last executing test programs:

6m44.810900332s ago: executing program 32 (id=1087):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xf7, 0x485, &(0x7f0000001040)="$eJzs3M9rHFUcAPDvTJL+bhNrrba2Gq1i8UfSpFV78KCi4EFB0EM9xiSttdtGmgi2BI0i9SgF7+JR8C/w5kXUgwheFTxKoWgQmnqKzK9mu9mkSZpkbfbzgc2+t/Nm3/vOzNt9My+zAbSt3uxPErEjIn6LiO4ie3OB3uJpZnpy+Pr05HASs7Nv/JXk5a5NTw5XRav1tpeZw2lE+mkSzyfz6x2/cPHMUK02er7M90+cfa9//MLFp06fHTo1emr03ODx48eODjz7zODTqxJnFte1/R+OHdj3yluXXxs+cfntH7/JmrX3YLG8Po5but4koCZ6s63292yucdmjy2j7nWBnXTrpbGFDWJaOiMh2V1fe/7ujI+Z2Xne8/ElLGwesqey7afPCi6dmgQ0siVa3AGiN6os+O/+tHus09PhfuPpCxKYyPTM9OTxzI/7OSMvXu9aw/t6IODH175fZI5Z7HQIAYAXysc2TzcZ/aezNn4u5jl3lHEpPRNwVEbsj4u6I2BMR90TkZe+NiPuKlWe7l1h/b0N+/vgnvdK0zaskG/89Vzf2m6mLv3zq6ShzO/P4u5KTp2ujR8ptcji6Nmf5gUXq+O6lXz9faFn9+C97ZPVXY8GyAVc6Gy7QjQxNDK3WRrj6ccT+zmbxJzdmArIjYF9E7F/eW++qEqcf//rAQoVuHf8iVmGeafariMeK/T8VDfFXksXnJ/u3RG30SH91VMz30y+XXl+o/tuKfxVk+3/bzcd/Q4nuf5JivrYrarXR8+PLr+PS758teE6z0uN/U/JmPmf98zvFax8MTUycH4jYlLya56tzuvz1wbl1q3xVPov/8KHm/X93uU4W//0RkR3EByPigYh4sGz7QxHxcEQcWiT+H1585N1F4k8iiZbu/5Gmn383jv+epH6+fgWJjjPff7vQjPnS9v+xmMo/awv5598tLLWBt7n5AAAA4I6QRsSOSNK+It27I9K0r6/4H/49sS2tjY1PPHFy7P1zI8U9Aj3RlVZXurrrrocOJFPlOxb5wfJacbX8aHnd+IuOrXm+b3isNtLi2KHdbb+5/0fV/zN/drS6dcCac78WtK/G/p+2qB3A+lvK979zAdiYmvT/ra1oB7D+nP9D+2rW/z9qyBv/w8Y0v///0eQn64CNyPgf2pf+D+1L/4e2dDv39a88Ud0ssPL32bLkO/zbJVH94sVa1rU15l6JtOUht1Ei6zHrW+ncb6gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcyf4LAAD///ss5ts=")
lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f0000000100)='./control\x00', 0x184)
open(&(0x7f00000000c0)='./control\x00', 0x573382, 0x113)
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40), 0x24, 0x0)

6m35.765184586s ago: executing program 4 (id=1143):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
rseq(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffb8, 0x0, 0x0)
unshare(0x22020600)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
dup3(r1, r0, 0x0)

6m35.523725118s ago: executing program 4 (id=1145):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x4ce9c1, 0x61, 0x10}, 0x2f)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x3, @local, 0x7}, 0x1c)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0x4e22, 0x9, @local, 0x7}}, 0x0, 0x0, 0x3a, 0x0, "a30b3b28af4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00"}, 0xd8)

6m35.037696004s ago: executing program 4 (id=1150):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
r1 = eventfd2(0x2, 0x800)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000080)=r1)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000100))

6m34.714557389s ago: executing program 4 (id=1153):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$cgroup2(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800010, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
umount2(&(0x7f0000000000)='./file0\x00', 0x4)

6m34.473470823s ago: executing program 4 (id=1155):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
munlockall()
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

6m33.937849573s ago: executing program 4 (id=1157):
syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYBLOB=',sbsector=0x0000000000000003,\x00'], 0x1, 0xa2f, &(0x7f00000018c0)="$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")
r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)=[0x7], 0x0, 0x0, 0x1}}, 0x40)

6m33.220114302s ago: executing program 33 (id=1157):
syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000b00)=ANY=[@ANYBLOB="686964652c646d6f64653d3078303030303030303030303030303030392c73657373696f6e3d3078303030303030303030303030303032332c757466382c6d61703d61636f726e2c636865636b3d7374726963742c6d6f64653d3078303030303030303030303030303063392c63727566742c6d61703d6f66662c636865636b3d7374726963742c6f76657272696465726f636b7065726d2c626c6f636b3d3078303030303030303030303030303230302c63727566742c6e6f636f6d70726573732c63727566742c73657373696f6e3d3078303030303030303030303030303032652c6769643dea52459e307a95fee197736edd401b8b1ee77a6630de6c7ef49d918d0e5d6d5f954e003f0b61e3cde6c36bf0c57353667bcd5cefc9aeef9389b227277120377c0950a1d6218bd80958fe14734fe0670d5e1657d5e471f96bf996bf06aa77433eb22c767590bfb8e79f4158ba3a1c5fcaf7750ac1e741444953f608d7dbc59ae1403b4707a2a22dee47c9c8354159f85652fbd6ec63143e2d6013f2fb160ebbbc85e5c03d56edd2c64c29dce485d2ccc076795762f6b73f74807049160ab6", @ANYRESHEX=0x0, @ANYBLOB=',sbsector=0x0000000000000003,\x00'], 0x1, 0xa2f, &(0x7f00000018c0)="$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")
r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)=[0x7], 0x0, 0x0, 0x1}}, 0x40)

2m48.14663458s ago: executing program 2 (id=3043):
unshare(0x62040200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
gettid()
r0 = socket$inet(0xa, 0x801, 0x84)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'filter\x00', 0x0, [0x80008, 0x21ff, 0x9, 0xfffffffd, 0x44007]}, &(0x7f0000000200)=0x54)

2m41.439929591s ago: executing program 2 (id=3083):
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x4042, 0x1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000a00)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}})
capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40})
syz_fuse_handle_req(r0, &(0x7f00000022c0)="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", 0x2000, &(0x7f0000007a80)={&(0x7f0000006400)={0x50, 0x0, 0x203, {0x7, 0x29, 0x1, 0x1011b000, 0xdcd, 0x103, 0x8, 0x3, 0x0, 0x0, 0x63, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

2m41.022715149s ago: executing program 2 (id=3087):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0xf, &(0x7f00000017c0)=[{&(0x7f00000000c0)=""/69, 0x53}], 0x1, 0x0, 0x16}, 0x40010000)

2m40.649595176s ago: executing program 2 (id=3092):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x404, &(0x7f00000003c0)={[{@nogrpid}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_continue}, {@nombcache}, {@mblk_io_submit}]}, 0xff, 0x433, &(0x7f0000000d80)="$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")
creat(&(0x7f0000000080)='./bus\x00', 0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x80100, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x4000001, 0x8005, 0x0, 0x0, 0x19, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "035f47c6780820d1cbf7966da2dc499b060000002ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00002f00", "f28359738e229a4c66810000000000d300e6d602000004000000000000000001", [0x81, 0x1]})
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0)

2m39.628134204s ago: executing program 2 (id=3098):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xc00714, &(0x7f0000000500), 0xff, 0x4a2, &(0x7f00000007c0)="$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")
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f00000000c0))
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x2000019, 0x0, 0xfc, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x2)

2m38.899922086s ago: executing program 2 (id=3106):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000020000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r0, 0x0)
mremap(&(0x7f000000e000/0x7000)=nil, 0x7000, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil)

2m38.224570178s ago: executing program 34 (id=3106):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000020000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r0, 0x0)
mremap(&(0x7f000000e000/0x7000)=nil, 0x7000, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil)

1m36.148824502s ago: executing program 7 (id=3571):
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000002000000ac1414aa"], 0x18)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10)

1m35.891782938s ago: executing program 7 (id=3574):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000240)={0x40, 0xa, 0x6, "6ef1989edd08"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="20131d00000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000280)={0x20, 0xf, 0x1, "0f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1m32.905847878s ago: executing program 7 (id=3592):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x800, 0x2, 0x4}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'gretap0\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f0000000600)="05", 0x1, 0x2400d805, &(0x7f0000000300)={0x11, 0x8100, r2, 0x1, 0x85, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}}, 0x14)

1m32.293371824s ago: executing program 7 (id=3595):
r0 = userfaultfd(0x80001)
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file3\x00', 0x4080, &(0x7f00000001c0)=ANY=[], 0x2, 0xc3d, &(0x7f0000000c80)="$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")
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x4a4})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3})
ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000000)={&(0x7f00001c4000/0x3000)=nil, &(0x7f0000000000/0xc00000)=nil, 0x3000, 0x0, 0x2})

1m31.871966556s ago: executing program 7 (id=3599):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8)
syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
chdir(&(0x7f0000000080)='./file0\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fdatasync(r0)

1m29.907884819s ago: executing program 7 (id=3616):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', <r2=>0x0})
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r2}, 0x90)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010027bd70000000000000000000", @ANYRES32=r1, @ANYBLOB="004100000000000014002b8008000100", @ANYRES32=r3], 0x34}}, 0x4008000)
sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0)

1m29.33598261s ago: executing program 35 (id=3616):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', <r2=>0x0})
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r2}, 0x90)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010027bd70000000000000000000", @ANYRES32=r1, @ANYBLOB="004100000000000014002b8008000100", @ANYRES32=r3], 0x34}}, 0x4008000)
sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0)

1m25.468034824s ago: executing program 0 (id=3645):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="19000000040000000800000001"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002a00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r2}, 0x20)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, 0x0)

1m25.382599769s ago: executing program 0 (id=3646):
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8108c4, &(0x7f0000000300)={[{@resv_level={'resv_level', 0x3d, 0x400}}, {@heartbeat_none}, {@inode64}, {@coherency_full}, {@err_ro}, {@localalloc={'localalloc', 0x3d, 0x1}}, {@intr}, {@localalloc}]}, 0x1, 0x442f, &(0x7f000000e480)="$eJzs3c9PHGUfAPBnBvoW+rZ9oW8PfZP3sIlNNGoI9KTSREppKbRYU21jvGwX2LbowjawNSb2gLcmnkw8GA+NJt44NfwD9ejRi8d6bqIHLyYmjZjdnQVm2A0rYUHq53NgmOc3+5159pnD8MSJyp25pdzcUq6wkCvP3Fo6k/uoXLo3XwzxHmna/6G965/2dOI62e9r75/s6vmL79w4E8J3sz8+XVtbWwtV3aGpoU2///br/ZnNx4Y4U6fabvPWdsv7IYSTW8ZV1RVCeC+EEIUQziVpo8mxN4RwLMm7cf+zm7ldGs2jJ8Wz+WdTD1aHT0+uPFxt/bdHIXxV+t+rt+d/fqFr+KeXd6l7AAAAAAAAAAAAAAAAAAAOuPFrV6+/PTgUHkeheyXa+r7ueHJs9X7s2q75vvN/LAAAAAAAAAAAAAAAAAAAAPxNbbz/n4tONHn/fyw5jrSov/Zm58dI50y8dXXswuBQsv97tCX/tSTpl3Ndob/Jvu/Z/d/PZeo33/99az871Rhfo9++EMUDqfM4HhgI4Ztk4/dT0ZG4VF6qvHKr3BVmd20YB1Y6/vXd+1PRSTb0bzf+o5n2O7///3+3XE3V85u7d4k919Lx72pZ7ttPo7bifz5Tby/iz86l499dS+vdXGCkPgFU4/959/bxH8u036n4Hw8h5KLqWHOpGaC6hqmmt1qvkJaO/6FaWmrqTD7IVvf/75n4X8i0v1/z/3L2i6jmk84O5QBKx/9ftbSeVImN+78/3v7+v5hpfz/iXx3/su//tqTjf7ie2J0qUvsk253/xzPtdyr+1+NknMej1BWwEtXTW/2/OtLS8e/Zkr/x/Be3tf67lKm/V89/jX4bz3+N6f+lqP78R3Pp+Pe2LNfu/T+Rqdfp+X+ktv5jp9LxP1JLS6+d+2o/243/ZKb9TsW/tirpacR/Yz7543A9/eum6z+y0vH/dz0x3lxiufaztv6Ltl//X860vx/rv+r4l+PO9vq8SMf/aMty1fj/0Mb3/5VMvc7HP4RBa/0dS8f/WMtytfu/Z/v4T2XqdTr+L3aycQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIADYDQ59oUoHkidx/HAQAjnk/NT4Ug0XZjNT5fKMx8uhTCWpOfCieh2qTxdKOXnFsqzxXyhVCrPhHAhyT8ZeqKlUrmSny/cvbjeVm90p1hYrEwXC5UQwniS/v9wrNHW9FxlvnA3hHBpPe8/cXnx7p3CQn52bvGNwcHBwTCxPob+qPhxpbhQqfdezw1hcr1uX7RpcLXsy+tjORp9UL63uFAo1dKvbKpTKs8USpvqTCV5X4T+qLJ4b2GmUCnmS+Xbjf7200hyHJu49u61K0Nb8m9G9ePo3g4LAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgL/o8fDrX4YQuutncQhhpPFL1Kz8oyfFs/lnUw9Wh09PrjxcfdqqHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPzJDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbpGKWBIAoD8JuxUDuPYbXsdrYrimjhiuAJ9BgeRo/iJbxDihRpU4RAMgthswvbJNX3NQ/mZ+Y9mAcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADM8/TefbzVTUSKq81lxN/X/+Iwfyn15378/sUZZuR0nl+7h8e6Kf+ejvK7crRs8y5dr74/Y6T2fgd7Mtynvb7P9eRcU/s2NV/f9yZSriKiLfltyrmq5r0FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsGUHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3AsAAAAACDM3zqKvg0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAXwEAAP//zQceng==")

1m24.606165331s ago: executing program 0 (id=3650):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0xd}}, &(0x7f00000000c0)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0)
sendfile(r2, r2, 0x0, 0x9)

1m21.521152302s ago: executing program 0 (id=3682):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000280)={[{@noload}, {@resgid}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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")
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000)

1m20.744566842s ago: executing program 0 (id=3678):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000005c0)={0x14, r1, 0x1, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x80)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r0)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000ec0), r0)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000f00)={0x1c, r2, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000)

1m20.181334231s ago: executing program 0 (id=3685):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r1}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000e00000000000000000000008500000050000000850000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1m19.590306379s ago: executing program 36 (id=3685):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r1}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000e00000000000000000000008500000050000000850000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

3.637073824s ago: executing program 1 (id=4340):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r0, &(0x7f0000004d00), 0x7fffffffffffd33, 0x20000890)

3.380069961s ago: executing program 5 (id=4344):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x1000, 0xfffffffffffffffd})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f0000000300)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x100000000000000, &(0x7f0000000180)="86"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@request_death, @clear_death], 0x0, 0x0, 0x0})

3.35622448s ago: executing program 1 (id=4346):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x22803)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0xf3, 0x1b1c07, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8})
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x80d02, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000000)={{0x80}, 'port0\x00', 0x0, 0x0, 0x0, 0x0, 0x80000001})
ioctl$SNDCTL_SEQ_PANIC(r1, 0x5111)
dup3(r0, r1, 0x0)

3.088258797s ago: executing program 5 (id=4349):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r1, 0x0, 0x5}, 0x18)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)

2.979562746s ago: executing program 1 (id=4351):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x48, r2, 0x1, 0x1070bd2b, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ipvlan1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x30)

2.925198657s ago: executing program 3 (id=4353):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240080c5}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002980)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2b, 0x4, {0x0, 0x0, 0x0, r2, {0x6, 0x4}, {}, {0x1, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x1}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24064805}, 0x20040054)

2.726672998s ago: executing program 5 (id=4355):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fdf, 0x1}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000001340), 0x2931b90f, r0}, 0x38)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = dup2(r1, r0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10)
select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x2710})

2.63071567s ago: executing program 1 (id=4357):
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000e, 0x6c033, 0xffffffffffffffff, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010)

2.573238668s ago: executing program 8 (id=4358):
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
r1 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$TIOCVHANGUP(r1, 0x5437, 0x0)
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x83, 0xffffffff, 0x134})
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000040)={0x8a83, 0x8, 0xffffff00, 0x38000, 0x2, "1039db8d79bea18fa3015ae9ae6901313cf366"})
syz_open_dev$ptys(0xc, 0x3, 0x0)

2.314682814s ago: executing program 3 (id=4360):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x4, 0x8, 0xb, 0x2}, 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xb, 0x5, 0x10001, 0xa, 0x1, 0xffffffffffffffff, 0x3}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f00000000c0), &(0x7f0000000180)=r1}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)

2.31441832s ago: executing program 5 (id=4361):
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
r0 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x936, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r0, 0x47b6, 0x800000, 0x0, 0x0, 0x0)

2.195869361s ago: executing program 8 (id=4362):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x56, &(0x7f0000000240)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@mp_fclose={0x1e, 0xc, 0x7f, 0x0, 0x5}]}}}}}}}}, 0x0)

2.122133031s ago: executing program 1 (id=4364):
syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file7\x00', 0x10, &(0x7f0000000700)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000102,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000011,fileset=00000000000000000011,uid=', @ANYRESHEX, @ANYRES8, @ANYRESDEC, @ANYRESDEC], 0x12, 0xc49, &(0x7f0000001cc0)="$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")
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
mount$nfs(&(0x7f0000000100)='...', 0x0, 0x0, 0x42000, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
creat(&(0x7f0000000100)='./bus\x00', 0x0)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40, 0x1)

1.922557151s ago: executing program 3 (id=4366):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r0, &(0x7f0000000240)=':', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00')
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000740)=""/4100, 0x1004}], 0x1, 0x145, 0x80000000)

1.831682773s ago: executing program 6 (id=4367):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="6507060082762422f9a30250a90def79e5ddb933b83b8f8f1a0daad170478560f60eb8dc258ded60aee45b04b15db386", 0x30)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000002940)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002b40)="fb1add96eb5c4cee3df251747b4c22fa53f4688d7e1de775eb384e67c6582a1c81de03b4a72c33625ef534c5ca4d2efe7943bb3192c53781854a9d34a1bf7e0d6284f0e66080d445b540a2f7e462a8338abd11bf2789063bf6f3064a921853c52bdf68e827858e06ccf3ed47c27b11f2bf39d587a2912ef9643a51e3bf0e366ffa", 0x81}], 0x1, &(0x7f0000000300)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000800}], 0x1, 0x91)
recvmsg(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000003f80)=""/4109, 0x100d}], 0x1}, 0x20f2)

1.831236087s ago: executing program 8 (id=4368):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "3da2d199", "72392a24199b5903"}, 0x28)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0)

1.83038254s ago: executing program 9 (id=4369):
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn'])
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x0)
r1 = fanotify_init(0x200, 0x0)
fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0)
fanotify_mark(r1, 0x1, 0x40000028, r0, &(0x7f00000000c0)='./file0\x00')

1.621350308s ago: executing program 1 (id=4370):
mount$fuse(0x0, 0x0, 0x0, 0x4000, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=0000000000000000004', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000040)={[{@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0x1, 0x559a, &(0x7f0000005680)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0xeaff)
write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x29f)
ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={{r0}, 0x0, 0x0, 0x100000})

1.620450537s ago: executing program 6 (id=4371):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$eJzs3U9oHGUbAPBnZrNN/+T70g++Dz6lh6JChdJN0j9aPbVXsVDoQfCiYbMNJZtsySbahIDpvYg9iEov9aYHj4oHD+LFo1cvimeh2KDQ9KArm51N03S3bmI2W7O/H0z2fWdm93nfmX3e7AwzTAB962j9TxrxVERcTCKGNywbiGzh0cZ6qytLxfsrS8UkarVLvySRRMS9laVic/0kez0UEcsR8f+I+CYfcTxd/8h9zUJ1YXFqvFwuzWb1kbnpqyPVhcUTV6bHJ0uTpZlTL7505uzpM2MnxzY2935tYy2/tb7e+PHmuze+e+X2zU8/O7JcfH88iXMxlC3b2I+d1Ngm+Ti3af7pbgTroaTXDWBbclme11PpfzEcuSzrW6ltHBwGd6V5QBfVBiNq6zYUgT6QSHroU83fAfXj3+a0m78/7pxvHIDU466uLBXfiWb8gca5idi/dmxy8NfkoSOT+vHm4d1sKHvS8vWIGB0YePT7n2Tfv+0b3YkG0lVfn2/sqEf3f7o+/kSL8Weoee70b2qOf6vZ+LfaIn6uzfh3scMYv7/+00dt418fjKdbxk/W4yct4qcR8WaH8W+99uXZdstqH0cci9bxm5LHnx8euXylXBpt/G0Z46tjR15u3/+Ig23iN87Z7l9ryMb+78valHbY/y++/fyZ5cfEf/7Zx+//Vtv/QES812H8/9z75NV2y+5cT+7WfwVsdf8nkY/bHcZ/4dzRH7Kis4YAAAAAAAAAALCD0rVr2ZK0sF5O00KhcQ/vf+NgWq5U545frszPTDSueTsc+bR5pdVwo57U62PZ9bjN+slN9VO5LGDuwFq9UKyUJ3rcdwAAAAAAAAAAAAAAAAAAAHhSHNp0//9vubX7/zc/rhrYq9o/8hvY6+Q/9K+H8z/pWTuA3ef/P/StmvyH/iX/oX/Jf+hf8h/6l/yH/iX/oX/JfwAAAAAAAAAAAAAAAAAAAAAAAAAA6IqLFy7Up9r9laVivT4xsDA/VXnrxESpOlWYni8WipXZq4XJSmWyXCoUK9N/9XlJpXJ1NGbmr43MlapzI9WFxTemK/MzzWeKlvJd7xEAAAAAAAAAAAAAAAAAAAD88wytTUlaiMg36mlaKET8KyIOJ5FcvlIujUbEvyPi+1x+sF4f63WjAQAAAAAAAAAAAAAAAAAAYI+pLixOjZfLpdnuFQayUF0M0XlhYCsrR8Tyzjaj/olbflc+24A93nR7o5B7Mr6HT36hh4MSAAAAAAAAAAAAAAAAAAD0qQc3/Xb6jj+62yAAAAAAAAAAAAAAAAAAAADoS+nPSUTUp2PDzw1tXrovWc2tvUbE27cufXBtfG5udqw+/+76/LkPs/kne9F+oFPNPE0jop7HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwAPVhcWp8XK5NLvNwmAH6/S6jwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADb8WcAAAD//y4WzlE=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0)
pwrite64(r0, &(0x7f0000000100)="c6", 0x1, 0x8000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x4842, 0x1cb)
writev(r1, &(0x7f0000000140)=[{&(0x7f0000001200)="b1", 0x1}], 0x1)

1.580783296s ago: executing program 9 (id=4372):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r0, &(0x7f0000000300)="a6", 0x1, 0x20000045, &(0x7f0000000140)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c)
sendmmsg(r0, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000600)='E', 0x1}], 0x1}}], 0x1, 0x1)

1.549780195s ago: executing program 8 (id=4373):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x4e22, @broadcast}, 0x2, 0x9800}}, 0x2e)
ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000540)="43210098")

1.314274033s ago: executing program 3 (id=4374):
mknodat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x8, 0x8)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
ftruncate(r1, 0x2000009)
sendfile(r0, r1, 0x0, 0x7ffff007)

1.313966751s ago: executing program 6 (id=4375):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000080000000e"], 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000ecff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x2000, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfd}, 0x50)

1.175992152s ago: executing program 8 (id=4376):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r0, &(0x7f0000001540)={@val={0xa, 0x88a8}, @void, @eth={@local, @empty, @val={@void, {0x8100, 0x3, 0x1, 0x2}}, {@ipv6={0x86dd, @generic={0x9, 0x6, "000400", 0x8, 0x2b, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[@dstopts={0x6}]}}}}}}, 0x46)

1.175545006s ago: executing program 9 (id=4377):
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40)
r0 = socket$inet6(0xa, 0x3, 0x5)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0xffffffff, @local, 0x8}, 0x1c)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000000200)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote}, 0x80, 0x0}, 0x5b4}], 0x43, 0x0)

1.131748005s ago: executing program 6 (id=4378):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202)
r1 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000000)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22})
io_uring_enter(r1, 0x48e9, 0x0, 0x2, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)

934.534439ms ago: executing program 5 (id=4379):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000003c0)={'syz0\x00', {0x9, 0x0, 0x1, 0x400}, 0x36, [0xfffffffe, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x7, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x9f1, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffff8, 0x0, 0x0, 0x1, 0x40, 0x10, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x2, 0x0, 0x0, 0xffffbffd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55], [0x0, 0x0, 0x0, 0x0, 0x0, 0xbd8f, 0x0, 0x4, 0x0, 0xfffffffd, 0xff, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x10001, 0x810, 0x6, 0x0, 0x0, 0x800000, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0xffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2000000], [0x4, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x8f4]}, 0x45c)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10)
write(r0, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac)

901.809774ms ago: executing program 9 (id=4380):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r1, 0x0, r2, 0x0, 0x1, 0x4)
vmsplice(r2, &(0x7f00000003c0)=[{&(0x7f00000002c0)='@', 0x1}, {0x0}, {0x0}], 0x3, 0x0)
ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, 0x0)
write(r0, 0x0, 0x0)

668.042356ms ago: executing program 5 (id=4381):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x5, 0x7fc00007}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x2007})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000140))

666.10636ms ago: executing program 8 (id=4382):
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x40000000015, 0x5, 0x0)
r0 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r0, 0x3516, 0xa00100, 0x0, 0x0, 0x0)

625.735931ms ago: executing program 6 (id=4383):
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
r0 = socket$inet(0x2, 0x3, 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000005f00)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r3, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}, 0x1, 0x0, 0x0, 0x4048020}, 0x20000)

403.966322ms ago: executing program 9 (id=4384):
r0 = memfd_create(&(0x7f00000001c0)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xcc\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\xae\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5\x00\x00\x00\x00\x00\x00\x00\x05L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\x06\x00\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xaaw\xbe\xd0\xd0\xc8d\x96G\xcf\x066\x84\x82-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10\x04\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x2)
r1 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x3232, 0x100, 0x1, 0x3de}, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000000)=<r3=>0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000300)=[r0], 0x1)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x6000, @fd_index, 0x400000080001001, 0x0, 0x0, 0x4})
io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0)

387.063345ms ago: executing program 6 (id=4385):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r1 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
shutdown(r0, 0x1)

286.00382ms ago: executing program 3 (id=4386):
sched_setscheduler(0x0, 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
write$cgroup_freezer_state(r1, &(0x7f0000000200)='THAWED\x00', 0x7)

156.006872ms ago: executing program 9 (id=4387):
syz_mount_image$bfs(&(0x7f00000001c0), &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4, &(0x7f0000000200)=ANY=[], 0x8, 0xad, &(0x7f0000000040)="$eJzs0btpA0EUBdC7H/xJ7ALcg3tw6twVbOjQkY3BjlSGOlArKmE7ULCpkhHLrkChEAhJcA7MzA3mwYW33q5e8pSUv6SUUu6SPGbKX98/nx/v490kyTJt7jPZv9y4ej4P486fp7x5y+L/4E8//HZ9la4fyuyChQEAgJPVeZ1TdfxQm6Q5VyMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA67ILAAD//1vZIlc=")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0)
write$UHID_CREATE2(r0, 0x0, 0x118)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, 0x0, 0x17)
write$UHID_INPUT(r0, &(0x7f0000000480)={0x8, {"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", 0x1000}}, 0x1006)

0s ago: executing program 3 (id=4388):
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000240), 0x2)
r1 = memfd_create(&(0x7f0000000280)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc02\x8b\xb7\xf5\xed\x829\xc6Z\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa\x19\x16\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8Ng\xd8\xb2\xb0\xd1\x11\xf0\xc2Gj+kV/\xa7\xe7\x98u\xc0\xf8$xb\xe2\xf7.:n\x0er\x84\x9fE\xdej\xb3\x05\xab\x1f\xd0\x0fRho\xee\xd5\x13*X\xf3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x11\x7f@\xa5\xf7\xfd\x0f\xc4`\b\xfa\nA\x00\x99\rZO\xcd$\xce\xfa\xf0\xe2\xf1\x87|\xca;,g\xdd\xccJ\xeb9\xe3\x8e\x9d\xea\xfaY\xfc\xe0)J\xb5\v\x80R9\xec|&\xaf\xcet\x84Y\xdd\\\xc2\x83g\x11\x9b\xf4\xa2\x0e@0j@\xe3/7\x94\x1f\x7f\xe9,\xac45\xaeW\xa6\x93>B\xb4\xc0\xbb\a\x88rQ\xdf\xb1\x00\x00Qk\xb6)\xec\x0ev\xe8yvT\xe2$3R\xe8\x8agM\xaaj\xa7\xf0\xbdo\x82\xa9A\x83\x1f\xa8w\xb36q\xc0\xd3\xfd\x81\xb8~\xbc\x03\xbc\x18\xab\xd5\xf9\tI\x12r\r\v\xadb\xbc\x14y\x87Ji2\xe2\x05\\\xcaq\x92o\xf2)q\xdf}\xc6\xd3\xff\x97\x14\xf7\x1a\x9a\x14\t%\ag\x0e\xc7?\xcfV\xef\xb3l\x9e\f\xf7N\x1e4\x11]\x89\xb8\xc8\x89E\x8c!\x1f\x8d\xc7\x7f\xce\xffXJ\xbf\xdc\x110| \x89\xff\x03\x8b\xef\xa5\x04.\x11I\x03\x02\'QN\x1e\xee!D\v\x06\xa3S\xb5\x99\xc1$\xb9\xc9\xe6\xb3\xd8\xc8\x96)g\xd5\xc9\xcb\x96\x18s(\xcb\xbd\x00\x00', 0x2)
ftruncate(r1, 0xffff)
fcntl$addseals(r1, 0x409, 0x7)
r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000040)={r1, 0x0, 0x0, 0x8000})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f00000000c0)=0x38fb682c9607fde3)

kernel console output (not intermixed with test programs):

arsing attributes in process `syz.1.3412'.
[  548.619959][T15297] netlink: 'syz.3.3417': attribute type 7 has an invalid length.
[  548.728311][T15303] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  549.070351][T15297] netlink: 'syz.3.3417': attribute type 7 has an invalid length.
[  549.536944][T15318] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3421'.
[  549.801375][T15318] nbd: socks must be embedded in a SOCK_ITEM attr
[  550.451118][ T6022] udevd[6022]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  550.629057][ T6022] udevd[6022]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  550.664607][T15344] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3429'.
[  550.853753][ T5917] usb 8-1: new high-speed USB device number 16 using dummy_hcd
[  551.043575][ T5917] usb 8-1: Using ep0 maxpacket: 16
[  551.080345][ T5917] usb 8-1: config 1 has an invalid interface number: 105 but max is 0
[  551.128642][ T5917] usb 8-1: config 1 has no interface number 0
[  551.152762][ T5917] usb 8-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  551.188346][ T5917] usb 8-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  551.233411][ T5917] usb 8-1: config 1 interface 105 has no altsetting 0
[  551.263566][ T5917] usb 8-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  551.286438][ T5917] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  551.311822][ T5917] usb 8-1: Product: syz
[  551.342509][ T5917] usb 8-1: Manufacturer: syz
[  551.388156][ T5917] usb 8-1: SerialNumber: syz
[  551.411551][T15343] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  551.427802][T15343] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  551.890894][T15343] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  551.912824][T15343] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  552.032115][T15375] dummy0: entered allmulticast mode
[  552.063492][T15375] dummy0: left allmulticast mode
[  552.368425][ T5917] aqc111 8-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32
[  552.589928][ T5917] aqc111 8-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71
[  552.646627][ T5917] aqc111 8-1:1.105 eth13: register 'aqc111' at usb-dummy_hcd.7-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, a2:b6:49:44:53:2f
[  552.711672][ T5917] usb 8-1: USB disconnect, device number 16
[  552.741603][ T5917] aqc111 8-1:1.105 eth13: unregister 'aqc111' usb-dummy_hcd.7-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter
[  552.856608][ T5917] aqc111 8-1:1.105 eth13 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[  552.874836][ T5917] aqc111 8-1:1.105 eth13 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[  552.896582][ T5917] aqc111 8-1:1.105 eth13 (unregistered): Failed to write(0x61) reg index 0x0000: -19
[  553.723879][T15394] loop8: detected capacity change from 0 to 32768
[  553.780175][T15425] netlink: 'syz.7.3461': attribute type 10 has an invalid length.
[  553.821831][T15394] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode.
[  553.831684][ T5195] udevd[5195]: worker [6022] terminated by signal 33 (Unknown signal 33)
[  553.844847][ T5195] udevd[5195]: worker [6022] failed while handling '/devices/virtual/block/loop8'
[  553.888306][T15425] 8021q: adding VLAN 0 to HW filter on device team0
[  553.916510][T15425] team0: entered promiscuous mode
[  553.923316][T15425] C: entered promiscuous mode
[  553.930769][T15425] team_slave_1: entered promiscuous mode
[  553.937634][T15425] team0: entered allmulticast mode
[  553.942899][T15425] C: entered allmulticast mode
[  553.950369][T15425] team_slave_1: entered allmulticast mode
[  553.957858][T15425] bond0: (slave team0): Enslaving as an active interface with an up link
[  554.121637][T15438] (syz.8.3449,15438,1):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options
[  554.249118][T14289] ocfs2: Unmounting device (7,8) on (node local)
[  555.123740][ T5978] usb 8-1: new high-speed USB device number 17 using dummy_hcd
[  555.336368][ T5978] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  555.358667][ T5978] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  555.394429][ T5978] usb 8-1: config 0 descriptor??
[  555.445207][ T5978] cp210x 8-1:0.0: cp210x converter detected
[  555.872969][ T5978] cp210x 8-1:0.0: failed to get vendor val 0x0010 size 3: -32
[  555.892518][ T5978] usb 8-1: cp210x converter now attached to ttyUSB0
[  556.098659][ T5978] usb 8-1: USB disconnect, device number 17
[  556.125566][ T5978] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  556.176030][ T5978] cp210x 8-1:0.0: device disconnected
[  557.839237][T15493] loop0: detected capacity change from 0 to 131072
[  557.895403][T15493] F2FS-fs (loop0): Invalid log sectorsize (67108873)
[  557.902198][T15493] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  557.923248][T15493] F2FS-fs (loop0): invalid crc value
[  558.047595][T15493] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  558.106735][T15493] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  558.114001][T15493] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  558.149012][   T30] audit: type=1800 audit(1763958232.385:320): pid=15493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3489" name="file1" dev="loop0" ino=7 res=0 errno=0
[  558.255239][T15505] input: syz1 as /devices/virtual/input/input44
[  558.784637][T15520] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3499'.
[  559.343376][ T5931] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[  559.536977][ T5931] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  559.567547][ T5931] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  559.620578][ T5931] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  559.717708][ T5931] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  559.766617][T15537] loop7: detected capacity change from 0 to 512
[  559.797024][ T5931] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  559.811853][T15537] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  559.838102][ T5931] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  559.863415][ T5931] usb 7-1: config 0 descriptor??
[  559.914396][T15537] EXT4-fs (loop7): 1 truncate cleaned up
[  559.966290][T15537] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  560.379582][ T5931] plantronics 0003:047F:FFFF.002A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0
[  560.432362][ T9179] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  561.079153][T15555] loop7: detected capacity change from 0 to 64
[  561.178350][T15557] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  561.823517][ T5931] usb 8-1: new high-speed USB device number 18 using dummy_hcd
[  562.009640][ T5931] usb 8-1: Using ep0 maxpacket: 8
[  562.018950][T15572] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.3518'.
[  562.063574][ T5931] usb 8-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[  562.082940][ T5931] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  562.107288][ T5931] usb 8-1: Product: syz
[  562.111491][ T5931] usb 8-1: Manufacturer: syz
[  562.126623][ T5931] usb 8-1: SerialNumber: syz
[  562.148450][ T5931] usb 8-1: config 0 descriptor??
[  562.176740][ T5931] gspca_main: sonixj-2.14.0 probing 0c45:613a
[  562.565120][ T5978] usb 7-1: USB disconnect, device number 17
[  563.112900][T15592] loop0: detected capacity change from 0 to 128
[  563.180784][T15592] syz.0.3527: attempt to access beyond end of device
[  563.180784][T15592] loop0: rw=2049, sector=154, nr_sectors = 6 limit=128
[  563.229504][T15592] syz.0.3527: attempt to access beyond end of device
[  563.229504][T15592] loop0: rw=2049, sector=158, nr_sectors = 2 limit=128
[  563.259343][T15592] Buffer I/O error on dev loop0, logical block 79, lost async page write
[  563.268958][T15592] syz.0.3527: attempt to access beyond end of device
[  563.268958][T15592] loop0: rw=2049, sector=160, nr_sectors = 2 limit=128
[  563.288484][T15592] Buffer I/O error on dev loop0, logical block 80, lost async page write
[  563.310425][T15592] syz.0.3527: attempt to access beyond end of device
[  563.310425][T15592] loop0: rw=2049, sector=162, nr_sectors = 6 limit=128
[  563.354824][T15592] syz.0.3527: attempt to access beyond end of device
[  563.354824][T15592] loop0: rw=2049, sector=166, nr_sectors = 2 limit=128
[  563.389394][T15592] Buffer I/O error on dev loop0, logical block 83, lost async page write
[  563.401590][ T5931] gspca_sonixj: reg_w1 err -71
[  563.432253][T15592] syz.0.3527: attempt to access beyond end of device
[  563.432253][T15592] loop0: rw=2049, sector=168, nr_sectors = 2 limit=128
[  563.483395][ T5931] sonixj 8-1:0.0: probe with driver sonixj failed with error -71
[  563.484801][T15592] Buffer I/O error on dev loop0, logical block 84, lost async page write
[  563.531542][ T5931] usb 8-1: USB disconnect, device number 18
[  563.615254][T15592] syz.0.3527: attempt to access beyond end of device
[  563.615254][T15592] loop0: rw=2049, sector=186, nr_sectors = 6 limit=128
[  563.644844][T15592] syz.0.3527: attempt to access beyond end of device
[  563.644844][T15592] loop0: rw=2049, sector=190, nr_sectors = 2 limit=128
[  563.723492][T15592] Buffer I/O error on dev loop0, logical block 95, lost async page write
[  563.772783][T15592] syz.0.3527: attempt to access beyond end of device
[  563.772783][T15592] loop0: rw=2049, sector=192, nr_sectors = 2 limit=128
[  563.844664][T15592] Buffer I/O error on dev loop0, logical block 96, lost async page write
[  563.853588][T15600] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3531'.
[  563.874474][T15592] syz.0.3527: attempt to access beyond end of device
[  563.874474][T15592] loop0: rw=2049, sector=194, nr_sectors = 6 limit=128
[  564.006235][T15602] loop8: detected capacity change from 0 to 2048
[  564.094234][T15592] Buffer I/O error on dev loop0, logical block 99, lost async page write
[  564.102853][T15592] Buffer I/O error on dev loop0, logical block 100, lost async page write
[  564.113785][T15602] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  564.193520][T15607] IPv6: NLM_F_REPLACE set, but no existing node found!
[  564.211965][T15609] loop1: detected capacity change from 0 to 4096
[  564.315946][T15611] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3535'.
[  564.384786][T15612] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  564.433092][T15602] EXT4-fs error (device loop8): ext4_validate_block_bitmap:440: comm syz.8.3532: bg 0: block 234: padding at end of block bitmap is not set
[  564.535478][T15602] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 202 with error 28
[  564.563378][T15602] EXT4-fs (loop8): This should not happen!! Data will be lost
[  564.563378][T15602] 
[  564.592983][T15602] EXT4-fs (loop8): Total free blocks count 0
[  564.609420][T15602] EXT4-fs (loop8): Free/Dirty block details
[  564.625202][T15602] EXT4-fs (loop8): free_blocks=0
[  564.638334][T15602] EXT4-fs (loop8): dirty_blocks=208
[  564.685032][T15602] EXT4-fs (loop8): Block reservation details
[  564.694662][T15602] EXT4-fs (loop8): i_reserved_data_blocks=13
[  565.158953][T14289] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  565.184396][T15629] netlink: 'syz.0.3542': attribute type 4 has an invalid length.
[  565.319705][T15630] netlink: 'syz.0.3542': attribute type 4 has an invalid length.
[  565.430336][T15632] input: syz0 as /devices/virtual/input/input46
[  565.556852][T15637] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3540'.
[  565.556920][T15637] : renamed from team0 (while UP)
[  565.619174][T15637] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3540'.
[  566.456584][T15658] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3553'.
[  566.504674][T15662] 9pnet_fd: Insufficient options for proto=fd
[  566.528895][ T1006] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  566.529046][T15658] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3553'.
[  566.556953][ T1006] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  566.595756][ T1006] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  566.650400][ T1006] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  566.864823][T15671] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  566.883804][T15671] bridge0: port 1(bridge_slave_0) entered disabled state
[  567.322929][T15679] input: syz0 as /devices/virtual/input/input47
[  567.464650][T15686] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3565'.
[  567.579210][T15686] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3565'.
[  568.012119][T15698] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3569'.
[  568.042042][T15698] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3569'.
[  568.693657][ T5978] usb 8-1: new high-speed USB device number 19 using dummy_hcd
[  568.857026][ T5978] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  568.913329][ T5978] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  568.931650][T15716] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3578'.
[  569.021031][ T5978] usb 8-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  569.039078][ T5978] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  569.075315][ T5978] usb 8-1: Product: syz
[  569.086374][ T5978] usb 8-1: Manufacturer: syz
[  569.094710][ T5978] usb 8-1: SerialNumber: syz
[  569.111833][ T5978] usb 8-1: config 0 descriptor??
[  569.133785][T15709] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  569.151659][T15709] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  569.397136][T15709] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  569.431086][T15709] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  569.664084][ T5910] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  570.324018][   T30] audit: type=1326 audit(1763958244.535:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15733 comm="syz.1.3585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0382d8f749 code=0x7ffc0000
[  570.346450][    C0] vkms_vblank_simulate: vblank timer overrun
[  570.420051][   T30] audit: type=1326 audit(1763958244.535:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15733 comm="syz.1.3585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7f0382d8f749 code=0x7ffc0000
[  570.451533][ T5910] usb 9-1: Using ep0 maxpacket: 16
[  570.477009][ T5910] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  570.508474][ T5978] dm9601 8-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71
[  570.550470][ T5978] dm9601 8-1:0.0 eth13: register 'dm9601' at usb-dummy_hcd.7-1, Davicom DM96xx USB 10/100 Ethernet, 6e:f1:98:9e:dd:08
[  570.611803][ T5978] usb 8-1: USB disconnect, device number 19
[  570.633288][ T5910] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  570.653579][   T30] audit: type=1326 audit(1763958244.535:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15733 comm="syz.1.3585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0382d8f749 code=0x7ffc0000
[  570.663274][ T5910] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  570.685287][ T5910] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  570.698794][ T5910] usb 9-1: config 0 descriptor??
[  570.787531][   T30] audit: type=1326 audit(1763958244.535:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15733 comm="syz.1.3585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0382d8f749 code=0x7ffc0000
[  570.810734][ T5978] dm9601 8-1:0.0 eth13: unregister 'dm9601' usb-dummy_hcd.7-1, Davicom DM96xx USB 10/100 Ethernet
[  570.865916][   T30] audit: type=1326 audit(1763958244.695:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15735 comm="syz.0.3586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc45e18f749 code=0x7ffc0000
[  570.925916][   T30] audit: type=1326 audit(1763958244.695:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15735 comm="syz.0.3586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc45e18f749 code=0x7ffc0000
[  570.948421][    C0] vkms_vblank_simulate: vblank timer overrun
[  570.972832][   T30] audit: type=1326 audit(1763958244.805:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15735 comm="syz.0.3586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc45e18f749 code=0x7ffc0000
[  570.995309][    C0] vkms_vblank_simulate: vblank timer overrun
[  571.043068][   T30] audit: type=1326 audit(1763958244.805:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15735 comm="syz.0.3586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc45e18f749 code=0x7ffc0000
[  571.076059][   T30] audit: type=1326 audit(1763958244.805:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15735 comm="syz.0.3586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc45e18f749 code=0x7ffc0000
[  571.165241][ T5910] HID 045e:07da: Invalid code 65791 type 1
[  571.176063][   T30] audit: type=1326 audit(1763958244.805:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15735 comm="syz.0.3586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc45e18f749 code=0x7ffc0000
[  571.289959][ T5910] input: HID 045e:07da as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:045E:07DA.002B/input/input48
[  571.391013][ T5910] microsoft 0003:045E:07DA.002B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.8-1/input0
[  571.450054][T15746] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  571.457422][T15746] IPv6: NLM_F_CREATE should be set when creating new route
[  571.464729][T15746] IPv6: NLM_F_CREATE should be set when creating new route
[  571.516776][T15747] netlink: 'syz.1.3591': attribute type 1 has an invalid length.
[  571.760521][T15747] 8021q: adding VLAN 0 to HW filter on device bond4
[  571.969274][T15751] bond4: (slave geneve3): making interface the new active one
[  571.986142][T15751] bond4: (slave geneve3): Enslaving as an active interface with an up link
[  572.054829][T15759] loop7: detected capacity change from 0 to 2048
[  572.104671][T15759] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  572.173426][ T5978] usb 9-1: USB disconnect, device number 2
[  572.318563][ T9179] UDF-fs: error (device loop7): udf_verify_fi: directory (ino 1376) has entry where CRC length (32) does not match entry length (24)
[  572.374194][ T9179] UDF-fs: error (device loop7): udf_read_inode: (ino 1317) failed !bh
[  572.400423][ T9179] UDF-fs: error (device loop7): udf_read_inode: (ino 1317) failed !bh
[  572.543485][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  574.473076][   T36] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  574.757341][   T36] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  574.945672][   T36] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  575.185083][   T36] bond0: (slave netdevsim0): Releasing backup interface
[  575.254073][   T36] netdevsim netdevsim7 netdevsim0 (unregistering): left promiscuous mode
[  575.280012][   T36] netdevsim netdevsim7 netdevsim0 (unregistering): left allmulticast mode
[  575.321075][T15824] loop8: detected capacity change from 0 to 4096
[  575.335599][   T36] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  575.458361][T15828] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  575.541092][   T30] kauditd_printk_skb: 11 callbacks suppressed
[  575.541116][   T30] audit: type=1800 audit(1763958249.775:342): pid=15824 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3623" name="file1" dev="loop8" ino=15 res=0 errno=0
[  575.591057][T15823] NILFS error (device loop8): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  575.694827][T15823] Remounting filesystem read-only
[  575.709504][T15832] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  575.709504][T15832] The task syz.1.3625 (15832) triggered the difference, watch for misbehavior.
[  575.769449][T15823] NILFS error (device loop8): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  575.831741][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  575.844661][   T36] bridge_slave_1: left allmulticast mode
[  575.855873][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  575.865112][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  575.872935][   T36] bridge_slave_1: left promiscuous mode
[  575.880027][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  575.896875][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  575.905833][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  575.951448][   T36] bridge_slave_0: left allmulticast mode
[  575.973853][   T36] bridge_slave_0: left promiscuous mode
[  575.983496][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[  576.160788][T14289] NILFS (loop8): disposed unprocessed dirty file(s) when detaching log writer
[  577.189580][   T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  577.212923][   T36] bond_slave_0: left promiscuous mode
[  577.227842][   T36] bond_slave_0: left allmulticast mode
[  577.511172][   T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  577.533982][   T36] bond_slave_1: left promiscuous mode
[  577.551680][   T36] bond_slave_1: left allmulticast mode
[  577.592286][   T36] bond0 (unregistering): (slave team0): Releasing backup interface
[  577.624148][   T36] team0: left promiscuous mode
[  577.656443][   T36] C: left promiscuous mode
[  577.729245][   T36] team_slave_1: left promiscuous mode
[  577.738489][   T36] team0: left allmulticast mode
[  577.744398][   T36] C: left allmulticast mode
[  577.749068][   T36] team_slave_1: left allmulticast mode
[  577.768628][   T36] bond0 (unregistering): Released all slaves
[  577.800227][   T36] bond1 (unregistering): Released all slaves
[  577.800662][T15857] loop8: detected capacity change from 0 to 2048
[  577.874915][T15857] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  577.957072][T15857] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  577.963698][ T5839] Bluetooth: hci2: command tx timeout
[  578.016385][   T36] tipc: Disabling bearer <udp:s>
[  578.059386][   T36] tipc: Left network mode
[  578.087191][T14289] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  578.312019][T15868] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3640'.
[  578.335208][T15868] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3640'.
[  578.405291][T15870] netlink: 5 bytes leftover after parsing attributes in process `syz.8.3637'.
[  578.453741][T15870] netlink: 52 bytes leftover after parsing attributes in process `syz.8.3637'.
[  578.591148][T15873] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3642'.
[  578.593590][   T30] audit: type=1326 audit(1763958252.825:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15876 comm="syz.3.3644" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd8f6d8f749 code=0x0
[  578.626844][T15873] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  578.634200][T15873] IPv6: NLM_F_CREATE should be set when creating new route
[  578.641565][T15873] IPv6: NLM_F_CREATE should be set when creating new route
[  578.677698][T15870] netlink: 5 bytes leftover after parsing attributes in process `syz.8.3637'.
[  578.893532][   T36] hsr_slave_0: left promiscuous mode
[  578.928506][   T36] hsr_slave_1: left promiscuous mode
[  578.945152][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  578.961243][   T30] audit: type=1326 audit(1763958253.195:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15884 comm="syz.8.3647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f129398f749 code=0x7ffc0000
[  578.983906][   T36] batman_adv: batadv0: Removing interface: batadv_slave_0
[  579.014216][   T30] audit: type=1326 audit(1763958253.195:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15884 comm="syz.8.3647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f129398f749 code=0x7ffc0000
[  579.110070][   T30] audit: type=1326 audit(1763958253.225:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15884 comm="syz.8.3647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f129398f749 code=0x7ffc0000
[  579.149991][   T36] veth1_macvtap: left promiscuous mode
[  579.191548][   T36] veth0_macvtap: left promiscuous mode
[  579.257259][T15885] loop0: detected capacity change from 0 to 32768
[  579.266008][   T30] audit: type=1326 audit(1763958253.225:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15884 comm="syz.8.3647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f129398f749 code=0x7ffc0000
[  579.288790][   T30] audit: type=1326 audit(1763958253.225:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15884 comm="syz.8.3647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f129398f749 code=0x7ffc0000
[  579.321231][   T30] audit: type=1326 audit(1763958253.235:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15884 comm="syz.8.3647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f129398f749 code=0x7ffc0000
[  579.340122][   T36] veth1_vlan: left promiscuous mode
[  579.372350][T15885] ocfs2: Slot 0 on device (7,0) was already allocated to this node!
[  579.380447][   T36] veth0_vlan: left promiscuous mode
[  579.416385][   T30] audit: type=1326 audit(1763958253.275:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15884 comm="syz.8.3647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f129398f749 code=0x7ffc0000
[  579.453835][T15885] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  579.485723][T15885] ocfs2: Unmounting device (7,0) on (node local)
[  579.520846][   T30] audit: type=1326 audit(1763958253.335:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15884 comm="syz.8.3647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f129398f749 code=0x7ffc0000
[  580.046088][ T5839] Bluetooth: hci2: command tx timeout
[  581.037107][   T36] team0 (unregistering): Port device team_slave_1 removed
[  581.171179][   T36] team0 (unregistering): Port device C removed
[  581.504030][T15929] Invalid source name
[  581.508215][T15929] UBIFS error (pid: 15929): cannot open "./file0", error -22
[  582.112304][   T30] kauditd_printk_skb: 9 callbacks suppressed
[  582.112331][   T30] audit: type=1326 audit(1763958256.345:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15941 comm="syz.3.3668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8f6d8f749 code=0x7ffc0000
[  582.124192][ T5839] Bluetooth: hci2: command tx timeout
[  582.129720][   T30] audit: type=1326 audit(1763958256.345:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15941 comm="syz.3.3668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8f6d8f749 code=0x7ffc0000
[  582.195442][   T30] audit: type=1326 audit(1763958256.355:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15941 comm="syz.3.3668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8f6d8f749 code=0x7ffc0000
[  582.248746][   T30] audit: type=1326 audit(1763958256.355:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15941 comm="syz.3.3668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd8f6d8f749 code=0x7ffc0000
[  582.271728][   T30] audit: type=1326 audit(1763958256.355:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15941 comm="syz.3.3668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8f6d8f749 code=0x7ffc0000
[  582.304860][   T30] audit: type=1326 audit(1763958256.355:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15941 comm="syz.3.3668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8f6d8f749 code=0x7ffc0000
[  582.342507][   T30] audit: type=1326 audit(1763958256.355:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15941 comm="syz.3.3668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8f6d8f749 code=0x7ffc0000
[  582.387037][   T30] audit: type=1326 audit(1763958256.355:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15941 comm="syz.3.3668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8f6d8f749 code=0x7ffc0000
[  582.413262][   T30] audit: type=1326 audit(1763958256.355:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15941 comm="syz.3.3668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd8f6d8f749 code=0x7ffc0000
[  582.439941][   T30] audit: type=1326 audit(1763958256.355:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15941 comm="syz.3.3668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8f6d8f749 code=0x7ffc0000
[  582.894238][T15952] loop0: detected capacity change from 0 to 512
[  582.931043][T15952] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  582.994928][T15960] overlayfs: failed to clone lowerpath
[  583.022810][T15952] EXT4-fs (loop0): 1 truncate cleaned up
[  583.038915][T15960] overlayfs: failed to clone lowerpath
[  583.073788][T15952] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  583.334724][T15833] chnl_net:caif_netlink_parms(): no params data found
[  583.411239][ T5830] EXT4-fs error (device loop0): htree_dirblock_to_tree:1077: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  583.763007][   T36] IPVS: stop unused estimator thread 0...
[  583.786086][ T6784] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  584.015168][T15833] bridge0: port 1(bridge_slave_0) entered blocking state
[  584.033643][T15985] overlayfs: failed to clone upperpath
[  584.039392][T15833] bridge0: port 1(bridge_slave_0) entered disabled state
[  584.061316][T15833] bridge_slave_0: entered allmulticast mode
[  584.090725][T15833] bridge_slave_0: entered promiscuous mode
[  584.120867][T15833] bridge0: port 2(bridge_slave_1) entered blocking state
[  584.146782][T15833] bridge0: port 2(bridge_slave_1) entered disabled state
[  584.168607][T15833] bridge_slave_1: entered allmulticast mode
[  584.193336][T15833] bridge_slave_1: entered promiscuous mode
[  584.206071][ T5839] Bluetooth: hci2: command tx timeout
[  584.319300][T15833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  584.364709][T15833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  584.525317][T15833] team0: Port device team_slave_0 added
[  584.547414][T15833] team0: Port device team_slave_1 added
[  584.715906][T15833] batman_adv: batadv0: Adding interface: batadv_slave_0
[  584.746749][T15833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  584.837065][T15833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  585.003106][T15833] batman_adv: batadv0: Adding interface: batadv_slave_1
[  585.042202][T15833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  585.153299][T15833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  585.478812][T15833] hsr_slave_0: entered promiscuous mode
[  585.482536][T16012] overlayfs: failed to resolve './cgroup': -2
[  585.490495][T15833] hsr_slave_1: entered promiscuous mode
[  585.497567][T15833] debugfs: 'hsr0' already exists in 'hsr'
[  585.543458][T15833] Cannot create hsr debugfs directory
[  585.563487][ T5978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  585.628456][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  585.641852][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  585.650527][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  585.660964][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  585.669857][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  585.837327][T16022] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  585.847837][ T1556] IPVS: starting estimator thread 0...
[  585.993872][T16023] IPVS: using max 22 ests per chain, 52800 per kthread
[  586.008381][T16025] netlink: 'syz.6.3702': attribute type 1 has an invalid length.
[  586.034822][T16025] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  586.109681][T16025] netlink: 'syz.6.3702': attribute type 1 has an invalid length.
[  586.146813][T16025] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  586.154101][T16025] IPv6: NLM_F_CREATE should be set when creating new route
[  586.283828][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  586.328853][T16032] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3705'.
[  586.630288][T16044] netlink: 'syz.1.3709': attribute type 1 has an invalid length.
[  586.879949][T16044] 8021q: adding VLAN 0 to HW filter on device bond5
[  587.018726][T16047] bond5: (slave ip6erspan0): making interface the new active one
[  587.031081][T16047] bond5: (slave ip6erspan0): Enslaving as an active interface with an up link
[  587.324187][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  587.499719][T15833] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  587.527684][T15833] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  587.559050][T16067] loop8: detected capacity change from 0 to 128
[  587.566071][T15833] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  587.598868][T15833] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  587.607819][T16067] bio_check_eod: 2 callbacks suppressed
[  587.607842][T16067] syz.8.3715: attempt to access beyond end of device
[  587.607842][T16067] loop8: rw=2049, sector=154, nr_sectors = 6 limit=128
[  587.631721][T16067] syz.8.3715: attempt to access beyond end of device
[  587.631721][T16067] loop8: rw=2049, sector=158, nr_sectors = 2 limit=128
[  587.650987][T16067] Buffer I/O error on dev loop8, logical block 79, lost async page write
[  587.652102][T16013] chnl_net:caif_netlink_parms(): no params data found
[  587.662882][T16067] syz.8.3715: attempt to access beyond end of device
[  587.662882][T16067] loop8: rw=2049, sector=160, nr_sectors = 2 limit=128
[  587.681180][T16067] Buffer I/O error on dev loop8, logical block 80, lost async page write
[  587.698403][T16067] syz.8.3715: attempt to access beyond end of device
[  587.698403][T16067] loop8: rw=2049, sector=162, nr_sectors = 6 limit=128
[  587.716190][T16067] syz.8.3715: attempt to access beyond end of device
[  587.716190][T16067] loop8: rw=2049, sector=166, nr_sectors = 2 limit=128
[  587.731334][ T5846] Bluetooth: hci0: command tx timeout
[  587.742350][T16067] Buffer I/O error on dev loop8, logical block 83, lost async page write
[  587.752120][T16067] syz.8.3715: attempt to access beyond end of device
[  587.752120][T16067] loop8: rw=2049, sector=168, nr_sectors = 2 limit=128
[  587.767696][T16067] Buffer I/O error on dev loop8, logical block 84, lost async page write
[  587.777935][T16067] syz.8.3715: attempt to access beyond end of device
[  587.777935][T16067] loop8: rw=2049, sector=186, nr_sectors = 6 limit=128
[  587.796269][T16067] syz.8.3715: attempt to access beyond end of device
[  587.796269][T16067] loop8: rw=2049, sector=190, nr_sectors = 2 limit=128
[  587.823523][T16067] Buffer I/O error on dev loop8, logical block 95, lost async page write
[  587.849136][T16067] syz.8.3715: attempt to access beyond end of device
[  587.849136][T16067] loop8: rw=2049, sector=192, nr_sectors = 2 limit=128
[  587.985407][T16067] Buffer I/O error on dev loop8, logical block 96, lost async page write
[  588.046022][T16067] syz.8.3715: attempt to access beyond end of device
[  588.046022][T16067] loop8: rw=2049, sector=194, nr_sectors = 6 limit=128
[  588.167226][T16067] Buffer I/O error on dev loop8, logical block 99, lost async page write
[  588.191827][T16067] Buffer I/O error on dev loop8, logical block 100, lost async page write
[  588.279400][T16067] Buffer I/O error on dev loop8, logical block 111, lost async page write
[  588.313071][T16067] Buffer I/O error on dev loop8, logical block 112, lost async page write
[  588.363963][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  588.441988][T16013] bridge0: port 1(bridge_slave_0) entered blocking state
[  588.466698][T16013] bridge0: port 1(bridge_slave_0) entered disabled state
[  588.486875][T16013] bridge_slave_0: entered allmulticast mode
[  588.503638][T16013] bridge_slave_0: entered promiscuous mode
[  588.516250][T16013] bridge0: port 2(bridge_slave_1) entered blocking state
[  588.537301][T16013] bridge0: port 2(bridge_slave_1) entered disabled state
[  588.553714][T16013] bridge_slave_1: entered allmulticast mode
[  588.565904][T16013] bridge_slave_1: entered promiscuous mode
[  588.643401][ T5978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  588.825339][T16013] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  588.869413][T16013] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  589.020594][T16013] team0: Port device team_slave_0 added
[  589.054328][T16013] team0: Port device team_slave_1 added
[  589.123381][ T1556] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  589.142602][T16013] batman_adv: batadv0: Adding interface: batadv_slave_0
[  589.158604][T16013] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  589.189285][T16013] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  589.215791][T16013] batman_adv: batadv0: Adding interface: batadv_slave_1
[  589.230601][T16013] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  589.256749][    C1] vkms_vblank_simulate: vblank timer overrun
[  589.273882][T16013] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  589.294617][ T1556] usb 9-1: Using ep0 maxpacket: 16
[  589.306301][ T1556] usb 9-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  589.326992][ T1556] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  589.350495][ T1556] usb 9-1: Product: syz
[  589.360622][ T1556] usb 9-1: Manufacturer: syz
[  589.367503][ T1556] usb 9-1: SerialNumber: syz
[  589.385858][ T1556] usb 9-1: config 0 descriptor??
[  589.397712][T16013] hsr_slave_0: entered promiscuous mode
[  589.404534][   T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  589.417323][ T1556] ssu100 9-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  589.425075][T16013] hsr_slave_1: entered promiscuous mode
[  589.439995][T16013] debugfs: 'hsr0' already exists in 'hsr'
[  589.447931][T16013] Cannot create hsr debugfs directory
[  589.538423][T15833] 8021q: adding VLAN 0 to HW filter on device bond0
[  589.670469][T15833] 8021q: adding VLAN 0 to HW filter on device team0
[  589.756426][ T1006] bridge0: port 1(bridge_slave_0) entered blocking state
[  589.763744][ T1006] bridge0: port 1(bridge_slave_0) entered forwarding state
[  589.806194][ T5846] Bluetooth: hci0: command tx timeout
[  589.909436][ T1006] bridge0: port 2(bridge_slave_1) entered blocking state
[  589.916644][ T1006] bridge0: port 2(bridge_slave_1) entered forwarding state
[  589.974069][T16100] netlink: 'syz.6.3729': attribute type 12 has an invalid length.
[  589.984218][T16100] netlink: 'syz.6.3729': attribute type 29 has an invalid length.
[  589.992290][T16100] netlink: 148 bytes leftover after parsing attributes in process `syz.6.3729'.
[  590.004818][T16100] netlink: 51 bytes leftover after parsing attributes in process `syz.6.3729'.
[  590.457662][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  590.617371][ T1556] ssu100 9-1:0.0: probe with driver ssu100 failed with error -71
[  590.655061][ T1556] usb 9-1: USB disconnect, device number 3
[  590.769566][T16112] netlink: 276 bytes leftover after parsing attributes in process `syz.3.3733'.
[  590.821656][T16112] netlink: 276 bytes leftover after parsing attributes in process `syz.3.3733'.
[  590.879171][T16114] overlayfs: failed to clone upperpath
[  591.279320][T15833] 8021q: adding VLAN 0 to HW filter on device batadv0
[  591.529956][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  591.724201][ T5992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  591.855701][T16013] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  591.883406][ T5846] Bluetooth: hci0: command tx timeout
[  591.914240][T16013] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  591.938628][T16013] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  592.193648][T16013] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  592.611662][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  592.698945][T15833] veth0_vlan: entered promiscuous mode
[  592.760201][T16155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  592.797208][T15833] veth1_vlan: entered promiscuous mode
[  592.945797][T16013] 8021q: adding VLAN 0 to HW filter on device bond0
[  592.978273][T15833] veth0_macvtap: entered promiscuous mode
[  593.008003][ T5992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  593.035035][T15833] veth1_macvtap: entered promiscuous mode
[  593.045051][ T1006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  593.064716][ T5992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  593.075714][ T1556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  593.077936][T16013] 8021q: adding VLAN 0 to HW filter on device team0
[  593.121927][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  593.129174][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  593.218155][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  593.225376][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  593.304773][T15833] batman_adv: batadv0: Interface activated: batadv_slave_0
[  593.359720][T15833] batman_adv: batadv0: Interface activated: batadv_slave_1
[  593.400816][   T12] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  593.415174][   T12] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  593.431807][   T12] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  593.442305][   T12] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  593.658133][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  593.700694][ T9324] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  593.722626][ T9324] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  593.741123][T16182] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3754'.
[  593.830387][ T9324] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  593.852684][ T9324] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  593.964697][ T5846] Bluetooth: hci0: command tx timeout
[  594.139717][T16013] 8021q: adding VLAN 0 to HW filter on device batadv0
[  594.420325][T16200] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  594.576760][T16204] loop8: detected capacity change from 0 to 1024
[  594.821935][   T13] hfsplus: b-tree write err: -5, ino 4
[  595.179741][T16212] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993
[  595.506702][T16013] veth0_vlan: entered promiscuous mode
[  595.562042][T16013] veth1_vlan: entered promiscuous mode
[  595.698732][T16013] veth0_macvtap: entered promiscuous mode
[  595.755274][T16013] veth1_macvtap: entered promiscuous mode
[  595.785503][T16229] loop8: detected capacity change from 0 to 128
[  595.860742][T16013] batman_adv: batadv0: Interface activated: batadv_slave_0
[  595.937327][T16013] batman_adv: batadv0: Interface activated: batadv_slave_1
[  596.009540][   T60] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  596.039023][   T60] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  596.058812][   T60] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  596.098912][   T60] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  596.457556][T16242] netlink: 'syz.6.3775': attribute type 10 has an invalid length.
[  596.474093][T15496] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  596.490215][T15496] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  596.526313][T16245] overlayfs: failed to clone lowerpath
[  596.531433][T16242] bridge0: port 3(dummy0) entered disabled state
[  596.584542][T16242] dummy0: left allmulticast mode
[  596.593630][T16242] dummy0: left promiscuous mode
[  596.609176][T16242] bridge0: port 3(dummy0) entered disabled state
[  596.772740][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  596.778749][   T44] net_ratelimit: 9 callbacks suppressed
[  596.778771][   T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  596.805379][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  597.516752][T16272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  597.577989][T16272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  597.629952][T16272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  597.679646][T16275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  597.743882][T16275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  597.788197][T16275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  597.803839][ T5992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  597.811940][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  597.827380][T16283] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3791'.
[  597.837056][T16275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  598.189653][T16283] hsr_slave_1 (unregistering): left promiscuous mode
[  598.203853][ T5917] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  598.362368][ T5917] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  598.392895][ T5917] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  598.452280][ T5917] usb 6-1: config 0 descriptor??
[  598.563742][T16295] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3797'.
[  598.726579][T16299] loop9: detected capacity change from 0 to 128
[  598.849906][ T1006] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  598.955675][T16299] bio_check_eod: 20 callbacks suppressed
[  598.955702][T16299] syz.9.3799: attempt to access beyond end of device
[  598.955702][T16299] loop9: rw=2049, sector=154, nr_sectors = 6 limit=128
[  599.014556][T16299] syz.9.3799: attempt to access beyond end of device
[  599.014556][T16299] loop9: rw=2049, sector=158, nr_sectors = 2 limit=128
[  599.039469][T16299] buffer_io_error: 10 callbacks suppressed
[  599.039495][T16299] Buffer I/O error on dev loop9, logical block 79, lost async page write
[  599.078336][T16299] syz.9.3799: attempt to access beyond end of device
[  599.078336][T16299] loop9: rw=2049, sector=160, nr_sectors = 2 limit=128
[  599.119089][T16299] Buffer I/O error on dev loop9, logical block 80, lost async page write
[  599.149668][T16299] syz.9.3799: attempt to access beyond end of device
[  599.149668][T16299] loop9: rw=2049, sector=162, nr_sectors = 6 limit=128
[  599.157320][ T1006] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  599.195097][T16299] syz.9.3799: attempt to access beyond end of device
[  599.195097][T16299] loop9: rw=2049, sector=166, nr_sectors = 2 limit=128
[  599.231188][T16299] Buffer I/O error on dev loop9, logical block 83, lost async page write
[  599.260366][T16299] syz.9.3799: attempt to access beyond end of device
[  599.260366][T16299] loop9: rw=2049, sector=168, nr_sectors = 2 limit=128
[  599.291137][T16299] Buffer I/O error on dev loop9, logical block 84, lost async page write
[  599.318350][T16299] syz.9.3799: attempt to access beyond end of device
[  599.318350][T16299] loop9: rw=2049, sector=186, nr_sectors = 6 limit=128
[  599.336715][ T1006] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  599.354857][T16299] syz.9.3799: attempt to access beyond end of device
[  599.354857][T16299] loop9: rw=2049, sector=190, nr_sectors = 2 limit=128
[  599.381198][T16299] Buffer I/O error on dev loop9, logical block 95, lost async page write
[  599.400402][T16299] syz.9.3799: attempt to access beyond end of device
[  599.400402][T16299] loop9: rw=2049, sector=192, nr_sectors = 2 limit=128
[  599.483555][T16299] Buffer I/O error on dev loop9, logical block 96, lost async page write
[  599.516510][T16299] syz.9.3799: attempt to access beyond end of device
[  599.516510][T16299] loop9: rw=2049, sector=194, nr_sectors = 6 limit=128
[  599.516872][T16307] netlink: 'syz.1.3814': attribute type 1 has an invalid length.
[  599.587678][ T1006] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  599.703361][ T5917] usb 6-1: Cannot set autoneg
[  599.708865][ T5917] MOSCHIP usb-ethernet driver 6-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[  599.777726][T16307] bond6: entered promiscuous mode
[  599.785319][ T5917] usb 6-1: USB disconnect, device number 12
[  599.827243][T16307] 8021q: adding VLAN 0 to HW filter on device bond6
[  599.922046][T16310] 8021q: adding VLAN 0 to HW filter on device bond6
[  599.954035][T16310] bond6: (slave gre1): The slave device specified does not support setting the MAC address
[  599.979110][T16310] bond6: (slave gre1): Setting fail_over_mac to active for active-backup mode
[  600.037223][T16310] bond6: (slave gre1): making interface the new active one
[  600.055350][T16310] gre1: entered promiscuous mode
[  600.073306][ T1556] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[  600.081443][T16310] bond6: (slave gre1): Enslaving as an active interface with an up link
[  600.105337][T16317] vlan2: entered allmulticast mode
[  600.112601][T16317] bridge0: port 3(vlan2) entered blocking state
[  600.127851][T16317] bridge0: port 3(vlan2) entered disabled state
[  600.153816][T16317] vlan2: entered promiscuous mode
[  600.240537][ T1556] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  600.270597][ T1556] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  600.317798][ T1556] usb 7-1: Product: syz
[  600.336516][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  600.352708][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  600.364927][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  600.376733][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  600.389463][ T1556] usb 7-1: Manufacturer: syz
[  600.394577][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  600.415861][ T1556] usb 7-1: SerialNumber: syz
[  600.458367][ T1556] usb 7-1: config 0 descriptor??
[  600.661046][ T1006] bridge_slave_1: left allmulticast mode
[  600.670385][ T1006] bridge_slave_1: left promiscuous mode
[  600.688051][ T1006] bridge0: port 2(bridge_slave_1) entered disabled state
[  600.766795][ T1006] bridge_slave_0: left allmulticast mode
[  600.772639][ T1006] bridge_slave_0: left promiscuous mode
[  600.779162][ T1006] bridge0: port 1(bridge_slave_0) entered disabled state
[  600.791908][ T5917] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  600.984345][ T5917] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  600.996210][ T5917] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  601.038125][ T5917] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  601.053844][ T5917] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  601.088006][ T5917] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  601.099926][ T5917] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  601.130895][ T5917] usb 6-1: config 0 descriptor??
[  601.182996][T16334] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3812'.
[  601.240760][ T1006] batman_adv: batadv0: Removing interface: gretap1
[  601.521484][ T1556] usb 7-1: non-Atmel transceiver xxxx5401
[  601.607763][ T5917] plantronics 0003:047F:FFFF.002C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[  601.710950][ T1006] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  601.733098][ T1556] usb 7-1: Firmware version (0.0) predates our first public release.
[  601.754637][ T1556] usb 7-1: Please update to version 0.2 or newer
[  601.762107][ T1006] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  601.770354][ T1556] usb 7-1: atusb_probe: initialization failed, error = -19
[  601.822075][ T1556] usb 7-1: USB disconnect, device number 18
[  601.825499][ T1006] bond0 (unregistering): Released all slaves
[  601.931446][   T44] usb 6-1: USB disconnect, device number 13
[  602.051246][   T24] net_ratelimit: 16 callbacks suppressed
[  602.051276][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  602.523467][ T5839] Bluetooth: hci1: command tx timeout
[  602.877093][ T1006] hsr_slave_0: left promiscuous mode
[  602.911774][ T1006] hsr_slave_1: left promiscuous mode
[  602.924776][ T1006] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  602.932285][ T1006] batman_adv: batadv0: Removing interface: batadv_slave_0
[  602.962230][ T1006] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  602.990644][ T1006] batman_adv: batadv0: Removing interface: batadv_slave_1
[  603.085174][   T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  603.156284][ T1006] veth1_macvtap: left promiscuous mode
[  603.185866][ T1006] veth0_macvtap: left promiscuous mode
[  603.192117][ T1006] veth1_vlan: left promiscuous mode
[  603.218817][ T1006] veth0_vlan: left promiscuous mode
[  603.789654][T16383] loop5: detected capacity change from 0 to 128
[  603.888268][ T1556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  603.958538][T16383] Buffer I/O error on dev loop5, logical block 79, lost async page write
[  603.991455][T16383] bio_check_eod: 2 callbacks suppressed
[  603.991481][T16383] syz.5.3831: attempt to access beyond end of device
[  603.991481][T16383] loop5: rw=2049, sector=160, nr_sectors = 2 limit=128
[  604.036623][T16383] Buffer I/O error on dev loop5, logical block 80, lost async page write
[  604.075522][T16383] syz.5.3831: attempt to access beyond end of device
[  604.075522][T16383] loop5: rw=2049, sector=162, nr_sectors = 6 limit=128
[  604.118213][T16383] syz.5.3831: attempt to access beyond end of device
[  604.118213][T16383] loop5: rw=2049, sector=166, nr_sectors = 2 limit=128
[  604.141924][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  604.172057][T16383] Buffer I/O error on dev loop5, logical block 83, lost async page write
[  604.206708][T16383] syz.5.3831: attempt to access beyond end of device
[  604.206708][T16383] loop5: rw=2049, sector=168, nr_sectors = 2 limit=128
[  604.233358][T16383] Buffer I/O error on dev loop5, logical block 84, lost async page write
[  604.249126][T16383] syz.5.3831: attempt to access beyond end of device
[  604.249126][T16383] loop5: rw=2049, sector=186, nr_sectors = 6 limit=128
[  604.269814][T16383] syz.5.3831: attempt to access beyond end of device
[  604.269814][T16383] loop5: rw=2049, sector=190, nr_sectors = 2 limit=128
[  604.313672][T16383] Buffer I/O error on dev loop5, logical block 95, lost async page write
[  604.331195][T16383] syz.5.3831: attempt to access beyond end of device
[  604.331195][T16383] loop5: rw=2049, sector=192, nr_sectors = 2 limit=128
[  604.366604][T16383] Buffer I/O error on dev loop5, logical block 96, lost async page write
[  604.396767][T16383] syz.5.3831: attempt to access beyond end of device
[  604.396767][T16383] loop5: rw=2049, sector=194, nr_sectors = 6 limit=128
[  604.440229][T16383] syz.5.3831: attempt to access beyond end of device
[  604.440229][T16383] loop5: rw=2049, sector=198, nr_sectors = 2 limit=128
[  604.454730][T16383] Buffer I/O error on dev loop5, logical block 99, lost async page write
[  604.486569][T16383] syz.5.3831: attempt to access beyond end of device
[  604.486569][T16383] loop5: rw=2049, sector=200, nr_sectors = 2 limit=128
[  604.512445][T16383] Buffer I/O error on dev loop5, logical block 100, lost async page write
[  604.598430][T16383] Buffer I/O error on dev loop5, logical block 111, lost async page write
[  604.616185][ T5839] Bluetooth: hci1: command tx timeout
[  604.626514][T16383] Buffer I/O error on dev loop5, logical block 112, lost async page write
[  604.688673][T16383] Buffer I/O error on dev loop5, logical block 115, lost async page write
[  604.700346][T16383] Buffer I/O error on dev loop5, logical block 116, lost async page write
[  605.171690][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  605.587307][ T1006] team0 (unregistering): Port device team_slave_1 removed
[  605.735558][ T1006] team0 (unregistering): Port device team_slave_0 removed
[  606.213743][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  606.347685][T16428] netlink: 'syz.5.3848': attribute type 13 has an invalid length.
[  606.364703][T16428] netlink: 'syz.5.3848': attribute type 17 has an invalid length.
[  606.683394][ T5839] Bluetooth: hci1: command tx timeout
[  606.923575][ T5978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  607.049407][T16428] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  607.171951][T16318] chnl_net:caif_netlink_parms(): no params data found
[  607.245542][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  607.512359][T16459] Bluetooth: MGMT ver 1.23
[  607.692168][T16318] bridge0: port 1(bridge_slave_0) entered blocking state
[  607.709351][T16318] bridge0: port 1(bridge_slave_0) entered disabled state
[  607.726531][T16318] bridge_slave_0: entered allmulticast mode
[  607.781496][T16318] bridge_slave_0: entered promiscuous mode
[  607.888694][T16471] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3863'.
[  607.987242][T16318] bridge0: port 2(bridge_slave_1) entered blocking state
[  608.019937][T16318] bridge0: port 2(bridge_slave_1) entered disabled state
[  608.048351][T16318] bridge_slave_1: entered allmulticast mode
[  608.085982][T16318] bridge_slave_1: entered promiscuous mode
[  608.186459][T16471] bridge_slave_1: left allmulticast mode
[  608.207579][T16471] bridge_slave_1: left promiscuous mode
[  608.220407][T16471] bridge0: port 2(bridge_slave_1) entered disabled state
[  608.231311][T16471] bridge_slave_0: left allmulticast mode
[  608.242471][T16471] bridge_slave_0: left promiscuous mode
[  608.248592][T16471] bridge0: port 1(bridge_slave_0) entered disabled state
[  608.294364][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  608.367701][ T5978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  608.482417][T16318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  608.537938][T16318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  608.763391][ T5839] Bluetooth: hci1: command tx timeout
[  608.975697][T16318] team0: Port device team_slave_0 added
[  608.986441][T16318] team0: Port device team_slave_1 added
[  609.281035][T16318] batman_adv: batadv0: Adding interface: batadv_slave_0
[  609.309839][T16318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  609.343345][   T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  609.422606][T16318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  609.604730][ T1006] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  609.721417][T16318] batman_adv: batadv0: Adding interface: batadv_slave_1
[  609.773110][T16318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  609.876877][T16520] loop5: detected capacity change from 0 to 128
[  609.888281][T16318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  609.963637][ T5992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  610.005871][   T30] kauditd_printk_skb: 28 callbacks suppressed
[  610.005897][   T30] audit: type=1800 audit(1763958284.245:399): pid=16524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3885" name="bus" dev="loop5" ino=1048707 res=0 errno=0
[  610.137875][ T1006] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  610.198659][T16524] bio_check_eod: 6 callbacks suppressed
[  610.198686][T16524] syz.5.3885: attempt to access beyond end of device
[  610.198686][T16524] loop5: rw=2049, sector=777, nr_sectors = 264 limit=128
[  610.218959][   T44] usb 7-1: new high-speed USB device number 19 using dummy_hcd
[  610.369926][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  610.381057][   T44] usb 7-1: Using ep0 maxpacket: 32
[  610.410992][   T44] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  610.420564][   T44] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  610.434844][ T1006] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  610.474597][   T44] usb 7-1: config 0 descriptor??
[  610.578404][T16318] hsr_slave_0: entered promiscuous mode
[  610.637296][T16318] hsr_slave_1: entered promiscuous mode
[  610.656446][T16318] debugfs: 'hsr0' already exists in 'hsr'
[  610.662519][T16318] Cannot create hsr debugfs directory
[  610.711315][   T44] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  610.754563][   T44] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  610.804401][   T44] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  610.811605][   T44] usb 7-1: media controller created
[  610.940979][   T44] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  611.012354][   T44] az6027: usb out operation failed. (-71)
[  611.032603][   T44] az6027: usb out operation failed. (-71)
[  611.047676][   T44] stb0899_attach: Driver disabled by Kconfig
[  611.054068][   T44] az6027: no front-end attached
[  611.054068][   T44] 
[  611.061780][ T1006] bond0: (slave netdevsim0): Releasing backup interface
[  611.074442][   T44] az6027: usb out operation failed. (-71)
[  611.080200][   T44] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  611.104388][   T44] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input50
[  611.133997][   T44] dvb-usb: schedule remote query interval to 400 msecs.
[  611.146378][   T44] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  611.158530][ T1006] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  611.177830][   T44] usb 7-1: USB disconnect, device number 19
[  611.349317][   T44] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  611.404812][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  612.019389][T16551] tls_set_device_offload_rx: netdev not found
[  612.247984][T16556] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3898'.
[  612.457002][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  612.791643][T16556] hsr_slave_1 (unregistering): left promiscuous mode
[  612.875436][T16563] loop9: detected capacity change from 0 to 4096
[  613.000041][   T30] audit: type=1804 audit(1763958287.235:400): pid=16563 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.3901" name="/newroot/20/bus/bus" dev="loop9" ino=33 res=1 errno=0
[  613.001733][T16560] batadv_slave_1: entered promiscuous mode
[  613.032346][T16563] Invalid ELF header len 13
[  613.053314][ T5992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  613.093422][T16564] ip6tnl0: entered promiscuous mode
[  613.290494][ T1006] team0: left allmulticast mode
[  613.295902][ T1006] team_slave_1: left allmulticast mode
[  613.301380][ T1006] geneve0: left allmulticast mode
[  613.345947][ T1006] team0: left promiscuous mode
[  613.356577][ T1006] team_slave_1: left promiscuous mode
[  613.372424][ T1006] geneve0: left promiscuous mode
[  613.379629][ T1006] bridge0: port 3(team0) entered disabled state
[  613.435348][ T1006] bridge_slave_1: left allmulticast mode
[  613.448676][ T1006] bridge_slave_1: left promiscuous mode
[  613.463706][ T1006] bridge0: port 2(bridge_slave_1) entered disabled state
[  613.476333][ T1006] bridge_slave_0: left allmulticast mode
[  613.486382][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  613.521303][ T1006] bridge_slave_0: left promiscuous mode
[  613.538555][ T1006] bridge0: port 1(bridge_slave_0) entered disabled state
[  614.406214][T16613] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3916'.
[  614.530440][   T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  614.695662][ T1006] team0: Port device geneve0 removed
[  614.970975][ T1006] team0: Port device bridge2 removed
[  615.573285][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  615.637193][ T1006] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  615.651195][ T1006] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  615.675834][ T1006] bond0 (unregistering): Released all slaves
[  615.731821][T16559] ip6tnl0: left promiscuous mode
[  615.745162][T16559] batadv_slave_1: left promiscuous mode
[  615.797853][T16643] IPv4: Oversized IP packet from 127.202.26.0
[  615.846434][T16640] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  616.125507][ T5978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  616.302193][T16318] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  616.380930][T16318] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  616.410533][T16318] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  616.437950][T16318] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  616.603552][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  616.724551][T16667] overlayfs: failed to resolve './file0/../file0': -2
[  616.840130][T16318] 8021q: adding VLAN 0 to HW filter on device bond0
[  616.898727][T16318] 8021q: adding VLAN 0 to HW filter on device team0
[  616.933217][   T60] bridge0: port 1(bridge_slave_0) entered blocking state
[  616.940440][   T60] bridge0: port 1(bridge_slave_0) entered forwarding state
[  617.007090][   T60] bridge0: port 2(bridge_slave_1) entered blocking state
[  617.014344][   T60] bridge0: port 2(bridge_slave_1) entered forwarding state
[  617.644735][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  617.965764][ T5978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  618.016860][ T1006] hsr_slave_1: left promiscuous mode
[  618.024333][T16703] loop5: detected capacity change from 0 to 512
[  618.030032][ T1006] batman_adv: batadv0: Removing interface: batadv_slave_1
[  618.038346][T16703] EXT4-fs: Ignoring removed oldalloc option
[  618.090768][T16703] EXT4-fs (loop5): 1 truncate cleaned up
[  618.105040][T16703] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  618.208761][T16710] loop9: detected capacity change from 0 to 256
[  618.308721][T16013] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  618.638071][T16716] tls_set_device_offload: netdev not found
[  618.694776][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  618.713380][   T24] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  618.873651][   T24] usb 6-1: Using ep0 maxpacket: 16
[  618.888459][   T24] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  618.902673][ T1006] team0 (unregistering): Port device team_slave_1 removed
[  618.928704][   T24] usb 6-1: config 0 interface 0 has no altsetting 0
[  618.935996][   T24] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  618.959966][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  618.973544][   T24] usb 6-1: config 0 descriptor??
[  619.039446][ T1006] team0 (unregistering): Port device team_slave_0 removed
[  619.177316][ T5992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  619.421401][   T24] nzxt-smart2 0003:1E71:2009.002D: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.5-1/input0
[  619.663360][ T5978] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  619.733878][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  619.827026][ T5978] usb 10-1: Using ep0 maxpacket: 16
[  619.837735][ T5978] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  619.848315][ T5978] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  619.859492][ T5978] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  619.875125][ T1556] usb 6-1: USB disconnect, device number 14
[  619.883048][ T5978] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  619.894125][ T5978] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  619.923376][ T5978] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  619.939867][ T5978] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  619.962230][T16318] 8021q: adding VLAN 0 to HW filter on device batadv0
[  619.972625][ T5978] usb 10-1: Manufacturer: syz
[  619.995229][ T5978] usb 10-1: config 0 descriptor??
[  620.366132][ T5978] rc_core: IR keymap rc-hauppauge not found
[  620.372081][ T5978] Registered IR keymap rc-empty
[  620.394352][ T5978] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  620.433730][ T5978] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  620.460929][ T5978] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0
[  620.515686][ T5978] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input51
[  620.696040][ T5978] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  620.764459][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  620.775177][ T5978] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  620.794807][ T5978] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  620.817406][ T5978] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  620.859041][ T1006] IPVS: stop unused estimator thread 0...
[  620.886697][ T5978] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  620.900585][T16318] veth0_vlan: entered promiscuous mode
[  620.920457][T16318] veth1_vlan: entered promiscuous mode
[  620.933448][ T5978] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  620.962417][ T5978] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  621.003876][ T5978] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  621.043894][ T5978] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  621.085281][ T5978] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  621.096703][T16318] veth0_macvtap: entered promiscuous mode
[  621.115765][ T5978] mceusb 10-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  621.125367][T16318] veth1_macvtap: entered promiscuous mode
[  621.146413][ T5978] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  621.186502][T16318] batman_adv: batadv0: Interface activated: batadv_slave_0
[  621.197890][ T5978] usb 10-1: USB disconnect, device number 2
[  621.210471][ T6015] udevd[6015]: failed to send result of seq 23653 to main daemon: Connection refused
[  621.238708][T16318] batman_adv: batadv0: Interface activated: batadv_slave_1
[  621.346309][   T60] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  621.392779][   T60] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  621.444619][   T60] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  621.477119][   T60] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  621.682286][   T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  621.725186][   T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  621.799456][   T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  621.815445][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  621.826454][   T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  621.866393][T16771] loop5: detected capacity change from 0 to 1024
[  621.882156][T16771] EXT4-fs: Ignoring removed orlov option
[  621.915523][T16775] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3977'.
[  621.925622][T16771] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  621.971227][   T30] audit: type=1800 audit(1763958296.205:401): pid=16771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3976" name="bus" dev="loop5" ino=18 res=0 errno=0
[  621.998518][   T30] audit: type=1804 audit(1763958296.205:402): pid=16771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.3976" name="/newroot/44/bus/bus" dev="loop5" ino=18 res=1 errno=0
[  622.061119][T16778] loop8: detected capacity change from 0 to 1024
[  622.072236][T16778] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  622.091930][T16775] vlan2: left promiscuous mode
[  622.092462][T16778] EXT4-fs (loop8): revision level too high, forcing read-only mode
[  622.105548][T16778] EXT4-fs (loop8): orphan cleanup on readonly fs
[  622.112609][T16775] bridge0: port 3(vlan2) entered disabled state
[  622.120211][T16778] EXT4-fs error (device loop8): ext4_free_blocks:6705: comm syz.8.3800: Freeing blocks not in datazone - block = 0, count = 4096
[  622.145064][T16778] EXT4-fs (loop8): 1 orphan inode deleted
[  622.153603][T16778] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  622.171168][T16775] bridge_slave_1: left allmulticast mode
[  622.200299][T16775] bridge_slave_1: left promiscuous mode
[  622.207022][ T1556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  622.220483][T16318] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  622.229708][T16775] bridge0: port 2(bridge_slave_1) entered disabled state
[  622.267987][T16775] bridge_slave_0: left promiscuous mode
[  622.276524][T16775] bridge0: port 1(bridge_slave_0) entered disabled state
[  622.801138][T16013] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  622.853991][T16175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  623.618052][T16811] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3991'.
[  623.873936][T16821] overlayfs: failed to clone upperpath
[  623.883907][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  624.067821][   T30] audit: type=1326 audit(1763958298.295:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16826 comm="syz.6.3997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4b858f749 code=0x7ffc0000
[  624.119177][   T30] audit: type=1326 audit(1763958298.295:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16826 comm="syz.6.3997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4b858f749 code=0x7ffc0000
[  624.144368][T16832] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3996'.
[  624.178428][   T30] audit: type=1326 audit(1763958298.345:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16826 comm="syz.6.3997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb4b858f749 code=0x7ffc0000
[  624.223355][T16832] dummy0: left allmulticast mode
[  624.234308][   T30] audit: type=1326 audit(1763958298.345:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16826 comm="syz.6.3997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4b858f749 code=0x7ffc0000
[  624.253530][T16832] bridge0: port 3(dummy0) entered disabled state
[  624.304816][   T30] audit: type=1326 audit(1763958298.345:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16826 comm="syz.6.3997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4b858f749 code=0x7ffc0000
[  624.338250][T16832] bridge_slave_1: left allmulticast mode
[  624.346910][T16832] bridge_slave_1: left promiscuous mode
[  624.361227][   T30] audit: type=1326 audit(1763958298.345:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16826 comm="syz.6.3997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb4b858f749 code=0x7ffc0000
[  624.363537][T16832] bridge0: port 2(bridge_slave_1) entered disabled state
[  624.394982][   T30] audit: type=1326 audit(1763958298.345:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16826 comm="syz.6.3997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4b858f749 code=0x7ffc0000
[  624.420767][   T30] audit: type=1326 audit(1763958298.345:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16826 comm="syz.6.3997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb4b858f749 code=0x7ffc0000
[  624.465511][T16832] bridge_slave_0: left allmulticast mode
[  624.483932][T16832] bridge_slave_0: left promiscuous mode
[  624.489848][T16832] bridge0: port 1(bridge_slave_0) entered disabled state
[  624.908651][T16846] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4002'.
[  624.923777][   T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  624.962630][T16846] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4002'.
[  625.101437][T16849] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4005'.
[  625.247248][ T1556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  625.526319][T16863] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4011'.
[  625.537990][T16865] input: syz0 as /devices/virtual/input/input52
[  625.572093][T16863] veth1_macvtap: left promiscuous mode
[  625.966327][T16175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  626.229282][T16885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  626.237819][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  626.420362][T16889] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4023'.
[  626.452866][T16889] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4023'.
[  626.804757][ T1556] kernel write not supported for file /vbi5 (pid: 1556 comm: kworker/0:2)
[  626.916479][T16907] input: syz0 as /devices/virtual/input/input53
[  627.003976][   T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  627.347662][ T5992] usb 7-1: new high-speed USB device number 20 using dummy_hcd
[  627.515848][ T5992] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  627.540582][ T5992] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  627.564066][ T5978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  627.619032][ T5992] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  627.695089][ T5992] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  627.833250][ T5992] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  627.863387][ T5992] usb 7-1: config 0 descriptor??
[  627.987025][T16918] netlink: 'syz.3.4033': attribute type 18 has an invalid length.
[  628.029350][T16918] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4033'.
[  628.043856][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  628.093655][T16918] netlink: 'syz.3.4033': attribute type 18 has an invalid length.
[  628.133292][T16918] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4033'.
[  628.293264][ T5978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  628.319197][ T5992] plantronics 0003:047F:FFFF.002E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0
[  629.003673][ T1556] Bluetooth: hci2: Opcode 0x0c1a failed: -110
[  629.013577][ T1556] Bluetooth: hci2: Error when powering off device on rfkill (-110)
[  629.014024][ T5839] Bluetooth: hci2: command 0x0c1a tx timeout
[  629.109377][   T30] kauditd_printk_skb: 7 callbacks suppressed
[  629.109404][   T30] audit: type=1326 audit(1763958303.345:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16936 comm="syz.9.4037" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f616f38f749 code=0x0
[  629.146669][ T5992] usb 7-1: USB disconnect, device number 20
[  629.152776][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  629.390548][T16920] loop8: detected capacity change from 0 to 32768
[  629.406367][T16920] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.4034 (16920)
[  629.422845][T16946] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4040'.
[  629.435063][T16946] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  629.455226][T16920] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  629.465832][T16920] BTRFS info (device loop8): using crc32c (crc32c-lib) checksum algorithm
[  629.510491][T16946] batman_adv: batadv0: Removing interface: batadv_slave_1
[  629.597384][T16920] BTRFS info (device loop8): enabling ssd optimizations
[  629.606045][T16920] BTRFS info (device loop8): turning on async discard
[  629.613937][T16920] BTRFS info (device loop8): enabling free space tree
[  629.862342][T16318] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  630.203585][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  630.862635][T16992] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4046'.
[  630.917494][T16992] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4046'.
[  630.987793][T16994] netlink: 'syz.3.4055': attribute type 1 has an invalid length.
[  631.121935][T16998] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4055'.
[  631.144237][T16994] 8021q: adding VLAN 0 to HW filter on device bond2
[  631.248573][T16998] bond2: (slave geneve2): making interface the new active one
[  631.257943][T16175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  631.258237][T16998] bond2: (slave geneve2): Enslaving as an active interface with an up link
[  631.323664][ T1556] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  631.326851][ T5839] Bluetooth: hci0: command 0x0c1a tx timeout
[  631.336455][ T1556] Bluetooth: hci0: Error when powering off device on rfkill (-110)
[  631.345607][ T5992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  631.916844][T16986] loop5: detected capacity change from 0 to 40427
[  631.954635][T16986] F2FS-fs (loop5): build fault injection rate: 14
[  631.965910][T16986] F2FS-fs (loop5): build fault injection type: 0x3bfe8c
[  631.973061][ T5978] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  631.997101][T16986] F2FS-fs (loop5): invalid crc value
[  632.021825][T17016] loop9: detected capacity change from 0 to 512
[  632.046280][    C1] F2FS-fs (loop5): inject read IO error in f2fs_read_end_io of bio_endio+0x713/0x860
[  632.075142][    C1] F2FS-fs (loop5): inject read IO error in f2fs_read_end_io of bio_endio+0x713/0x860
[  632.097364][T17016] EXT4-fs error (device loop9): ext4_orphan_get:1392: inode #15: comm syz.9.4065: inode has both inline data and extents flags
[  632.144322][ T5978] usb 9-1: Using ep0 maxpacket: 32
[  632.180504][ T5978] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  632.221845][ T5978] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 3
[  632.236545][T17016] EXT4-fs error (device loop9): ext4_orphan_get:1395: comm syz.9.4065: couldn't read orphan inode 15 (err -117)
[  632.267603][ T5978] usb 9-1: New USB device found, idVendor=0733, idProduct=0402, bcdDevice=ef.67
[  632.275657][T17016] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  632.299041][T16175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  632.303260][ T5978] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  632.346193][ T5978] usb 9-1: Product: syz
[  632.356186][ T5978] usb 9-1: Manufacturer: syz
[  632.377744][T16986] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  632.386870][ T5978] usb 9-1: SerialNumber: syz
[  632.393251][   T30] audit: type=1804 audit(1763958306.625:419): pid=17016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.4065" name="/newroot/52/file1/bus" dev="loop9" ino=18 res=1 errno=0
[  632.413278][T16986] F2FS-fs (loop5): inject page alloc in f2fs_grab_cache_folio of f2fs_recover_fsync_data+0x49d/0x98b0
[  632.438095][ T5978] usb 9-1: config 0 descriptor??
[  632.464201][T17016] Invalid ELF header magic: != ELF
[  632.471768][T16986] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  632.476518][   T30] audit: type=1800 audit(1763958306.665:420): pid=17016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.4065" name="bus" dev="loop9" ino=18 res=0 errno=0
[  632.506438][ T5978] gspca_main: spca501-2.14.0 probing 0733:0402
[  632.598678][T15833] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  632.598853][T16986] F2FS-fs (loop5): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_get_node_info+0xd42/0x11e0
[  632.751563][T16986] F2FS-fs (loop5): inject inconsistent footer in sanity_check_node_footer of f2fs_get_inode_folio+0x171/0x1b0
[  632.843595][T16986] F2FS-fs (loop5): inconsistent node block, node_type:1, nid:10, node_footer[nid:10,ino:10,ofs:0,cpver:0,blkaddr:0]
[  633.089713][T16013] syz-executor: attempt to access beyond end of device
[  633.089713][T16013] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  633.141730][T16013] CPU: 1 UID: 0 PID: 16013 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  633.141780][T16013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  633.141803][T16013] Call Trace:
[  633.141815][T16013]  <TASK>
[  633.141831][T16013]  dump_stack_lvl+0x16c/0x1f0
[  633.141887][T16013]  f2fs_handle_critical_error+0x624/0x9f0
[  633.141933][T16013]  ? srso_alias_return_thunk+0x5/0xfbef5
[  633.141978][T16013]  ? f2fs_build_fault_attr+0x53/0x1f0
[  633.142053][T16013]  f2fs_write_end_io+0x958/0xcf0
[  633.142105][T16013]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  633.142157][T16013]  ? srso_alias_return_thunk+0x5/0xfbef5
[  633.142215][T16013]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  633.142260][T16013]  bio_endio+0x713/0x860
[  633.142323][T16013]  submit_bio_noacct+0x306/0x1f60
[  633.142378][T16013]  __submit_merged_bio+0x33c/0x770
[  633.142430][T16013]  __submit_merged_write_cond+0x319/0x3f0
[  633.142496][T16013]  f2fs_write_cache_pages+0x2067/0x2570
[  633.142582][T16013]  ? __pfx_f2fs_write_cache_pages+0x10/0x10
[  633.142632][T16013]  ? srso_alias_return_thunk+0x5/0xfbef5
[  633.142691][T16013]  ? __lock_acquire+0xb8a/0x1c90
[  633.142782][T16013]  ? srso_alias_return_thunk+0x5/0xfbef5
[  633.142905][T16013]  ? srso_alias_return_thunk+0x5/0xfbef5
[  633.142950][T16013]  ? free_unref_folios+0x109a/0x1610
[  633.143009][T16013]  ? srso_alias_return_thunk+0x5/0xfbef5
[  633.143063][T16013]  f2fs_write_data_pages+0x4ad/0xd90
[  633.143128][T16013]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  633.143180][T16013]  ? srso_alias_return_thunk+0x5/0xfbef5
[  633.143239][T16013]  ? srso_alias_return_thunk+0x5/0xfbef5
[  633.143289][T16013]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  633.143351][T16013]  do_writepages+0x27a/0x600
[  633.143396][T16013]  ? __pfx_do_writepages+0x10/0x10
[  633.143432][T16013]  ? do_raw_spin_unlock+0x172/0x230
[  633.143476][T16013]  ? srso_alias_return_thunk+0x5/0xfbef5
[  633.143520][T16013]  ? _raw_spin_unlock+0x28/0x50
[  633.143570][T16013]  filemap_fdatawrite_wbc+0x104/0x160
[  633.143614][T16013]  __filemap_fdatawrite_range+0xb9/0x100
[  633.143667][T16013]  ? __pfx___filemap_fdatawrite_range+0x10/0x10
[  633.143788][T16013]  ? find_held_lock+0x2b/0x80
[  633.143839][T16013]  ? srso_alias_return_thunk+0x5/0xfbef5
[  633.143884][T16013]  ? do_raw_spin_unlock+0x172/0x230
[  633.143928][T16013]  ? srso_alias_return_thunk+0x5/0xfbef5
[  633.143981][T16013]  f2fs_sync_dirty_inodes+0x2a2/0x980
[  633.144059][T16013]  block_operations+0x2b0/0xfe0
[  633.144129][T16013]  ? __pfx_block_operations+0x10/0x10
[  633.144249][T16013]  ? srso_alias_return_thunk+0x5/0xfbef5
[  633.144304][T16013]  ? ktime_get+0x200/0x310
[  633.144357][T16013]  ? srso_alias_return_thunk+0x5/0xfbef5
[  633.144401][T16013]  ? lockdep_hardirqs_on+0x7c/0x110
[  633.144450][T16013]  ? srso_alias_return_thunk+0x5/0xfbef5
[  633.144494][T16013]  ? rcu_is_watching+0x12/0xc0
[  633.144552][T16013]  f2fs_write_checkpoint+0x32b/0x5300
[  633.144620][T16013]  ? kfree+0x2b8/0x6d0
[  633.144662][T16013]  ? f2fs_stop_gc_thread+0x79/0xd0
[  633.144725][T16013]  ? srso_alias_return_thunk+0x5/0xfbef5
[  633.144769][T16013]  ? rcu_is_watching+0x12/0xc0
[  633.144817][T16013]  ? srso_alias_return_thunk+0x5/0xfbef5
[  633.144862][T16013]  ? kthread_stop+0x272/0x630
[  633.144904][T16013]  kill_f2fs_super+0x3d6/0x490
[  633.144961][T16013]  ? __pfx_kill_f2fs_super+0x10/0x10
[  633.145037][T16013]  ? srso_alias_return_thunk+0x5/0xfbef5
[  633.145100][T16013]  deactivate_locked_super+0xc1/0x1a0
[  633.145156][T16013]  deactivate_super+0xde/0x100
[  633.145212][T16013]  cleanup_mnt+0x225/0x450
[  633.145272][T16013]  task_work_run+0x150/0x240
[  633.145323][T16013]  ? __pfx_task_work_run+0x10/0x10
[  633.145361][T16013]  ? srso_alias_return_thunk+0x5/0xfbef5
[  633.145411][T16013]  ? __pfx___x64_sys_umount+0x10/0x10
[  633.145482][T16013]  exit_to_user_mode_loop+0xec/0x130
[  633.145525][T16013]  do_syscall_64+0x426/0xfa0
[  633.145579][T16013]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  633.145616][T16013] RIP: 0033:0x7ff2c6f90a77
[  633.145646][T16013] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  633.145683][T16013] RSP: 002b:00007ffe40928678 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  633.145718][T16013] RAX: 0000000000000000 RBX: 00007ff2c7013d7d RCX: 00007ff2c6f90a77
[  633.145743][T16013] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe40928730
[  633.145767][T16013] RBP: 00007ffe40928730 R08: 0000000000000000 R09: 0000000000000000
[  633.145791][T16013] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe409297c0
[  633.145816][T16013] R13: 00007ff2c7013d7d R14: 000000000009a866 R15: 00007ffe40929800
[  633.145874][T16013]  </TASK>
[  633.615731][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  633.627144][T16013] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  633.634952][ T5978] gspca_spca501: reg write: error -110
[  633.652763][ T5978] spca501 9-1:0.0: Reg write failed for 0x00,0x02,0x03
[  633.683013][ T5978] spca501 9-1:0.0: probe with driver spca501 failed with error -22
[  633.827310][T17052] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4078'.
[  633.836456][T17052] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4078'.
[  633.864388][T17052] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4078'.
[  633.864681][   T60] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  633.873542][T17052] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4078'.
[  633.911435][   T60] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  633.931252][   T60] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  633.972001][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  633.981677][ T5839] Bluetooth: hci1: command 0x0c1a tx timeout
[  633.988937][   T60] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  633.989026][ T1556] Bluetooth: hci1: Opcode 0x0c1a failed: -110
[  634.061476][ T1556] Bluetooth: hci1: Error when powering off device on rfkill (-110)
[  634.364494][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  634.483666][   T44] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  634.636014][   T44] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  634.674426][   T44] usb 10-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xF5, changing to 0x85
[  634.696589][T16175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  634.725436][   T44] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  634.739274][   T44] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  634.762791][   T44] usb 10-1: Product: syz
[  634.767521][   T44] usb 10-1: Manufacturer: syz
[  634.772789][   T44] usb 10-1: SerialNumber: syz
[  635.416426][ T1556] usb 9-1: USB disconnect, device number 4
[  635.754789][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  636.152276][   T44] cdc_ncm 10-1:1.0: failed to get mac address
[  636.179912][   T44] cdc_ncm 10-1:1.0: bind() failure
[  636.219017][   T44] cdc_ncm 10-1:1.1: probe with driver cdc_ncm failed with error -71
[  636.240673][   T44] cdc_mbim 10-1:1.1: probe with driver cdc_mbim failed with error -71
[  636.263940][   T44] usbtest 10-1:1.1: probe with driver usbtest failed with error -71
[  636.295715][   T44] usb 10-1: USB disconnect, device number 3
[  636.570188][T17104] kAFS: unable to lookup cell '(,'
[  636.603623][ T1556] usb 7-1: new high-speed USB device number 21 using dummy_hcd
[  636.764566][ T1556] usb 7-1: Using ep0 maxpacket: 16
[  636.777085][T16175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  636.789768][ T1556] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  636.836293][ T1556] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  636.860507][ T1556] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  636.900648][ T1556] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  636.928619][ T1556] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  636.981771][ T1556] usb 7-1: config 0 descriptor??
[  637.176847][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  637.234678][T17124] bridge0: port 1(bridge_slave_0) entered blocking state
[  637.241821][T17124] bridge0: port 1(bridge_slave_0) entered forwarding state
[  637.406620][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  637.429839][ T1556] shield 0003:0955:7214.002F: unknown main item tag 0x0
[  637.454214][ T1556] shield 0003:0955:7214.002F: unknown main item tag 0x0
[  637.467452][ T1556] shield 0003:0955:7214.002F: unknown main item tag 0x0
[  637.480303][ T1556] shield 0003:0955:7214.002F: unknown main item tag 0x0
[  637.505920][ T1556] shield 0003:0955:7214.002F: unknown main item tag 0x0
[  637.533118][ T1556] input: HID 0955:7214 Haptics as /devices/virtual/input/input55
[  637.624909][T17094] netlink: 'syz.6.4095': attribute type 2 has an invalid length.
[  637.634754][T17094] netlink: 244 bytes leftover after parsing attributes in process `syz.6.4095'.
[  637.637161][ T1556] shield 0003:0955:7214.002F: Registered Thunderstrike controller
[  637.681495][ T1556] shield 0003:0955:7214.002F: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.6-1/input0
[  637.773036][ T5978] shield 0003:0955:7214.002F: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[  637.789476][ T1556] usb 7-1: USB disconnect, device number 21
[  637.810461][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  637.821582][ T5978] shield 0003:0955:7214.002F: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  637.977563][ T5978] shield 0003:0955:7214.002F: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  638.089089][ T5978] shield 0003:0955:7214.002F: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  638.464919][T17146] loop9: detected capacity change from 0 to 65536
[  638.535359][T17146] XFS (loop9): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  638.644961][T17146] XFS (loop9): Ending clean mount
[  638.753450][ T1556] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  638.844185][T15833] XFS (loop9): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  638.867091][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  638.881656][T17167] lo speed is unknown, defaulting to 1000
[  638.906869][T17167] lo speed is unknown, defaulting to 1000
[  638.942225][ T1556] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  638.995576][ T1556] usb 9-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xF5, changing to 0x85
[  639.026804][ T1556] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  639.057168][ T1556] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  639.107438][ T1556] usb 9-1: Product: syz
[  639.117405][T17167] lo speed is unknown, defaulting to 1000
[  639.132146][ T1556] usb 9-1: Manufacturer: syz
[  639.136891][ T1556] usb 9-1: SerialNumber: syz
[  639.904679][   T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  640.444634][ T5978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  640.458801][ T1556] cdc_ncm 9-1:1.0: failed to get mac address
[  640.483855][ T1556] cdc_ncm 9-1:1.0: bind() failure
[  640.518139][ T1556] cdc_ncm 9-1:1.1: probe with driver cdc_ncm failed with error -71
[  640.568126][ T1556] cdc_mbim 9-1:1.1: probe with driver cdc_mbim failed with error -71
[  640.593320][ T1556] usbtest 9-1:1.1: probe with driver usbtest failed with error -71
[  640.639855][T17167] infiniband s
z1: set down
[  640.647948][ T5978] lo speed is unknown, defaulting to 1000
[  640.656122][ T1556] usb 9-1: USB disconnect, device number 5
[  640.693651][T17167] infiniband s
z1: added lo
[  640.701356][T17167] s
z1: rxe_create_cq: returned err = -12
[  640.728905][T17167] infiniband s
z1: Couldn't create ib_mad CQ
[  640.753673][T17167] infiniband s
z1: Couldn't open port 1
[  640.837323][T17167] RDS/IB: s
z1: added
[  640.848685][T17167] smc: adding ib device s
z1 with port count 1
[  640.863010][T17167] smc:    ib device s
z1 port 1 has no pnetid
[  640.889225][ T5978] lo speed is unknown, defaulting to 1000
[  640.912812][T17167] lo speed is unknown, defaulting to 1000
[  640.923892][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  640.995757][T17193] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4135'.
[  641.272750][T17198] loop5: detected capacity change from 0 to 256
[  641.350652][T17202] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4139'.
[  641.370026][T17198] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  641.405434][T17198] exFAT-fs (loop5): failed to load alloc-bitmap
[  641.424450][T17198] exFAT-fs (loop5): failed to recognize exfat type
[  641.793269][T17167] lo speed is unknown, defaulting to 1000
[  641.964692][   T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  642.338242][T17230] sctp: [Deprecated]: syz.9.4150 (pid 17230) Use of struct sctp_assoc_value in delayed_ack socket option.
[  642.338242][T17230] Use struct sctp_sack_info instead
[  642.548857][T17167] lo speed is unknown, defaulting to 1000
[  642.756651][T17240] overlayfs: failed to resolve './file0': -2
[  642.916735][T17201] syz.8.4138: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz8,mems_allowed=0-1
[  642.970170][T17201] CPU: 1 UID: 0 PID: 17201 Comm: syz.8.4138 Not tainted syzkaller #0 PREEMPT(full) 
[  642.970223][T17201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  642.970246][T17201] Call Trace:
[  642.970259][T17201]  <TASK>
[  642.970273][T17201]  dump_stack_lvl+0x16c/0x1f0
[  642.970335][T17201]  warn_alloc+0x248/0x3a0
[  642.970389][T17201]  ? __pfx_warn_alloc+0x10/0x10
[  642.970459][T17201]  ? hash_netport4_resize+0x1d8/0x1c50
[  642.970515][T17201]  ? srso_alias_return_thunk+0x5/0xfbef5
[  642.970561][T17201]  ? __vmalloc_node_noprof+0xad/0xf0
[  642.970612][T17201]  __vmalloc_node_range_noprof+0xfe2/0x1480
[  642.970655][T17201]  ? srso_alias_return_thunk+0x5/0xfbef5
[  642.970716][T17201]  ? hash_netport4_resize+0x1d8/0x1c50
[  642.970785][T17201]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  642.970835][T17201]  ? srso_alias_return_thunk+0x5/0xfbef5
[  642.970880][T17201]  ? ___kmalloc_large_node+0xed/0x160
[  642.970920][T17201]  ? srso_alias_return_thunk+0x5/0xfbef5
[  642.970973][T17201]  __kvmalloc_node_noprof+0x431/0x9c0
[  642.971032][T17201]  ? hash_netport4_resize+0x1d8/0x1c50
[  642.971087][T17201]  ? srso_alias_return_thunk+0x5/0xfbef5
[  642.971133][T17201]  ? srso_alias_return_thunk+0x5/0xfbef5
[  642.971177][T17201]  ? __kmalloc_noprof+0x34f/0x880
[  642.971226][T17201]  ? hash_netport4_resize+0x1d8/0x1c50
[  642.971283][T17201]  ? srso_alias_return_thunk+0x5/0xfbef5
[  642.971341][T17201]  ? hash_netport4_resize+0x1d8/0x1c50
[  642.971397][T17201]  hash_netport4_resize+0x1d8/0x1c50
[  642.971457][T17201]  ? __pfx_hash_netport4_add+0x10/0x10
[  642.971515][T17201]  ? __pfx_hash_netport4_uadt+0x10/0x10
[  642.971564][T17201]  ? __pfx___mutex_lock+0x10/0x10
[  642.971622][T17201]  ? srso_alias_return_thunk+0x5/0xfbef5
[  642.971679][T17201]  ? __pfx_hash_netport4_resize+0x10/0x10
[  642.971739][T17201]  ? srso_alias_return_thunk+0x5/0xfbef5
[  642.971791][T17201]  call_ad.constprop.0+0x36d/0x940
[  642.971853][T17201]  ? __pfx_hash_netport4_resize+0x10/0x10
[  642.971917][T17201]  ? __pfx_call_ad.constprop.0+0x10/0x10
[  642.971972][T17201]  ? __pfx___nla_validate_parse+0x10/0x10
[  642.972020][T17201]  ? srso_alias_return_thunk+0x5/0xfbef5
[  642.972066][T17201]  ? srso_alias_return_thunk+0x5/0xfbef5
[  642.972123][T17201]  ? srso_alias_return_thunk+0x5/0xfbef5
[  642.972167][T17201]  ? __nla_parse+0x40/0x60
[  642.972215][T17201]  ip_set_ad.constprop.0.isra.0+0x3ce/0x870
[  642.972286][T17201]  ? __pfx_ip_set_ad.constprop.0.isra.0+0x10/0x10
[  642.972354][T17201]  ? srso_alias_return_thunk+0x5/0xfbef5
[  642.972399][T17201]  ? exit_tasks_rcu_finish+0x170/0x440
[  642.972501][T17201]  ? srso_alias_return_thunk+0x5/0xfbef5
[  642.972545][T17201]  ? find_held_lock+0x2b/0x80
[  642.972596][T17201]  ? srso_alias_return_thunk+0x5/0xfbef5
[  642.972651][T17201]  nfnetlink_rcv_msg+0x9fc/0x1200
[  642.972724][T17201]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  642.972787][T17201]  ? srso_alias_return_thunk+0x5/0xfbef5
[  642.972832][T17201]  ? consume_skb+0xcc/0x100
[  642.972920][T17201]  ? __pfx___dev_queue_xmit+0x10/0x10
[  642.972987][T17201]  netlink_rcv_skb+0x158/0x420
[  642.973032][T17201]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  642.973091][T17201]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  642.973133][T17201]  ? srso_alias_return_thunk+0x5/0xfbef5
[  642.973200][T17201]  ? srso_alias_return_thunk+0x5/0xfbef5
[  642.973244][T17201]  ? ns_capable+0xd7/0x110
[  642.973294][T17201]  nfnetlink_rcv+0x1b3/0x430
[  642.973368][T17201]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  642.973421][T17201]  ? srso_alias_return_thunk+0x5/0xfbef5
[  642.973465][T17201]  ? netlink_deliver_tap+0x1ae/0xd30
[  642.973515][T17201]  netlink_unicast+0x5aa/0x870
[  642.973565][T17201]  ? __pfx_netlink_unicast+0x10/0x10
[  642.973628][T17201]  netlink_sendmsg+0x8c8/0xdd0
[  642.973679][T17201]  ? __pfx_netlink_sendmsg+0x10/0x10
[  642.973720][T17201]  ? srso_alias_return_thunk+0x5/0xfbef5
[  642.973771][T17201]  ? srso_alias_return_thunk+0x5/0xfbef5
[  642.973815][T17201]  ? aa_sock_msg_perm.constprop.0+0x100/0x1d0
[  642.973881][T17201]  ____sys_sendmsg+0xa98/0xc70
[  642.973931][T17201]  ? srso_alias_return_thunk+0x5/0xfbef5
[  642.973974][T17201]  ? copy_msghdr_from_user+0x10a/0x160
[  642.974011][T17201]  ? __pfx_____sys_sendmsg+0x10/0x10
[  642.974073][T17201]  ? __pfx_futex_wake_mark+0x10/0x10
[  642.974126][T17201]  ___sys_sendmsg+0x134/0x1d0
[  642.974167][T17201]  ? __pfx____sys_sendmsg+0x10/0x10
[  642.974202][T17201]  ? __lock_acquire+0x622/0x1c90
[  642.974286][T17201]  ? srso_alias_return_thunk+0x5/0xfbef5
[  642.974376][T17201]  __sys_sendmsg+0x16d/0x220
[  642.974414][T17201]  ? __pfx___sys_sendmsg+0x10/0x10
[  642.974450][T17201]  ? srso_alias_return_thunk+0x5/0xfbef5
[  642.974495][T17201]  ? srso_alias_return_thunk+0x5/0xfbef5
[  642.974560][T17201]  ? srso_alias_return_thunk+0x5/0xfbef5
[  642.974616][T17201]  do_syscall_64+0xcd/0xfa0
[  642.974669][T17201]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  642.974707][T17201] RIP: 0033:0x7f716b98f749
[  642.974737][T17201] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  642.974775][T17201] RSP: 002b:00007f716c86a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  642.974811][T17201] RAX: ffffffffffffffda RBX: 00007f716bbe5fa0 RCX: 00007f716b98f749
[  642.974837][T17201] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000004
[  642.974861][T17201] RBP: 00007f716ba13f91 R08: 0000000000000000 R09: 0000000000000000
[  642.974886][T17201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  642.974909][T17201] R13: 00007f716bbe6038 R14: 00007f716bbe5fa0 R15: 00007ffd0eac5838
[  642.974962][T17201]  </TASK>
[  643.518852][ T5978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  643.562327][   T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  643.627652][T17167] lo speed is unknown, defaulting to 1000
[  643.683255][T17201] Mem-Info:
[  643.686430][T17201] active_anon:26148 inactive_anon:0 isolated_anon:0
[  643.686430][T17201]  active_file:13545 inactive_file:50983 isolated_file:0
[  643.686430][T17201]  unevictable:768 dirty:501 writeback:0
[  643.686430][T17201]  slab_reclaimable:12370 slab_unreclaimable:119202
[  643.686430][T17201]  mapped:34730 shmem:23000 pagetables:1205
[  643.686430][T17201]  sec_pagetables:0 bounce:0
[  643.686430][T17201]  kernel_misc_reclaimable:0
[  643.686430][T17201]  free:1233048 free_pcp:23049 free_cma:0
[  643.834361][  T911] IPVS: starting estimator thread 0...
[  643.850372][T17201] Node 0 active_anon:104992kB inactive_anon:0kB active_file:54180kB inactive_file:203728kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:138920kB dirty:2004kB writeback:0kB shmem:90464kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12024kB pagetables:4668kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  643.884243][T17201] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  643.916542][T17201] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  643.947116][T17201] lowmem_reserve[]: 0 2485 2487 2487 2487
[  643.952951][T17201] Node 0 DMA32 free:1030552kB boost:0kB min:34108kB low:42632kB high:51156kB reserved_highatomic:0KB free_highatomic:0KB active_anon:104992kB inactive_anon:0kB active_file:54180kB inactive_file:203728kB unevictable:1536kB writepending:2004kB zspages:0kB present:3129332kB managed:2544980kB mlocked:0kB bounce:0kB free_pcp:56708kB local_pcp:34792kB free_cma:0kB
[  643.955065][T17257] IPVS: using max 23 ests per chain, 55200 per kthread
[  643.987338][T17201] lowmem_reserve[]: 0 0 1 1 1
[  643.998671][T17201] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  644.028628][T17201] lowmem_reserve[]: 0 0 0 0 0
[  644.033540][T17201] Node 1 Normal free:3885572kB boost:0kB min:55768kB low:69708kB high:83648kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:36064kB local_pcp:17024kB free_cma:0kB
[  644.066151][T17201] lowmem_reserve[]: 0 0 0 0 0
[  644.071430][T17201] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  644.084340][T17201] Node 0 DMA32: 1116*4kB (UM) 532*8kB (ME) 61*16kB (UME) 221*32kB (ME) 283*64kB (ME) 140*128kB (UME) 57*256kB (ME) 45*512kB (UME) 40*1024kB (UME) 15*2048kB (UM) 212*4096kB (UM) = 1030464kB
[  644.104918][T17201] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  644.116595][T17201] Node 1 Normal: 201*4kB (UME) 50*8kB (UME) 49*16kB (UME) 202*32kB (UME) 70*64kB (UME) 15*128kB (UME) 6*256kB (UME) 3*512kB (ME) 1*1024kB (M) 2*2048kB (UE) 943*4096kB (M) = 3885572kB
[  644.135135][T17201] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  644.144882][T17201] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB
[  644.154243][T17201] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  644.169961][T17201] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  644.198013][T17201] 87462 total pagecache pages
[  644.202737][T17201] 2 pages in swap cache
[  644.216144][T17201] Free swap  = 124988kB
[  644.253310][T17201] Total swap = 124996kB
[  644.257543][T17201] 2097051 pages RAM
[  644.261378][T17201] 0 pages HighMem/MovableOnly
[  644.293258][T17201] 428716 pages reserved
[  644.297463][T17201] 0 pages cma reserved
[  644.566951][T17167] lo speed is unknown, defaulting to 1000
[  644.611195][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  645.222063][T17281] loop9: detected capacity change from 0 to 512
[  645.254405][T17281] EXT4-fs: Ignoring removed i_version option
[  645.260455][T17281] EXT4-fs: Ignoring removed bh option
[  645.317703][T17167] lo speed is unknown, defaulting to 1000
[  645.415568][T17281] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  645.493645][T17281] ext4 filesystem being mounted at /69/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  645.588598][T17281] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  645.664036][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  645.744358][T15833] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  646.193802][ T5917] usb 7-1: new high-speed USB device number 22 using dummy_hcd
[  646.366368][ T5917] usb 7-1: Using ep0 maxpacket: 16
[  646.383486][ T5917] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  646.402561][ T5917] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  646.453746][ T5917] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  646.493409][ T5917] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  646.536267][ T5978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  646.554041][ T5917] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  646.572331][ T5917] usb 7-1: Product: syz
[  646.576580][ T5917] usb 7-1: Manufacturer: syz
[  646.581184][ T5917] usb 7-1: SerialNumber: syz
[  646.695131][  T911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  646.765490][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  647.050645][ T5917] usb 7-1: 0:2 : does not exist
[  647.748504][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  647.934773][ T5917] usb 7-1: USB disconnect, device number 22
[  648.077337][T17362] loop5: detected capacity change from 0 to 128
[  648.094676][T17362] EXT4-fs: Ignoring removed nobh option
[  648.144753][T17362] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  648.164656][T17362] ext4 filesystem being mounted at /80/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  648.443545][T16013] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  648.764101][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  648.999116][T17385] netlink: 'syz.6.4211': attribute type 1 has an invalid length.
[  649.013720][T17385] netlink: 'syz.6.4211': attribute type 4 has an invalid length.
[  649.023251][T17385] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.4211'.
[  649.203409][   T30] audit: type=1326 audit(1763958323.435:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17391 comm="syz.8.4214" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f716b98f749 code=0x0
[  649.584400][ T1556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  649.826868][T17410] all (unregistering): Released all slaves
[  649.841654][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  650.003954][T17414] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  650.003984][T17414] overlayfs: fs on './bus' does not support file handles, falling back to xino=off.
[  650.004185][T17414] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  650.232283][T17418] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  650.424588][T17418] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type
[  650.464227][T17418] overlayfs: failed to look up (tracing) for ino (-66)
[  650.643335][ T5931] usb 6-1: new full-speed USB device number 15 using dummy_hcd
[  650.825390][ T5931] usb 6-1: config 0 has an invalid interface number: 41 but max is 0
[  650.834471][ T5931] usb 6-1: config 0 has no interface number 0
[  650.840687][ T5931] usb 6-1: config 0 interface 41 has no altsetting 0
[  650.863307][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  650.898000][ T5931] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  650.917594][ T5931] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  650.950360][ T5931] usb 6-1: Product: syz
[  650.960483][ T5931] usb 6-1: Manufacturer: syz
[  650.975948][ T5931] usb 6-1: SerialNumber: syz
[  651.024598][ T5931] usb 6-1: config 0 descriptor??
[  651.892888][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  651.973957][ T5931] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0
[  652.200336][ T5931] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9
[  652.235521][ T5931] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71
[  652.273585][ T5931] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -71
[  652.320398][ T5931] usb 6-1: USB disconnect, device number 15
[  652.531194][T17468] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  652.607303][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  652.651942][T17468] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type
[  652.693309][T17468] overlayfs: failed to look up (tracing) for ino (-66)
[  652.923698][  T911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  653.285238][T17496] overlayfs: failed to resolve './file0': -2
[  653.413265][ T5931] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  653.575619][ T5931] usb 10-1: Using ep0 maxpacket: 8
[  653.599357][ T5931] usb 10-1: config 179 has an invalid interface number: 65 but max is 0
[  653.613256][ T5931] usb 10-1: config 179 has no interface number 0
[  653.633355][ T5931] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  653.663569][ T5931] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  653.683216][ T5931] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  653.703271][ T5931] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  653.722762][ T5931] usb 10-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  653.763275][ T5931] usb 10-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  653.782800][ T5931] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  653.842059][T17487] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  653.978998][  T911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  654.073453][ T5917] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  654.224014][ T5931] input: Generic X-Box pad as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:179.65/input/input56
[  654.246320][T17517] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4268'.
[  654.248772][ T5917] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  654.293447][ T5917] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  654.333960][ T5917] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  654.376346][ T5917] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  654.408675][ T5917] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  654.430482][ T5917] usb 6-1: config 0 descriptor??
[  654.472929][ T5978] usb 10-1: USB disconnect, device number 4
[  654.473008][    C0] xpad 10-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  654.487347][    C0] xpad 10-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  654.881222][ T5917] plantronics 0003:047F:FFFF.0030: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[  655.010229][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  655.236518][ T5917] usb 6-1: USB disconnect, device number 16
[  655.647570][ T5978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  655.684634][T17545] netlink: 'syz.6.4280': attribute type 19 has an invalid length.
[  655.701169][T17545] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4280'.
[  655.750058][T17545] netlink: 'syz.6.4280': attribute type 19 has an invalid length.
[  655.786506][T17545] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4280'.
[  656.007353][ T5931] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0
[  656.027568][ T5931] hid-generic 0000:0000:0000.0031: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  656.049795][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  656.368167][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  656.966325][T17560] overlayfs: statfs failed on './file0'
[  657.117139][  T911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  657.537471][T17586] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4298'.
[  657.553648][T17586] xfrm1: entered promiscuous mode
[  657.558734][T17586] xfrm1: entered allmulticast mode
[  657.564421][T17586] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4298'.
[  657.774660][T17590] rdma_rxe: rxe_newlink: failed to add lo
[  658.234145][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  658.271536][T17600] input: syz0 as /devices/virtual/input/input57
[  658.686226][ T5978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  659.249247][  T911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  659.855562][   T30] audit: type=1326 audit(1763958590.091:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17655 comm="syz.3.4329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8f6d8f749 code=0x7ffc0000
[  659.949493][   T30] audit: type=1326 audit(1763958590.131:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17655 comm="syz.3.4329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8f6d8f749 code=0x7ffc0000
[  660.295769][T16175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  660.449913][T17674] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  660.457843][T17674] IPv6: NLM_F_CREATE should be set when creating new route
[  660.830009][T17640] loop9: detected capacity change from 0 to 32768
[  660.916101][T17640] ocfs2: Mounting device (7,9) on (node local, slot 0) with writeback data mode.
[  660.962826][T17692] binder: 17691:17692 ioctl c0306201 200000000280 returned -14
[  661.292271][T15833] ocfs2: Unmounting device (7,9) on (node local)
[  661.327043][T16175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  661.635687][T17721] input: syz0 as /devices/virtual/input/input58
[  661.723573][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  661.906615][T17725] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4357'.
[  662.372354][  T911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  663.404932][T16175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  663.960933][T17793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  663.997212][T17793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  664.029387][T17793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  664.100439][T17793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  664.115119][T17799] loop9: detected capacity change from 0 to 64
[  664.154013][T17793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  664.246267][T17799] ------------[ cut here ]------------
[  664.252443][T17799] WARNING: CPU: 1 PID: 17799 at fs/buffer.c:1183 mark_buffer_dirty+0x38b/0x410
[  664.261495][T17799] Modules linked in:
[  664.266470][T17799] CPU: 1 UID: 0 PID: 17799 Comm: syz.9.4387 Not tainted syzkaller #0 PREEMPT(full) 
[  664.276115][T17799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  664.287157][T17799] RIP: 0010:mark_buffer_dirty+0x38b/0x410
[  664.292967][T17799] Code: 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 85 00 00 00 48 8b 3b be 40 00 00 00 e8 30 af fb ff e9 d9 fd ff ff e8 26 2c 72 ff 90 <0f> 0b 90 e9 a1 fc ff ff e8 18 2c 72 ff 90 0f 0b 90 e9 c3 fc ff ff
[  664.313677][T17799] RSP: 0018:ffffc900123d7930 EFLAGS: 00010287
[  664.320234][T17799] RAX: 0000000000000f55 RBX: ffff888052eea000 RCX: ffffc9000c77d000
[  664.328378][T17799] RDX: 0000000000080000 RSI: ffffffff824abb6a RDI: 0000000000000001
[  664.336567][T17799] RBP: ffff8880506b2000 R08: 0000000000000001 R09: 0000000000000000
[  664.344801][T17799] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000009
[  664.352803][T17799] R13: ffffed100a0d642b R14: ffff888052eea000 R15: ffff888012720658
[  664.360864][T17799] FS:  00007f61701ab6c0(0000) GS:ffff888124b06000(0000) knlGS:0000000000000000
[  664.369990][T17799] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  664.376691][T17799] CR2: 0000200000001000 CR3: 000000006354c000 CR4: 0000000000350ef0
[  664.384731][T17799] Call Trace:
[  664.388028][T17799]  <TASK>
[  664.390972][T17799]  bfs_get_block+0x3eb/0xe70
[  664.395728][T17799]  ? srso_alias_return_thunk+0x5/0xfbef5
[  664.401412][T17799]  ? __pfx_bfs_get_block+0x10/0x10
[  664.406623][T17799]  __block_write_begin_int+0x4f4/0x16d0
[  664.412227][T17799]  ? __pfx_bfs_get_block+0x10/0x10
[  664.417527][T17799]  ? srso_alias_return_thunk+0x5/0xfbef5
[  664.423287][T17799]  ? __pfx___block_write_begin_int+0x10/0x10
[  664.429332][T17799]  ? srso_alias_return_thunk+0x5/0xfbef5
[  664.435072][T17799]  ? __pfx_bfs_get_block+0x10/0x10
[  664.440212][T17799]  block_write_begin+0x9a/0x1d0
[  664.445460][T17799]  ? srso_alias_return_thunk+0x5/0xfbef5
[  664.451138][T17799]  bfs_write_begin+0x31/0xd0
[  664.455798][T17799]  generic_perform_write+0x3c4/0x900
[  664.461140][T17799]  ? __pfx_generic_perform_write+0x10/0x10
[  664.467148][T17799]  ? inode_needs_update_time.part.0+0x191/0x270
[  664.473616][T17799]  __generic_file_write_iter+0x1f7/0x240
[  664.479317][T17799]  generic_file_write_iter+0xe1/0x3c0
[  664.484932][T17799]  vfs_write+0x7d3/0x11d0
[  664.489303][T17799]  ? __pfx_generic_file_write_iter+0x10/0x10
[  664.495423][T17799]  ? __pfx___mutex_lock+0x10/0x10
[  664.500496][T17799]  ? __pfx_vfs_write+0x10/0x10
[  664.505443][T17799]  ksys_write+0x12a/0x250
[  664.509829][T17799]  ? __pfx_ksys_write+0x10/0x10
[  664.514823][T17799]  ? srso_alias_return_thunk+0x5/0xfbef5
[  664.520517][T17799]  do_syscall_64+0xcd/0xfa0
[  664.525454][T17799]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  664.531381][T17799] RIP: 0033:0x7f616f38f749
[  664.535886][T17799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  664.555617][T17799] RSP: 002b:00007f61701ab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  664.564151][T17799] RAX: ffffffffffffffda RBX: 00007f616f5e5fa0 RCX: 00007f616f38f749
[  664.572146][T17799] RDX: 0000000000001006 RSI: 0000200000000480 RDI: 0000000000000004
[  664.580261][T17799] RBP: 00007f616f413f91 R08: 0000000000000000 R09: 0000000000000000
[  664.588313][T17799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  664.596351][T17799] R13: 00007f616f5e6038 R14: 00007f616f5e5fa0 R15: 00007ffe72809888
[  664.604554][T17799]  </TASK>
[  664.607591][T17799] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  664.614883][T17799] CPU: 1 UID: 0 PID: 17799 Comm: syz.9.4387 Not tainted syzkaller #0 PREEMPT(full) 
[  664.624381][T17799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  664.634464][T17799] Call Trace:
[  664.637766][T17799]  <TASK>
[  664.640705][T17799]  dump_stack_lvl+0x3d/0x1f0
[  664.645340][T17799]  vpanic+0x640/0x6f0
[  664.649380][T17799]  ? mark_buffer_dirty+0x38b/0x410
[  664.654514][T17799]  panic+0xca/0xd0
[  664.658361][T17799]  ? __pfx_panic+0x10/0x10
[  664.662820][T17799]  check_panic_on_warn+0xab/0xb0
[  664.667793][T17799]  __warn+0xf6/0x3c0
[  664.671870][T17799]  ? mark_buffer_dirty+0x38b/0x410
[  664.676993][T17799]  report_bug+0x3c3/0x580
[  664.681364][T17799]  ? mark_buffer_dirty+0x38b/0x410
[  664.686487][T17799]  handle_bug+0x184/0x210
[  664.690840][T17799]  exc_invalid_op+0x17/0x50
[  664.695372][T17799]  asm_exc_invalid_op+0x1a/0x20
[  664.700233][T17799] RIP: 0010:mark_buffer_dirty+0x38b/0x410
[  664.705961][T17799] Code: 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 85 00 00 00 48 8b 3b be 40 00 00 00 e8 30 af fb ff e9 d9 fd ff ff e8 26 2c 72 ff 90 <0f> 0b 90 e9 a1 fc ff ff e8 18 2c 72 ff 90 0f 0b 90 e9 c3 fc ff ff
[  664.725587][T17799] RSP: 0018:ffffc900123d7930 EFLAGS: 00010287
[  664.731672][T17799] RAX: 0000000000000f55 RBX: ffff888052eea000 RCX: ffffc9000c77d000
[  664.739653][T17799] RDX: 0000000000080000 RSI: ffffffff824abb6a RDI: 0000000000000001
[  664.747632][T17799] RBP: ffff8880506b2000 R08: 0000000000000001 R09: 0000000000000000
[  664.755607][T17799] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000009
[  664.763666][T17799] R13: ffffed100a0d642b R14: ffff888052eea000 R15: ffff888012720658
[  664.771658][T17799]  ? mark_buffer_dirty+0x38a/0x410
[  664.776792][T17799]  bfs_get_block+0x3eb/0xe70
[  664.781403][T17799]  ? srso_alias_return_thunk+0x5/0xfbef5
[  664.787064][T17799]  ? __pfx_bfs_get_block+0x10/0x10
[  664.792198][T17799]  __block_write_begin_int+0x4f4/0x16d0
[  664.797777][T17799]  ? __pfx_bfs_get_block+0x10/0x10
[  664.802900][T17799]  ? srso_alias_return_thunk+0x5/0xfbef5
[  664.808576][T17799]  ? __pfx___block_write_begin_int+0x10/0x10
[  664.814610][T17799]  ? srso_alias_return_thunk+0x5/0xfbef5
[  664.820277][T17799]  ? __pfx_bfs_get_block+0x10/0x10
[  664.825431][T17799]  block_write_begin+0x9a/0x1d0
[  664.830307][T17799]  ? srso_alias_return_thunk+0x5/0xfbef5
[  664.835962][T17799]  bfs_write_begin+0x31/0xd0
[  664.840578][T17799]  generic_perform_write+0x3c4/0x900
[  664.845895][T17799]  ? __pfx_generic_perform_write+0x10/0x10
[  664.851721][T17799]  ? inode_needs_update_time.part.0+0x191/0x270
[  664.857988][T17799]  __generic_file_write_iter+0x1f7/0x240
[  664.863658][T17799]  generic_file_write_iter+0xe1/0x3c0
[  664.869081][T17799]  vfs_write+0x7d3/0x11d0
[  664.873441][T17799]  ? __pfx_generic_file_write_iter+0x10/0x10
[  664.879455][T17799]  ? __pfx___mutex_lock+0x10/0x10
[  664.884545][T17799]  ? __pfx_vfs_write+0x10/0x10
[  664.889372][T17799]  ksys_write+0x12a/0x250
[  664.893725][T17799]  ? __pfx_ksys_write+0x10/0x10
[  664.898609][T17799]  ? srso_alias_return_thunk+0x5/0xfbef5
[  664.904284][T17799]  do_syscall_64+0xcd/0xfa0
[  664.908816][T17799]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  664.914751][T17799] RIP: 0033:0x7f616f38f749
[  664.919183][T17799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  664.938807][T17799] RSP: 002b:00007f61701ab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  664.947237][T17799] RAX: ffffffffffffffda RBX: 00007f616f5e5fa0 RCX: 00007f616f38f749
[  664.955219][T17799] RDX: 0000000000001006 RSI: 0000200000000480 RDI: 0000000000000004
[  664.963292][T17799] RBP: 00007f616f413f91 R08: 0000000000000000 R09: 0000000000000000
[  664.971264][T17799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  664.979325][T17799] R13: 00007f616f5e6038 R14: 00007f616f5e5fa0 R15: 00007ffe72809888
[  664.987328][T17799]  </TASK>
[  664.990578][T17799] Kernel Offset: disabled
[  664.994899][T17799] Rebooting in 86400 seconds..