_msg_doit+0x22f/0x350
[  548.746905][T15869]  ? end_current_label_crit_section+0x170/0x170
[  548.753210][T15869]  ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0
[  548.759143][T15869]  ? bpf_lsm_capable+0x5/0x10
[  548.763844][T15869]  ? security_capable+0x85/0xb0
[  548.768718][T15869]  genl_rcv_msg+0x601/0x790
[  548.773251][T15869]  ? asm_sysvec_reschedule_ipi+0x16/0x20
[  548.778913][T15869]  ? genl_bind+0x360/0x360
[  548.783349][T15869]  ? nl80211_dump_interface+0x560/0x560
[  548.788925][T15869]  ? lock_acquire+0x225/0x4a0
[  548.793630][T15869]  netlink_rcv_skb+0x1ef/0x440
[  548.798412][T15869]  ? genl_bind+0x360/0x360
[  548.802855][T15869]  ? netlink_ack+0x1160/0x1160
[  548.807672][T15869]  ? down_read+0x1a8/0x2d0
[  548.812117][T15869]  genl_rcv+0x24/0x40
[  548.816123][T15869]  netlink_unicast+0x7ad/0x920
[  548.820921][T15869]  netlink_sendmsg+0x8ad/0xbd0
[  548.825718][T15869]  ? netlink_getsockopt+0x550/0x550
[  548.830938][T15869]  ? apparmor_socket_sendmsg+0x8a/0x330
[  548.836516][T15869]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  548.841826][T15869]  ? security_socket_sendmsg+0x7c/0xa0
[  548.847312][T15869]  ? netlink_getsockopt+0x550/0x550
[  548.852539][T15869]  ____sys_sendmsg+0x5ed/0x9a0
[  548.857344][T15869]  ? __sys_sendmsg_sock+0x30/0x30
[  548.862388][T15869]  ? __import_iovec+0x306/0x510
[  548.867272][T15869]  ? import_iovec+0x6f/0xa0
[  548.871806][T15869]  ___sys_sendmsg+0x2a2/0x360
[  548.876505][T15869]  ? release_firmware_map_entry+0x187/0x187
[  548.882455][T15869]  ? __sys_sendmsg+0x2a0/0x2a0
[  548.887245][T15869]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  548.893277][T15869]  ? asm_sysvec_reschedule_ipi+0x16/0x20
[  548.898927][T15869]  ? lockdep_hardirqs_on+0x94/0x140
[  548.904170][T15869]  ? __se_sys_sendmsg+0xee/0x2b0
[  548.909127][T15869]  ? kasan_check_range+0x84/0x290
[  548.914189][T15869]  __se_sys_sendmsg+0x1c3/0x2b0
[  548.919061][T15869]  ? __x64_sys_sendmsg+0x80/0x80
[  548.924038][T15869]  ? lockdep_hardirqs_on+0x94/0x140
[  548.929274][T15869]  do_syscall_64+0x4c/0xa0
[  548.933712][T15869]  ? clear_bhb_loop+0x60/0xb0
[  548.938421][T15869]  ? clear_bhb_loop+0x60/0xb0
[  548.943121][T15869]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  548.949042][T15869] RIP: 0033:0x7fc24c99e159
[  548.953479][T15869] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  548.973145][T15869] RSP: 002b:00007fc24d8e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  548.981580][T15869] RAX: ffffffffffffffda RBX: 00007fc24cc25fa0 RCX: 00007fc24c99e159
[  548.989569][T15869] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003
[  548.997559][T15869] RBP: 00007fc24ca3506b R08: 0000000000000000 R09: 0000000000000000
[  549.005552][T15869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  549.013549][T15869] R13: 00007fc24cc26038 R14: 00007fc24cc25fa0 R15: 00007fff3ddac9b8
[  549.021563][T15869]  </TASK>
[  549.025198][T15869] Kernel Offset: disabled
[  549.029671][T15869] Rebooting in 86400 seconds..