last executing test programs:

8.887604939s ago: executing program 2 (id=1654):
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
write$binfmt_register(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge0\x00'})
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000006c0)={{0x1, 0x3, 0x201, 0x3}, 0x9, 0x100000200, 0x32})
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024)
sendto$inet(r0, &(0x7f0000000180), 0x0, 0x4040, 0x0, 0x0)

8.415519033s ago: executing program 2 (id=1658):
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x4}}}, @hopopts={{0x68, 0x29, 0x36, {0x5e, 0x9, '\x00', [@generic={0xff, 0x1f, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e"}, @pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8}, @generic={0x1, 0x4, "2bdb86d1"}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0xe8}}], 0x1, 0x810)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085", 0xcb}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

8.287468956s ago: executing program 1 (id=1660):
socket$kcm(0x2, 0xa, 0x2)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140))
socket$packet(0x11, 0x3, 0x300)
ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f00000000c0)={0xf0f044, 0x7ff})
openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc8)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
lseek(r2, 0x851, 0x0)

8.181932809s ago: executing program 4 (id=1661):
syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x489, &(0x7f0000000580)="$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")
ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0xd01ce0, 0x0, 0x82, 0x0, &(0x7f0000000080))
creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

8.1507888s ago: executing program 1 (id=1662):
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009e", 0x88}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651", 0x55}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bc", 0x4e}, {0x0}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c", 0x1f}, {&(0x7f00000000c0)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

7.932403906s ago: executing program 1 (id=1663):
r0 = socket$netlink(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet(0xa, 0x1, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c00000012001fff2bbd70008000000000bb0000", @ANYRES32=0x0, @ANYBLOB="00000200003f0000240012800b00010067726574617000001400028006000e000100000008000700ffffffff08000a", @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x40005}, 0x40000)

7.337643483s ago: executing program 2 (id=1664):
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000380)}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb", 0x61}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71", 0x3c}, {0x0}, {&(0x7f00000000c0)}], 0x5}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

7.238831146s ago: executing program 2 (id=1665):
openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x181002, 0x0)
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socket$xdp(0x2c, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@ipv4={""/10, ""/2, @broadcast}, @in6=@local}}, {{@in=@multicast2}, 0x0, @in=@initdev}}, 0x0)
socket(0x80000000000000a, 0x2, 0x0)
getpid()
r3 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0xc0505350, &(0x7f0000000140)={{0x0, 0x1}, {0xf, 0xfd}, 0x8000008, 0x0, 0xfd})
setns(0xffffffffffffffff, 0x24020000)
r4 = socket$inet6(0xa, 0x3, 0x75)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@mcast1, @in6=@mcast1, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x84}, {0xfffffefffffffffd, 0xeca, 0x80002d, 0x0, 0x0, 0x1, 0x8000000000778a, 0xffff}, {0x3, 0x0, 0x9}, 0x0, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x4d6, 0x3c}, 0x0, @in=@remote, 0x0, 0x0, 0x1}}, 0xe8)
close(r4)
getgroups(0x0, 0x0)

6.75234212s ago: executing program 4 (id=1666):
r0 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r0, 0x8914, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1e000000000000000300000007000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000400000000200000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = dup(r1)
r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$int_in(r3, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0})
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r5, &(0x7f00000007c0)={0x1f, 0x0, @any, 0x4, 0x2}, 0xe)
ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000340))
r6 = dup(r4)
r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00')
pread64(r7, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c)
ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000000)={0x1, r6})
ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f00000001c0)=0x304008000)
ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f00000003c0)={0x1, r2})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, 0x25, r2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)

5.994679231s ago: executing program 2 (id=1667):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000180)=0x4000001, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$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")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000006100)=ANY=[@ANYBLOB="240000003a0007010000fbffffffffff027c0000040000000c000180060006"], 0x24}}, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r5, &(0x7f00000002c0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
syz_emit_ethernet(0x26, &(0x7f00000000c0)=ANY=[], 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}, 0x1c)
syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000080)='./file0\x00', 0xa00004, &(0x7f00000001c0)=ANY=[@ANYBLOB='adinicb,iocharset=maciceland,utf8,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c6e6f76727300806f636861727365743d6d6163696e7569742c756e64656c6574652c696f636861727365743d69736f383835392d322c6164696e6963622c766f6c756d653d303030303030303030303030302c756d5b30495330303030303030303030303030303030303030303030302c6769643d666f726765742c756e686964652c00000070d3020e5538c1ffed98de950f03cee932a103c89869fc66fe435ca5cd6825cf"], 0x1, 0xc5a, &(0x7f00000036c0)="$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")

5.625949892s ago: executing program 4 (id=1669):
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009e", 0x88}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb", 0x61}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bc", 0x4e}, {0x0}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c71", 0x20}, {&(0x7f00000000c0)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

5.484168555s ago: executing program 4 (id=1671):
openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000300)={0x44840, 0x40, 0xf}, 0x18)
openat$fb0(0xffffffffffffff9c, 0x0, 0x180300, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x40040, 0x0)
socket$netlink(0x10, 0x3, 0x8)
unlink(0x0)
socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
clock_nanosleep(0x1, 0x1, &(0x7f0000000040)={0x77359400}, 0x0)
rt_sigqueueinfo(0x0, 0x21, &(0x7f0000002d00)={0x36, 0x0, 0x8})
r0 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014})
epoll_wait(r3, &(0x7f0000000340), 0x0, 0x80000000)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001})
ppoll(&(0x7f0000000200)=[{r3, 0x1}], 0x1, 0x0, 0x0, 0x3)
setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0)

5.363691829s ago: executing program 2 (id=1672):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x28040, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40040c0}, 0x800)
ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prctl$PR_SET_IO_FLUSHER(0x43, 0x1)
sched_setattr(0x0, &(0x7f0000000200)={0x38, 0xb56e2e3f2d9728b3, 0x8, 0x8001, 0x0, 0x9, 0x100000003, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000f80)=@mangle={'mangle\x00', 0x2, 0x6, 0x5c0, 0x420, 0x0, 0x330, 0x260, 0x190, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {0xff}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0xff000000, 0xffffffff, 0xff000000, 0xffffff00], [], 0x0, 0x886}}, @common=@inet=@dccp={{0x30}, {[0x4e21, 0x4e24], [0x4e23, 0x4e24], 0xd, 0x0, 0x4, 0x7}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_macvtap\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x5}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'sit0\x00', {0xff}}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@empty, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x50, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x4}, 0x1c)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x8100, 0x0)
ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f00000001c0)=0x4)
socket$inet_mptcp(0x2, 0x1, 0x106)
r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd0000000000000109022400018000000009040000010300000009210500000122050009058103"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x2, "d2903a4e"}]}}, 0x0}, 0x0)
r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_RDWR(r3, 0x707, &(0x7f00000004c0)={&(0x7f0000000480)=[{0x5a79, 0x200, 0x0, 0x0}, {0x5a79, 0x200, 0x0, 0x0}], 0x2})
ioctl$TCSETSW2(0xffffffffffffffff, 0x80047437, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

4.163029482s ago: executing program 1 (id=1677):
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4)
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x442a, &(0x7f0000004480)="$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")
syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x46b1, 0x39de)
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYRES16=0x0], 0x1, 0x1a1, &(0x7f0000000440)="$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")
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$dir(0xffffffffffffff9c, 0x0, 0x8880, 0x85)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000140)=0x12)
write$FUSE_STATFS(r2, &(0x7f0000003c40)={0x60, 0x0, 0x0, {{0x1, 0x6, 0x4, 0x4, 0x100000000, 0xb, 0x7, 0x4}}}, 0x60)

4.060323166s ago: executing program 0 (id=1678):
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x109})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000409000/0x8000)=nil, 0x8000, 0x1000009, 0x80012, r1, 0x80000000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket(0x2, 0x80805, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet_sctp(r2, 0x0, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/sockstat\x00')
pread64(r3, &(0x7f0000000500)=""/31, 0x1f, 0x40000000009)
openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200), 0x13f, 0x5}}, 0x20)
writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1)
listen(0xffffffffffffffff, 0x0)
sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r4, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x60, 0x0, 0x4, 0x70bd28, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x80}}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x90)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4)
bind$inet(r5, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0x67d41000)

3.722753205s ago: executing program 3 (id=1679):
r0 = socket$netlink(0x10, 0x3, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x40012122, 0x0)
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030332c726573765f6c6576656c3d30303030303030303030303030303030303030362c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c636f686572656e63793d66756c6c2c6e6f61636c2c004c98065b85e5b137d63b2211c62c402045083da9bddc3b0d88d44ecd24ba5288d428197284f332858b83349af2c7646f1e07e91120d7f23ce20389bbc031d81d654f1ca08f61c92d90e6ea478843c1ad942c7c257f9ff5348dd038e947775991ad90f8861dada21d5fa2de7042b5e2cbbcd1ada2b568e375812eb0bc448e68eda4c70cf1d5adf566142ed45924fe72a1eb1a914faf754b9d94bf0fdc1f98c708bd89940b5ef96e328240c39559b35bc83c15c15104f3b3fe1945f0278c34e2399dadcd9776ac659afcbb239569140ab408ad87f15b353941"], 0x1, 0x442a, &(0x7f0000004480)="$eJzs3c9vVNUeAPBzb/seLQ94LY8FLzFxEkk0apqWlVoSSymUFioGhRg3w7QdoDrtkHZqXLCoOxJXJi6MC6KJu65IF27xT3DjEtckunBjQkKsmZk7be/tTDrWTivk80nonXt+z3znnjl3cTlxonJ7bik3t5QrLOTKMzeXTuc+KZeW54sh3icH3T/t6UScxP7gXDl34b3rp0P4Yfanx+vr6+uhqjs0NbTl9e+/3Z3ZemyIM3Wq7TZvba98GEI4sW1cVV0hhA++DyEKIZxN0kaTY28I4Vio512/+/mN3B6N5sGj4pn806l7a8OnJlfvr7V+71EIX5f+//qt+V9e6hr++dU96h4AAAAAAAAAAAAAAAAAgGfc+NUr194dHAoPo9C9Gm1/Xnc8ObZ6PnZ9z7zY1nifJKX/7vsGAAAAAAAAAAAAAAAAAACAf5LN5/9z0fEmz/+PJceRFvXX3+78GOmciXeujJ0fHEr2f4+25b+RJP16tiv0N9n3Pbv/+9lM/eb7v2/vZ7ca42v02xeieCB1HscDAyF8m2z8fjI6HJfKS5XXbpaXF2b3bBjPrHT867v3p6KTbOjfbvxHM+13fv///237NlXPb+zdV+y5lo5/V8ty330WtRX/c5l6+xF/di8d/+5aWu/WAiP1CaAa/y+6d47/WKb9TsX/WAghF1XHmkvNANU1TDW91XqFtHT8/1VLS02dyQfZ6vp/kon/+Uz7BzX/r2R/iGgqHf9/19J6UiU2r//+eOfr/0Km/YOIf3X8K37/25KO/6F6YneqSO2TbHf+H8+036n4X4uTcR6LUt+A1aie3ur/qyMtHf+ebfmb939xW+u/i5n6+3X/1+i3cf/XmP5fier3fzSXjn9vy3LtXv8TmXqdnv9Haus/disd/8O1tPTaua/2t934T2ba71T8a6uSnkb8N+eTPw7V07+x/mtLOv7/qSfGW0us1P7W1n/Rzuv/S5n2D2L9Vx3/StzZXp8X6fgfaVmuGv8f2/j9v5yp1/n4hzBorb9r6fgfbVmudv337Bz/qUy9Tsf/5U42DgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAMGE2OfSGKB1LncTwwEMK55PxkOBxNF2bz06XyzMdLIYwl6blwPLpVKk8XSvm5hfJsMV8olcozIZxP8k+EnmipVK7k5wt3Lmy01RvdLhYWK9PFQiWEMJ6kvxCONtqanqvMF+6EEC5u5P03Li/euV1YyM/OLb41ODg4GCY2xtAfFT+tFBcq9d7ruSFMbtTti7YMrpZ9aWMsR6KPysuLC4VSLf3yljql8kyhtKXOVJL3ZeiPKovLCzOFSjFfKt9q9HeQRpLj2MTV969eHtqWfyOqH0f3d1gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/EUPh9/8KoTQXT+LQwi5KHkRJf9SHjwqnsk/nbq3NnxqcvX+2uNmZQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiTHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzSP0oDQRQH4DdjoaXHsFp2O9sVRbRwRfAEegwPo0fxEt7BIkXaFCGQzELYP7BNUn1f82B+zLwH8wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACWe3zr3l/rJiLF1fYy4vfz7/84fy71+276/sUZZuR0nl66+4e6Kf+eRvltOVq1eZ9u1l8fMVF7P4M9Ge7TwbjP0Ny+zc3X972OlKuIaEt+k3KuqmVvAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOzYgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCwAAAAAI87eOom8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4FcAAAD//0OnJ0Q=")
syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x46b1, 0x39de)
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYRES16=0x0], 0x1, 0x1a1, &(0x7f0000000440)="$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")
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$dir(0xffffffffffffff9c, 0x0, 0x8880, 0x85)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000140)=0x12)
write$FUSE_STATFS(r2, &(0x7f0000003c40)={0x60, 0x0, 0x0, {{0x1, 0x6, 0x4, 0x4, 0x100000000, 0xb, 0x7, 0x4}}}, 0x60)

3.689743446s ago: executing program 1 (id=1680):
r0 = socket$netlink(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c00000012001fff2bbd70008000000000bb0000", @ANYRES32=0x0, @ANYBLOB="00000200003f0000240012800b00010067726574617000001400028006000e000100000008000700ffffffff08000a", @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x40005}, 0x40000)

3.066326204s ago: executing program 4 (id=1681):
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009e", 0x88}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb", 0x61}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bc", 0x4e}, {0x0}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c71", 0x20}, {&(0x7f00000000c0)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

2.8396653s ago: executing program 4 (id=1682):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x28040, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40040c0}, 0x800)
ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prctl$PR_SET_IO_FLUSHER(0x43, 0x1)
sched_setattr(0x0, &(0x7f0000000200)={0x38, 0xb56e2e3f2d9728b3, 0x8, 0x8001, 0x0, 0x9, 0x100000003, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000f80)=@mangle={'mangle\x00', 0x2, 0x6, 0x5c0, 0x420, 0x0, 0x330, 0x260, 0x190, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {0xff}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0xff000000, 0xffffffff, 0xff000000, 0xffffff00], [], 0x0, 0x886}}, @common=@inet=@dccp={{0x30}, {[0x4e21, 0x4e24], [0x4e23, 0x4e24], 0xd, 0x0, 0x4, 0x7}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_macvtap\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x5}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'sit0\x00', {0xff}}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@empty, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x50, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x4}, 0x1c)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x8100, 0x0)
ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f00000001c0)=0x4)
socket$inet_mptcp(0x2, 0x1, 0x106)
r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd0000000000000109022400018000000009040000010300000009210500000122050009058103"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x2, "d2903a4e"}]}}, 0x0}, 0x0)
r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_RDWR(r3, 0x707, &(0x7f00000004c0)={&(0x7f0000000480)=[{0x5a79, 0x200, 0x0, 0x0}, {0x5a79, 0x200, 0x0, 0x0}], 0x2})
ioctl$TCSETSW2(0xffffffffffffffff, 0x80047437, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

2.144215059s ago: executing program 3 (id=1683):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
sendto(0xffffffffffffffff, 0x0, 0x0, 0x4000000, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = shmget$private(0x0, 0x8000, 0x10, &(0x7f0000ff5000/0x8000)=nil)
r1 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000080)=0xc)
shmctl$IPC_SET(r0, 0x1, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
syslog(0x2, &(0x7f0000000080), 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0)

1.827284499s ago: executing program 3 (id=1684):
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009e", 0x88}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe08", 0x5b}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bc", 0x4e}, {0x0}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c", 0x1f}, {&(0x7f00000000c0)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

1.652405643s ago: executing program 3 (id=1685):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r3)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x60}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$nl_route_sched(r2, 0x0, 0x0)
getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r5, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmmsg$inet(r1, &(0x7f0000003a40)=[{{0x0, 0x0, &(0x7f0000001580), 0x0, &(0x7f0000001600)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=r5, @ANYBLOB="0a010100e00000f5abec5df8c0378300000000000000e400070000009404010001940400000000000000009b78000000000000000000dd00070000000703eb862f0000000001097b4c84dc24d0470003ae02059cc7b2020359010ff59e38c1775f7ed8fa809fdaf200060c36cf82440c62e3ac1414bb002ec000890f1de0000001e00000027f000001070f2bac1e0001e0000002ac1414aa070b370a010100ac1e01010014000000000000000000000001000000d048f1d75a862271"], 0xd0}}, {{&(0x7f0000001700)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000003840)=[{&(0x7f0000001740)="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", 0x1000}, {0x0}, {&(0x7f0000002800)="c99f27f78e98eccaedcf5893aed45ebc6a0d3a78e7c2a383a136f3e053053f37fb88aef3cc185facb56469", 0x2b}, {&(0x7f0000002840)="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", 0xe10}], 0x4, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/400], 0x190}}], 0x2, 0x44000)
r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r7 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000000)='sched\x00')
r9 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4)
setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x33, &(0x7f0000000580)={0x1, &(0x7f0000000680)=[{0x6, 0x6, 0x0, 0x2}]}, 0x10)
bind$inet6(r9, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xfffffffc}, 0x1c)
ioctl$SNDCTL_SEQ_THRESHOLD(r7, 0x4004510d, &(0x7f0000000040)=0x9)
bind$nfc_llcp(r6, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x9, "c46e9fd1a84b7fefa0bf2cca6beb9363a680b652a86bcf56a1b9f4e6b54cc6beca5462202c484c10ca5386103a5ccbe47b7b9aa6d8d701a3ba6a6c0ce8b978", 0x8000000000000005}, 0x60)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000600"], 0x48)
r10 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)
syz_clone3(&(0x7f0000004b80)={0x1800, &(0x7f0000000180), &(0x7f0000000440)=<r11=>0x0, &(0x7f0000000500), {0x1}, &(0x7f0000003ac0)=""/4096, 0x1000, &(0x7f0000004ac0)=""/103, &(0x7f0000004b40)=[0x0, 0x0, 0x0, 0xffffffffffffffff], 0x4, {r8}}, 0x58)
syz_open_procfs(r11, &(0x7f0000004c00)='task\x00')
ioctl$FE_SET_PROPERTY(r10, 0x40106f52, &(0x7f00000000c0)={0x36, &(0x7f0000000480)=[{0x24, '\x00', @data=0x8001, 0x7a7ce1c2}]})
close_range(r0, 0xffffffffffffffff, 0x0)

1.515877708s ago: executing program 3 (id=1686):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socket$key(0xf, 0x3, 0x2)
socket(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
keyctl$KEYCTL_MOVE(0x4, 0x0, 0x0, 0x0, 0x0)
keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000380), &(0x7f00000003c0)={'enc=', 'pkcs1', ' hash=', {'hmac(sha256-neon)\x00'}}, &(0x7f0000000440), 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000001d80)={0x0, @in6={{0xa, 0x4e23, 0x20006, @empty, 0x6}}, 0x7f, 0x2, 0x0, 0x5, 0x392, 0x94}, 0x9c)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0x10)
socket$unix(0x1, 0x1, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

1.297361874s ago: executing program 0 (id=1687):
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4a", 0x49}, {&(0x7f0000000780)}, {&(0x7f0000000600)="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", 0x10d}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6c", 0x3f}, {&(0x7f00000000c0)}], 0x5}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0}}], 0x2, 0x20000044)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45", 0xc8}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

279.059012ms ago: executing program 0 (id=1688):
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf74", 0x92}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d", 0x54}, {&(0x7f0000000600)="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", 0x111}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6c", 0x3f}, {&(0x7f00000000c0)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0}}], 0x2, 0x20000044)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0), 0x0)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

278.540272ms ago: executing program 3 (id=1689):
r0 = socket$netlink(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet(0xa, 0x1, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c00000012001fff2bbd70008000000000bb0000", @ANYRES32=0x0, @ANYBLOB="00000200003f0000240012800b00010067726574617000001400028006000e000100000008000700ffffffff08000a", @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x40005}, 0x40000)

92.529277ms ago: executing program 0 (id=1690):
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)

91.560257ms ago: executing program 1 (id=1691):
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c8", 0x44}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb", 0x61}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bc", 0x4e}, {0x0}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c71", 0x20}, {&(0x7f00000000c0)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

253.22µs ago: executing program 0 (id=1692):
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009e", 0x88}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb", 0x61}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bc", 0x4e}, {0x0}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c71", 0x20}, {&(0x7f00000000c0)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

0s ago: executing program 0 (id=1693):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
syz_create_resource$binfmt(0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r3, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x2, 0x0, 0x3}}, 0x10)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@fallback=r1, 0xffffffffffffffff, 0x31, 0x30}, 0x20)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x4001, 0x3, 0x248, 0xd8, 0x0, 0x148, 0xd8, 0x148, 0x1b0, 0x240, 0x240, 0x1b0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0xffffff00, 0xff000000, 'gre0\x00', 'bridge_slave_0\x00', {0xff}, {}, 0x88, 0x3, 0x10}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x14, 0x9, 0xffffffff, 0x3, '\x00', 'syz0\x00', {0x5e}}}}, {{@ip={@private=0xa010100, @private=0xa010101, 0x100fffffe, 0xff000000, 'caif0\x00', 'syz_tun\x00', {}, {0xff}, 0x40, 0x3, 0x11}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x3, 0xc8e7, 0x2a, 0x400, '\x00', 'syz1\x00', {0x10000000000}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8)
socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0)
read$FUSE(r4, &(0x7f0000001580)={0x2020}, 0x2020)

kernel console output (not intermixed with test programs):

d crc value
[   74.482194][ T4233] Bluetooth: hci3: command 0x0419 tx timeout
[   74.488353][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.500228][ T4233] Bluetooth: hci0: command 0x0419 tx timeout
[   74.509807][ T4233] Bluetooth: hci2: command 0x0419 tx timeout
[   74.516012][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.528410][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.539941][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.551662][ T4233] Bluetooth: hci4: command 0x0419 tx timeout
[   74.560850][ T4274] F2FS-fs (loop0): Found nat_bits in checkpoint
[   74.594777][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.621354][ T4274] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   74.622341][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   74.678269][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   74.703882][ T4241] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.749085][ T4241] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.761343][ T4187] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.776674][ T4187] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.787280][ T4187] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.800271][ T4187] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.851076][ T4284] batman_adv: batadv0: Adding interface: dummy0
[   74.870274][ T4284] batman_adv: batadv0: The MTU of interface dummy0 is too small (0) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.896109][ T4284] batman_adv: batadv0: Interface activated: dummy0
[   74.903612][ T4284] batadv0: mtu less than device minimum
[   74.912090][ T4284] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   74.924940][ T4284] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   74.937665][ T4284] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   74.950256][ T4284] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   74.963018][ T4284] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   74.975698][ T4284] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   74.988647][ T4284] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   75.001358][ T4284] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   75.014066][ T4284] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   75.056148][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   75.134571][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.168042][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.188993][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   75.743611][ T4292] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.920046][ T4292] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.108835][   T21] cfg80211: failed to load regulatory.db
[   76.227988][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   76.278547][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.288616][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.296330][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   76.442062][ T4298] loop2: detected capacity change from 0 to 256
[   76.851534][ T4298] exfat: Unknown parameter 'keep_last_dots'
[   77.984388][ T4311] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   80.178757][ T4172] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   80.597613][ T4172] usb 5-1: Using ep0 maxpacket: 8
[   80.718471][ T4172] usb 5-1: config 0 has no interfaces?
[   81.174918][ T4330] trusted_key: encrypted_key: master key parameter 'defaul' is invalid
[   81.256424][ T4172] usb 5-1: string descriptor 0 read error: -71
[   81.268380][ T4172] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[   81.532857][ T4172] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   81.545485][ T4172] usb 5-1: config 0 descriptor??
[   81.571057][ T4172] usb 5-1: can't set config #0, error -71
[   83.587206][ T4345] loop3: detected capacity change from 0 to 512
[   84.284397][ T4172] usb 5-1: USB disconnect, device number 2
[   84.765189][ T4345] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   84.818878][ T4343] =======================================================
[   84.818878][ T4343] WARNING: The mand mount option has been deprecated and
[   84.818878][ T4343]          and is ignored by this kernel. Remove the mand
[   84.818878][ T4343]          option from the mount to silence this warning.
[   84.818878][ T4343] =======================================================
[   84.823003][ T4350] loop4: detected capacity change from 0 to 256
[   84.940381][ T4343] EXT4-fs error (device loop3): ext4_quota_enable:6440: comm syz.3.17: Bad quota inum: 2, type: 1
[   84.953634][ T4343] EXT4-fs warning (device loop3): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix.
[   85.126224][   T26] audit: type=1800 audit(1777528016.715:2): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.19" name="file1" dev="loop4" ino=1048590 res=0 errno=0
[   85.260485][ T4260] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   85.707833][ T4260] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   85.753003][ T4260] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[   85.835950][ T4352] loop2: detected capacity change from 0 to 32768
[   85.888071][ T4260] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   85.903325][ T4260] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   85.931103][ T4260] usb 2-1: SerialNumber: syz
[   85.934373][ T4352] ialloc: diAlloc returned -5!
[   85.999239][ T4352] ialloc: diAlloc returned -5!
[   86.247511][ T4260] usb 2-1: 0:2 : does not exist
[   86.257614][ T4260] usb 2-1: unit 111 not found!
[   86.267818][ T4260] usb 2-1: unit 117 not found!
[   86.278629][ T4260] usb 2-1: unit 112 not found!
[   86.392805][ T4260] usb 2-1: USB disconnect, device number 2
[   86.568847][ T4364] tmpfs: Unknown parameter 'per'
[   87.697936][ T4383] netlink: 8 bytes leftover after parsing attributes in process `syz.4.32'.
[   87.859066][ T4385] loop4: detected capacity change from 0 to 128
[   88.127602][ T4390] process 'syz.1.30' launched './file0' with NULL argv: empty string added
[   91.254281][ T4423] comedi comedi0: Minor 2 could not be opened
[   92.068793][ T4426] netlink: 4 bytes leftover after parsing attributes in process `syz.0.42'.
[   92.919516][ T4435] loop4: detected capacity change from 0 to 64
[   93.329601][ T4435] attempt to access beyond end of device
[   93.329601][ T4435] loop4: rw=0, want=268435470, limit=64
[   93.347953][ T4435] Buffer I/O error on dev loop4, logical block 134217734, async page read
[   93.798003][ T4445] loop1: detected capacity change from 0 to 512
[   93.811590][ T4447] netlink: 16 bytes leftover after parsing attributes in process `syz.3.49'.
[   93.835609][ T4435] Trying to free block not in datazone
[   94.043906][ T4445] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option
[   94.070841][ T4445] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[   94.277348][ T4445] EXT4-fs (loop1): 1 truncate cleaned up
[   94.283130][ T4445] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000007,bsddf,nomblk_io_submit,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none.
[   94.310848][ T4445] EXT4-fs warning (device loop1): verify_group_input:147: Cannot add at group 1953724787 (only 1 groups)
[   95.792899][ T4473] loop1: detected capacity change from 0 to 4096
[   95.953700][ T4475] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.962215][ T4475] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.027400][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #29a!!!
[   96.047393][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #39a!!!
[   96.057392][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #39a!!!
[   96.067399][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #39a!!!
[   96.757440][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[   96.767417][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[   96.777416][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[   96.787406][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[   96.797409][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[   96.807414][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[   96.913548][ T4483] Zero length message leads to an empty skb
[   98.136113][   T26] audit: type=1800 audit(1777528029.725:3): pid=4473 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.54" name="file1" dev="loop1" ino=33 res=0 errno=0
[   98.623320][   T21] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   99.137566][   T21] usb 5-1: Using ep0 maxpacket: 16
[   99.437706][   T21] usb 5-1: config 0 has an invalid interface number: 8 but max is 0
[   99.449420][   T21] usb 5-1: config 0 has an invalid descriptor of length 143, skipping remainder of the config
[   99.467373][    C0] sched: RT throttling activated
[   99.650437][   T21] usb 5-1: config 0 has no interface number 0
[   99.656612][   T21] usb 5-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  101.745371][ T4542] netlink: 12 bytes leftover after parsing attributes in process `syz.3.74'.
[  101.777540][   T21] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  101.828800][   T21] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  102.116321][   T21] usb 5-1: config 0 descriptor??
[  102.127314][ T4541] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  102.214270][   T21] usb 5-1: can't set config #0, error -71
[  102.247203][   T21] usb 5-1: USB disconnect, device number 3
[  102.402180][ T4564] overlayfs: overlapping lowerdir path
[  102.944648][ T4569] loop3: detected capacity change from 0 to 512
[  103.014554][ T4569] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[  103.044727][ T4569] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[  103.061492][ T4569] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[  103.286694][ T4569] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  103.313674][ T4569] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e01c, mo2=0000]
[  104.248916][ T4569] EXT4-fs (loop3): orphan cleanup on readonly fs
[  104.360140][ T4569] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.79: bg 0: block 34: padding at end of block bitmap is not set
[  104.410662][ T4569] Quota error (device loop3): write_blk: dquota write failed
[  104.420156][ T4569] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  104.430456][ T4569] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.79: Failed to acquire dquot type 1
[  104.583312][ T4569] EXT4-fs (loop3): 1 truncate cleaned up
[  104.609707][ T4569] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,,errors=continue. Quota mode: writeback.
[  104.882514][ T4607] netlink: 12 bytes leftover after parsing attributes in process `syz.0.89'.
[  104.923926][ T4605] loop1: detected capacity change from 0 to 512
[  105.172904][ T4605] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[  105.232470][ T4605] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[  105.248051][ T4617] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  105.265991][ T4569] syz.3.79 (4569) used greatest stack depth: 20944 bytes left
[  105.285997][ T4605] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[  105.341863][ T4605] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  105.367994][ T4605] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e01c, mo2=0000]
[  105.421337][ T4605] EXT4-fs (loop1): orphan cleanup on readonly fs
[  105.568578][ T4625] overlayfs: overlapping lowerdir path
[  106.371211][ T4605] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.88: bg 0: block 34: padding at end of block bitmap is not set
[  106.455199][ T4605] Quota error (device loop1): write_blk: dquota write failed
[  106.487877][ T4605] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota
[  106.527612][ T4605] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.88: Failed to acquire dquot type 1
[  106.568738][ T4605] EXT4-fs (loop1): 1 truncate cleaned up
[  106.610634][ T4605] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,,errors=continue. Quota mode: writeback.
[  112.727340][ T4679] loop3: detected capacity change from 0 to 512
[  112.797885][ T4679] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[  112.813503][ T4679] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[  112.823427][ T4679] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[  112.858072][ T4679] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  112.873479][ T4679] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e01c, mo2=0000]
[  112.900332][ T4679] EXT4-fs (loop3): orphan cleanup on readonly fs
[  112.975111][ T4679] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.110: bg 0: block 34: padding at end of block bitmap is not set
[  112.993680][ T4679] Quota error (device loop3): write_blk: dquota write failed
[  113.003512][ T4679] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota
[  113.013536][ T4679] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.110: Failed to acquire dquot type 1
[  113.093639][ T4679] EXT4-fs (loop3): 1 truncate cleaned up
[  113.113564][ T4679] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,,errors=continue. Quota mode: writeback.
[  118.667514][ T4737] loop3: detected capacity change from 0 to 512
[  118.694082][ T4737] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[  118.708729][ T4737] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[  118.718725][ T4737] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[  118.778784][ T4737] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  118.789038][ T4737] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e01c, mo2=0000]
[  118.818846][ T4737] EXT4-fs (loop3): orphan cleanup on readonly fs
[  118.847170][ T4737] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.128: bg 0: block 34: padding at end of block bitmap is not set
[  118.868895][ T4737] Quota error (device loop3): write_blk: dquota write failed
[  118.878866][ T4737] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota
[  118.898768][ T4737] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.128: Failed to acquire dquot type 1
[  118.978900][ T4737] EXT4-fs (loop3): 1 truncate cleaned up
[  118.999009][ T4737] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,,errors=continue. Quota mode: writeback.
[  120.491094][ T4763] netlink: 12 bytes leftover after parsing attributes in process `syz.1.136'.
[  121.816003][ T4781] loop3: detected capacity change from 0 to 512
[  121.907408][ T4781] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[  121.917440][ T4781] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[  121.927850][ T4781] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[  121.968565][ T4781] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  121.976649][ T4781] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e01c, mo2=0000]
[  121.991622][ T4781] EXT4-fs (loop3): orphan cleanup on readonly fs
[  122.006342][ T4781] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.141: bg 0: block 34: padding at end of block bitmap is not set
[  122.025729][ T4781] Quota error (device loop3): write_blk: dquota write failed
[  122.033477][ T4781] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  122.043605][ T4781] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.141: Failed to acquire dquot type 1
[  122.062334][ T4781] EXT4-fs (loop3): 1 truncate cleaned up
[  122.076281][ T4781] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,,errors=continue. Quota mode: writeback.
[  124.366366][ T4797] loop4: detected capacity change from 0 to 512
[  125.869603][ T4797] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[  125.880000][ T4797] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[  125.889858][ T4797] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[  125.957094][ T4797] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  125.965343][ T4797] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e01c, mo2=0000]
[  125.979070][ T4797] EXT4-fs (loop4): orphan cleanup on readonly fs
[  125.995905][ T4797] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.146: bg 0: block 34: padding at end of block bitmap is not set
[  126.015511][ T4797] Quota error (device loop4): write_blk: dquota write failed
[  126.023360][ T4797] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  126.034585][ T4797] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.146: Failed to acquire dquot type 1
[  126.061965][ T4797] EXT4-fs (loop4): 1 truncate cleaned up
[  126.176074][ T4797] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,,errors=continue. Quota mode: writeback.
[  126.798892][ T4805] netlink: 12 bytes leftover after parsing attributes in process `syz.3.148'.
[  127.108491][ T4818] loop2: detected capacity change from 0 to 16
[  127.164977][ T4818] erofs: Unknown parameter 'ãé'
[  128.127832][ T4831] netlink: 4 bytes leftover after parsing attributes in process `syz.4.157'.
[  128.148106][ T4831] netlink: 12 bytes leftover after parsing attributes in process `syz.4.157'.
[  128.540671][ T4833] loop3: detected capacity change from 0 to 512
[  129.760730][ T4833] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[  129.770849][ T4833] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[  129.780741][ T4833] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[  129.856571][ T4833] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  129.864929][ T4833] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e01c, mo2=0000]
[  129.878152][ T4833] EXT4-fs (loop3): orphan cleanup on readonly fs
[  129.901156][ T4833] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.155: bg 0: block 34: padding at end of block bitmap is not set
[  129.920451][ T4833] Quota error (device loop3): write_blk: dquota write failed
[  129.928422][ T4833] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  129.938568][ T4833] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.155: Failed to acquire dquot type 1
[  129.956352][ T4833] EXT4-fs (loop3): 1 truncate cleaned up
[  129.978834][ T4833] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,,errors=continue. Quota mode: writeback.
[  130.210880][ T4833] syz.3.155 (4833) used greatest stack depth: 20880 bytes left
[  130.782487][ T4848] fuse: Unknown parameter 'fd0x0000000000000005'
[  130.935334][ T4854] fuse: Bad value for 'fd'
[  131.035036][ T4857] fuse: Bad value for 'rootmode'
[  132.613639][ T4880] netlink: 4 bytes leftover after parsing attributes in process `syz.2.169'.
[  132.631431][ T4880] netlink: 16 bytes leftover after parsing attributes in process `syz.2.169'.
[  133.452497][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  133.459073][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  133.701457][ T4889] fuse: Unknown parameter 'fd0x0000000000000006'
[  133.884244][ T4897] fuse: Bad value for 'fd'
[  133.908222][ T4899] fuse: Unknown parameter 'use00000000000000000000'
[  134.041546][ T4902] device syzkaller0 entered promiscuous mode
[  135.861757][ T4918] kernel profiling enabled (shift: 15)
[  136.230691][ T4928] netlink: 4 bytes leftover after parsing attributes in process `syz.0.181'.
[  136.270033][ T4928] netlink: 16 bytes leftover after parsing attributes in process `syz.0.181'.
[  138.059872][ T4929] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžq
Ó†ØÈÌONEO'
[  138.238523][ T4935] fuse: Bad value for 'fd'
[  138.258945][ T4938] fuse: Unknown parameter 'use00000000000000000000'
[  140.418067][ T4973] netlink: 4 bytes leftover after parsing attributes in process `syz.1.197'.
[  140.438830][ T4973] netlink: 16 bytes leftover after parsing attributes in process `syz.1.197'.
[  140.951121][ T4974] loop3: detected capacity change from 0 to 512
[  140.983688][ T4979] fuse: Bad value for 'fd'
[  141.033532][ T4981] fuse: Unknown parameter 'use00000000000000000000'
[  141.081104][ T4974] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[  141.091105][ T4974] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[  141.101743][ T4974] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[  141.181131][ T4974] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  141.191089][ T4974] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e01c, mo2=0000]
[  141.401094][ T4974] EXT4-fs (loop3): orphan cleanup on readonly fs
[  142.283800][ T4974] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.196: bg 0: block 34: padding at end of block bitmap is not set
[  142.311206][ T4974] Quota error (device loop3): write_blk: dquota write failed
[  142.321194][ T4974] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  142.341093][ T4974] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.196: Failed to acquire dquot type 1
[  142.399333][ T4974] EXT4-fs (loop3): 1 truncate cleaned up
[  142.421175][ T4974] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,,errors=continue. Quota mode: writeback.
[  143.110936][ T5020] fuse: Bad value for 'fd'
[  143.192727][ T5022] netlink: 4 bytes leftover after parsing attributes in process `syz.3.211'.
[  144.335575][ T5028] fuse: Unknown parameter 'user_i00000000000000000000'
[  146.000313][ T5047] loop3: detected capacity change from 0 to 512
[  146.156532][ T5047] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[  146.171962][ T5047] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[  146.181955][ T5047] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[  146.242003][ T5047] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  146.251957][ T5047] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e01c, mo2=0000]
[  146.278312][ T5047] EXT4-fs (loop3): orphan cleanup on readonly fs
[  146.328824][ T5047] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.218: bg 0: block 34: padding at end of block bitmap is not set
[  146.350375][ T5047] Quota error (device loop3): write_blk: dquota write failed
[  146.358472][ T5047] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  146.369160][ T5047] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.218: Failed to acquire dquot type 1
[  146.383460][ T5047] EXT4-fs (loop3): 1 truncate cleaned up
[  146.390428][ T5047] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,,errors=continue. Quota mode: writeback.
[  146.689885][ T5055] loop4: detected capacity change from 0 to 32768
[  146.919224][ T5055] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.221 (5055)
[  146.965164][ T5070] fuse: Invalid rootmode
[  147.032131][ T5055] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  147.097630][ T5055] BTRFS info (device loop4): enabling auto defrag
[  147.108574][ T5055] BTRFS info (device loop4): use no compression
[  147.128459][ T5055] BTRFS info (device loop4): max_inline at 4096
[  147.157982][ T5072] fuse: Unknown parameter 'user_i00000000000000000000'
[  147.175694][ T5055] BTRFS info (device loop4): using free space tree
[  147.226234][ T5055] BTRFS info (device loop4): has skinny extents
[  147.630679][ T5055] BTRFS info (device loop4): enabling ssd optimizations
[  148.527953][ T5101] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžq
Ó†ØÈÌONEO'
[  148.827061][ T5115] fuse: Unknown parameter 'fd0x0000000000000006'
[  149.539523][ T5119] loop3: detected capacity change from 0 to 512
[  149.786299][ T5126] netlink: 4 bytes leftover after parsing attributes in process `syz.2.236'.
[  150.639943][ T5129] fuse: Unknown parameter 'user_i00000000000000000000'
[  150.997882][ T5119] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option
[  151.014066][ T5119] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  151.026799][ T5119] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8800c01d, mo2=0102]
[  151.044710][ T5119] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (80)
[  151.057040][ T5119] EXT4-fs (loop3): Skipping orphan cleanup due to unknown ROCOMPAT features
[  151.072366][ T5119] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,abort,nomblk_io_submit,noblock_validity,nolazytime,noblock_validity,resgid=0x0000000000000000,nobarrier,jqfmt=vfsold,,errors=continue. Quota mode: none.
[  152.935956][ T5151] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžq
Ó†ØÈÌONEO'
[  154.624709][ T5169] fuse: Unknown parameter 'fd0x0000000000000006'
[  154.862884][ T5174] loop1: detected capacity change from 0 to 512
[  157.753121][ T5174] EXT4-fs (loop1): 1 truncate cleaned up
[  157.769730][ T5181] fuse: Unknown parameter 'user_id00000000000000000000'
[  157.777200][ T5174] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable,,errors=continue. Quota mode: none.
[  157.844453][ T5184] fuse: Invalid rootmode
[  159.622382][ T5204] loop4: detected capacity change from 0 to 512
[  159.730152][ T5199] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžq
Ó†ØÈÌONEO'
[  159.916105][ T5204] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option
[  159.965361][ T5204] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  159.973922][ T5204] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8800c01d, mo2=0102]
[  159.983332][ T5204] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80)
[  159.993444][ T5204] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features
[  160.002494][ T5204] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,abort,nomblk_io_submit,noblock_validity,nolazytime,noblock_validity,resgid=0x0000000000000000,nobarrier,jqfmt=vfsold,,errors=continue. Quota mode: none.
[  161.019989][ T5228] fuse: Unknown parameter 'user_id00000000000000000000'
[  161.031367][ T5224] fuse: Invalid rootmode
[  161.922879][ T5231] loop3: detected capacity change from 0 to 512
[  163.585069][ T5231] EXT4-fs (loop3): 1 truncate cleaned up
[  163.591083][ T5231] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable,,errors=continue. Quota mode: none.
[  163.935635][ T5239] netlink: 12 bytes leftover after parsing attributes in process `syz.2.267'.
[  164.507545][ T5243] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžq
Ó†ØÈÌONEO'
[  164.881554][ T5252] loop3: detected capacity change from 0 to 512
[  164.926418][ T5252] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option
[  164.978631][ T5252] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  165.025014][ T5252] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8800c01d, mo2=0102]
[  165.074397][ T5252] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (80)
[  165.116731][ T5252] EXT4-fs (loop3): Skipping orphan cleanup due to unknown ROCOMPAT features
[  165.158651][ T5252] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,abort,nomblk_io_submit,noblock_validity,nolazytime,noblock_validity,resgid=0x0000000000000000,nobarrier,jqfmt=vfsold,,errors=continue. Quota mode: none.
[  166.808269][ T5279] fuse: Bad value for 'rootmode'
[  167.505687][ T5290] fuse: Unknown parameter 'user_id00000000000000000000'
[  168.256305][ T5301] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžq
Ó†ØÈÌONEO'
[  168.395655][ T5309] loop1: detected capacity change from 0 to 512
[  168.727911][ T5309] EXT4-fs (loop1): 1 truncate cleaned up
[  168.733682][ T5309] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable,,errors=continue. Quota mode: none.
[  170.521822][ T5327] loop1: detected capacity change from 0 to 32768
[  170.565476][ T5337] fuse: Bad value for 'rootmode'
[  170.613891][ T5327] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.290 (5327)
[  170.752275][ T5327] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  170.807562][ T5327] BTRFS info (device loop1): enabling auto defrag
[  170.814061][ T5327] BTRFS info (device loop1): use no compression
[  170.827490][ T5327] BTRFS info (device loop1): max_inline at 4096
[  170.833821][ T5327] BTRFS info (device loop1): using free space tree
[  170.871066][ T5327] BTRFS info (device loop1): has skinny extents
[  171.890954][ T5327] BTRFS info (device loop1): enabling ssd optimizations
[  172.228072][ T5364] fuse: Bad value for 'fd'
[  173.012419][ T5388] netlink: 4 bytes leftover after parsing attributes in process `syz.1.296'.
[  173.029786][ T5388] netlink: 28 bytes leftover after parsing attributes in process `syz.1.296'.
[  174.841335][ T5402] fuse: Bad value for 'rootmode'
[  175.688127][ T5411] fuse: Bad value for 'fd'
[  175.842931][ T5416] netlink: 16 bytes leftover after parsing attributes in process `syz.3.311'.
[  175.995048][ T5422] netlink: 4 bytes leftover after parsing attributes in process `syz.4.312'.
[  176.012525][ T5422] netlink: 28 bytes leftover after parsing attributes in process `syz.4.312'.
[  177.041210][ T5434] fuse: Unknown parameter 'use00000000000000000000'
[  177.125854][ T5440] tipc: Started in network mode
[  177.132182][ T5440] tipc: Node identity 76179188c272, cluster identity 4711
[  177.140402][ T5440] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  177.151833][ T5440] device syzkaller0 entered promiscuous mode
[  177.194095][ T5440] tipc: Resetting bearer <eth:syzkaller0>
[  177.253517][ T5439] tipc: Resetting bearer <eth:syzkaller0>
[  177.273332][ T5442] fuse: Bad value for 'fd'
[  177.286871][ T5439] tipc: Disabling bearer <eth:syzkaller0>
[  178.568935][ T5458] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  178.707544][ T5463] netlink: 4 bytes leftover after parsing attributes in process `syz.4.325'.
[  178.725126][ T5463] netlink: 28 bytes leftover after parsing attributes in process `syz.4.325'.
[  179.577782][ T5465] loop3: detected capacity change from 0 to 512
[  179.592522][ T5468] fuse: Unknown parameter 'use00000000000000000000'
[  179.629227][ T5465] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option
[  179.639610][ T5471] fuse: Unknown parameter 'fd0x0000000000000003'
[  179.689587][ T5465] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  179.744152][ T5465] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8800c01d, mo2=0102]
[  179.771395][ T5476] fuse: Unknown parameter '0x0000000000000003'
[  179.812858][ T5465] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (80)
[  179.902789][ T5465] EXT4-fs (loop3): Skipping orphan cleanup due to unknown ROCOMPAT features
[  179.945937][ T5465] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,abort,nomblk_io_submit,noblock_validity,nolazytime,noblock_validity,resgid=0x0000000000000000,nobarrier,jqfmt=vfsold,,errors=continue. Quota mode: none.
[  182.498499][ T5514] fuse: Unknown parameter 'use00000000000000000000'
[  182.541929][ T5515] fuse: Unknown parameter 'fd0x0000000000000006'
[  182.651326][ T5517] fuse: Unknown parameter '0x0000000000000003'
[  182.883197][ T5521] loop3: detected capacity change from 0 to 512
[  182.958846][ T5521] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[  182.970662][ T5521] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[  182.981944][   T26] audit: type=1326 audit(1777528114.575:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5506 comm="syz.1.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b2dd8dd9 code=0x7fc00000
[  183.005492][ T5521] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[  183.067584][   T26] audit: type=1326 audit(1777528114.615:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5506 comm="syz.1.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd9b2dd8dd9 code=0x7fc00000
[  183.231809][   T26] audit: type=1326 audit(1777528114.615:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5506 comm="syz.1.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b2dd8dd9 code=0x7fc00000
[  183.255268][ T5521] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  183.266892][   T26] audit: type=1326 audit(1777528114.615:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5506 comm="syz.1.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b2dd8dd9 code=0x7fc00000
[  183.373589][   T26] audit: type=1326 audit(1777528114.615:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5506 comm="syz.1.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b2dd8dd9 code=0x7fc00000
[  183.612509][   T26] audit: type=1326 audit(1777528114.615:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5506 comm="syz.1.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b2dd8dd9 code=0x7fc00000
[  184.129001][ T5521] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e01c, mo2=0000]
[  184.161718][ T5521] EXT4-fs (loop3): orphan cleanup on readonly fs
[  184.290865][   T26] audit: type=1326 audit(1777528114.615:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5506 comm="syz.1.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b2dd8dd9 code=0x7fc00000
[  184.320017][ T5521] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.346: bg 0: block 34: padding at end of block bitmap is not set
[  184.339045][ T5521] Quota error (device loop3): write_blk: dquota write failed
[  184.347741][   T26] audit: type=1326 audit(1777528114.615:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5506 comm="syz.1.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b2dd8dd9 code=0x7fc00000
[  185.269373][ T5521] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota
[  185.283219][ T5521] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.346: Failed to acquire dquot type 1
[  185.422841][ T5521] EXT4-fs (loop3): 1 truncate cleaned up
[  185.449811][ T5521] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,,errors=continue. Quota mode: writeback.
[  185.494419][ T5544] netlink: 'syz.1.352': attribute type 1 has an invalid length.
[  185.596554][ T5548] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  185.606965][ T5548] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  185.614877][ T5548] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  185.630093][ T5548] device bridge_slave_0 left promiscuous mode
[  185.661597][ T5548] bridge0: port 1(bridge_slave_0) entered disabled state
[  185.681405][ T5548] device bridge_slave_1 left promiscuous mode
[  185.688088][ T5548] bridge0: port 2(bridge_slave_1) entered disabled state
[  185.701480][ T5548] bond0: (slave bond_slave_0): Releasing backup interface
[  185.770574][ T5552] fuse: Unknown parameter 'fd0x0000000000000006'
[  185.843225][ T5548] bond0: (slave bond_slave_1): Releasing backup interface
[  185.920358][ T5557] loop3: detected capacity change from 0 to 512
[  186.206907][ T5557] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[  186.225415][ T5560] fuse: Unknown parameter '0x0000000000000003'
[  186.236917][ T5557] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[  186.247966][ T5557] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[  186.450252][ T5557] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  186.458396][ T5557] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e01c, mo2=0000]
[  186.469120][ T5548] team0: Port device team_slave_0 removed
[  186.479457][ T5557] EXT4-fs (loop3): orphan cleanup on readonly fs
[  187.362200][ T5557] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.355: bg 0: block 34: padding at end of block bitmap is not set
[  187.387040][ T5557] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.355: Failed to acquire dquot type 1
[  187.404697][ T5548] team0: Port device team_slave_1 removed
[  187.439401][ T5548] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  187.477010][ T5557] EXT4-fs (loop3): 1 truncate cleaned up
[  187.496958][ T5557] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,,errors=continue. Quota mode: writeback.
[  187.520128][ T5548] batman_adv: batadv0: Removing interface: batadv_slave_0
[  187.552077][ T5548] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  187.566184][ T5548] batman_adv: batadv0: Removing interface: batadv_slave_1
[  188.970445][ T5589] fuse: Unknown parameter 'fd0x0000000000000003'
[  189.290654][ T5548] syz.4.353 (5548) used greatest stack depth: 20848 bytes left
[  190.659619][ T5616] loop4: detected capacity change from 0 to 512
[  190.720261][ T5616] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[  190.733843][ T5616] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[  190.743823][ T5616] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[  190.777999][ T5618] fuse: Unknown parameter '0x0000000000000003'
[  190.803889][ T5616] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  190.813837][ T5616] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e01c, mo2=0000]
[  191.963868][ T5616] EXT4-fs (loop4): orphan cleanup on readonly fs
[  191.969166][ T5158] Bluetooth: hci0: command 0x0406 tx timeout
[  191.982385][ T5158] Bluetooth: hci1: command 0x0406 tx timeout
[  191.991689][ T5616] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.373: bg 0: block 34: padding at end of block bitmap is not set
[  192.009664][   T21] Bluetooth: hci3: command 0x0406 tx timeout
[  192.020531][ T5624] fuse: Unknown parameter 'fd0x0000000000000006'
[  192.094118][   T21] Bluetooth: hci2: command 0x0406 tx timeout
[  192.145125][ T5616] __quota_error: 46 callbacks suppressed
[  192.145138][ T5616] Quota error (device loop4): write_blk: dquota write failed
[  192.163873][ T5616] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota
[  192.174052][ T5616] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.373: Failed to acquire dquot type 1
[  192.244007][ T5616] EXT4-fs (loop4): 1 truncate cleaned up
[  192.263922][ T5616] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,,errors=continue. Quota mode: writeback.
[  192.729772][ T5646] netdevsim netdevsim1: Firmware load for '..' refused, path contains '..' component
[  193.903471][ T5659] fuse: Unknown parameter '0x0000000000000003'
[  193.935190][ T5657] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  193.984713][ T5657] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  193.992872][ T5657] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  194.002923][ T5657] device bridge_slave_0 left promiscuous mode
[  194.011018][ T5657] bridge0: port 1(bridge_slave_0) entered disabled state
[  194.100037][ T5657] device bridge_slave_1 left promiscuous mode
[  194.257936][ T5657] bridge0: port 2(bridge_slave_1) entered disabled state
[  194.724095][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  194.730580][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  194.867235][ T5657] bond0: (slave bond_slave_0): Releasing backup interface
[  194.907281][ T5657] bond0: (slave bond_slave_1): Releasing backup interface
[  194.928745][ T5673] fuse: Unknown parameter 'fd0x0000000000000006'
[  196.008670][ T5657] team0: Port device team_slave_0 removed
[  196.111601][ T5657] team0: Port device team_slave_1 removed
[  196.128472][ T5657] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  196.153287][ T5657] batman_adv: batadv0: Removing interface: batadv_slave_0
[  196.176105][ T5657] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  196.212121][ T5657] batman_adv: batadv0: Removing interface: batadv_slave_1
[  196.458744][ T5682] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  196.535020][ T5682] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  196.575060][ T5682] device bridge_slave_0 left promiscuous mode
[  196.633957][ T5682] bridge0: port 1(bridge_slave_0) entered disabled state
[  196.826741][ T5682] device bridge_slave_1 left promiscuous mode
[  196.834748][ T5682] bridge0: port 2(bridge_slave_1) entered disabled state
[  196.853427][ T5682] bond0: (slave bond_slave_0): Releasing backup interface
[  197.969582][ T5682] bond0: (slave bond_slave_1): Releasing backup interface
[  198.388252][ T5699] loop2: detected capacity change from 0 to 256
[  198.439020][ T5699] exfat: Unknown parameter 'ÿÿÿÿÿÿÿ'
[  198.678428][ T5682] team0: Port device team_slave_0 removed
[  199.041952][ T5657] syz.3.386 (5657) used greatest stack depth: 20216 bytes left
[  199.093157][ T5701] fuse: Unknown parameter 'fd0x0000000000000003'
[  199.102661][ T5682] team0: Port device team_slave_1 removed
[  199.147639][ T5682] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  199.155310][ T5682] batman_adv: batadv0: Removing interface: batadv_slave_0
[  199.256832][ T5682] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  199.275581][ T5682] batman_adv: batadv0: Removing interface: batadv_slave_1
[  200.402573][ T5720] loop4: detected capacity change from 0 to 512
[  200.522653][ T5720] EXT4-fs (loop4): 1 truncate cleaned up
[  200.528658][ T5720] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable,,errors=continue. Quota mode: none.
[  201.363798][ T5735] loop2: detected capacity change from 0 to 512
[  202.274115][ T5735] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[  202.284522][ T5735] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[  202.304481][ T5735] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[  202.329822][ T5733] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  202.339535][ T5733] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  202.360338][ T5740] fuse: Unknown parameter 'fd0x0000000000000003'
[  202.379009][ T5735] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  202.387696][ T5735] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e01c, mo2=0000]
[  202.439393][ T5745] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  202.446969][ T5735] EXT4-fs (loop2): orphan cleanup on readonly fs
[  202.451575][ T5745] batman_adv: batadv0: Interface deactivated: dummy0
[  202.486194][ T5745] batman_adv: batadv0: Removing interface: dummy0
[  202.503211][ T5735] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.405: bg 0: block 34: padding at end of block bitmap is not set
[  202.533284][ T5735] Quota error (device loop2): write_blk: dquota write failed
[  202.542814][ T5745] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready
[  202.550375][ T5735] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota
[  202.563213][ T5735] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.405: Failed to acquire dquot type 1
[  202.567176][ T5745] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  202.588296][ T5745] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  202.599966][ T5745] device bridge_slave_0 left promiscuous mode
[  202.606778][ T5745] bridge0: port 1(bridge_slave_0) entered disabled state
[  202.628967][ T5735] EXT4-fs (loop2): 1 truncate cleaned up
[  202.653166][ T5735] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,,errors=continue. Quota mode: writeback.
[  202.721711][ T5745] device bridge_slave_1 left promiscuous mode
[  202.842315][ T5745] bridge0: port 2(bridge_slave_1) entered disabled state
[  202.942684][ T5745] bond0: (slave bond_slave_0): Releasing backup interface
[  203.015154][ T5745] bond0: (slave bond_slave_1): Releasing backup interface
[  203.167863][ T5745] team0: Port device team_slave_0 removed
[  203.205716][ T5745] team0: Port device team_slave_1 removed
[  203.217196][ T5745] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  203.225567][ T5745] batman_adv: batadv0: Removing interface: batadv_slave_0
[  203.321051][ T5745] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  203.328687][ T5745] batman_adv: batadv0: Removing interface: batadv_slave_1
[  203.359606][ T5759] fuse: Unknown parameter 'fd0x0000000000000006'
[  204.116871][ T5769] loop2: detected capacity change from 0 to 512
[  204.199351][ T5769] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[  204.209431][ T5769] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[  204.219349][ T5769] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[  204.288405][ T5769] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  204.296458][ T5769] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e01c, mo2=0000]
[  204.318391][ T5769] EXT4-fs (loop2): orphan cleanup on readonly fs
[  204.331723][ T5769] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.416: bg 0: block 34: padding at end of block bitmap is not set
[  204.352062][ T5769] Quota error (device loop2): write_blk: dquota write failed
[  204.360480][ T5769] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  204.370746][ T5769] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.416: Failed to acquire dquot type 1
[  204.407948][ T5769] EXT4-fs (loop2): 1 truncate cleaned up
[  205.685580][ T5769] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,,errors=continue. Quota mode: writeback.
[  207.563704][ T5789] fuse: Unknown parameter 'fd0x0000000000000003'
[  212.127124][ T5158] Bluetooth: hci4: command 0x0406 tx timeout
[  212.565886][ T5851] fuse: Unknown parameter 'fd0x0000000000000003'
[  214.291782][ T5872] loop4: detected capacity change from 0 to 512
[  214.448859][ T5872] EXT4-fs (loop4): 1 truncate cleaned up
[  214.454715][ T5872] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable,,errors=continue. Quota mode: none.
[  215.056124][ T5880] loop3: detected capacity change from 0 to 256
[  215.158143][ T5880] exfat: Unknown parameter 'keep_last_dots'
[  220.028015][ T5926] loop3: detected capacity change from 0 to 512
[  220.245669][ T5926] EXT4-fs (loop3): 1 truncate cleaned up
[  220.251736][ T5926] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable,,errors=continue. Quota mode: none.
[  220.889981][ T5934] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  221.014913][ T5934] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  221.033005][ T5934] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  221.104322][ T5934] device bridge_slave_0 left promiscuous mode
[  221.134821][ T5934] bridge0: port 1(bridge_slave_0) entered disabled state
[  221.277189][ T5934] device bridge_slave_1 left promiscuous mode
[  221.361462][ T5934] bridge0: port 2(bridge_slave_1) entered disabled state
[  221.510089][ T5934] bond0: (slave bond_slave_0): Releasing backup interface
[  221.544415][ T5934] bond0: (slave bond_slave_1): Releasing backup interface
[  222.250009][ T5934] team0: Port device team_slave_0 removed
[  222.314530][ T5934] team0: Port device team_slave_1 removed
[  222.330939][ T5934] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  222.363986][ T5934] batman_adv: batadv0: Removing interface: batadv_slave_0
[  222.405092][ T5934] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  222.441083][ T5934] batman_adv: batadv0: Removing interface: batadv_slave_1
[  222.928890][ T5970] loop4: detected capacity change from 0 to 512
[  223.074409][ T5970] EXT4-fs (loop4): 1 truncate cleaned up
[  223.080450][ T5970] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable,,errors=continue. Quota mode: none.
[  223.109326][ T5972] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set
[  225.468578][ T5999] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  227.471880][ T6032] netlink: 4 bytes leftover after parsing attributes in process `syz.1.490'.
[  227.482689][ T6032] netlink: 12 bytes leftover after parsing attributes in process `syz.1.490'.
[  228.273582][ T6042] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  228.344580][ T6047] capability: warning: `syz.2.495' uses deprecated v2 capabilities in a way that may be insecure
[  228.377787][ T6049] netlink: 'syz.3.496': attribute type 1 has an invalid length.
[  228.394473][ T6047] loop2: detected capacity change from 0 to 256
[  229.289052][ T6067] loop3: detected capacity change from 0 to 512
[  230.358330][ T6076] netlink: 4 bytes leftover after parsing attributes in process `syz.1.503'.
[  230.394514][ T6076] netlink: 12 bytes leftover after parsing attributes in process `syz.1.503'.
[  231.014063][ T6067] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[  231.024353][ T6067] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[  231.041475][ T6067] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[  231.072233][ T6067] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  231.081457][ T6067] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e01c, mo2=0000]
[  231.106903][ T6067] EXT4-fs (loop3): orphan cleanup on readonly fs
[  231.116381][ T6067] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.501: bg 0: block 34: padding at end of block bitmap is not set
[  231.138049][ T6067] Quota error (device loop3): write_blk: dquota write failed
[  231.161477][ T6067] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota
[  231.181469][ T6067] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.501: Failed to acquire dquot type 1
[  231.348108][ T6067] EXT4-fs (loop3): 1 truncate cleaned up
[  231.372160][ T6067] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,,errors=continue. Quota mode: writeback.
[  233.616612][ T6133] netlink: 4 bytes leftover after parsing attributes in process `syz.1.516'.
[  233.634308][ T6133] netlink: 12 bytes leftover after parsing attributes in process `syz.1.516'.
[  235.401362][ T6164] netdevsim netdevsim0: Firmware load for '..' refused, path contains '..' component
[  236.319955][ T6171] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  236.339596][ T6171] device syzkaller0 entered promiscuous mode
[  236.423008][ T6171] tipc: Resetting bearer <eth:syzkaller0>
[  236.463814][ T6169] tipc: Resetting bearer <eth:syzkaller0>
[  236.515366][ T6169] tipc: Disabling bearer <eth:syzkaller0>
[  237.379901][ T6201] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  237.465485][ T6201] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  237.474352][ T6201] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  238.306619][ T6209] loop4: detected capacity change from 0 to 512
[  238.554046][ T6209] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[  238.567469][ T6213] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  238.580722][ T6209] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[  238.600710][ T6209] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[  238.723644][ T6209] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  238.740686][ T6209] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e01c, mo2=0000]
[  238.760974][ T6209] EXT4-fs (loop4): orphan cleanup on readonly fs
[  238.796200][ T6209] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.543: bg 0: block 34: padding at end of block bitmap is not set
[  238.830805][ T6209] Quota error (device loop4): write_blk: dquota write failed
[  238.850699][ T6209] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota
[  238.870706][ T6209] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.543: Failed to acquire dquot type 1
[  238.875804][ T6223] netlink: 12 bytes leftover after parsing attributes in process `syz.2.549'.
[  238.982276][ T6209] EXT4-fs (loop4): 1 truncate cleaned up
[  239.006023][ T6209] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,,errors=continue. Quota mode: writeback.
[  239.144798][ T6231] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  239.165345][ T6231] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  240.159430][ T6260] netlink: 12 bytes leftover after parsing attributes in process `syz.2.561'.
[  240.769879][ T6278] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  240.784633][ T6278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  240.796467][ T6278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  241.003331][ T6284] device syzkaller0 entered promiscuous mode
[  241.487574][ T6290] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  241.898289][ T6300] netlink: 12 bytes leftover after parsing attributes in process `syz.1.575'.
[  242.913827][ T6320] fuse: Unknown parameter '0x0000000000000006'
[  243.471751][ T6352] netlink: 'syz.1.595': attribute type 1 has an invalid length.
[  243.544906][ T6352] bond2: (slave bridge9): making interface the new active one
[  243.563676][ T6352] bond2: (slave bridge9): Enslaving as an active interface with an up link
[  243.793605][ T6352] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  243.828168][ T6352] device macvlan2 entered promiscuous mode
[  243.840285][ T6352] device bond2 entered promiscuous mode
[  243.845987][ T6352] device bridge9 entered promiscuous mode
[  243.853086][ T6352] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  243.862728][ T6352] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  243.881838][ T6356] fuse: Unknown parameter 'f0x0000000000000006'
[  243.890087][ T6352] device bond2 left promiscuous mode
[  243.895607][ T6352] device bridge9 left promiscuous mode
[  244.111894][ T6362] netdevsim netdevsim2: Firmware load for '..' refused, path contains '..' component
[  244.257208][ T6367] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  244.272326][ T6367] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  244.284617][ T6367] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  245.329855][ T6383] fuse: Unknown parameter 'f0x0000000000000003'
[  246.435592][ T6402] loop4: detected capacity change from 0 to 512
[  246.491029][ T6402] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[  246.502072][ T6402] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[  246.513173][ T6402] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[  246.969754][ T6402] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  246.978738][ T6402] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e01c, mo2=0000]
[  246.994112][ T6402] EXT4-fs (loop4): orphan cleanup on readonly fs
[  247.013650][ T6402] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.612: bg 0: block 34: padding at end of block bitmap is not set
[  247.031553][ T6402] Quota error (device loop4): write_blk: dquota write failed
[  247.040659][ T6402] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  247.051733][ T6402] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.612: Failed to acquire dquot type 1
[  247.072927][ T6402] EXT4-fs (loop4): 1 truncate cleaned up
[  247.093598][ T6402] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,,errors=continue. Quota mode: writeback.
[  247.735857][ T6412] loop4: detected capacity change from 0 to 256
[  248.393186][ T6421] fuse: Unknown parameter 'f0x0000000000000006'
[  248.749157][ T6436] loop3: detected capacity change from 0 to 512
[  250.542712][ T6436] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[  250.553001][ T6436] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[  250.562926][ T6436] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[  250.862224][ T6436] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  250.870400][ T6436] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e01c, mo2=0000]
[  250.883045][ T6436] EXT4-fs (loop3): orphan cleanup on readonly fs
[  250.899750][ T6436] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.625: bg 0: block 34: padding at end of block bitmap is not set
[  250.917074][ T6436] Quota error (device loop3): write_blk: dquota write failed
[  250.924846][ T6436] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  250.935077][ T6436] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.625: Failed to acquire dquot type 1
[  250.975377][ T6436] EXT4-fs (loop3): 1 truncate cleaned up
[  251.001308][ T6436] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,,errors=continue. Quota mode: writeback.
[  252.829174][ T6447] loop4: detected capacity change from 0 to 32768
[  252.906910][ T6471] fuse: Unknown parameter 'fd0x0000000000000006'
[  252.913646][ T6447] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.628 (6447)
[  252.969357][ T6447] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  253.007508][ T6447] BTRFS info (device loop4): enabling auto defrag
[  253.014034][ T6447] BTRFS info (device loop4): use no compression
[  253.071301][ T6447] BTRFS info (device loop4): max_inline at 4096
[  253.097398][ T6447] BTRFS info (device loop4): using free space tree
[  253.104023][ T6447] BTRFS info (device loop4): has skinny extents
[  253.295564][ T6447] BTRFS info (device loop4): enabling ssd optimizations
[  255.929183][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  255.959171][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  257.999880][ T6530] fuse: Unknown parameter 'fd0x0000000000000003'
[  258.038779][ T6532] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  258.089663][ T6532] device syzkaller0 entered promiscuous mode
[  258.385625][ T6541] tipc: Resetting bearer <eth:syzkaller0>
[  258.468773][ T6544] netdevsim netdevsim2: Firmware load for '..' refused, path contains '..' component
[  261.218737][ T6545] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  261.229031][ T6545] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  261.238468][ T6545] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  261.247750][ T6545] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  261.451744][ T6556] netlink: 4 bytes leftover after parsing attributes in process `syz.1.651'.
[  261.467747][ T6556] netlink: 12 bytes leftover after parsing attributes in process `syz.1.651'.
[  261.880652][ T6531] tipc: Resetting bearer <eth:syzkaller0>
[  261.896999][ T6531] tipc: Disabling bearer <eth:syzkaller0>
[  261.910171][ T4260] tipc: Node number set to 3026555272
[  262.333662][ T6574] fuse: Unknown parameter 'fd0x0000000000000003'
[  263.537492][ T5380] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[  263.957591][ T5380] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  264.163819][ T5380] usb 3-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65
[  264.186522][ T5380] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  264.196061][ T5380] usb 3-1: Product: syz
[  264.201580][ T5380] usb 3-1: Manufacturer: syz
[  264.206997][ T5380] usb 3-1: SerialNumber: syz
[  264.255150][ T6599] netlink: 4 bytes leftover after parsing attributes in process `syz.1.663'.
[  264.272036][ T6599] netlink: 12 bytes leftover after parsing attributes in process `syz.1.663'.
[  264.365720][ T5380] usb 3-1: config 0 descriptor??
[  265.147909][ T5380] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in warm state.
[  265.242439][ T5380] dvb-usb: will use the device's hardware PID filter (table count: 32).
[  265.277628][ T6613] loop3: detected capacity change from 0 to 256
[  265.403844][ T5380] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design)
[  265.424952][ T5380] usb 3-1: media controller created
[  265.436799][ T5380] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  265.548216][ T5380] DVB: Unable to find symbol dib7000p_attach()
[  265.558743][ T5380] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design'
[  265.571708][ T5380] dvb-usb: will use the device's hardware PID filter (table count: 32).
[  265.599319][ T5380] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design)
[  265.615857][ T5380] usb 3-1: media controller created
[  265.623995][ T5380] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  265.637692][ T5380] dib0700: the master dib7090 has to be initialized first
[  265.645252][ T5380] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design'
[  265.797471][ T5380] rc_core: IR keymap rc-dib0700-rc5 not found
[  265.804029][ T5380] Registered IR keymap rc-empty
[  265.818734][ T5380] dvb-usb: could not initialize remote control.
[  265.836013][ T5380] dvb-usb: DiBcom TFE7090PVR reference design successfully initialized and connected.
[  267.957906][ T5377] usb 3-1: USB disconnect, device number 2
[  268.013659][ T5377] dvb-usb: DiBcom TFE7090PVR reference design successfully deinitialized and disconnected.
[  268.533919][ T6647] netlink: 4 bytes leftover after parsing attributes in process `syz.2.674'.
[  268.544709][ T6647] netlink: 12 bytes leftover after parsing attributes in process `syz.2.674'.
[  273.324946][ T6700] loop2: detected capacity change from 0 to 512
[  273.629299][ T6700] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[  273.639509][ T6700] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[  273.649443][ T6700] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[  273.942771][ T6700] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  273.950867][ T6700] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e01c, mo2=0000]
[  273.962662][ T6700] EXT4-fs (loop2): orphan cleanup on readonly fs
[  273.975088][ T6700] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.690: bg 0: block 34: padding at end of block bitmap is not set
[  273.993768][ T6700] Quota error (device loop2): write_blk: dquota write failed
[  274.001571][ T6700] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  274.011845][ T6700] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.690: Failed to acquire dquot type 1
[  274.033190][ T6700] EXT4-fs (loop2): 1 truncate cleaned up
[  275.068530][ T6700] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,,errors=continue. Quota mode: writeback.
[  279.528949][ T6739] netlink: 4 bytes leftover after parsing attributes in process `syz.4.700'.
[  279.546285][ T6739] netlink: 12 bytes leftover after parsing attributes in process `syz.4.700'.
[  282.106440][ T6748] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  282.117654][ T6748] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready
[  282.126064][ T6748] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  282.135363][ T6748] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  282.162576][ T6748] bond2: (slave bridge9): Releasing active interface
[  282.171144][ T6748] bond2: (slave bridge9): the permanent HWaddr of slave - 32:f4:2d:df:4d:f6 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  282.195340][ T6748] bond2: (slave gretap1): making interface the new active one
[  282.398741][ T6748] bond2: (slave gretap1): Releasing active interface
[  282.735835][ T6759] device syzkaller0 entered promiscuous mode
[  283.319267][ T6748] syz.1.704 (6748) used greatest stack depth: 19568 bytes left
[  283.944526][ T6779] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  283.955962][ T6779] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready
[  283.965146][ T6779] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  283.988808][ T6779] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  284.102756][ T5158] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[  284.272587][ T6782] netlink: 4 bytes leftover after parsing attributes in process `syz.2.715'.
[  284.289348][ T6782] netlink: 12 bytes leftover after parsing attributes in process `syz.2.715'.
[  284.652293][ T6773] loop3: detected capacity change from 0 to 512
[  285.100930][ T6773] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[  285.111039][ T6773] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[  285.121209][ T6773] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[  285.217942][ T5158] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4
[  285.315076][ T5158] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023
[  285.326604][ T5158] usb 1-1: config 0 interface 0 has no altsetting 0
[  285.362125][ T6773] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  285.370646][ T6773] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e01c, mo2=0000]
[  285.379515][ T6773] EXT4-fs (loop3): orphan cleanup on readonly fs
[  285.405567][ T6773] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.712: bg 0: block 34: padding at end of block bitmap is not set
[  285.422081][ T6773] Quota error (device loop3): write_blk: dquota write failed
[  285.429896][ T6773] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota
[  285.440386][ T6773] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.712: Failed to acquire dquot type 1
[  285.737619][ T5158] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  285.762974][ T6773] EXT4-fs (loop3): 1 truncate cleaned up
[  285.798337][ T5158] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  286.036514][ T5158] usb 1-1: Product: syz
[  286.939216][ T5158] usb 1-1: Manufacturer: syz
[  286.993072][ T5158] usb 1-1: SerialNumber: syz
[  287.148805][ T5158] usb 1-1: config 0 descriptor??
[  287.215368][ T6773] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,,errors=continue. Quota mode: writeback.
[  287.263384][ T5158] usb 1-1: can't set config #0, error -71
[  287.371303][ T5158] usb 1-1: USB disconnect, device number 2
[  289.546685][ T6814] fuse: Unknown parameter 'fd0x0000000000000006'
[  289.557889][ T6815] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  289.572000][ T6815] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  289.591438][ T6815] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  293.137409][ T5158] usb 4-1: new full-speed USB device number 2 using dummy_hcd
[  293.653168][ T6866] netlink: 28 bytes leftover after parsing attributes in process `syz.0.742'.
[  293.697705][ T5158] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  293.750053][ T5158] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  293.768882][ T5158] usb 4-1: Product: syz
[  293.773356][ T5158] usb 4-1: Manufacturer: syz
[  293.778260][ T5158] usb 4-1: SerialNumber: syz
[  293.794206][ T5158] usb 4-1: config 0 descriptor??
[  293.837664][ T5382] usb 3-1: new full-speed USB device number 3 using dummy_hcd
[  294.838171][ T5382] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4
[  294.872319][ T5158] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  294.891039][ T5382] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023
[  294.975525][ T5382] usb 3-1: config 0 interface 0 has no altsetting 0
[  295.138021][ T5382] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  295.363754][ T5382] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  295.383395][ T5382] usb 3-1: Product: syz
[  295.388419][ T5382] usb 3-1: Manufacturer: syz
[  295.393372][ T5382] usb 3-1: SerialNumber: syz
[  296.090195][ T5382] usb 3-1: config 0 descriptor??
[  296.267630][ T5382] usb 3-1: can't set config #0, error -71
[  296.297194][ T5382] usb 3-1: USB disconnect, device number 3
[  297.652455][ T5158] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -32
[  297.839301][ T5158] usb 4-1: USB disconnect, device number 2
[  298.907986][ T5158] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[  299.035897][ T6922] netlink: 12 bytes leftover after parsing attributes in process `syz.1.759'.
[  299.190657][ T6932] netlink: 28 bytes leftover after parsing attributes in process `syz.1.764'.
[  299.307654][ T5158] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  299.497863][ T5158] usb 4-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65
[  299.511374][ T5158] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  299.524724][ T5158] usb 4-1: Product: syz
[  299.533483][ T5158] usb 4-1: Manufacturer: syz
[  299.542215][ T5158] usb 4-1: SerialNumber: syz
[  299.549845][ T5158] usb 4-1: config 0 descriptor??
[  299.813528][ T5158] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in warm state.
[  299.838964][ T5158] dvb-usb: will use the device's hardware PID filter (table count: 32).
[  299.883805][ T5158] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design)
[  299.893349][ T5158] usb 4-1: media controller created
[  299.907815][ T5158] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  299.996212][ T5158] DVB: Unable to find symbol dib7000p_attach()
[  300.012249][ T5158] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design'
[  300.028196][ T5158] dvb-usb: will use the device's hardware PID filter (table count: 32).
[  300.057514][ T5158] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design)
[  300.073577][ T5158] usb 4-1: media controller created
[  300.081472][ T5158] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  300.102451][ T5158] dib0700: the master dib7090 has to be initialized first
[  300.115360][ T5158] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design'
[  300.385998][ T5158] rc_core: IR keymap rc-dib0700-rc5 not found
[  300.393680][ T5158] Registered IR keymap rc-empty
[  300.399116][ T5158] dvb-usb: could not initialize remote control.
[  300.405406][ T5158] dvb-usb: DiBcom TFE7090PVR reference design successfully initialized and connected.
[  301.625040][ T6962] netlink: 12 bytes leftover after parsing attributes in process `syz.2.773'.
[  301.820637][ T1107] usb 4-1: USB disconnect, device number 3
[  301.912329][ T1107] dvb-usb: DiBcom TFE7090PVR reference design successfully deinitialized and disconnected.
[  302.877311][ T6986] loop3: detected capacity change from 0 to 256
[  304.254565][ T6999] netlink: 12 bytes leftover after parsing attributes in process `syz.4.786'.
[  304.279267][ T6999] netlink: 8 bytes leftover after parsing attributes in process `syz.4.786'.
[  306.460121][ T7015] loop3: detected capacity change from 0 to 256
[  306.499388][ T7015] exfat: Unknown parameter 'ÿÿÿÿÿÿÿ'
[  308.141458][ T7033] netlink: 12 bytes leftover after parsing attributes in process `syz.3.798'.
[  308.208113][ T7033] netlink: 8 bytes leftover after parsing attributes in process `syz.3.798'.
[  308.776727][ T7053] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  308.807668][ T7053] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready
[  308.816150][ T7053] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  308.823801][ T7053] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  308.961643][ T7058] bond1: (slave bridge4): Enslaving as an active interface with an up link
[  308.984078][ T7058] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  309.002456][ T7058] device macvlan2 entered promiscuous mode
[  309.071507][ T7058] device bond1 entered promiscuous mode
[  309.098030][ T7058] device bridge4 entered promiscuous mode
[  309.123427][ T7058] device gretap1 entered promiscuous mode
[  309.132398][ T7061] loop3: detected capacity change from 0 to 256
[  309.158498][ T7058] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  309.180156][ T7058] device bond1 left promiscuous mode
[  309.185534][ T7058] device bridge4 left promiscuous mode
[  309.271562][ T7058] device gretap1 left promiscuous mode
[  309.298298][ T7061] exfat: Unknown parameter 'ÿÿÿÿÿÿÿ'
[  310.391438][ T7068] tipc: Started in network mode
[  310.396534][ T7068] tipc: Node identity 26c6eedc0abe, cluster identity 4711
[  310.813625][ T7068] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  311.042024][ T7077] device syzkaller0 entered promiscuous mode
[  311.725652][ T7077] tipc: Resetting bearer <eth:syzkaller0>
[  311.798097][ T7077] tipc: Disabling bearer <eth:syzkaller0>
[  311.821438][ T7085] netlink: 12 bytes leftover after parsing attributes in process `syz.0.814'.
[  311.837652][ T7085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.814'.
[  315.105813][ T7127] syz.2.827 uses obsolete (PF_INET,SOCK_PACKET)
[  317.303611][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  317.310027][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  317.638001][ T5381] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  318.013116][ T7147] bond2: (slave bridge4): Enslaving as an active interface with an up link
[  318.041740][ T7141] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  318.147022][ T7141] device macvlan2 entered promiscuous mode
[  318.179955][ T7141] device bond2 entered promiscuous mode
[  318.185593][ T7141] device bridge4 entered promiscuous mode
[  318.191995][ T7141] device gretap1 entered promiscuous mode
[  318.198977][ T7141] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  318.208973][ T7141] device bond2 left promiscuous mode
[  318.221532][ T7141] device bridge4 left promiscuous mode
[  318.237489][ T5381] usb 5-1: Using ep0 maxpacket: 16
[  318.377923][ T7141] device gretap1 left promiscuous mode
[  319.287519][ T5147] usb 1-1: new full-speed USB device number 3 using dummy_hcd
[  319.297712][ T5381] usb 5-1: unable to read config index 0 descriptor/all
[  319.307463][ T5381] usb 5-1: can't read configurations, error -71
[  319.677470][ T5147] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  319.867759][ T5147] usb 1-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65
[  319.877217][ T5147] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  319.885323][ T5147] usb 1-1: Product: syz
[  319.890720][ T5147] usb 1-1: Manufacturer: syz
[  319.896365][ T5147] usb 1-1: SerialNumber: syz
[  319.906476][ T5147] usb 1-1: config 0 descriptor??
[  320.278357][ T5147] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in warm state.
[  320.303022][ T5147] dvb-usb: will use the device's hardware PID filter (table count: 32).
[  320.347955][ T5147] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design)
[  320.361970][ T5147] usb 1-1: media controller created
[  320.373823][ T5147] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  320.484211][ T5147] DVB: Unable to find symbol dib7000p_attach()
[  320.498657][ T5147] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design'
[  320.517612][ T5147] dvb-usb: will use the device's hardware PID filter (table count: 32).
[  320.560410][ T5147] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design)
[  320.574124][ T5147] usb 1-1: media controller created
[  320.588857][ T5147] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  320.622109][ T5147] dib0700: the master dib7090 has to be initialized first
[  320.645236][ T5147] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design'
[  320.757454][ T5147] rc_core: IR keymap rc-dib0700-rc5 not found
[  320.766109][ T5147] Registered IR keymap rc-empty
[  320.783212][ T5147] dvb-usb: could not initialize remote control.
[  320.821449][ T5147] dvb-usb: DiBcom TFE7090PVR reference design successfully initialized and connected.
[  321.094254][ T7191] loop3: detected capacity change from 0 to 512
[  321.116774][ T7191] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[  321.128557][ T7191] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[  321.139486][ T7191] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[  321.178558][ T7191] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  321.187642][ T7191] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e01c, mo2=0000]
[  321.203565][ T7191] EXT4-fs (loop3): orphan cleanup on readonly fs
[  321.218394][ T7191] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.846: bg 0: block 34: padding at end of block bitmap is not set
[  321.501061][ T7191] Quota error (device loop3): write_blk: dquota write failed
[  321.510238][ T7191] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  321.522572][ T7191] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.846: Failed to acquire dquot type 1
[  321.549657][ T7191] EXT4-fs (loop3): 1 truncate cleaned up
[  322.353774][   T23] usb 1-1: USB disconnect, device number 3
[  323.248660][ T7199] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  323.576081][   T23] dvb-usb: DiBcom TFE7090PVR reference design successfully deinitialized and disconnected.
[  323.588242][ T7191] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,,errors=continue. Quota mode: writeback.
[  324.497345][ T7216] loop2: detected capacity change from 0 to 32768
[  324.591852][ T7219] netlink: 'syz.3.855': attribute type 1 has an invalid length.
[  324.622764][ T7216] JBD2: Ignoring recovery information on journal
[  324.663152][ T7219] bond3: (slave bridge5): Enslaving as an active interface with an up link
[  324.864525][ T7216] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  326.959870][ T4184] ocfs2: Unmounting device (7,2) on (node local)
[  327.125514][ T7242] netlink: 12 bytes leftover after parsing attributes in process `syz.1.862'.
[  329.970645][ T7284] loop4: detected capacity change from 0 to 4096
[  329.995246][ T7289] loop2: detected capacity change from 0 to 512
[  330.196326][ T7289] EXT4-fs (loop2): 1 truncate cleaned up
[  330.202176][ T7289] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable,,errors=continue. Quota mode: none.
[  331.549500][ T7303] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  336.107536][ T7301] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  336.117897][ T7301] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  336.126841][ T7301] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  336.136240][ T7301] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  336.798551][ T7351] loop3: detected capacity change from 0 to 512
[  336.903154][ T7351] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[  336.914619][ T7351] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[  336.925997][ T7351] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[  336.964559][ T7351] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  336.974203][ T7351] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e01c, mo2=0000]
[  336.989356][ T7351] EXT4-fs (loop3): orphan cleanup on readonly fs
[  337.013377][ T7351] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.893: bg 0: block 34: padding at end of block bitmap is not set
[  337.035417][ T7351] Quota error (device loop3): write_blk: dquota write failed
[  337.044978][ T7351] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  337.057204][ T7351] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.893: Failed to acquire dquot type 1
[  337.077153][ T7351] EXT4-fs (loop3): 1 truncate cleaned up
[  337.087666][ T7351] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,,errors=continue. Quota mode: writeback.
[  339.221616][ T7383] netlink: 4 bytes leftover after parsing attributes in process `syz.3.905'.
[  339.238074][ T7383] netlink: 12 bytes leftover after parsing attributes in process `syz.3.905'.
[  340.415157][ T7387] loop3: detected capacity change from 0 to 32768
[  340.599243][ T7391] loop4: detected capacity change from 0 to 512
[  340.861873][ T7387] JBD2: Ignoring recovery information on journal
[  340.999421][ T7391] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[  341.009430][ T7391] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[  341.019315][ T7391] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[  341.087786][ T7391] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  341.097716][ T7391] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e01c, mo2=0000]
[  341.111401][ T7391] EXT4-fs (loop4): orphan cleanup on readonly fs
[  341.124002][ T7391] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.908: bg 0: block 34: padding at end of block bitmap is not set
[  341.143250][ T7391] Quota error (device loop4): write_blk: dquota write failed
[  341.152612][ T7391] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  341.163770][ T7391] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.908: Failed to acquire dquot type 1
[  341.182710][ T7391] EXT4-fs (loop4): 1 truncate cleaned up
[  341.231704][ T7391] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,,errors=continue. Quota mode: writeback.
[  341.395705][ T7387] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  341.725184][ T4187] ocfs2: Unmounting device (7,3) on (node local)
[  345.887592][ T7434] loop2: detected capacity change from 0 to 512
[  346.178191][ T7434] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[  346.189470][ T7434] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[  346.200761][ T7434] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[  346.253065][ T7434] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  346.262180][ T7434] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e01c, mo2=0000]
[  346.275525][ T7434] EXT4-fs (loop2): orphan cleanup on readonly fs
[  346.291785][ T7434] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.919: bg 0: block 34: padding at end of block bitmap is not set
[  346.311114][ T7434] Quota error (device loop2): write_blk: dquota write failed
[  346.320120][ T7434] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  346.331662][ T7434] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.919: Failed to acquire dquot type 1
[  346.350635][ T7434] EXT4-fs (loop2): 1 truncate cleaned up
[  346.359192][ T7434] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,,errors=continue. Quota mode: writeback.
[  348.135682][ T7445] loop2: detected capacity change from 0 to 4096
[  348.210609][ T7446] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  354.879847][ T7511] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  354.982193][ T7511] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready
[  355.021868][ T7511] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  355.060418][ T7511] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  360.121399][ T7557] loop4: detected capacity change from 0 to 32768
[  360.214279][ T7557] JBD2: Ignoring recovery information on journal
[  360.361072][ T7557] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  361.527400][   T23] usb 1-1: new full-speed USB device number 4 using dummy_hcd
[  362.480142][ T4185] ocfs2: Unmounting device (7,4) on (node local)
[  362.667774][   T23] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4
[  362.710674][   T23] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023
[  363.066102][ T7590] loop2: detected capacity change from 0 to 4096
[  363.534676][ T7591] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  363.934949][   T23] usb 1-1: config 0 interface 0 has no altsetting 0
[  363.977393][   T23] usb 1-1: string descriptor 0 read error: -71
[  363.983706][   T23] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  364.007435][   T23] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  364.028500][   T23] usb 1-1: config 0 descriptor??
[  364.047533][   T23] usb 1-1: can't set config #0, error -71
[  364.067546][   T23] usb 1-1: USB disconnect, device number 4
[  365.430085][ T7615] loop2: detected capacity change from 0 to 4096
[  365.494723][ T7619] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  366.129665][ T7627] loop2: detected capacity change from 0 to 512
[  366.160651][ T7627] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[  366.171658][ T7627] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[  366.182987][ T7627] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[  366.232062][ T7627] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  366.240611][ T7627] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e01c, mo2=0000]
[  366.255061][ T7627] EXT4-fs (loop2): orphan cleanup on readonly fs
[  366.270518][ T7627] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.977: bg 0: block 34: padding at end of block bitmap is not set
[  366.295640][ T7627] Quota error (device loop2): write_blk: dquota write failed
[  366.304554][ T7627] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  366.315921][ T7627] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.977: Failed to acquire dquot type 1
[  366.334290][ T7627] EXT4-fs (loop2): 1 truncate cleaned up
[  366.393592][ T7627] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,,errors=continue. Quota mode: writeback.
[  367.613851][ T7632] loop4: detected capacity change from 0 to 32768
[  367.753795][ T7632] JBD2: Ignoring recovery information on journal
[  367.802121][ T7632] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  368.432803][ T4185] ocfs2: Unmounting device (7,4) on (node local)
[  368.925086][ T7641] loop4: detected capacity change from 0 to 4096
[  368.993328][ T7642] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  369.084252][ T7618] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  369.096191][ T7618] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  369.109799][ T7618] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  369.122129][ T7618] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  369.565637][ T7647] fuse: Bad value for 'fd'
[  370.468550][ T7659] loop3: detected capacity change from 0 to 4096
[  370.943015][ T7660] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  371.415408][ T7662] loop2: detected capacity change from 0 to 512
[  371.510144][ T7662] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[  371.520181][ T7662] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[  371.531897][ T7662] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[  371.623699][ T7662] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  371.631900][ T7662] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e01c, mo2=0000]
[  371.644499][ T7662] EXT4-fs (loop2): orphan cleanup on readonly fs
[  371.658755][ T7662] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.987: bg 0: block 34: padding at end of block bitmap is not set
[  371.676916][ T7662] Quota error (device loop2): write_blk: dquota write failed
[  371.684981][ T7662] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  371.695215][ T7662] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.987: Failed to acquire dquot type 1
[  371.710758][ T7662] EXT4-fs (loop2): 1 truncate cleaned up
[  371.720695][ T7662] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,,errors=continue. Quota mode: writeback.
[  373.945226][ T7686] netlink: 44 bytes leftover after parsing attributes in process `syz.0.995'.
[  373.966021][ T7686] netlink: 44 bytes leftover after parsing attributes in process `syz.0.995'.
[  374.164093][ T7697] netlink: 8 bytes leftover after parsing attributes in process `syz.4.998'.
[  374.866936][ T7713] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1002'.
[  378.733063][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  378.808614][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  379.222488][ T7766] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  379.297983][ T7766] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  379.305585][ T7766] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  379.479957][ T7770] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  380.224682][ T7784] netlink: 'syz.0.1016': attribute type 1 has an invalid length.
[  380.908362][ T7796] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  382.033746][ T7808] bond1: (slave bridge4): Releasing backup interface
[  382.040886][ T7808] bond1: (slave bridge4): the permanent HWaddr of slave - 32:ca:c4:c9:e6:3e - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  382.072046][ T7808] bond1: (slave gretap1): Releasing backup interface
[  383.975253][ T7844] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  386.291163][ T7863] loop3: detected capacity change from 0 to 4096
[  386.424963][ T7864] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  387.447387][    T7] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  388.572951][    T7] usb 5-1: Using ep0 maxpacket: 16
[  388.672450][ T7886] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  388.712040][    T7] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  388.772840][    T7] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  388.806817][    T7] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  389.088754][ T7889] loop2: detected capacity change from 0 to 40427
[  389.097044][    T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  389.185488][ T7889] F2FS-fs (loop2): invalid crc value
[  389.219452][ T7889] F2FS-fs (loop2): Found nat_bits in checkpoint
[  389.261820][ T7889] F2FS-fs (loop2): Start checkpoint disabled!
[  389.297470][ T7889] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  389.649086][ T7893] netlink: 'syz.2.1050': attribute type 1 has an invalid length.
[  390.095283][    T7] mcp2221 0003:04D8:00DD.0001: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0
[  390.427574][ T4800] attempt to access beyond end of device
[  390.427574][ T4800] loop2: rw=2049, want=40976, limit=40427
[  390.461529][ T7866] i2c i2c-1: unsupported multi-msg i2c transaction
[  390.503270][ T1107] usb 5-1: USB disconnect, device number 6
[  393.404510][ T7921] bond2: (slave bridge4): Releasing backup interface
[  393.474575][ T7921] bond2: (slave bridge4): the permanent HWaddr of slave - ba:a9:aa:6c:e6:11 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  393.613193][ T7921] bond2: (slave gretap1): Releasing backup interface
[  393.722856][ T7921] bond3: (slave bridge5): Releasing backup interface
[  399.157748][ T7985] loop4: detected capacity change from 0 to 32768
[  399.329299][ T7985] JBD2: Ignoring recovery information on journal
[  399.470135][ T7985] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  401.211468][ T4185] ocfs2: Unmounting device (7,4) on (node local)
[  401.245693][ T8012] loop3: detected capacity change from 0 to 128
[  401.339299][ T8012] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  401.473082][ T8012] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  401.498433][ T8017] netlink: 'syz.1.1089': attribute type 1 has an invalid length.
[  401.503316][   T21] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  403.737564][   T21] usb 3-1: Using ep0 maxpacket: 16
[  403.857909][   T21] usb 3-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  405.213544][   T21] usb 3-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  406.181691][   T21] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  406.343985][   T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  406.597912][   T21] usb 3-1: can't set config #128, error -71
[  407.669039][   T21] usb 3-1: USB disconnect, device number 4
[  409.005946][ T8047] loop2: detected capacity change from 0 to 4096
[  409.156878][ T8058] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  409.276743][ T8055] loop3: detected capacity change from 0 to 512
[  409.767871][ T8055] EXT4-fs (loop3): 1 truncate cleaned up
[  409.773921][ T8055] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable,,errors=continue. Quota mode: none.
[  410.540167][ T8074] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set
[  411.721997][ T8095] loop3: detected capacity change from 0 to 32768
[  411.830805][ T8095] JBD2: Ignoring recovery information on journal
[  411.916760][ T8095] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  413.895508][ T4187] ocfs2: Unmounting device (7,3) on (node local)
[  414.783129][ T8125] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1117'.
[  417.363787][ T8152] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1126'.
[  418.806780][ T8174] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  420.757759][ T8195] tipc: Can't bind to reserved service type 2
[  420.787393][ T8195] No such timeout policy "syz0"
[  421.449326][ T8201] netlink: 'syz.0.1134': attribute type 1 has an invalid length.
[  422.351864][ T8213] loop3: detected capacity change from 0 to 32768
[  422.477439][ T8213] JBD2: Ignoring recovery information on journal
[  422.569459][ T8213] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  423.471144][ T4187] ocfs2: Unmounting device (7,3) on (node local)
[  425.276951][ T8245] loop2: detected capacity change from 0 to 40427
[  425.365768][ T8245] F2FS-fs (loop2): invalid crc value
[  425.563516][ T8245] F2FS-fs (loop2): Found nat_bits in checkpoint
[  425.607822][ T8245] F2FS-fs (loop2): Start checkpoint disabled!
[  425.623522][ T8245] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  426.105907][ T8267] netlink: 'syz.2.1148': attribute type 1 has an invalid length.
[  426.843611][ T4412] attempt to access beyond end of device
[  426.843611][ T4412] loop2: rw=2049, want=40976, limit=40427
[  432.279221][ T8349] netlink: 'syz.0.1176': attribute type 1 has an invalid length.
[  433.676307][ T8362] netdevsim netdevsim2: Firmware load for '..' refused, path contains '..' component
[  434.116416][ T8378] loop2: detected capacity change from 0 to 40427
[  434.131140][ T8378] F2FS-fs (loop2): invalid crc value
[  434.140235][ T8378] F2FS-fs (loop2): Found nat_bits in checkpoint
[  434.174741][ T8378] F2FS-fs (loop2): Start checkpoint disabled!
[  434.191266][ T8378] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  434.518923][ T8383] netlink: 'syz.2.1187': attribute type 1 has an invalid length.
[  435.168690][ T4292] attempt to access beyond end of device
[  435.168690][ T4292] loop2: rw=2049, want=40976, limit=40427
[  435.606062][ T8395] loop4: detected capacity change from 0 to 4096
[  435.741881][ T8398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1194'.
[  435.751178][ T8397] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  439.331883][ T8427] loop4: detected capacity change from 0 to 4096
[  440.197749][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  440.204248][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  440.321739][ T8433] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  443.581220][ T8467] loop2: detected capacity change from 0 to 40427
[  444.035910][ T8467] F2FS-fs (loop2): invalid crc value
[  444.055384][ T8467] F2FS-fs (loop2): Found nat_bits in checkpoint
[  444.087611][ T8467] F2FS-fs (loop2): Start checkpoint disabled!
[  444.126135][ T8467] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  444.490861][ T8477] netlink: 'syz.2.1215': attribute type 1 has an invalid length.
[  445.078628][ T4293] attempt to access beyond end of device
[  445.078628][ T4293] loop2: rw=2049, want=40976, limit=40427
[  446.812649][ T8448] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  446.821726][ T8448] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  446.831327][ T8448] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  446.840564][ T8448] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  447.822414][ T8506] No such timeout policy "syz0"
[  448.202897][ T8512] netlink: 'syz.0.1226': attribute type 1 has an invalid length.
[  450.021301][ T8522] No such timeout policy "syz0"
[  451.548973][ T8542] loop4: detected capacity change from 0 to 4096
[  451.651631][ T8546] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  451.811067][ T8548] netlink: 'syz.2.1240': attribute type 1 has an invalid length.
[  452.055327][ T8556] loop4: detected capacity change from 0 to 512
[  452.225529][ T8556] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[  452.235589][ T8556] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[  452.245507][ T8556] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[  452.444631][ T8556] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  452.452960][ T8556] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e01c, mo2=0000]
[  452.464546][ T8556] EXT4-fs (loop4): orphan cleanup on readonly fs
[  452.476523][ T8556] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1242: bg 0: block 34: padding at end of block bitmap is not set
[  452.495105][ T8556] Quota error (device loop4): write_blk: dquota write failed
[  452.503184][ T8556] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  452.513570][ T8556] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.1242: Failed to acquire dquot type 1
[  452.528755][ T8556] EXT4-fs (loop4): 1 truncate cleaned up
[  454.378855][ T8552] bond1: (slave gretap1): making interface the new active one
[  454.418183][ T8556] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,,errors=continue. Quota mode: writeback.
[  454.432419][ T8552] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  455.693948][ T8579] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component
[  455.791715][ T8582] netlink: 'syz.1.1246': attribute type 1 has an invalid length.
[  456.747433][ T5381] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  456.923610][ T8596] loop4: detected capacity change from 0 to 40427
[  457.020698][ T8596] F2FS-fs (loop4): invalid crc value
[  457.033982][ T8596] F2FS-fs (loop4): Found nat_bits in checkpoint
[  457.075327][ T8596] F2FS-fs (loop4): Start checkpoint disabled!
[  457.088366][ T8596] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  457.177424][ T5381] usb 3-1: Using ep0 maxpacket: 16
[  457.498826][ T8610] netlink: 'syz.4.1255': attribute type 1 has an invalid length.
[  458.377751][ T5381] usb 3-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  458.436994][ T5381] usb 3-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  458.650121][ T5381] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  458.839994][ T5381] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  458.974079][ T4293] attempt to access beyond end of device
[  458.974079][ T4293] loop4: rw=2049, want=45104, limit=40427
[  459.960989][ T8623] loop3: detected capacity change from 0 to 40427
[  459.979377][ T5381] usb 3-1: can't set config #128, error -71
[  460.005885][ T5381] usb 3-1: USB disconnect, device number 5
[  460.075126][ T8623] F2FS-fs (loop3): invalid crc value
[  460.101208][ T8623] F2FS-fs (loop3): Found nat_bits in checkpoint
[  460.141229][ T8623] F2FS-fs (loop3): Start checkpoint disabled!
[  460.157409][ T8623] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  460.534818][ T8642] netlink: 'syz.3.1265': attribute type 1 has an invalid length.
[  462.481678][ T8665] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  462.535329][ T4800] attempt to access beyond end of device
[  462.535329][ T4800] loop3: rw=2049, want=40976, limit=40427
[  462.559577][ T8665] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  462.571495][ T8665] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  462.603455][ T8665] bond1: (slave gretap1): Releasing active interface
[  462.664824][ T8669] device syzkaller0 entered promiscuous mode
[  462.681765][ T8669] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  467.016378][ T8710] loop2: detected capacity change from 0 to 32768
[  467.110798][ T8710] JBD2: Ignoring recovery information on journal
[  467.183570][ T8710] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  467.233600][ T8715] device syzkaller0 entered promiscuous mode
[  468.079385][ T4184] ocfs2: Unmounting device (7,2) on (node local)
[  470.577531][ T8751] loop4: detected capacity change from 0 to 4096
[  470.689162][ T8752] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  471.705589][ T8758] device syzkaller0 entered promiscuous mode
[  471.883333][ T8764] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1310'.
[  471.918268][ T8764] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1310'.
[  472.272344][ T8777] netlink: 'syz.3.1315': attribute type 1 has an invalid length.
[  473.276471][ T8773] netlink: 'syz.4.1314': attribute type 72 has an invalid length.
[  473.699104][ T8801] device syzkaller0 entered promiscuous mode
[  473.699858][ T8804] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1323'.
[  473.743684][ T8804] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1323'.
[  475.141102][ T8823] loop3: detected capacity change from 0 to 40427
[  475.156032][ T8823] F2FS-fs (loop3): invalid crc value
[  475.188856][ T8823] F2FS-fs (loop3): Found nat_bits in checkpoint
[  475.225618][ T8823] F2FS-fs (loop3): Start checkpoint disabled!
[  475.253313][ T8823] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  475.792861][ T8830] netlink: 'syz.3.1330': attribute type 1 has an invalid length.
[  476.509378][ T4411] attempt to access beyond end of device
[  476.509378][ T4411] loop3: rw=2049, want=40976, limit=40427
[  478.327410][ T8847] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  479.377956][ T8865] netlink: 'syz.1.1339': attribute type 1 has an invalid length.
[  482.099331][ T8882] loop3: detected capacity change from 0 to 40427
[  482.281934][ T8882] F2FS-fs (loop3): invalid crc value
[  482.330605][ T8882] F2FS-fs (loop3): Found nat_bits in checkpoint
[  482.495079][ T8889] netlink: 'syz.0.1346': attribute type 1 has an invalid length.
[  482.889861][ T8882] F2FS-fs (loop3): Start checkpoint disabled!
[  482.907356][ T8882] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  482.927580][ T8885] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  483.326673][ T8900] netlink: 'syz.3.1347': attribute type 1 has an invalid length.
[  484.487924][ T4292] attempt to access beyond end of device
[  484.487924][ T4292] loop3: rw=2049, want=40976, limit=40427
[  487.464609][ T8928] loop2: detected capacity change from 0 to 4096
[  487.824069][ T8929] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  488.007499][   T13] usb 4-1: new full-speed USB device number 4 using dummy_hcd
[  488.403159][   T13] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  488.833427][   T13] usb 4-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65
[  488.857598][   T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  488.866918][   T13] usb 4-1: Product: syz
[  488.979316][   T13] usb 4-1: Manufacturer: syz
[  488.985115][   T13] usb 4-1: SerialNumber: syz
[  489.632617][ T8953] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1365'.
[  489.672991][   T13] usb 4-1: config 0 descriptor??
[  489.997881][   T13] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in warm state.
[  490.018927][ T8960] loop2: detected capacity change from 0 to 4096
[  490.088936][ T8961] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  490.222753][   T13] dvb-usb: will use the device's hardware PID filter (table count: 32).
[  490.368661][   T13] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design)
[  490.462440][   T13] usb 4-1: media controller created
[  490.548304][   T13] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  491.555566][   T13] DVB: Unable to find symbol dib7000p_attach()
[  491.567478][   T13] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design'
[  491.684158][   T13] dvb-usb: will use the device's hardware PID filter (table count: 32).
[  491.808640][   T13] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design)
[  491.913169][   T13] usb 4-1: media controller created
[  492.577751][   T13] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  492.828725][   T13] dib0700: the master dib7090 has to be initialized first
[  492.997395][   T13] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design'
[  493.327557][   T13] rc_core: IR keymap rc-dib0700-rc5 not found
[  493.333736][   T13] Registered IR keymap rc-empty
[  493.367883][   T13] dvb-usb: could not initialize remote control.
[  493.388388][   T13] dvb-usb: DiBcom TFE7090PVR reference design successfully initialized and connected.
[  493.478493][   T13] usb 4-1: USB disconnect, device number 4
[  493.565800][   T13] dvb-usb: DiBcom TFE7090PVR reference design successfully deinitialized and disconnected.
[  494.779325][ T8992] netlink: 'syz.4.1378': attribute type 1 has an invalid length.
[  494.939859][ T8997] fuse: Unknown parameter 'fd0x0000000000000006'
[  495.745258][ T8992] bond1: (slave gretap1): making interface the new active one
[  495.809272][ T8992] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  496.190923][ T9004] device macvlan2 entered promiscuous mode
[  496.222690][ T9004] device bond1 entered promiscuous mode
[  496.247443][ T9004] device gretap1 entered promiscuous mode
[  496.268058][ T9004] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  496.300750][ T9006] loop2: detected capacity change from 0 to 32768
[  496.329495][ T9004] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  496.346503][ T9004] device bond1 left promiscuous mode
[  496.356414][ T9004] device gretap1 left promiscuous mode
[  499.347566][ T9038] loop2: detected capacity change from 0 to 128
[  499.539338][ T9038] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  501.238285][ T9038] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  501.292468][ T9043] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1390'.
[  501.589541][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  501.595902][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  502.856895][ T9060] fuse: Bad value for 'rootmode'
[  503.831166][ T9084] device syzkaller0 entered promiscuous mode
[  505.381349][ T9086] loop2: detected capacity change from 0 to 32768
[  505.997850][ T9097] bond1: (slave gretap1): Releasing active interface
[  507.587469][ T5158] usb 1-1: new full-speed USB device number 5 using dummy_hcd
[  507.595210][ T9123] loop3: detected capacity change from 0 to 40427
[  507.688971][ T9123] F2FS-fs (loop3): invalid crc value
[  507.706346][ T9123] F2FS-fs (loop3): Found nat_bits in checkpoint
[  507.754042][ T9123] F2FS-fs (loop3): Start checkpoint disabled!
[  507.810101][ T9123] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  507.947571][ T5158] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4
[  507.983555][ T5158] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023
[  508.040823][ T5158] usb 1-1: config 0 interface 0 has no altsetting 0
[  508.388323][ T5158] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  508.524069][ T5158] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  508.572676][ T5158] usb 1-1: Product: syz
[  508.596964][ T5158] usb 1-1: Manufacturer: syz
[  508.642057][ T5158] usb 1-1: SerialNumber: syz
[  508.671198][ T5158] usb 1-1: config 0 descriptor??
[  508.722212][ T5158] usb 1-1: selecting invalid altsetting 0
[  508.997716][ T9125] usb 1-1: selecting invalid altsetting 0
[  509.005173][ T9125] usb 1-1: 0:0: usb_set_interface failed (-22)
[  509.011618][ T9125] usb 1-1: selecting invalid altsetting 0
[  509.017613][ T9125] usb 1-1: 0:0: usb_set_interface failed (-22)
[  509.024586][ T9125] usb 1-1: selecting invalid altsetting 0
[  509.032695][ T9125] usb 1-1: 0:0: usb_set_interface failed (-22)
[  509.040448][   T23] usb 1-1: USB disconnect, device number 5
[  509.095493][ T4422] attempt to access beyond end of device
[  509.095493][ T4422] loop3: rw=2049, want=40976, limit=40427
[  510.427390][ T9144] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  510.436631][ T9144] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  510.445840][ T9144] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  510.455490][ T9144] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  511.499652][ T9155] netlink: 'syz.1.1424': attribute type 1 has an invalid length.
[  511.565403][ T9156] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1424'.
[  511.617459][ T9177] device syzkaller0 entered promiscuous mode
[  512.936633][ T9198] netlink: 'syz.3.1435': attribute type 1 has an invalid length.
[  513.121093][ T9205] device macvlan2 entered promiscuous mode
[  513.219358][ T9205] device bond5 entered promiscuous mode
[  513.247649][ T9205] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  513.343325][ T9205] device bond5 left promiscuous mode
[  513.879762][ T9203] loop4: detected capacity change from 0 to 32768
[  513.933068][ T9203] JBD2: Ignoring recovery information on journal
[  513.980618][ T9209] loop2: detected capacity change from 0 to 32768
[  514.063335][ T9203] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  514.207434][ T9213] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  515.097464][ T4230] usb 3-1: new full-speed USB device number 6 using dummy_hcd
[  515.537774][ T4230] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4
[  515.598229][ T4230] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023
[  515.637459][ T4230] usb 3-1: config 0 interface 0 has no altsetting 0
[  515.858152][ T4230] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  515.920442][ T4230] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  517.110767][ T4230] usb 3-1: Product: syz
[  517.115197][ T4230] usb 3-1: Manufacturer: syz
[  517.197593][ T9247] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  517.505873][ T4230] usb 3-1: SerialNumber: syz
[  518.066556][ T4230] usb 3-1: config 0 descriptor??
[  518.107502][ T4230] usb 3-1: can't set config #0, error -71
[  518.122779][ T4230] usb 3-1: USB disconnect, device number 6
[  518.329560][ T4185] ocfs2: Unmounting device (7,4) on (node local)
[  518.575920][ T9278] loop2: detected capacity change from 0 to 512
[  518.736538][ T9278] EXT4-fs (loop2): 1 truncate cleaned up
[  518.742554][ T9278] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable,,errors=continue. Quota mode: none.
[  520.571953][ T9288] loop4: detected capacity change from 0 to 32768
[  520.757348][ T9288] JBD2: Ignoring recovery information on journal
[  520.868340][ T9288] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  522.958910][ T9341] loop3: detected capacity change from 0 to 512
[  524.688433][ T9341] EXT4-fs (loop3): 1 truncate cleaned up
[  524.694317][ T9341] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable,,errors=continue. Quota mode: none.
[  526.078458][ T9365] loop2: detected capacity change from 0 to 128
[  526.267707][ T9365] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  527.167764][ T9365] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  528.597143][ T9383] fuse: Unknown parameter 'fd0x0000000000000006'
[  529.564938][ T9399] loop2: detected capacity change from 0 to 128
[  529.630158][ T9399] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  529.724482][ T9399] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  530.755418][ T4185] ocfs2: Unmounting device (7,4) on (node local)
[  532.936904][ T9433] loop3: detected capacity change from 0 to 512
[  534.496792][ T9433] EXT4-fs (loop3): 1 truncate cleaned up
[  534.502713][ T9433] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable,,errors=continue. Quota mode: none.
[  535.500516][ T9456] loop4: detected capacity change from 0 to 128
[  535.587481][ T9456] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  535.703223][ T9456] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  536.854892][ T9464] netlink: 'syz.4.1517': attribute type 1 has an invalid length.
[  537.071676][ T9469] device macvlan2 entered promiscuous mode
[  537.163564][ T9469] device bond2 entered promiscuous mode
[  537.206238][ T9469] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  537.224941][ T9469] device bond2 left promiscuous mode
[  539.102529][ T9487] fuse: Unknown parameter 'fd0x0000000000000005'
[  539.465288][ T9498] loop4: detected capacity change from 0 to 4096
[  540.693085][ T9509] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  541.257550][ T9524] fuse: Unknown parameter 'fd0x0000000000000006'
[  542.427264][ T5158] usb 3-1: new full-speed USB device number 7 using dummy_hcd
[  543.491058][ T9553] No such timeout policy "syz0"
[  543.628800][ T9522] loop4: detected capacity change from 0 to 32768
[  543.677500][ T5158] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4
[  543.771656][ T5158] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023
[  543.894593][ T5158] usb 3-1: config 0 interface 0 has no altsetting 0
[  544.082359][ T9563] fuse: Unknown parameter 'fd0x0000000000000006'
[  544.129619][ T5158] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  544.183509][ T5158] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  544.252692][ T5158] usb 3-1: Product: syz
[  544.301876][ T5158] usb 3-1: Manufacturer: syz
[  544.334515][ T5158] usb 3-1: SerialNumber: syz
[  544.355848][ T5158] usb 3-1: config 0 descriptor??
[  544.419833][ T5158] usb 3-1: selecting invalid altsetting 0
[  544.564355][ T4230] usb 3-1: USB disconnect, device number 7
[  546.558530][ T9596] loop2: detected capacity change from 0 to 40427
[  546.617457][ T9598] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  546.655053][ T9596] F2FS-fs (loop2): invalid crc value
[  546.791133][ T9596] F2FS-fs (loop2): Found nat_bits in checkpoint
[  546.824175][ T9596] F2FS-fs (loop2): Start checkpoint disabled!
[  546.845079][ T9596] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  547.069652][ T9604] fuse: Unknown parameter 'fd0x0000000000000006'
[  547.191226][ T9605] netlink: 'syz.2.1559': attribute type 1 has an invalid length.
[  547.815282][ T4293] attempt to access beyond end of device
[  547.815282][ T4293] loop2: rw=2049, want=40976, limit=40427
[  548.625264][ T4292] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 0
[  548.655085][ T4292] Bluetooth: hci5: Frame reassembly failed (-84)
[  548.937453][ T4230] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  549.177335][ T4230] usb 1-1: device descriptor read/64, error -71
[  549.477573][ T4230] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  549.737320][ T4230] usb 1-1: device descriptor read/64, error -71
[  549.908008][ T4230] usb usb1-port1: attempt power cycle
[  550.356810][ T9647] fuse: Unknown parameter 'fd0x0000000000000003'
[  550.367438][ T4230] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  550.467702][ T4230] usb 1-1: device descriptor read/8, error -71
[  550.717424][ T5382] Bluetooth: hci5: command 0x1003 tx timeout
[  550.724013][ T9612] Bluetooth: hci5: sending frame failed (-49)
[  552.627734][ T9678] netlink: 'syz.3.1581': attribute type 1 has an invalid length.
[  552.753271][ T9678] device macvlan2 entered promiscuous mode
[  552.776057][ T9678] device bond6 entered promiscuous mode
[  552.797458][ T4230] Bluetooth: hci5: command 0x1001 tx timeout
[  552.811778][ T9678] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  552.823754][ T9612] Bluetooth: hci5: sending frame failed (-49)
[  553.011923][ T9678] device bond6 left promiscuous mode
[  553.673464][ T9688] fuse: Unknown parameter 'fd0x0000000000000006'
[  554.337139][ T9697] loop2: detected capacity change from 0 to 32768
[  554.675877][ T9697] JBD2: Ignoring recovery information on journal
[  555.114943][ T4230] Bluetooth: hci5: command 0x1009 tx timeout
[  555.215531][ T9697] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  556.159219][ T4184] ocfs2: Unmounting device (7,2) on (node local)
[  556.908447][ T9728] fuse: Unknown parameter 'fd0x0000000000000005'
[  560.718416][ T9762] fuse: Unknown parameter 'fd0x0000000000000006'
[  560.911944][ T9767] loop4: detected capacity change from 0 to 128
[  560.969349][ T9767] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  561.029771][ T9767] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  562.739405][ T9799] fuse: Unknown parameter 'fd0x0000000000000003'
[  563.068063][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  563.075254][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  564.137632][ T9816] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  564.652821][ T9833] fuse: Unknown parameter 'fd0x0000000000000006'
[  566.256863][ T9862] loop4: detected capacity change from 0 to 32768
[  566.361844][ T9862] JBD2: Ignoring recovery information on journal
[  566.517932][ T9862] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  567.463539][ T9877] fuse: Unknown parameter 'fd0x0000000000000006'
[  568.294356][ T4185] ocfs2: Unmounting device (7,4) on (node local)
[  568.683480][ T9908] loop4: detected capacity change from 0 to 128
[  568.738779][ T9908] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  568.776655][ T9908] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  570.769797][ T9922] loop2: detected capacity change from 0 to 40427
[  570.834839][ T9922] F2FS-fs (loop2): invalid crc value
[  570.849275][ T9922] F2FS-fs (loop2): Found nat_bits in checkpoint
[  570.890970][ T9922] F2FS-fs (loop2): Start checkpoint disabled!
[  570.924094][ T9925] fuse: Unknown parameter 'fd0x0000000000000005'
[  570.931961][ T9922] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  571.006876][ T9922] netlink: 'syz.2.1667': attribute type 1 has an invalid length.
[  571.241988][ T9932] loop3: detected capacity change from 0 to 32768
[  571.282474][ T4412] attempt to access beyond end of device
[  571.282474][ T4412] loop2: rw=2049, want=40976, limit=40427
[  571.337583][ T9932] JBD2: Ignoring recovery information on journal
[  571.436608][ T9932] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  572.731105][ T4187] ocfs2: Unmounting device (7,3) on (node local)
[  573.067443][ T9169] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  573.241590][ T9960] loop3: detected capacity change from 0 to 32768
[  573.388496][ T9960] JBD2: Ignoring recovery information on journal
[  573.461956][ T9960] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  573.517275][ T9169] usb 3-1: Using ep0 maxpacket: 16
[  574.137523][ T9169] usb 3-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  574.164171][ T9169] usb 3-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  574.194839][ T9169] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  574.216575][ T9169] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  574.362461][ T4187] ocfs2: Unmounting device (7,3) on (node local)
[  574.527380][ T4486] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  574.770515][ T9169] mcp2221 0003:04D8:00DD.0002: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0
[  574.799005][ T4486] usb 5-1: Using ep0 maxpacket: 16
[  574.837356][ T9975] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  574.927688][ T4486] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  574.957393][ T4486] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  575.002616][ T4486] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  575.158231][ T4486] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  575.201219][ T9166] usb 3-1: USB disconnect, device number 8
[  576.362835][ T4486] mcp2221 0003:04D8:00DD.0003: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0
[  577.229662][ T9969] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN
[  577.241417][ T9969] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[  577.249880][ T9969] CPU: 0 PID: 9969 Comm: syz.4.1682 Not tainted syzkaller #0
[  577.257289][ T9969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  577.267387][ T9969] RIP: 0010:mcp_i2c_xfer+0x58/0x420
[  577.272660][ T9969] Code: 01 00 00 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74 08 48 89 df e8 89 96 55 fa 48 8b 1b 48 89 d8 48 c1 e8 03 4d 89 f4 48 89 04 24 <42> 80 3c 30 00 74 08 48 89 df e8 69 96 55 fa 4c 8b 33 4d 8d ae 70
[  577.292495][ T9969] RSP: 0018:ffffc900032ffb30 EFLAGS: 00010246
[  577.298623][ T9969] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000080000
[  577.306650][ T9969] RDX: ffffc90005f2a000 RSI: 0000000000000446 RDI: 0000000000000447
[  577.314776][ T9969] RBP: 0000000000000002 R08: ffff888056b18697 R09: 1ffff1100ad630d2
[  577.322785][ T9969] R10: dffffc0000000000 R11: ffffed100ad630d3 R12: dffffc0000000000
[  577.330927][ T9969] R13: 1ffff1100ad6302b R14: dffffc0000000000 R15: ffff8881435994c0
[  577.338949][ T9969] FS:  00007fe972a986c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000
[  577.348018][ T9969] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  577.354645][ T9969] CR2: 0000001b32818ff8 CR3: 000000002b70f000 CR4: 00000000003506f0
[  577.362669][ T9969] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  577.370678][ T9969] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  577.378778][ T9969] Call Trace:
[  577.382089][ T9969]  <TASK>
[  577.385052][ T9969]  ? mcp_gpio_get+0x260/0x260
[  577.389753][ T9969]  __i2c_transfer+0x880/0x20b0
[  577.394548][ T9969]  ? i2c_cmd+0x110/0x110
[  577.398816][ T9969]  ? __might_fault+0xb7/0x110
[  577.403511][ T9969]  i2c_transfer+0x25d/0x3a0
[  577.408036][ T9969]  ? __i2c_transfer+0x20b0/0x20b0
[  577.413089][ T9969]  ? __might_fault+0xb3/0x110
[  577.417786][ T9969]  ? _copy_from_user+0x111/0x170
[  577.422831][ T9969]  i2cdev_ioctl_rdwr+0x3dc/0x6d0
[  577.427792][ T9969]  i2cdev_ioctl+0x610/0x7b0
[  577.432316][ T9969]  ? i2cdev_write+0x120/0x120
[  577.437019][ T9969]  ? bpf_lsm_file_ioctl+0x5/0x10
[  577.441972][ T9969]  ? security_file_ioctl+0x7c/0xa0
[  577.447102][ T9969]  ? i2cdev_write+0x120/0x120
[  577.451797][ T9969]  __se_sys_ioctl+0xfa/0x170
[  577.456401][ T9969]  do_syscall_64+0x4c/0xa0
[  577.460960][ T9969]  ? clear_bhb_loop+0x30/0x80
[  577.465663][ T9969]  ? clear_bhb_loop+0x30/0x80
[  577.470366][ T9969]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  577.476275][ T9969] RIP: 0033:0x7fe97483edd9
[  577.480706][ T9969] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  577.500335][ T9969] RSP: 002b:00007fe972a98028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  577.508774][ T9969] RAX: ffffffffffffffda RBX: 00007fe974ab7fa0 RCX: 00007fe97483edd9
[  577.516951][ T9969] RDX: 00002000000004c0 RSI: 0000000000000707 RDI: 0000000000000008
[  577.525072][ T9969] RBP: 00007fe9748d4d69 R08: 0000000000000000 R09: 0000000000000000
[  577.533151][ T9969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  577.541139][ T9969] R13: 00007fe974ab8038 R14: 00007fe974ab7fa0 R15: 00007ffc777f65f8
[  577.549150][ T9969]  </TASK>
[  577.552212][ T9969] Modules linked in:
[  577.845645][ T4486] usb 5-1: reset high-speed USB device number 7 using dummy_hcd
[  578.429785][ T9969] ---[ end trace b25c7e730d0af829 ]---
[  578.443483][T10001] No such timeout policy "syz0"
[  578.479967][ T9969] RIP: 0010:mcp_i2c_xfer+0x58/0x420
[  578.485245][ T9969] Code: 01 00 00 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74 08 48 89 df e8 89 96 55 fa 48 8b 1b 48 89 d8 48 c1 e8 03 4d 89 f4 48 89 04 24 <42> 80 3c 30 00 74 08 48 89 df e8 69 96 55 fa 4c 8b 33 4d 8d ae 70
[  578.528068][ T9969] RSP: 0018:ffffc900032ffb30 EFLAGS: 00010246
[  578.597520][ T9969] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000080000
[  578.629636][ T9969] RDX: ffffc90005f2a000 RSI: 0000000000000446 RDI: 0000000000000447
[  578.638563][ T9969] RBP: 0000000000000002 R08: ffff888056b18697 R09: 1ffff1100ad630d2
[  578.646855][ T9969] R10: dffffc0000000000 R11: ffffed100ad630d3 R12: dffffc0000000000
[  578.657503][ T9969] R13: 1ffff1100ad6302b R14: dffffc0000000000 R15: ffff8881435994c0
[  578.674316][ T9969] FS:  00007fe972a986c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000
[  578.684649][ T9969] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  578.694244][ T9969] CR2: 000000110c423828 CR3: 000000002b70f000 CR4: 00000000003506f0
[  578.703438][ T9969] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  578.714341][ T9969] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  578.723955][ T9969] Kernel panic - not syncing: Fatal exception
[  578.730385][ T9969] Kernel Offset: disabled
[  578.734737][ T9969] Rebooting in 86400 seconds..