last executing test programs:

6m53.238744788s ago: executing program 1 (id=163):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r1 = io_uring_setup(0x1562, &(0x7f0000000040)={0x0, 0x3ed, 0xc000, 0xc, 0xa0002f5})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)
shutdown(r0, 0x1)

6m53.03324182s ago: executing program 1 (id=166):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20)
listen(r1, 0x2)
close(0x3)

6m52.949924995s ago: executing program 1 (id=167):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0xb8}}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfe, {{@in6=@private0={0xfc, 0x0, '\x00', 0x40}, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x400, 0x0, 0x0, 0xa, 0x60, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x9}, {0x0, 0x5}}}, 0xb8}}, 0x4000)

6m52.712276389s ago: executing program 1 (id=169):
socket$packet(0x11, 0x3, 0x300)
syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000400)='./file3\x00', 0x210048, &(0x7f00000003c0)=ANY=[], 0xfd, 0x1f0, &(0x7f0000000080)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x99501e, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x185c11, 0x0)
mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x887008, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000001a40)={0x2020}, 0x2020)

6m52.347510129s ago: executing program 1 (id=173):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0)
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=@delchain={0x24, 0x65, 0x1, 0x70bd2e, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {}, {0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)

6m51.850970348s ago: executing program 1 (id=180):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000000)=0xfffffffe, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000480)=0x17fe, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0)

6m51.387398835s ago: executing program 32 (id=180):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000000)=0xfffffffe, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000480)=0x17fe, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0)

6m29.488286861s ago: executing program 0 (id=308):
unshare(0x28000600)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
pipe2(&(0x7f0000001040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RGETLOCK(r1, &(0x7f00000000c0)=ANY=[], 0xffffff6a)
write$binfmt_script(r1, &(0x7f0000001d80)={'#! ', './file0'}, 0xb)

6m27.337414226s ago: executing program 0 (id=310):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x1, 0x0, &(0x7f0000000540)="9c", 0x0, 0x0, 0x800006}, 0x50)
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0x7fffffff, 0x4)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xfb}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000100)="ac", 0x1)
recvmmsg$unix(r1, &(0x7f0000000080), 0x4d4, 0x10003, 0x0)

6m27.141679757s ago: executing program 0 (id=313):
r0 = gettid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ppoll(0x0, 0x0, 0x0, &(0x7f00000000c0)={[0x8001a0ffffffff]}, 0x8)
ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0xffffffffffffffff)
fcntl$setsig(r1, 0xa, 0x12)
ppoll(&(0x7f0000000100)=[{r2}], 0x1, 0x0, &(0x7f0000000080)={[0x8001a0efffffff]}, 0x8)
dup2(r1, r2)
fcntl$setown(r2, 0x8, r0)
tkill(r0, 0x13)

6m26.143588566s ago: executing program 0 (id=316):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28a5291, 0x0)
unshare(0x22020400)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1)

6m25.589617988s ago: executing program 0 (id=325):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xa7}}}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x3}}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0xe, 0x2}, {0x9, 0x8}}}]}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x400c040}, 0x0)

6m24.566223967s ago: executing program 0 (id=324):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8, 0x4}, {0x0, 0x8}}}, 0xb8}}, 0x0)

6m24.219620797s ago: executing program 33 (id=324):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8, 0x4}, {0x0, 0x8}}}, 0xb8}}, 0x0)

5m30.412510961s ago: executing program 5 (id=651):
socketpair$unix(0x1, 0x5, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x20014062)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10)
socket$kcm(0x2, 0x2, 0x73)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700", @ANYRES32], 0x3c}}, 0x0)

5m30.311437996s ago: executing program 5 (id=653):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xfbc6, 0x10100, 0x8000003}, &(0x7f0000000080)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}, 0x1})
io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x800)

5m27.404685126s ago: executing program 5 (id=666):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000000000000000000000000000850000009b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
close(0x3)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e0b9545dd30a2131677b2d0bfa91", 0x0, 0x27cb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

5m27.245726115s ago: executing program 5 (id=668):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f00000000c0)='./file1\x00')
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r0, r0)
setpgid(0x0, r0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x81c0, 0x0)

5m26.948273312s ago: executing program 5 (id=671):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = syz_mount_image$btrfs(&(0x7f00000004c0), &(0x7f00000015c0)='./file0\x00', 0xc000, &(0x7f00000000c0)={[{@clear_cache}, {@user_subvol_rm}, {@nodiscard}, {@rescan_uuid_tree}, {@autodefrag}, {@ssd}, {@nodatacow}, {@space_cache}]}, 0x0, 0x559e, &(0x7f0000003640)="$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")
chdir(&(0x7f0000000080)='./file0\x00')
ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000580)={0x1})
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7da, &(0x7f0000000fc0)="$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")
creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

5m26.564414964s ago: executing program 5 (id=674):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
munmap(&(0x7f00002b9000/0x3000)=nil, 0x3000)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0xc, 0xa0002f5})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)

5m26.190890126s ago: executing program 34 (id=674):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
munmap(&(0x7f00002b9000/0x3000)=nil, 0x3000)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0xc, 0xa0002f5})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)

4m53.535705338s ago: executing program 2 (id=872):
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94)
write$P9_RVERSION(r1, &(0x7f0000000c40)=ANY=[], 0x13)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40)
mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r0, 0x80000000000000)

4m53.324969151s ago: executing program 2 (id=874):
socket$packet(0x11, 0x2, 0x300)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x4}, 0x50)
process_vm_writev(0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000400)=""/150, 0x96}], 0x2, 0x0, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = io_uring_setup(0x1562, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

4m53.103018223s ago: executing program 2 (id=876):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', <r2=>0x0})
r3 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0)

4m52.724337015s ago: executing program 2 (id=878):
setns(0xffffffffffffffff, 0x8020000)
openat(0xffffffffffffff9c, 0x0, 0x141042, 0x0)
mount_setattr(0xffffffffffffff9c, 0x0, 0x8000, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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")
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace(0x4208, r0)
ioprio_set$pid(0x2, r0, 0x4004)
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)

4m52.327670068s ago: executing program 2 (id=882):
rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x40000000, 0x0)
r0 = gettid()
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0)
rt_sigtimedwait(&(0x7f0000000000)={[0xe]}, 0x0, 0x0, 0x8)
tkill(r0, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ed7000/0x2000)=nil, 0x2000, 0x0)
accept4$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0, 0x80800)

4m48.388384528s ago: executing program 2 (id=895):
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94)
r0 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x5, 0x0, 0x0, 0xa, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xac, 0xfff, 0x0, 0x0, 0xffffffffffffffff, 0x7fffffff}, {0x2, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x4d2, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0x49}]}]}, 0xfc}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0xdd86, 0x2c}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000080)='b', 0x28}], 0x1}, 0x0)

4m47.884009667s ago: executing program 35 (id=895):
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94)
r0 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x5, 0x0, 0x0, 0xa, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xac, 0xfff, 0x0, 0x0, 0xffffffffffffffff, 0x7fffffff}, {0x2, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x4d2, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0x49}]}]}, 0xfc}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0xdd86, 0x2c}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000080)='b', 0x28}], 0x1}, 0x0)

9.910087743s ago: executing program 6 (id=2269):
r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="0200000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, &(0x7f0000000040), &(0x7f00000002c0)}, 0x20)
r3 = fsmount(r0, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
fchdir(r3)
bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r2}, 0x18)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0)
pread64(r4, &(0x7f0000002240)=""/131, 0x83, 0xe5d7)

9.516102826s ago: executing program 7 (id=2272):
mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x7cc74eb8cea42275, 0x8031, 0xffffffffffffffff, 0x8000000)
socket$inet6(0xa, 0x6, 0x801)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
syz_open_procfs(0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, 0x0, 0x4)
r1 = gettid()
syz_clone(0x20041080, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0)
wait4(0x0, 0x0, 0x60000008, 0x0)
rt_sigqueueinfo(r1, 0x11, &(0x7f0000000200)={0x1f, 0x1, 0xffffffc0})

9.515290256s ago: executing program 6 (id=2279):
r0 = socket$kcm(0xa, 0x1, 0x106)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x2, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1c, r5, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}}, 0x40)
sendmsg$kcm(r0, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x5}, 0x80, 0x0}, 0x24004059)
close(r0)

8.464680817s ago: executing program 3 (id=2273):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0)
syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x0)
umount2(&(0x7f0000000280)='./file0\x00', 0x2)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
getdents64(0xffffffffffffffff, 0x0, 0x4f)
ioctl$KVM_CAP_DISABLE_QUIRKS(0xffffffffffffffff, 0x4068aea3, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file7\x00', 0x0)

8.433410349s ago: executing program 6 (id=2282):
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000300)={'#! ', '', [], 0xa, "55977a14f3c9a7a12bcf68802bbee07a2be7e383155a79740c179baad2cf2a137e9376da821499c65ebb38e07bfb7ba275c02f31e527f7091c96cd0580e6f3b0718aa3187c6da8ebe4440f5a03c963c57d20d58cdbfa5fc3416a473095"}, 0x61)
syz_mount_image$iso9660(&(0x7f0000000fc0), &(0x7f0000001000)='./file1\x00', 0x0, &(0x7f0000000d80)=ANY=[], 0x3, 0x7be, &(0x7f00000005c0)="$eJzs3U1sHPUVAPA3rk2MkSJEKxpFIUwSDomamt01mFoc6LIeOwP2rrW7rhJVFSDiVFHMh4hQSw6FXKCfqnrqkXJFXHqr1EOlHtqeKpVDLz1UQuJUUalIVauqkquZ3U3Wjr9C7ATo72fh/+zMm/+8mR3m7Ww8MwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAARNKYrVSqycGIWD6bbq0x224tbjN90N9v1jXbLDciKf6L8fE41Bt16EvXJ99f/DoeR3qvjsT4yGDCvY9/cXRkMP82CX1Sx3YZl0S8USR06bnV1ZVX9iGR2+iHv77pWf69Vvyez5p5p5Uv1uezNO+00pnp6crDZ+Y66Vy+kHXOdbrZYtpoZ/Vuq52ebJxKqzMzU2k2ea613JyfrS9kg5GPfbVWqUynT00uZfV2p9V8+KnJTuNMvrCQN+fLmFrlO1HEPFbsiE/n3bSb1RfT9MLF1ZWpnVItgqrrxhxYt+MceejeD1/94OOLK8UOuVUnSX//q1WrtVp1+tGZRx+rVEZrldr6EZUN4lpEjEQUEfuy0/IZskdHbrh1I0X9/ziJWIg8mrEcZyONNEbK39d/xmI8ZqMdrVgsXv95bMP09fV/LCIe/vsft1vucP0fVPlD1ycfjrL+H+29OhrjRTMeV+5ZV/+Lg/LGPPbvp/leL5vhcZfjtbgSl+K5WI3VWIlXbmM+n+hnZG/7m48smpFHJ1qRx2LUyzFpf0waMzEd01GJZ+JMzEUn0piLPBYii06ci86PRvvvdyPakUU9utGKdqRxMhpxKtKoxkzMxFSkkcVknItWLEcz5mM26mUvF+Jiud2nNuR1//eeTd7404dvF8PXgqrbrEhSfJgrgv6xTVC/mD8Yu6r/d/fXbX2E+v95M95/n3cbvzcHbtgDa+X5/+idTgMAAADYR0n57XtSfmn/QDk0ly9k37zTaQEAAAB7qPy75iNFM1YMPRBJcf5f2STy/dueGwAAALA3kvIauyQiJuLB3tDgcqnNvgQAAAAAPoPKf/8/WjQTEa+XI5z/AwAAwOfM94fusR/D99j94K7+PXo7SweSL/Sjl84+lLxQL4bqL/TH9ZtvXOuxO3c4OdjvpGymR6/ck0TEaCM7kgzufvnfA732o7KHw9dvQLgxj2v3+m23x5KrWycQ2ydQvoofx7FezLHzvfb8YEpvKRNz+UI22WgtPF5N+l+OdF998eJ3I4ql/6C5eDCJCxdXVyaff2n1fJnL1aKXqy/0bw+f3EQua/0tEA9svsZj5YUY/eVO9JZbGV7//iMRRrZfZjK8zDfjeC/m+ESvnVi//uPFMquTj1ejXj840s3Odl9dG1r7fhbVW1zzN+NEL+bEyRO9ZpMsauuyePHGLGrDWexuW+w6i7ePvX72n79rJdnUTllM3WIWAHfKhfKuP9er0N1lFfrPWk9R/zfU3cFdzW/qKHfh+qeMwfxDtW409qa6vxknezEne58nRg9vUlcqmxzRX7748u/7R/RH3v35L7519A+/3Lq6rSXbZ/FunOoF9pu477c3ZFF0US237E82VNV3ijne2bKqdhZqSYzFSG/KYPLKt1derNWmpiuPVCqP1mKs/KjQb9QeADax4zN2dvEUnkc2P6uOQcW779qfFEzG8/FSrMb5OF1ebRARD27e68TQnyGc3uGsdWLoCS+ndzi3vB5b2xh74EQSW8RODW2xL/+sbP61f+8JAOy34zvU4d3U/9M7nHevr+Wneg/OHZwdx9a1fDNf2+8NAgD/B7L2R8lE962k3c6XnqnOzFTr3TNZ2m41nk7b+ex8lubNbtZunKk357N0qd3qthqDL45ns07aWV5aarW76VyrnS61OvnZ8snvaf/R751ssd7s5o3O0kJW72Rpo9Xs1hvddDbvNNKl5ScX8s6ZrF3O3FnKGvlc3qh381Yz7bSW241sMk07WTYUmM9mzW4+lxeDzXSpnS/W21cjYmF5MUtns06jnS91W70OB8vKm3Ot9mLZ7eSNq/+32729AeDT4PJrVy49t7q68sr6gbVk45jNB/6yi5jLEWt3ejUBgCHDVRoAAAAAAAAAAAAAAPh0uvFyvWLsjpf0DQ+MxU0Ebxg4EJ9krs/vwFfe670te9HhrfRz97r39K7+znLnt89NDzz7xBOXtop58vVDZ/6aRezcz+b/p1y+54a9N946GHHXr37aG/P127Wm70dvLWL0pmZfS7aJuWOHJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADY0v8CAAD//+BUTg4=")
setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00])
r0 = syz_clone(0xa8200780, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r1)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002d00)=""/4086, 0xff6}], 0x1}, 0x4}], 0x1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_open_procfs(r0, &(0x7f0000000040)='status\x00')
pread64(r3, &(0x7f0000000140)=""/25, 0x19, 0x4)

6.944185636s ago: executing program 7 (id=2277):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0)
write(r4, &(0x7f0000004200)='t', 0x1)
sendfile(r4, r3, 0x0, 0x40001)
ftruncate(r2, 0x2007ffb)
sendfile(r2, r2, 0x0, 0x1000000201005)

6.788217995s ago: executing program 4 (id=2278):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x3000)=nil)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x6, &(0x7f0000000040)={&(0x7f0000000280)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x100e}, @CTA_SEQ_ADJ_REPLY={0x14, 0x4, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0xe6ba7615268e7f7}]}]}, 0x80}}, 0x0)
munmap(&(0x7f0000002000/0x2000)=nil, 0x2000)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00')
preadv(r2, &(0x7f0000000d00)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1, 0x2, 0x200)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r3)

6.69239943s ago: executing program 3 (id=2280):
pipe(&(0x7f00000002c0))
socket$can_bcm(0x1d, 0x2, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440), 0x10)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
accept4$vsock_stream(r0, &(0x7f0000000880)={0x28, 0x0, 0x2711}, 0x10, 0x80000)
shutdown(r1, 0x1)

6.087954836s ago: executing program 6 (id=2281):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = userfaultfd(0x80001)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r1, &(0x7f0000000080)='\x00', 0x1, 0x8080, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f0000000000)=0x8, 0x4)
sendmmsg$inet(r1, &(0x7f0000001e00), 0x5, 0x20040040)
recvmsg(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x40012021)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x3})
syz_mount_image$fuse(0x0, 0x0, 0x0, &(0x7f0000002280)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000})

6.087092526s ago: executing program 4 (id=2290):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000e9ff0000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b70300002bb91a008500000008000000bc0900000000000045080100002000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffffc40200000800000018220000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000004608efff76000000bf9800000000000056090000000000008500000000020800b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

5.043133657s ago: executing program 6 (id=2283):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32=r2], 0x50}, 0x1, 0xba01}, 0x0)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x890}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000820}, 0x0)

5.042281906s ago: executing program 4 (id=2284):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
close(0x3)
r1 = socket(0x2, 0x80805, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={<r3=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in={{0x2, 0xce23, @broadcast}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000440)={<r4=>r3, 0x5}, &(0x7f0000000240)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000880)={<r5=>r4, @in6={{0x2, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x24}}, 0x1}}, 0x0, 0xeffc}, &(0x7f0000000300)=0x90)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000000)={r5, 0x7}, 0x8)

4.908537024s ago: executing program 3 (id=2285):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r1, &(0x7f0000000040), 0xc)
recvmmsg(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x2, 0x0)
r2 = getpid()
r3 = socket$inet6(0xa, 0x3, 0x3a)
close_range(r1, r1, 0x2)
r4 = syz_pidfd_open(r2, 0x0)
recvmmsg(r3, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}, 0xd}], 0x1, 0x2, 0x0)
ioctl$BTRFS_IOC_ADD_DEV(r4, 0x5411, 0x0)

4.855409387s ago: executing program 4 (id=2286):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x8000)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x8000)
sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xc0, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x2}}, [@XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0xc0}}, 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newspdinfo={0x1c, 0x24, 0x21, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}}, 0x0)
sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="b80000001900674c000000000000000000000000000000000000000000000000e000000200000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="d80000001b00010000"], 0xd8}, 0x1, 0x0, 0x0, 0x4044001}, 0x0)

4.792511021s ago: executing program 7 (id=2287):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
ptrace$ARCH_SHSTK_DISABLE(0x1e, 0x0, 0x1, 0x5002)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001080)=ANY=[@ANYBLOB="61154c00000000006113500000000000bfa00000000000001503000008004e002d3501000000000095000000000000006916000000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf670000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffbd4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000207b40407d00000021000000008a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe320fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6420ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6ad62934782cc308e936d7637e07c201282bbbed84a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18402cde8bf777b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d5454d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18532f4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684e62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961cf4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fd0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bbff4bbefc18f77700372471609e2c443e84ee5e9a5178f90512df04f3a0909c96632ae20c68c62b06e9fdc2977dfef1ced97b70263fc81c30f1354b319fe9d59d3101c4ee7375ff8673de5caff9e6ee73ccae77d1bf8f22330e8840af1ded6d5be627f7f87d5b12a2d6317825d77bef85313f541dcc4ff13f413db34d5da05648590a1685031e6955d4352bf0b7efd0b0a1e636b8aa4963d9f67de5ba91d501418bbeaac09bdd1059f3c3159e5900"/2282], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)

4.712942116s ago: executing program 4 (id=2288):
add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
lseek(r1, 0x7, 0x4)

3.77429973s ago: executing program 7 (id=2289):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f00000000c0)=[{0x48, 0x37, 0x80, 0x9}, {0x28, 0x1, 0xf7, 0xfffff024}, {0x6, 0x6, 0x2, 0x57c}]}, 0x10)
write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xa052)

3.466589788s ago: executing program 3 (id=2291):
bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="1900"], 0x48)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xdc}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000007c0)={0x300, 0x0, &(0x7f0000000780)={&(0x7f0000000b00)=ANY=[@ANYBLOB="020a06000300000028bd7008fcd1df25010018"], 0x18}}, 0x40)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)

2.676055674s ago: executing program 7 (id=2292):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r2, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000ff000000000000ffffff1f2c000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x80)

2.345880563s ago: executing program 3 (id=2293):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001ec0)="ad", 0x1}], 0x1}}], 0x1, 0xc000)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0)

11.983129ms ago: executing program 6 (id=2294):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000e9ff0000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b70300002bb91a008500000008000000bc0900000000000045080100002000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffffc40200000800000018220000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000004608efff76000000bf9800000000000056090000000000008500000000020800b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

11.673449ms ago: executing program 4 (id=2295):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
close(0x3)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
sendmmsg(r1, &(0x7f0000003a80)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000a00)='E', 0x1}, {&(0x7f00000002c0)="06a0e77c", 0x4}, {&(0x7f0000000480)="3cb6ca86775061", 0x7}], 0x3}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000380)="a7639cd6a721b56ed594ad1c1d7a1483a891564c6e54a7800210fadb617454c50397acc8a545f7de50634f16dfd25dbb9c78e3c2cd3ea50ec588dc604742ec43bae40e3c8b54814cf3bb5cdb5fb8c568a1a8c6a2331e00deb0e8ffc2ed28ee0e7149323f51ef4261ec1f864db914b1f76d026f4eb5732475044c467e7cc1c667d04620b954d7c8ee03cb4ea711e3f6e5f61f3259be1b2c05397af48bd50e0d4ae7ff1c108fd1c4bc101f90e345b0453d123da6188d74", 0xb6}, {&(0x7f0000000680)="86424c92e8c4a1645d3617b63b27079052b61eb37e1b0ca57816bd2fb7007d926dbc0482f89b296a05ecc43b7e8f31548fe2b97b1bc56c84d0b6196d06022478a367692d9181dd158479235f4ea5f2bf6356956d12f1aa88b2911b386d999dfdf6b87d66b9e7910e6fe4b3435ce672e7bb81071e6ce1959297981fa4ebe4f8b6f6ed1b954fed2b33db5aa605c8d3bd5bf6eafc7aad9c08f57dc764287621f8dc22f79a3c4cee4f9b9f843e69859584611c1d748d10068e26c9d50ec62ca70fcce14379c77432033b371c5a848eac6b4b0f78", 0xd2}, {&(0x7f0000000580)="41152454ed3d57965c004bce5fcce26f0c47a31746d7dcd2fc12722ca4e690a52190b58d8519152439f1167d7d84e2668fa5867e60260a44ef06702ebc431ef92a70acc09adc8c50c55e9c35364970bfaf1083b541f522ddfe01284e4e0edfcf8acfece37346a2ba85f70a538931ac7f187911c2b565152f5ce0a2a586700dfb20df43982b", 0x85}, {&(0x7f0000000780)="a547", 0x2}], 0x4}}], 0x2, 0x4000045)
fcntl$setstatus(r0, 0x4, 0x40800)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
ftruncate(r2, 0x2000009)
sendfile(r0, r2, 0x0, 0x7ffff004)

277.54µs ago: executing program 7 (id=2296):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x25, 0x55a8, &(0x7f00000014c0)="$eJzs3EtvG2UXAOAzTtP71y9CLNh1pAopkWqrTi+CFQVacRGtKi4LVuDYruXW9kSx64asumCJWPBPEEisWPIbWMASdogFiB1SkWcm0KQNtI3jqO3zSDNn5vj1mXdGlqUzYzmAZ9ZC+sdvSZyIIxExFxHHk8i3k3KJuBNxsRj7QkScjIjKPUtS5v9OHIyIoxFxYlK8qJmUL31xenzq/K9v//7t94cOHPvymx/29cSBffViRPRXi+3b/SJmnSLeKPONcTeP/XPjMq5uqdHPivzt9kpe4XZjc1wjj2c7xfhs9dZwEq/3Gs1J7HSv5/nVQXHA4bizWWfyhvRGYy3fb7VX8tgdZnnsbBTHXd8ovts2hqOiTqus90lePkajzVjk2+vt4nxWb+axORiV+aJu1mqvT+K4jOXhopn1Wvk8Vh7zIj8B3ukObq2n4/basJsN0vO1+ku1+oVqfS1rtUftc9VGv3XhXLrY6U2GVUftRv9iJ8s6vXatmfWX0sVOs1mt19PFS+2VbmOQ1uu1s7Uz1fNL5dbp9I2rH6S9Vro4ia91B7dG3d4wvZ6tpcU7ltLl2tmXl9JT9fS9K9fSa+9evnzl2vsfXfrw6qtX3nq9HHTftNLF5TPLy9X6mepyfekZOv9Py0k/wvknD07/9OPuLhsUdviAAbCz+/r/2N7/h/4fmLrd9P/9m+X+3vT/8TD9f0yz/5+0VPr//+5/K4/U/56YSv87H/r/PTx/2JXH6/8PTn0eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADM3M/zX72ZbywU+8fK/P/K1HPlfhIRlYi4+wBzcXBLzbmyzvwO4+e3zeG7JPIKk2McKpejEXGxXP78/15fBQAAAHh6fX3n5OdFt16sFvZ7QsxScdOmcvzjKdVLImJ+4ZcpVatMVs9PqVj++T4Q61Oqlt/AOjylYsUttwPTqvZQ5raEw/eEpAiVmU4HAACYia2dwGy7EAAAAGbps3999ZWZzYMZS2LzUebms+D8l/f/PBA8Mlnd3fbjfgAAAOBJkuz3BAAAAIA9l/f//v8PAAAAnm7F//8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBf7NzPjdpAFAfgZ4OB/FNQlHtayQ3KSAk55hgoIE1QAmkhDVADkXJICStYYc8ieRek1TLGWvR9ku2d8ernGeDyxtIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXfpbree/f375dWnObn+ZPLMBAAAATtlW63n9x7Rpv0v9H1LXp9QuIqKMiFO1+yBGrcxByqnO/H/1aAx/IuqEQ/84HW8j4ms67j52/SkAAADA7dosV7OmWm9OaQngX7+j4kqaRZvy/bdMeUVEVNP/mdLKw+lzprD69z2MH5nS6gWsSaawZsltePreKNdD2gaty8NMFvWXWLfKbp4LAAD0qV0JnKlCAAAAuAHf+x4A1/C0tC+Op+N7xnFzSS8E37RaAAAAwCtU9D0AAAAAoHN1/d/N/n+TF+3/V9j/DwAAALJr9v8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgS9tqPd8sV7Nz9xfPzNntL5NvRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9+zPOwqEQBiEwd71ncnc/7DSoKGxSRUIH39jMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABvfveX/xNT40wy99pYeh5J1k6NrVNj79w4+sP4+jUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwsT8vKRACQRAFc8b/Tvr+h5UEPYMIEdDwqKIWDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBf97pf/E1PjTDJ32lg6HknWrhpbV429B42jB+Pt3wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwsW//vm1UcQDA3/lspylUhIAiEUAFdYCFpm5p6YoQKGLgT0CKUqcEXAptBlpFlCxsKHMXBAsSQkigsOV/6NxIXcrWIUOQmBiC7lf6nJgmpO05TT8f6fl9/Xx5P86Wla/fHQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQWX83vNIo4zR7GCviqu32xuJsVq9tqzOry3cms5LFyUjVeuz1+mZ/oL0aPzk+MbyJAAAAcFgc2/WItMrvQwh3WyvTWd0Yy/P/VnVMlvP/UHaVlG3b8/61jcUj5UuTVf7/x+/3XtwaaCzNx8k6nZvvdU/tnEpz38t8wj236xHN/Mznv72k+RvS+HDphfVWfj6T727der+dhyN1zBYA2I+TVV0G1f9DWd0Z5sQAeGo0o8S7yv/TseHOCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKAO60vhmSpOQgiTzftxZm1jcXZQ/c3yncnVspy7eXM57jProhVCmJvvdU/VuJaDqzqb1z+b6fW6V65eqzs4HkIY8NKNvf15Wk7/P49phxD6Wk68NKCfj/cw1rZ+dgTlxzPUew5Hs/XtenDS15LsOOHvbRaG8QGoK2iU78/jGGK09ve9P6g+e4++5//zXTLyaL6SAAA41FplyTLRu62V6awtGQ9h88f+/P+NKA59ef/mjaKleL4a5f/3Pjl3Ox4rzv87Na3vSTC1cOmLqavXrr81f2nmYvdi9/O3T3fe6Zw5f/bs+an8t5KpudDwiwkAAAAPoV2WOP8fHbD/fzSKwwP2/4st4SL///L7ztfxWKn8f6D7m37DngkAAMDTqL0VPf/a338lA45I2u3w1czCwpVO8bj1/HTxWOt092mkLHH+n44Pe1YAAABAHdaXkr79/wtRHB6w/x9f///szy//GveZFtcWXA4hdE/OXu5dqG85B1r/Tb8/pY/jRuV8oPawVwoAAMCwjJYl3v9vjWf5f2PrkodGCOHNEyH8U97DH/aY/6cffPtLPFZ8/f+ZWld58DQmivOR1xMhNCeGPSMAAAAOsyNlyZL9P1sr05/+dvSjtuv/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOr2bwAAAP//aR4tAA==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x9)
ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000000)=0x201)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x1, 0xc32a4cddd557707a)
fallocate(r1, 0x0, 0x0, 0x9000f4)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0xbff4, 0x100000002})
write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x119)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
symlink(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./file0\x00')

0s ago: executing program 3 (id=2297):
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x10000}, 0x0)
r0 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0)
read$msr(r1, &(0x7f0000002400)=""/102400, 0x19000)
r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
writev(r2, &(0x7f0000000180)=[{&(0x7f0000000140)='2', 0x1}], 0x1)

kernel console output (not intermixed with test programs):

104 bytes leftover after parsing attributes in process `syz.4.562'.
[  164.167042][ T7784] loop5: detected capacity change from 0 to 1764
[  164.816912][ T7802] loop4: detected capacity change from 0 to 8
[  164.891272][ T7802] SQUASHFS error: Unable to read inode 0x11f
[  165.336661][ T7814] block device autoloading is deprecated and will be removed.
[  165.357583][   T27] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  165.368045][ T7813] md2: using deprecated bitmap file support
[  165.374643][ T7813] md2: error: bitmap file must be a regular file
[  165.567396][   T27] usb 3-1: Using ep0 maxpacket: 32
[  165.613413][   T27] usb 3-1: config 0 has an invalid interface number: 12 but max is 0
[  165.647376][   T27] usb 3-1: config 0 has no interface number 0
[  165.653635][   T27] usb 3-1: config 0 interface 12 has no altsetting 0
[  165.707461][   T27] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  165.716558][   T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  165.767505][   T27] usb 3-1: Product: syz
[  165.771722][   T27] usb 3-1: Manufacturer: syz
[  165.776346][   T27] usb 3-1: SerialNumber: syz
[  165.823413][ T7819] netlink: 'syz.5.579': attribute type 12 has an invalid length.
[  165.823566][   T27] usb 3-1: config 0 descriptor??
[  165.879296][   T27] f81534 3-1:0.12: required endpoints missing
[  166.225434][  T787] usb 3-1: USB disconnect, device number 6
[  167.151580][ T7827] loop5: detected capacity change from 0 to 32768
[  167.191569][ T7827] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by syz.5.582 (7827)
[  167.221858][ T7827] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  167.245047][ T7827] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm
[  167.257702][ T7827] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_LZO (0x8)
[  167.277498][ T7827] BTRFS info (device loop5): use lzo compression, level 0
[  167.296341][ T7827] BTRFS info (device loop5): max_inline at 0
[  167.310221][ T7827] BTRFS info (device loop5): using free space tree
[  167.489183][ T7827] BTRFS info (device loop5): enabling ssd optimizations
[  167.504182][ T7853] loop4: detected capacity change from 0 to 1024
[  167.524145][ T7827] BTRFS info (device loop5): auto enabling async discard
[  167.550084][ T7853] EXT4-fs: Ignoring removed oldalloc option
[  167.610323][ T7853] EXT4-fs: Ignoring removed bh option
[  167.633150][ T7853] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  167.698249][ T7853] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  167.713960][ T7827] BTRFS error (device loop5: state M): unrecognized mount option '����������0x0000000000000000��18446744073709551615'
[  167.882818][   T28] audit: type=1804 audit(1770342648.708:13): pid=7853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.587" name="/newroot/75/bus/bus" dev="loop4" ino=18 res=1 errno=0
[  168.242788][ T7873] 0x00000000000f-0x00000000ff1e : ""
[  168.288721][ T7873] ftl_cs: FTL header corrupt!
[  168.513091][ T6366] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  168.575953][ T6988] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  169.506904][   T28] audit: type=1326 audit(1770342650.328:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7899 comm="syz.3.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff380b9aeb9 code=0x7ffc0000
[  169.553668][   T28] audit: type=1326 audit(1770342650.328:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7899 comm="syz.3.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff380b9aeb9 code=0x7ffc0000
[  169.606977][   T28] audit: type=1326 audit(1770342650.358:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7899 comm="syz.3.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7ff380b9aeb9 code=0x7ffc0000
[  169.641293][   T28] audit: type=1326 audit(1770342650.358:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7899 comm="syz.3.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff380b9aeb9 code=0x7ffc0000
[  169.698438][   T28] audit: type=1326 audit(1770342650.358:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7899 comm="syz.3.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7ff380b9aeb9 code=0x7ffc0000
[  169.743012][   T28] audit: type=1326 audit(1770342650.358:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7899 comm="syz.3.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff380b9aeb9 code=0x7ffc0000
[  169.792896][   T28] audit: type=1326 audit(1770342650.358:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7899 comm="syz.3.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7ff380b9aeb9 code=0x7ffc0000
[  169.815619][   T28] audit: type=1326 audit(1770342650.358:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7899 comm="syz.3.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff380b94cd7 code=0x7ffc0000
[  169.822935][ T7888] lo: entered promiscuous mode
[  169.845493][ T7888] lo: entered allmulticast mode
[  169.862421][   T28] audit: type=1326 audit(1770342650.358:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7899 comm="syz.3.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff380b3c2d9 code=0x7ffc0000
[  171.744981][ T7933] netlink: 8 bytes leftover after parsing attributes in process `syz.3.611'.
[  171.965524][ T7935] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  173.897691][ T5847] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  174.161589][ T5847] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  174.189413][ T5847] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  174.205575][ T5847] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  174.218251][ T5847] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  174.228475][ T5847] usb 4-1: Manufacturer: syz
[  174.238801][ T5847] usb 4-1: config 0 descriptor??
[  174.433044][ T7970] netlink: 8 bytes leftover after parsing attributes in process `syz.5.622'.
[  174.443364][ T7970] netlink: 4 bytes leftover after parsing attributes in process `syz.5.622'.
[  174.523684][ T7970] 8021q: adding VLAN 0 to HW filter on device bond0
[  174.548838][ T7970] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  174.666568][ T5847] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0
[  174.717748][ T5847] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0
[  174.724613][ T5847] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0
[  174.777052][ T5847] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0
[  174.787251][ T5847] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0
[  174.798923][ T5847] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0
[  174.805772][ T5847] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0
[  174.806438][ T7980] loop5: detected capacity change from 0 to 128
[  174.871383][ T7980] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  174.871430][ T5847] pyra 0003:1E7D:2CF6.0001: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0
[  174.894220][ T7980] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  175.395976][ T6988] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  176.159497][  T787] usb 6-1: new full-speed USB device number 2 using dummy_hcd
[  176.222862][ T5847] pyra 0003:1E7D:2CF6.0001: couldn't init struct pyra_device
[  176.244733][ T5847] pyra 0003:1E7D:2CF6.0001: couldn't install mouse
[  176.289632][ T5847] pyra: probe of 0003:1E7D:2CF6.0001 failed with error -71
[  176.322190][ T5847] usb 4-1: USB disconnect, device number 4
[  176.372685][  T787] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  176.415226][  T787] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  176.450118][  T787] usb 6-1: Product: syz
[  176.454381][  T787] usb 6-1: Manufacturer: syz
[  176.459271][  T787] usb 6-1: SerialNumber: syz
[  176.474916][  T787] usb 6-1: config 0 descriptor??
[  176.491930][  T787] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  176.551233][ T8000] netlink: 8 bytes leftover after parsing attributes in process `syz.2.633'.
[  176.621770][ T7998] fido_id[7998]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  176.897025][ T8004] loop2: detected capacity change from 0 to 256
[  176.967970][ T8004] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  176.990465][ T8006] loop3: detected capacity change from 0 to 1024
[  177.020685][ T8006] EXT4-fs: Ignoring removed nobh option
[  177.094812][ T8006] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  177.180635][ T8006] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4047: comm syz.3.636: Allocating blocks 385-513 which overlap fs metadata
[  177.384071][ T8006] EXT4-fs (loop3): pa ffff8880227d40e8: logic 16, phys. 129, len 24
[  177.393151][ T8006] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5388: group 0, free 0, pa_free 8
[  177.429958][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  177.907442][ T5813] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  178.157383][ T5813] usb 4-1: Using ep0 maxpacket: 8
[  178.165033][ T5813] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  178.184359][ T5813] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  178.208211][ T5813] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  178.227434][ T5813] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  178.247131][    T9] IPVS: starting estimator thread 0...
[  178.267617][ T8029] tipc: Started in network mode
[  178.272540][ T8029] tipc: Node identity ac1414aa, cluster identity 4711
[  178.289346][ T5813] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  178.307777][ T5813] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  178.325908][  T787] gspca_stk1135: reg_w 0x200 err -71
[  178.347542][  T787] gspca_stk1135: serial bus timeout: status=0x00
[  178.353208][ T8029] tipc: Enabled bearer <udp:s>, priority 10
[  178.362635][ T8030] IPVS: using max 26 ests per chain, 62400 per kthread
[  178.375134][  T787] gspca_stk1135: Sensor write failed
[  178.385976][  T787] gspca_stk1135: serial bus timeout: status=0x00
[  178.407400][  T787] gspca_stk1135: Sensor write failed
[  178.423175][  T787] gspca_stk1135: serial bus timeout: status=0x00
[  178.432332][  T787] gspca_stk1135: Sensor read failed
[  178.450209][  T787] gspca_stk1135: serial bus timeout: status=0x00
[  178.469567][  T787] gspca_stk1135: Sensor read failed
[  178.487671][  T787] gspca_stk1135: Detected sensor type unknown (0x0)
[  178.494337][  T787] gspca_stk1135: serial bus timeout: status=0x00
[  178.528623][  T787] gspca_stk1135: Sensor read failed
[  178.542416][  T787] gspca_stk1135: serial bus timeout: status=0x00
[  178.569401][  T787] gspca_stk1135: Sensor read failed
[  178.576268][ T8034] netlink: 12 bytes leftover after parsing attributes in process `syz.2.649'.
[  178.587136][ T5813] usb 4-1: GET_CAPABILITIES returned 0
[  178.595638][  T787] gspca_stk1135: serial bus timeout: status=0x00
[  178.598459][ T5813] usbtmc 4-1:16.0: can't read capabilities
[  178.606757][  T787] gspca_stk1135: Sensor write failed
[  178.636290][  T787] gspca_stk1135: serial bus timeout: status=0x00
[  178.664144][  T787] gspca_stk1135: Sensor write failed
[  178.693871][  T787] stk1135: probe of 6-1:0.0 failed with error -71
[  178.716291][  T787] usb 6-1: USB disconnect, device number 2
[  178.718858][ T8034] 8021q: adding VLAN 0 to HW filter on device bond2
[  178.735511][ T8038] macvlan2: entered promiscuous mode
[  178.741166][ T8038] macvlan2: entered allmulticast mode
[  178.749842][ T8038] bond2: entered promiscuous mode
[  178.757061][ T8038] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  178.780238][ T8038] bond2: left promiscuous mode
[  178.854085][    C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  178.925376][ T5813] usb 4-1: USB disconnect, device number 5
[  179.032843][ T8041] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  179.128102][   T28] kauditd_printk_skb: 70 callbacks suppressed
[  179.128115][   T28] audit: type=1326 audit(1770342659.958:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8045 comm="syz.2.652" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f919df9aeb9 code=0x0
[  179.327995][ T5813] tipc: Node number set to 2886997162
[  181.567743][ T8092] netlink: 12 bytes leftover after parsing attributes in process `syz.2.665'.
[  182.402504][ T8105] loop2: detected capacity change from 0 to 2048
[  182.450461][ T8105] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  182.979316][ T8116] loop4: detected capacity change from 0 to 8
[  183.239930][ T8119] netlink: 'syz.4.677': attribute type 10 has an invalid length.
[  183.286331][ T8119] 8021q: adding VLAN 0 to HW filter on device bond0
[  183.321199][ T8119] team0: Port device bond0 added
[  183.373633][ T8119] netlink: 4 bytes leftover after parsing attributes in process `syz.4.677'.
[  183.566085][ T8119] team0 (unregistering): Port device team_slave_0 removed
[  183.626330][ T8119] team0 (unregistering): Port device team_slave_1 removed
[  183.678906][ T8119] team0 (unregistering): Port device bond0 removed
[  183.780119][ T5771] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  183.798918][ T5771] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  183.808661][ T5771] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  183.818097][ T5771] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  183.826053][ T5771] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  183.835100][ T5771] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  184.055616][ T8129] chnl_net:caif_netlink_parms(): no params data found
[  184.178579][ T8129] bridge0: port 1(bridge_slave_0) entered blocking state
[  184.185899][ T8129] bridge0: port 1(bridge_slave_0) entered disabled state
[  184.194959][ T8129] bridge_slave_0: entered allmulticast mode
[  184.214258][ T8129] bridge_slave_0: entered promiscuous mode
[  184.240301][ T8129] bridge0: port 2(bridge_slave_1) entered blocking state
[  184.254180][ T8129] bridge0: port 2(bridge_slave_1) entered disabled state
[  184.262454][ T8129] bridge_slave_1: entered allmulticast mode
[  184.276527][ T8129] bridge_slave_1: entered promiscuous mode
[  184.365626][ T8129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  184.400083][ T8129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  184.504145][ T8129] team0: Port device team_slave_0 added
[  184.523962][ T8129] team0: Port device team_slave_1 added
[  184.627212][ T8129] batman_adv: batadv0: Adding interface: batadv_slave_0
[  184.645115][ T8129] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  184.713964][ T8129] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  184.750481][ T8129] batman_adv: batadv0: Adding interface: batadv_slave_1
[  184.763366][ T8129] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  184.796125][ T8129] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  184.916583][ T8129] hsr_slave_0: entered promiscuous mode
[  184.928768][ T8129] hsr_slave_1: entered promiscuous mode
[  184.935376][ T8129] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  184.943961][ T8129] Cannot create hsr debugfs directory
[  185.745606][ T8129] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  185.805559][ T8129] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  185.865189][ T8129] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  185.914842][ T8129] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  185.953596][   T51] Bluetooth: hci1: command tx timeout
[  186.056704][ T8159] loop4: detected capacity change from 0 to 131072
[  186.090165][ T8159] F2FS-fs (loop4): invalid crc value
[  186.128070][ T8159] F2FS-fs (loop4): Found nat_bits in checkpoint
[  186.194583][ T8159] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  186.428316][ T8129] 8021q: adding VLAN 0 to HW filter on device bond0
[  186.484478][ T8129] 8021q: adding VLAN 0 to HW filter on device team0
[  186.552998][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  186.560245][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  186.591561][   T42] bridge0: port 2(bridge_slave_1) entered blocking state
[  186.598783][   T42] bridge0: port 2(bridge_slave_1) entered forwarding state
[  186.836111][ T8129] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  187.437254][ T8129] 8021q: adding VLAN 0 to HW filter on device batadv0
[  187.967614][   T51] Bluetooth: hci1: command tx timeout
[  188.396685][ T8129] veth0_vlan: entered promiscuous mode
[  188.450336][ T8129] veth1_vlan: entered promiscuous mode
[  188.516198][ T8129] veth0_macvtap: entered promiscuous mode
[  188.570787][ T8129] veth1_macvtap: entered promiscuous mode
[  188.651237][ T8129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  188.682924][ T8129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  188.717751][ T8129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  188.747969][ T8129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  188.769140][ T8129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  188.787582][ T8129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  188.814500][ T8129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  188.837476][ T8129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  188.862663][ T8129] batman_adv: batadv0: Interface activated: batadv_slave_0
[  188.919036][ T8129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  188.960447][ T8129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  188.978089][ T8129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  189.000774][ T8129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  189.022317][ T8129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  189.047001][ T8129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  189.077686][ T8129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  189.107413][ T8129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  189.135253][ T8129] batman_adv: batadv0: Interface activated: batadv_slave_1
[  189.160160][ T8129] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  189.171711][ T8129] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  189.182833][ T8129] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  189.193219][ T8129] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  189.373724][ T1083] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  189.435398][ T1083] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  189.505966][ T3424] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  189.528960][ T3424] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  189.843705][ T8202] loop2: detected capacity change from 0 to 40427
[  189.879912][ T8202] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  189.887956][ T8202] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  189.903082][ T8202] F2FS-fs (loop2): Found nat_bits in checkpoint
[  190.058892][ T5766] Bluetooth: hci1: command tx timeout
[  190.097707][ T8202] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  190.104818][ T8202] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  191.494081][ T5085] Bluetooth: hci3: command 0x0406 tx timeout
[  191.501419][ T5766] Bluetooth: hci2: command 0x0406 tx timeout
[  192.092843][ T8240] loop4: detected capacity change from 0 to 2048
[  192.127539][   T51] Bluetooth: hci1: command tx timeout
[  192.153151][ T8240] UDF-fs: warning (device loop4): udf_fill_super: No fileset found
[  192.462459][ T8248] netlink: 'syz.3.712': attribute type 1 has an invalid length.
[  192.838613][ T8251] bond3: (slave veth5): Enslaving as an active interface with a down link
[  192.944373][ T8252] bond3 (unregistering): (slave veth5): Releasing active interface
[  193.021819][ T8252] bond3 (unregistering): Released all slaves
[  193.835463][ T8279] netlink: 12 bytes leftover after parsing attributes in process `syz.4.722'.
[  194.199454][ T8285] netlink: 16 bytes leftover after parsing attributes in process `syz.3.724'.
[  194.478504][ T8293] netlink: 8 bytes leftover after parsing attributes in process `syz.4.728'.
[  194.541080][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  194.547586][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  194.567475][ T8296] netlink: 'syz.2.729': attribute type 1 has an invalid length.
[  194.694552][ T8296] bond3: entered promiscuous mode
[  194.770964][ T8296] 8021q: adding VLAN 0 to HW filter on device bond3
[  194.917875][ T8299] bond3: (slave bridge2): making interface the new active one
[  194.925560][ T8299] bridge2: entered promiscuous mode
[  194.944944][ T8299] bridge2: left promiscuous mode
[  195.073636][ T8307] netlink: 8 bytes leftover after parsing attributes in process `syz.6.732'.
[  195.104642][ T8308] netlink: 8 bytes leftover after parsing attributes in process `syz.6.732'.
[  195.465243][ T8316] netlink: 4 bytes leftover after parsing attributes in process `syz.6.735'.
[  195.533853][ T8316] netlink: 12 bytes leftover after parsing attributes in process `syz.6.735'.
[  195.785956][ T8322] loop2: detected capacity change from 0 to 1024
[  195.815696][ T8322] EXT4-fs: inline encryption not supported
[  195.842677][ T8322] EXT4-fs: Ignoring removed i_version option
[  195.863203][ T8322] EXT4-fs: Mount option(s) incompatible with ext3
[  196.055823][ T8326] netlink: 8 bytes leftover after parsing attributes in process `syz.6.740'.
[  196.080441][ T8330] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.741'.
[  197.948154][   T28] audit: type=1326 audit(1770342678.778:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8342 comm="syz.3.746" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff380b9aeb9 code=0x0
[  200.627436][    T8] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  200.668746][ T8414] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  200.837586][    T8] usb 4-1: Using ep0 maxpacket: 8
[  200.855587][    T8] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  200.882047][    T8] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  200.897686][    T8] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  200.918350][    T8] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  200.947474][    T8] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  200.993493][    T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  201.015415][ T8414] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.192834][ T8414] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.299929][    T8] usb 4-1: GET_CAPABILITIES returned 0
[  201.305507][    T8] usbtmc 4-1:16.0: can't read capabilities
[  201.374165][ T8414] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.548251][    C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  201.609107][ T5847] usb 4-1: USB disconnect, device number 6
[  201.681030][ T8414] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  201.763200][ T8414] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  201.802315][ T8414] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  201.837125][ T8414] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  202.741591][ T8447] loop2: detected capacity change from 0 to 512
[  202.829224][ T7950] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  203.130422][ T8452] sch_tbf: burst 32852 is lower than device lo mtu (65550) !
[  204.573401][ T8485] netlink: 24 bytes leftover after parsing attributes in process `syz.4.800'.
[  204.826694][   T28] audit: type=1800 audit(1770342941.639:95): pid=8469 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.792" name="file0" dev="fuse" ino=0 res=0 errno=0
[  205.679593][ T8514] loop4: detected capacity change from 0 to 128
[  205.759128][ T8514] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  205.853871][ T8514] ext4 filesystem being mounted at /124/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  205.887537][ T5774] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  205.909945][ T8518] netlink: 'syz.3.812': attribute type 39 has an invalid length.
[  205.995781][ T8514] EXT4-fs (loop4): shut down requested (1)
[  206.027497][ T8514] fscrypt (loop4, inode 12): Error -5 getting encryption context
[  206.069922][ T6366] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  206.093178][ T5774] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  206.121643][ T5774] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  206.134158][ T5774] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  206.151147][ T5774] usb 3-1: Product: syz
[  206.155389][ T5774] usb 3-1: Manufacturer: syz
[  206.194353][ T5774] usb 3-1: SerialNumber: syz
[  206.444584][ T5774] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  206.711078][ T5774] usb 3-1: USB disconnect, device number 7
[  206.734392][ T5774] usblp0: removed
[  207.119387][ T8524] loop6: detected capacity change from 0 to 32768
[  207.704902][ T8524] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  207.979176][ T8524] XFS (loop6): Ending clean mount
[  208.025659][ T8524] XFS (loop6): Quotacheck needed: Please wait.
[  208.229556][ T8524] XFS (loop6): Quotacheck: Done.
[  208.827546][  T788] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  209.029249][  T788] usb 7-1: config 0 has no interfaces?
[  209.054585][  T788] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  209.080681][  T788] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  209.098119][  T788] usb 7-1: Product: syz
[  209.102437][  T788] usb 7-1: Manufacturer: syz
[  209.107059][  T788] usb 7-1: SerialNumber: syz
[  209.149206][  T788] usb 7-1: config 0 descriptor??
[  209.864335][ T8561] loop4: detected capacity change from 0 to 32768
[  209.909088][ T8561] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.824 (8561)
[  209.985178][ T8561] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  210.007785][ T8561] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  210.027714][ T8561] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  210.037251][ T8561] BTRFS info (device loop4): use zstd compression, level 3
[  210.087754][ T8561] BTRFS info (device loop4): using free space tree
[  210.268847][ T8561] BTRFS info (device loop4): enabling ssd optimizations
[  210.278883][ T8561] BTRFS info (device loop4): auto enabling async discard
[  210.721107][   T28] audit: type=1804 audit(1770342947.549:96): pid=8561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.824" name="/newroot/129/file0/bus" dev="loop4" ino=263 res=1 errno=0
[  210.921325][  T787] usb 7-1: USB disconnect, device number 2
[  210.943561][ T8604] BTRFS warning (device loop4): failed to trim 2 block group(s), last error -512
[  211.025345][ T8129] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  211.095358][ T8604] BTRFS warning (device loop4): failed to trim 1 device(s), last error -512
[  211.193614][ T6366] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  211.305065][ T8599] loop3: detected capacity change from 0 to 40427
[  211.349917][ T8599] F2FS-fs (loop3): Invalid Fs Meta Ino: node(3) meta(0) root(3)
[  211.388334][ T8599] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[  211.448052][ T8599] F2FS-fs (loop3): invalid crc value
[  211.518171][ T8599] F2FS-fs (loop3): Found nat_bits in checkpoint
[  211.709488][ T8614] netlink: 4 bytes leftover after parsing attributes in process `syz.6.835'.
[  211.722763][ T8599] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0
[  211.737519][ T8599] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  211.951378][ T8614] bond0: (slave bond_slave_0): Releasing backup interface
[  212.217788][ T8624] netlink: 4 bytes leftover after parsing attributes in process `syz.4.841'.
[  212.227816][  T787] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  212.255456][ T8624] veth0_macvtap: left promiscuous mode
[  212.431867][  T787] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  212.474680][  T787] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  212.510835][ T8630] netlink: 4 bytes leftover after parsing attributes in process `syz.6.850'.
[  212.518481][  T787] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  212.520046][ T8630] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  212.546575][  T787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  212.579744][  T787] usb 4-1: SerialNumber: syz
[  212.699099][ T8630] batman_adv: batadv0: Removing interface: batadv_slave_1
[  212.830929][  T787] usb 4-1: 0:2 : does not exist
[  212.915950][  T787] usb 4-1: USB disconnect, device number 7
[  213.026199][ T7950] udevd[7950]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  213.091428][ T8638] loop6: detected capacity change from 0 to 4096
[  213.111446][ T8638] ext2: Bad value for 'max_batch_time'
[  213.156268][ T5758] I/O error, dev loop6, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  213.756218][ T5773] syz-executor: attempt to access beyond end of device
[  213.756218][ T5773] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  213.786079][ T5773] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  213.965032][ T8654] netlink: 8 bytes leftover after parsing attributes in process `syz.6.853'.
[  214.529546][ T8672] netlink: 996 bytes leftover after parsing attributes in process `syz.2.859'.
[  215.051276][ T8678] kvm: emulating exchange as write
[  215.391092][ T8691] netlink: 16 bytes leftover after parsing attributes in process `syz.4.865'.
[  215.428690][ T8691] netlink: 28 bytes leftover after parsing attributes in process `syz.4.865'.
[  215.538233][ T8695] netlink: 16 bytes leftover after parsing attributes in process `syz.6.867'.
[  215.550294][ T8695] netlink: 8 bytes leftover after parsing attributes in process `syz.6.867'.
[  215.748933][ T8700] netlink: 14 bytes leftover after parsing attributes in process `syz.6.870'.
[  216.057621][ T8700] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  216.105990][ T8700] bond0 (unregistering): Released all slaves
[  216.730311][ T8727] loop2: detected capacity change from 0 to 128
[  216.798670][ T8727] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  216.863550][ T8727] ext4 filesystem being mounted at /230/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  217.036923][ T5767] EXT4-fs error (device loop2): ext4_readdir:223: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024
[  217.076070][   T28] audit: type=1326 audit(1770342953.899:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8735 comm="syz.3.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff380b9aeb9 code=0x7ffc0000
[  217.132345][ T5767] EXT4-fs error (device loop2): ext4_readdir:223: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192
[  217.167212][   T28] audit: type=1326 audit(1770342953.899:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8735 comm="syz.3.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff380b9aeb9 code=0x7ffc0000
[  217.168182][ T5767] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 1: comm syz-executor: Directory block failed checksum
[  217.246986][   T28] audit: type=1326 audit(1770342953.939:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8735 comm="syz.3.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff380b9aeb9 code=0x7ffc0000
[  217.282783][ T5767] EXT4-fs error (device loop2): ext4_readdir:223: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024
[  217.283728][   T28] audit: type=1326 audit(1770342953.939:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8735 comm="syz.3.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff380b9aeb9 code=0x7ffc0000
[  217.327022][   T28] audit: type=1326 audit(1770342953.939:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8735 comm="syz.3.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff380b9aeb9 code=0x7ffc0000
[  217.347457][ T5767] EXT4-fs error (device loop2): ext4_readdir:223: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192
[  217.358983][   T28] audit: type=1326 audit(1770342953.939:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8735 comm="syz.3.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7ff380b9aeb9 code=0x7ffc0000
[  217.394283][   T28] audit: type=1326 audit(1770342953.939:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8735 comm="syz.3.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff380b9aeb9 code=0x7ffc0000
[  217.394632][ T5767] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 1: comm syz-executor: Directory block failed checksum
[  217.425056][   T28] audit: type=1326 audit(1770342953.939:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8735 comm="syz.3.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff380b9aeb9 code=0x7ffc0000
[  217.477159][   T28] audit: type=1326 audit(1770342953.939:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8735 comm="syz.3.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff380b9aeb9 code=0x7ffc0000
[  217.502578][ T5767] EXT4-fs error (device loop2): ext4_readdir:223: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024
[  217.530401][   T28] audit: type=1326 audit(1770342953.939:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8735 comm="syz.3.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7ff380b9aeb9 code=0x7ffc0000
[  217.581214][ T5767] EXT4-fs error (device loop2): ext4_readdir:223: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192
[  217.739732][ T5767] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 1: comm syz-executor: Directory block failed checksum
[  217.763863][ T8747] netlink: 16 bytes leftover after parsing attributes in process `syz.3.885'.
[  217.821828][ T5767] EXT4-fs error (device loop2): ext4_readdir:223: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024
[  219.316754][ T6974] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  219.625902][ T8761] loop3: detected capacity change from 0 to 32768
[  221.598611][ T8775] loop3: detected capacity change from 0 to 128
[  221.644115][ T8775] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  221.699784][ T8775] ext4 filesystem being mounted at /238/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  221.734405][ T8779] syz_tun: entered allmulticast mode
[  221.790622][ T8776] syz_tun: left allmulticast mode
[  221.819673][ T8775] EXT4-fs (loop3): shut down requested (2)
[  221.829478][ T8775] fscrypt (loop3, inode 12): Error -5 getting encryption context
[  221.952049][ T5773] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  222.207440][ T5771] Bluetooth: hci0: command 0x0406 tx timeout
[  222.239970][ T5771] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  222.251255][ T5771] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  222.263745][ T5771] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  222.287813][ T5771] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  222.301084][ T5771] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  222.309842][ T5771] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  222.739110][ T8795] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[  222.764943][ T8795] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off.
[  222.771968][ T8785] chnl_net:caif_netlink_parms(): no params data found
[  222.790976][ T8795] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  222.829736][ T8795] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  222.850896][ T8795] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  222.971722][ T8785] bridge0: port 1(bridge_slave_0) entered blocking state
[  222.986451][ T8785] bridge0: port 1(bridge_slave_0) entered disabled state
[  223.008810][ T8785] bridge_slave_0: entered allmulticast mode
[  223.028092][ T8785] bridge_slave_0: entered promiscuous mode
[  223.045480][ T8785] bridge0: port 2(bridge_slave_1) entered blocking state
[  223.055897][ T8785] bridge0: port 2(bridge_slave_1) entered disabled state
[  223.073717][ T8785] bridge_slave_1: entered allmulticast mode
[  223.085237][ T8785] bridge_slave_1: entered promiscuous mode
[  223.143629][ T8785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  223.156675][ T8785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  223.231767][ T8785] team0: Port device team_slave_0 added
[  223.241125][ T8785] team0: Port device team_slave_1 added
[  223.293820][ T8785] batman_adv: batadv0: Adding interface: batadv_slave_0
[  223.306170][ T8785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  223.376810][ T8785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  223.429755][ T8785] batman_adv: batadv0: Adding interface: batadv_slave_1
[  223.436740][ T8785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  223.470843][ T8785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  223.538938][ T8785] hsr_slave_0: entered promiscuous mode
[  223.553186][ T8785] hsr_slave_1: entered promiscuous mode
[  223.577869][ T8785] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  223.594344][ T8785] Cannot create hsr debugfs directory
[  223.657422][ T5774] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  223.835305][ T8785] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  223.842280][ T5774] usb 4-1: Using ep0 maxpacket: 16
[  223.852586][ T5774] usb 4-1: config 0 has no interfaces?
[  223.862492][ T8785] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  223.869686][ T5774] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  223.879731][ T5774] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  223.893748][ T8785] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  223.908496][ T5774] usb 4-1: config 0 descriptor??
[  223.914442][ T8785] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  224.021182][ T8785] 8021q: adding VLAN 0 to HW filter on device bond0
[  224.041553][ T8785] 8021q: adding VLAN 0 to HW filter on device team0
[  224.056390][ T1305] bridge0: port 1(bridge_slave_0) entered blocking state
[  224.063609][ T1305] bridge0: port 1(bridge_slave_0) entered forwarding state
[  224.073038][ T5813] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  224.103321][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[  224.110493][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[  224.179402][ T8804] ref_ctr_offset mismatch. inode: 0x511 offset: 0x0 ref_ctr_offset(old): 0x2090100 ref_ctr_offset(new): 0x0
[  224.202214][ T5774] usb 4-1: USB disconnect, device number 8
[  224.270444][ T5813] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  224.297786][ T5813] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  224.335555][ T5813] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  224.356420][ T5813] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  224.366856][ T5813] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  224.379212][ T5766] Bluetooth: hci2: command tx timeout
[  224.391256][ T5813] usb 5-1: config 0 descriptor??
[  224.531153][ T8785] 8021q: adding VLAN 0 to HW filter on device batadv0
[  224.812149][ T5813] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[  224.847781][ T5813] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[  224.875530][ T5813] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving
[  224.925282][ T5813] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  225.075819][ T8785] veth0_vlan: entered promiscuous mode
[  225.122608][ T8785] veth1_vlan: entered promiscuous mode
[  225.252207][ T8785] veth0_macvtap: entered promiscuous mode
[  225.265408][ T8785] veth1_macvtap: entered promiscuous mode
[  225.404973][ T3458] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  225.523584][ T5774] usb 5-1: USB disconnect, device number 3
[  225.619604][ T3458] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  225.639656][ T8785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  225.660329][ T8785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.672080][ T8785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  225.683033][ T8785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.693589][ T8785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  225.706072][ T8785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.716883][ T8785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  225.728460][ T8785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.738623][ T8785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  225.755411][ T8785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.769380][ T8785] batman_adv: batadv0: Interface activated: batadv_slave_0
[  225.812728][ T8785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  225.835688][ T8785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.859258][ T8785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  225.876569][ T8785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.889830][ T8785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  225.901183][ T8785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.931204][ T8785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  225.945068][ T8785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.963114][ T8785] batman_adv: batadv0: Interface activated: batadv_slave_1
[  225.996220][ T3458] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.025235][ T8785] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  226.036403][ T8785] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  226.045479][ T8785] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  226.083563][ T8785] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  226.187831][ T3458] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.227886][  T787] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  226.417617][  T787] usb 7-1: Using ep0 maxpacket: 8
[  226.432110][  T787] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  226.442906][  T787] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  226.451527][ T5766] Bluetooth: hci2: command tx timeout
[  226.468996][  T787] usb 7-1: Product: syz
[  226.473208][  T787] usb 7-1: Manufacturer: syz
[  226.482036][  T787] usb 7-1: SerialNumber: syz
[  226.489940][  T787] usb 7-1: config 0 descriptor??
[  226.595422][ T8857] bridge0: port 2(bridge_slave_1) entered disabled state
[  226.603086][ T8857] bridge0: port 1(bridge_slave_0) entered disabled state
[  226.714614][  T787] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  227.030307][ T8857] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  227.115198][ T8857] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  227.653288][ T8857] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  227.662486][ T8857] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  227.671887][ T8857] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  227.681755][ T8857] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  227.727504][  T787] dvb_usb_rtl28xxu: probe of 7-1:0.0 failed with error -32
[  227.991394][ T5806] usb 7-1: USB disconnect, device number 3
[  228.074239][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  228.092483][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  228.151343][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  228.186914][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  228.531223][ T5766] Bluetooth: hci2: command tx timeout
[  228.795832][ T8896] netlink: 'syz.6.927': attribute type 1 has an invalid length.
[  229.032731][ T8896] 8021q: adding VLAN 0 to HW filter on device bond0
[  230.607574][ T5766] Bluetooth: hci2: command tx timeout
[  230.990512][ T3458] hsr_slave_0: left promiscuous mode
[  231.010088][ T3458] hsr_slave_1: left promiscuous mode
[  231.050705][ T3458] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  231.074650][ T3458] batman_adv: batadv0: Removing interface: batadv_slave_0
[  231.098703][ T3458] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  231.128985][ T3458] batman_adv: batadv0: Removing interface: batadv_slave_1
[  231.156315][ T3458] bridge_slave_1: left allmulticast mode
[  231.174596][ T3458] bridge_slave_1: left promiscuous mode
[  231.188614][ T3458] bridge0: port 2(bridge_slave_1) entered disabled state
[  231.212342][ T3458] bridge_slave_0: left allmulticast mode
[  231.224414][ T3458] bridge_slave_0: left promiscuous mode
[  231.231521][ T3458] bridge0: port 1(bridge_slave_0) entered disabled state
[  231.311450][ T3458] veth1_macvtap: left promiscuous mode
[  231.320943][ T3458] veth0_macvtap: left promiscuous mode
[  231.332433][ T3458] veth1_vlan: left promiscuous mode
[  231.341338][ T3458] veth0_vlan: left promiscuous mode
[  231.576020][ T3458] bond1 (unregistering): Released all slaves
[  232.929524][ T3458] team0 (unregistering): Port device team_slave_1 removed
[  233.028882][ T3458] team0 (unregistering): Port device team_slave_0 removed
[  233.109464][ T3458] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  233.210212][ T3458] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  233.731493][ T8995] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  233.836008][ T3458] bond0 (unregistering): Released all slaves
[  234.008318][ T8965] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  234.206010][ T8976] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  234.280618][ T8992] netlink: 52 bytes leftover after parsing attributes in process `syz.6.949'.
[  234.339454][ T8992] bridge0: port 2(bridge_slave_1) entered disabled state
[  234.348661][ T8992] bridge0: port 1(bridge_slave_0) entered disabled state
[  234.420311][ T8993] netlink: 76 bytes leftover after parsing attributes in process `syz.6.949'.
[  234.436452][ T8993] bridge0: port 2(bridge_slave_1) entered blocking state
[  234.443947][ T8993] bridge0: port 2(bridge_slave_1) entered forwarding state
[  234.451515][ T8993] bridge0: port 1(bridge_slave_0) entered blocking state
[  234.458738][ T8993] bridge0: port 1(bridge_slave_0) entered forwarding state
[  234.470470][ T8993] netlink: 52 bytes leftover after parsing attributes in process `syz.6.949'.
[  234.481172][ T8993] bridge0: port 2(bridge_slave_1) entered disabled state
[  234.488480][ T8993] bridge0: port 1(bridge_slave_0) entered disabled state
[  234.792198][ T8976] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  235.225432][ T8976] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  235.526237][ T9066] binder: 9062:9066 unknown command 0
[  235.710892][ T9066] binder: 9062:9066 ioctl c0306201 200000000080 returned -22
[  235.840326][ T8976] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  236.184162][ T9073] netlink: 12 bytes leftover after parsing attributes in process `syz.6.958'.
[  236.258397][ T9073] IPv6: addrconf: prefix option has invalid lifetime
[  236.310715][ T8976] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  236.375313][ T8976] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  236.411323][ T8976] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  236.458671][ T8976] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  236.551137][ T9086] netlink: 'syz.6.961': attribute type 4 has an invalid length.
[  236.639670][ T9087] netlink: 'syz.6.961': attribute type 4 has an invalid length.
[  236.915333][ T9094] pimreg: entered allmulticast mode
[  236.944707][ T9094] pimreg: left allmulticast mode
[  238.528599][ T9134] netlink: 8 bytes leftover after parsing attributes in process `syz.4.972'.
[  239.168555][ T9157] binder: 9155:9157 unknown command 0
[  239.177174][ T9157] binder: 9155:9157 ioctl c0306201 200000000080 returned -22
[  239.589995][ T9171] netlink: 4 bytes leftover after parsing attributes in process `syz.4.983'.
[  239.959493][ T9179] ref_ctr going negative. vaddr: 0x200000ffd000, curr val: -19135, delta: 1
[  239.982957][ T9179] ref_ctr increment failed for inode: 0x54 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888025b53900
[  240.589122][ T9198] netlink: 8 bytes leftover after parsing attributes in process `syz.6.989'.
[  241.027819][ T9212] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  245.109892][ T9313] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1009'.
[  245.962969][ T5766] Bluetooth: hci3: unexpected event for opcode 0x200a
[  246.072676][ T9330] loop4: detected capacity change from 0 to 764
[  246.518367][    T8] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  246.717691][    T8] usb 4-1: Using ep0 maxpacket: 16
[  246.747557][    T8] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=28.00
[  246.756651][    T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  246.778743][ T9339] 9pnet: Found fid 0 not clunked
[  246.781094][    T8] usb 4-1: config 0 descriptor??
[  246.808323][    T8] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected
[  246.829891][    T8] usb 4-1: Detected FT2233HP
[  247.119073][    T8] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  247.129977][    T8] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  247.151561][    T8] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  247.193473][    T8] usb 4-1: USB disconnect, device number 9
[  247.228441][    T8] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  247.273251][    T8] ftdi_sio 4-1:0.0: device disconnected
[  247.294991][ T9346] kvm: pic: non byte read
[  247.316318][ T9346] kvm: pic: non byte read
[  247.321403][ T9346] kvm: pic: non byte read
[  247.326282][ T9346] kvm: pic: non byte read
[  247.332036][ T9346] kvm: pic: non byte read
[  247.337083][ T9346] kvm: pic: single mode not supported
[  247.337489][ T9346] kvm: pic: level sensitive irq not supported
[  247.345537][ T9346] kvm: pic: non byte read
[  247.367644][ T9346] kvm: pic: non byte read
[  247.372287][ T9346] kvm: pic: non byte read
[  247.376918][ T9346] kvm: pic: non byte read
[  247.855837][ T9366] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  248.314733][ T9374] netlink: 'syz.6.1025': attribute type 1 has an invalid length.
[  248.446241][ T9376] bond1: entered promiscuous mode
[  248.557255][ T9376] bond1: entered allmulticast mode
[  248.579787][ T9376] 8021q: adding VLAN 0 to HW filter on device bond1
[  248.724244][ T9374] bridge1: entered promiscuous mode
[  248.761635][ T9374] bridge1: entered allmulticast mode
[  248.777067][ T9374] bond1: (slave bridge1): Enslaving as a backup interface with an up link
[  248.785937][   T59] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  248.907895][   T59] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  249.417674][   T27] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  249.642037][   T27] usb 7-1: Using ep0 maxpacket: 32
[  249.664691][   T27] usb 7-1: config 4 has an invalid descriptor of length 49, skipping remainder of the config
[  249.681491][ T9399] loop3: detected capacity change from 0 to 736
[  249.691358][   T27] usb 7-1: config 4 has 0 interfaces, different from the descriptor's value: 9
[  249.713139][   T27] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  249.727872][   T27] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  249.736158][   T27] usb 7-1: Product: syz
[  249.740917][   T27] usb 7-1: Manufacturer: syz
[  249.745940][   T27] usb 7-1: SerialNumber: syz
[  249.757910][ T7950] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  249.898245][ T8872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  250.019553][   T27] usb 7-1: USB disconnect, device number 4
[  250.217217][    T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  250.892272][ T9418] tipc: Enabled bearer <udp:syz2>, priority 10
[  250.928341][   T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  251.481337][ T9434] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1042'.
[  252.128115][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  252.139560][ T5806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  252.716524][ T8872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  252.830535][ T9451] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1046'.
[  253.250208][ T5806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  253.477801][ T9466] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  253.626581][ T9474] syz_tun: entered allmulticast mode
[  253.874188][ T9479] loop6: detected capacity change from 0 to 512
[  254.011860][ T9479] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  254.105830][ T9479] ext4 filesystem being mounted at /98/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  254.370946][ T8129] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  254.767574][ T8872] net_ratelimit: 18 callbacks suppressed
[  254.767587][ T9473] syz_tun: left allmulticast mode
[  254.767592][ T8872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  255.039156][ T9493] tipc: Failed to remove unknown binding: 66,0,0/2082390163:4025098794/4025098795
[  255.085838][ T9493] tipc: Failed to remove unknown binding: 66,0,0/2082390163:4025098794/4025098795
[  255.244100][ T9501] tipc: Failed to remove unknown binding: 66,0,0/2886997162:1652207514/1652207515
[  255.255550][ T9501] tipc: Failed to remove unknown binding: 66,0,0/2886997162:1652207514/1652207515
[  255.407071][ T9506] binder: 9504:9506 ioctl c0306201 2000000003c0 returned -14
[  255.443261][ T9507] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1062'.
[  255.828111][ T8872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  255.987147][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  255.994888][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  256.287556][ T5806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  256.668395][ T9547] Set syz0 is full, maxelem 0 reached
[  256.827924][ T9550] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1075'.
[  256.878406][ T8872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  257.095534][ T9556] netlink: 'syz.7.1077': attribute type 1 has an invalid length.
[  257.125147][ T9556] netlink: 16150 bytes leftover after parsing attributes in process `syz.7.1077'.
[  257.900822][ T8872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  258.153050][ T9577] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1081'.
[  258.198089][ T9577] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1081'.
[  258.226646][ T9577] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1081'.
[  258.250556][ T9577] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1081'.
[  259.177607][   T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  259.276387][ T9591] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  259.328775][    T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  259.377538][ T9597] binder: 9593:9597 unknown command 0
[  259.383577][ T9597] binder: 9593:9597 ioctl c0306201 200000000080 returned -22
[  259.412921][ T9591] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  259.784998][ T9595] net_ratelimit: 5 callbacks suppressed
[  259.785016][ T9595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  260.215413][   T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  260.448681][   T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  261.183575][ T9646] bridge0: entered promiscuous mode
[  261.191560][ T9646] bridge0: port 3(macvlan2) entered blocking state
[  261.199298][ T9646] bridge0: port 3(macvlan2) entered disabled state
[  261.206191][ T9646] macvlan2: entered allmulticast mode
[  261.212486][ T9646] bridge0: entered allmulticast mode
[  261.245310][ T9646] macvlan2: left allmulticast mode
[  261.251102][   T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  261.260279][ T9646] bridge0: left allmulticast mode
[  261.318163][ T9646] bridge0: left promiscuous mode
[  262.329582][   T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  262.397526][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  262.748997][ T9676] bridge_slave_0: left allmulticast mode
[  262.873535][ T9676] bridge_slave_0: left promiscuous mode
[  263.054982][ T9676] bridge0: port 1(bridge_slave_0) entered disabled state
[  263.296113][ T9676] bridge_slave_1: left allmulticast mode
[  263.308235][ T9676] bridge_slave_1: left promiscuous mode
[  263.314069][ T9676] bridge0: port 2(bridge_slave_1) entered disabled state
[  263.367073][ T9676] bond0: (slave bond_slave_0): Releasing backup interface
[  263.408351][   T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  263.488073][ T5806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  263.502304][ T9676] bond0: (slave bond_slave_1): Releasing backup interface
[  263.694619][ T9676] team0: Port device team_slave_0 removed
[  263.725986][ T9676] team0: Port device team_slave_1 removed
[  263.752747][ T9676] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  263.771168][ T9676] batman_adv: batadv0: Removing interface: batadv_slave_0
[  263.789451][ T9676] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  263.808034][ T9676] batman_adv: batadv0: Removing interface: batadv_slave_1
[  263.920750][   T28] kauditd_printk_skb: 12 callbacks suppressed
[  263.920765][   T28] audit: type=1800 audit(1770343000.749:119): pid=9688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1105" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0
[  263.958018][ T9688] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12
[  264.007811][ T9688] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12
[  264.057885][ T9688] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  264.442666][ T9693] syz.3.1107 (9693): drop_caches: 2
[  264.449671][ T8874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  265.538991][ T9743] netlink: 'syz.4.1118': attribute type 1 has an invalid length.
[  265.746868][ T8874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  265.819357][ T9743] 8021q: adding VLAN 0 to HW filter on device bond1
[  266.037811][ T9746] bond1: (slave dummy0): making interface the new active one
[  266.140163][ T9746] bond1: (slave dummy0): Enslaving as an active interface with an up link
[  266.173259][ T9756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  266.182276][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  266.375675][ T9746] syz.4.1118 (9746) used greatest stack depth: 20040 bytes left
[  266.534899][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  266.696503][ T9765] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1123'.
[  266.797153][ T8874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  266.835622][ T9748] bond1 (unregistering): (slave dummy0): Releasing active interface
[  266.854354][ T9748] bond1 (unregistering): Released all slaves
[  266.883540][ T9755] sch_fq: defrate 7 ignored.
[  267.073527][ T9777] tmpfs: Bad value for 'mpol'
[  267.082022][ T9777] mmap: syz.6.1126 (9777): VmData 175874048 exceed data ulimit 1129. Update limits or use boot option ignore_rlimit_data.
[  267.240377][ T9785] netlink: 'syz.6.1129': attribute type 4 has an invalid length.
[  267.318177][ T9785] netlink: 'syz.6.1129': attribute type 4 has an invalid length.
[  267.348459][ T9791] IPv6: NLM_F_CREATE should be specified when creating new route
[  267.475317][ T9795] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1130'.
[  267.601255][ T9795] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1130'.
[  267.763817][ T9804] loop7: detected capacity change from 0 to 256
[  267.896926][ T9804] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  268.923299][ T9833] sctp: [Deprecated]: syz.6.1143 (pid 9833) Use of struct sctp_assoc_value in delayed_ack socket option.
[  268.923299][ T9833] Use struct sctp_sack_info instead
[  271.032473][ T9875] overlayfs: failed to clone upperpath
[  271.084048][ T9874] loop3: detected capacity change from 0 to 136
[  271.286722][ T9879] xt_hashlimit: max too large, truncated to 1048576
[  271.777489][ T9888] loop3: detected capacity change from 0 to 1024
[  272.277916][ T9896] binder: 9895:9896 ioctl c0306201 2000000003c0 returned -14
[  272.580241][ T3458] hfsplus: b-tree write err: -5, ino 4
[  273.358353][ T9909] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  273.661336][ T9916] ceph: No mds server is up or the cluster is laggy
[  276.245424][ T9957] sch_fq: defrate 7 ignored.
[  276.268309][ T9961] loop4: detected capacity change from 0 to 1024
[  276.285580][ T9961] hfsplus: failed to load root directory
[  276.325232][ T7950] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  276.393407][   T28] audit: type=1326 audit(1770343013.219:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9960 comm="syz.4.1184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57c9d9aeb9 code=0x7ffc0000
[  276.483355][   T28] audit: type=1326 audit(1770343013.219:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9960 comm="syz.4.1184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57c9d9aeb9 code=0x7ffc0000
[  276.485142][ T9961] loop4: detected capacity change from 0 to 2048
[  276.541662][   T28] audit: type=1326 audit(1770343013.249:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9960 comm="syz.4.1184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57c9d9aeb9 code=0x7ffc0000
[  276.587804][ T9961] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  276.620158][   T28] audit: type=1326 audit(1770343013.249:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9960 comm="syz.4.1184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f57c9d9aeb9 code=0x7ffc0000
[  276.675954][   T28] audit: type=1326 audit(1770343013.249:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9960 comm="syz.4.1184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57c9d9aeb9 code=0x7ffc0000
[  276.774034][   T28] audit: type=1326 audit(1770343013.249:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9960 comm="syz.4.1184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57c9d9aeb9 code=0x7ffc0000
[  276.834799][   T28] audit: type=1326 audit(1770343013.249:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9960 comm="syz.4.1184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57c9d9aeb9 code=0x7ffc0000
[  276.905581][   T28] audit: type=1326 audit(1770343013.249:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9960 comm="syz.4.1184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57c9d9aeb9 code=0x7ffc0000
[  276.997509][   T28] audit: type=1326 audit(1770343013.259:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9960 comm="syz.4.1184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57c9d9aeb9 code=0x7ffc0000
[  277.034902][   T28] audit: type=1326 audit(1770343013.259:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9960 comm="syz.4.1184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f57c9d9aeb9 code=0x7ffc0000
[  277.380422][ T5771] Bluetooth: hci1: Opcode 0x206a failed: -110
[  277.387287][ T5766] Bluetooth: hci1: command 0x206a tx timeout
[  277.397018][ T5771] Bluetooth: hci2: hcon ffff88807971a000 sent 1 < count 9
[  277.404641][ T5771] Bluetooth: hci2: hcon ffff88807971a000 sent 0 < count 9
[  277.411962][ T5771] Bluetooth: hci2: hcon ffff88802f398000 sent 1 < count 56702
[  277.419957][ T5771] Bluetooth: hci2: hcon ffff88807971a000 sent 0 < count 16
[  278.530615][ T9998] bond2: entered allmulticast mode
[  278.551360][ T9998] bridge2: entered promiscuous mode
[  278.556751][ T9998] bridge2: entered allmulticast mode
[  278.596101][ T9998] bond2: (slave bridge2): Enslaving as an active interface with an up link
[  279.442100][T10009] loop6: detected capacity change from 0 to 40427
[  279.457605][T10009] F2FS-fs (loop6): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[  279.465287][T10009] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  281.224055][T10055] bridge_slave_0: left allmulticast mode
[  281.266297][T10055] bridge_slave_0: left promiscuous mode
[  281.273184][T10055] bridge0: port 1(bridge_slave_0) entered disabled state
[  281.293169][T10055] bridge_slave_1: left allmulticast mode
[  281.299858][T10055] bridge_slave_1: left promiscuous mode
[  281.305663][T10055] bridge0: port 2(bridge_slave_1) entered disabled state
[  281.319225][T10055] bond0: (slave bond_slave_0): Releasing backup interface
[  281.330682][T10055] bond0: (slave bond_slave_1): Releasing backup interface
[  281.340658][T10055] batman_adv: batadv0: Removing interface: batadv_slave_0
[  281.352047][T10055] batman_adv: batadv0: Removing interface: batadv_slave_1
[  281.374690][T10059] bridge3: entered promiscuous mode
[  281.411029][   T51] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  281.420326][   T51] Bluetooth: hci2: Injecting HCI hardware error event
[  281.431369][ T5771] Bluetooth: hci2: hardware error 0x00
[  281.435028][T10057] netlink: 'syz.7.1221': attribute type 10 has an invalid length.
[  281.467763][T10057] netlink: 55 bytes leftover after parsing attributes in process `syz.7.1221'.
[  283.489177][ T5771] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  283.882463][T10103] syz_tun: entered allmulticast mode
[  284.618520][T10116] bond2: entered allmulticast mode
[  285.396033][T10121] 8021q: adding VLAN 0 to HW filter on device bond3
[  285.433073][T10121] bond3: entered allmulticast mode
[  285.517286][T10121] bond2: (slave bond3): Enslaving as an active interface with a down link
[  285.582722][ T5774] libceph: connect (1)[c::]:6789 error -101
[  285.601926][ T5774] libceph: mon0 (1)[c::]:6789 connect error
[  285.730093][T10129] ceph: No mds server is up or the cluster is laggy
[  285.898354][   T28] kauditd_printk_skb: 57 callbacks suppressed
[  285.898370][   T28] audit: type=1326 audit(1770343022.729:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10135 comm="syz.3.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff380b9aeb9 code=0x7ffc0000
[  285.981753][   T28] audit: type=1326 audit(1770343022.759:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10135 comm="syz.3.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7ff380b9aeb9 code=0x7ffc0000
[  286.011221][   T28] audit: type=1326 audit(1770343022.759:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10135 comm="syz.3.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff380b9aeb9 code=0x7ffc0000
[  286.043918][   T28] audit: type=1326 audit(1770343022.759:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10135 comm="syz.3.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff380b9c747 code=0x7ffc0000
[  286.122735][   T28] audit: type=1326 audit(1770343022.759:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10135 comm="syz.3.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7ff380b5b78e code=0x7ffc0000
[  286.176383][   T28] audit: type=1326 audit(1770343022.759:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10135 comm="syz.3.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7ff380b5b78e code=0x7ffc0000
[  286.183812][T10146] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1251'.
[  286.199364][   T28] audit: type=1326 audit(1770343022.759:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10135 comm="syz.3.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7ff380b5b78e code=0x7ffc0000
[  286.232291][   T28] audit: type=1326 audit(1770343022.759:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10135 comm="syz.3.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff380b5b78e code=0x7ffc0000
[  286.238241][ T5774] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  286.254961][   T28] audit: type=1326 audit(1770343022.779:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10135 comm="syz.3.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff380b9aeb9 code=0x7ffc0000
[  286.338221][   T28] audit: type=1326 audit(1770343022.779:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10135 comm="syz.3.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff380b9aeb9 code=0x7ffc0000
[  286.457571][ T5774] usb 4-1: Using ep0 maxpacket: 8
[  286.471825][ T5774] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  286.487841][ T5774] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  286.505359][ T5774] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  286.545805][ T5774] usb 4-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00
[  286.580963][ T5774] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  286.615242][ T5774] usb 4-1: config 0 descriptor??
[  287.317843][ T5774] hid-rmi 0003:06CB:81A7.0003: unknown main item tag 0x0
[  287.454007][ T5774] hid-rmi 0003:06CB:81A7.0003: unknown main item tag 0x0
[  287.537118][ T5774] hid-rmi 0003:06CB:81A7.0003: unknown main item tag 0x0
[  287.545790][ T5774] hid-rmi 0003:06CB:81A7.0003: unknown main item tag 0x0
[  287.553305][ T5774] hid-rmi 0003:06CB:81A7.0003: unknown main item tag 0x0
[  287.561260][ T5774] hid-rmi 0003:06CB:81A7.0003: unknown main item tag 0x0
[  287.569131][ T5774] hid-rmi 0003:06CB:81A7.0003: unknown main item tag 0x0
[  287.576302][ T5774] hid-rmi 0003:06CB:81A7.0003: unknown main item tag 0x0
[  287.583988][ T5774] hid-rmi 0003:06CB:81A7.0003: unknown main item tag 0x0
[  287.592230][ T5774] hid-rmi 0003:06CB:81A7.0003: unknown main item tag 0x0
[  287.606330][ T5774] hid-rmi 0003:06CB:81A7.0003: unknown main item tag 0x0
[  287.678457][ T5774] hid-rmi 0003:06CB:81A7.0003: hidraw0: USB HID v0.00 Device [HID 06cb:81a7] on usb-dummy_hcd.3-1/input0
[  288.036701][T10182] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1263'.
[  288.523365][T10177] cgroup: fork rejected by pids controller in /syz6
[  288.853353][   T23] usb 4-1: USB disconnect, device number 10
[  288.988012][T10229] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1269'.
[  289.707687][T10254] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  290.258052][T10278] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1292'.
[  290.589189][T10290] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1295'.
[  290.672380][T10292] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1296'.
[  290.758479][T10293] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1295'.
[  291.337117][T10310] loop3: detected capacity change from 0 to 2048
[  291.397963][T10310] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  291.463987][T10310] UDF-fs: error (device loop3): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376)
[  291.667877][ T5771] Bluetooth: hci3: unexpected subevent 0x01 length: 78 > 18
[  291.951884][T10312] netlink: 'syz.7.1306': attribute type 10 has an invalid length.
[  292.004782][T10312] team0: Port device dummy0 added
[  292.718391][T10343] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1317'.
[  293.705300][   T28] kauditd_printk_skb: 31 callbacks suppressed
[  293.705315][   T28] audit: type=1326 audit(1770343030.529:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10374 comm="syz.3.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff380b9aeb9 code=0x7ffc0000
[  293.735969][   T51] Bluetooth: hci3: command 0x0406 tx timeout
[  293.746259][   T28] audit: type=1326 audit(1770343030.539:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10374 comm="syz.3.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff380b9aeb9 code=0x7ffc0000
[  293.770602][   T28] audit: type=1326 audit(1770343030.569:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10374 comm="syz.3.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff380b9aeb9 code=0x7ffc0000
[  293.793312][   T28] audit: type=1326 audit(1770343030.569:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10374 comm="syz.3.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff380b9aeb9 code=0x7ffc0000
[  293.820149][T10375] loop3: detected capacity change from 0 to 16
[  293.833862][   T28] audit: type=1326 audit(1770343030.569:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10374 comm="syz.3.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff380b9aeb9 code=0x7ffc0000
[  293.857695][   T28] audit: type=1326 audit(1770343030.569:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10374 comm="syz.3.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ff380b9aeb9 code=0x7ffc0000
[  293.881153][T10375] erofs: (device loop3): mounted with root inode @ nid 36.
[  293.888723][   T28] audit: type=1326 audit(1770343030.569:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10374 comm="syz.3.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff380b9aeb9 code=0x7ffc0000
[  293.888763][   T28] audit: type=1326 audit(1770343030.569:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10374 comm="syz.3.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff380b9aeb9 code=0x7ffc0000
[  293.888800][   T28] audit: type=1326 audit(1770343030.569:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10374 comm="syz.3.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff380b5b78e code=0x7ffc0000
[  293.888834][   T28] audit: type=1326 audit(1770343030.569:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10374 comm="syz.3.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff380b9aeb9 code=0x7ffc0000
[  295.525627][T10409] netlink: 156 bytes leftover after parsing attributes in process `syz.7.1343'.
[  295.678096][T10411] netlink: 1 bytes leftover after parsing attributes in process `syz.7.1344'.
[  295.745968][T10414] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1345'.
[  296.363578][T10425] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  296.819045][T10427] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  297.091710][T10428] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  297.441479][T10438] netlink: 'syz.3.1355': attribute type 1 has an invalid length.
[  297.470879][T10438] 8021q: adding VLAN 0 to HW filter on device bond3
[  297.535853][T10438] bond3: (slave bridge4): making interface the new active one
[  297.550809][T10438] bond3: (slave bridge4): Enslaving as an active interface with an up link
[  300.887045][   T28] kauditd_printk_skb: 30 callbacks suppressed
[  300.887059][   T28] audit: type=1326 audit(1770343037.709:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10494 comm="syz.3.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff380b9aeb9 code=0x7ffc0000
[  301.010872][   T28] audit: type=1326 audit(1770343037.709:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10494 comm="syz.3.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff380b9aeb9 code=0x7ffc0000
[  301.084663][   T28] audit: type=1326 audit(1770343037.749:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10494 comm="syz.3.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff380b9aeb9 code=0x7ffc0000
[  301.149045][   T28] audit: type=1326 audit(1770343037.749:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10494 comm="syz.3.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff380b9aeb9 code=0x7ffc0000
[  301.256895][   T28] audit: type=1326 audit(1770343037.749:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10494 comm="syz.3.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7ff380b9aeb9 code=0x7ffc0000
[  301.392339][   T28] audit: type=1326 audit(1770343037.749:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10494 comm="syz.3.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff380b9aeb9 code=0x7ffc0000
[  301.524415][   T28] audit: type=1326 audit(1770343037.749:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10494 comm="syz.3.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff380b5b78e code=0x7ffc0000
[  301.675554][   T28] audit: type=1326 audit(1770343037.759:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10494 comm="syz.3.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff380b9aeb9 code=0x7ffc0000
[  301.785315][   T28] audit: type=1326 audit(1770343037.759:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10494 comm="syz.3.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff380b9aeb9 code=0x7ffc0000
[  301.858340][   T28] audit: type=1326 audit(1770343037.759:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10494 comm="syz.3.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7ff380b9aeb9 code=0x7ffc0000
[  302.951948][T10524] netlink: 1 bytes leftover after parsing attributes in process `syz.6.1385'.
[  303.068903][T10531] netlink: 'syz.3.1386': attribute type 1 has an invalid length.
[  303.107769][T10534] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1388'.
[  303.263875][T10531] bond4: entered promiscuous mode
[  303.280780][T10531] 8021q: adding VLAN 0 to HW filter on device bond4
[  303.517798][T10537] bond4: (slave veth7): making interface the new active one
[  303.557420][T10537] veth7: entered promiscuous mode
[  303.570132][T10537] bond4: (slave veth7): Enslaving as an active interface with an up link
[  303.918799][T10549] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1394'.
[  304.001937][T10551] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1395'.
[  304.817120][T10572] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1402'.
[  304.926972][T10575] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  305.010025][T10575] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  305.082413][T10575] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  306.467830][T10619] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1415'.
[  306.707114][T10627] netlink: 'syz.4.1421': attribute type 4 has an invalid length.
[  306.805169][T10627] netlink: 'syz.4.1421': attribute type 4 has an invalid length.
[  307.703273][T10644] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  307.725895][T10646] IPv6: NLM_F_CREATE should be specified when creating new route
[  309.247597][   T51] Bluetooth: hci1: command 0x206a tx timeout
[  309.416499][T10674] netlink: 'syz.3.1436': attribute type 4 has an invalid length.
[  309.432663][T10674] netlink: 'syz.3.1436': attribute type 4 has an invalid length.
[  309.633888][T10679] overlayfs: failed to clone upperpath
[  309.862713][T10684] IPv6: NLM_F_CREATE should be specified when creating new route
[  309.995448][T10682] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1439'.
[  310.723524][T10700] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1444'.
[  310.960514][T10706] loop6: detected capacity change from 0 to 736
[  311.306604][T10716] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1452'.
[  311.336287][T10716] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1452'.
[  311.360654][T10716] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1452'.
[  312.442941][T10742] bridge0: entered promiscuous mode
[  314.271149][T10778] syz_tun: entered allmulticast mode
[  314.287072][T10777] syz_tun: left allmulticast mode
[  314.464306][T10783] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1476'.
[  314.761168][T10791] netlink: 'syz.6.1479': attribute type 1 has an invalid length.
[  314.872563][T10791] bond3: (slave ip6gretap1): making interface the new active one
[  314.926939][T10791] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link
[  314.955422][T10796] bond3: entered promiscuous mode
[  314.968239][T10796] ip6gretap1: entered promiscuous mode
[  314.977592][T10796] bond3: entered allmulticast mode
[  314.987575][T10796] ip6gretap1: entered allmulticast mode
[  314.998660][T10796] 8021q: adding VLAN 0 to HW filter on device bond3
[  316.610207][T10815] overlayfs: failed to clone upperpath
[  317.260683][   T28] kauditd_printk_skb: 16 callbacks suppressed
[  317.260699][   T28] audit: type=1326 audit(1770343310.086:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10812 comm="syz.4.1484" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f57c9d9aeb9 code=0x0
[  317.437865][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  317.444231][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  318.093545][T10843] sctp: [Deprecated]: syz.4.1503 (pid 10843) Use of struct sctp_assoc_value in delayed_ack socket option.
[  318.093545][T10843] Use struct sctp_sack_info instead
[  318.424973][T10857] bond0 (unregistering): Released all slaves
[  318.926736][T10871] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1506'.
[  319.491960][T10877] trusted_key: syz.7.1509 sent an empty control message without MSG_MORE.
[  321.188156][T10909] kernel profiling enabled (shift: 63)
[  321.195989][T10909] profiling shift: 63 too large
[  325.452248][T10966] netlink: 'syz.6.1542': attribute type 13 has an invalid length.
[  326.212948][ T3424] bond1: (slave bridge1): link status up again after 0 ms
[  326.259755][ T3424] bond1: (slave bridge1): failed to get link speed/duplex
[  326.427848][   T49] bond1: (slave bridge1): failed to get link speed/duplex
[  326.558919][ T3424] bond1: (slave bridge1): failed to get link speed/duplex
[  326.667978][ T3424] bond1: (slave bridge1): failed to get link speed/duplex
[  327.130877][   T49] bond1: (slave bridge1): failed to get link speed/duplex
[  327.267500][ T3424] bond1: (slave bridge1): failed to get link speed/duplex
[  327.341034][T11002] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1556'.
[  327.363727][T11002] bridge_slave_1: left allmulticast mode
[  327.426628][T11002] bridge_slave_1: left promiscuous mode
[  327.460854][T11002] bridge0: port 2(bridge_slave_1) entered disabled state
[  327.489773][T11002] bridge_slave_0: left allmulticast mode
[  327.513422][T11002] bridge0: port 1(bridge_slave_0) entered disabled state
[  327.821544][   T49] bond1: (slave bridge1): failed to get link speed/duplex
[  327.949505][ T9042] bond1: (slave bridge1): failed to get link speed/duplex
[  328.069997][ T9042] bond1: (slave bridge1): failed to get link speed/duplex
[  328.178649][ T3440] bond1: (slave bridge1): failed to get link speed/duplex
[  328.595762][   T28] audit: type=1800 audit(1770343321.416:295): pid=11011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1559" name="/" dev="fuse" ino=4 res=0 errno=0
[  328.845471][T11018] cgroup: fork rejected by pids controller in /syz7
[  329.744090][T11073] 9pnet: p9_errstr2errno: server reported unknown error �0x0000000000000009
[  330.148951][T11088] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  331.204621][T11107] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1581'.
[  331.340024][ T3424] net_ratelimit: 26 callbacks suppressed
[  331.340042][ T3424] bond1: (slave bridge1): failed to get link speed/duplex
[  331.519629][   T49] bond1: (slave bridge1): failed to get link speed/duplex
[  331.657436][   T49] bond1: (slave bridge1): failed to get link speed/duplex
[  331.767843][ T3424] bond1: (slave bridge1): failed to get link speed/duplex
[  331.794073][T11118] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1592'.
[  332.009345][ T3440] bond1: (slave bridge1): failed to get link speed/duplex
[  332.128720][ T3458] bond1: (slave bridge1): failed to get link speed/duplex
[  332.142731][T11129] kvm: pic: non byte read
[  332.158672][T11129] kvm: pic: non byte read
[  332.163840][T11129] kvm: pic: non byte read
[  332.178276][T11129] kvm: pic: non byte read
[  332.188340][T11129] kvm: pic: non byte read
[  332.192936][T11129] kvm: pic: non byte read
[  332.207901][T11129] kvm: pic: single mode not supported
[  332.207923][T11129] kvm: pic: level sensitive irq not supported
[  332.227496][T11129] kvm: pic: non byte read
[  332.247693][T11129] kvm: pic: single mode not supported
[  332.247763][T11129] kvm: pic: non byte read
[  332.258909][T11129] kvm: pic: non byte read
[  332.322629][ T9047] bond1: (slave bridge1): failed to get link speed/duplex
[  333.277824][   T49] bond1: (slave bridge1): failed to get link speed/duplex
[  333.399432][ T3440] bond1: (slave bridge1): failed to get link speed/duplex
[  333.507925][ T9047] bond1: (slave bridge1): failed to get link speed/duplex
[  336.380322][T11159] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  336.438955][T11159] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  336.943050][T11177] overlayfs: failed to clone upperpath
[  337.473257][T11159] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  337.484604][T11159] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  337.495243][T11159] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  337.504530][T11159] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  337.715526][   T28] audit: type=1326 audit(1770343330.536:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11183 comm="syz.7.1607" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe63cb9aeb9 code=0x0
[  337.924924][T11172] bridge_slave_0: left allmulticast mode
[  337.937520][T11172] bridge_slave_0: left promiscuous mode
[  337.949257][T11172] bridge0: port 1(bridge_slave_0) entered disabled state
[  338.036022][T11172] bridge_slave_1: left allmulticast mode
[  338.042840][T11172] bridge_slave_1: left promiscuous mode
[  338.049671][T11172] bridge0: port 2(bridge_slave_1) entered disabled state
[  338.119626][T11172] team0: Port device team_slave_0 removed
[  338.146263][T11172] team0: Port device team_slave_1 removed
[  338.158851][T11172] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  338.166673][T11172] batman_adv: batadv0: Removing interface: batadv_slave_0
[  338.187458][T11172] bond1: (slave bridge1): Removing an active aggregator
[  338.196555][ T9047] net_ratelimit: 8 callbacks suppressed
[  338.196569][ T9047] bond1: Warning: Found an uninitialized port
[  338.225233][T11172] bond1: (slave bridge1): Releasing backup interface
[  338.244726][T11172] bridge1: left promiscuous mode
[  338.251471][T11172] bridge1: left allmulticast mode
[  338.272964][T11172] bond2: (slave bridge2): Releasing backup interface
[  338.305491][T11172] bond3: (slave ip6gretap1): Releasing active interface
[  338.314104][T11172] ip6gretap1: left promiscuous mode
[  338.321178][T11172] ip6gretap1: left allmulticast mode
[  338.363351][T11173] team0: Mode changed to "random"
[  340.067666][T11221] netlink: 'syz.7.1617': attribute type 1 has an invalid length.
[  340.224854][T11227] bond4: (slave veth5): Enslaving as an active interface with a down link
[  340.370410][T11232] netlink: 'syz.6.1622': attribute type 1 has an invalid length.
[  340.408976][T11221] bond4: entered promiscuous mode
[  340.414073][T11221] bond4: entered allmulticast mode
[  340.444594][T11221] 8021q: adding VLAN 0 to HW filter on device bond4
[  340.522420][T11232] 8021q: adding VLAN 0 to HW filter on device bond5
[  340.541705][T11232] bond4: (slave bond5): making interface the new active one
[  340.632018][T11232] bond4: (slave bond5): Enslaving as an active interface with an up link
[  340.669339][T11239] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1622'.
[  340.683602][T11239] bond4: entered promiscuous mode
[  340.689058][T11239] bond5: entered promiscuous mode
[  340.694364][T11239] bond4: entered allmulticast mode
[  340.715703][T11239] bond5: entered allmulticast mode
[  340.744837][T11239] 8021q: adding VLAN 0 to HW filter on device bond4
[  341.079796][T11247] loop6: detected capacity change from 0 to 128
[  341.976377][T11261] fuse: Bad value for 'fd'
[  344.165956][T11287] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1640'.
[  346.779871][T11316] netdevsim netdevsim7 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  346.788795][T11316] netdevsim netdevsim7 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  346.797167][T11316] netdevsim netdevsim7 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  346.805584][T11316] netdevsim netdevsim7 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  346.857950][T11316] bond2: left allmulticast mode
[  346.862844][T11316] bond3: left allmulticast mode
[  346.892578][T11316] bond4: left promiscuous mode
[  346.897775][T11316] bond4: left allmulticast mode
[  346.912000][T11329] netlink: 'syz.6.1655': attribute type 1 has an invalid length.
[  346.962390][T11329] 8021q: adding VLAN 0 to HW filter on device bond6
[  347.004778][T11330] 8021q: adding VLAN 0 to HW filter on device bond6
[  347.011997][T11330] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address
[  347.023913][T11330] bond6: (slave vxcan3): Error -95 calling set_mac_address
[  347.054359][T11331] ip6erspan0: entered promiscuous mode
[  347.065580][T11331] bond6: (slave ip6erspan0): making interface the new active one
[  347.074930][T11331] bond6: (slave ip6erspan0): Enslaving as an active interface with an up link
[  348.060778][T11367] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1665'.
[  348.209553][T11369] loop4: detected capacity change from 0 to 4096
[  348.278888][T11369] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  348.484752][ T6366] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  348.727719][T11380] macvtap0: entered promiscuous mode
[  348.737146][T11380] macvtap0: entered allmulticast mode
[  348.763949][T11382] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1672'.
[  349.760434][T11395] loop6: detected capacity change from 0 to 128
[  351.569384][ T5771] Bluetooth: Unexpected continuation frame (len 16)
[  352.241411][ T5774] Process accounting resumed
[  356.463671][T11457] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  356.474505][T11457] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  356.483720][T11457] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  356.492424][T11457] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  356.544984][T11457] bond1: left promiscuous mode
[  356.552050][T11457] bond1: left allmulticast mode
[  356.565212][T11457] bond2: left allmulticast mode
[  356.570667][T11457] bridge2: left promiscuous mode
[  356.575623][T11457] bridge2: left allmulticast mode
[  356.581020][T11457] bridge3: left promiscuous mode
[  356.598053][T11457] bond3: left promiscuous mode
[  356.602850][T11457] bond3: left allmulticast mode
[  356.622287][T11457] bond4: left promiscuous mode
[  356.627128][T11457] bond5: left promiscuous mode
[  356.632768][T11457] bond4: left allmulticast mode
[  356.637708][T11457] bond5: left allmulticast mode
[  356.656248][T11457] ip6erspan0: left promiscuous mode
[  356.671422][T11470] netlink: 'syz.4.1702': attribute type 27 has an invalid length.
[  356.684044][T11470] netlink: 'syz.4.1702': attribute type 4 has an invalid length.
[  356.703051][T11470] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1702'.
[  360.914656][T11531] netlink: 1319 bytes leftover after parsing attributes in process `syz.3.1724'.
[  360.993790][T11533] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1725'.
[  363.763767][T11570] netlink: 1319 bytes leftover after parsing attributes in process `syz.4.1735'.
[  364.055265][T11582] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1740'.
[  364.132402][T11586] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1740'.
[  364.185855][T11588] tipc: Started in network mode
[  364.191392][T11588] tipc: Node identity 4, cluster identity 4711
[  364.212888][T11588] tipc: Node number set to 4
[  365.830467][T11608] netlink: 1319 bytes leftover after parsing attributes in process `syz.6.1747'.
[  369.082602][T11664] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1771'.
[  370.196956][T11681] netlink: 'syz.6.1778': attribute type 1 has an invalid length.
[  370.254400][T11681] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address
[  370.264868][T11681] bond7: (slave vxcan3): Setting fail_over_mac to active for active-backup mode
[  370.276968][T11681] bond7: (slave vxcan3): making interface the new active one
[  370.285342][T11681] bond7: (slave vxcan3): Enslaving as an active interface with an up link
[  370.333680][T11681] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1778'.
[  370.346378][T11681] bond7 (unregistering): (slave vxcan3): Releasing backup interface
[  370.358319][T11681] bond7 (unregistering): Released all slaves
[  370.506426][T11686] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1779'.
[  370.516758][T11686] veth0_vlan: entered allmulticast mode
[  370.602498][T11690] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1781'.
[  373.076577][T11723] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1792'.
[  373.731809][T11735] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1795'.
[  374.097522][T11737] lo: Caught tx_queue_len zero misconfig
[  375.094619][T11756] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1801'.
[  375.137586][T11756] lo: entered promiscuous mode
[  375.142603][T11756] tunl0: entered promiscuous mode
[  375.167558][T11756] gre0: entered promiscuous mode
[  375.173939][T11756] gretap0: entered promiscuous mode
[  375.186546][T11756] erspan0: entered promiscuous mode
[  375.198880][T11756] ip_vti0: entered promiscuous mode
[  375.210876][T11756] ip6_vti0: entered promiscuous mode
[  375.223231][T11756] sit0: entered promiscuous mode
[  375.234497][T11756] ip6tnl0: entered promiscuous mode
[  375.246734][T11756] ip6gre0: entered promiscuous mode
[  375.257891][T11756] syz_tun: entered promiscuous mode
[  375.263313][T11756] ip6gretap0: entered promiscuous mode
[  375.298137][T11756] bridge0: entered promiscuous mode
[  375.303568][T11756] team0: entered promiscuous mode
[  375.317716][T11756] dummy0: entered promiscuous mode
[  375.329897][T11756] nlmon0: entered promiscuous mode
[  375.338427][T11756] caif0: entered promiscuous mode
[  375.352212][T11756] batadv0: entered promiscuous mode
[  375.362386][T11756] vxcan0: entered promiscuous mode
[  375.377593][T11756] vxcan1: entered promiscuous mode
[  375.387615][T11756] veth0: entered promiscuous mode
[  375.398348][T11756] veth1: entered promiscuous mode
[  375.407065][T11756] wg0: entered promiscuous mode
[  375.421333][T11756] wg1: entered promiscuous mode
[  375.429451][T11756] wg2: entered promiscuous mode
[  375.436344][T11756] veth0_to_bridge: entered promiscuous mode
[  375.523246][T11756] bridge_slave_0: entered promiscuous mode
[  375.538908][T11756] veth1_to_bridge: entered promiscuous mode
[  375.550301][T11756] bridge_slave_1: entered promiscuous mode
[  375.556547][T11756] veth1_to_bond: entered promiscuous mode
[  375.583496][T11756] bond_slave_1: entered promiscuous mode
[  375.591747][T11756] veth0_to_team: entered promiscuous mode
[  375.609949][T11756] team_slave_0: entered promiscuous mode
[  375.622299][T11756] veth1_to_team: entered promiscuous mode
[  375.677091][T11756] team_slave_1: entered promiscuous mode
[  375.684008][T11756] veth0_to_batadv: entered promiscuous mode
[  375.691013][T11756] batadv_slave_0: entered promiscuous mode
[  375.697199][T11756] xfrm0: entered promiscuous mode
[  375.703009][T11756] veth0_to_hsr: entered promiscuous mode
[  375.709536][T11756] veth1_to_hsr: entered promiscuous mode
[  375.715625][T11756] hsr0: entered promiscuous mode
[  375.725034][T11756] veth1_virt_wifi: entered promiscuous mode
[  375.737410][T11756] veth0_virt_wifi: entered promiscuous mode
[  375.744779][T11756] net veth1_virt_wifi virt_wifi0: entered promiscuous mode
[  375.757671][T11756] vlan0: entered promiscuous mode
[  375.765202][T11756] vlan1: entered promiscuous mode
[  375.822846][T11756] macvlan0: entered promiscuous mode
[  375.831733][T11756] macvlan1: entered promiscuous mode
[  375.840217][T11756] ipvlan0: entered promiscuous mode
[  375.846854][T11756] ipvlan1: entered promiscuous mode
[  375.871072][T11756] macvtap0: entered promiscuous mode
[  375.928503][T11756] macsec0: entered promiscuous mode
[  376.016290][T11756] geneve0: entered promiscuous mode
[  376.107765][T11756] geneve1: entered promiscuous mode
[  376.234844][T11756] mac80211_hwsim hwsim15 wlan0: entered promiscuous mode
[  376.292410][T11756] mac80211_hwsim hwsim16 wlan1: entered promiscuous mode
[  376.367916][T11756] netdevsim netdevsim6 eth0: entered promiscuous mode
[  376.385942][T11756] netdevsim netdevsim6 eth1: entered promiscuous mode
[  376.409284][T11756] netdevsim netdevsim6 eth2: entered promiscuous mode
[  376.416987][T11756] netdevsim netdevsim6 eth3: entered promiscuous mode
[  376.427916][T11756] bond0: entered promiscuous mode
[  376.433146][T11756] syztnl0: entered promiscuous mode
[  376.439831][T11756] bond1: entered promiscuous mode
[  376.445052][T11756] bridge1: entered promiscuous mode
[  376.459160][T11756] bond2: entered promiscuous mode
[  376.464402][T11756] bridge2: entered promiscuous mode
[  376.477784][T11756] bridge3: entered promiscuous mode
[  376.488158][T11756] bridge4: entered promiscuous mode
[  376.493553][T11756] vlan2: entered promiscuous mode
[  376.507125][T11756] veth2: entered promiscuous mode
[  376.532137][T11756] veth3: entered promiscuous mode
[  376.537683][T11756] bond3: entered promiscuous mode
[  376.542979][T11756] ip6gretap1: entered promiscuous mode
[  376.549418][T11756] bond4: entered promiscuous mode
[  376.554544][T11756] bond5: entered promiscuous mode
[  376.564960][T11756] bond6: entered promiscuous mode
[  376.571209][T11756] ip6erspan0: entered promiscuous mode
[  376.577162][T11756] gretap1: entered promiscuous mode
[  376.585896][T11756] vxcan2: entered promiscuous mode
[  376.592047][T11756] vxcan3: entered promiscuous mode
[  376.597668][T11756] veth4: entered promiscuous mode
[  376.603839][T11756] veth5: entered promiscuous mode
[  376.794582][T11782] netlink: 'syz.4.1809': attribute type 1 has an invalid length.
[  376.835036][T11782] 8021q: adding VLAN 0 to HW filter on device bond0
[  376.864085][T11785] bond0: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms
[  376.890160][T11785] bond0: entered allmulticast mode
[  376.966839][T11782] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link
[  378.855906][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  378.871454][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  380.772781][T11858] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1828'.
[  386.150647][T11919] netlink: 'syz.3.1850': attribute type 1 has an invalid length.
[  386.254213][T11919] 8021q: adding VLAN 0 to HW filter on device bond5
[  386.263437][T11921] bond5: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms
[  386.365297][T11921] bond5: entered allmulticast mode
[  386.525279][T11919] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link
[  387.947856][T11953] loop4: detected capacity change from 0 to 512
[  391.922746][T11991] ip_vti0: Master is either lo or non-ether device
[  393.317117][T12015] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1877'.
[  394.689735][T12040] netlink: 'syz.7.1887': attribute type 1 has an invalid length.
[  394.756246][T12040] bond5: entered promiscuous mode
[  394.762051][T12040] bond5: entered allmulticast mode
[  394.792741][T12043] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1887'.
[  394.914483][T12043] bridge2: the hash_elasticity option has been deprecated and is always 16
[  394.969167][T12043] bond5: (slave bridge2): making interface the new active one
[  394.976693][T12043] bridge2: entered promiscuous mode
[  395.009225][T12043] bridge2: entered allmulticast mode
[  395.043560][T12043] bond5: (slave bridge2): Enslaving as an active interface with an up link
[  395.059823][T12040] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1887'.
[  395.119959][T12040] bond5: left promiscuous mode
[  395.147403][T12040] bridge2: left promiscuous mode
[  395.157131][T12040] bond5: left allmulticast mode
[  395.170657][T12040] bridge2: left allmulticast mode
[  395.186441][T12040] 8021q: adding VLAN 0 to HW filter on device bond5
[  395.224343][T12047] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1889'.
[  397.950423][T12098] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  400.984029][T12118] loop6: detected capacity change from 0 to 40427
[  401.011338][T12118] F2FS-fs (loop6): Found nat_bits in checkpoint
[  401.103729][T12118] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  401.499887][T12137] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1918'.
[  401.543936][ T8129] syz-executor: attempt to access beyond end of device
[  401.543936][ T8129] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  401.592789][ T8129] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  401.659689][T12139] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1921'.
[  402.291394][T12153] bridge5: entered promiscuous mode
[  402.299515][T12153] bridge5: entered allmulticast mode
[  402.346505][T12153] team0: Port device bridge5 added
[  402.366389][T12156] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1926'.
[  402.443999][T12156] 8021q: adding VLAN 0 to HW filter on device bond6
[  402.477679][T12158] bridge0: port 1(team0) entered blocking state
[  402.484736][T12158] bridge0: port 1(team0) entered disabled state
[  402.524006][T12158] team0: entered allmulticast mode
[  402.560350][T12163] macvlan2: entered promiscuous mode
[  402.565710][T12163] macvlan2: entered allmulticast mode
[  402.612029][T12163] bond6: entered promiscuous mode
[  402.630499][T12163] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  402.673764][T12163] bond6: left promiscuous mode
[  402.756646][T12153] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  402.776538][T12153] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  402.789848][T12153] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  402.802984][T12153] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  402.811711][T12153] geneve2: entered promiscuous mode
[  402.817063][T12153] geneve2: entered allmulticast mode
[  402.868573][T12153] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  402.876988][T12153] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  402.907806][T12153] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  402.914319][T12173] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1931'.
[  402.916216][T12153] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  403.128975][T12178] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1933'.
[  403.168333][T12178] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1933'.
[  403.241449][T12185] caif0: left promiscuous mode
[  405.099960][T12224] loop6: detected capacity change from 0 to 2048
[  405.175533][T12224] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  407.795839][T12245] loop6: detected capacity change from 0 to 128
[  407.863347][T12245] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  407.940499][T12245] ext4 filesystem being mounted at /316/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  408.096109][T12245] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  411.419431][T12276] netlink: 'syz.4.1968': attribute type 39 has an invalid length.
[  411.851534][   T28] audit: type=1326 audit(2000000059.296:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12277 comm="syz.6.1969" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb58db9aeb9 code=0x0
[  415.893169][T12337] netlink: 35 bytes leftover after parsing attributes in process `syz.3.1989'.
[  417.377507][T12354] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  417.404448][T12354] CIFS mount error: No usable UNC path provided in device string!
[  417.404448][T12354] 
[  417.415146][T12354] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  424.482805][T12410] overlayfs: failed to clone upperpath
[  424.700704][T12419] overlayfs: failed to clone upperpath
[  425.560873][T12429] xt_TCPMSS: Only works on TCP SYN packets
[  425.843200][T12439] Invalid ELF header magic: != ELF
[  429.028989][T12491] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2035'.
[  429.085060][T12491] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2035'.
[  431.011603][T12534] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2051'.
[  431.475118][T12551] bridge0: entered promiscuous mode
[  431.502685][T12551] bridge0: entered allmulticast mode
[  431.539368][T12551] team0: Port device bridge0 added
[  431.584673][T12553] bridge0: port 1(team0) entered blocking state
[  431.635315][T12553] bridge0: port 1(team0) entered disabled state
[  431.881674][T12553] team0: entered allmulticast mode
[  431.886829][T12553] dummy0: entered allmulticast mode
[  431.915700][T12553] team0: left allmulticast mode
[  431.934196][T12553] dummy0: left allmulticast mode
[  431.971968][T12551] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  432.002701][T12551] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  432.018847][T12551] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  432.032934][T12551] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  432.042313][T12551] geneve2: entered promiscuous mode
[  432.050882][T12551] geneve2: entered allmulticast mode
[  432.058819][T12551] netdevsim netdevsim7 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  432.067707][T12551] netdevsim netdevsim7 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  432.076478][T12551] netdevsim netdevsim7 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  432.097788][T12551] netdevsim netdevsim7 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  432.214387][T12558] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2059'.
[  432.256439][T12558] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  432.266598][T12558] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  432.275586][T12558] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  432.284527][T12558] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  432.340160][T12558] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2059'.
[  433.937138][T12596] IPVS: Scheduler module ip_vs_ not found
[  436.031225][T12638] ip6t_REJECT: ECHOREPLY is not supported
[  436.548095][ T5771] Bluetooth: hci1: ACL packet for unknown connection handle 200
[  436.604264][T12651] x_tables: duplicate underflow at hook 2
[  437.008032][ T5771] Bluetooth: hci1: unexpected event for opcode 0x2011
[  438.807940][T12672] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2093'.
[  438.988251][T12672] team1: entered promiscuous mode
[  439.026505][T12672] team1: entered allmulticast mode
[  440.293116][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  440.307231][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  440.670916][T12696] bridge3: entered promiscuous mode
[  440.686394][T12696] bridge3: entered allmulticast mode
[  440.740797][T12696] team0: Port device bridge3 added
[  440.779197][T12696] bridge0: port 1(team0) entered blocking state
[  440.785676][T12696] bridge0: port 1(team0) entered disabled state
[  440.802152][T12696] team0: entered allmulticast mode
[  440.811251][T12696] dummy0: entered allmulticast mode
[  440.944422][T12696] team0: left allmulticast mode
[  440.979713][T12696] dummy0: left allmulticast mode
[  447.495642][T12770] netlink: 'syz.3.2130': attribute type 1 has an invalid length.
[  447.621474][T12770] bond7: entered promiscuous mode
[  447.626929][T12770] 8021q: adding VLAN 0 to HW filter on device bond7
[  447.812344][T12772] 8021q: adding VLAN 0 to HW filter on device bond7
[  447.833321][T12772] bond7: (slave ip6gre1): The slave device specified does not support setting the MAC address
[  447.857573][T12772] bond7: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode
[  447.888529][T12772] bond7: (slave ip6gre1): making interface the new active one
[  447.903482][T12772] ip6gre1: entered promiscuous mode
[  447.915130][T12772] bond7: (slave ip6gre1): Enslaving as an active interface with an up link
[  448.164892][T12770] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2130'.
[  449.301064][T12770] bond7 (unregistering): (slave ip6gre1): Releasing backup interface
[  449.309287][T12770] ip6gre1: left promiscuous mode
[  449.318650][T12770] bond7 (unregistering): Released all slaves
[  451.267227][T12818] 9pnet: p9_errstr2errno: server reported unknown error 18446744073
[  451.764294][T12836] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2139'.
[  455.038835][T12846] vlan2: entered promiscuous mode
[  455.053853][T12846] bridge0: entered promiscuous mode
[  457.985900][T12868] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2148'.
[  465.684541][T12918] syz_tun: entered allmulticast mode
[  465.704984][T12917] syz_tun: left allmulticast mode
[  466.078084][   T28] audit: type=1804 audit(2000000114.518:298): pid=12934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2171" name="file0" dev="ramfs" ino=39403 res=1 errno=0
[  466.480064][T12942] SET target dimension over the limit!
[  468.321850][T12950] o2cb: This node has not been configured.
[  468.366913][T12950] o2cb: Cluster check failed. Fix errors before retrying.
[  468.377825][T12957] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2177'.
[  468.389910][T12950] (syz.6.2176,12950,1):user_dlm_register:674 ERROR: status = -22
[  468.401001][T12950] (syz.6.2176,12950,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "bus"
[  469.349273][T12986] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2185'.
[  471.129516][T13000] vlan2: entered promiscuous mode
[  471.134817][T13000] vlan2: entered allmulticast mode
[  471.140151][T13000] bridge0: entered allmulticast mode
[  471.273820][T13002] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2190'.
[  475.545015][T13013] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2192'.
[  476.588471][T13028] overlayfs: failed to clone upperpath
[  477.515837][T13036] netlink: 'syz.6.2200': attribute type 1 has an invalid length.
[  477.978537][T13036] 8021q: adding VLAN 0 to HW filter on device bond7
[  477.990713][T13039] bond7: option lacp_active: mode dependency failed, not supported in mode balance-alb(6)
[  478.018490][T13046] tipc: Failed to remove unknown binding: 66,0,0/2082390163:1825402777/1825402778
[  478.029296][T13046] tipc: Failed to remove unknown binding: 66,0,0/2082390163:1825402777/1825402778
[  478.096830][T13045] bond7: (slave ip6gretap2): making interface the new active one
[  478.158616][T13045] bond7: (slave ip6gretap2): Enslaving as an active interface with an up link
[  478.644560][T13067] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2211'.
[  479.001608][T13074] SET target dimension over the limit!
[  480.758077][T13097] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  480.786254][T13097] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  482.581740][T13117] SET target dimension over the limit!
[  483.971839][T13122] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2226'.
[  484.250814][T13122] netlink: 'syz.4.2226': attribute type 5 has an invalid length.
[  484.273698][T13122] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2226'.
[  488.169579][T13147] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2232'.
[  488.855775][T13154] xt_CT: You must specify a L4 protocol and not use inversions on it
[  489.813744][T13163] netlink: 'syz.3.2237': attribute type 1 has an invalid length.
[  489.873443][T13163] 8021q: adding VLAN 0 to HW filter on device bond7
[  490.270838][T13163] bond7: (slave gretap1): making interface the new active one
[  490.287242][T13163] bond7: (slave gretap1): Enslaving as an active interface with an up link
[  490.361469][T13163] syz.3.2237 (13163) used greatest stack depth: 19464 bytes left
[  491.081103][T13182] xt_CT: You must specify a L4 protocol and not use inversions on it
[  492.549062][   T59] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  492.578111][T13194] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2245'.
[  492.619900][T13187] vlan0: entered promiscuous mode
[  492.625268][T13187] vlan0: entered allmulticast mode
[  492.649032][T13194] team0: Port device dummy0 removed
[  493.025871][T13194] bond2: (slave bond3): Releasing backup interface
[  493.257954][T13194] bond4: (slave veth5): Releasing active interface
[  493.317768][T13194] bond5: (slave bridge2): Releasing active interface
[  493.429776][T13194] team0: Port device bridge0 removed
[  494.116057][T13194] team0: Port device bridge3 removed
[  494.175547][   T59] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  494.297143][   T59] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  494.551937][   T59] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  498.398766][T13266] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2264'.
[  498.461751][T13263] vlan4: entered promiscuous mode
[  498.466832][T13263] bridge0: entered promiscuous mode
[  498.498379][T13263] vlan4: entered allmulticast mode
[  498.503558][T13263] bridge0: entered allmulticast mode
[  498.645977][T13263] bond0: (slave bond_slave_0): Releasing backup interface
[  498.752882][T13263] bond0: (slave bond_slave_1): Releasing backup interface
[  499.195623][T13281] xt_nat: multiple ranges no longer supported
[  499.492554][T13263] team0: Port device team_slave_0 removed
[  499.537394][T13263] team0: Port device team_slave_1 removed
[  499.583050][T13263] batman_adv: batadv0: Removing interface: batadv_slave_0
[  499.625146][T13263] batman_adv: batadv0: Removing interface: batadv_slave_1
[  499.646688][T13263] bond3: (slave bridge4): Releasing active interface
[  499.675033][T13263] bond4: (slave veth7): Releasing backup interface
[  499.696310][T13263] veth7: left promiscuous mode
[  499.753376][T13263] bond5: (slave ip6gretap1): Releasing active interface
[  499.767157][T13263] bond7: (slave gretap1): Releasing active interface
[  501.750437][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  501.766609][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  502.587411][   T59] hsr_slave_0: left promiscuous mode
[  502.627532][   T59] hsr_slave_1: left promiscuous mode
[  502.636659][   T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  502.659593][   T59] batman_adv: batadv0: Removing interface: batadv_slave_0
[  502.677860][   T28] audit: type=1804 audit(2000000151.118:299): pid=13337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.2277" name="bus" dev="ramfs" ino=41042 res=1 errno=0
[  502.736854][   T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  502.745459][   T59] batman_adv: batadv0: Removing interface: batadv_slave_1
[  502.777070][   T28] audit: type=1804 audit(2000000151.208:300): pid=13337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.2277" name="bus" dev="ramfs" ino=41042 res=1 errno=0
[  502.799141][   T59] bridge_slave_1: left allmulticast mode
[  502.806167][   T59] bridge_slave_1: left promiscuous mode
[  502.816888][   T59] bridge0: port 2(bridge_slave_1) entered disabled state
[  502.893955][   T59] bridge_slave_0: left allmulticast mode
[  502.905677][   T59] bridge_slave_0: left promiscuous mode
[  502.923664][   T59] bridge0: port 1(bridge_slave_0) entered disabled state
[  503.041946][   T59] veth1_macvtap: left promiscuous mode
[  503.048130][   T59] veth0_macvtap: left promiscuous mode
[  503.063674][   T59] veth1_vlan: left promiscuous mode
[  503.073895][   T59] veth0_vlan: left promiscuous mode
[  504.539096][T13358] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2283'.
[  504.599506][T13360] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2286'.
[  507.003170][   T59] bond1 (unregistering): (slave macvlan0): Releasing active interface
[  507.034957][   T59] bond1 (unregistering): Released all slaves
[  508.272897][   T59] team0 (unregistering): Port device team_slave_1 removed
[  508.342408][   T59] team0 (unregistering): Port device team_slave_0 removed
[  508.411196][   T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  508.477164][   T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  508.981619][   T59] bond0 (unregistering): Released all slaves
[  509.095171][T13356] vlan3: entered promiscuous mode
[  509.115260][T13356] vlan3: entered allmulticast mode
[  509.123850][T13356] bridge0: entered allmulticast mode
[  509.179523][T13358] team0: left allmulticast mode
[  509.184660][T13358] bridge0: port 1(team0) entered disabled state
[  509.220816][T13358] bond4: (slave bond5): Releasing backup interface
[  509.242794][T13358] bond6: (slave ip6erspan0): Releasing active interface
[  509.268861][T13358] team0: Port device bridge5 removed
[  509.276739][T13358] bond7: (slave ip6gretap2): Releasing active interface
[  509.999453][   T12] ------------[ cut here ]------------
[  510.005616][   T12] WARNING: CPU: 1 PID: 12 at io_uring/io_uring.c:3214 io_ring_exit_work+0x3a7/0x820
[  510.015473][   T12] Modules linked in:
[  510.019457][   T12] CPU: 1 PID: 12 Comm: kworker/u4:1 Not tainted syzkaller #0
[  510.027189][   T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  510.037637][   T12] Workqueue: iou_exit io_ring_exit_work
[  510.043222][   T12] RIP: 0010:io_ring_exit_work+0x3a7/0x820
[  510.049275][   T12] Code: 78 23 e8 fc 5a 0b f7 48 8b 7c 24 30 48 8b 74 24 08 e8 ed ec 10 00 48 85 c0 75 1d e8 e3 5a 0b f7 e9 b9 fd ff ff e8 d9 5a 0b f7 <0f> 0b b8 70 17 00 00 48 89 44 24 08 eb cf c7 84 24 90 00 00 00 00
[  510.069339][   T12] RSP: 0018:ffffc90000117a40 EFLAGS: 00010293
[  510.075427][   T12] RAX: ffffffff8a7bb9d7 RBX: ffff888024e54000 RCX: ffff88801be7da00
[  510.083517][   T12] RDX: 0000000000000000 RSI: fffffffffffffffe RDI: 0000000000000000
[  510.091713][   T12] RBP: ffffc90000117bb0 R08: ffffc900001179c7 R09: 1ffff92000022f38
[  510.100036][   T12] R10: dffffc0000000000 R11: fffff52000022f39 R12: dffffc0000000000
[  510.108126][   T12] R13: ffff888024e54288 R14: 0000000100005139 R15: 000000010000513b
[  510.116158][   T12] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  510.125144][   T12] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  510.131968][   T12] CR2: 00007fb58dbe8600 CR3: 0000000035551000 CR4: 00000000003506e0
[  510.139987][   T12] Call Trace:
[  510.143268][   T12]  <TASK>
[  510.146194][   T12]  ? io_ring_ctx_wait_and_kill+0x2b0/0x2b0
[  510.152083][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[  510.157576][   T12]  ? process_scheduled_works+0x96f/0x15d0
[  510.163456][   T12]  ? process_scheduled_works+0x96f/0x15d0
[  510.169296][   T12]  process_scheduled_works+0xa5d/0x15d0
[  510.174856][   T12]  ? assign_work+0x430/0x430
[  510.179525][   T12]  ? assign_work+0x3d0/0x430
[  510.184140][   T12]  worker_thread+0xa55/0xfc0
[  510.188926][   T12]  kthread+0x2fa/0x390
[  510.192990][   T12]  ? pr_cont_work+0x560/0x560
[  510.197717][   T12]  ? kthread_blkcg+0xd0/0xd0
[  510.202296][   T12]  ret_from_fork+0x48/0x80
[  510.206702][   T12]  ? kthread_blkcg+0xd0/0xd0
[  510.211347][   T12]  ret_from_fork_asm+0x11/0x20
[  510.216140][   T12]  </TASK>
[  510.219332][   T12] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  510.226609][   T12] CPU: 1 PID: 12 Comm: kworker/u4:1 Not tainted syzkaller #0
[  510.233979][   T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  510.244032][   T12] Workqueue: iou_exit io_ring_exit_work
[  510.249579][   T12] Call Trace:
[  510.252843][   T12]  <TASK>
[  510.255763][   T12]  dump_stack_lvl+0x18c/0x250
[  510.260437][   T12]  ? show_regs_print_info+0x20/0x20
[  510.265632][   T12]  ? load_image+0x400/0x400
[  510.270123][   T12]  panic+0x2dc/0x730
[  510.274013][   T12]  ? bpf_jit_dump+0xd0/0xd0
[  510.278506][   T12]  ? ret_from_fork_asm+0x11/0x20
[  510.283434][   T12]  __warn+0x2e0/0x470
[  510.287411][   T12]  ? io_ring_exit_work+0x3a7/0x820
[  510.292603][   T12]  ? io_ring_exit_work+0x3a7/0x820
[  510.297720][   T12]  report_bug+0x2be/0x4f0
[  510.302050][   T12]  ? io_ring_exit_work+0x3a7/0x820
[  510.307150][   T12]  ? io_ring_exit_work+0x3a7/0x820
[  510.312261][   T12]  ? io_ring_exit_work+0x3a9/0x820
[  510.317355][   T12]  handle_bug+0xcf/0x120
[  510.321585][   T12]  exc_invalid_op+0x1a/0x50
[  510.326072][   T12]  asm_exc_invalid_op+0x1a/0x20
[  510.330924][   T12] RIP: 0010:io_ring_exit_work+0x3a7/0x820
[  510.336662][   T12] Code: 78 23 e8 fc 5a 0b f7 48 8b 7c 24 30 48 8b 74 24 08 e8 ed ec 10 00 48 85 c0 75 1d e8 e3 5a 0b f7 e9 b9 fd ff ff e8 d9 5a 0b f7 <0f> 0b b8 70 17 00 00 48 89 44 24 08 eb cf c7 84 24 90 00 00 00 00
[  510.356265][   T12] RSP: 0018:ffffc90000117a40 EFLAGS: 00010293
[  510.362333][   T12] RAX: ffffffff8a7bb9d7 RBX: ffff888024e54000 RCX: ffff88801be7da00
[  510.370390][   T12] RDX: 0000000000000000 RSI: fffffffffffffffe RDI: 0000000000000000
[  510.378354][   T12] RBP: ffffc90000117bb0 R08: ffffc900001179c7 R09: 1ffff92000022f38
[  510.386321][   T12] R10: dffffc0000000000 R11: fffff52000022f39 R12: dffffc0000000000
[  510.394289][   T12] R13: ffff888024e54288 R14: 0000000100005139 R15: 000000010000513b
[  510.402264][   T12]  ? io_ring_exit_work+0x3a7/0x820
[  510.407389][   T12]  ? io_ring_ctx_wait_and_kill+0x2b0/0x2b0
[  510.413212][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[  510.418403][   T12]  ? process_scheduled_works+0x96f/0x15d0
[  510.424140][   T12]  ? process_scheduled_works+0x96f/0x15d0
[  510.429866][   T12]  process_scheduled_works+0xa5d/0x15d0
[  510.435440][   T12]  ? assign_work+0x430/0x430
[  510.440038][   T12]  ? assign_work+0x3d0/0x430
[  510.444629][   T12]  worker_thread+0xa55/0xfc0
[  510.449236][   T12]  kthread+0x2fa/0x390
[  510.453297][   T12]  ? pr_cont_work+0x560/0x560
[  510.457974][   T12]  ? kthread_blkcg+0xd0/0xd0
[  510.462555][   T12]  ret_from_fork+0x48/0x80
[  510.466964][   T12]  ? kthread_blkcg+0xd0/0xd0
[  510.471548][   T12]  ret_from_fork_asm+0x11/0x20
[  510.476316][   T12]  </TASK>
[  510.479725][   T12] Kernel Offset: disabled
[  510.484125][   T12] Rebooting in 86400 seconds..