last executing test programs:

15m48.453526429s ago: executing program 2 (id=208):
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r3, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="91f8a984851bdef38491bbc4173c3c6f357d028feff84ab17c417789f9fc9b8572c98172b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d508891e58a3f117fc203f787901de99a6a1b851ff5c85244beacba25d854577d68ca555e88fc249340ab9bdd8680abbbde02b0307ef45cb7ffffffff984c7bbb7bb3c689ef8daa63ca62e496be091cc1c7d4f371acaaec43337aee38542c35292cf3fdbfc45af8630174371535dbab0b2ec6403658ab3b48a93093de50c743a4f987cc433b546f194f00ba2d1cb675b44bdec6b6", 0x148}], 0x1}}], 0x1, 0x2090)
sendmmsg(r3, &(0x7f0000008d80)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)="c8b7df938dc9c0fcc8a7e84a57fa9059b9cfa4132462f9c45b583e8ce1f19a82364b01b4bc3436dcea3f3380b3269f2c986b7f8205fa231eac99a9de63cd1a85c820fc43c24662a22f18183bb042a742ac921efe546daedbd31cd4b5cda70186dd7ec449169ea58ebc3f3456774ea76202bc9969ea7026a8d7090c085a769e47294e4ea5b8ce3f6187e5ca87549e75b0b2980a21dc7b809da3f544d061ad96d06e0864906297353deefe8b52d519dd67f3f41dd7dd1cda0601b77e8415521d7dbb9893aeefbf94850960c84825a918b0", 0xd0}], 0x1}}, {{0x0, 0x0, &(0x7f0000003300)=[{&(0x7f0000000f00)="88a69f5139292fe55d24310330d349370620dd2737877e864a0d6d86ec395b0c41689f2e0742c4d3282f151e6faf27deab0464cdf91d6a7b73cbec929aa85b3d4f5114785c23d6c325efab561ca5f90113281359edb7ccdea124d6ea38a34d046ed5a7fdfc137e465ae8b692cb06ce3d14da5dc3ba35cac41c2fb97fe2618ebdd40e", 0x82}, {&(0x7f0000002240)="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", 0x3b1}], 0x2}}], 0x2, 0x0)

15m47.152366022s ago: executing program 2 (id=210):
getgroups(0x0, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b4050000beab00006110bb00000000001f010000000000009500000000000000951df7fa"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94)
write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000002e80)={0xa0, 0xffffffffffffffda, 0x0, {{0x7, 0x2, 0x1000, 0xf, 0x6, 0x80000000, {0x2, 0x6, 0x0, 0x0, 0x6, 0x1, 0x0, 0x3, 0x0, 0x3000, 0x101, 0x0, 0x0, 0x6, 0x6d4d}}, {0x0, 0x2}}}, 0xa0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
shutdown(r3, 0x2)
recvmmsg(r4, &(0x7f0000003740)=[{{0x0, 0x0, &(0x7f0000000140)}, 0x404}], 0x1, 0x0, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x3e8, 0xffffffff, 0x218, 0x0, 0x218, 0xfeffffff, 0xffffffff, 0x318, 0x318, 0x318, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x8, 0x2], 0x6, 0x15, 0x2}}, @common=@dst={{0x48}, {0x2, 0x0, 0x1, [0x2, 0x376, 0x8, 0x7ff, 0x5, 0x4, 0x8, 0x7, 0x8, 0xfff8, 0x81, 0x7240, 0x7fff, 0x101, 0x0, 0x5], 0x6}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0xe9c, 0x7}}}, {{@ipv6={@empty, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff, 0x0, 0xff000000], [0x0, 0xffffff00, 0xff], 'team0\x00', 'batadv_slave_0\x00', {}, {}, 0x2e, 0x79, 0x4, 0x44}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d5, 0x4d6], 0xe, 0xab, 0x3}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448)
r6 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0)
mq_timedsend(r6, 0x0, 0x0, 0x8, 0x0)

15m45.987332401s ago: executing program 2 (id=213):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e, 0x0, 0x2, 0x0, 0x0, 0x3}, 0x30, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000)
landlock_restrict_self(0xffffffffffffffff, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
setsockopt$bt_BT_RCVMTU(r2, 0x12, 0xd, 0x0, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000440)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53})
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1e)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)

15m45.63736141s ago: executing program 2 (id=216):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=<r0=>0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={0x0, 0xb4}}, 0x440088c4)
r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
fsmount(r2, 0x0, 0x0)
wait4(0x0, 0x0, 0x2, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x3)
ioctl$UI_SET_ABSBIT(r3, 0x40045567, 0x0)
write$uinput_user_dev(r3, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0xfffc, 0x4}, 0x0, [0x9faf, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x4, 0xfeffffff, 0x0, 0x0, 0xffff, 0x1, 0x0, 0x0, 0x20000000, 0x0, 0x4, 0x0, 0x6, 0x8, 0x7fff, 0x3, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x28000000, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffc, 0x3, 0x0, 0x401, 0x0, 0xffffffff, 0xdc, 0xa, 0x0, 0x2d52c0], [0x0, 0x1, 0x2, 0xb16, 0x0, 0xffffffcb, 0x0, 0x0, 0x0, 0x2000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x9, 0x0, 0x0, 0xfffffffd, 0xfffffffe, 0x0, 0x0, 0x10, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4, 0x1000, 0x10, 0xf, 0xc559, 0x2000002, 0x0, 0x0, 0x0, 0xfffffffe, 0x20000100, 0x801, 0x0, 0x0, 0x66bd, 0x0, 0xfefffffd, 0x1, 0x8, 0xd77, 0x0, 0x0, 0xfffff37a, 0x0, 0x0, 0x9bd, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0xf, 0x0, 0x2], [0x8, 0xa, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x9, 0x0, 0x7, 0x20000, 0xfffffffd, 0x2, 0xe, 0xffff, 0x0, 0x0, 0xffffff7f, 0x9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2, 0xf, 0x0, 0xd12, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x1000000, 0x8000000, 0x403, 0x0, 0x0, 0x0, 0x80, 0x8, 0x0, 0x7, 0xca, 0x0, 0xfffffffe, 0x4], [0x0, 0xfffffffc, 0xfffffffc, 0xc, 0x6, 0x0, 0x7, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x3, 0x2, 0x0, 0xe, 0x4000000, 0x0, 0x0, 0x8c, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffeffff, 0x1fd, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x7fd, 0x0, 0x40002, 0x2, 0x0, 0x0, 0x6, 0x0, 0x401, 0x100000, 0x4, 0x10000, 0x0, 0x0, 0xfffffffd, 0x2, 0x0, 0x0, 0x80000001, 0x0, 0x5]}, 0x45c)
ioctl$UI_DEV_CREATE(r3, 0x5501)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x64, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_PROTOINFO={0x10, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0xc, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x8}]}}, @CTA_LABELS={0x18, 0x16, 0x1, 0x0, [0x12, 0x38, 0x3, 0x2, 0x9]}, @CTA_LABELS_MASK={0x8, 0x17, [0x1]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2406}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}, @CTA_STATUS={0x8}]}, 0x64}}, 0x804)
syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0)

15m42.850500739s ago: executing program 3 (id=228):
r0 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi1\x00', 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$ttyS3(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x8400, 0x0)
bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0)
r3 = socket(0x15, 0x5, 0x0)
getsockopt(r3, 0x200000000114, 0x271c, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0)
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x20000080)
fsetxattr$trusted_overlay_redirect(r2, 0x0, &(0x7f0000000200)='./cgroup.cpu/cgroup.procs\x00', 0x1a, 0x2)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x140800, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000100)={0x20000014})
ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000001c0)=0x3)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000000)={'8255\x00', [0xf000, 0x6, 0x2, 0xc, 0x90000, 0x9, 0x40000, 0x88f, 0x280ffa, 0xfffffdfc, 0x5, 0x8, 0x1030, 0x1000008, 0x30, 0x40000009, 0xfff7ffa6, 0x3fb, 0x912, 0xfffffffe, 0x3, 0x9, 0xc, 0x8001, 0x1, 0x200, 0xffff, 0x400018, 0x82, 0x2000006, 0x5]})

15m40.088467148s ago: executing program 2 (id=229):
syz_open_dev$tty1(0xc, 0x4, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7)
getpgrp(0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
shmctl$IPC_RMID(0x0, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa5a01f3c2f1360806"], 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000003c80)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48)
unshare(0x22020600)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000940), &(0x7f00000000c0), 0xa7c, r3}, 0x38)

15m40.016831501s ago: executing program 3 (id=230):
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f00000000c0)={0x2, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fff0004}, {0x6, 0xad, 0x3, 0x3}]})
inotify_init1(0x0)

15m40.016266011s ago: executing program 3 (id=231):
syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x400)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x220800, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="8ee8c9b8ee088ed8660f3801b2d6352ed9ff660f3882040f01cf0fc72d2626652e0f01ca0fc7386635002000000f22e0", 0xffffffffffffff8b}], 0x1, 0x50, 0x0, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
socket$pppl2tp(0x18, 0x1, 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
pipe(&(0x7f0000000240))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

15m37.795832456s ago: executing program 2 (id=235):
r0 = socket$inet(0x2, 0x3, 0x4)
setsockopt$inet_int(r0, 0x0, 0x13, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r4=>0x0})
r5 = socket$rds(0x15, 0x5, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0)
sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)={0x24, r6, 0x1, 0xffffffff, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, "02"}]}, 0x24}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r4, @ANYBLOB="05005b"], 0x24}}, 0x240008d0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r10=>0x0})
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0)
sendmmsg(r1, &(0x7f00000000c0), 0x4000000000000d2, 0x8048848)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
ioctl$XFS_IOC_GET_RESBLKS(r0, 0x80105873, 0x0)

15m37.367733107s ago: executing program 3 (id=237):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff)
syz_emit_ethernet(0x4a, &(0x7f0000000240)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x2000000, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x4}]}}}}}}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
ptrace$ARCH_GET_FS(0x1e, r0, 0x0, 0x1003)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
bind$bt_l2cap(r4, &(0x7f0000000300)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe)
linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000)
getxattr(0x0, &(0x7f0000000c80)=@random={'user.', '\xbeZ\xd6|63\xa2\x83?Q\x1bo\x91\xa6%\xfd\v\xcb\xaeZ\x15\xfc\xf5y\x03\xe8\xc9\xc3\x9b\xd0\xea*\xc7U\x8a\x82\x16bW\r7\x7f\xc0\xe9\xc1\xf23\xed8\xe2U{k\xd6\x9ca\xd7\x14t\xea\xb7~\x7f^\xb0\x02\xc6H\xf0\a!\x05\x15\xbf\x0e\x02m\xab\xc9\x8c\x98\x9bY\xe5\x10\xc5g\x97W\x11\xb5\x02\xecg\xdf6\xbaD[\xeb9\x1d&\xa8\xe5\x86I\x83\xeb0\x97\xda\xeb\xfbo\xbdI\f\x02\xdb\x82_\x18o\xf41\xca{\xad\xbb(J\xeeI\xcc\x93\x9b){\xe4\x06\xcc\x10\xae\x12F/\xe6~.s\xc4N\xc1tE-zi\x11;:jc\x05a\xf5j?\x11g\x1a!\nwY\xe9\xae\x98\x1dl\xa992V\x1f\xb6\xe0\xc4\xbb[=\x10f\x9e\xcd\xb6P\x95>\x85\xd3\xd0\xafD/X!5+\x84\xf3Ri[\x9f\xfc0M\xb2x70Ll0A\x8bK\xe6\x89@!\xa2X\xea\x9b\ad\x85z\xa6\x99\xf4\v\xc2Y\xe3\x1cD\x83\xfc\xf3\x82c\x96\xec7\xe9\xc5\xa9\xaee\x88\xf1iFQX\x15\x888\x8f]\x1c\x13\x9eF|\x1b\xb0\xc6\xb8\xd3\x91\xb3v:B\x82\xab\xadW\xab\x02\xc7\xc3\n5\xf0A\xfe\xf6Z=\xca\xdd*\xebp\x9e<s\r\x96u\x8e-)\xed\x16\xc2\x95A\xbf\xe7b\xdc\xbb\xb6\xe7\xf7\xa3F\x7f\x91E64PEj&\x10!H\xa6\xc4\xc5\xbc(F\x1c-\xe0\x0f\xf8&\x9f\x8e\xfc\xa4\x92P)3\aj5\xb5\xd9\xaf\xfa\xb2)\x9e<\xfcHn\x16\x90d\x00_k\xf8\xe4\xbe\xd6\x89=\xbc\xa1\xfc\x8b\xc3\xe1\x1d\xfb\xdb\xc2@\xd6\xba\xa9\fq\xffr{L\x19\xa1\xdeu\xda\x05F\xe0\xb9;\x8cix\x9a\x9b\x81\xa7[O\xc6\xac\xa8\f\x9blv\x82\x88I\xef\v\xad\xb9R\xd5\x0eb\xff\xba\x1d\x8f\r\xf7\xdb\xf1\x1bSv\xbe1\xf64f\xe8.\xf4eu`\xb6\xa41\x8e\v\x1f7\xb3\x8854<\x86\x17\x9c\xfch\xf2+9\x1f,\xc3\xdc\xa4\xe3@2\x85\xbb\x04\xfb3\x93\x0f\x88q<\x0f\xf6\x0565/\xd1\x00\xab\xc0\xa4F\xd6\x8e\x9aVm\xa2\xd0,\xb62sm:\xe6\x80%v\xe5\xa9\x1c\xd7\xed\x9e\xc7\x9a|N\b\b\xb2m\xd6Vr\xd9hg4 \xdc\xd8^d\x1e7o_A\xdc\xf0\xca\xca\xb9\xfc\xd9\x00-\xaf,\x12\xcc(#5I\xca\xd1\xd0\x11i\xa1\x04\x855@\x01\x93\t\x80\xee\xd6z%\xf3\x93Y1\xc7\x14Q\xf5\x13X\x03\xd4\x9f8\xcc\xd4yZ \xfa\xd9\x81\xf1\xfdy!x\x91\f\'\xdf2\xf2\x92\\];-\x8b\xdf\xc6\xdf\xc8a\xbc\xa6p\x97\xf14\x03\xd6\xc1>\xfa\xda\xa6\x18\xff\xcbA\xe7\xf4\xf6\xd5\xd6\xd7\xa0\xeae0c\xdb\xb0\x8d\xbfN\x00q\xc4*5\x9b\x1b\xb9TF\xe2N2u~B\x98\xd8\xa9g\x93\xf0\x12\x9d\x19(n\xac\xee\xcc@6\x9e\xf6\x15\xe9f\xa7NBT\xf6\xf0\xbd\x88{.\xd5\x90\x95\xfde\x13\x8c\xbe\xdc\xd3Z\x16\xd6\xcb\xcf\xb6\x8c\x9b\xd8\x81\xff\xef'}, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/apparmor/.access\x00', 0x2, 0x0)
write(r5, &(0x7f00000002c0)='profile\x00&', 0xfef)

15m33.284101799s ago: executing program 3 (id=241):
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./bus\x00', 0x80, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x1, 0x13a, &(0x7f0000000200)="$eJzs2r9Kw0AcB/DfIAgdHZ0ClSho/mtddRQ33yC0uTR4Z0oiSPsC4iQonIMvIfgEPkJGN10EfYnI2au2qWgnD+H7Wfqlv+RyuYPL8nOKXASsdIi2BldHLytFLqxOtNtlAYtp7ICILBWqur5xac7TZ72qyf3mArPW3sa/7Y1UHl6wjCeh6SkBAAAAAAAAAAAAAAAAAAAAAMCC7JYOrb4U5yzjSTBVLYej45jzpCgNTc8429I9XMQkv1XrE83UN1+J7D2VMrlfqLo/e/+1Dut9yZ+b6+udioFXDkdOJuI0SZOTMIw6/rbv74Tex1hec0T7Ts+Jqvren28ns6f6zR4X6TfT+7+0msnLs+bTvvYfAQEBYRJ+PVf+i8n3r7cctR/U+ed2c97Tf/7Fchp8dwD4wXsAAAD//7SlOms=")
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
dup(0xffffffffffffffff)
syz_open_procfs(0x0, 0x0)
openat$dsp(0xffffffffffffff9c, 0x0, 0x4c2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, 0x0, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r3, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x172)
syz_mount_image$fuse(0x0, &(0x7f0000000500)='./file0\x00', 0x1046039, 0x0, 0xf, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan1\x00'})
sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x44}}, 0x0)

15m24.85010778s ago: executing program 3 (id=252):
socket$nl_netfilter(0x10, 0x3, 0xc)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x147)
syz_emit_ethernet(0xd82, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_debugfs\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./my_debugfs\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./my_debugfs/usb/devices\x00', 0x0, 0x0)
read(r3, &(0x7f0000000500)=""/100, 0x7ffc)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa8f94000)

15m20.141391839s ago: executing program 32 (id=235):
r0 = socket$inet(0x2, 0x3, 0x4)
setsockopt$inet_int(r0, 0x0, 0x13, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r4=>0x0})
r5 = socket$rds(0x15, 0x5, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0)
sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)={0x24, r6, 0x1, 0xffffffff, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, "02"}]}, 0x24}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r4, @ANYBLOB="05005b"], 0x24}}, 0x240008d0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r10=>0x0})
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0)
sendmmsg(r1, &(0x7f00000000c0), 0x4000000000000d2, 0x8048848)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
ioctl$XFS_IOC_GET_RESBLKS(r0, 0x80105873, 0x0)

15m7.757790298s ago: executing program 33 (id=252):
socket$nl_netfilter(0x10, 0x3, 0xc)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x147)
syz_emit_ethernet(0xd82, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_debugfs\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./my_debugfs\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./my_debugfs/usb/devices\x00', 0x0, 0x0)
read(r3, &(0x7f0000000500)=""/100, 0x7ffc)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa8f94000)

13m3.599409978s ago: executing program 4 (id=514):
mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./tracing\x00', 0x1ff)
socket$nl_route(0x10, 0x3, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0)
write$proc_mixer(r1, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x4000)
close(r1)
mlockall(0x2)
socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000)
syz_clone3(0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
userfaultfd(0x801)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x5, 0x2)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)

13m2.30139625s ago: executing program 4 (id=519):
r0 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)={'team0\x00', <r1=>0x0})
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
mkdir(0x0, 0x1ff)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf947b000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mount$9p_rdma(&(0x7f0000000180), 0x0, &(0x7f0000001440), 0x1008840, 0x0)
munmap$KVM_VCPU(0x0, 0x10000)
r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x458, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r5, 0x80045530, &(0x7f00000000c0)=""/50)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000019280)=@newneigh={0x1c, 0x1c, 0x1, 0x70bd26, 0x25dfdbfe, {0x2, 0x0, 0x0, r1, 0x2, 0xd7, 0x4}}, 0x1c}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x25}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)

12m59.628764287s ago: executing program 4 (id=523):
syz_open_dev$tty1(0xc, 0x4, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
shmctl$IPC_RMID(0x0, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa5a01f3c2f1360806"], 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000003c80)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48)
unshare(0x22020600)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000940), &(0x7f00000000c0), 0xa7c, r4}, 0x38)

12m51.557073209s ago: executing program 4 (id=554):
gettid()
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x17, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000000000000000000000000021811", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2d, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0xfca804a0, 0xe, 0x0, &(0x7f0000000100)="0400c811fe37db1ba91d3305a782", 0x0, 0x975, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
epoll_create1(0x0)
openat$sw_sync(0xffffffffffffff9c, 0x0, 0x800, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
r4 = syz_open_dev$sndctrl(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000040))
syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x0, 0x2882)
r5 = socket$inet(0x2b, 0x801, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x48f, &(0x7f00000000c0)={0x1, @private, 0x0, 0x0, 'sed\x00', 0xa, 0xfffffffb, 0x14}, 0x2c)
pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0)

12m48.838083717s ago: executing program 4 (id=560):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0)
ioctl$FBIOBLANK(r4, 0x4611, 0x2)
getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, 0x0, &(0x7f0000000440))
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000002c0)=0x1, 0x4)
sendmmsg$inet(r0, &(0x7f0000000580), 0x0, 0x24004c41)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001000010700000000004000000a000000060001001800000008000a"], 0x24}}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r6)

12m45.895481801s ago: executing program 4 (id=564):
syz_open_dev$tty1(0xc, 0x4, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
shmctl$IPC_RMID(0x0, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa5a01f3c2f1360806"], 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000003c80)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48)
unshare(0x22020600)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000940), &(0x7f00000000c0), 0xa7c, r4}, 0x38)

12m30.672907642s ago: executing program 34 (id=564):
syz_open_dev$tty1(0xc, 0x4, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
shmctl$IPC_RMID(0x0, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa5a01f3c2f1360806"], 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000003c80)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48)
unshare(0x22020600)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000940), &(0x7f00000000c0), 0xa7c, r4}, 0x38)

12m10.299051312s ago: executing program 0 (id=635):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0)
syz_open_dev$video4linux(0x0, 0x0, 0x0)
openat$comedi(0xffffffffffffff9c, 0x0, 0x8000, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xff}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
shmctl$SHM_INFO(0x0, 0xe, 0x0)
io_submit(0x0, 0x0, &(0x7f0000000400))
setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'bridge0\x00', 0x1}, 0x18)
mount$afs(&(0x7f00000004c0)=ANY=[@ANYRES8], &(0x7f0000000140)='./cgroup\x00', &(0x7f0000000080), 0x8000c0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "9c"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x100}}, 0x0)

12m7.974588441s ago: executing program 0 (id=639):
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000005, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0)
r3 = fsopen(&(0x7f0000000180)='proc\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x1)
fchdir(r4)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x68800, 0x1c)
lseek(r5, 0x100, 0x1)
r6 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x840, 0x0)
ioctl$SNDCTL_TMR_TIMEBASE(r6, 0xc0045401, &(0x7f0000000040)=0x13c)
getdents64(r5, 0x0, 0x4f)

12m6.901977777s ago: executing program 0 (id=642):
r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3f}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x35, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x20}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f00000000c0), 0x0, &(0x7f00000005c0)={0x0, "6351f36b675d953ebe73ce168e84d5135a5ba63762fcb5da76813382a701d83ed8eddbadab1845a09539233c294dda5568f4f3675066bfaa2140cfb4c024fe77", 0x2c}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x34, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x62, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000900)={'fscrypt:', @desc1}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x34}, 0x48, r0)
add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x37, 0x32, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r0)
add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x30, 0x65, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x6f, 0x30, 0x30, 0x30, 0x30, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x63, 0x35, 0x30, 0x30, 0x0, 0x30, 0x63, 0x66, 0x50, 0x30, 0x61, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00bbccddeeff8899aabbccddeeff001122284455667788992abb01ddeeff0011223344556677da4d9dbbccddeeff00", 0x40}, 0x48, r0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x446f9958c1a2aa84, 0x30, 0x30, 0x30, 0x2f, 0x36, 0x64, 0x30, 0x30, 0x30, 0x65, 0x31, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0)

12m6.779968331s ago: executing program 0 (id=644):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f0000000780)={[{@jqfmt_vfsold}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@nodiscard}, {@noload}, {@delalloc}, {@mblk_io_submit}, {@commit}, {@noblock_validity}, {@lazytime}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}]}, 0xfa, 0x481, &(0x7f0000003380)="$eJzs3MtvFdUfAPDv3D54/9of4gMEqaKR+GhpecjCjUYTFpqY6ALjqraFVAo1tCZCiFYXuDQk7o3/hXGlG6NuNHGre0NCDDEBdTNm7szApdwpt/S2F3o/n2Tac2ZO7znfOXNuz8xpbwBdayj7kkRsjYjfImIgz95aYCj/dv3qhYm/r16YSCJN3/wzqZe7dvXCRFm0/LkteSZNi/yGJvVefCdifGZm6myRH5k//f7I3Lnzz0+fHj85dXLqzNjRo4cO7uk/Mna4LXFmcV3b9dHs7p3H3r70+sTxS+/+mNQijzsWxdEuQ/nZbeqpdlfWYdsa0klv45G9P99MN7sS6KSeiMi6q68+/geiJzbdODYQr37a0cYBqypN03SJd+WFFFjHkuh0C4DOKH/RZ/e/5bZGU497wpWX8hugLO7rxZYf6Y1antjbt+j+dmsb6x+KiOML/3yZbbFKzyEAABp9m81/nms2/6vFQ3miP/vyv2INZTAi/h8R2yPigYjYEREPRtTLPhwRjyyz/sUrJLfPf2qX7zq4FmTzvxeLta1b53+1sshgT5HbVo+/LzkxPTN1oDgn+6Nvw4npZGp0iTq+e+XXz6uONc7/si2rv5wLFu243LvoAd3k+Pz4SmJudOWTiF29zeJPolzGSSJiZ0Tsuss6pp/prTx25/iXUP2yLUu/ing67/+FWBR/Kalcnxx94cjY4ZGNMTN1YKS8Km730y8X36iqf0Xxt0HW/5ubXv834h9MNkbMnTt/qr5eO7esl8+GTlz8/bPKe5oi/mx4tXL9H9tWXP/9yVv1Hf3FgQ/H5+fPjkb0J6/dvn/s5quV+bJ8Fv/+fc3H//a4eSYejYjdEbEnIh7LbgqLtj8eEU9ExL4lTsIPLz/53h3ib9L/a7NWmsU/Wd3/f6VZ/0dj/y8/0XPq+2/uHP/GiKjq/0P11P5iTyvvf602cKXnDwAAAO4H+d/AJ7XhG+labXg4/xv+HbG5NjM7N//sidkPzkzm696D0Vcrn3QNNDwPHS2eDZf5sUX5g8Vz4y96NtXzwxOzM5OdDh663JaK8Z/5o6fTrQNWXRvW0YD7lPEP3cv4h+6UGP/Q1Yx/6F7Nxv/HlaWHv17VxgBryu9/6F4tjP+F/Fv1rAC4PzUb/wMdaAew9sz/oStV/m98bUX/8r/miX+LzzO8V9qz/hNRuyeasf4TvS1/mMUyEmkxv8/2bGhaptPvTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO3xXwAAAP//2Y/lXQ==")
r0 = creat(&(0x7f0000002280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa4)
creat(&(0x7f00000009c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x90)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="06000000040000000300000089"], 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, &(0x7f0000000780)=""/106, &(0x7f0000000380), &(0x7f0000000000), 0x80, r4, 0x0, 0x7}, 0x38)
mknod(&(0x7f000001f480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f00000030c0), &(0x7f0000002d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20084, 0x0, 0x0, 0x0, &(0x7f00000002c0))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r6, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8140}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r6, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x7ff, 0x339d, 0x2}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40001}, 0x4004004)

12m4.307279803s ago: executing program 0 (id=649):
socket$inet6(0xa, 0x80003, 0xff)
openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7)
r0 = fanotify_init(0x0, 0x80000)
pipe2(&(0x7f00000000c0), 0x80000)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup(r0)
epoll_create1(0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/diskstats\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @local}, {0x2, 0x4e23, @loopback}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8})
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r2, &(0x7f0000000000), 0xd)

11m59.160427781s ago: executing program 0 (id=662):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3, 0x401d031, 0xffffffffffffffff, 0x0)
socket$inet(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, <r5=>0x0}, 0x2020)
write$FUSE_INIT(r4, &(0x7f0000000080)={0x50, 0x0, r5, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50)
mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x3a84821, 0x0)
getdents(0xffffffffffffffff, 0x0, 0x0)

11m56.885216749s ago: executing program 35 (id=662):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3, 0x401d031, 0xffffffffffffffff, 0x0)
socket$inet(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, <r5=>0x0}, 0x2020)
write$FUSE_INIT(r4, &(0x7f0000000080)={0x50, 0x0, r5, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50)
mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x3a84821, 0x0)
getdents(0xffffffffffffffff, 0x0, 0x0)

4m39.600525129s ago: executing program 7 (id=1675):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x4002, &(0x7f0000000000), 0x1, 0x75d, &(0x7f0000001240)="$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")
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup3(r0, r1, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r1, 0x30d38000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000080)=0x40)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff}, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r6, 0x7}}, 0x48)
r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740)={<r8=>0xffffffffffffffff}, 0x2, 0x5}}, 0x20)
write$RDMA_USER_CM_CMD_BIND(r7, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r8, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90)

4m37.390500975s ago: executing program 7 (id=1680):
r0 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb)
pipe2$watch_queue(&(0x7f0000000080)={<r1=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000089c0)=[{{&(0x7f0000001f00)={0x2, 0x4e23, @broadcast}, 0x10, 0x0}}], 0x1, 0x20004804)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_emit_vhci(&(0x7f0000001a40)=ANY=[@ANYBLOB="0402"], 0x6)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r4=>0x0})
bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4, 0x0, {0x0, 0xf0}, 0xfe}, 0x18)
r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x19, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000000000000b702000014000002b703000000fb00008500000083000000bf0900000000000055090100000000009500000000000000850000005000000018", @ANYRES32=r5], &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
connect$can_j1939(r3, &(0x7f0000000140)={0x1d, r4, 0x100000000000000, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0xfd}, 0x18)
sendmmsg(r3, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5)
keyctl$clear(0x7, r0)
socket$inet6(0xa, 0x3, 0x5)
ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000040)={{&(0x7f00000e5000/0x3000)=nil, 0x3000}, 0x1})
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)

4m33.656130478s ago: executing program 7 (id=1683):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000000400"], 0x48)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x100102, 0x40)
sendfile(r0, r0, 0x0, 0x6)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setpriority(0x0, r1, 0x5)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
r4 = syz_open_dev$sndpcmp(0x0, 0x0, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r4, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0x0, 0x71a0, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2, 0xffffffff], [0xffffffff, 0x0, 0x80000001, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0x5}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xfffffffb}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0x80}, {0x0, 0xffffffff}, {0x8, 0xffffffff}]})
write$P9_RSTATu(r4, 0x0, 0x6e)
r5 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x11, 0x0, 0x10001, 0x0, 0x2, 0x0, 0x0, 0x3, 0x4}})
r6 = socket(0x10, 0x3, 0x0)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10023}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r7}}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x40}}, 0x0)

4m18.722927012s ago: executing program 7 (id=1709):
openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
read(0xffffffffffffffff, &(0x7f0000000300)=""/96, 0x60)
add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, 0x0)
fsopen(&(0x7f00000002c0)='jffs2\x00', 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, 0x0, 0x0)
r3 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r3, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x40047452, &(0x7f0000000380)={'wlan0\x00'})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@ipv4_delroute={0x30, 0x19, 0x1, 0x70bd2d, 0x25dfdbfe, {0x2, 0x20, 0x20, 0x0, 0xff, 0x2, 0xff, 0x2, 0x1a00}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x28, 0x10}}, @RTA_DST={0x8, 0x1, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x448d0}, 0x1000)

4m17.486183053s ago: executing program 7 (id=1711):
socket$kcm(0x11, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301)
ioctl$USBDEVFS_FREE_STREAMS(r3, 0x8008551d, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x1)
fremovexattr(0xffffffffffffffff, &(0x7f0000000040)=@known='system.posix_acl_default\x00')
getxattr(&(0x7f0000002a80)='./file0\x00', &(0x7f0000002ac0)=@known='system.posix_acl_access\x00', 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008"], 0xe8}}, 0x0)

4m16.02940317s ago: executing program 7 (id=1714):
socket$inet6(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x20000000}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0)
ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x15)
msgget(0x2, 0x321)
msgget(0x1, 0x240)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
msgctl$IPC_RMID(0x0, 0x0)
ptrace(0x10, 0x1)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
read$FUSE(r4, &(0x7f0000000600)={0x2020}, 0x2020)

4m0.863364739s ago: executing program 36 (id=1714):
socket$inet6(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x20000000}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0)
ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x15)
msgget(0x2, 0x321)
msgget(0x1, 0x240)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
msgctl$IPC_RMID(0x0, 0x0)
ptrace(0x10, 0x1)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
read$FUSE(r4, &(0x7f0000000600)={0x2020}, 0x2020)

21.771916011s ago: executing program 5 (id=2202):
socket$igmp(0x2, 0x3, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x841)
fcntl$setpipe(0xffffffffffffffff, 0x8, 0x80000000)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0)
ioctl$SYNC_IOC_FILE_INFO(0xffffffffffffffff, 0xc0383e04, &(0x7f0000000140)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = syz_open_procfs(0xffffffffffffffff, 0x0)
preadv(r3, 0x0, 0x0, 0x46, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r4, &(0x7f0000000100)={0x1f, 0x80, @any, 0x0, 0x1}, 0x10)
listen(r4, 0x5)
prctl$PR_SET_NAME(0x45, 0x0)
syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x42, 0x8}, {0x80, 0x8200, 0x200, 0xa}}}}, 0x15)
accept4(r4, 0x0, 0x0, 0x800)

18.543960823s ago: executing program 5 (id=2207):
syz_mount_image$nilfs2(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1080c, &(0x7f0000000780)=ANY=[@ANYRES64=0x0, @ANYRESOCT=0x0, @ANYBLOB, @ANYBLOB="d1794da8c0ccda034276e28a25c45c8e1eb8b595a37ffdfe7d2a8c3972a6931d2cbb0d8dc920bbde15d8790d46ccb3a5f36ff412236251d86334f17545ccae88", @ANYRES8=0x0, @ANYRESDEC=0x0, @ANYRES32, @ANYRES64, @ANYRESDEC=0x0, @ANYRESOCT, @ANYRES32], 0x1, 0xa8f, &(0x7f0000001400)="$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")
mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0)
r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/dynamic_debug/control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000100)='+p', 0x2)
syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000004c0)=ANY=[@ANYBLOB="6a6f75726e616c5f6173796e635f636f6d6d69742c686561720a000000743d6e6f6e652c75737271756f74612c642174613d77726974656261636b2c6469725f726573765f6c6576656c3d30303030303030303030303030010000003030302c696e6f646536342c00"], 0x0, 0x4714, &(0x7f0000009780)="$eJzs212IXFcBB/BzJ6vZpMl2P9ImafoxSQQXLcumT9X6ENeqjabNh7bVVFlnN9vN6uzMujujBYPUIIiCoARBxQ+qQulLLYiBvtQiFPxAWoVSUbS+iBSq4INBG+jKzNybnXtntneyk7S0/f2gnb3n3nPumf3vPXfOPZNCrHZqYaW4sFIsVYrV2ftXbil+rlquL86FwqvktT4/vbkSOcn+tXPkfR/4yD23hPCHY1/70Orq6mpoGA5dHWj7+fy/T8+2vyYKmTqNdru31vLH+iMv/fwtr3REnhMhhB0d/WrYFEL42C9C2BxCGInLRuPXLSGEbSGEKITw6G/+9ePBfrrQ5uy9Lzx37MzhfWemHn/smQvzR9c9MArhu+XdN88vvrh/023Pv+MynR4AAF7RB48fufvo5IHwZBSGzg10fl7fGb8mn4/vfNun7np4YG3/Kr3Z9CqGCgAAABlr8//h6OUu63XJylqyJPjEAyfufipa229i+/p26K4jt79/8kC8/ht17L81Lvrnezc111Cz677Z9d+RTP3u679r53n4q8/+svLWjfc/6V9y3uEQFSZS24XCxEQIx6Za27uirYVydaX2zvur9crJjZ/3jSKdf3b1fm1Bv9f8RzPV89b/d3/i8z/bMtDPOxgL2b/axnax80+ZLtL5rz+W/+RLUU/5j2Xq5eV/x9Pbz/9qc2d57/Flz8ilSOffuhD3tR9QbA0Ajfy/OZCf/45M+3n5f3/q3KMnNvD9n8Y4Mxw1+jqYGgFejsvX+QoTGen8W0Gkrr34F7ne9f+/TP7XZNrPy//O6j9+97c+7v/rjf/jU/20+eaRzr8VRDF1xNr1P1LIv/6vzbSfl/9vT/352U/2da/uzL/R/3H3/56k849vxOnBs/mb7HX835lpPy//XWP3PbSwgX5/eEvcz6EojLV96/Rc4xY2tLZe3ZzSNHYvbeAkbwLp/Fu/tdSlM9R6aV7/w/nj/65M+3n5P7Tn6+853df3f7uP/5PG/56k89/SLLuU/F/K5L87035e/j88/fe/3HeZx//G9kH59ySd/9aO/WvPfwo9zf+uy9TPe/6zb/SpR/7ax/w/6V9y3uT5T/IcYjxqPf+hu3T+V617XK/3/z2ZennX/7f+8/zT+/sZ/6NBTwD6kM5/W6uwywSw1/yvz7Sfl/8X7vnyx/+0gflf8xPfYJJ/2/x/c6v8qPG/J+n8t7cKU/8Y6sHm/5v3/6gz9/9m8r8h035e/hcOTQx85TLf/xv9H+/yKJtO6fyH1j2ukf/ve7j/35ipl5f/F/f+9MWb+/r8H8Kkuf6GpfO/et3jmtf/YH7+N2Xq5eX/nW/8+okH++j/2/uoSzb/1r0+dTnFn817nf8XM+3n5f+j8fNn91+B+d+t7v89SeffWjW/lPyz8/+9mfbz8v/ekR8sD1yB5z93yB8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGBDRuPX4RAVJlLbhcLERAhj8fausDWaKZ2cnilXZz+zEsKOuLwYRqP5cnWmVJ5eqFRPzk2XyuXqbAjXxPt3hMFopVytTS+Wlq692NaW6NRcabk2M1eqhRB2xuXXh+1JWzMLtcXSUvPYpM5VUemz9WqtNFFfmVsOuy+Wb0vK55er9aXrLrZ1daG6vHSqVJk+ubD87snJycmw52KfR6K5B2pzlVqrt629jTpJ3eGo7c00d9/Qdr5PV+vLlVK5WX5jW51ydbZUbqtzU9v5asv1ymypNjddrs4n5yu21W17b83de+N942Ek9f6SulkH49fbDx3/6PHDBzr2F6N03pX64tzk9u5/EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC8cT1527u+HUIYaG0VQggHkx+i+L+Us/e+8NyxM4f3nZl6/LFnLswf7XYMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwP/ZgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqws79vEQRxnEAfmdss8BS6SLkMTBERG8SFvSLSCrXyI5dOgd1SsigKDCM6FgQBEHdooKgU1D5F0QdPHaqLnXoYBBBxehMLjvCllKz7jwPDO87jPPOFwbced/PMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADSPszsWOpL20q7Ni1tXXwjt6bGNIYSRaKn/eW9b6A4hfP0yfTqs0Ga668Z/MzE7lr9q9Lu3f+zh9ZFo9fVn52bX7QpRPFizvzOK48HB1Y/fqu4MPJsaiEKIiy6EQsyPPjlTCSG0FV0Ihfj5ce5i8v99Q9GFUIi+D3c7kvtfKboQCtG5+1NvJX3Go3zOVy8M1P72N3oEX8MjOk3o7ckr72I3tfRepvP/KN3MB9erzpp+41ndzIkj75//03poZjOzk0eLrgEAAPi/zjXI/8PWpf79y1Ho7srn/t/q8v+euvFXzv+X3dt+Y3R6TSHEttzaZLI/tG8tY7a+U/1Xb7+uWO9pCVv+/hT5f7nJ/8tN/l9u8v9yk/+Xm/yfxCv5fyk9vrln4UXRRVAY+T8AAJTPoePjk9Wh4WTyv+lHez6v703bapqnP7g11f+oZt1Ifri+HT42fuDg0HB63/MLgsvff4gXj35P3/eobzMTde9dNPr+Q8/T+blr7fm/qP7h+xtZfdl1ff8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAX+zOsQmDYBCA0f+SJhtkjWSKQJpEwT2cwdIBHMXaGZzDygW0ENHC1kbea+7gg+MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALi+T/4r/q936iLdpojUZ/V335/rUi5jaKp2vG89Dq8+TvsXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGZ24EAGAAAAQJi/dR7tBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgpwAAAP//52PLYw==")
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, 0x0, 0x40)
mount(0x0, &(0x7f0000000200)='./sys\x00', 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_udp_int(r3, 0x11, 0xb, &(0x7f0000000200)=0x6, 0x4)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10)
syz_emit_ethernet(0xbe, &(0x7f0000000300)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x68, 0x0, 0x0, 0x88, 0x0, @remote, @local}, {0xfffe, 0x4e24, 0x4d, 0x0, @wg=@initiation={0x1, 0x4, "497a1d08fd3d0ee007022798bb6374ed840b4f36f41fc4d035e9ebe414aa958d", "4bbef5e4007898221aa606d083cd59745493938f1e2de8fdadd3823fedd2c01b2aff03050a4ca5d10fd1b6b06f47ea42", "ef7c9d6a98e3943f6892078bb952854743fe4dddd2e7c0ce70a4ac7d", {"a851525b16af17fe87acbae2ab0b233d", "01422d01cd53c3abe94331d0b7918724"}}}}}}}, 0x0)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r4, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a5f74756e"], 0x38}}, 0x8000)
syz_emit_ethernet(0x36, &(0x7f0000000300)={@random="ffffffffffff", @random="aabbccddeeff", @void, {@generic={0x88ca, "5b500028003a00000000000001000001000012670000000000000000000000001122334411223344"}}}, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000500)={@random="ffffffffffff", @random="aabbccddeeff", @void, {@generic={0x88ca, "4f4000384000000000000000010000010000000100010000010000010000000400000000002800006574683000"/56}}}, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x6, 0x8, 0x2)
r5 = syz_open_procfs(0x0, &(0x7f0000001240)='numa_maps\x00')
preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)

15.347935423s ago: executing program 5 (id=2216):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4)
bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4)
bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4)
bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c)
r4 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast1, 0x5}, 0x1c)
r5 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x6}, 0x1c)
r6 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe20, 0x0, @empty}, 0x1c)
r7 = socket$inet6(0xa, 0x2, 0x0)
r8 = socket(0xa, 0x2, 0x0)
bind$inet6(r8, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5}}, 0x1c)
setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000080)=0x5, 0x4)
bind$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c)
r9 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r9, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x1000000}, 0x1c)
r10 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r10, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c)
r11 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r11, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c)

15.178404588s ago: executing program 5 (id=2218):
ioperm(0x3, 0x4, 0x100000a)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/kernel/fscaps', 0x2, 0x0)
add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200), 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0xb, 0x11, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracefs/available_tracers\x00', 0x0, 0x0)
preadv(r3, &(0x7f00000014c0)=[{&(0x7f0000001280)=""/114, 0x72}], 0x1, 0x8, 0xfffffffe)
preadv(r3, 0x0, 0x0, 0x80000003, 0xfffffa64)
capset(&(0x7f00000000c0)={0x20080522, r1}, &(0x7f0000000280)={0x0, 0x3, 0xa, 0x0, 0x10040, 0x400008f})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00', 0x2, 0x0)
sendfile(r4, r4, 0x0, 0x6)

12.898977695s ago: executing program 5 (id=2220):
openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
read(0xffffffffffffffff, &(0x7f0000000300)=""/96, 0x60)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, 0x0)
fsopen(&(0x7f00000002c0)='jffs2\x00', 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, 0x0, 0x0)
r3 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r3, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x40047452, &(0x7f0000000380)={'wlan0\x00'})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@ipv4_delroute={0x30, 0x19, 0x1, 0x70bd2d, 0x25dfdbfe, {0x2, 0x20, 0x20, 0x0, 0xff, 0x2, 0xff, 0x2, 0x1a00}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x28, 0x10}}, @RTA_DST={0x8, 0x1, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x448d0}, 0x1000)

12.865282956s ago: executing program 8 (id=2222):
socket$packet(0x11, 0x2, 0x300)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$kcm(0x21, 0x2, 0xa)
r4 = socket$inet_dccp(0x2, 0x6, 0x0)
getsockopt$inet_int(r4, 0x10d, 0x98, &(0x7f0000000000), &(0x7f0000000080)=0x4)
sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x22}, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000100100000d000000aa0000006900000018000000000000001001000001"], 0x30}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x4805)
r6 = socket$rxrpc(0x21, 0x2, 0xa)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000040)=0x2, 0x4)
sendmsg$inet(r6, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x0)
openat$userio(0xffffffffffffff9c, &(0x7f0000000300), 0x22242, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a80)={0x20, 0x3e, 0x1, 0x70bd26, 0x4, {0x2}, [@nested={0x4, 0x48}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x10}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x400c801}, 0x200080c4)

12.282058781s ago: executing program 1 (id=2223):
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000001840), 0xa0000, 0x0)
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000001880)="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")
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = open(&(0x7f0000000280)='.\x00', 0x80, 0x28)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/igmp6\x00')
preadv(r4, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x40000000, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0)
remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="09000000040000000400000007000000000000", @ANYRES32], 0x48)
syz_emit_vhci(0x0, 0x14)
r6 = socket$kcm(0xa, 0x2, 0x0)
r7 = socket(0x2, 0x80002, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x84, @private=0xa010100, 0x4e22, 0x3, 'sh\x00', 0x8, 0x3, 0x6f}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010103, 0x4e21, 0x3, 'lblcr\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x0, 0x6, 0x1}}, 0x44)
mkdirat(r1, &(0x7f0000000080)='./bus\x00', 0x40)
sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x15, 0x0, @dev={0xfe, 0x80, '\x00', 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
fcntl$notify(r2, 0x402, 0x3f)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x8042, 0x1f6)

12.28106354s ago: executing program 9 (id=2224):
r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
fcntl$setlease(r0, 0x400, 0x1)
r1 = socket$rxrpc(0x21, 0x2, 0xa)
unshare(0x24040400)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, 0x0, &(0x7f0000000440))
fcntl$setstatus(r1, 0x4, 0x400)
syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000bcb7f620e90f01d55023010203010902"], 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, 0x0, 0x0)
listen(r3, 0x5)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000005, 0x401d031, 0xffffffffffffffff, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x1fc}, 0x1c)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r4, 0x0, 0x0)
listen(r4, 0x0)
r5 = syz_open_dev$I2C(0x0, 0x1, 0xae00)
ioctl$I2C_RDWR(r5, 0x707, &(0x7f0000000040)={0x0})
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)

12.113705335s ago: executing program 9 (id=2226):
syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
gettid()
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf9477000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x19, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
connect$unix(r2, 0x0, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
r4 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff)
r5 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff)
r6 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000300)={0x0, "6035ae1e0fe721441705322025000000003e2a5b4377f7ad4bcf2b71d17e1ec0ef54e6773fd7264c39ea00c508ba607269613800"}, 0x48, 0xfffffffffffffffe)
keyctl$KEYCTL_MOVE(0x4, r6, r5, r5, 0x0)
keyctl$KEYCTL_MOVE(0x4, r4, r4, 0x0, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={<r7=>0xffffffffffffffff})
recvmmsg(r7, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000, 0xfff5}}], 0xf00, 0x0, 0x0)
setsockopt$sock_int(r7, 0x1, 0x2e, &(0x7f0000000000)=0x400000d2, 0x4)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'})

10.690737071s ago: executing program 9 (id=2229):
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000390000/0x1000)=nil)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socket$pptp(0x18, 0x1, 0x2)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0xffff, 0x181, 0x100}})
getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000100)='./file1\x00', 0x13b)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r5)
recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, '\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/'}}, {@index_on}, {@workdir={'workdir', 0x3d, './bus'}}]})
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000060000402505a1a440000102030109025c0002010000000901000100020d00000524060001052400000006241a0000000905810300020000040904010000020d00000904010120ee0e00", @ANYBLOB="e2"], 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
r7 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f)
write$FUSE_CREATE_OPEN(r7, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x1, 0x5, 0x1000000000000006, 0x3, 0x1, {0x4, 0x9, 0x20ff, 0x1, 0xe395, 0xd615, 0x9, 0x2, 0x9, 0x8000, 0xffffffff, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0)

9.601450948s ago: executing program 8 (id=2231):
ioperm(0x3, 0x4, 0x100000a)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/kernel/fscaps', 0x2, 0x0)
add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200), 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0xb, 0x11, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracefs/available_tracers\x00', 0x0, 0x0)
preadv(r3, &(0x7f00000014c0)=[{&(0x7f0000001280)=""/114, 0x72}], 0x1, 0x8, 0xfffffffe)
preadv(r3, 0x0, 0x0, 0x80000003, 0xfffffa64)
capset(&(0x7f00000000c0)={0x20080522, r1}, &(0x7f0000000280)={0x0, 0x3, 0xa, 0x0, 0x10040, 0x400008f})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00', 0x2, 0x0)
sendfile(r4, r4, 0x0, 0x6)

9.600787248s ago: executing program 6 (id=2232):
socket$igmp(0x2, 0x3, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x841)
fcntl$setpipe(0xffffffffffffffff, 0x8, 0x80000000)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0)
ioctl$SYNC_IOC_FILE_INFO(0xffffffffffffffff, 0xc0383e04, &(0x7f0000000140)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = syz_open_procfs(0xffffffffffffffff, 0x0)
preadv(r3, 0x0, 0x0, 0x46, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r4, &(0x7f0000000100)={0x1f, 0x80, @any, 0x0, 0x1}, 0x10)
listen(r4, 0x5)
prctl$PR_SET_NAME(0x45, 0x0)
syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x42, 0x8}, {0x80, 0x8200, 0x200, 0xa}}}}, 0x15)
accept4(r4, 0x0, 0x0, 0x800)

8.530340475s ago: executing program 8 (id=2233):
socket$kcm(0x11, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f00000005c0)={{}, {0x1, 0x1}, [{0x2, 0x3}], {}, [{0x8, 0x9}, {0x8, 0x2}], {0x10, 0x3}, {0x20, 0x1}}, 0x3c, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301)
ioctl$USBDEVFS_FREE_STREAMS(r3, 0x8008551d, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x1)
fremovexattr(0xffffffffffffffff, &(0x7f0000000040)=@known='system.posix_acl_default\x00')
getxattr(&(0x7f0000002a80)='./file0\x00', &(0x7f0000002ac0)=@known='system.posix_acl_access\x00', 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0xe8}}, 0x0)

6.3488178s ago: executing program 6 (id=2234):
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
socket$pptp(0x18, 0x1, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
fanotify_init(0xf00, 0x0)
inotify_init1(0x800)
pipe2(&(0x7f00000000c0), 0x80000)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$video4linux(&(0x7f00000001c0), 0xff, 0x2100)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup(r0)
epoll_create1(0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/diskstats\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
socket$inet6_udp(0xa, 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @local}, {0x2, 0x4e23, @loopback}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8})
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r2, &(0x7f0000000000), 0xd)

6.338341781s ago: executing program 9 (id=2235):
r0 = socket(0x1, 0x803, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700ff01000000000000000000000000000108000a00", @ANYRES32=r2], 0x54}}, 0x0)

6.232203243s ago: executing program 9 (id=2236):
r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
fcntl$setlease(r0, 0x400, 0x1)
r1 = socket$rxrpc(0x21, 0x2, 0xa)
unshare(0x24040400)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, 0x0, &(0x7f0000000440))
fcntl$setstatus(r1, 0x4, 0x400)
syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000bcb7f620e90f01d55023010203010902"], 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, 0x0, 0x0)
listen(r3, 0x5)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000005, 0x401d031, 0xffffffffffffffff, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x1fc}, 0x1c)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r4, 0x0, 0x0)
listen(r4, 0x0)
r5 = syz_open_dev$I2C(0x0, 0x1, 0xae00)
ioctl$I2C_RDWR(r5, 0x707, &(0x7f0000000040)={0x0})
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)

6.231257213s ago: executing program 6 (id=2237):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000f40)="$eJzs3M9vFFUcAPDvbH/Qyo9WRBQEraCR+KOlBZWDBzSaeNDERA94rG1BZKGG1gRIo8UYPBoS78ajiX+BNy9GPRgTr5p4NCREe6F4qpmdGbpsd0u3tF3pfj7Jdt/bmd33vjPv7b6Z15kA2tZA+ieJ2BYRv0dEX5a9fYWB7Gl+bmbs5tzMWBILC2//nVTWuzE3M1asWrxva545VIoofZbE8WRpuVMXL50ZLZcnzuf5oemzHw5NXbz03Omzo6cmTk2cGzl27OiR4RdfGHl+TeJM47qx9+PJfXtef/fqm2Mnrr7307dptXbvz5ZXx3FHN+sEVMdAutX+WaioXfZkE3W/F2yvSiedLawITemIiHR3dVX6f190xOLO64vXPm1p5YB1lf42bWm8eHYB2MSSaHUNgNYofujT49/isUFDj/+F6y9HdOfp+bmZsflb8XdGKX+9ax3LH4iIE7P/fpU+otnzEAAAq1AZ2zxbb/xXit2V52yuY0c+h9IfEfdHxM6IeCAidkXEgxGVdR+KiIezNy/0rbD8gZr80vFP6VrdOq+RdPz3UtXYb74q/vypvyPPba/E35WcPF2eOJxvk0PRtSXNDy9Txvev/vZFo2XV47/0kZZfjAXzClzrrDlBNz46PbpWG+H65Yi9nfXiT27NBKQtYE9E7G3uo3cUidNPf7Ov0Up3jn8ZazDPtPB1xFPZ/p+NmvgLyfLzk0M9UZ44PFS0iqV+/vXKW43Kv6v418D1A49kicX9X7NGVUMrlyfOTzVfxpU/Pm94TLPa9t+dvFOZs/7l/ey1C6PT0+eHI7qTNyr54piu8vrI4nsvjE73pvli/bT9HzpYv//vzN+T7v90K6WNeH9EPBoRj+V1fzwiDkTEwWXi//GVJz5YJv4kkmjd/r8cMV73++9W++9PqufrV5HoOPPDd41mzFe2/4/GbOW7NlP5/ruDlVbwLjcfAAAA3BNKEbEtktJglh7YFqXS4GD2P/y74r5SeXJq+pmTkx+dG8+uEeiPrlJxpquv6nzocDKbf2KWH8nPFRfLj+Tnjb/s6K3kB8cmy+Mtjh3a3dbb+38U/T/1V0erawesO9drQfuq7f+lFtUD2Hgr+f13LACb0+39vyf909uqugAby/E/tK96/f+TmrzxP2xOS/v/n3VuWQdsRsb/0L70f2hf+j+0pWYu54/jjRb1REQztwUoLhZY/V0FelZ8hX+7JIo7XqxnWb1x6Ux3/kqUWhRpR5ONbVMk0h6zsYUu3kMFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgXvZfAAAA//8hId5P")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10)
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
read$FUSE(r4, &(0x7f0000000480)={0x2020, 0x0, 0x0, <r5=>0x0, <r6=>0x0}, 0x2020)
fchown(r3, r5, r6)
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000400)=@nullb, r5, &(0x7f0000000440)='./file0\x00')
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f00000000c0), 0x1)
syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_misc(r7, &(0x7f0000000040), 0xe09)
r8 = add_key$user(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000080)="01", 0x1, 0xffffffffffffffff)
r9 = add_key$user(&(0x7f0000000140), &(0x7f0000000680)={'syz', 0x0}, &(0x7f0000000740)="f40fc24077021c9b084c60ffc26f26a45fdae52c8bdb12b9e78d629870bb26edb4a5e1cc0942ed8c58ca4fe84b94a0e31ea64089ee9ca1efb52945ffebbfea11dd3d0de936a10285ecca5c04ab5c96cb5d81dac1ad2243d878dde6cfd6ea08d5abcb00bb35436929ddabce530b63fab525337057438cf64a506d54d5c83e3e593d1d53ad0e6a44168fe8cfc6ad98b653d80636e4ddc194250b9557f5b606a43e50874c90143034142cd5f7bd9b4dd876b97b7feb75b9138dde818a3c6b96dd80", 0xc0, 0xfffffffffffffffb)
r10 = add_key$user(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x0}, &(0x7f00000004c0)="53e123a3461602ae0d", 0x9, 0xffffffffffffffff)
keyctl$dh_compute(0x17, &(0x7f0000000040)={r8, r9, r10}, &(0x7f0000000800)=""/4085, 0xff5, 0x0)
ioctl$VHOST_VDPA_GET_IOVA_RANGE(r7, 0x8010af78, &(0x7f0000000000))

5.1436665s ago: executing program 6 (id=2238):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
read(0xffffffffffffffff, &(0x7f0000000300)=""/96, 0x60)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, 0x0)
fsopen(&(0x7f00000002c0)='jffs2\x00', 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, 0x0, 0x0)
r3 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r3, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x40047452, &(0x7f0000000380)={'wlan0\x00'})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@ipv4_delroute={0x30, 0x19, 0x1, 0x70bd2d, 0x25dfdbfe, {0x2, 0x20, 0x20, 0x0, 0xff, 0x2, 0xff, 0x2, 0x1a00}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x28, 0x10}}, @RTA_DST={0x8, 0x1, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x448d0}, 0x1000)

5.120943581s ago: executing program 1 (id=2239):
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb)
pipe2$watch_queue(&(0x7f0000000080), 0x80)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bind$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, 0x0, 0x0, {0x0, 0xf0}, 0xfe}, 0x18)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)

5.079862062s ago: executing program 1 (id=2240):
socket(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f"], 0x1c}}, 0x0)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1004}], 0x1}}], 0x8, 0x34000, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4)
shutdown(r3, 0x1)
bind$inet6(r3, &(0x7f0000000240)={0xa, 0x4e20, 0x8001, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20080058)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000240)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94)
pipe(&(0x7f0000000280))
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/events/sched/sched_switch/trigger\x00', 0x2, 0x0)
r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
ioctl(r5, 0x400452c8, &(0x7f0000000000)="000000000000000000000000000000000000000001")
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0)
open$dir(&(0x7f0000000580)='./dev/rfcomm0\x00', 0x40000, 0x235)
write(r4, &(0x7f0000000180)='traceon', 0x7)

3.54972806s ago: executing program 1 (id=2241):
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000390000/0x1000)=nil)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socket$pptp(0x18, 0x1, 0x2)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0xffff, 0x181, 0x100}})
getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000100)='./file1\x00', 0x13b)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r5)
recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, '\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/'}}, {@index_on}, {@workdir={'workdir', 0x3d, './bus'}}]})
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000060000402505a1a440000102030109025c0002010000000901000100020d00000524060001052400000006241a0000000905810300020000040904010000020d00000904010120ee0e00", @ANYBLOB="e2"], 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x28, 0x18, 0x229, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @u32}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0xfd, 0x10, 0x0, 0x0, @ipv4=@broadcast}]}]}, 0x28}}, 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f)
mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0)

3.488453032s ago: executing program 6 (id=2242):
ioperm(0x3, 0x4, 0x100000a)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200), 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0xb, 0x11, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracefs/available_tracers\x00', 0x0, 0x0)
preadv(r3, &(0x7f00000014c0)=[{&(0x7f0000001280)=""/114, 0x72}], 0x1, 0x8, 0xfffffffe)
preadv(r3, 0x0, 0x0, 0x80000003, 0xfffffa64)
capset(&(0x7f00000000c0)={0x20080522, r1}, &(0x7f0000000280)={0x0, 0x3, 0xa, 0x0, 0x10040, 0x400008f})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00', 0x2, 0x0)
sendfile(r4, r4, 0x0, 0x6)

2.558911696s ago: executing program 8 (id=2243):
ioperm(0x3, 0x4, 0x100000a)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/kernel/fscaps', 0x2, 0x0)
add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200), 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0xb, 0x11, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracefs/available_tracers\x00', 0x0, 0x0)
preadv(r3, &(0x7f00000014c0)=[{&(0x7f0000001280)=""/114, 0x72}], 0x1, 0x8, 0xfffffffe)
preadv(r3, 0x0, 0x0, 0x80000003, 0xfffffa64)
capset(&(0x7f00000000c0)={0x20080522, r1}, &(0x7f0000000280)={0x0, 0x3, 0xa, 0x0, 0x10040, 0x400008f})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00', 0x2, 0x0)
sendfile(r4, r4, 0x0, 0x6)

2.529782677s ago: executing program 6 (id=2244):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x28}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000)
r1 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xe, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000480)=""/74, 0x0, 0xf000})
ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000400))
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/92})
ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000040)={@my=0x1})
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x6}, 0x28)
connect$vsock_stream(r4, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10)
open_tree(r0, &(0x7f0000001640)='./file0\x00', 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x4e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/51, 0x0, &(0x7f0000000500)=""/4092})
ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x6, &(0x7f0000001500)=ANY=[@ANYBLOB="18110000", @ANYRES32=r2, @ANYBLOB="4000000000000000b702000000000000b70300000000000085000000330000009500f929232de268baf62772741f6923f5e99ddfcbde8666b4a586fa61886c46d1a0d81a9b3fd59081aad131ef7b642306ecc900000000000000012b84c387db6b42274889b25081b280277e01fffb012ccd7571dace62bb639250e86299201530342dfe24c17b62463b930ce7a791b098286c146d5aadb56f507e2f9292bc61aeb0b9ab7fc796c5f971a33051b0e6e17204c97132553cd6b94de05c136955431303cae784c30080bd8f45bd9492cbb1a2340c85bc538d7fd1b070a54a056b"], &(0x7f0000003000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$kcm(0x10, 0x2, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000380)=r7, 0x4)
sendmsg$kcm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="2e00000010008188e6b62aa73f72cc9f0ba1f8481a0000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x20000054)
bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000004000)={r5, 0x0, 0xb, 0x0, &(0x7f0000005000)="00112233445566778899aa", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x4c)
clock_gettime(0x4, &(0x7f0000000040))

1.845505044s ago: executing program 8 (id=2245):
socket$igmp(0x2, 0x3, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x841)
fcntl$setpipe(0xffffffffffffffff, 0x8, 0x80000000)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0)
ioctl$SYNC_IOC_FILE_INFO(0xffffffffffffffff, 0xc0383e04, &(0x7f0000000140)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = syz_open_procfs(0xffffffffffffffff, 0x0)
preadv(r3, 0x0, 0x0, 0x46, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r4, &(0x7f0000000100)={0x1f, 0x80, @any, 0x0, 0x1}, 0x10)
listen(r4, 0x5)
prctl$PR_SET_NAME(0x45, 0x0)
syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x42, 0x8}, {0x80, 0x8200, 0x200, 0xa}}}}, 0x15)
accept4(r4, 0x0, 0x0, 0x800)

327.958162ms ago: executing program 1 (id=2246):
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0)
syz_io_uring_setup(0x6289, &(0x7f0000000040)={0x0, 0xa06d, 0x4, 0x0, 0x4}, &(0x7f0000000100), &(0x7f0000000108), &(0x7f0000000110))
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r2, &(0x7f00000010c0)={0x1f, 0x0, @any, 0x3, 0x3}, 0xe)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0)
ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x294, 0x8, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf1, 0xa, 0x80ffa, 0x2, 0x0, 0x7, 0x0, 0x1000004, 0x1, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ef, 0x200009ea, 0x20000010, 0x55, 0x8, 0x4008, 0x746f, 0x8, 0x6, 0x4, 0xee, 0x4, 0x7ffd]})
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@private1, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast2}, 0x0, @in6=@initdev}}, &(0x7f0000000200)=0xe8)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x28, 0x0, 0x500, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x800c}, 0x8000)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, r4)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c)
getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x14)
syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/config\x00')
r5 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r5, 0x0, 0x24044000)
write(r3, &(0x7f00000003c0), 0x0)

114.589427ms ago: executing program 8 (id=2247):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x40d, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r2, 0x69b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x4000000)
r3 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', <r4=>0x0})
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r8 = socket(0x1, 0x803, 0x0)
rseq(0x0, 0x0, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x0)
r10 = io_uring_setup(0x1f1c, &(0x7f00000005c0)={0x0, 0x17d7, 0xa, 0x3, 0x283})
close_range(r10, 0xffffffffffffffff, 0x0)
close_range(r9, 0xffffffffffffffff, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil)
madvise(&(0x7f000083f000/0x1000)=nil, 0x1000, 0xc)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700ff01000000000000000000000000000108000a00", @ANYRES32=r12], 0x54}}, 0x0)

51.678979ms ago: executing program 9 (id=2248):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/failslab/task-filter\x00', 0x2, 0x0)
write(r0, &(0x7f00000001c0)='Y\x00', 0x1)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/failslab/times\x00', 0x2, 0x0)
write(r1, &(0x7f0000000240)='100', 0x3)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./debug/failslab/verbose\x00', 0x2, 0x0)
write(r2, &(0x7f00000002c0)='0', 0x1)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/failslab/probability\x00', 0x2, 0x0)
write(r3, &(0x7f0000000340)='5', 0x1)
close(r3)
r4 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0)
write(r4, &(0x7f00000003c0)='1\x00', 0x1)
close(r4)
r5 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x2)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r5, 0x40146f2c, &(0x7f0000000500)={0x2, 0x0, 0x3, 0x14})
ioctl$DVB_DEMUX_DMX_START(r5, 0x6f29)
ioctl$DVB_DEMUX_DMX_STOP(r5, 0x6f2a)
ioctl$DVB_DEMUX_DMX_START(r5, 0x6f29)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000480)={'batadv_slave_0\x00'})
ioctl$DVB_DEMUX_DMX_START(r5, 0x6f29)
ioctl$DVB_DEMUX_DMX_START(r5, 0x6f29)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x50}, [@ldst={0x5, 0x3, 0x6, 0x0, 0x2}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)

10.63839ms ago: executing program 1 (id=2249):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
close(r2)
sendto$inet6(0xffffffffffffffff, 0x0, 0xff32, 0x8fc, &(0x7f0000000480)={0xa, 0x3a, 0x9, @loopback={0xff00000000000000}, 0x2}, 0x1c)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff)
symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00')
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r3, &(0x7f0000000680)='dum', 0x3)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x14, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0)

0s ago: executing program 5 (id=2250):
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb)
pipe2$watch_queue(&(0x7f0000000080), 0x80)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bind$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, 0x0, 0x0, {0x0, 0xf0}, 0xfe}, 0x18)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)

kernel console output (not intermixed with test programs):

nk becomes ready
[  386.321214][ T4188] EXT4-fs error (device loop0): ext4_empty_dir:3179: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0
[  386.353248][ T7078] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  386.400281][ T7078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  386.441132][ T7078] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  386.458227][ T4188] EXT4-fs error (device loop0): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0
[  386.519842][ T7078] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  386.575031][ T4188] EXT4-fs error (device loop0): ext4_empty_dir:3179: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0
[  386.627779][ T4188] EXT4-fs error (device loop0): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0
[  386.728959][ T4188] EXT4-fs error (device loop0): ext4_empty_dir:3179: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0
[  386.938117][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  386.945659][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  388.265271][ T6889] 8021q: adding VLAN 0 to HW filter on device batadv0
[  389.292563][ T4777] tipc: Resetting bearer <eth:syz_tun>
[  389.558906][ T4777] tipc: Disabling bearer <eth:syz_tun>
[  389.635429][ T7199] netlink: 32 bytes leftover after parsing attributes in process `syz.5.657'.
[  394.483688][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  394.493743][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  394.564936][ T7229] wlan0 speed is unknown, defaulting to 1000
[  394.638962][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  394.677525][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  394.720462][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  394.737662][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  394.786320][ T6889] device veth0_vlan entered promiscuous mode
[  394.831579][ T6889] device veth1_vlan entered promiscuous mode
[  395.182123][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  395.197636][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  395.234257][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  395.439306][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  395.479100][ T7257] netlink: 80 bytes leftover after parsing attributes in process `syz.1.669'.
[  396.082090][ T6889] device veth0_macvtap entered promiscuous mode
[  396.178924][ T7260] ALSA: mixer_oss: invalid OSS volume ''
[  396.257464][ T6889] device veth1_macvtap entered promiscuous mode
[  396.367289][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  396.382816][ T4232] Bluetooth: hci3: command 0x0409 tx timeout
[  396.427396][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  397.482086][ T7265] loop5: detected capacity change from 0 to 2048
[  397.531022][ T6889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  397.616343][ T6889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  397.636662][ T6889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  397.654502][ T6889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  397.664809][ T6889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  397.684461][ T6889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  397.976691][   T26] kauditd_printk_skb: 8 callbacks suppressed
[  397.976795][   T26] audit: type=1400 audit(1791492224.074:22): apparmor="STATUS" operation="profile_load" profile="unconfined" name="foo" pid=7270 comm="syz.6.674"
[  398.065227][ T6889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  398.346127][ T6889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  398.536600][ T7067] Bluetooth: hci3: command 0x041b tx timeout
[  398.574794][ T6889] batman_adv: batadv0: Interface activated: batadv_slave_0
[  398.654135][ T7265] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  398.679092][ T6889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  398.775793][ T6889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  399.019699][ T6889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  399.032039][ T6889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  399.043743][ T6889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  399.123640][ T7284] No such timeout policy "syz1"
[  399.782157][ T6889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  399.843150][ T6889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  399.896656][ T6889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  399.938418][ T6889] batman_adv: batadv0: Interface activated: batadv_slave_1
[  399.949877][ T7229] chnl_net:caif_netlink_parms(): no params data found
[  399.980517][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  399.990973][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  400.008002][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  400.026845][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  400.123108][ T6889] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  400.166001][ T6889] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  400.175803][ T6889] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  400.185637][ T6889] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  400.512208][ T7295] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžq
Ó†ØÈÌONEOUT'
[  400.586922][ T4233] Bluetooth: hci3: command 0x040f tx timeout
[  403.146829][ T4263] Bluetooth: hci3: command 0x0419 tx timeout
[  403.217576][ T7229] bridge0: port 1(bridge_slave_0) entered blocking state
[  403.286804][ T7229] bridge0: port 1(bridge_slave_0) entered disabled state
[  403.316777][ T7229] device bridge_slave_0 entered promiscuous mode
[  403.368287][ T7229] bridge0: port 2(bridge_slave_1) entered blocking state
[  403.375387][ T7229] bridge0: port 2(bridge_slave_1) entered disabled state
[  403.418969][ T7229] device bridge_slave_1 entered promiscuous mode
[  403.457156][ T4361] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  403.465022][ T4361] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  403.497314][ T7229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  403.880985][ T7078] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  403.959848][ T4361] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  404.009545][ T7229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  404.051648][ T4361] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  404.300392][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  404.341032][ T7229] team0: Port device team_slave_0 added
[  404.381779][ T7229] team0: Port device team_slave_1 added
[  404.551973][ T7229] batman_adv: batadv0: Adding interface: batadv_slave_0
[  404.576663][ T7229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  404.661526][ T7329] xt_CONNSECMARK: invalid mode: 66
[  405.186239][ T7229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  405.609490][ T7229] batman_adv: batadv0: Adding interface: batadv_slave_1
[  405.634012][ T7229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  405.664002][ T7335] loop6: detected capacity change from 0 to 2048
[  405.693948][ T7335] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  405.724659][ T7229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  407.492030][ T1236] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  407.772884][ T7353] kvm [7352]: vcpu2, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010003 data 0xffffffffffffffff
[  407.888544][ T7364] No such timeout policy "syz1"
[  408.526684][   T26] audit: type=1326 audit(1791492234.464:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7365 comm="syz.1.692" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f80cbae41d9 code=0x0
[  408.861192][ T1236] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  409.100204][ T1236] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  409.186701][   T26] audit: type=1400 audit(1791492235.294:24): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="foo" pid=7373 comm="syz.5.693"
[  409.899723][ T7229] device hsr_slave_0 entered promiscuous mode
[  409.948055][ T7229] device hsr_slave_1 entered promiscuous mode
[  410.917176][ T1236] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  411.039421][ T1236] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  411.421543][ T7398] netlink: 32 bytes leftover after parsing attributes in process `syz.5.707'.
[  413.822506][ T7408] tipc: Started in network mode
[  413.827533][ T7408] tipc: Node identity 4, cluster identity 4711
[  413.833750][ T7408] tipc: Node number set to 4
[  413.907893][ T1236] tipc: Left network mode
[  413.914568][ T7229] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  414.851520][ T7229] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  414.861674][ T7229] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  414.871976][ T7229] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  415.561833][ T7441] loop7: detected capacity change from 0 to 2048
[  416.367754][ T7229] 8021q: adding VLAN 0 to HW filter on device bond0
[  416.394410][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  416.426914][ T7441] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  416.460871][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  416.522906][ T7229] 8021q: adding VLAN 0 to HW filter on device team0
[  416.585280][ T7229] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  416.595912][ T7229] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  417.292927][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  417.348864][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  417.406887][ T4301] bridge0: port 1(bridge_slave_0) entered blocking state
[  417.414003][ T4301] bridge0: port 1(bridge_slave_0) entered forwarding state
[  417.432744][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  417.443724][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  417.452809][ T4301] bridge0: port 2(bridge_slave_1) entered blocking state
[  417.459933][ T4301] bridge0: port 2(bridge_slave_1) entered forwarding state
[  417.468985][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  417.477936][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  417.487387][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  417.499536][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  417.508872][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  417.521639][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  417.554227][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  417.566927][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  417.575767][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  417.593483][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  417.625543][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  417.657558][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  417.979722][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  419.085853][ T7483] netlink: 32 bytes leftover after parsing attributes in process `syz.7.711'.
[  420.134708][ T7492] netlink: 32 bytes leftover after parsing attributes in process `syz.1.725'.
[  420.344939][ T7495] netlink: 80 bytes leftover after parsing attributes in process `syz.7.712'.
[  421.047478][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  421.055625][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  421.132843][ T7229] 8021q: adding VLAN 0 to HW filter on device batadv0
[  421.152985][ T7501] loop7: detected capacity change from 0 to 512
[  421.208582][ T7501] EXT4-fs (loop7): Ignoring removed mblk_io_submit option
[  421.350312][ T7501] EXT4-fs error (device loop7): ext4_iget_extra_inode:4573: inode #15: comm syz.7.716: corrupted in-inode xattr
[  421.408529][ T7501] EXT4-fs error (device loop7): ext4_orphan_get:1415: comm syz.7.716: couldn't read orphan inode 15 (err -117)
[  421.436411][ T7501] EXT4-fs (loop7): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000004000000,nodiscard,noload,delalloc,mblk_io_submit,commit=0x0000000000000000,noblock_validity,lazytime,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none.
[  421.476476][ T1236] device hsr_slave_0 left promiscuous mode
[  421.505235][ T1236] device hsr_slave_1 left promiscuous mode
[  421.511842][ T1236] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  421.548681][ T1236] batman_adv: batadv0: Removing interface: batadv_slave_0
[  422.139195][ T1236] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  422.166699][ T1236] batman_adv: batadv0: Removing interface: batadv_slave_1
[  422.237771][ T1236] device bridge_slave_1 left promiscuous mode
[  422.257360][ T1236] bridge0: port 2(bridge_slave_1) entered disabled state
[  422.267857][ T1236] device bridge_slave_0 left promiscuous mode
[  422.366720][ T1236] bridge0: port 1(bridge_slave_0) entered disabled state
[  422.521800][ T1236] device veth1_macvtap left promiscuous mode
[  422.536835][ T1236] device veth0_macvtap left promiscuous mode
[  422.589365][ T1236] device veth1_vlan left promiscuous mode
[  422.664818][ T1236] device veth0_vlan left promiscuous mode
[  424.305819][ T1236] team0 (unregistering): Port device team_slave_1 removed
[  424.332865][ T1236] team0 (unregistering): Port device team_slave_0 removed
[  424.352328][ T1236] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  424.369080][ T1236] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  424.482204][ T1236] bond0 (unregistering): Released all slaves
[  424.539471][ T7519] tipc: Started in network mode
[  424.544393][ T7519] tipc: Node identity 4, cluster identity 4711
[  424.550774][ T7519] tipc: Node number set to 4
[  426.514752][ T7078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  426.537217][ T7078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  426.660343][ T7229] device veth0_vlan entered promiscuous mode
[  426.688344][ T7078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  426.728626][ T7078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  426.750860][ T7229] device veth1_vlan entered promiscuous mode
[  426.820890][ T7078] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  426.882421][ T7078] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  426.937340][ T7078] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  427.057246][ T7078] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  427.069484][ T7078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  427.118055][ T7078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  427.537371][ T7572] netlink: 32 bytes leftover after parsing attributes in process `syz.5.727'.
[  428.061986][ T7229] device veth0_macvtap entered promiscuous mode
[  428.165877][ T7229] device veth1_macvtap entered promiscuous mode
[  428.221875][ T7557] syz.7.722 (7557) used greatest stack depth: 18608 bytes left
[  428.275253][ T7559] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4
[  428.284648][ T7559] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4
[  428.286708][ T7229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  428.294715][ T7559] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  428.378345][ T7229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  428.442391][ T7229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  428.453212][ T7229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  428.463878][ T7229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  428.474787][ T7229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  428.485053][ T7229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  428.503496][ T7229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  428.521090][ T7229] batman_adv: batadv0: Interface activated: batadv_slave_0
[  428.740302][ T7596] netlink: 32 bytes leftover after parsing attributes in process `syz.1.732'.
[  429.147713][ T7597] xt_hashlimit: size too large, truncated to 1048576
[  429.154575][ T7597] xt_hashlimit: max too large, truncated to 1048576
[  429.261471][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  429.274215][ T7587] futex_wake_op: syz.7.734 tries to shift op by 144; fix this program
[  429.300241][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  429.371539][ T7229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  429.533642][ T7229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  429.656733][ T7229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  429.746668][ T7229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  429.827493][ T7229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  430.116785][ T7229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  430.126927][ T7229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  430.138221][ T7229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  430.868717][ T7229] batman_adv: batadv0: Interface activated: batadv_slave_1
[  430.909844][ T7229] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  430.996547][ T7229] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  431.022650][ T7229] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  431.043076][ T7229] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  431.220440][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  431.247520][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  432.404593][ T7628] netlink: 32 bytes leftover after parsing attributes in process `syz.6.742'.
[  433.217671][ T7078] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  433.244668][ T7078] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  433.258535][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  433.433686][  T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  433.457391][  T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  433.549189][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  433.680256][ T7650] netlink: 32 bytes leftover after parsing attributes in process `syz.6.746'.
[  434.730075][ T7660] ALSA: mixer_oss: invalid OSS volume ''
[  437.186845][ T7693] jffs2: notice: (7693) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  437.784749][ T7700] fuse: Bad value for 'fd'
[  438.568050][ T7705] netlink: 32 bytes leftover after parsing attributes in process `syz.8.759'.
[  440.517049][ T1432] ieee802154 phy0 wpan0: encryption failed: -22
[  440.548481][ T1432] ieee802154 phy1 wpan1: encryption failed: -22
[  441.733243][ T7746] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[6889] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[7746]
[  442.658383][ T7753] binder: 7744:7753 ioctl 4018620d 0 returned -22
[  442.772345][ T7763] ALSA: mixer_oss: invalid OSS volume ''
[  443.889762][ T7772] netlink: 32 bytes leftover after parsing attributes in process `syz.1.774'.
[  444.841990][ T7795] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[6889] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[7795]
[  446.123602][ T7812] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (4)
[  446.165457][ T7811] netlink: 32 bytes leftover after parsing attributes in process `syz.7.782'.
[  446.797513][   T26] audit: type=1807 audit(1791492272.904:25): action=measure UNKNOWN=# res=0
[  447.735613][   T26] audit: type=1802 audit(1791492272.914:26): pid=7803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.6.779" res=0 errno=0
[  447.793733][ T7802] ima: policy update failed
[  447.820308][   T26] audit: type=1802 audit(1791492273.934:27): pid=7802 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.6.779" res=0 errno=0
[  449.462401][ T7859] TCP: TCP_TX_DELAY enabled
[  449.839715][ T7877] ALSA: mixer_oss: invalid OSS volume ''
[  450.681921][ T7881] netlink: 32 bytes leftover after parsing attributes in process `syz.1.799'.
[  454.031247][ T7913] loop5: detected capacity change from 0 to 164
[  455.618517][ T7928] rock: directory entry would overflow storage
[  455.625067][ T7928] rock: sig=0x4f50, size=4, remaining=3
[  455.630798][ T7928] iso9660: Corrupted directory entry in block 5 of inode 1792
[  456.086669][ T4233] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  456.467600][ T7951] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  456.508007][ T7954] loop8: detected capacity change from 0 to 512
[  456.677845][ T7954] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2
[  456.734797][ T7959] device syzkaller0 entered promiscuous mode
[  456.742062][ T7954] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.817: invalid indirect mapped block 256 (level 1)
[  456.866998][ T7954] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.817: invalid indirect mapped block 2683928664 (level 1)
[  456.935222][ T7954] EXT4-fs (loop8): 1 truncate cleaned up
[  456.958421][ T4233] usb 6-1: unable to read config index 0 descriptor/start: -61
[  456.966955][ T7954] EXT4-fs (loop8): mounted filesystem without journal. Opts: noblock_validity,max_dir_size_kb=0x0000000000000009,stripe=0x0000000000000ee9,nodioread_nolock,discard,usrjquota=.nouid32,noauto_da_alloc,jqfmt=vfsv0,barrier,nogrpid,,,errors=continue. Quota mode: writeback.
[  456.993074][ T4233] usb 6-1: can't read configurations, error -61
[  457.660621][ T7984] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:476: comm syz.8.817: Invalid block bitmap block 3 in block_group 0
[  458.622660][ T7997] vhci_hcd vhci_hcd.0: failed to lookup sock
[  461.810224][ T8042] netlink: 32 bytes leftover after parsing attributes in process `syz.8.836'.
[  464.044522][ T8076] ALSA: mixer_oss: invalid OSS volume ''
[  464.797221][ T8114] netlink: 32 bytes leftover after parsing attributes in process `syz.6.852'.
[  465.561979][ T8125] xt_hashlimit: size too large, truncated to 1048576
[  465.568811][ T8125] xt_hashlimit: max too large, truncated to 1048576
[  466.079214][ T5080] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  466.095846][ T8138] ALSA: mixer_oss: invalid OSS volume ''
[  466.346696][ T5080] usb 6-1: Using ep0 maxpacket: 32
[  466.477056][ T5080] usb 6-1: config 0 has no interfaces?
[  466.482822][ T5080] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  466.571415][ T5080] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  466.731809][ T5080] usb 6-1: config 0 descriptor??
[  467.527806][ T8162] netlink: 32 bytes leftover after parsing attributes in process `syz.7.868'.
[  468.420603][   T21] usb 6-1: USB disconnect, device number 4
[  469.044088][ T8180] tipc: Started in network mode
[  469.116019][ T8180] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711
[  469.240236][ T8180] tipc: Enabled bearer <eth:syz_tun>, priority 0
[  470.387654][ T7779] tipc: Node number set to 43690
[  470.467872][ T8180] netlink: 52 bytes leftover after parsing attributes in process `syz.6.873'.
[  470.833947][ T8214] xt_CONNSECMARK: invalid mode: 66
[  470.887306][ T8215] netlink: 32 bytes leftover after parsing attributes in process `syz.8.882'.
[  471.156789][ T5078] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  471.810263][ T5078] usb 8-1: config index 0 descriptor too short (expected 4257, got 161)
[  471.924086][ T5078] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x81 has invalid maxpacket 24825, setting to 64
[  472.111999][ T5078] usb 8-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00
[  472.122369][ T5078] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  472.159228][ T8224] loop8: detected capacity change from 0 to 4096
[  472.704897][ T8224] ntfs3: loop8: Failed to load $Extend.
[  473.082328][ T8246] loop6: detected capacity change from 0 to 512
[  473.243892][ T8253] ALSA: mixer_oss: invalid OSS volume ''
[  473.291992][ T8246] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2
[  473.369612][ T8255] xt_hashlimit: max too large, truncated to 1048576
[  473.380247][ T8255] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  474.138077][ T5078] usb 8-1: string descriptor 0 read error: -71
[  474.200607][ T5078] uvcvideo 8-1:1.1: Unknown video format 32595559-0008-0010-8000-00aa00389b71
[  474.217767][ T8246] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.891: invalid indirect mapped block 256 (level 1)
[  474.295546][ T5078] usb 8-1: Found UVC 1.00 device <unnamed> (046d:0825)
[  474.320314][ T8246] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.891: invalid indirect mapped block 2683928664 (level 1)
[  474.414064][ T8246] EXT4-fs (loop6): 1 truncate cleaned up
[  474.423351][ T8246] EXT4-fs (loop6): mounted filesystem without journal. Opts: noblock_validity,max_dir_size_kb=0x0000000000000009,stripe=0x0000000000000ee9,nodioread_nolock,discard,usrjquota=.nouid32,noauto_da_alloc,jqfmt=vfsv0,barrier,nogrpid,,,errors=continue. Quota mode: writeback.
[  474.533519][ T5078] usb 8-1: No streaming interface found for terminal 2.
[  474.551594][ T5078] usb 8-1: USB disconnect, device number 2
[  474.630010][ T7229] ntfs3: loop8: ntfs_evict_inode r=5 failed, -22.
[  474.645652][ T7229] ntfs3: loop8: Mark volume as dirty due to NTFS errors
[  475.026758][ T8274] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:476: comm syz.6.891: Invalid block bitmap block 3 in block_group 0
[  476.151626][ T8286] loop8: detected capacity change from 0 to 128
[  476.296860][ T8286] FAT-fs (loop8): bogus number of FAT structure
[  476.303168][ T8286] FAT-fs (loop8): This doesn't look like a DOS 1.x volume; no bootstrapping code
[  476.367593][ T8286] FAT-fs (loop8): Can't find a valid FAT filesystem
[  477.696573][ T7778] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  477.820074][ T8320] ALSA: mixer_oss: invalid OSS volume ''
[  478.578008][ T8327] loop5: detected capacity change from 0 to 16
[  478.649825][ T8327] erofs: (device loop5): mounted with root inode @ nid 36.
[  478.746826][ T7778] usb 9-1: Using ep0 maxpacket: 16
[  479.020633][ T8333] attempt to access beyond end of device
[  479.020633][ T8333] loop5: rw=0, want=34359738368, limit=16
[  480.106764][ T7778] usb 9-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  480.177123][ T7778] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  480.207946][ T7778] r8152-cfgselector 9-1: config 0 descriptor??
[  480.227117][ T7778] r8152-cfgselector 9-1: can't set config #0, error -71
[  480.246653][ T7778] r8152-cfgselector 9-1: Unknown version 0x0000
[  480.264160][ T7778] r8152-cfgselector 9-1: USB disconnect, device number 2
[  480.707528][ T8349] xt_hashlimit: max too large, truncated to 1048576
[  480.717749][ T8349] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  481.681437][ T8357] jffs2: notice: (8357) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  482.048772][ T8366] fuse: Bad value for 'fd'
[  482.194076][ T8366] vhci_hcd vhci_hcd.0: failed to lookup sock
[  484.949405][ T8403] fuse: Bad value for 'fd'
[  485.090788][ T8403] vhci_hcd vhci_hcd.0: failed to lookup sock
[  485.627882][ T8417] jffs2: notice: (8417) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  485.844960][ T8421] ALSA: mixer_oss: invalid OSS volume ''
[  486.694193][ T8428] netlink: 32 bytes leftover after parsing attributes in process `syz.7.935'.
[  487.497158][ T8443] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[5358] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[8443]
[  488.794730][ T8461] ALSA: mixer_oss: invalid OSS volume ''
[  488.921353][ T8467] device bridge0 entered promiscuous mode
[  489.613537][ T8472] netlink: 32 bytes leftover after parsing attributes in process `syz.6.949'.
[  491.173014][ T8496] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[7229] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[8496]
[  491.928524][ T8504] ALSA: mixer_oss: invalid OSS volume ''
[  492.321528][ T8516] netlink: 32 bytes leftover after parsing attributes in process `syz.5.961'.
[  493.411473][ T8526] device bridge0 entered promiscuous mode
[  495.180307][ T8541] siw: device registration error -23
[  496.893862][ T8575] netlink: 32 bytes leftover after parsing attributes in process `syz.5.973'.
[  500.209422][ T8606] siw: device registration error -23
[  501.395449][ T1432] ieee802154 phy0 wpan0: encryption failed: -22
[  501.401833][ T1432] ieee802154 phy1 wpan1: encryption failed: -22
[  503.572858][ T8634] IPVS: ip_vs_add_dest(): server weight less than zero
[  503.602774][   T26] audit: type=1326 audit(1791492329.374:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8629 comm="syz.5.975" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd08b21d9 code=0x7ffc0000
[  503.909289][   T26] audit: type=1326 audit(1791492329.374:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8629 comm="syz.5.975" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd08b21d9 code=0x7ffc0000
[  503.934321][   T26] audit: type=1326 audit(1791492329.494:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8629 comm="syz.5.975" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6fd0872a0e code=0x7ffc0000
[  504.347846][ T8640] netlink: 32 bytes leftover after parsing attributes in process `syz.5.985'.
[  504.362917][   T26] audit: type=1326 audit(1791492329.494:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8629 comm="syz.5.975" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd08b21d9 code=0x7ffc0000
[  504.424694][   T26] audit: type=1326 audit(1791492329.494:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8629 comm="syz.5.975" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd08b21d9 code=0x7ffc0000
[  505.827147][   T26] audit: type=1326 audit(1791492329.604:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8629 comm="syz.5.975" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6fd08b21d9 code=0x7ffc0000
[  506.943242][   T26] audit: type=1326 audit(1791492329.604:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8629 comm="syz.5.975" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd08b21d9 code=0x7ffc0000
[  507.163960][ T8658] loop8: detected capacity change from 0 to 64
[  508.631985][   T26] audit: type=1326 audit(1791492329.604:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8629 comm="syz.5.975" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd08b21d9 code=0x7ffc0000
[  508.858852][   T26] audit: type=1326 audit(1791492329.674:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8629 comm="syz.5.975" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6fd08b21d9 code=0x7ffc0000
[  508.896268][   T26] audit: type=1326 audit(1791492329.674:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8629 comm="syz.5.975" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd08b21d9 code=0x7ffc0000
[  508.940094][   T26] audit: type=1326 audit(1791492329.674:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8629 comm="syz.5.975" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd08b21d9 code=0x7ffc0000
[  509.047873][   T26] audit: type=1326 audit(1791492329.674:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8629 comm="syz.5.975" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f6fd08b21d9 code=0x7ffc0000
[  509.184968][   T26] audit: type=1326 audit(1791492329.684:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8629 comm="syz.5.975" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd08b21d9 code=0x7ffc0000
[  509.283585][   T26] audit: type=1326 audit(1791492329.684:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8629 comm="syz.5.975" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd08b21d9 code=0x7ffc0000
[  509.396630][   T26] audit: type=1326 audit(1791492329.684:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8629 comm="syz.5.975" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f6fd08b21d9 code=0x7ffc0000
[  509.487609][   T26] audit: type=1326 audit(1791492329.694:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8629 comm="syz.5.975" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd08b21d9 code=0x7ffc0000
[  509.646980][   T26] audit: type=1326 audit(1791492329.694:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8629 comm="syz.5.975" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd08b21d9 code=0x7ffc0000
[  510.655139][ T8688] ip_tables: iptables: counters copy to user failed while replacing table
[  512.846695][ T8706] ALSA: mixer_oss: invalid OSS volume ''
[  515.966309][ T8738] loop5: detected capacity change from 0 to 512
[  516.618339][ T8738] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback.
[  516.674349][ T8738] ext4 filesystem being mounted at /161/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  516.766884][ T8750] jffs2: notice: (8750) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  516.832649][ T8752] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1006'.
[  518.314787][ T8754] EXT4-fs (loop5): re-mounted. Opts: (null). Quota mode: writeback.
[  518.836654][ T4234] Bluetooth: hci3: command 0x0406 tx timeout
[  519.480987][ T8776] xt_CT: You must specify a L4 protocol and not use inversions on it
[  520.413634][ T8787] loop5: detected capacity change from 0 to 64
[  525.022051][ T8827] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1014'.
[  527.981062][ T8861] tipc: Enabled bearer <eth:syz_tun>, priority 0
[  528.734001][ T8873] xt_CONNSECMARK: invalid mode: 66
[  529.036614][ T4234] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  529.416981][ T4234] usb 9-1: config index 0 descriptor too short (expected 4257, got 161)
[  529.442200][ T4234] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x81 has invalid maxpacket 24825, setting to 64
[  529.549595][ T4234] usb 9-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00
[  529.626634][ T4234] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  529.992749][ T8861] netlink: 52 bytes leftover after parsing attributes in process `syz.7.1031'.
[  531.196645][ T4234] usb 9-1: string descriptor 0 read error: -71
[  531.205903][ T4234] uvcvideo 9-1:1.1: Unknown video format 32595559-0008-0010-8000-00aa00389b71
[  531.342393][ T4234] usb 9-1: Found UVC 1.00 device <unnamed> (046d:0825)
[  531.605714][ T4234] usb 9-1: No streaming interface found for terminal 2.
[  532.021153][ T8889] xt_CT: You must specify a L4 protocol and not use inversions on it
[  532.123709][ T4234] usb 9-1: USB disconnect, device number 3
[  534.237834][ T8893] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  536.332762][ T8913] device bridge0 entered promiscuous mode
[  536.721737][ T8916] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1045'.
[  540.418390][ T8942] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1039'.
[  540.559082][ T8945] loop7: detected capacity change from 0 to 4096
[  540.659163][ T8945] __ntfs_error: 13 callbacks suppressed
[  540.659203][ T8945] ntfs: (device loop7): parse_options(): Invalid gid option argument: 0xffffffffffffffff
[  541.494738][ T8964] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[7229] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[8964]
[  541.968494][ T8963] siw: device registration error -23
[  542.485644][ T8976] loop8: detected capacity change from 0 to 512
[  543.202060][ T8976] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  543.220749][ T8976] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  544.533118][ T8997] loop7: detected capacity change from 0 to 32768
[  544.667307][ T8997] JBD2: Ignoring recovery information on journal
[  544.675296][ T8997] jbd2_journal_bmap: journal block not found at offset 32 on loop7-75
[  544.684030][ T8997] JBD2: bad block at offset 32
[  544.725368][ T8997] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  547.369900][ T6889] ocfs2: Unmounting device (7,7) on (node local)
[  547.452044][ T9035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1070'.
[  548.068161][ T9042] ALSA: mixer_oss: invalid OSS volume ''
[  548.308380][ T9043] loop5: detected capacity change from 0 to 8
[  548.443128][ T9045] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1078'.
[  550.245175][ T9055] ALSA: mixer_oss: invalid OSS volume ''
[  551.586284][ T9072] siw: device registration error -23
[  554.809072][ T9111] ALSA: mixer_oss: invalid OSS volume ''
[  559.006384][ T9136] siw: device registration error -23
[  560.878013][   T26] audit: type=1326 audit(1791492386.994:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9145 comm="syz.7.1101" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93fda531d9 code=0x7ffc0000
[  561.606631][ T9153] IPVS: ip_vs_add_dest(): server weight less than zero
[  562.085066][   T26] audit: type=1326 audit(1791492386.994:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9145 comm="syz.7.1101" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93fda531d9 code=0x7ffc0000
[  562.223804][   T26] audit: type=1326 audit(1791492387.144:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9145 comm="syz.7.1101" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f93fda13a0e code=0x7ffc0000
[  562.362953][   T26] audit: type=1326 audit(1791492387.144:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9145 comm="syz.7.1101" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93fda531d9 code=0x7ffc0000
[  562.522868][   T26] audit: type=1326 audit(1791492387.144:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9145 comm="syz.7.1101" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93fda531d9 code=0x7ffc0000
[  562.594538][   T26] audit: type=1326 audit(1791492387.284:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9145 comm="syz.7.1101" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f93fda531d9 code=0x7ffc0000
[  562.717103][   T26] audit: type=1326 audit(1791492387.284:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9145 comm="syz.7.1101" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93fda531d9 code=0x7ffc0000
[  562.830832][ T1432] ieee802154 phy0 wpan0: encryption failed: -22
[  562.837232][ T1432] ieee802154 phy1 wpan1: encryption failed: -22
[  562.989343][ T9171] ALSA: mixer_oss: invalid OSS volume ''
[  563.026671][   T26] audit: type=1326 audit(1791492387.284:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9145 comm="syz.7.1101" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93fda531d9 code=0x7ffc0000
[  563.114882][   T26] audit: type=1326 audit(1791492387.434:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9145 comm="syz.7.1101" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f93fda531d9 code=0x7ffc0000
[  563.220824][   T26] audit: type=1326 audit(1791492387.434:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9145 comm="syz.7.1101" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93fda531d9 code=0x7ffc0000
[  563.744081][ T9195] loop6: detected capacity change from 0 to 512
[  563.759565][ T9196] siw: device registration error -23
[  563.964494][ T9198] kernel read not supported for file /!selinuxwk1ÐmÃ9Éž*T“ýâ‘ïª#j—�¼ÞYÌÅmVËvm(pÉ-QZ#Ò{„¿ (pid: 9198 comm: syz.1.1110)
[  567.972917][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  569.026636][ T9259] netlink: 88 bytes leftover after parsing attributes in process `syz.7.1120'.
[  570.423986][ T9273] udc-core: couldn't find an available UDC or it's busy
[  571.423071][ T9289] block nbd7: NBD_DISCONNECT
[  573.503674][ T9292] lo speed is unknown, defaulting to 1000
[  573.511419][ T9292] lo speed is unknown, defaulting to 1000
[  573.523166][ T9292] lo speed is unknown, defaulting to 1000
[  573.583614][ T9292] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  573.647544][ T9292] lo speed is unknown, defaulting to 1000
[  573.654788][ T9292] lo speed is unknown, defaulting to 1000
[  573.672633][ T9292] lo speed is unknown, defaulting to 1000
[  573.683452][ T9292] lo speed is unknown, defaulting to 1000
[  573.695367][ T9292] lo speed is unknown, defaulting to 1000
[  577.607203][ T9346] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4187] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[9346]
[  579.129746][ T9347] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1135'.
[  579.347427][ T9359] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  579.356297][ T9359] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  579.373637][ T9359] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  579.381795][ T9359] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  580.788713][ T9359] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  581.296904][ T9373] loop5: detected capacity change from 0 to 512
[  581.571491][ T9373] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  581.618896][ T9373] ext4 filesystem being mounted at /184/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  582.700331][ T9402] CIFS mount error: No usable UNC path provided in device string!
[  582.700331][ T9402] 
[  582.710461][ T9402] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  583.768418][ T9386] sctp: failed to load transform for md5: -2
[  584.070381][ T9412] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4187] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[9412]
[  589.783974][ T9457] loop7: detected capacity change from 0 to 512
[  589.849385][ T9457] EXT4-fs (loop7): Ignoring removed nobh option
[  590.028050][ T9457] EXT4-fs (loop7): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000ffc,nobh,quota,,errors=continue. Quota mode: writeback.
[  590.094152][ T9457] ext4 filesystem being mounted at /96/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  590.717747][ T9469] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[6889] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[9469]
[  592.645189][ T9495] loop6: detected capacity change from 0 to 1024
[  594.277087][ T7078] hfsplus: b-tree write err: -5, ino 25
[  594.283772][ T7078] hfsplus: b-tree write err: -5, ino 4
[  594.321761][ T7078] hfsplus: b-tree write err: -5, ino 17
[  594.418523][ T7078] hfsplus: b-tree write err: -5, ino 26
[  594.593958][ T9510] netlink: 'syz.1.1171': attribute type 4 has an invalid length.
[  594.601971][ T9510] netlink: 'syz.1.1171': attribute type 17 has an invalid length.
[  598.376675][ T9545] Invalid ELF header magic: != ELF
[  599.536977][   T26] kauditd_printk_skb: 14 callbacks suppressed
[  599.536994][   T26] audit: type=1326 audit(1791492425.654:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9552 comm="syz.5.1181" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6fd08b21d9 code=0x0
[  599.669918][ T9560] sctp: [Deprecated]: syz.6.1184 (pid 9560) Use of int in max_burst socket option.
[  599.669918][ T9560] Use struct sctp_assoc_value instead
[  599.793360][ T9561] loop7: detected capacity change from 0 to 164
[  602.031154][ T9582] loop6: detected capacity change from 0 to 1024
[  602.292064][ T9591] Invalid ELF header magic: != ELF
[  603.302912][ T4263] Bluetooth: hci3: command 0x0405 tx timeout
[  606.400239][ T9623] ALSA: mixer_oss: invalid OSS volume ''
[  606.624342][ T9631] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[5332] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[9631]
[  607.285495][   T26] audit: type=1326 audit(1791492433.104:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9629 comm="syz.8.1201" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb8ee62d1d9 code=0x0
[  612.383677][ T9694] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[6889] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[9694]
[  612.517496][   T26] audit: type=1326 audit(1791492438.604:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9695 comm="syz.1.1214" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f80cbae41d9 code=0x0
[  613.261043][ T9703] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[6889] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[9703]
[  614.765284][ T9727] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4187] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[9727]
[  616.541514][ T9741] misc userio: No port type given on /dev/userio
[  616.551347][ T9741] misc userio: The device must be registered before sending interrupts
[  616.563470][ T9741] misc userio: The device must be registered before sending interrupts
[  617.969324][ T9750] loop5: detected capacity change from 0 to 2048
[  617.974732][ T9753] syz.6.1225 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  618.046216][ T9753] loop6: detected capacity change from 0 to 1024
[  618.144195][ T9750] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  618.178473][ T9750] ext4 filesystem being mounted at /203/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  618.230836][ T9753] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  618.291868][ T9753] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869)
[  618.367927][ T9753] EXT4-fs error (device loop6): ext4_get_journal_inode:5187: inode #5: comm syz.6.1225: unexpected bad inode w/o EXT4_IGET_BAD
[  618.389563][ T9753] EXT4-fs (loop6): no journal found
[  618.394839][ T9753] EXT4-fs (loop6): can't get journal size
[  618.598307][ T9765] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[7229] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[9765]
[  619.003491][ T9753] EXT4-fs (loop6): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000002,norecovery,min_batch_time=0x000000000000071d,abort,,errors=continue. Quota mode: writeback.
[  619.175511][   T26] audit: type=1326 audit(1791492445.284:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9771 comm="syz.7.1227" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93fda531d9 code=0x7ffc0000
[  619.254597][   T26] audit: type=1326 audit(1791492445.354:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9771 comm="syz.7.1227" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f93fda531d9 code=0x7ffc0000
[  619.295100][   T26] audit: type=1326 audit(1791492445.354:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9771 comm="syz.7.1227" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93fda531d9 code=0x7ffc0000
[  619.372035][   T26] audit: type=1326 audit(1791492445.354:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9771 comm="syz.7.1227" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93fda531d9 code=0x7ffc0000
[  620.468072][ T9785] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  620.484180][   T26] audit: type=1326 audit(1791492445.354:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9771 comm="syz.7.1227" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f93fda531d9 code=0x7ffc0000
[  621.469483][ T9791] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[5332] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[9791]
[  622.285963][   T26] audit: type=1326 audit(1791492445.354:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9771 comm="syz.7.1227" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93fda531d9 code=0x7ffc0000
[  622.310981][   T26] audit: type=1326 audit(1791492445.354:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9771 comm="syz.7.1227" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93fda531d9 code=0x7ffc0000
[  622.358619][ T9800] device bridge0 entered promiscuous mode
[  622.388527][   T26] audit: type=1326 audit(1791492445.354:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9771 comm="syz.7.1227" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93fda531d9 code=0x7ffc0000
[  622.413629][   T26] audit: type=1326 audit(1791492445.354:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9771 comm="syz.7.1227" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93fda531d9 code=0x7ffc0000
[  622.442238][   T26] audit: type=1326 audit(1791492445.354:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9771 comm="syz.7.1227" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f93fda531d9 code=0x7ffc0000
[  623.921445][ T9808] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[5358] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[9808]
[  624.437058][ T1432] ieee802154 phy0 wpan0: encryption failed: -22
[  624.443407][ T1432] ieee802154 phy1 wpan1: encryption failed: -22
[  624.746572][ T9814] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0021 with DS=0x7
[  624.900103][ T9814] loop8: detected capacity change from 0 to 512
[  625.364840][ T9829] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[6889] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[9829]
[  625.876199][ T9831] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  627.418468][ T9852] CIFS mount error: No usable UNC path provided in device string!
[  627.418468][ T9852] 
[  627.428660][ T9852] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  627.733147][ T9866] loop7: detected capacity change from 0 to 1024
[  628.192579][   T26] kauditd_printk_skb: 31 callbacks suppressed
[  628.192657][   T26] audit: type=1326 audit(1791492454.304:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9869 comm="syz.1.1246" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80cbae41d9 code=0x7ffc0000
[  628.988531][   T26] audit: type=1326 audit(1791492454.324:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9869 comm="syz.1.1246" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f80cbae41d9 code=0x7ffc0000
[  630.474394][   T26] audit: type=1326 audit(1791492454.324:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9869 comm="syz.1.1246" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80cbae41d9 code=0x7ffc0000
[  630.501543][   T26] audit: type=1326 audit(1791492454.324:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9869 comm="syz.1.1246" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80cbae41d9 code=0x7ffc0000
[  630.525815][   T26] audit: type=1326 audit(1791492454.324:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9869 comm="syz.1.1246" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f80cbae41d9 code=0x7ffc0000
[  630.560270][   T26] audit: type=1326 audit(1791492454.324:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9869 comm="syz.1.1246" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80cbae41d9 code=0x7ffc0000
[  630.607374][   T26] audit: type=1326 audit(1791492454.324:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9869 comm="syz.1.1246" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80cbae41d9 code=0x7ffc0000
[  630.642179][   T26] audit: type=1326 audit(1791492454.324:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9869 comm="syz.1.1246" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80cbae41d9 code=0x7ffc0000
[  630.760877][   T26] audit: type=1326 audit(1791492454.324:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9869 comm="syz.1.1246" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80cbae41d9 code=0x7ffc0000
[  630.826590][   T26] audit: type=1326 audit(1791492454.324:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9869 comm="syz.1.1246" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f80cbae41d9 code=0x7ffc0000
[  631.579430][ T9899] futex_wake_op: syz.1.1255 tries to shift op by 32; fix this program
[  632.280308][ T9905] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[5358] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[9905]
[  632.676224][ T9906] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1254'.
[  634.228011][ T9925] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1260'.
[  634.983631][ T9944] loop6: detected capacity change from 0 to 128
[  635.145859][   T26] kauditd_printk_skb: 56 callbacks suppressed
[  635.145877][   T26] audit: type=1326 audit(1791492461.254:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9941 comm="syz.5.1261" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6fd08b21d9 code=0x0
[  636.367452][ T9959] loop8: detected capacity change from 0 to 2048
[  637.460892][ T9959] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  637.514084][ T9959] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  637.742565][ T9944] loop6: detected capacity change from 0 to 8192
[  637.755969][ T9978] jffs2: notice: (9978) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  637.826282][ T9979] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[5332] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[9979]
[  639.095897][ T9985] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1268'.
[  639.140389][ T9983] fs-verity: sha512 using implementation "sha512-avx2"
[  640.543359][   T26] audit: type=1326 audit(1791492466.654:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10002 comm="syz.5.1276" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd08b21d9 code=0x7ffc0000
[  640.761430][   T26] audit: type=1326 audit(1791492466.694:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10002 comm="syz.5.1276" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd08b21d9 code=0x7ffc0000
[  641.022436][T10018] vxcan1: tx drop: invalid da for name 0x0100000000000000
[  642.350454][   T26] audit: type=1326 audit(1791492466.734:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10002 comm="syz.5.1276" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6fd08b21d9 code=0x7ffc0000
[  642.586487][   T26] audit: type=1326 audit(1791492466.744:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10002 comm="syz.5.1276" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd08b21d9 code=0x7ffc0000
[  642.932314][   T26] audit: type=1326 audit(1791492466.744:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10002 comm="syz.5.1276" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd08b21d9 code=0x7ffc0000
[  642.959025][   T26] audit: type=1326 audit(1791492466.744:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10002 comm="syz.5.1276" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd08b21d9 code=0x7ffc0000
[  642.986568][   T26] audit: type=1326 audit(1791492466.744:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10002 comm="syz.5.1276" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd08b21d9 code=0x7ffc0000
[  643.013519][   T26] audit: type=1326 audit(1791492466.754:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10002 comm="syz.5.1276" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6fd08b21d9 code=0x7ffc0000
[  643.249354][T10035] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4187] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[10035]
[  644.379614][T10039] siw: device registration error -23
[  644.385605][   T26] audit: type=1326 audit(1791492466.754:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10002 comm="syz.5.1276" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd08b21d9 code=0x7ffc0000
[  644.465598][   T26] audit: type=1326 audit(1791492466.754:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10002 comm="syz.5.1276" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd08b21d9 code=0x7ffc0000
[  649.502498][T10093] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1294'.
[  650.828066][T10102] kAFS: No cell specified
[  651.346352][T10106] loop6: detected capacity change from 0 to 1024
[  651.500711][T10106] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  652.227464][T10106] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  652.321445][T10106] EXT4-fs (loop6): invalid journal inode
[  652.372833][T10106] EXT4-fs (loop6): can't get journal size
[  652.447610][T10106] EXT4-fs: failed to create workqueue
[  652.453132][T10106] EXT4-fs (loop6): mount failed
[  654.753166][T10149] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[5332] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[10149]
[  656.853293][T10166] loop7: detected capacity change from 0 to 16
[  658.389986][T10166] erofs: (device loop7): mounted with root inode @ nid 36.
[  665.971638][T10232] loop8: detected capacity change from 0 to 512
[  667.344530][T10235] futex_wake_op: syz.6.1326 tries to shift op by 144; fix this program
[  667.414502][T10235] loop6: detected capacity change from 0 to 256
[  667.548941][T10235] exfat: Unknown parameter ''
[  667.593085][T10232] EXT4-fs (loop8): Ignoring removed nobh option
[  667.758642][T10235] wlan0 speed is unknown, defaulting to 1000
[  667.772262][T10235] lo speed is unknown, defaulting to 1000
[  668.895457][T10232] EXT4-fs warning (device loop8): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop8.
[  673.576226][T10273] vxcan1: tx drop: invalid da for name 0x0100000000000000
[  675.130891][T10302] loop8: detected capacity change from 0 to 16
[  675.248324][T10302] erofs: (device loop8): mounted with root inode @ nid 36.
[  676.561914][T10301] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  677.244167][T10309] nvme nvme0: rdma connection establishment failed (-104)
[  678.740439][T10335] loop7: detected capacity change from 0 to 512
[  678.889668][T10338] siw: device registration error -23
[  680.204733][T10351] loop6: detected capacity change from 0 to 32768
[  680.511948][T10351] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  681.967885][T10377] loop5: detected capacity change from 0 to 512
[  684.329138][ T5358] ocfs2: Unmounting device (7,6) on (node local)
[  686.097686][ T1432] ieee802154 phy0 wpan0: encryption failed: -22
[  686.112538][ T1432] ieee802154 phy1 wpan1: encryption failed: -22
[  688.936832][T10416] autofs4:pid:10416:autofs_fill_super: called with bogus options
[  690.274662][T10424] vxcan1: tx drop: invalid da for name 0x0100000000000000
[  691.582968][T10426] loop7: detected capacity change from 0 to 2048
[  691.797612][T10429] FAULT_INJECTION: forcing a failure.
[  691.797612][T10429] name failslab, interval 1, probability 0, space 0, times 1
[  691.811108][T10429] CPU: 1 PID: 10429 Comm: syz.8.1374 Not tainted syzkaller #0
[  691.818700][T10429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  691.828781][T10429] Call Trace:
[  691.832189][T10429]  <TASK>
[  691.835195][T10429]  dump_stack_lvl+0x188/0x250
[  691.840000][T10429]  ? show_regs_print_info+0x20/0x20
[  691.845308][T10429]  ? load_image+0x410/0x410
[  691.849835][T10429]  ? __might_sleep+0xf0/0xf0
[  691.854568][T10429]  ? __lock_acquire+0x7d40/0x7d40
[  691.859621][T10429]  ? seq_printf+0x1df/0x280
[  691.864163][T10429]  should_fail+0x383/0x4b0
[  691.868650][T10429]  should_failslab+0x5/0x20
[  691.873176][T10429]  slab_pre_alloc_hook+0x51/0xc0
[  691.878138][T10429]  kmem_cache_alloc_trace+0x47/0x290
[  691.883432][T10429]  ? netstat_seq_show+0xec/0xc30
[  691.888532][T10429]  netstat_seq_show+0xec/0xc30
[  691.893389][T10429]  seq_read_iter+0x460/0xc50
[  691.898219][T10429]  seq_read+0x3dc/0x4f0
[  691.902395][T10429]  ? seq_open+0x130/0x130
[  691.906728][T10429]  ? __mutex_trylock_common+0x15c/0x260
[  691.912277][T10429]  ? end_current_label_crit_section+0x14b/0x170
[  691.918576][T10429]  ? seq_open+0x130/0x130
[  691.922985][T10429]  proc_reg_read+0x1dd/0x2c0
[  691.927628][T10429]  ? proc_reg_get_unmapped_area+0x3a0/0x3a0
[  691.933534][T10429]  vfs_read+0x2ff/0xd50
[  691.937732][T10429]  ? __lock_acquire+0x7d40/0x7d40
[  691.942765][T10429]  ? kernel_read+0x1e0/0x1e0
[  691.947356][T10429]  ? mutex_lock_nested+0x17/0x20
[  691.952342][T10429]  ? __fdget_pos+0x2bf/0x370
[  691.956919][T10429]  ? ksys_read+0x70/0x260
[  691.961240][T10429]  ksys_read+0x153/0x260
[  691.965472][T10429]  ? vfs_write+0xd70/0xd70
[  691.969898][T10429]  ? lockdep_hardirqs_on+0x94/0x140
[  691.975147][T10429]  do_syscall_64+0x4c/0xa0
[  691.979553][T10429]  ? clear_bhb_loop+0x30/0x80
[  691.984268][T10429]  ? clear_bhb_loop+0x30/0x80
[  691.988941][T10429]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  691.994824][T10429] RIP: 0033:0x7fb8ee62d1d9
[  691.999272][T10429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  692.019267][T10429] RSP: 002b:00007fb8ec885028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  692.028069][T10429] RAX: ffffffffffffffda RBX: 00007fb8ee8b4fa0 RCX: 00007fb8ee62d1d9
[  692.036058][T10429] RDX: 0000000000000229 RSI: 0000200000000040 RDI: 0000000000000005
[  692.044411][T10429] RBP: 00007fb8ee6c4888 R08: 0000000000000000 R09: 0000000000000000
[  692.052477][T10429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  692.060464][T10429] R13: 00007fb8ee8b5038 R14: 00007fb8ee8b4fa0 R15: 00007ffc37ce0748
[  692.068450][T10429]  </TASK>
[  692.940110][T10426] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  693.016683][T10426] ext4 filesystem being mounted at /145/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  694.558055][T10449] overlayfs: failed to create directory ./bus/index (errno: 28); mounting read-only
[  694.567862][T10449] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index.
[  698.414040][T10529] vxcan1: tx drop: invalid da for name 0x0100000000000000
[  700.230104][T10563] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[  700.230104][T10563] 
[  700.244007][T10563] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[  700.256832][T10563] CIFS: Attempting to mount \\127.0.0.1\share
[  701.359491][T10563] CIFS: VFS: cifs_mount failed w/return code = -112
[  702.165987][T10584] loop5: detected capacity change from 0 to 4096
[  703.255445][T10584] EXT4-fs (loop5): Test dummy encryption mode enabled
[  703.262495][T10584] EXT4-fs (loop5): inline encryption not supported
[  703.270543][T10584] EXT4-fs (loop5): can't mount with journal_async_commit, fs mounted w/o journal
[  704.475930][T10606] vxcan1: tx drop: invalid da for name 0x0100000000000000
[  707.250920][T10633] hugetlbfs: syz.8.1404 (10633): Using mlock ulimits for SHM_HUGETLB is deprecated
[  707.913387][T10637] jffs2: notice: (10637) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  708.186159][T10646] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[6889] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[10646]
[  709.387705][T10651] vxcan1: tx drop: invalid da for name 0x0100000000000000
[  709.701284][ T4195] Bluetooth: Wrong link type (-22)
[  712.238594][ T4195] Bluetooth: Wrong link type (-22)
[  713.102870][T10697] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[7229] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[10697]
[  715.049060][T10708] IPVS: ip_vs_add_dest(): server weight less than zero
[  715.103839][   T26] kauditd_printk_skb: 32 callbacks suppressed
[  715.104066][   T26] audit: type=1326 audit(1791492541.124:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10703 comm="syz.1.1421" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80cbae41d9 code=0x7ffc0000
[  715.666939][   T26] audit: type=1326 audit(1791492541.124:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10703 comm="syz.1.1421" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80cbae41d9 code=0x7ffc0000
[  715.707152][T10706] loop5: detected capacity change from 0 to 16
[  715.710717][   T26] audit: type=1326 audit(1791492541.144:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10703 comm="syz.1.1421" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f80cbaa4a0e code=0x7ffc0000
[  715.779854][T10706] erofs: (device loop5): mounted with root inode @ nid 36.
[  715.886325][   T26] audit: type=1326 audit(1791492541.144:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10703 comm="syz.1.1421" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80cbae41d9 code=0x7ffc0000
[  716.034697][T10717] erofs: (device loop5): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 46
[  716.797944][   T26] audit: type=1326 audit(1791492541.144:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10703 comm="syz.1.1421" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80cbae41d9 code=0x7ffc0000
[  717.429681][   T26] audit: type=1326 audit(1791492541.144:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10703 comm="syz.1.1421" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f80cbae41d9 code=0x7ffc0000
[  717.442987][T10722] loop5: detected capacity change from 0 to 512
[  717.496508][   T26] audit: type=1326 audit(1791492541.144:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10703 comm="syz.1.1421" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80cbae41d9 code=0x7ffc0000
[  717.545372][   T26] audit: type=1326 audit(1791492541.144:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10703 comm="syz.1.1421" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80cbae41d9 code=0x7ffc0000
[  717.646170][   T26] audit: type=1326 audit(1791492541.144:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10703 comm="syz.1.1421" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f80cbae41d9 code=0x7ffc0000
[  717.686149][   T26] audit: type=1326 audit(1791492541.154:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10703 comm="syz.1.1421" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80cbae41d9 code=0x7ffc0000
[  717.727566][T10722] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2
[  717.767393][T10722] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.1426: invalid indirect mapped block 256 (level 1)
[  717.825216][T10722] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.1426: invalid indirect mapped block 2683928664 (level 1)
[  718.099423][T10722] EXT4-fs (loop5): 1 truncate cleaned up
[  718.151825][T10722] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,max_dir_size_kb=0x0000000000000009,stripe=0x0000000000000ee9,nodioread_nolock,discard,usrjquota=.nouid32,noauto_da_alloc,jqfmt=vfsv0,barrier,nogrpid,,,errors=continue. Quota mode: writeback.
[  719.344259][T10733] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:476: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0
[  720.511623][T10768] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[5358] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[10768]
[  721.397607][T10763] orangefs_mount: mount request failed with -4
[  721.495053][T10786] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[5332] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[10786]
[  722.923987][T10793] loop6: detected capacity change from 0 to 2048
[  723.479010][T10793] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  723.782750][T10793] ext4 filesystem being mounted at /224/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  724.906555][T10815] overlayfs: failed to create directory ./bus/index (errno: 28); mounting read-only
[  724.917048][T10815] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index.
[  726.265510][T10823] loop7: detected capacity change from 0 to 512
[  726.434080][T10823] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  726.523549][T10823] ext4 filesystem being mounted at /158/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  727.347457][T10829] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[6889] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[10829]
[  727.747000][ T1107] usb 8-1: new full-speed USB device number 3 using dummy_hcd
[  727.764354][T10843] loop8: detected capacity change from 0 to 16
[  727.817977][T10843] erofs: Unexpected value for 'user_xattr'
[  728.176798][ T1107] usb 8-1: config 1 has an invalid descriptor of length 47, skipping remainder of the config
[  728.238063][ T1107] usb 8-1: too many endpoints for config 1 interface 0 altsetting 0: 254, using maximum allowed: 30
[  728.348970][ T1107] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 254
[  728.694203][ T1107] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  728.722205][ T1107] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  728.737659][ T1107] usb 8-1: SerialNumber: syz
[  728.808854][ T1107] cdc_acm 8-1:1.0: skipping garbage
[  728.817400][ T1107] cdc_acm 8-1:1.0: Control and data interfaces are not separated!
[  728.856803][ T1107] cdc_acm 8-1:1.0: This needs exactly 3 endpoints
[  728.890844][ T1107] cdc_acm: probe of 8-1:1.0 failed with error -22
[  729.445920][T10865] IPVS: ip_vs_add_dest(): server weight less than zero
[  729.487692][   T26] kauditd_printk_skb: 22 callbacks suppressed
[  729.487789][   T26] audit: type=1326 audit(1791492555.554:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10860 comm="syz.5.1447" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd08b21d9 code=0x7ffc0000
[  729.557753][T10867] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[5358] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[10867]
[  730.936662][ T1107] usb 8-1: USB disconnect, device number 3
[  731.052830][   T26] audit: type=1326 audit(1791492555.554:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10860 comm="syz.5.1447" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd08b21d9 code=0x7ffc0000
[  731.087239][   T26] audit: type=1326 audit(1791492555.554:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10860 comm="syz.5.1447" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6fd0872a0e code=0x7ffc0000
[  731.230122][   T26] audit: type=1326 audit(1791492555.554:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10860 comm="syz.5.1447" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd08b21d9 code=0x7ffc0000
[  731.332037][   T26] audit: type=1326 audit(1791492555.554:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10860 comm="syz.5.1447" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd08b21d9 code=0x7ffc0000
[  731.386959][   T26] audit: type=1326 audit(1791492555.554:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10860 comm="syz.5.1447" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6fd08b21d9 code=0x7ffc0000
[  731.621737][   T26] audit: type=1326 audit(1791492555.554:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10860 comm="syz.5.1447" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd08b21d9 code=0x7ffc0000
[  731.681415][   T26] audit: type=1326 audit(1791492555.554:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10860 comm="syz.5.1447" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd08b21d9 code=0x7ffc0000
[  732.891286][   T26] audit: type=1326 audit(1791492555.554:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10860 comm="syz.5.1447" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6fd08b21d9 code=0x7ffc0000
[  733.420576][   T26] audit: type=1326 audit(1791492555.554:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10860 comm="syz.5.1447" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd08b21d9 code=0x7ffc0000
[  733.531724][T10894] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[  733.531724][T10894] 
[  733.546253][T10894] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[  733.560075][T10894] CIFS: Attempting to mount \\127.0.0.1\share
[  733.572544][T10894] CIFS: VFS: Error connecting to socket. Aborting operation.
[  733.580483][T10894] CIFS: VFS: cifs_mount failed w/return code = -101
[  734.288610][T10908] vxcan1: tx drop: invalid da for name 0x0100000000000000
[  735.872508][T10921] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[6889] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[10921]
[  737.010523][T10923] misc userio: The device must be registered before sending interrupts
[  737.020769][T10923] misc userio: The device must be registered before sending interrupts
[  740.263062][T10959] vxcan1: tx drop: invalid da for name 0x0100000000000000
[  741.939508][T10980] misc userio: The device must be registered before sending interrupts
[  741.949951][T10980] misc userio: The device must be registered before sending interrupts
[  742.023447][T10981] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[7229] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[10981]
[  744.722918][T10998] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  747.149032][ T1432] ieee802154 phy0 wpan0: encryption failed: -22
[  747.155388][ T1432] ieee802154 phy1 wpan1: encryption failed: -22
[  747.752351][T11038] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[7229] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[11038]
[  749.690825][T11055] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[  749.690825][T11055] 
[  749.704794][T11055] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[  749.717921][T11055] CIFS: Attempting to mount \\127.0.0.1\share
[  750.320497][T11055] CIFS: VFS: cifs_mount failed w/return code = -112
[  754.609179][T11081] IPVS: ip_vs_add_dest(): server weight less than zero
[  754.644081][   T26] kauditd_printk_skb: 22 callbacks suppressed
[  754.644098][   T26] audit: type=1326 audit(1791492579.974:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11073 comm="syz.8.1498" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8ee62d1d9 code=0x7ffc0000
[  754.708541][T11079] vxcan1: tx drop: invalid da for name 0x0100000000000000
[  754.763783][   T26] audit: type=1326 audit(1791492579.974:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11073 comm="syz.8.1498" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8ee62d1d9 code=0x7ffc0000
[  755.053722][   T26] audit: type=1326 audit(1791492580.124:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11073 comm="syz.8.1498" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb8ee5eda0e code=0x7ffc0000
[  755.078885][T11086] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[5358] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[11086]
[  755.266119][   T26] audit: type=1326 audit(1791492580.124:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11073 comm="syz.8.1498" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8ee62d1d9 code=0x7ffc0000
[  756.445336][   T26] audit: type=1326 audit(1791492580.124:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11073 comm="syz.8.1498" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8ee62d1d9 code=0x7ffc0000
[  756.560965][   T26] audit: type=1326 audit(1791492580.264:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11073 comm="syz.8.1498" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb8ee62d1d9 code=0x7ffc0000
[  756.870474][   T26] audit: type=1326 audit(1791492580.264:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11073 comm="syz.8.1498" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8ee62d1d9 code=0x7ffc0000
[  758.022280][   T26] audit: type=1326 audit(1791492580.264:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11073 comm="syz.8.1498" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8ee62d1d9 code=0x7ffc0000
[  758.303554][T11116] vxcan1: tx drop: invalid da for name 0x0100000000000000
[  759.554077][ T4195] Bluetooth: hci0: ACL packet for unknown connection handle 201
[  759.728995][   T26] audit: type=1326 audit(1791492580.474:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11073 comm="syz.8.1498" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb8ee62d1d9 code=0x7ffc0000
[  759.908498][   T26] audit: type=1326 audit(1791492580.474:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11073 comm="syz.8.1498" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8ee62d1d9 code=0x7ffc0000
[  759.937499][   T26] audit: type=1326 audit(1791492580.474:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11073 comm="syz.8.1498" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8ee62d1d9 code=0x7ffc0000
[  759.962386][   T26] audit: type=1326 audit(1791492580.604:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11073 comm="syz.8.1498" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fb8ee62d1d9 code=0x7ffc0000
[  760.010203][   T26] audit: type=1326 audit(1791492580.604:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11073 comm="syz.8.1498" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8ee62d1d9 code=0x7ffc0000
[  760.942855][   T26] audit: type=1326 audit(1791492580.604:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11073 comm="syz.8.1498" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8ee62d1d9 code=0x7ffc0000
[  760.978233][   T26] audit: type=1326 audit(1791492580.724:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11073 comm="syz.8.1498" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fb8ee62d1d9 code=0x7ffc0000
[  761.094202][T11146] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  761.396433][   T26] audit: type=1326 audit(1791492580.724:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11073 comm="syz.8.1498" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8ee62d1d9 code=0x7ffc0000
[  762.635711][T11151] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4187] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[11151]
[  762.664734][T11147] vxcan1: tx drop: invalid da for name 0x0100000000000000
[  762.958581][   T26] audit: type=1326 audit(1791492580.724:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11073 comm="syz.8.1498" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8ee62d1d9 code=0x7ffc0000
[  764.042628][T11165] mmap: syz.6.1525 (11165) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
[  765.278306][T11119] Bluetooth: Wrong link type (-22)
[  766.469596][T11190] vxcan1: tx drop: invalid da for name 0x0100000000000000
[  767.812260][T11199] loop7: detected capacity change from 0 to 512
[  768.114057][T11199] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  768.386442][ T5083] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  768.776579][ T5083] usb 9-1: Using ep0 maxpacket: 32
[  768.782598][T11199] ext4 filesystem being mounted at /177/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  769.406448][ T5083] usb 9-1: config index 0 descriptor too short (expected 6668, got 18)
[  769.469768][ T5083] usb 9-1: config 224 has too many interfaces: 101, using maximum allowed: 32
[  769.618332][ T5083] usb 9-1: config 224 has an invalid descriptor of length 0, skipping remainder of the config
[  769.645178][ T5083] usb 9-1: config 224 has 0 interfaces, different from the descriptor's value: 101
[  770.056927][ T5083] usb 9-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50
[  770.112635][ T5083] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  770.134545][ T5083] usb 9-1: Product: syz
[  770.150590][ T5083] usb 9-1: Manufacturer: syz
[  770.155449][ T5083] usb 9-1: SerialNumber: syz
[  770.402949][ T7779] usb 9-1: USB disconnect, device number 4
[  770.738239][T11228] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1538'.
[  772.549686][T11119] Bluetooth: Wrong link type (-22)
[  776.793499][T11256] vxcan1: tx drop: invalid da for name 0x0100000000000000
[  776.859338][T11260] loop5: detected capacity change from 0 to 16
[  777.286846][T11260] erofs: Unexpected value for 'user_xattr'
[  778.330980][T11267] loop6: detected capacity change from 0 to 4096
[  778.417609][T11267] NILFS (loop6): invalid segment: Checksum error in segment payload
[  778.455041][T11267] NILFS (loop6): trying rollback from an earlier position
[  778.522625][T11267] NILFS (loop6): recovery complete
[  778.576830][T11282] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  778.710832][T11267] netlink: 228 bytes leftover after parsing attributes in process `syz.6.1551'.
[  778.775410][T11267] netlink: zone id is out of range
[  778.812654][T11267] netlink: zone id is out of range
[  778.845940][T11267] netlink: zone id is out of range
[  778.887269][T11267] netlink: zone id is out of range
[  778.931780][T11267] netlink: zone id is out of range
[  778.970967][T11267] netlink: zone id is out of range
[  779.009180][T11267] netlink: zone id is out of range
[  779.053529][T11267] netlink: zone id is out of range
[  779.092173][T11267] netlink: zone id is out of range
[  779.128229][T11267] netlink: zone id is out of range
[  781.361763][T11119] Bluetooth: Wrong link type (-22)
[  782.969187][T11320] loop7: detected capacity change from 0 to 256
[  783.807322][T11320] exfat: Bad value for 'dmask'
[  783.845166][T11329] vxcan1: tx drop: invalid da for name 0x0100000000000000
[  784.726665][T11332] kernel profiling enabled (shift: 23)
[  785.545418][T11348] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1566'.
[  787.016257][T11366] xt_CONNSECMARK: invalid mode: 66
[  787.347685][T11119] Bluetooth: Wrong link type (-22)
[  787.796514][T10926] wlan0: Trigger new scan to find an IBSS to join
[  788.361487][T11384] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  790.993751][T11398] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1581'.
[  791.462651][T11402] loop8: detected capacity change from 0 to 2048
[  791.566249][T11402] EXT4-fs (loop8): failed to initialize system zone (-117)
[  791.594486][T11402] EXT4-fs (loop8): mount failed
[  791.786519][ T1170] wlan0: Trigger new scan to find an IBSS to join
[  791.919249][T11418] IPVS: Error connecting to the multicast addr
[  792.096830][ T5082] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  792.596548][ T5082] usb 6-1: Using ep0 maxpacket: 32
[  792.746993][ T5082] usb 6-1: config index 0 descriptor too short (expected 6675, got 18)
[  792.790957][ T5082] usb 6-1: config 224 has too many interfaces: 101, using maximum allowed: 32
[  793.654744][ T5082] usb 6-1: config 224 has an invalid descriptor of length 0, skipping remainder of the config
[  793.874118][ T5082] usb 6-1: config 224 has 0 interfaces, different from the descriptor's value: 101
[  794.043760][ T4361] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  794.119362][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  794.185883][T11429] loop8: detected capacity change from 0 to 256
[  794.256524][ T5082] usb 6-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50
[  794.265633][ T5082] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  794.358366][ T5082] usb 6-1: Product: syz
[  794.377104][ T5082] usb 6-1: Manufacturer: syz
[  794.381771][ T5082] usb 6-1: SerialNumber: syz
[  794.536594][ T5082] usb 6-1: can't set config #224, error -71
[  794.634904][ T5082] usb 6-1: USB disconnect, device number 5
[  795.371060][T11441] vxcan1: tx drop: invalid da for name 0x0100000000000000
[  796.126667][T11119] Bluetooth: Wrong link type (-22)
[  797.529556][T11458] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1594'.
[  797.695347][T11455] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1593'.
[  797.746142][T11455] net_ratelimit: 68 callbacks suppressed
[  797.746232][T11455] netlink: zone id is out of range
[  797.761291][T11455] netlink: zone id is out of range
[  797.768128][T11455] netlink: zone id is out of range
[  797.774120][T11455] netlink: zone id is out of range
[  797.781113][T11455] netlink: zone id is out of range
[  797.788356][T11455] netlink: zone id is out of range
[  797.793909][T11455] netlink: zone id is out of range
[  798.016164][T11455] netlink: zone id is out of range
[  798.050493][T11455] netlink: zone id is out of range
[  798.098542][T11455] netlink: zone id is out of range
[  801.449354][T11477] kAFS: bad VL server IP address
[  804.543281][T11504] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4187] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[11504]
[  804.586369][T11513] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1608'.
[  804.936491][ T7776] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  805.256472][ T7776] usb 9-1: Using ep0 maxpacket: 8
[  805.336509][ T7776] usb 9-1: device descriptor read/all, error -71
[  805.514514][T11533] IPVS: Error connecting to the multicast addr
[  806.216875][T11537] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1614'.
[  808.589675][ T1432] ieee802154 phy0 wpan0: encryption failed: -22
[  808.596156][ T1432] ieee802154 phy1 wpan1: encryption failed: -22
[  809.426570][T11569] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[7229] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[11569]
[  810.118222][T11575] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1621'.
[  811.168757][T11588] ALSA: mixer_oss: invalid OSS volume ''
[  811.556811][T11601] misc userio: No port type given on /dev/userio
[  811.564297][T11601] misc userio: The device must be registered before sending interrupts
[  811.573771][T11601] misc userio: The device must be registered before sending interrupts
[  812.667992][T11620] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4187] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[11620]
[  812.770905][T11623] netlink: 'syz.5.1632': attribute type 4 has an invalid length.
[  815.892934][T11641] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1636'.
[  815.909907][T11644] ALSA: mixer_oss: invalid OSS volume ''
[  816.275720][T11655] misc userio: No port type given on /dev/userio
[  816.283303][T11655] misc userio: The device must be registered before sending interrupts
[  816.292954][T11655] misc userio: The device must be registered before sending interrupts
[  818.761084][T11676] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[5358] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[11676]
[  820.102402][T11685] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  820.983416][T11693] ALSA: mixer_oss: invalid OSS volume ''
[  822.553543][T11119] Bluetooth: Wrong link type (-22)
[  822.560112][T11119] Bluetooth: hci1: link tx timeout
[  822.566010][T11119] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa
[  822.574422][T11119] Bluetooth: hci1: link tx timeout
[  822.579622][T11119] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  822.785541][T11710] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1653'.
[  824.223947][T11738] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4187] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[11738]
[  824.731981][ T4234] Bluetooth: hci1: command 0x0406 tx timeout
[  826.834302][T11780] misc userio: No port type given on /dev/userio
[  826.841963][T11780] misc userio: The device must be registered before sending interrupts
[  826.851611][T11780] misc userio: The device must be registered before sending interrupts
[  827.876234][ T4310] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  830.250810][T11810] loop7: detected capacity change from 0 to 2048
[  830.332919][T11814] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[5332] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[11814]
[  830.991500][T11816] ALSA: mixer_oss: invalid OSS volume ''
[  831.052480][T11810] EXT4-fs (loop7): failed to initialize system zone (-117)
[  831.078905][T11810] EXT4-fs (loop7): mount failed
[  833.840259][T11837] vxcan1: tx drop: invalid da for name 0x0100000000000000
[  835.898286][T11845] misc userio: No port type given on /dev/userio
[  835.904886][T11845] misc userio: The device must be registered before sending interrupts
[  835.913476][T11845] misc userio: The device must be registered before sending interrupts
[  838.192775][    C1] vcan0: j1939_tp_rxtimer: 0xffff888056f11400: rx timeout, send abort
[  838.228541][T11873] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1686'.
[  838.694201][    C1] vcan0: j1939_tp_rxtimer: 0xffff888024c44400: rx timeout, send abort
[  838.703486][    C1] vcan0: j1939_tp_rxtimer: 0xffff888056f11400: abort rx timeout. Force session deactivation
[  838.969026][T11884] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4187] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[11884]
[  839.385901][    C1] vcan0: j1939_tp_rxtimer: 0xffff888024c44400: abort rx timeout. Force session deactivation
[  840.368641][T11886] ALSA: mixer_oss: invalid OSS volume ''
[  840.755044][T11896] loop5: detected capacity change from 0 to 256
[  841.517148][T11896] exfat: Bad value for 'dmask'
[  841.654647][T11902] vxcan1: tx drop: invalid da for name 0x0100000000000000
[  843.652460][T11907] misc userio: No port type given on /dev/userio
[  843.659138][T11907] misc userio: The device must be registered before sending interrupts
[  843.667701][T11907] misc userio: The device must be registered before sending interrupts
[  844.719107][T11119] Bluetooth: Wrong link type (-22)
[  844.726867][T11119] Bluetooth: hci2: link tx timeout
[  844.734601][T11119] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  844.743137][T11119] Bluetooth: hci2: link tx timeout
[  844.748950][T11119] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  845.529029][T11926] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1698'.
[  846.626951][T11944] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4187] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[11944]
[  846.836476][ T7779] Bluetooth: hci2: command 0x0406 tx timeout
[  848.557554][T11949] ALSA: mixer_oss: invalid OSS volume ''
[  849.944668][ T7779] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[  852.606935][ T7779] usb 9-1: device descriptor read/all, error -71
[  852.631879][T12013] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1711'.
[  853.768923][T12017] loop6: detected capacity change from 0 to 256
[  853.807025][T12017] exfat: Bad value for 'dmask'
[  855.901115][T12039] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[6889] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[12039]
[  856.278707][T12034] ALSA: mixer_oss: invalid OSS volume ''
[  857.083398][T12035] block device autoloading is deprecated and will be removed.
[  858.697888][T12067] misc userio: No port type given on /dev/userio
[  858.705430][T12067] misc userio: The device must be registered before sending interrupts
[  858.714991][T12067] misc userio: The device must be registered before sending interrupts
[  859.835308][ T4310] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  865.765544][T12122] capability: warning: `syz.1.1735' uses 32-bit capabilities (legacy support in use)
[  866.276634][ T4200] Bluetooth: Wrong link type (-22)
[  866.281886][ T4200] Bluetooth: hci5: link tx timeout
[  866.288040][ T4200] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa
[  866.296242][ T4200] Bluetooth: hci5: link tx timeout
[  866.301533][ T4200] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa
[  867.257546][T12133] Invalid ELF header magic: != ELF
[  868.663188][T11874] Bluetooth: hci5: command 0x0406 tx timeout
[  868.945799][T12144] ALSA: mixer_oss: invalid OSS volume ''
[  868.952088][T11229] tipc: Resetting bearer <eth:syz_tun>
[  869.009182][T11229] tipc: Disabling bearer <eth:syz_tun>
[  869.234799][T12152] virtio-fs: tag </dev/nullb0> not found
[  869.534335][ T4361] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  870.900527][ T1432] ieee802154 phy0 wpan0: encryption failed: -22
[  870.907280][ T1432] ieee802154 phy1 wpan1: encryption failed: -22
[  871.151481][T12159] misc userio: No port type given on /dev/userio
[  871.158294][T12159] misc userio: The device must be registered before sending interrupts
[  871.167899][T12159] misc userio: The device must be registered before sending interrupts
[  871.548083][ T4361] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  872.280828][ T4361] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  872.406283][T12169] vxcan1: tx drop: invalid da for name 0x0100000000000000
[  873.130320][T12166] loop8: detected capacity change from 0 to 1764
[  873.150769][ T4361] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  874.618595][T12172] wlan0 speed is unknown, defaulting to 1000
[  874.719685][T12172] lo speed is unknown, defaulting to 1000
[  874.951566][T12194] misc userio: No port type given on /dev/userio
[  874.959089][T12194] misc userio: The device must be registered before sending interrupts
[  874.969165][T12194] misc userio: The device must be registered before sending interrupts
[  875.853906][ T4233] Bluetooth: hci0: command 0x0409 tx timeout
[  876.002091][ T4361] tipc: Left network mode
[  876.953530][T12172] chnl_net:caif_netlink_parms(): no params data found
[  877.343838][T12219] misc userio: No port type given on /dev/userio
[  877.351410][T12219] misc userio: The device must be registered before sending interrupts
[  877.360898][T12219] misc userio: The device must be registered before sending interrupts
[  878.288217][ T4233] Bluetooth: hci0: command 0x041b tx timeout
[  878.445309][T12172] bridge0: port 1(bridge_slave_0) entered blocking state
[  878.514969][T12172] bridge0: port 1(bridge_slave_0) entered disabled state
[  878.529236][T12226] 9pnet_virtio: no channels available for device syz
[  878.557224][T12226] overlayfs: failed to clone upperpath
[  878.598940][T12172] device bridge_slave_0 entered promiscuous mode
[  878.710940][T12172] bridge0: port 2(bridge_slave_1) entered blocking state
[  880.112854][T12172] bridge0: port 2(bridge_slave_1) entered disabled state
[  880.162687][T12172] device bridge_slave_1 entered promiscuous mode
[  880.338790][T12251] vxcan1: tx drop: invalid da for name 0x0100000000000000
[  880.346404][ T4233] Bluetooth: hci0: command 0x040f tx timeout
[  880.362566][T12172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  880.456818][T12172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  880.592202][T12256] ALSA: mixer_oss: invalid OSS volume ''
[  881.580122][T12172] team0: Port device team_slave_0 added
[  881.682796][T12172] team0: Port device team_slave_1 added
[  881.931784][T12172] batman_adv: batadv0: Adding interface: batadv_slave_0
[  881.978501][T12172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  882.033427][T12270] misc userio: No port type given on /dev/userio
[  882.040879][T12270] misc userio: The device must be registered before sending interrupts
[  882.050165][T12270] misc userio: The device must be registered before sending interrupts
[  882.318603][T12172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  882.553941][T12172] batman_adv: batadv0: Adding interface: batadv_slave_1
[  882.675200][T12172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  883.000540][ T4290] Bluetooth: hci0: command 0x0419 tx timeout
[  883.011867][T12172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  883.235296][ T4361] device hsr_slave_0 left promiscuous mode
[  883.337288][ T4361] device hsr_slave_1 left promiscuous mode
[  883.363544][ T4361] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  883.396533][ T4361] batman_adv: batadv0: Removing interface: batadv_slave_0
[  883.474478][ T4361] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  883.511315][ T4361] batman_adv: batadv0: Removing interface: batadv_slave_1
[  883.634679][ T4361] device bridge_slave_1 left promiscuous mode
[  883.714955][ T4361] bridge0: port 2(bridge_slave_1) entered disabled state
[  883.945649][ T4361] device bridge_slave_0 left promiscuous mode
[  884.047891][ T4361] bridge0: port 1(bridge_slave_0) entered disabled state
[  884.475123][ T4361] device bridge0 left promiscuous mode
[  884.492417][ T4361] device veth1_macvtap left promiscuous mode
[  884.515958][ T4361] device veth0_macvtap left promiscuous mode
[  884.544505][ T4361] device veth1_vlan left promiscuous mode
[  884.583180][ T4361] device veth0_vlan left promiscuous mode
[  886.907208][T11119] Bluetooth: Wrong link type (-22)
[  890.143344][ T4361] team0 (unregistering): Port device team_slave_1 removed
[  892.284883][ T4361] team0 (unregistering): Port device team_slave_0 removed
[  892.377255][ T4361] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  893.066796][ T4449] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  893.331969][ T4361] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  893.367027][   T21] infiniband syz1: ib_query_port failed (-19)
[  893.568377][ T4361] bond0 (unregistering): Released all slaves
[  893.676054][T12172] device hsr_slave_0 entered promiscuous mode
[  893.714380][T12172] device hsr_slave_1 entered promiscuous mode
[  893.744538][T12172] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  893.765935][T12332] loop6: detected capacity change from 0 to 256
[  893.833381][T12172] Cannot create hsr debugfs directory
[  893.966348][T11874] bond0 speed is unknown, defaulting to 1000
[  894.526572][T12338] kAFS: bad VL server IP address
[  895.012832][T11119] Bluetooth: Wrong link type (-22)
[  895.018150][T11119] Bluetooth: hci3: link tx timeout
[  895.024305][T11119] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa
[  895.379148][T12172] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  895.437855][T12172] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  895.498451][T12172] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  895.536902][T12172] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  895.904532][T12172] 8021q: adding VLAN 0 to HW filter on device bond0
[  896.030212][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  896.053997][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  897.235256][T12172] 8021q: adding VLAN 0 to HW filter on device team0
[  899.050915][T12172] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  899.540003][T12172] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  899.686002][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  899.748567][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  899.845496][  T144] bridge0: port 1(bridge_slave_0) entered blocking state
[  899.852676][  T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[  899.956789][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  900.010459][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  900.069673][  T144] bridge0: port 2(bridge_slave_1) entered blocking state
[  900.077871][  T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[  900.180005][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  900.238230][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  900.299939][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  900.359643][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  900.415229][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  900.496679][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  900.516823][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  900.557826][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  900.590210][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  900.642777][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  900.698899][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  900.753093][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  900.815802][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  901.176212][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  901.247456][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  901.324644][T12172] 8021q: adding VLAN 0 to HW filter on device batadv0
[  903.745347][T12420] vxcan1: tx drop: invalid da for name 0x0100000000000000
[  903.753419][T12421] loop5: detected capacity change from 0 to 256
[  904.866151][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  906.479375][T11119] Bluetooth: Wrong link type (-22)
[  906.485066][T11119] Bluetooth: hci3: link tx timeout
[  906.490829][T11119] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa
[  906.920886][ T7779] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  906.937302][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  907.003842][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  907.026140][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  907.069827][T12172] device veth0_vlan entered promiscuous mode
[  907.084277][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  907.128127][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  907.272881][T12172] device veth1_vlan entered promiscuous mode
[  907.365707][T11119] Bluetooth: Wrong link type (-22)
[  907.373153][T11119] Bluetooth: hci3: link tx timeout
[  907.379781][T11119] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa
[  909.372845][ T7779] usb 7-1: device not accepting address 3, error -71
[  909.390138][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  909.410670][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  909.458110][T12172] device veth0_macvtap entered promiscuous mode
[  909.585264][T12172] device veth1_macvtap entered promiscuous mode
[  909.679666][T12172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  909.911105][T12172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  910.100482][T12172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  910.477197][T12172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  910.551435][T12172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  910.605214][T12172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  910.651304][T12172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  910.688954][T12172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  910.731155][T12172] batman_adv: batadv0: Interface activated: batadv_slave_0
[  910.799622][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  910.834846][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  910.854443][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  910.924901][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  910.966341][T12172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  911.031854][T12172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  911.080218][T12172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  911.140842][T12172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  911.187498][T12172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  911.228508][T12172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  911.277854][T12172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  911.309634][T12172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  911.348587][T12172] batman_adv: batadv0: Interface activated: batadv_slave_1
[  911.359686][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  911.390201][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  911.418030][T12172] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  911.449880][T12172] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  911.492906][T12172] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  911.517179][T12172] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  911.738907][ T4449] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  911.769817][ T4449] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  911.848320][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  911.879255][ T4310] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  911.906623][ T4310] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  911.933053][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  913.544842][T12511] loop9: detected capacity change from 0 to 256
[  916.695421][T12545] virtio-fs: tag </dev/nullb0> not found
[  917.060365][T12548] net_ratelimit: 68 callbacks suppressed
[  917.060407][T12548] netlink: del zone limit has 4 unknown bytes
[  921.252754][T12577] misc userio: No port type given on /dev/userio
[  921.259400][T12577] misc userio: The device must be registered before sending interrupts
[  921.268282][T12577] misc userio: The device must be registered before sending interrupts
[  925.186733][ T1170] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  925.709258][T12618] netlink: del zone limit has 4 unknown bytes
[  931.497507][ T1432] ieee802154 phy0 wpan0: encryption failed: -22
[  931.504234][ T1432] ieee802154 phy1 wpan1: encryption failed: -22
[  931.885235][T12666] misc userio: No port type given on /dev/userio
[  931.892035][T12666] misc userio: The device must be registered before sending interrupts
[  931.901032][T12666] misc userio: The device must be registered before sending interrupts
[  935.732253][T12690] loop5: detected capacity change from 0 to 128
[  939.390370][T12731] loop6: detected capacity change from 0 to 512
[  940.180268][T12731] EXT4-fs (loop6): Test dummy encryption mode enabled
[  940.287966][T12731] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  940.621245][T12731] EXT4-fs error (device loop6): ext4_orphan_get:1436: comm syz.6.1855: bad orphan inode 131083
[  940.864576][T12731] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,norecovery,,errors=continue. Quota mode: none.
[  951.879772][T12843] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  955.326573][ T7776] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  955.596425][ T7776] usb 10-1: Using ep0 maxpacket: 32
[  955.726561][ T7776] usb 10-1: config index 0 descriptor too short (expected 6668, got 18)
[  955.758767][ T7776] usb 10-1: config 224 has too many interfaces: 101, using maximum allowed: 32
[  955.793243][ T7776] usb 10-1: config 224 has an invalid descriptor of length 0, skipping remainder of the config
[  955.864385][ T7776] usb 10-1: config 224 has 0 interfaces, different from the descriptor's value: 101
[  956.106994][ T7776] usb 10-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50
[  956.148087][ T7776] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  957.173994][ T7776] usb 10-1: Product: syz
[  957.415529][ T7776] usb 10-1: Manufacturer: syz
[  957.420998][ T7776] usb 10-1: SerialNumber: syz
[  958.230869][ T5082] usb 10-1: USB disconnect, device number 2
[  958.410080][ T1170] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  961.636922][T12949] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1905'.
[  961.724105][T12949] serial 00:03: in use; can't configure
[  966.301620][T12994] loop9: detected capacity change from 0 to 1024
[  981.975529][T11119] Bluetooth: Wrong link type (-22)
[  985.420593][T13208] vxcan1: tx drop: invalid da for name 0x0100000000000000
[  985.948682][T13223] wlan0 speed is unknown, defaulting to 1000
[  985.979789][T13223] lo speed is unknown, defaulting to 1000
[  991.778022][T13264] vxcan1: tx drop: invalid da for name 0x0100000000000000
[  991.803114][T13269] vxcan1: tx drop: invalid da for name 0x0100000000000000
[  991.836532][T13272] tmpfs: Unknown parameter 'quota'
[  992.076815][T11119] Bluetooth: Wrong link type (-22)
[  992.082145][T11119] Bluetooth: hci3: link tx timeout
[  992.087396][T11119] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa
[  992.095522][T11119] Bluetooth: hci3: link tx timeout
[  992.100737][T11119] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  992.267809][ T4331] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  992.932583][T13307] wlan0 speed is unknown, defaulting to 1000
[  992.943664][T13307] lo speed is unknown, defaulting to 1000
[  993.247002][ T1432] ieee802154 phy0 wpan0: encryption failed: -22
[  993.253330][ T1432] ieee802154 phy1 wpan1: encryption failed: -22
[  994.543178][T11819] Bluetooth: hci3: command 0x0406 tx timeout
[  994.666138][T13336] vxcan1: tx drop: invalid da for name 0x0100000000000000
[  997.725239][T13383] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2006'.
[ 1000.106421][ T4290] Bluetooth: hci0: command 0x0406 tx timeout
[ 1000.138785][T13409] vxcan1: tx drop: invalid da for name 0x0100000000000000
[ 1004.442153][T13465] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1004.502265][T13470] device bond_slave_0 entered promiscuous mode
[ 1004.509523][T13470] device bond_slave_1 entered promiscuous mode
[ 1004.556000][T13470] 8021q: adding VLAN 0 to HW filter on device macvlan2
[ 1004.569286][T13470] bond1: (slave macvlan2): Enslaving as a backup interface with an up link
[ 1004.621969][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[ 1004.654156][T13477] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link
[ 1006.075952][T13495] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2033'.
[ 1006.085980][T13495] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2033'.
[ 1010.683945][T13564] vxcan1: tx drop: invalid da for name 0x0100000000000000
[ 1011.603193][T13574] loop5: detected capacity change from 0 to 2048
[ 1017.606266][T13625] netlink: del zone limit has 4 unknown bytes
[ 1018.512407][T13636] overlayfs: failed to clone upperpath
[ 1019.322072][T13646] vxcan1: tx drop: invalid da for name 0x0100000000000000
[ 1023.339341][T13676] netlink: del zone limit has 4 unknown bytes
[ 1024.555962][T13681] netlink: del zone limit has 4 unknown bytes
[ 1025.071648][T13684] netlink: del zone limit has 4 unknown bytes
[ 1025.484611][ T4310] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1025.889954][T13691] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2077'.
[ 1032.222550][T13734] netlink: del zone limit has 4 unknown bytes
[ 1037.751764][T13774] vxcan1: tx drop: invalid da for name 0x0100000000000000
[ 1038.241289][T13785] netlink: del zone limit has 4 unknown bytes
[ 1042.886234][    C0] Adjusting tsc more than 11% (6672763 vs 8464875)
[ 1043.980182][T13845] vxcan1: tx drop: invalid da for name 0x0100000000000000
[ 1043.992414][T13840] vxcan1: tx drop: invalid da for name 0x0100000000000000
[ 1046.738051][T13861] loop9: detected capacity change from 0 to 256
[ 1047.461154][T13861] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[ 1047.461154][T13861] 
[ 1047.475123][T13861] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[ 1047.488360][T13861] CIFS: Attempting to mount \\127.0.0.1\share
[ 1047.501578][T13861] CIFS: VFS: Error connecting to socket. Aborting operation.
[ 1047.510652][T13861] CIFS: VFS: cifs_mount failed w/return code = -111
[ 1048.024946][T13875] loop9: detected capacity change from 0 to 2048
[ 1049.789308][T13875] EXT4-fs (loop9): failed to initialize system zone (-117)
[ 1049.827053][T13875] EXT4-fs (loop9): mount failed
[ 1050.375991][T13904] wlan0 speed is unknown, defaulting to 1000
[ 1050.387107][T13904] lo speed is unknown, defaulting to 1000
[ 1052.752220][T13915] vxcan1: tx drop: invalid da for name 0x0100000000000000
[ 1054.647917][T13939] wlan0 speed is unknown, defaulting to 1000
[ 1054.658639][T13939] lo speed is unknown, defaulting to 1000
[ 1055.086867][ T1432] ieee802154 phy0 wpan0: encryption failed: -22
[ 1055.103947][ T1432] ieee802154 phy1 wpan1: encryption failed: -22
[ 1055.717425][T13930] vxcan1: tx drop: invalid da for name 0x0100000000000000
[ 1055.735611][T13938] vxcan1: tx drop: invalid da for name 0x0100000000000000
[ 1057.666065][T13963] wlan0 speed is unknown, defaulting to 1000
[ 1057.677258][T13963] lo speed is unknown, defaulting to 1000
[ 1058.095563][T13965] tmpfs: Unknown parameter 'quota'
[ 1059.154913][T13983] netlink: 'syz.1.2143': attribute type 4 has an invalid length.
[ 1062.605087][ T1170] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1068.648488][T14052] loop5: detected capacity change from 0 to 128
[ 1069.968935][T14052] EXT4-fs (loop5): Test dummy encryption mode enabled
[ 1070.198558][T14063] overlayfs: failed to clone lowerpath
[ 1070.356382][T14052] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none.
[ 1070.526053][T14052] ext4 filesystem being mounted at /386/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1070.880889][T14077] wlan0 speed is unknown, defaulting to 1000
[ 1070.888476][T14077] lo speed is unknown, defaulting to 1000
[ 1072.132043][T14076] fscrypt (loop5): Missing crypto API support for AES-256-XTS (API name: "xts(aes)")
[ 1072.580959][T14085] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[ 1075.334645][T14112] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2179'.
[ 1077.926574][T14137] wlan0 speed is unknown, defaulting to 1000
[ 1077.936767][T14137] lo speed is unknown, defaulting to 1000
[ 1080.373918][T14141] loop5: detected capacity change from 0 to 512
[ 1081.672786][T14141] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[ 1081.841147][T14141] EXT4-fs (loop5): 1 truncate cleaned up
[ 1081.847461][T14141] EXT4-fs (loop5): mounted filesystem without journal. Opts: init_itable,data_err=ignore,stripe=0x0000000000000040,,errors=continue. Quota mode: none.
[ 1083.143471][T14160] netlink: 'syz.5.2189': attribute type 10 has an invalid length.
[ 1083.515076][T14160] team0: Device wg1 is of different type
[ 1086.154630][T14189] vxcan1: tx drop: invalid da for name 0x0100000000000000
[ 1091.307071][T14224] loop5: detected capacity change from 0 to 2048
[ 1091.952139][T14224] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1092.152411][T14238] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1092.265209][T14241] netlink: del zone limit has 4 unknown bytes
[ 1093.077604][T14245] netlink: 'syz.1.2212': attribute type 10 has an invalid length.
[ 1093.323414][T14245] team0: Device wg1 is of different type
[ 1094.255294][T14261] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2215'.
[ 1095.321725][ T4243] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1098.435884][T14304] wlan0 speed is unknown, defaulting to 1000
[ 1098.446725][T14304] lo speed is unknown, defaulting to 1000
[ 1099.402998][T14286] netlink: del zone limit has 4 unknown bytes
[ 1103.237222][ T5082] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[ 1104.536137][ T5082] usb 10-1: device descriptor read/64, error -71
[ 1106.046054][ T5082] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[ 1107.176213][ T5082] usb 10-1: Using ep0 maxpacket: 32
[ 1107.316890][ T5082] usb 10-1: config index 0 descriptor too short (expected 6668, got 18)
[ 1107.477606][ T5082] usb 10-1: config 224 has too many interfaces: 101, using maximum allowed: 32
[ 1107.799406][ T5082] usb 10-1: config 224 has an invalid descriptor of length 0, skipping remainder of the config
[ 1107.908962][ T5082] usb 10-1: config 224 has 0 interfaces, different from the descriptor's value: 101
[ 1109.236468][ T5082] usb 10-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50
[ 1109.245705][ T5082] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1109.526294][ T5082] usb 10-1: can't set config #224, error -71
[ 1109.537376][ T5082] usb 10-1: USB disconnect, device number 4
[ 1109.664498][T14386] ------------[ cut here ]------------
[ 1109.683200][T14386] kernel BUG at arch/x86/mm/physaddr.c:28!
[ 1109.713130][T14386] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[ 1109.719359][T14386] CPU: 1 PID: 14386 Comm: syz.9.2248 Not tainted syzkaller #0
[ 1109.726836][T14386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1109.736907][T14386] RIP: 0010:__phys_addr+0x158/0x170
[ 1109.742214][T14386] Code: ff ff e8 fb 14 43 00 48 c7 c7 d0 83 f9 8c 48 89 de 4c 89 f2 e8 d9 3c d3 02 e9 49 ff ff ff e8 df 14 43 00 0f 0b e8 d8 14 43 00 <0f> 0b e8 d1 14 43 00 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44
[ 1109.761840][T14386] RSP: 0018:ffffc9000373f820 EFLAGS: 00010283
[ 1109.767930][T14386] RAX: ffffffff81360e88 RBX: 0000408003a21000 RCX: 0000000000080000
[ 1109.775912][T14386] RDX: ffffc90005781000 RSI: 00000000000026e9 RDI: 00000000000026ea
[ 1109.783894][T14386] RBP: ffffc9000373f998 R08: 0000000000000040 R09: 1ffffffff1a3e6e6
[ 1109.791876][T14386] R10: dffffc0000000000 R11: fffffbfff1a3e6e7 R12: ffff88801a7ae710
[ 1109.799860][T14386] R13: ffff88801a7ae740 R14: 000000000000002e R15: 0000000000000001
[ 1109.807855][T14386] FS:  00007fe91740f6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[ 1109.816800][T14386] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1109.823394][T14386] CR2: 00007fe9173eed58 CR3: 0000000072dc2000 CR4: 00000000003506e0
[ 1109.831381][T14386] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1109.839364][T14386] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1109.847347][T14386] Call Trace:
[ 1109.850636][T14386]  <TASK>
[ 1109.853581][T14386]  ? vidtv_s302m_encoder_init+0x573/0x770
[ 1109.859413][T14386]  kfree+0x64/0x2a0
[ 1109.863239][T14386]  ? kmem_cache_alloc_trace+0x18d/0x290
[ 1109.868803][T14386]  ? vidtv_s302m_encoder_init+0x322/0x770
[ 1109.874539][T14386]  vidtv_s302m_encoder_init+0x573/0x770
[ 1109.880107][T14386]  ? vidtv_pes_write_into+0x11e0/0x11e0
[ 1109.885672][T14386]  vidtv_channel_s302m_init+0x357/0x830
[ 1109.891238][T14386]  vidtv_channels_init+0x41/0x90
[ 1109.896199][T14386]  vidtv_mux_init+0x4d0/0x1950
[ 1109.900978][T14386]  ? __mutex_lock_common+0x435/0x2400
[ 1109.906367][T14386]  vidtv_start_feed+0x368/0x590
[ 1109.911278][T14386]  ? vidtv_i2c_func+0x10/0x10
[ 1109.915972][T14386]  ? vidtv_stop_feed+0x250/0x250
[ 1109.920925][T14386]  ? _raw_spin_unlock_irq+0x1f/0x40
[ 1109.926143][T14386]  ? lockdep_hardirqs_on+0x94/0x140
[ 1109.931364][T14386]  dmx_ts_feed_start_filtering+0x11c/0x210
[ 1109.937257][T14386]  ? dmx_ts_feed_stop_filtering+0x190/0x190
[ 1109.943171][T14386]  dvb_dmxdev_filter_start+0x422/0x1060
[ 1109.948740][T14386]  dvb_demux_do_ioctl+0x48d/0x530
[ 1109.953778][T14386]  dvb_usercopy+0x191/0x2b0
[ 1109.958295][T14386]  ? dvb_dmxdev_buffer_read+0x4a0/0x4a0
[ 1109.963885][T14386]  ? dvb_generic_ioctl+0xb0/0xb0
[ 1109.968841][T14386]  ? dvb_demux_poll+0x210/0x210
[ 1109.973707][T14386]  dvb_demux_ioctl+0x25/0x30
[ 1109.978314][T14386]  __se_sys_ioctl+0xfa/0x170
[ 1109.982945][T14386]  do_syscall_64+0x4c/0xa0
[ 1109.987376][T14386]  ? clear_bhb_loop+0x30/0x80
[ 1109.992071][T14386]  ? clear_bhb_loop+0x30/0x80
[ 1109.996762][T14386]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1110.002669][T14386] RIP: 0033:0x7fe9191b71d9
[ 1110.007098][T14386] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1110.026715][T14386] RSP: 002b:00007fe91740f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1110.035147][T14386] RAX: ffffffffffffffda RBX: 00007fe91943efa0 RCX: 00007fe9191b71d9
[ 1110.043131][T14386] RDX: 0000000000000000 RSI: 0000000000006f29 RDI: 0000000000000003
[ 1110.051113][T14386] RBP: 00007fe91924e888 R08: 0000000000000000 R09: 0000000000000000
[ 1110.059095][T14386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1110.067075][T14386] R13: 00007fe91943f038 R14: 00007fe91943efa0 R15: 00007ffc77c8ff08
[ 1110.075063][T14386]  </TASK>
[ 1110.078088][T14386] Modules linked in:
[ 1110.130534][T14384] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1110.781474][T14386] ---[ end trace 1c41bc36665bc6d3 ]---
[ 1110.800118][T14391] device bond_slave_0 entered promiscuous mode
[ 1110.806352][T14391] device bond_slave_1 entered promiscuous mode
[ 1110.848421][T14391] 8021q: adding VLAN 0 to HW filter on device macvlan2
[ 1110.902374][T14391] bond1: (slave macvlan2): Enslaving as a backup interface with an up link
[ 1110.985059][T14386] RIP: 0010:__phys_addr+0x158/0x170
[ 1110.990636][T14386] Code: ff ff e8 fb 14 43 00 48 c7 c7 d0 83 f9 8c 48 89 de 4c 89 f2 e8 d9 3c d3 02 e9 49 ff ff ff e8 df 14 43 00 0f 0b e8 d8 14 43 00 <0f> 0b e8 d1 14 43 00 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44
[ 1111.017478][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[ 1111.048104][T14386] RSP: 0018:ffffc9000373f820 EFLAGS: 00010283
[ 1111.054228][T14386] RAX: ffffffff81360e88 RBX: 0000408003a21000 RCX: 0000000000080000
[ 1111.088884][T14386] RDX: ffffc90005781000 RSI: 00000000000026e9 RDI: 00000000000026ea
[ 1111.093354][T14400] netlink: 'syz.6.2244': attribute type 10 has an invalid length.
[ 1111.105042][T14386] RBP: ffffc9000373f998 R08: 0000000000000040 R09: 1ffffffff1a3e6e6
[ 1111.113351][T14386] R10: dffffc0000000000 R11: fffffbfff1a3e6e7 R12: ffff88801a7ae710
[ 1111.121416][T14386] R13: ffff88801a7ae740 R14: 000000000000002e R15: 0000000000000001
[ 1111.130970][T14386] FS:  00007fe91740f6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[ 1111.140150][T14386] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1111.147907][T14386] CR2: 0000001b34007ff8 CR3: 0000000072dc2000 CR4: 00000000003506f0
[ 1111.149621][T14400] team0: Device wg1 is of different type
[ 1111.158549][T14386] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1111.169693][T14386] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1111.177931][T14386] Kernel panic - not syncing: Fatal exception
[ 1111.184291][T14386] Kernel Offset: disabled
[ 1111.188609][T14386] Rebooting in 86400 seconds..