last executing test programs:

16m30.890697107s ago: executing program 32 (id=721):
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
iopl(0x3)
recvfrom$rxrpc(0xffffffffffffffff, &(0x7f00000000c0)=""/1, 0x1, 0x22, &(0x7f0000000100)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e22, 0x6, @dev={0xfe, 0x80, '\x00', 0x30}}}, 0x24)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = mq_open(&(0x7f0000000580)='!\x7f\x00\xca\x00\x00\x00\f\x00vt\x00\x01E!\x05\x99\xb7|`', 0x6e93ebbbcc0884f2, 0x61, &(0x7f0000000480)={0x0, 0x2, 0x7})
mq_timedreceive(r1, &(0x7f0000000700)=""/200, 0xc8, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x3, 0x220108, 0xb, 0x1}, 0x50)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, r2}, 0x38)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x2000c890}, 0xcc084)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
wait4(0x0, &(0x7f0000000400), 0x1000000, &(0x7f00000005c0))
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
migrate_pages(0x0, 0x5, &(0x7f0000000180)=0x9, &(0x7f0000000080)=0x272)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x9)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e5000380ffffff00"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8}, 0x94)

6m42.996591978s ago: executing program 5 (id=2515):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c2", 0x17)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)

6m42.727716834s ago: executing program 5 (id=2516):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000500)={'veth0_vlan\x00'})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
keyctl$KEYCTL_PKEY_SIGN(0x1b, 0x0, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x6)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28)
sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000340)="5fdbd61342a1560054f74cee82024cacdf79b6be94f99a7aea5b7678644cc1ef33880d4a59cad1", 0x27}], 0x2}, 0x0)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28)
readv(r1, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xfa}], 0x1)

6m41.198180111s ago: executing program 5 (id=2520):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000340)='./file1\x00', 0x0, &(0x7f0000000000)={[{@space_cache_v1}, {@clear_cache}, {@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0xff, 0x50d4, &(0x7f00000051c0)="$eJzs3U+IVWUfB/Dnzjg6KDjXnbp48QW3wiQKRURDaFaYc82CosVMLYIQYVAwFy3EgpIWDgha4cJgWmR/nFVFC3GVBEEQBcEgzEKQdkIxGC6Ke8957pz7HO+5dyZ1TD+fmDnnOb/zPOeZy1nc783n3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAhhJNz585V1bdemTm7Y2DP1Us3T+w8NTE6H0KtdbyW1yeeeuaFNw5MPD8cO0zuz7b1erchs67zWWN1x8Fmv86f10IIQ8kAg/l292Bp1OLu4fKAlfZfXNh25NbeXTPHxg9dOLp5qvyn0zS80hNYKfl9dW3xXhpr/R5Izmi3C7dereMWzfqnN9w9+SMAgCUZbbQ27bej+Vvcdvt4Wk/aY0l7OmnHdwjTxcZyZOOu7jbPLWl9heY5lkWFNd3mWU/q+evfbjeSekjbnVFjCfPsPDWPNMPd5jmV1FdqngAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD3k6c/+eJ6VX3rlZmzOwb2XL1088TOUxOj8yHUW8drWbn2xMLcwqa3dj/63e4vP/6zPn5yMO8Xt6sKJ4ff4s5jIyG8Xqhci8P+vj6ERmeh1QwflQtvtnaejQUAAAAeJJtavwfa7SwODnW0a600WWv9F2Vhcf/FhW1Hbu3dNXNs/NCFo5unlj9eo8t4Y7cdr92uL/7UCsE4xt90vMV6PPVwaZxq6Yhpnn959MPtVf1L+b9enf/jKyf/AwAA8G/I/+k41Xrl//nPX91X1b+U/7d0XLKU/+OMY/4fCMvL/wAAAHA/u9v5f6w0TrVe+f/r9/edrupfyv+j/eX/VcVpx4M/xgkfHAlhtNfUAQAAgC7i/3df/Ggh5vXsk4M0r7+49fpQ1Xil/D/WX/6vHBQAAAC4p34488jfVfVS/m/0l//X3NVZAwAAAEvxv/cmD1TVS/l/sr/8vzbf5isfsk7fx3+FcHokhOHmzlRWuBKmn2wXAAAAgDsk5vSXvt18tOq8Uv6fqn7+f3zSQVz/3/H8v9L6/0Ihe+rf4x4MAAAAwMOovJ4/Ph4/++aCbt+/3+/6/09//nVD1fVL+f94f/l/sLi9k9//BwAAAMvwX/v+v1dK41Tr9fz/t9/dsLT8P91f/o/bdcU/73J8fd4ZCWFjcyd/muBn8XIHk8LsUKHQ0kh6HIg98sLsmkKhZSrpsX0khP83d44nhQ2xMJ0UbqzPC+eTwk+xkN8P7cJXSeFyvNPOrM+nmxa+iYV8gcVsXEGxrr0kIunxR7cezcJte8y1Lw4AAPBQieE5z7JDnc2QRtnZWq8T1vY6YaDXCYO9TliVnJCe2O14mOwsxON//TL+XKhQyv/n+8v/8aVYnW26rf8Pcf1//r2G7fX/k7FQTwqzsdBInxjQiNfIwu4H8Rr1Rt7jxsZ2AQAAAB5o8XOBwRWeBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAPe/ceY8dVHw787PN61+vdDUHKQxYxL0N+ktdrOw7WLyCcVBEIpGQtov6DQtbYm9TxBhs/Co4s1RhUlCKEC66IQh+2RFSnEsgqbXmEEosqQVUtGoU2fziPpgWEKkGjFNclSiRX986c2bln9j78WNsbPh/Je8+933POzDn33vGcmblnAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgt8PV373hy+3i7/jR1796U+8HXvjBbw6u/9I9ky+FMNV4vScL97zvzHNnrvvU7Ru+d/s3Hjk9fudDg3m5PB6W1v/05k8+F2v92bIQvt0TQn8aWDWSBQby5yOxvuUjIVwV5gJFiZnhrES64PDkUAhHwlygqOq7QyGMlAJ3PfPDJ75YTxweCuGdIYRauowXatkyhtLAysEsMJwGdvRngf89mykC3+nNAnDB4peh+NAfn2rOMD5/uRafv4GLtmKXV9q8vpgYb53vV7cu8EqVDKYvTF3Q21apjgVR+Xqc8G1bBN+2Sj8f8raVd6TyPZSzc6Fa6N06c+/mvbN74iu9YWKir1VNC/Q+n3pl/5ZzSS+az2FcgfGL8jm8//DNzw5+7I4XH3n98f2na19bfqGr2ap7F1ot5J+5RfM+RhttTxbB16+yl7TCTlcI4fSJk/vbxSvj//H24//4cY6PvU25Y62vjWZj8/jKSEy8PJqNzQEAAGDRWAxHTQdX/OtP29VXGf+v6O78fzzlnw/ms9aeCGFjI/HZsRCubbyeBR6Li/v4WAhvbaSmmgO3JoETIVzXSNxYVJWUWBJLrEgCvxjNAxuTwFMxMJUEHo2BQ0ngczFwPAlsiYETSeC2GAjbmtvx/0bzdnQdGIqB6awTj8erEH49GpeW9NVzRVUAAAAXST46HGh+WrrW4UIzxOHl8aFOGeIV2C0z1JIa0hFsMaxqWUN/pxp6O9VQtPtA++ZXau7pVHPlMoye5gz/c+qaHaGNyvh/sv34vzbPivRUzv+HyU2Nh5i7N4/MFhmmp5oyAAAAABfg9948vbldvDL+39jd9f/xmEhfKXM4GQ9DbB8LYbI5kFV7SzWQnfVemgcAAABgMSjOxxfnwrflj9kl2ul4upp/6hzzxxP/G+fNv+PH//J4u/WtjP+nurv+f7j5MVuJp+JafGUshCWlwI/iWtYDDSti4KX3Nwfy9j8VO+ALsar8woSiqi/EEtMxMJkEjrQq8XRR4trmQP5mFQv/bNGObXmJUgAAAAAuuXg4IJ6Xj9f/r/nbP3yyXbnK+H/63K7/b4yDK5f3zy4NYXV/CH3pDwNODmcTA8bASE+e+PvhrK6+tKqDwyHcUm9YWtV/5PP/96dzDP5kKKsqBq5927FXVtYTXx8KYXU58OxHj66vJ/YmgWLhvzsUwg311qYL/7sl2cIH0oU/vCSEt5QCRVVbloRQX9hgWtU/1PL7GKRVHa+FcHUpUFT1nloI+wIAi1X8v3Rr+cXd+x7cvnl2dmbXAibiQfyhcO+22ZmJLTtmt9ZarNPWZJ2b5jH6TLVN3d765vk4R9Hdx8a6SRc/FJwsLys/kF+5cjB/HneGBhrtXDvQ9HRd2uR3v726iFDalWrV5N4FbvJwuZK5N7FSf8w/GJaGJXt3z+ya+PTmPXt2rcn+dpt9bfY3nmfK+mpN2lfD861bFx+PltNlJc63r1aWK1m954Gdq3fve3DVtgc23zdz38wnNkyuW7vh5sn171ldb9Rk9rdDS1fOV3PS0rNHu2zWRWzp9f2lSi7FRkNCQmKxJQYH7jzVbvNTGf/vbD/+j1uduOHP52dodf5/PJ7mz16fO80/HQNHuj3/P97qbH5xYcCKJHAgBg44zQ8AAMAbQzwcGY9mxoPSB971wvvalauM/w909/v/izT/fzF1/YdaTfN/Yywx2Wr+/3Sa/2L+/wOt5v9Pp/kv5v8/chnm/99bBJIu+bX5/wEAgDeCSzf/f8fp/dMbBFQydJzeP71BQCVDx2n8u71BwDnP//83v1yzPrRRGf8f6m78b+J+AAAAuHJcc9sNP24Xr4z/j3Q3/r/08/+FVtf/r2gVmGo1MaD5/wAAAFikWs3/98xHdr6/XbnK+P94d+P/eNlFb1PuWOtro9mcdiGd0+7l0eInAwAAALA49IaJiYEu8zZNjHrr+S/zVJwKtE267NDnj53b7/9PdDf+b/pdxv2Hb3528GN3vPjaI68/vv907WvL587/AwAAAAun2+MSAAAAAAAAAAAAAADA5ffo1d+ad16AqPL7/7Cp8Xqr3//H+/413TTxTD4Z4IE4s/6XxkzzBwAAAAvroVtffTj+u+/Lf/Rf7fJWxv/j3Y3/4/0F8vvgZbfeOxHv//fZsRAat9YbzwKPxcV9fCyEtzZSU7FEdkO9D8USk1ngsThh4o2xxPRUc1VLYuB4EvjFaB44kQSeioH8KMWxeGPAPx4NYX0jtam5xM5YYjwJ3BkDK5LARAxMJoFlMbAxCfxyWR6YSgL/FAP5zQeLvvrWsryvAAAAzkU+zhpofhrScd7x/k4Zejpl6LiI4U4ZejtlqLXIEJ//dVyHgfJ8/HmG+NJAWutQUkslQ7wZ3vk3vZiu7+nmnGnByqL7YsHx5pwxw85/vukroY3K+H9Fd+P/y3j///Ru/htjYEUS2BkDG5PA9KY8cOSa5oD7/wMAAHBla3X//9G3/NWhduUq4//J7sb/8UDEm5tyx1o73/8/f37Xh7+5r7HKJ0dDeHs5sP3g9qvqiUdHQ3hXOfDE3Tc2Ru0H0xLff/G2n9cT96SBD65605l64r1JYDp20nVpIB5VObMsCcTu/UkaiP1xPA0M5oGHlmXt6En76j9Hsr7qSfvq1Eh2eUVP2lffHsmW0ZM28HASKBr4yTQQG3hHHuhN1+qbS7O1ioGRWPQvlhYXfQAAcGWKe4ED4d5tszOT6U94r+9vfoyabln+mWq1PV0u/vl4a/K7j411k+5L90VrRVUDoVZvwprK7mo5S0+jlRenlg5d9+YWTe50t/feFuVS59p1g61bNJS1aGLLjtmtAx0bvq5zlrX9HbOsqQx2yll6G13aRS1drEsXLeqyb7pY5fi8N0xM9CW5/n8MjocmnT4R3d6vr3yf/1afgnKeo5//91fb1VcZ/2/sbvwf27M0lD7On4u1/mxZCN/umTsaUQRWjWSB2NyRODxePhLCVaV+KErMDGclBpMFhyeHshHqYFrVd4eyYwzx+V3P/PCJL9YTh4dCeGfpvSqW8UItW8ZQGlg5mAWG08CO/iwQr/woAt/pzQJwwYqNQvxA5T91KYzPX67F5++Nck/QtHmVa6DmyTffNneh1NIX8muqCuf2tlWqY0FUvh4nfNsW47ct+LaVd6TyPZSzc6Fa6N06c+/mvbN74ivlPdmKBXqfy3up3aQvwufwwPmvbWe1dAUmk83H5Pzl5v8c9sTq7j9887ODH7vjxUdef3z/6drXlne9Gi3EgcKT//2mq8rdu9BqIf/MLbrtyZTtyWL8b2Dc2xZCOPTnQ59sF6+M/6e6G//3J48Nr8bO3D0WwrtLnXsydv/vjGXbwVIg20peXQ1kl9z/dLTllhMAAAAutuJwR3G8YFv+mP0gPB0nV/NPnWP+eLxi47z5u13v/U/+/mPt4pXx/3T78f+SZDWd/3f+nwXi/P+8rvRD0UvSFw5c0KHoSnUsCOf/53Wlf9uc/5+X8//O/8/H+f8OnP+f15X+tlX2knba6QohnL1+4OF28cr4f2d34//fsvn/09n8i/n/00n7i/n/p1vN/7+z1fz/B8z/DwAALKgWE82n47zK5PyVDOnk/JUMPUmGc7/FQMdp9M3/n87/f/DPbtkT2qiM/w90N/6PH4eR8tIXy/z/45talNi4qXl1i8ChGNjpjgEAAABcRvEAQbzovdsZJgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFhYd7x6ZnO7+Dt+9PWv3tT7gRd+8JuD6790z+RLIWxrvN6ThXved+a5M9d96vYN37v9G4+cHr/zoVpebiB/XN6UO9b62mgIR0qvjMTEy6P1J3OBuz78zX399cTJ0RDeXg5sP7j9qnri0dEQ3lUOPHH3jdfUEwfTEt9/8baf1xP3pIEPrnrTmXrivXmgJ13dP12WrW5PurpfXBbCWClQrO79y5qrKpbxgTzQmy7jL0eyZcTASCz68Ei2jBiYjSW2LQlhdX8IfWlV/1jLqupLq/peLauqL63qD2oh3BJC6E+r+rfBrKr+tOVPD2ZVxcC1bzv2ysp64uhgCKvLgWc/enR9PbErCRQL/8hgCDfUPzLpwr81kC18IF34nwyE8JZSoKhqeiCE+sIG06pO9GdVDaZVfaM/hKtLgaKqm/pD2Be4XOKGZGv5xd37Hty+eXZ2ZtcCJgbzZQ2Fe7fNzkxs2TG7tZasUys9pfTZz5x/259/Zf+WRuLuY2PdpIv1miyvy9NTlRfLz/vzpwONdq4daHq6brE0ebhcydybWKk/5h8MS8OSvbtndk18evOePbvWZH+7zb42+9uXR7O+WrNY+mpluZLVex7YuXr3vgdXbXtg830z9818YsPkurUbbp5c/57V9UZNZn8vRkuPXvqWXt9fquRSbDQkJCQWW6K3aes2eaVvxys7+nMrOhBqjQ10ZVhRztLTaOXFaPSt59Ha3Lk2ujIkqbRoTWXgUMmytnOWdZUxw1yWoSxLY1+wMjgs19Tb6NL4vDdMTPS16ofx5qfl7v3VBXTvqdh1XaYBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4P3bgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04FgAAAAAQ5m8dRs8GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXAoAAP//Qczu7Q==")
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, <r3=>0x0})
sched_setscheduler(r3, 0x5, &(0x7f0000000100)=0x7)
process_madvise(r2, &(0x7f0000000280)=[{0x0}, {&(0x7f00000000c0)='\x00', 0x1}], 0x2, 0x8, 0x0)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0)
fanotify_mark(0xffffffffffffffff, 0x105, 0x4800003a, r4, 0x0)
truncate(0x0, 0x7f0)
r5 = getpid()
accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x2711, @host}, 0x10, 0x1800)
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x120, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

6m36.48598309s ago: executing program 5 (id=2527):
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0x88002, 0x0)
r1 = memfd_create(&(0x7f0000000080)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ftruncate(r1, 0xdcb)
pread64(r1, &(0x7f00000009c0)=""/239, 0xef, 0x1)
r2 = getpgrp(0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota')
sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x408241, 0x28)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05640, &(0x7f0000000440)={0x1, @pix_mp={0x800, 0x1193fddc, 0x34325258, 0x5, 0xb, [{0x1, 0xbf0e}, {0x4, 0xce83}, {0x5, 0x4}, {0xc2, 0x3}, {0x35, 0x6}, {0x10000, 0x8a9}, {0x1, 0x70}, {0x9, 0x3}], 0x5b, 0x4, 0x7, 0x0, 0x7}})
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, 0x0, 0x0)
r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f29, 0x5, 0x3, 0x40004, 0xfffffffd, 0xb, 0x0, 0x0, 0x81, 0xfffffffc, 0x2, 0xfffffffe, 0x8, 0x1, 0x4, 0x101, 0x8, 0x2b0, 0x9, 0x5, 0x99, 0x400000, 0x80, 0x800, 0x7, 0x2000e69, 0x6, 0x80004, 0xfffffffe, 0x0, 0xfffffff8]})
ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000000))

6m33.060193225s ago: executing program 5 (id=2536):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x5e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
sendmmsg$inet(r2, &(0x7f0000000440)=[{{&(0x7f0000000140)={0x2, 0x4e24, @multicast1}, 0x10, 0x0}}], 0x1, 0x44008004)
write$binfmt_misc(r2, &(0x7f0000000300), 0xfdef)

6m31.315217395s ago: executing program 5 (id=2537):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfff9, 0x8}, 0x8)
sendto$inet6(r1, &(0x7f0000000580)="81", 0x1, 0xc001, &(0x7f0000000280)={0xa, 0x0, 0x92, @rand_addr=' \x01\x00', 0x511}, 0x1c)
setsockopt$inet6_int(r1, 0x29, 0x43, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x0)
sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRESDEC=r2, @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x20040010}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_MPP(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r9, 0x301, 0x0, 0xffffffff, {{0x11}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
sendmsg$NL80211_CMD_SET_REG(r6, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)={0x144, r9, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_REG_RULES={0x118, 0x22, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xd}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xfffffff5}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xfffffffb}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x81}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1e8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x80000000}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xcee6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xf8c}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7fff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xffffff80}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xa02}]}, {0x4}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xcfd}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7fffffff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7f}]}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x33}]}, 0x144}, 0x1, 0x0, 0x0, 0x80}, 0x800)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x54, 0x10, 0xffffff1f, 0xfffffffc, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x10000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}, @IFLA_GRE_TOS={0x5, 0x9, 0x9}]}}}, @IFLA_MASTER={0x8, 0xa, r7}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x0)

6m16.084075114s ago: executing program 33 (id=2537):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfff9, 0x8}, 0x8)
sendto$inet6(r1, &(0x7f0000000580)="81", 0x1, 0xc001, &(0x7f0000000280)={0xa, 0x0, 0x92, @rand_addr=' \x01\x00', 0x511}, 0x1c)
setsockopt$inet6_int(r1, 0x29, 0x43, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x0)
sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRESDEC=r2, @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x20040010}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_MPP(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r9, 0x301, 0x0, 0xffffffff, {{0x11}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
sendmsg$NL80211_CMD_SET_REG(r6, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)={0x144, r9, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_REG_RULES={0x118, 0x22, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xd}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xfffffff5}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xfffffffb}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x81}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1e8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x80000000}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xcee6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xf8c}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7fff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xffffff80}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xa02}]}, {0x4}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xcfd}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7fffffff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7f}]}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x33}]}, 0x144}, 0x1, 0x0, 0x0, 0x80}, 0x800)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x54, 0x10, 0xffffff1f, 0xfffffffc, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x10000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}, @IFLA_GRE_TOS={0x5, 0x9, 0x9}]}}}, @IFLA_MASTER={0x8, 0xa, r7}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x0)

5m28.386140445s ago: executing program 34 (id=2621):
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f00000000c0)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000040)={@host})
ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r3, 0x7cb, &(0x7f0000000980)={0x0})
r4 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=<r5=>0x0, 0x0)
socket(0x10, 0x3, 0x0)
syz_io_uring_submit(r5, 0x0, 0x0)
io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_GET_MSRS_cpu(r8, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0x4000009d, 0x0, 0x401}]})
r9 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1)
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r9, 0x4020aed2, &(0x7f00000000c0)={0xffff1000, 0x301000, 0x8})
ioctl$KVM_SET_MEMORY_ATTRIBUTES(0xffffffffffffffff, 0x4020aed2, &(0x7f0000000000)={0xffff1000, 0x13800, 0x8})
socket$nl_netfilter(0x10, 0x3, 0xc)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468"], 0xa8}, 0x1, 0x0, 0x0, 0xb66c1ed529ab28f1}, 0x0)

5m24.702127395s ago: executing program 1 (id=2650):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x6)
sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000340)="5fdbd61342a1560054f74cee82024cacdf79b6be94f99a7aea5b7678644cc1ef33880d4a59cad1", 0x27}], 0x2}, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28)
readv(r0, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xfa}], 0x1)

5m22.715343629s ago: executing program 1 (id=2651):
socketpair$unix(0x1, 0x3, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'veth0_vlan\x00'})
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
keyctl$KEYCTL_PKEY_SIGN(0x1b, 0x0, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x6)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28)
sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000340)="5fdbd61342a1560054f74cee82024cacdf79b6be94f99a7aea5b7678644cc1ef33880d4a59cad1", 0x27}], 0x2}, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28)
readv(r0, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xfa}], 0x1)

5m20.552630022s ago: executing program 1 (id=2654):
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x4003, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x8, 0x101, 0x7, 0x7, 0x2, 0x7fffffff}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b928, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
r5 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r5, &(0x7f0000000240)="800000800000210ee7decd7a0000", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r4, 0x1, 0xd8, 0x6, @broadcast}, 0x14)

5m14.027589875s ago: executing program 1 (id=2663):
openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
io_uring_setup(0x78bc, &(0x7f0000000440)={0x0, 0x4f15, 0x0, 0x0, 0xfffffffe})
r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x6, 0x3, 0x80, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0})
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r1, 0xffffffffffffffff, 0x0)

5m12.836322872s ago: executing program 1 (id=2665):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
r1 = getpid()
creat(0x0, 0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
open(0x0, 0x143142, 0x43)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)

5m11.434460582s ago: executing program 1 (id=2666):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfff9, 0x8}, 0x8)
sendto$inet6(r1, &(0x7f0000000580)="81", 0x1, 0xc001, &(0x7f0000000280)={0xa, 0x0, 0x92, @rand_addr=' \x01\x00', 0x511}, 0x1c)
setsockopt$inet6_int(r1, 0x29, 0x43, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x0)
sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5", 0x3a}], 0x1}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRESDEC=r2, @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x20040010}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_MPP(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r9, 0x301, 0x0, 0xffffffff, {{0x11}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
sendmsg$NL80211_CMD_SET_REG(r6, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)={0x144, r9, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_REG_RULES={0x118, 0x22, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xd}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xfffffff5}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xfffffffb}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x81}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1e8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x80000000}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xcee6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xf8c}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7fff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xffffff80}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xa02}]}, {0x4}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xcfd}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7fffffff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7f}]}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x33}]}, 0x144}, 0x1, 0x0, 0x0, 0x80}, 0x800)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x54, 0x10, 0xffffff1f, 0xfffffffc, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x10000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}, @IFLA_GRE_TOS={0x5, 0x9, 0x9}]}}}, @IFLA_MASTER={0x8, 0xa, r7}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x0)

5m10.628485768s ago: executing program 6 (id=2669):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r3, 0x0)
pipe(&(0x7f0000000380))
getpgrp(0x0)
r4 = socket(0x10, 0x2, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000140)={'wg0\x00', <r6=>0x0})
sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="00032cbd7000fedbdf250000000024000300b08073e8d44e91e3da922c22438244bb885c69e269c8e9d835b114293a4ddc6e50050880b8010080080003000100000008000a000100000080010980c4000080060001000a00000014000200ff0200000000000000000000000000010500030001000000060001000200000008000200000000000500030002000000060001000200000008000200e00000010500030001000000060001000a0000001400020000000000000000000000ffffac1414aa0500030001000000060001000a00000014000200000000000000000000000000000000000500030000000000060001000a00000014000200000000000000000000000000000000010500030002000000b8000080060001000a00000014000200fc0200000000000000000000000000000500030001000000060001000a00000014000200fe8000000000000000000000000000250500030002000000060001000200000008000200e00000010500030001000000060001000200000008000200ac1414aa0500030003000000060001000200000008000200640101000500030003000000060001000a00000014000200fe8000000000000000000000000000aa050003000000000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b14000080060005000600000008000300070000000801008024000200896d7e20716557dfa7b4cf8ef7cbab270543c445fcd3f0ae64645d1a51287b51200004000a00080000000006fc0200000000000000000000000000001a0900002c00098028000080060001000a00000014000200000000000000000000000000000000000500030000000000200004000a004e2100000007ff0100000000000000000000000000010800000008000a00010000002400020017d2a9926f60f1e5c5e58ee1d25c9f584a808f907cac096195df1e59a7be978324000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b392224000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c3000008024000200265aa9024b758d93f7bbaeb1a052092b40be85e9786d2928027299aa545118ce08000a000100000080010080240002003cd07215277067a93e4bb14b2f840df3412d101e2e7c423005489de705fcabc124000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff1400040002004e21ac14141d0000000000000000f8000980f4000080060001000a00000014000200000000000000000000000000000000000500030002000000060001000a00000014000200000000000000000000000000000000000500030000000000060001000a00000014000200ff0200000000000000000000000000010500030002000000060001000200000008000200ac1414aa0500030001000000060001000200000008000200000000000500030000000000060001000200000008000200ac1414aa0500030002000000060001000a00000014000200200100000000000000000000000000010500030002000000060001000200000008000200e00000010500030001000000200004000a004e2300000008ff0200000000000000000000000000010900000008000300000000002800008024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff5000008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c0800030000000000200004000a004e2100000002ff0100000000000000000000000000018501000050000080240002002c86696c0a59e6fb78c8c5f8fea5b04b5432bc6dd5e03008e4fc5c0b26b2963d08000a000100000008000a0001000000080003000100000008000a000100000008000a0001000000080005000100000008000500000000000800050000000000080005000000000008000100", @ANYRES32=r6, @ANYBLOB="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"/1884], 0xd0c}, 0x1, 0x0, 0x0, 0x800}, 0x4040000)
r7 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00'}}}]}, 0x48}}, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0)
ioctl$KVM_CHECK_EXTENSION(r10, 0xae03, 0x10)
connect$inet6(r5, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c)
r11 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r11, 0x84, 0x7f, 0x0, 0x0)

5m9.130520844s ago: executing program 6 (id=2672):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
r1 = getpid()
creat(0x0, 0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
open(0x0, 0x143142, 0x43)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r4 = gettid()
process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)

5m5.542411568s ago: executing program 6 (id=2680):
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x6, &(0x7f0000000040)=0xff, 0x4)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000004}, 0xc010)
r0 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0)
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000008}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x851}, 0x10890)
r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x80044940, &(0x7f00000000c0))
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r3, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000001c00)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61210c410d799168ffc4b64677af924affd442035db81e18c2d2462d0bb25fff9d3b1ce903597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb", 0x3b}, {&(0x7f0000000740)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6f10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba9547e1e343b451d9025c4e153612d4674b9411fb4de295599abbcb388d291aa839a", 0x98}, {&(0x7f0000000a00)}, {&(0x7f00000021c0)="d317b0ddf805c029d66c50f61f6e1b90bd02c1c2e324ab02219e3cef175c99254ff1c10c27155c41bd5cee7a3663ed4a127c6c18ebb7a51008a0053ac96edeb5843d7b59b6c02532b26ca1c490d9b8113cbdbe99a123e3d5335c531c1c50b15be67220f38338a1e7c494acc2da3b410cf4cf7129cbb5faa24dd84e800249b234bdb2", 0x82}], 0x4}}], 0x2, 0x2090)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r3, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

5m4.021098205s ago: executing program 6 (id=2681):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
writev(r0, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

5m1.798965512s ago: executing program 6 (id=2684):
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b928, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
r6 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r6, &(0x7f0000000240)="800000800000210ee7decd7a0000", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xd8, 0x6, @broadcast}, 0x14)

4m56.142049825s ago: executing program 35 (id=2666):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfff9, 0x8}, 0x8)
sendto$inet6(r1, &(0x7f0000000580)="81", 0x1, 0xc001, &(0x7f0000000280)={0xa, 0x0, 0x92, @rand_addr=' \x01\x00', 0x511}, 0x1c)
setsockopt$inet6_int(r1, 0x29, 0x43, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x0)
sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5", 0x3a}], 0x1}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRESDEC=r2, @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x20040010}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_MPP(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r9, 0x301, 0x0, 0xffffffff, {{0x11}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
sendmsg$NL80211_CMD_SET_REG(r6, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)={0x144, r9, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_REG_RULES={0x118, 0x22, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xd}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xfffffff5}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xfffffffb}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x81}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1e8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x80000000}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xcee6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xf8c}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7fff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xffffff80}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xa02}]}, {0x4}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xcfd}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7fffffff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7f}]}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x33}]}, 0x144}, 0x1, 0x0, 0x0, 0x80}, 0x800)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x54, 0x10, 0xffffff1f, 0xfffffffc, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x10000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}, @IFLA_GRE_TOS={0x5, 0x9, 0x9}]}}}, @IFLA_MASTER={0x8, 0xa, r7}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x0)

4m52.505171712s ago: executing program 6 (id=2696):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close(r1)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x7}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r7, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x20000804, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14)

4m36.917143912s ago: executing program 36 (id=2696):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close(r1)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x7}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r7, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x20000804, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14)

4m24.425451034s ago: executing program 7 (id=2735):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x6)
sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000340)="5fdbd61342a1560054f74cee82024cacdf79b6be94f99a7aea5b7678644cc1ef33880d4a59cad1", 0x27}], 0x2}, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28)
readv(r0, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xfa}], 0x1)

4m21.054153897s ago: executing program 2 (id=2738):
syz_open_procfs(0x0, &(0x7f0000000200)='task\x00')
syz_open_procfs(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40, 0x40}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0xd7c}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x80c9bcc21663c592}, 0x8000)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r2}, 0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x10, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7ed1}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0xfffdfffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b000000000000000000000000000400000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000300)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xf2002000, 0x0, 0x0, 0x0, 0x200}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8, 0x100}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r4}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x48000)

4m19.153794115s ago: executing program 2 (id=2739):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)}], 0x3}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)

4m18.445019356s ago: executing program 2 (id=2741):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102384, 0x18ff0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = dup(r1)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c)
sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043)
r3 = dup(r1)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe654, 0x2, 0x4, 0x48, 0xff}, 0x9c)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c)
fsopen(&(0x7f0000000000)='cgroup\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(0xffffffffffffffff, &(0x7f000000c3c0)={0x2020}, 0x2020)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0)
close(r4)

4m16.96504948s ago: executing program 2 (id=2743):
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x6, &(0x7f0000000040)=0xff, 0x4)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000004}, 0xc010)
r0 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0)
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000008}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x851}, 0x10890)
r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x80044940, &(0x7f00000000c0))
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r3, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000001c00)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61210c410d799168ffc4b64677af924affd442035db81e18c2d2462d0bb25fff9d3b1ce903597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63", 0x58}, {&(0x7f0000000740)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6f10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba9547e1e343b451d9025c4e153612d4674b9411fb4de295599abbcb388d291aa839a", 0x98}, {&(0x7f0000000a00)}, {&(0x7f00000021c0)="d317b0ddf805c029d66c50f61f6e1b90bd02c1c2e324ab02219e3cef175c99254ff1c10c27155c41bd5cee7a3663ed4a127c6c18ebb7a51008a0053ac96edeb5843d7b59b6c02532b26ca1c490d9b8113cbdbe99a123e3d5335c531c1c50b15be67220f38338a1e7c494acc2da3b410cf4cf7129cbb5faa24dd84e800249b234bdb2", 0x82}], 0x4}}], 0x2, 0x2090)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r3, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

4m15.955669248s ago: executing program 2 (id=2744):
r0 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x40000000000001, 0x400)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000)
openat$sysfs(0xffffff9c, &(0x7f0000000300)='/sys/power/resume', 0x8402, 0x37)
r2 = signalfd(0xffffffffffffffff, &(0x7f00000001c0)={[0x9]}, 0x8)
close(r2)
r3 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000200)={0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000380)={&(0x7f0000000180)=[0x0, 0x0, <r4=>0x0], 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x0, 0x3, 0x7})
ioctl$DRM_IOCTL_MODE_GETFB(r2, 0xc01c64ad, &(0x7f0000000080)={r4})
ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000080)={0x1, 0x0, {0x5, 0x100, 0x2, 0x10}})
fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000000), &(0x7f0000000280)={0x0, 0xfb, 0x9b, 0x1, 0x0, "0ebbbe5d19af69ce76eb97a376acf8af", "c049c18f7aff1e4ab06d7ca2cb5d8860022f05f82dd8e1d0b167f2223e73f75711b4494a4d9ee3ac8218d79e12ea295a1a66ca754345bcb5c11482e51d49f8c6b168e91bb3723cae0f3003b5fdf951dab308a58e311a8b06473457721142a8dc89754671e1a9587264bc0b57f89dee048f24dde2ef14ca6e26cc127adaab2f1e1fda83f13f6b"}, 0x9b, 0x1)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58)

4m12.563307371s ago: executing program 2 (id=2747):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$unix(0x1, 0x5, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x7, 0xe7, 0x7e8, 0x5, 0x8, 0x3b8, 0xd9, 0x91}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x100, 0x0)
r8 = socket(0x10, 0x3, 0x0)
close(r7)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r10, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0x484c10e0d22b6613}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xfffffffffffffdc3, 0x2, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x10006}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x12}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x6}, @TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x6}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000)
ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

4m12.444147168s ago: executing program 7 (id=2750):
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000100001000000f7ff006000000500000a40000000090a01040000000000cb9663bdf646181500020073797a31000000000c00104000000000000000030900020073797a310000000008000a40fffffffc3c0000000c0a070a00000000000000000a0000060900020073797a31000000000900020073797a3000000000100003800c0000800800034000000002140000001100"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000800000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x58}}]}, &(0x7f0000000240)='syzkaller\x00', 0xc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000200)=0x8)
r4 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$FUSE_NOTIFY_INVAL_ENTRY(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="220000000300000000000000000000000400000000000000011a"], 0x22)
sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdd1, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, 0x8, 0x0, 0x0}}, 0x10)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x28)
syz_emit_ethernet(0xb2, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xa4, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @dest_unreach={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x22, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @local, {[@lsrr={0x83, 0x3}, @generic={0x0, 0xd, "ee0dd9de36ed4bcc5b4e23"}, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@loopback=0x7f00002f}]}, @ssrr={0x89, 0xf, 0x0, [@private, @broadcast, @broadcast]}, @timestamp_addr={0x44, 0x34, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@private}, {@broadcast}, {@loopback}, {@private}, {@broadcast}]}, @timestamp={0x44, 0x14, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}]}}}}}}}, 0x0)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
setsockopt$MRT6_DONE(0xffffffffffffffff, 0x29, 0xc9, 0x0, 0x0)
syz_usb_connect(0xf400, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000094037b40fd080200fdca010203010902120001000000000904"], 0x0)
r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x20100, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000100)=r6, 0x4)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r5, 0x0, &(0x7f0000000080)=""/34}, 0x20)

4m10.673597639s ago: executing program 4 (id=2752):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0xfe92, 0xc2, 0x48})
r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xf})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x10, 0x1f, 0x46})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8166, 0x7})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38})
close_range(r0, 0xffffffffffffffff, 0x0)

4m9.368397164s ago: executing program 4 (id=2754):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket(0x2b, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x5)
socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x3, 0x300)
mount$fuse(0x0, 0x0, &(0x7f0000000200), 0x0, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000001a40)=""/102392, 0x18ff8)
syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x16}, @l2cap_cid_signaling={{0x12}, [@l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x7}}, @l2cap_conn_rsp={{0x3, 0x8, 0x8}, {0xfff8, 0x541, 0x0, 0x2}}]}}, 0x1b)
gettid()
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10)
setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88)

4m6.8012246s ago: executing program 7 (id=2757):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r3)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0))
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20)

4m5.562575401s ago: executing program 7 (id=2758):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x5e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
sendmmsg$inet(r2, &(0x7f0000000440)=[{{&(0x7f0000000140)={0x2, 0x4e24, @multicast1}, 0x10, 0x0}}], 0x1, 0x44008004)
write$binfmt_misc(r2, &(0x7f0000000300), 0xfdef)

4m4.265465384s ago: executing program 4 (id=2759):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f00000005c0)={0xa, 0x4e25, 0x200, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000c00)=[{{&(0x7f00000001c0)={0xa, 0xce20, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2=0xe000000d}, 0x7}, 0x1c, 0x0}}], 0x1, 0x0)

4m3.854564918s ago: executing program 4 (id=2761):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$nl_generic(0x10, 0x3, 0x10)
syz_pidfd_open(0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newae={0x5c, 0x1e, 0xff01f7747ae9d38d, 0x70bd2d, 0x25dfdbfc, {{@in=@broadcast, 0x4d4, 0x2, 0x33}, @in6=@loopback, 0xffffffff, 0x3504}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2c, 0x70bd2b, 0x70bd2a, 0x70bd2c, 0x40}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24004850}, 0x40054)
landlock_restrict_self(0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000040)='.\x00', 0x9)

4m3.624377061s ago: executing program 7 (id=2762):
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0x88002, 0x0)
r1 = memfd_create(&(0x7f0000000080)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ftruncate(r1, 0xdcb)
r2 = getpgrp(0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota')
sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x408241, 0x28)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05640, &(0x7f0000000440)={0x1, @pix_mp={0x800, 0x1193fddc, 0x34325258, 0x5, 0xb, [{0x1, 0xbf0e}, {0x4, 0xce83}, {0x5, 0x4}, {0xc2, 0x3}, {0x35, 0x6}, {0x10000, 0x8a9}, {0x1, 0x70}, {0x9, 0x3}], 0x5b, 0x4, 0x7, 0x0, 0x7}})
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, 0x0, 0x0)
r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f29, 0x5, 0x3, 0x40004, 0xfffffffd, 0xb, 0x0, 0x0, 0x81, 0xfffffffc, 0x2, 0xfffffffe, 0x8, 0x1, 0x4, 0x101, 0x8, 0x2b0, 0x9, 0x5, 0x99, 0x400000, 0x80, 0x800, 0x7, 0x2000e69, 0x6, 0x80004, 0xfffffffe, 0x0, 0xfffffff8]})
ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000000))

4m1.672544272s ago: executing program 4 (id=2764):
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x6, &(0x7f0000000040)=0xff, 0x4)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000004}, 0xc010)
r0 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0)
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000008}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x851}, 0x10890)
r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x80044940, &(0x7f00000000c0))
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r3, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000001c00)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61210c410d799168ffc4b64677af924affd442035db81e18c2d2462d0bb25fff9d3b1ce903597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001d7545517fd18b5d299", 0x67}, {&(0x7f0000000740)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6f10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba9547e1e343b451d9025c4e153612d4674b9411fb4de295599abbcb388d291aa839a", 0x98}, {&(0x7f0000000a00)}, {&(0x7f00000021c0)="d317b0ddf805c029d66c50f61f6e1b90bd02c1c2e324ab02219e3cef175c99254ff1c10c27155c41bd5cee7a3663ed4a127c6c18ebb7a51008a0053ac96edeb5843d7b59b6c02532b26ca1c490d9b8113cbdbe99a123e3d5335c531c1c50b15be67220f38338a1e7c494acc2da3b410cf4cf7129cbb5faa24dd84e800249b234bdb2", 0x82}], 0x4}}], 0x2, 0x2090)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r3, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

3m59.200042594s ago: executing program 4 (id=2766):
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0x3, 0x300)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x40081, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x11)
syz_usb_connect(0x4, 0x24, &(0x7f0000000400)=ANY=[], 0x0)

3m55.853230764s ago: executing program 37 (id=2747):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$unix(0x1, 0x5, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x7, 0xe7, 0x7e8, 0x5, 0x8, 0x3b8, 0xd9, 0x91}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x100, 0x0)
r8 = socket(0x10, 0x3, 0x0)
close(r7)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r10, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0x484c10e0d22b6613}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xfffffffffffffdc3, 0x2, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x10006}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x12}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x6}, @TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x6}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000)
ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

3m50.653026151s ago: executing program 7 (id=2773):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x18, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x9}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0)

3m50.407998865s ago: executing program 8 (id=2774):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/rt_acct\x00')
preadv(r3, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r4, 0xc400941d, 0x0)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r4, 0xc400941d, 0x0)
syz_emit_vhci(0x0, 0x17)
syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYRES8], 0x0, 0x142, &(0x7f0000000740)="$eJzs2k9K80AYBvB38X0IXbp0FahEQfNf61aX4s4bhDaTBmdMSQRpLyCuBIVx4SUET+ARsnSnG0EvERk71TYtWlAahOe36UPfdGY6A5PNa2Wp8FhuEW32Lg+fl7NUGK1gp808FtLQPhEZKhRleW3TlMePelGSPeOBGf7P9dSvWH0dfjbXY3lwzhIe+YubHAAAAAAAAAAAAAAAAAAAAAAAfsRs6NDoSnHGEh55Y9W8PzgKOY+yvKbl1c40dA8XMclv1P4EE/WNFyJzV6VE7mWq7k7+/kqHta7kT9X9dU5Ez8n7AysRYRzF0bHvBy13y3W3fed9LKc6onmr10RFeedOt5OZY/1mD/P0m+nz/7eSyIvT6myf54+AgIAwCt/eK3/F6P3XWQqa9+r+s9sp7+gvF7GdNf53APjCWwAAAP//omE6cA==")

3m48.236321769s ago: executing program 8 (id=2775):
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x6, &(0x7f0000000040)=0xff, 0x4)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000004}, 0xc010)
r0 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0)
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000008}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x851}, 0x10890)
r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x80044940, &(0x7f00000000c0))
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r3, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000001c00)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61210c410d799168ffc4b64677af924affd442035db81e18c2d2462d0bb25fff9d3b1ce903597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001d7545517fd18b5d299", 0x67}, {&(0x7f0000000740)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6f10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba9547e1e343b451d9025c4e153612d4674b9411fb4de295599abbcb388d291aa839a", 0x98}, {&(0x7f0000000a00)}, {&(0x7f00000021c0)="d317b0ddf805c029d66c50f61f6e1b90bd02c1c2e324ab02219e3cef175c99254ff1c10c27155c41bd5cee7a3663ed4a127c6c18ebb7a51008a0053ac96edeb5843d7b59b6c02532b26ca1c490d9b8113cbdbe99a123e3d5335c531c1c50b15be67220f38338a1e7c494acc2da3b410cf4cf7129cbb5faa24dd84e800249b234bdb2", 0x82}], 0x4}}], 0x2, 0x2090)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r3, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

3m46.439655661s ago: executing program 8 (id=2777):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000b40)=@security={'security\x00', 0xe, 0x4, 0x4a0, 0xffffffff, 0x398, 0x1c0, 0x1c0, 0xffffffff, 0xffffffff, 0x450, 0x450, 0x450, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x8, 'system_u:object_r:auditd_initrc_exec_t:s0\x00'}}}, {{@uncond, 0x0, 0x178, 0x1d8, 0x0, {}, [@common=@inet=@recent1={{0x108}, {0xfffffff7, 0xfffffffe, 0x2, 0x1, 'syz0\x00', 0x7, [0xff000000, 0xff000000, 0xff000000, 0xffffffff]}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x0, 0x7, 0x2, 0x3, 0x0, 0x2], 0x1, 0x5}, {0x4, [0x4, 0x2, 0x2, 0x1, 0x3, 0x2], 0x3, 0x2}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x8, 0x8001, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfff9, 0x8}, 0x8)
sendto$inet6(r1, &(0x7f0000000580)="81", 0x1, 0xc001, &(0x7f0000000280)={0xa, 0x0, 0x92, @rand_addr=' \x01\x00', 0x511}, 0x1c)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x0)
sendmsg$IPSET_CMD_DESTROY(r2, 0x0, 0x40814)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd844", 0x4d}], 0x1}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)

3m44.064116127s ago: executing program 38 (id=2766):
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0x3, 0x300)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x40081, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x11)
syz_usb_connect(0x4, 0x24, &(0x7f0000000400)=ANY=[], 0x0)

3m43.977279821s ago: executing program 8 (id=2781):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = getpid()
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000900)={@in6={{0xa, 0x4e21, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}}, 0x0, 0x0, 0x15, 0x0, "49c866f2599164ec9f2adb18cf6053cd3fbde4afbad1df6c40998f704f9bde91cff97877f391f2703651536d14e4d3e8576c1c1590bbe69e43443a9374fba52f177594ac705f39b66cb39576521ad84c"}, 0xd8)
r4 = syz_pidfd_open(r3, 0x0)
setns(r4, 0x24020000)
socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newae={0x5c, 0x1e, 0xff01f7747ae9d38d, 0x70bd2d, 0x25dfdbfc, {{@in=@broadcast, 0x4d4, 0x2, 0x33}, @in6=@loopback, 0xffffffff, 0x3504}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2c, 0x70bd2b, 0x70bd2a, 0x70bd2c, 0x40}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24004850}, 0x40054)
umount2(&(0x7f0000000040)='.\x00', 0x9)

3m42.702412105s ago: executing program 8 (id=2783):
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0x88002, 0x0)
r1 = memfd_create(&(0x7f0000000080)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pread64(r1, &(0x7f00000009c0)=""/239, 0xef, 0x1)
r2 = getpgrp(0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota')
sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x408241, 0x28)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05640, &(0x7f0000000440)={0x1, @pix_mp={0x800, 0x1193fddc, 0x34325258, 0x5, 0xb, [{0x1, 0xbf0e}, {0x4, 0xce83}, {0x5, 0x4}, {0xc2, 0x3}, {0x35, 0x6}, {0x10000, 0x8a9}, {0x1, 0x70}, {0x9, 0x3}], 0x5b, 0x4, 0x7, 0x0, 0x7}})
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, 0x0, 0x0)
r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f29, 0x5, 0x3, 0x40004, 0xfffffffd, 0xb, 0x0, 0x0, 0x81, 0xfffffffc, 0x2, 0xfffffffe, 0x8, 0x1, 0x4, 0x101, 0x8, 0x2b0, 0x9, 0x5, 0x99, 0x400000, 0x80, 0x800, 0x7, 0x2000e69, 0x6, 0x80004, 0xfffffffe, 0x0, 0xfffffff8]})
ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000000))

3m35.014612434s ago: executing program 39 (id=2773):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x18, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x9}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0)

3m30.384257833s ago: executing program 8 (id=2790):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000b40)=@security={'security\x00', 0xe, 0x4, 0x4a0, 0xffffffff, 0x398, 0x1c0, 0x1c0, 0xffffffff, 0xffffffff, 0x450, 0x450, 0x450, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x8, 'system_u:object_r:auditd_initrc_exec_t:s0\x00'}}}, {{@uncond, 0x0, 0x178, 0x1d8, 0x0, {}, [@common=@inet=@recent1={{0x108}, {0xfffffff7, 0xfffffffe, 0x2, 0x1, 'syz0\x00', 0x7, [0xff000000, 0xff000000, 0xff000000, 0xffffffff]}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x0, 0x7, 0x2, 0x3, 0x0, 0x2], 0x1, 0x5}, {0x4, [0x4, 0x2, 0x2, 0x1, 0x3, 0x2], 0x3, 0x2}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x8, 0x8001, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfff9, 0x8}, 0x8)
sendto$inet6(r1, &(0x7f0000000580)="81", 0x1, 0xc001, &(0x7f0000000280)={0xa, 0x0, 0x92, @rand_addr=' \x01\x00', 0x511}, 0x1c)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x0)
sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x40814)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd844", 0x4d}], 0x1}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)

18.276332185s ago: executing program 0 (id=3051):
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="8403000000020101000000000000000007000004100002800c00028005000100010000001c0002800c000280050001003a000000"], 0x38c}, 0x1, 0x0, 0x0, 0x800}, 0x20040000)
socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000002880)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20}, 0x40090)
sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x8782559fc2aff2e2, &(0x7f0000000080)=[{&(0x7f0000000040)="0f02000039000511d25a80648c63940d0224fc600b003540280009000200002037153e37eb010280060410000a00", 0x33fe0}], 0x1}, 0x0)

17.959493804s ago: executing program 0 (id=3053):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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")
r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x8880, 0x91)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000180)={0x80, 0x5, 0x6, 0x81, 0xf, 0xe6b})

17.333534221s ago: executing program 0 (id=3055):
mknod(&(0x7f0000000040)='./file0\x00', 0x8001422, 0x0)
open$dir(&(0x7f0000000000)='./file0\x00', 0x131540, 0x18)
openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f00000000c0)="ad5787", &(0x7f0000000000)=""/3, 0x2}, 0x20)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0)

5.829426011s ago: executing program 0 (id=3082):
r0 = syz_io_uring_setup(0xace, &(0x7f0000000180)={0x0, 0xdb7c, 0x8, 0x1103, 0x31}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000340)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_TIMEOUT={0xb, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x77359400}, 0x1, 0x1})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
io_uring_enter(r0, 0x6efc, 0x3900, 0xb, 0x0, 0x0)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f00000000c0)={0x1, 0xffffffffffffffff, 0x35, {0x5, 0x1}, 0x1}, 0x1)

5.451382223s ago: executing program 0 (id=3085):
syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@nojournal_checksum}]}, 0x1, 0x5bc, &(0x7f0000001440)="$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")
symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
creat(0x0, 0x0)
creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10)
unlink(&(0x7f0000000000)='./file1\x00')

4.348517147s ago: executing program 0 (id=3089):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
recvmmsg(r2, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0)
write$tun(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="000086dd0001090004"], 0x7a)

3.083040021s ago: executing program 9 (id=3095):
r0 = socket(0x2, 0x3, 0xff)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000240)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/23, 0x17}], 0x1, 0x0, 0x0, 0x4c880}, 0x8000)

2.785396538s ago: executing program 9 (id=3097):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25fe8800000000000000000000000001016401010000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000001000080000000000000000000000000000000000000000000000000000000000200000000000000fdffffffffffffff00"/69], 0xfc}, 0x1, 0x0, 0x0, 0x4}, 0x20000010)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @dccp={{0x8, 0x4, 0x0, 0x3d, 0x30, 0x67, 0x0, 0x9, 0x21, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@ssrr={0x89, 0x7, 0xbd, [@multicast2]}, @generic={0x94, 0x2}]}}, {{0x4e21, 0x4e22, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, 0x4, "180f8f", 0x1, "fffb45"}}}}}}, 0x0)

2.471925436s ago: executing program 9 (id=3098):
syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@nojournal_checksum}]}, 0x1, 0x5bc, &(0x7f0000001440)="$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")
symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
creat(0x0, 0x0)
creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10)
unlink(&(0x7f0000000000)='./file1\x00')

2.464990117s ago: executing program 3 (id=3099):
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e24, 0x80ab, @empty, 0x1}, 0x1c)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000000)=0x3ff, 0x4)

2.160687384s ago: executing program 3 (id=3100):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="68000000100001002fbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0201000000000000140003006e657464657673696d3000000000000034001680300001"], 0x68}}, 0x24040800)

1.815423204s ago: executing program 3 (id=3101):
r0 = syz_io_uring_setup(0xace, &(0x7f0000000180)={0x0, 0xdb7c, 0x8, 0x1103, 0x31}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000340)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_TIMEOUT={0xb, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x77359400}, 0x1, 0x1})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
io_uring_enter(r0, 0x6efc, 0x3900, 0xb, 0x0, 0x0)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f00000000c0)={0x1, 0xffffffffffffffff, 0x35, {0x5, 0x1}, 0x1}, 0x1)

1.363025631s ago: executing program 3 (id=3102):
mknod(&(0x7f0000000040)='./file0\x00', 0x8001422, 0x0)
open$dir(&(0x7f0000000000)='./file0\x00', 0x131540, 0x18)
openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f00000000c0)="ad5787", &(0x7f0000000000)=""/3, 0x2}, 0x20)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0)

1.268915566s ago: executing program 9 (id=3103):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x81ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x38)

922.962396ms ago: executing program 3 (id=3104):
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000, &(0x7f0000000340)={[{@errors_remount}, {@sb={'sb', 0x3d, 0x1}}]}, 0xee, 0x2aa, &(0x7f0000001580)="$eJzs3T9oJFUYAPBvZncvF285Tm0E8Q+IiAbCWQiCjTYKB3IcIoIKJyJWciecd9jtWmlhobVKKpsgdkZL0SLYKLZRUySNhcHCIKLFyOzshnGzYePu7CTs/n6wzJuZb+a9hfnevE2YNwEsrAsR8WRENCJiJSJaEZGUA+4vPhf6q2vLm1cjsuy535NeXLFeGBx3LiK6EfF4RHOw79bGSzt/bj3z0Ps3Ww9+uvHicl3fL+LsQWlvZ/vZ/U8uv/vFpUdvpf1t7f6y/D2qlIzY1kwi7phFZadE0hwb8leWZbW0haNdefvzn/K8vzMiHujlfyvSfsp+cOPMN6145ONyfPla/vC3H++uu71AtbKsld8DuxmwcNLeGDhJVyOiKKfp6moxhv+5kcQb12+8tfL69ZvXXhvZfTRq77CAaST5b/P8B/jTXy19eW4o/39tFPl/LI/NuKXATLQjtp+/sv5LXt53F4fFcE+xyPN/5ZXOwyH/YeFMkf9nZ9UmoB7t3l/4Cu7/sFiM/2EOTJi7Q/n/TsWtAk6xcv4vnXRjgFoZ/8Mcaw0K3ZG75T/Mh/cmGMCX8/+HkceP2Og/fzAXhu7/NT6PC5y0cv4DAIslWxr7iPDu+X4oMF9Ouv8BAAAAAAAAAAAAAAAAAAAOW1vevDr41FXndx9F7D0VEc3/1l/MPNjovY94MOngbX8kediBtDhsKi/fN+UJpvRZxU9fX/6f80Ce3622/mPqDArf3zubCoZeZnHk3HadaxHdPPhis3n4+k/611+Mu9L65z9zaMftY9rZenVMQMWSofUnXvi2snN3Jjjmn/XKqp/Ipa2Ir/P+5+Ko/i+Nu3rL0f1PuzzF8oTe/HvKEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFCbfwMAAP//rvtnHA==")
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9)
symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181341, 0x84)
symlinkat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

818.260812ms ago: executing program 9 (id=3105):
r0 = syz_open_dev$sg(0x0, 0x0, 0x8002)
ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000001c0)=0x2001)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000)
r1 = fcntl$dupfd(r0, 0x0, r0)
readv(r1, &(0x7f0000000000)=[{&(0x7f0000001140)=""/136, 0x3f}], 0x1)

635.210003ms ago: executing program 9 (id=3106):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0xf, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbda}, {{}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x579, &(0x7f0000000a40)="$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")
setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f00000002c0)="30573472b621739991c336124406e8a5c812ca847e3bf9b837c91d46ab", 0x1d, 0x1)
lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f0000000000)=ANY=[], 0x361, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000000)=ANY=[], 0xfe37, 0x0)

0s ago: executing program 3 (id=3107):
socket$tipc(0x1e, 0x5, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
socket(0x2000000000000021, 0x2, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
socket$kcm(0x2, 0x3, 0x2)
socket$kcm(0x2, 0x3, 0x2)
dup(0xffffffffffffffff)
socket$kcm(0xa, 0x5, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$can_j1939(0x1d, 0x2, 0x7)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet_sctp(0x2, 0x1, 0x84)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08001400fc000000080011000700000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0)

kernel console output (not intermixed with test programs):

60] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1357.091500][T15760] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1357.164773][T15760] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1357.202949][T15760] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1357.221729][    C1] net_ratelimit: 10335 callbacks suppressed
[ 1357.221749][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1357.240180][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1357.243180][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:63:da:15:30:59, vlan:0)
[ 1357.253025][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1357.266525][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:63:da:15:30:59, vlan:0)
[ 1357.276763][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1357.290424][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:63:da:15:30:59, vlan:0)
[ 1357.300971][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1357.314400][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:63:da:15:30:59, vlan:0)
[ 1357.324789][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1357.778806][T15797] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1358.344925][T15797] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1358.595258][T15797] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 1358.637362][T15713] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1358.731030][T16035] device wlan0 entered promiscuous mode
[ 1358.765692][T15797] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 1358.793920][T16035] fuse: Bad value for 'fd'
[ 1358.910060][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1358.918926][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1359.003562][T15713] 8021q: adding VLAN 0 to HW filter on device team0
[ 1359.133972][T16049] tmpfs: Unknown parameter 'usrquota'
[ 1362.246918][ T1268] ieee802154 phy0 wpan0: encryption failed: -22
[ 1362.253012][    C0] net_ratelimit: 3789 callbacks suppressed
[ 1362.253063][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:63:da:15:30:59, vlan:0)
[ 1362.253522][ T1268] ieee802154 phy1 wpan1: encryption failed: -22
[ 1362.264588][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:63:da:15:30:59, vlan:0)
[ 1362.290860][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:63:da:15:30:59, vlan:0)
[ 1362.303944][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:63:da:15:30:59, vlan:0)
[ 1362.316871][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:63:da:15:30:59, vlan:0)
[ 1362.330021][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:63:da:15:30:59, vlan:0)
[ 1362.343122][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:63:da:15:30:59, vlan:0)
[ 1362.356256][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:63:da:15:30:59, vlan:0)
[ 1362.364453][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1362.372391][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:63:da:15:30:59, vlan:0)
[ 1362.698074][ T4391] bond1: (slave erspan1): Releasing active interface
[ 1362.902783][T16066] Cannot find del_set index 4 as target
[ 1363.776456][ T4391] bond1: (slave erspan1): Releasing backup interface
[ 1364.094413][ T4391] bond1: (slave erspan1): Releasing active interface
[ 1364.276563][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1364.285434][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1364.304912][ T4295] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1364.312148][ T4295] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1364.372209][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1364.391964][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1364.432318][ T4295] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1364.439557][ T4295] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1364.488956][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1364.577115][T15760] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1364.623522][T14861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1364.696736][T14861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1364.791315][T15760] 8021q: adding VLAN 0 to HW filter on device team0
[ 1364.845843][ T8605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1364.862701][ T8605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1364.970404][ T8605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1365.034621][ T8605] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1365.055898][ T8605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1365.122529][ T8605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1365.212522][ T8605] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1365.219695][ T8605] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1365.287504][T16083] loop9: detected capacity change from 0 to 512
[ 1365.294474][ T8605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1365.362586][ T8605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1365.401861][ T8605] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1365.409035][ T8605] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1365.453534][ T8605] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1365.496385][ T8605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1365.533188][ T8605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1365.572175][ T8605] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1365.616757][ T8605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1365.680965][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1365.722346][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1365.839648][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1365.939675][T15713] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1365.991223][T15713] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1366.078822][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1366.097868][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1366.141792][T16083] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[ 1366.161108][T16083] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1366.163660][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1366.241705][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1366.276221][T15797] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1366.542347][T15491] EXT4-fs (loop9): unmounting filesystem.
[ 1367.093749][T16106] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2838'.
[ 1367.225381][ T4391] bond0: (slave gretap1): Releasing backup interface
[ 1367.261723][    C1] net_ratelimit: 8580 callbacks suppressed
[ 1367.261743][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1367.262229][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:63:da:15:30:59, vlan:0)
[ 1367.268369][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1367.281831][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:63:da:15:30:59, vlan:0)
[ 1367.292290][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1367.305865][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:63:da:15:30:59, vlan:0)
[ 1367.316579][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1367.329897][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:63:da:15:30:59, vlan:0)
[ 1367.340233][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1367.353923][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:63:da:15:30:59, vlan:0)
[ 1367.659452][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1367.667950][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1367.703031][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1367.721435][T16113] loop3: detected capacity change from 0 to 164
[ 1367.787134][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1367.845387][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1367.876587][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1367.895119][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1367.923468][T15760] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1367.973207][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1367.982640][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1368.013679][T15797] 8021q: adding VLAN 0 to HW filter on device team0
[ 1368.093034][T14861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1368.123932][T14861] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1368.192379][T14861] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1368.199584][T14861] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1368.274380][T14861] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1368.312382][T14861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1368.326764][T14861] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1368.388441][T14861] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1368.395685][T14861] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1368.494310][T16120] loop3: detected capacity change from 0 to 1024
[ 1368.502143][T14861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1368.587164][T14861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1368.653072][T14861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1368.713812][T14861] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1368.745060][T14861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1368.784039][T14861] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1368.841174][T14861] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1368.902599][T14861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1368.916683][T16120] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[ 1368.991095][T14861] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1369.037368][T15797] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1369.080931][T15621] EXT4-fs (loop3): unmounting filesystem.
[ 1369.112374][T15797] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1369.147658][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1369.179313][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1369.252396][T15713] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1369.301050][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1369.311922][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1369.670647][T14861] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1369.700448][T14861] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1369.751981][T15760] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1369.912745][T14904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1369.924221][T16146] ieee802154 phy0 wpan0: encryption failed: -22
[ 1369.931098][T14904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1369.982730][T16148] loop3: detected capacity change from 0 to 256
[ 1370.090177][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1370.152441][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1370.233126][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1370.269480][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1370.339781][T15760] device veth0_vlan entered promiscuous mode
[ 1370.421952][T15760] device veth1_vlan entered promiscuous mode
[ 1371.297157][ T4283] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1371.311864][ T4283] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1371.362809][ T4283] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1371.421327][ T4283] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1371.504607][ T4283] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1371.539482][ T4283] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1371.938566][T15760] device veth0_macvtap entered promiscuous mode
[ 1371.985945][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1372.011107][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1372.052002][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1372.070589][T16173] loop9: detected capacity change from 0 to 1024
[ 1372.085940][T16173] EXT4-fs: Ignoring removed orlov option
[ 1372.111450][T16173] EXT4-fs: inline encryption not supported
[ 1372.114045][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1372.155941][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1372.271766][    C1] net_ratelimit: 6807 callbacks suppressed
[ 1372.271786][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1372.283040][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:63:da:15:30:59, vlan:0)
[ 1372.290618][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1372.304038][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:63:da:15:30:59, vlan:0)
[ 1372.314549][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1372.328083][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:63:da:15:30:59, vlan:0)
[ 1372.338334][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1372.352131][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:63:da:15:30:59, vlan:0)
[ 1372.362934][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1372.376480][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:63:da:15:30:59, vlan:0)
[ 1372.426587][T16173] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869)
[ 1372.483649][T15760] device veth1_macvtap entered promiscuous mode
[ 1372.503901][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1372.511549][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1372.564720][T15760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1372.591656][T15760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1372.605202][T15760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1372.659174][T15760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1372.681669][T15760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1372.701665][T15760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1372.711574][T15760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1372.740610][T16173] EXT4-fs (loop9): invalid journal inode
[ 1372.751794][T16173] EXT4-fs (loop9): can't get journal size
[ 1372.769926][T16173] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[ 1372.818783][T15760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1372.901691][T15760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1372.992219][T15760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1373.065784][T15760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1373.121666][T15760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1373.131574][T15760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1373.221658][T15760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1373.231558][T15760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1373.288180][T16189] loop3: detected capacity change from 0 to 512
[ 1373.308661][T15760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1373.336851][T15760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1373.374745][T15760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1373.397406][T15760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1373.424838][T15760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1373.444616][T15760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1373.475369][T15760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1373.497807][T15760] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1373.500332][T15491] EXT4-fs (loop9): unmounting filesystem.
[ 1373.535041][T15797] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1373.579611][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1373.631931][ T4283] Bluetooth: hci0: command 0x0409 tx timeout
[ 1373.641809][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1373.721369][T15760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1373.747356][T15760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1373.767627][T15760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1373.814212][T15760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1373.817388][T16189] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[ 1373.838023][T15760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1373.869132][T15760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1373.894179][T16189] ext4 filesystem being mounted at /19/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1373.912623][T15760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1373.953300][T15760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1374.163533][T15760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1374.221659][T15760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1374.958608][T15760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1375.001660][T15760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1375.050491][T15760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1375.093209][T15760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1375.143033][T15760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1375.179774][T15760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1375.216516][T15760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1375.251654][T15760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1375.294396][T15760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1375.341063][T15760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1375.376676][T15760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1375.415514][T15760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1375.474366][T15760] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1375.516998][T15760] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1375.576751][T15760] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1375.611664][T15760] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1375.620434][T15760] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1375.720871][T14073] Bluetooth: hci0: command 0x041b tx timeout
[ 1375.747155][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1375.771822][T15621] EXT4-fs (loop3): unmounting filesystem.
[ 1375.794443][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1377.172879][T14073] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1377.191898][T14073] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1377.206372][T14073] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1377.214242][T14073] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1377.241259][T14073] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 1377.250054][T14073] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1377.281837][    C1] net_ratelimit: 7027 callbacks suppressed
[ 1377.281856][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1377.300153][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1377.312518][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1377.324904][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1377.337328][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1377.349721][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1377.362050][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1377.374521][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1377.384429][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:63:da:15:30:59, vlan:0)
[ 1377.387631][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1377.810533][T14073] Bluetooth: hci0: command 0x040f tx timeout
[ 1377.840339][T16164] chnl_net:caif_netlink_parms(): no params data found
[ 1377.848524][T16239] loop9: detected capacity change from 0 to 8192
[ 1378.526806][T16164] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1378.550087][T16164] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1378.576426][T16164] device bridge_slave_0 entered promiscuous mode
[ 1378.609706][T14904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1378.634833][T14904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1378.656644][T16248] tipc: Started in network mode
[ 1378.661871][T16248] tipc: Node identity e0000001, cluster identity 4711
[ 1378.692817][T16248] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[ 1378.727893][T16164] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1378.735697][T16164] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1378.762982][T16164] device bridge_slave_1 entered promiscuous mode
[ 1378.839834][T15797] device veth0_vlan entered promiscuous mode
[ 1378.868709][T14861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1378.878503][T14861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1378.947064][T14861] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1378.972892][T14861] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1379.055557][T15797] device veth1_vlan entered promiscuous mode
[ 1379.084471][T16164] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1379.168198][T16164] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1379.346913][T16164] team0: Port device team_slave_0 added
[ 1379.412581][ T4283] Bluetooth: hci1: command 0x0409 tx timeout
[ 1379.426020][T16164] team0: Port device team_slave_1 added
[ 1379.461863][T15797] device veth0_macvtap entered promiscuous mode
[ 1379.627107][T14861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1379.650639][T14861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1379.685402][T14861] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1379.739894][T15797] device veth1_macvtap entered promiscuous mode
[ 1379.778109][T16164] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1379.801657][T16164] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1379.888297][ T4283] Bluetooth: hci0: command 0x0419 tx timeout
[ 1379.901886][T16164] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1379.976839][T16164] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1380.007506][T16164] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1380.070588][T16164] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1380.146663][T15797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1380.170771][T15797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1380.200788][T15797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1380.249135][T15797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1380.282462][T15797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1380.313247][T15797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1380.364289][T15797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1380.399670][T15797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1380.456142][T15797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1380.514502][T15797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1380.540842][T15797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1380.589281][T15797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1380.623307][T15797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1380.681654][T15797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1380.754605][T15797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1380.791676][T15797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1380.831659][T15797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1380.883699][T15797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1380.926612][T15797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1380.979383][T15797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1381.006483][T15797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1381.057502][T15797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1381.089204][T15797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1381.126551][T15797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1381.170520][T15797] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1381.201536][T16235] chnl_net:caif_netlink_parms(): no params data found
[ 1381.234561][T14904] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1381.254297][T14904] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1381.286475][T14904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1381.332206][T15797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1381.351645][T15797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1381.401684][T15797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1381.448012][T15797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1381.498109][ T4283] Bluetooth: hci1: command 0x041b tx timeout
[ 1381.511556][T15797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1381.539387][T15797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1381.581907][T15797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1381.614025][T15797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1381.665002][T15797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1381.699489][T15797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1381.728499][T15797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1381.771381][T15797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1381.804105][T15797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1381.814907][T15797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1381.848329][T15797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1381.867839][T15797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1381.944275][T15797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1381.961964][T15797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1381.992829][T15797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1382.024688][T15797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1382.043759][T15797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1382.091651][T15797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1382.101553][T15797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1382.151651][T15797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1382.193561][T15797] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1382.207123][T14904] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1382.219101][T14904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1382.294168][T15797] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1382.303216][    C0] net_ratelimit: 10264 callbacks suppressed
[ 1382.303231][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:63:da:15:30:59, vlan:0)
[ 1382.322321][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:63:da:15:30:59, vlan:0)
[ 1382.334532][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1382.336531][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:63:da:15:30:59, vlan:0)
[ 1382.347235][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1382.360974][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:63:da:15:30:59, vlan:0)
[ 1382.372352][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1382.384977][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:63:da:15:30:59, vlan:0)
[ 1382.395269][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1382.408853][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:63:da:15:30:59, vlan:0)
[ 1382.434730][T15797] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1382.461679][T15797] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1382.470473][T15797] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1382.514501][T16278] loop3: detected capacity change from 0 to 128
[ 1382.566603][T16164] device hsr_slave_0 entered promiscuous mode
[ 1382.617240][T16164] device hsr_slave_1 entered promiscuous mode
[ 1382.632539][T16164] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1382.640195][T16164] Cannot create hsr debugfs directory
[ 1383.010221][T16235] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1383.028540][T16235] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1383.073160][T16235] device bridge_slave_0 entered promiscuous mode
[ 1383.157253][T16235] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1383.182608][T16235] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1383.236373][T16235] device bridge_slave_1 entered promiscuous mode
[ 1383.414264][T16235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1383.500814][ T4492] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1383.538250][ T4492] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1383.560638][ T4283] Bluetooth: hci1: command 0x040f tx timeout
[ 1383.659524][T16235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1383.740842][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1383.874984][T16235] team0: Port device team_slave_0 added
[ 1383.933133][T16235] team0: Port device team_slave_1 added
[ 1383.948715][T16298] loop3: detected capacity change from 0 to 512
[ 1383.998227][T16235] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1384.062151][T16235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1384.200548][T16235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1384.295738][T16235] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1384.358852][T16298] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[ 1384.370779][T16235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1384.386122][T16298] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1384.503044][T16235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1384.816655][T15621] EXT4-fs (loop3): unmounting filesystem.
[ 1384.854867][T16266] FAT-fs (loop9): error, corrupted directory (invalid entries)
[ 1384.871680][T16266] FAT-fs (loop9): Filesystem has been set read-only
[ 1385.040589][T14073] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1385.052294][T14073] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1385.081583][T14073] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1385.114445][T14073] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1385.138399][T14073] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 1385.154885][T14073] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1385.526300][T16310] loop9: detected capacity change from 0 to 1024
[ 1385.614083][T16310] EXT4-fs: Ignoring removed oldalloc option
[ 1385.629699][T16310] EXT4-fs: Ignoring removed bh option
[ 1385.652388][T14073] Bluetooth: hci1: command 0x0419 tx timeout
[ 1385.724648][T16310] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1385.939119][T16310] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[ 1385.985746][T16235] device hsr_slave_0 entered promiscuous mode
[ 1386.017739][T16235] device hsr_slave_1 entered promiscuous mode
[ 1386.042106][T16235] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1386.088526][T16235] Cannot create hsr debugfs directory
[ 1386.364050][T16324] netlink: 'syz.3.2880': attribute type 9 has an invalid length.
[ 1386.420583][T16324] netlink: 'syz.3.2880': attribute type 1 has an invalid length.
[ 1386.431978][T16324] netlink: 303 bytes leftover after parsing attributes in process `syz.3.2880'.
[ 1386.926206][T16304] chnl_net:caif_netlink_parms(): no params data found
[ 1387.233163][T14073] Bluetooth: hci2: command 0x0409 tx timeout
[ 1387.312149][    C1] net_ratelimit: 10703 callbacks suppressed
[ 1387.312170][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1387.325018][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:63:da:15:30:59, vlan:0)
[ 1387.330982][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1387.344524][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:63:da:15:30:59, vlan:0)
[ 1387.354996][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1387.368386][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:63:da:15:30:59, vlan:0)
[ 1387.378872][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1387.392651][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:63:da:15:30:59, vlan:0)
[ 1387.402917][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1387.416654][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:63:da:15:30:59, vlan:0)
[ 1387.458111][T16304] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1387.465387][T16304] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1387.475524][T16304] device bridge_slave_0 entered promiscuous mode
[ 1387.484961][T16304] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1387.492583][T16304] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1387.500971][T16304] device bridge_slave_1 entered promiscuous mode
[ 1387.541262][T16304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1387.582314][T16304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1387.714978][T16304] team0: Port device team_slave_0 added
[ 1387.721258][T15491] EXT4-fs (loop9): unmounting filesystem.
[ 1387.777217][T16304] team0: Port device team_slave_1 added
[ 1387.857647][T16304] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1387.891660][T16304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1388.039144][T16304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1388.091869][T16304] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1388.111650][T16304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1388.241649][T16304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1388.473136][T16304] device hsr_slave_0 entered promiscuous mode
[ 1388.502342][T16304] device hsr_slave_1 entered promiscuous mode
[ 1388.571829][T16304] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1388.599510][T16304] Cannot create hsr debugfs directory
[ 1388.844676][T16356] loop9: detected capacity change from 0 to 128
[ 1388.984512][T16356] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1389.338870][ T4283] Bluetooth: hci2: command 0x041b tx timeout
[ 1389.590992][   T27] audit: type=1326 audit(1770580879.107:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16368 comm="syz.9.2891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb87b9aeb9 code=0x7ffc0000
[ 1389.674608][T16369] loop9: detected capacity change from 0 to 512
[ 1389.681080][   T27] audit: type=1326 audit(1770580879.107:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16368 comm="syz.9.2891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb87b9aeb9 code=0x7ffc0000
[ 1389.773472][   T27] audit: type=1326 audit(1770580879.157:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16368 comm="syz.9.2891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcb87b9aeb9 code=0x7ffc0000
[ 1389.833189][T16369] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[ 1389.857651][   T27] audit: type=1326 audit(1770580879.157:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16368 comm="syz.9.2891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb87b9aeb9 code=0x7ffc0000
[ 1389.944426][   T27] audit: type=1326 audit(1770580879.157:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16368 comm="syz.9.2891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb87b9aeb9 code=0x7ffc0000
[ 1390.050196][   T27] audit: type=1326 audit(1770580879.167:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16368 comm="syz.9.2891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcb87b9aeb9 code=0x7ffc0000
[ 1390.191709][   T27] audit: type=1326 audit(1770580879.167:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16368 comm="syz.9.2891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb87b9aeb9 code=0x7ffc0000
[ 1390.296268][T16369] EXT4-fs error (device loop9): ext4_do_update_inode:5272: inode #16: comm syz.9.2891: corrupted inode contents
[ 1390.331279][   T27] audit: type=1326 audit(1770580879.167:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16368 comm="syz.9.2891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb87b9aeb9 code=0x7ffc0000
[ 1390.355583][T16369] EXT4-fs error (device loop9): ext4_dirty_inode:6137: inode #16: comm syz.9.2891: mark_inode_dirty error
[ 1390.418526][   T27] audit: type=1326 audit(1770580879.177:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16368 comm="syz.9.2891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fcb87b9aeb9 code=0x7ffc0000
[ 1390.423311][T16369] EXT4-fs error (device loop9): ext4_do_update_inode:5272: inode #16: comm syz.9.2891: corrupted inode contents
[ 1390.518471][   T27] audit: type=1326 audit(1770580879.177:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16368 comm="syz.9.2891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb87b9aeb9 code=0x7ffc0000
[ 1390.571137][T16369] EXT4-fs error (device loop9): __ext4_ext_dirty:202: inode #16: comm syz.9.2891: mark_inode_dirty error
[ 1390.616166][T16369] EXT4-fs error (device loop9): ext4_do_update_inode:5272: inode #16: comm syz.9.2891: corrupted inode contents
[ 1390.678469][T16369] EXT4-fs error (device loop9) in ext4_orphan_del:303: Corrupt filesystem
[ 1390.728909][T16369] EXT4-fs error (device loop9): ext4_do_update_inode:5272: inode #16: comm syz.9.2891: corrupted inode contents
[ 1390.808986][T16369] EXT4-fs error (device loop9): ext4_truncate:4318: inode #16: comm syz.9.2891: mark_inode_dirty error
[ 1390.869758][T16369] EXT4-fs error (device loop9) in ext4_process_orphan:345: Corrupt filesystem
[ 1391.004029][T16369] EXT4-fs (loop9): 1 truncate cleaned up
[ 1391.009774][T16369] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[ 1391.025905][T16369] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1391.042841][ T4710] EXT4-fs error (device loop9): ext4_release_dquot:6871: comm kworker/u4:19: Failed to release dquot type 1
[ 1391.130427][T16369] EXT4-fs (loop9): unmounting filesystem.
[ 1391.400741][T14073] Bluetooth: hci2: command 0x040f tx timeout
[ 1392.321713][    C1] net_ratelimit: 10375 callbacks suppressed
[ 1392.321733][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1392.333665][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:63:da:15:30:59, vlan:0)
[ 1392.340532][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1392.354177][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:63:da:15:30:59, vlan:0)
[ 1392.364654][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1392.378101][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:63:da:15:30:59, vlan:0)
[ 1392.388422][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1392.402140][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:63:da:15:30:59, vlan:0)
[ 1392.412844][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1392.426174][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:63:da:15:30:59, vlan:0)
[ 1393.490309][ T4283] Bluetooth: hci2: command 0x0419 tx timeout
[ 1393.528688][T16418] loop9: detected capacity change from 0 to 512
[ 1393.652790][T16418] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended
[ 1393.934716][T16418] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters
[ 1394.036226][T16418] EXT4-fs (loop9): Remounting filesystem read-only
[ 1394.054469][T16418] EXT4-fs error (device loop9): ext4_acquire_dquot:6835: comm syz.9.2899: Failed to acquire dquot type 1
[ 1394.095403][T16428] loop3: detected capacity change from 0 to 512
[ 1394.167028][T16418] EXT4-fs (loop9): Remounting filesystem read-only
[ 1394.174850][T16418] EXT4-fs (loop9): 1 truncate cleaned up
[ 1394.201717][T16418] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[ 1394.328829][T16428] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 1394.553262][T15491] EXT4-fs (loop9): unmounting filesystem.
[ 1394.581557][T16428] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3852: comm syz.3.2900: Allocating blocks 41-42 which overlap fs metadata
[ 1394.654409][T16428] __quota_error: 23 callbacks suppressed
[ 1394.654429][T16428] Quota error (device loop3): write_blk: dquota write failed
[ 1394.712104][T16428] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5
[ 1394.721458][T16428] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3852: comm syz.3.2900: Allocating blocks 41-42 which overlap fs metadata
[ 1394.845944][T16428] Quota error (device loop3): write_blk: dquota write failed
[ 1394.861804][T16428] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[ 1394.901733][T16428] EXT4-fs error (device loop3): ext4_acquire_dquot:6835: comm syz.3.2900: Failed to acquire dquot type 1
[ 1394.989060][T16428] EXT4-fs error (device loop3): mb_free_blocks:1826: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[ 1395.029873][T16428] EXT4-fs error (device loop3): ext4_do_update_inode:5272: inode #12: comm syz.3.2900: corrupted inode contents
[ 1395.129547][T16428] EXT4-fs error (device loop3): ext4_dirty_inode:6137: inode #12: comm syz.3.2900: mark_inode_dirty error
[ 1395.217565][T16428] EXT4-fs error (device loop3): ext4_do_update_inode:5272: inode #12: comm syz.3.2900: corrupted inode contents
[ 1395.278268][T16428] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #12: comm syz.3.2900: mark_inode_dirty error
[ 1395.345719][T16428] EXT4-fs error (device loop3): ext4_do_update_inode:5272: inode #12: comm syz.3.2900: corrupted inode contents
[ 1395.460774][T16428] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem
[ 1395.555104][T16428] EXT4-fs error (device loop3): ext4_do_update_inode:5272: inode #12: comm syz.3.2900: corrupted inode contents
[ 1395.640402][T16428] EXT4-fs error (device loop3): ext4_truncate:4318: inode #12: comm syz.3.2900: mark_inode_dirty error
[ 1395.714004][T16428] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem
[ 1395.790258][T16428] EXT4-fs (loop3): 1 truncate cleaned up
[ 1395.796150][T16428] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[ 1396.136032][T15621] EXT4-fs (loop3): unmounting filesystem.
[ 1396.427751][T16453] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2904'.
[ 1396.469800][T16453] lo speed is unknown, defaulting to 1000
[ 1396.483509][T16453] lo speed is unknown, defaulting to 1000
[ 1396.518659][T16453] lo speed is unknown, defaulting to 1000
[ 1396.644245][T16453] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[ 1396.736817][T16453] lo speed is unknown, defaulting to 1000
[ 1396.767723][T16453] lo speed is unknown, defaulting to 1000
[ 1396.834178][T16453] lo speed is unknown, defaulting to 1000
[ 1396.852983][T16453] lo speed is unknown, defaulting to 1000
[ 1396.879128][T16453] lo speed is unknown, defaulting to 1000
[ 1396.895054][T16453] lo speed is unknown, defaulting to 1000
[ 1396.942901][T16453] lo speed is unknown, defaulting to 1000
[ 1396.968179][T16453] lo speed is unknown, defaulting to 1000
[ 1396.990022][T16453] lo speed is unknown, defaulting to 1000
[ 1397.000407][T16453] lo speed is unknown, defaulting to 1000
[ 1397.032906][T16453] lo speed is unknown, defaulting to 1000
[ 1397.061835][T16453] lo speed is unknown, defaulting to 1000
[ 1397.091789][T16453] lo speed is unknown, defaulting to 1000
[ 1397.128695][T16453] lo speed is unknown, defaulting to 1000
[ 1397.135821][T16453] lo speed is unknown, defaulting to 1000
[ 1397.152426][T16453] lo speed is unknown, defaulting to 1000
[ 1397.178012][T16453] lo speed is unknown, defaulting to 1000
[ 1397.188236][T16453] lo speed is unknown, defaulting to 1000
[ 1397.204395][T16453] lo speed is unknown, defaulting to 1000
[ 1397.262408][T16453] lo speed is unknown, defaulting to 1000
[ 1397.331786][    C0] net_ratelimit: 11088 callbacks suppressed
[ 1397.331805][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:63:da:15:30:59, vlan:0)
[ 1397.342107][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1397.356824][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:63:da:15:30:59, vlan:0)
[ 1397.362511][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1397.376597][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:63:da:15:30:59, vlan:0)
[ 1397.386681][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1397.400803][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:63:da:15:30:59, vlan:0)
[ 1397.410687][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1397.424649][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:63:da:15:30:59, vlan:0)
[ 1397.434807][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1397.851325][T16470] loop3: detected capacity change from 0 to 512
[ 1397.944831][T16470] EXT4-fs: Ignoring removed orlov option
[ 1398.001840][T16470] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[ 1398.070248][T16470] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002]
[ 1398.102699][T16470] EXT4-fs error (device loop3): ext4_iget_extra_inode:4756: inode #15: comm syz.3.2906: corrupted in-inode xattr
[ 1398.209366][T16470] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.2906: couldn't read orphan inode 15 (err -117)
[ 1398.298810][T16470] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[ 1398.697081][T15621] EXT4-fs (loop3): unmounting filesystem.
[ 1398.885001][T16482] loop3: detected capacity change from 0 to 512
[ 1399.261752][T16482] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[ 1399.830632][T15621] EXT4-fs (loop3): unmounting filesystem.
[ 1400.183606][T16504] netlink: 'syz.9.2910': attribute type 9 has an invalid length.
[ 1400.191422][T16504] netlink: 'syz.9.2910': attribute type 1 has an invalid length.
[ 1400.268662][T16504] netlink: 303 bytes leftover after parsing attributes in process `syz.9.2910'.
[ 1401.258639][T16519] loop3: detected capacity change from 0 to 512
[ 1401.661965][T16519] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[ 1401.671099][T16519] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1401.802185][T16519] EXT4-fs error (device loop3): ext4_xattr_block_get:543: inode #12: comm syz.3.2914: corrupted xattr block 6
[ 1401.866256][T16531] capability: warning: `syz.9.2916' uses deprecated v2 capabilities in a way that may be insecure
[ 1402.161396][T15621] EXT4-fs (loop3): unmounting filesystem.
[ 1402.341758][    C1] net_ratelimit: 12334 callbacks suppressed
[ 1402.341775][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1402.360211][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1402.364893][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:63:da:15:30:59, vlan:0)
[ 1402.373103][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1402.386376][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:63:da:15:30:59, vlan:0)
[ 1402.397200][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1402.410683][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:63:da:15:30:59, vlan:0)
[ 1402.421171][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1402.434649][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:63:da:15:30:59, vlan:0)
[ 1402.445089][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1402.883568][T16547] netlink: 'syz.9.2920': attribute type 9 has an invalid length.
[ 1402.891391][T16547] netlink: 'syz.9.2920': attribute type 1 has an invalid length.
[ 1402.935972][T16547] netlink: 303 bytes leftover after parsing attributes in process `syz.9.2920'.
[ 1404.242288][T16575] loop3: detected capacity change from 0 to 128
[ 1404.352231][T16575] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1404.740571][T14073] Bluetooth: hci4: command 0x0406 tx timeout
[ 1406.075536][T16602] netlink: 72 bytes leftover after parsing attributes in process `syz.9.2936'.
[ 1406.090478][T16602] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2936'.
[ 1406.208996][T16602] loop9: detected capacity change from 0 to 128
[ 1406.224225][T16602] FAT-fs (loop9): Unrecognized mount option "" or missing value
[ 1407.352170][    C0] net_ratelimit: 8914 callbacks suppressed
[ 1407.352188][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:63:da:15:30:59, vlan:0)
[ 1407.363096][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1407.373347][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:63:da:15:30:59, vlan:0)
[ 1407.383103][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1407.400176][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:63:da:15:30:59, vlan:0)
[ 1407.407285][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1407.421067][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:63:da:15:30:59, vlan:0)
[ 1407.431170][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1407.445194][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:63:da:15:30:59, vlan:0)
[ 1407.455314][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1407.555457][T16235] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1408.864638][T16090] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1408.924953][T16601] option changes via remount are deprecated (pid=16597 comm=syz.9.2936)
[ 1408.934127][T16601] cgroup: option or name mismatch, new: 0x10 "", old: 0x0 ""
[ 1409.048851][T16601] infiniband !yz!: set active
[ 1409.054139][T16601] infiniband !yz!: added team_slave_0
[ 1409.095098][T16601] RDS/IB: !yz!: added
[ 1409.100784][T16601] smc: adding ib device !yz! with port count 1
[ 1409.107462][T16601] smc:    ib device !yz! port 1 has pnetid 
[ 1411.516604][T16235] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1411.865154][T16646] loop3: detected capacity change from 0 to 512
[ 1412.361623][    C1] net_ratelimit: 8938 callbacks suppressed
[ 1412.361642][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1412.362412][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:63:da:15:30:59, vlan:0)
[ 1412.368295][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1412.381897][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:63:da:15:30:59, vlan:0)
[ 1412.392274][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1412.405856][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:63:da:15:30:59, vlan:0)
[ 1412.512183][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1412.524602][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1412.536985][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1412.549342][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1412.631530][T13962] kernel write not supported for file /input/event0 (pid: 13962 comm: kworker/1:12)
[ 1412.927909][T16658] loop3: detected capacity change from 0 to 512
[ 1413.234593][T16658] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[ 1413.480270][T16672] loop9: detected capacity change from 0 to 128
[ 1413.699959][T15621] EXT4-fs (loop3): unmounting filesystem.
[ 1413.751391][T16672] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[ 1413.779572][T16672] ext4 filesystem being mounted at /73/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[ 1414.007730][T16672] EXT4-fs error (device loop9): ext4_append:79: inode #2: comm syz.9.2948: Logical block already allocated
[ 1414.128437][T16672] EXT4-fs (loop9): Remounting filesystem read-only
[ 1414.224189][T16235] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1414.384770][T15491] EXT4-fs (loop9): unmounting filesystem.
[ 1414.711349][T16689] device netdevsim0 entered promiscuous mode
[ 1414.908354][T16693] loop3: detected capacity change from 0 to 512
[ 1415.821319][T16709] loop9: detected capacity change from 0 to 512
[ 1416.105569][T16709] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended
[ 1416.141639][T16709] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem
[ 1416.227102][T16709] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[ 1416.235336][T16709] System zones: 0-2, 18-18, 34-35
[ 1416.272559][T16709] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[ 1416.339627][T16709] EXT4-fs (loop9): warning: mounting unchecked fs, running e2fsck is recommended
[ 1416.421637][T16709] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[ 1416.448575][T16709] EXT4-fs (loop9): re-mounted. Quota mode: none.
[ 1416.695761][T15491] EXT4-fs (loop9): unmounting filesystem.
[ 1416.867972][T16723] loop3: detected capacity change from 0 to 512
[ 1417.087099][T16723] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 1417.371742][    C0] net_ratelimit: 9550 callbacks suppressed
[ 1417.371761][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:63:da:15:30:59, vlan:0)
[ 1417.390599][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:63:da:15:30:59, vlan:0)
[ 1417.401232][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1417.404994][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:63:da:15:30:59, vlan:0)
[ 1417.415482][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1417.432144][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:63:da:15:30:59, vlan:0)
[ 1417.439419][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1417.452995][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:63:da:15:30:59, vlan:0)
[ 1417.463428][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1417.476854][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:63:da:15:30:59, vlan:0)
[ 1417.511997][T16723] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3852: comm syz.3.2960: Allocating blocks 41-42 which overlap fs metadata
[ 1417.544055][T16729] loop9: detected capacity change from 0 to 128
[ 1417.586080][T16723] Quota error (device loop3): write_blk: dquota write failed
[ 1417.615665][T16723] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5
[ 1417.681504][T16723] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[ 1417.700496][T16723] EXT4-fs error (device loop3): ext4_acquire_dquot:6835: comm syz.3.2960: Failed to acquire dquot type 1
[ 1417.767906][T16723] EXT4-fs error (device loop3): mb_free_blocks:1826: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[ 1417.819386][T16723] EXT4-fs error (device loop3): ext4_do_update_inode:5272: inode #12: comm syz.3.2960: corrupted inode contents
[ 1417.884817][T16723] EXT4-fs error (device loop3): ext4_dirty_inode:6137: inode #12: comm syz.3.2960: mark_inode_dirty error
[ 1417.988681][T16723] EXT4-fs error (device loop3): ext4_do_update_inode:5272: inode #12: comm syz.3.2960: corrupted inode contents
[ 1418.060152][T16723] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #12: comm syz.3.2960: mark_inode_dirty error
[ 1418.166214][T16723] EXT4-fs error (device loop3): ext4_do_update_inode:5272: inode #12: comm syz.3.2960: corrupted inode contents
[ 1418.270345][T16723] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem
[ 1418.360930][T16723] EXT4-fs error (device loop3): ext4_do_update_inode:5272: inode #12: comm syz.3.2960: corrupted inode contents
[ 1418.471651][T16723] EXT4-fs error (device loop3): ext4_truncate:4318: inode #12: comm syz.3.2960: mark_inode_dirty error
[ 1418.558646][T16723] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem
[ 1418.628980][T16723] EXT4-fs (loop3): 1 truncate cleaned up
[ 1418.661702][T16723] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[ 1418.945897][T16744] loop9: detected capacity change from 0 to 512
[ 1418.972531][T15621] EXT4-fs (loop3): unmounting filesystem.
[ 1419.599490][T16753] loop3: detected capacity change from 0 to 512
[ 1420.227046][T16235] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1421.113092][T16775] netlink: 'syz.3.2972': attribute type 39 has an invalid length.
[ 1421.178523][T16779] loop9: detected capacity change from 0 to 512
[ 1421.333272][T16779] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended
[ 1421.663697][T16779] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:3852: comm syz.9.2973: Allocating blocks 41-42 which overlap fs metadata
[ 1421.773805][T16779] Quota error (device loop9): write_blk: dquota write failed
[ 1421.781302][T16779] Quota error (device loop9): find_free_dqentry: Can't write quota data block 5
[ 1421.873505][T16779] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:3852: comm syz.9.2973: Allocating blocks 41-42 which overlap fs metadata
[ 1421.960139][T16779] Quota error (device loop9): write_blk: dquota write failed
[ 1421.975392][T16779] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota
[ 1422.043825][T16779] EXT4-fs error (device loop9): ext4_acquire_dquot:6835: comm syz.9.2973: Failed to acquire dquot type 1
[ 1422.086514][T16779] EXT4-fs error (device loop9): mb_free_blocks:1826: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[ 1422.118569][T16779] EXT4-fs error (device loop9): ext4_do_update_inode:5272: inode #12: comm syz.9.2973: corrupted inode contents
[ 1422.254946][T16779] EXT4-fs error (device loop9): ext4_dirty_inode:6137: inode #12: comm syz.9.2973: mark_inode_dirty error
[ 1422.334293][T16779] EXT4-fs error (device loop9): ext4_do_update_inode:5272: inode #12: comm syz.9.2973: corrupted inode contents
[ 1422.392126][    C0] net_ratelimit: 10496 callbacks suppressed
[ 1422.392148][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:63:da:15:30:59, vlan:0)
[ 1422.394301][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1422.400380][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:63:da:15:30:59, vlan:0)
[ 1422.410723][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1422.424699][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:63:da:15:30:59, vlan:0)
[ 1422.435145][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1422.448397][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:63:da:15:30:59, vlan:0)
[ 1422.458878][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1422.472624][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:63:da:15:30:59, vlan:0)
[ 1422.483153][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1422.561763][T16779] EXT4-fs error (device loop9): __ext4_ext_dirty:202: inode #12: comm syz.9.2973: mark_inode_dirty error
[ 1422.635656][T16779] EXT4-fs error (device loop9): ext4_do_update_inode:5272: inode #12: comm syz.9.2973: corrupted inode contents
[ 1422.722055][T16779] EXT4-fs error (device loop9) in ext4_orphan_del:303: Corrupt filesystem
[ 1422.811658][T16779] EXT4-fs error (device loop9): ext4_do_update_inode:5272: inode #12: comm syz.9.2973: corrupted inode contents
[ 1422.939007][T16779] EXT4-fs error (device loop9): ext4_truncate:4318: inode #12: comm syz.9.2973: mark_inode_dirty error
[ 1423.034354][T16779] EXT4-fs error (device loop9) in ext4_process_orphan:345: Corrupt filesystem
[ 1423.080838][ T1268] ieee802154 phy0 wpan0: encryption failed: -22
[ 1423.087257][ T1268] ieee802154 phy1 wpan1: encryption failed: -22
[ 1423.218790][T16779] EXT4-fs (loop9): 1 truncate cleaned up
[ 1423.237392][T16779] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[ 1423.719827][T15491] EXT4-fs (loop9): unmounting filesystem.
[ 1425.154179][T14073] Bluetooth: hci5: command 0x0406 tx timeout
[ 1425.458617][T16812] loop9: detected capacity change from 0 to 1024
[ 1425.970892][T16235] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1426.016834][T16235] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1426.032832][T16812] EXT4-fs error (device loop9): ext4_map_blocks:635: inode #3: block 2: comm syz.9.2974: lblock 2 mapped to illegal pblock 2 (length 1)
[ 1426.067074][T16235] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1426.077451][T16235] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1426.247895][T16812] Quota error (device loop9): qtree_write_dquot: dquota write failed
[ 1426.321766][T16812] EXT4-fs error (device loop9): ext4_map_blocks:635: inode #3: block 48: comm syz.9.2974: lblock 0 mapped to illegal pblock 48 (length 1)
[ 1426.405561][T16812] Quota error (device loop9): v2_write_file_info: Can't write info structure
[ 1426.535186][T16235] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1426.542682][T16812] EXT4-fs error (device loop9): ext4_acquire_dquot:6835: comm syz.9.2974: Failed to acquire dquot type 0
[ 1426.584734][T14861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1426.597205][T14861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1426.632219][T16812] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5933: Corrupt filesystem
[ 1426.643706][T16235] 8021q: adding VLAN 0 to HW filter on device team0
[ 1426.668816][T14861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1426.688022][T16812] EXT4-fs error (device loop9): ext4_evict_inode:279: inode #11: comm syz.9.2974: mark_inode_dirty error
[ 1426.700341][T14861] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1426.747464][T16812] EXT4-fs warning (device loop9): ext4_evict_inode:282: couldn't mark inode dirty (err -117)
[ 1426.760787][T14861] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1426.767967][T14861] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1426.784969][T16812] EXT4-fs (loop9): 1 orphan inode deleted
[ 1426.790778][T16812] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[ 1426.819993][ T4710] EXT4-fs error (device loop9): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:19: lblock 1 mapped to illegal pblock 1 (length 1)
[ 1426.843833][T14861] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1426.866615][T14861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1426.890128][T14861] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1426.907470][ T4710] Quota error (device loop9): remove_tree: Can't read quota data block 1
[ 1426.916282][ T4710] EXT4-fs error (device loop9): ext4_release_dquot:6871: comm kworker/u4:19: Failed to release dquot type 0
[ 1426.972015][T14861] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1426.979241][T14861] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1427.031112][T14861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1427.107585][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1427.149228][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1427.191690][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1427.231195][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1427.270574][ T8605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1427.354173][ T8605] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1427.402344][    C0] net_ratelimit: 11253 callbacks suppressed
[ 1427.402364][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:63:da:15:30:59, vlan:0)
[ 1427.420761][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1427.422012][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:63:da:15:30:59, vlan:0)
[ 1427.433429][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1427.447081][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:63:da:15:30:59, vlan:0)
[ 1427.457887][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1427.481341][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1427.493655][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1427.505962][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1427.518241][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1427.579927][T16304] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1427.620338][T15491] EXT4-fs (loop9): unmounting filesystem.
[ 1427.639293][T16235] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1427.650006][ T4295] EXT4-fs error (device loop9): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1)
[ 1427.668512][T16235] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1427.709218][ T4295] Quota error (device loop9): remove_tree: Can't read quota data block 1
[ 1427.739169][ T4295] EXT4-fs error (device loop9): ext4_release_dquot:6871: comm kworker/u4:5: Failed to release dquot type 0
[ 1427.795540][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1427.804357][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1427.834773][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1427.850312][T15491] EXT4-fs error (device loop9): __ext4_get_inode_loc:4513: comm syz-executor: Invalid inode table block 1 in block_group 0
[ 1427.902534][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1427.941159][T15491] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5933: Corrupt filesystem
[ 1427.962252][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1427.969932][T15491] EXT4-fs error (device loop9): ext4_quota_off:7141: inode #3: comm syz-executor: mark_inode_dirty error
[ 1428.177821][T16834] loop9: detected capacity change from 0 to 512
[ 1428.629019][T16834] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[ 1428.651760][T16834] ext4 filesystem being mounted at /88/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1428.740436][T16834] Quota error (device loop9): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0
[ 1428.812046][T16834] Quota error (device loop9): qtree_read_dquot: Can't read quota structure for id 64512
[ 1428.841844][T16834] EXT4-fs error (device loop9): ext4_acquire_dquot:6835: comm syz.9.2975: Failed to acquire dquot type 0
[ 1428.950252][ T8605] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1428.959378][ T8605] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1429.009349][T16235] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1429.109222][ T8605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1429.126487][T15491] EXT4-fs (loop9): unmounting filesystem.
[ 1429.148659][ T8605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1429.194797][ T8605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1429.228565][ T8605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1429.261458][T16235] device veth0_vlan entered promiscuous mode
[ 1429.268709][ T8605] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1429.295526][ T8605] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1429.319145][T16235] device veth1_vlan entered promiscuous mode
[ 1429.491287][ T8605] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1429.499814][ T8605] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1429.512588][ T8605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1429.541411][ T8605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1429.552957][T16849] loop9: detected capacity change from 0 to 2048
[ 1429.607315][T16235] device veth0_macvtap entered promiscuous mode
[ 1429.637441][T16235] device veth1_macvtap entered promiscuous mode
[ 1429.675803][T16851] loop3: detected capacity change from 0 to 128
[ 1429.736812][T16235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1429.778378][T16235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1429.801702][T16851] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1429.831644][T16235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1429.868011][T16235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1429.931639][T16235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1429.978478][T16849] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[ 1429.987178][T16235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1430.125940][T16235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1430.171647][T16235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1430.241642][T16235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1430.271780][T16235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1430.311644][T16235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1430.362598][T16859] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[ 1430.373698][T16235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1430.431964][T16235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1430.448775][T16859] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 128 with error 28
[ 1430.471643][T16235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1430.509708][T16235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1430.559057][T16235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1430.621673][T16235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1430.641718][T16859] EXT4-fs (loop9): This should not happen!! Data will be lost
[ 1430.641718][T16859] 
[ 1430.651539][T16859] EXT4-fs (loop9): Total free blocks count 0
[ 1430.665872][T16235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1430.701657][T16235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1430.735986][T16859] EXT4-fs (loop9): Free/Dirty block details
[ 1430.761638][T16235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1430.771533][T16235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1430.782653][T16859] EXT4-fs (loop9): free_blocks=2415919504
[ 1430.788630][T16859] EXT4-fs (loop9): dirty_blocks=704
[ 1430.836573][T16859] EXT4-fs (loop9): Block reservation details
[ 1430.859694][T16235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1430.871239][T16859] EXT4-fs (loop9): i_reserved_data_blocks=44
[ 1430.923838][T16235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1430.952219][T16235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1431.006632][T16235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1431.064894][T16235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1431.084582][T16235] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1431.146149][ T8605] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1431.176413][ T8605] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1431.212679][ T8605] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1431.242091][ T8605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1431.278754][T16235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1431.311635][T16235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1431.370762][T16235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1431.423474][T14073] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1431.451937][T14073] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1431.460411][T14073] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1431.467578][T16235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1431.491120][T14073] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1431.514057][T14073] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 1431.540492][T14073] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1431.568328][T16235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1431.648629][T16235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1431.727964][T16235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1431.804792][T16235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1431.851031][T16235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1431.902566][T16235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1431.927086][T16235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1431.980119][T16235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1432.010798][T16235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1432.063282][T16235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1432.099122][T16235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1432.132086][T16235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1432.183306][T16235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1432.226847][T16235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1432.271646][T16235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1432.294375][T16849] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28
[ 1432.316119][T16235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1432.360942][T16235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1432.371784][T16235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1432.389509][T16235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1432.411684][    C1] net_ratelimit: 9576 callbacks suppressed
[ 1432.411705][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1432.418860][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:63:da:15:30:59, vlan:0)
[ 1432.430402][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1432.443908][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:63:da:15:30:59, vlan:0)
[ 1432.454159][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1432.467890][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:63:da:15:30:59, vlan:0)
[ 1432.478307][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1432.491832][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:63:da:15:30:59, vlan:0)
[ 1432.502165][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1432.516099][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:63:da:15:30:59, vlan:0)
[ 1432.543769][T16235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1432.577587][T16235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1432.598541][T16235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1432.618599][T16235] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1432.631845][ T8605] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1432.640832][ T8605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1432.726514][T16304] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1432.820938][T16877] loop3: detected capacity change from 0 to 512
[ 1432.830880][T16235] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1432.848547][T16235] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1432.911647][T16235] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1432.920448][T16235] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1432.995900][T16865] lo speed is unknown, defaulting to 1000
[ 1433.290806][T16877] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[ 1433.301126][T16877] ext4 filesystem being mounted at /82/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1433.551756][T16877] EXT4-fs warning (device loop3): ext4_group_add:1723: Can't resize non-sparse filesystem further
[ 1433.586634][T16888] loop9: detected capacity change from 0 to 512
[ 1433.641317][T14073] Bluetooth: hci3: command 0x0409 tx timeout
[ 1433.672028][ T4710] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1433.680057][ T4710] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1433.783275][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1433.794971][T15621] EXT4-fs (loop3): unmounting filesystem.
[ 1433.890534][ T4710] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1433.911628][ T4710] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1433.973599][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1434.217964][T16888] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[ 1434.363278][T16896] tmpfs: Unknown parameter 'usrquota'
[ 1435.682584][T16896] comedi comedi3: 8255: I/O port conflict (0x5,4)
[ 1435.689096][T16896] comedi comedi3: 8255: I/O port conflict (0x3,4)
[ 1435.695634][T16896] comedi comedi3: 8255: I/O port conflict (0x40004,4)
[ 1435.702457][T16896] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4)
[ 1435.710212][T16896] comedi comedi3: 8255: I/O port conflict (0xb,4)
[ 1435.755687][T14073] Bluetooth: hci3: command 0x041b tx timeout
[ 1435.860130][T15491] EXT4-fs (loop9): unmounting filesystem.
[ 1436.192602][T16913] loop9: detected capacity change from 0 to 512
[ 1436.205242][T16865] chnl_net:caif_netlink_parms(): no params data found
[ 1436.384099][T16304] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1436.533128][T16913] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[ 1436.571778][T16913] ext4 filesystem being mounted at /91/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1436.684644][T16913] EXT4-fs: Ignoring removed orlov option
[ 1436.714900][T16913] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1436.747996][T16913] EXT4-fs (loop9): can't enable nombcache during remount
[ 1436.898357][T16865] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1436.930539][T15491] EXT4-fs (loop9): unmounting filesystem.
[ 1436.941783][T16865] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1436.950369][T16865] device bridge_slave_0 entered promiscuous mode
[ 1437.048162][T16865] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1437.111713][T16865] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1437.141090][T16865] device bridge_slave_1 entered promiscuous mode
[ 1437.246758][T16865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1437.303583][T16865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1437.422057][    C0] net_ratelimit: 8046 callbacks suppressed
[ 1437.422076][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:63:da:15:30:59, vlan:0)
[ 1437.432259][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1437.452790][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1437.465245][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1437.477595][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1437.489966][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1437.502301][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1437.504083][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:63:da:15:30:59, vlan:0)
[ 1437.515756][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1437.529022][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:63:da:15:30:59, vlan:0)
[ 1437.616073][T16865] team0: Port device team_slave_0 added
[ 1437.645011][T16865] team0: Port device team_slave_1 added
[ 1437.730479][T16865] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1437.747676][T16865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1437.803968][T16865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1437.838269][T16865] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1437.856870][ T4283] Bluetooth: hci3: command 0x040f tx timeout
[ 1437.898450][T16865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1438.010234][T16865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1438.240875][T16865] device hsr_slave_0 entered promiscuous mode
[ 1438.372288][T16865] device hsr_slave_1 entered promiscuous mode
[ 1438.382540][T16865] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1438.407625][T16865] Cannot create hsr debugfs directory
[ 1438.841990][T16944] netlink: 'syz.9.2989': attribute type 10 has an invalid length.
[ 1438.864010][T16944] team0: Port device dummy0 added
[ 1438.879849][T16944] netlink: 'syz.9.2989': attribute type 10 has an invalid length.
[ 1438.970904][T16944] team0: Failed to send port change of device dummy0 via netlink (err -105)
[ 1439.059571][T16944] team0: Failed to send options change via netlink (err -105)
[ 1439.067415][T16944] team0: Failed to send port change of device dummy0 via netlink (err -105)
[ 1439.077648][T16944] team0: Port device dummy0 removed
[ 1439.086711][T16944] bond0: (slave dummy0): Enslaving as an active interface with an up link
[ 1439.888391][T14073] Bluetooth: hci3: command 0x0419 tx timeout
[ 1439.917411][T16961] loop0: detected capacity change from 0 to 512
[ 1440.169110][T16961] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[ 1440.318004][T16968] loop3: detected capacity change from 0 to 512
[ 1440.475254][T16961] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters
[ 1440.557252][T16961] EXT4-fs (loop0): Remounting filesystem read-only
[ 1440.564154][T16961] Quota error (device loop0): write_blk: dquota write failed
[ 1440.608440][T16961] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5
[ 1440.671710][T16961] Quota error (device loop0): write_blk: dquota write failed
[ 1440.709997][T16961] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota
[ 1440.802461][T16968] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[ 1440.812669][T16961] EXT4-fs error (device loop0): ext4_acquire_dquot:6835: comm syz.0.2994: Failed to acquire dquot type 1
[ 1440.837352][T16968] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1440.926048][T16968] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0
[ 1440.950509][T16961] EXT4-fs (loop0): Remounting filesystem read-only
[ 1440.965444][T16961] EXT4-fs (loop0): 1 truncate cleaned up
[ 1440.995935][T16961] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[ 1441.014954][T16968] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 64512
[ 1441.082963][T16979] netlink: 'syz.9.2998': attribute type 39 has an invalid length.
[ 1441.110378][T16968] EXT4-fs error (device loop3): ext4_acquire_dquot:6835: comm syz.3.2996: Failed to acquire dquot type 0
[ 1441.114878][T16961] Quota error (device loop0): write_blk: dquota write failed
[ 1441.225584][T16961] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota
[ 1441.324662][T16961] EXT4-fs error (device loop0): ext4_acquire_dquot:6835: comm syz.0.2994: Failed to acquire dquot type 1
[ 1441.436598][T15621] EXT4-fs (loop3): unmounting filesystem.
[ 1441.460202][T16961] EXT4-fs (loop0): Remounting filesystem read-only
[ 1441.705987][T16235] EXT4-fs (loop0): unmounting filesystem.
[ 1441.974490][T16991] loop3: detected capacity change from 0 to 128
[ 1442.440217][    C0] net_ratelimit: 8350 callbacks suppressed
[ 1442.440236][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:63:da:15:30:59, vlan:0)
[ 1442.459191][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:63:da:15:30:59, vlan:0)
[ 1442.472180][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1442.472203][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:63:da:15:30:59, vlan:0)
[ 1442.484954][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1442.498516][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:63:da:15:30:59, vlan:0)
[ 1442.509078][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1442.522534][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:63:da:15:30:59, vlan:0)
[ 1442.532915][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1442.546447][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:63:da:15:30:59, vlan:0)
[ 1443.368895][T16304] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1443.388371][T17014] loop0: detected capacity change from 0 to 1024
[ 1443.586803][T17014] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #3: block 2: comm syz.0.3005: lblock 2 mapped to illegal pblock 2 (length 1)
[ 1443.628009][T17014] Quota error (device loop0): qtree_write_dquot: dquota write failed
[ 1443.636242][T17014] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #3: block 48: comm syz.0.3005: lblock 0 mapped to illegal pblock 48 (length 1)
[ 1443.697441][T17014] Quota error (device loop0): v2_write_file_info: Can't write info structure
[ 1443.721666][T17014] EXT4-fs error (device loop0): ext4_acquire_dquot:6835: comm syz.0.3005: Failed to acquire dquot type 0
[ 1443.770783][T17014] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5933: Corrupt filesystem
[ 1443.823863][T17014] EXT4-fs error (device loop0): ext4_evict_inode:279: inode #11: comm syz.0.3005: mark_inode_dirty error
[ 1443.922214][T17014] EXT4-fs warning (device loop0): ext4_evict_inode:282: couldn't mark inode dirty (err -117)
[ 1443.951073][T17014] EXT4-fs (loop0): 1 orphan inode deleted
[ 1443.971660][T17014] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[ 1443.991041][T14861] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:24: lblock 1 mapped to illegal pblock 1 (length 1)
[ 1444.042062][T14861] EXT4-fs error (device loop0): ext4_release_dquot:6871: comm kworker/u4:24: Failed to release dquot type 0
[ 1444.520130][T16235] EXT4-fs (loop0): unmounting filesystem.
[ 1444.547027][ T4295] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1)
[ 1444.614951][ T4295] EXT4-fs error (device loop0): ext4_release_dquot:6871: comm kworker/u4:5: Failed to release dquot type 0
[ 1444.639138][T16235] EXT4-fs error (device loop0): __ext4_get_inode_loc:4513: comm syz-executor: Invalid inode table block 1 in block_group 0
[ 1444.707014][T16235] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5933: Corrupt filesystem
[ 1444.774419][T16235] EXT4-fs error (device loop0): ext4_quota_off:7141: inode #3: comm syz-executor: mark_inode_dirty error
[ 1445.097744][T17029] loop0: detected capacity change from 0 to 512
[ 1445.431373][T17029] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[ 1445.447377][T17029] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1445.751365][T17040] loop3: detected capacity change from 0 to 128
[ 1445.801721][T16235] EXT4-fs (loop0): unmounting filesystem.
[ 1446.054565][ T4283] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1446.070187][ T4284] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1446.094375][ T4284] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1446.102639][ T4284] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1446.112074][ T4284] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[ 1446.119413][ T4284] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1446.264875][T17042] lo speed is unknown, defaulting to 1000
[ 1446.434899][T17048] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3014'.
[ 1446.478258][T17050] loop0: detected capacity change from 0 to 512
[ 1447.003838][T17050] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[ 1447.071809][T17050] ext4 filesystem being mounted at /10/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1447.207117][T17050] EXT4-fs (loop0): re-mounted. Quota mode: writeback.
[ 1447.333152][T16235] EXT4-fs (loop0): unmounting filesystem.
[ 1447.442138][    C0] net_ratelimit: 9604 callbacks suppressed
[ 1447.442156][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:63:da:15:30:59, vlan:0)
[ 1447.459593][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1447.462904][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:63:da:15:30:59, vlan:0)
[ 1447.472613][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1447.486621][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:63:da:15:30:59, vlan:0)
[ 1447.496980][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1447.510746][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:63:da:15:30:59, vlan:0)
[ 1447.520785][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1447.534707][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:63:da:15:30:59, vlan:0)
[ 1447.545025][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1447.617363][T17068] netlink: 'syz.3.3019': attribute type 9 has an invalid length.
[ 1447.677418][T17071] loop0: detected capacity change from 0 to 512
[ 1447.711628][T17068] netlink: 399 bytes leftover after parsing attributes in process `syz.3.3019'.
[ 1447.874453][T17042] chnl_net:caif_netlink_parms(): no params data found
[ 1448.231042][ T4284] Bluetooth: hci6: command 0x0409 tx timeout
[ 1448.272311][T17042] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1448.279646][T17042] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1448.295969][T17071] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[ 1448.320558][T17071] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1448.369845][T17042] device bridge_slave_0 entered promiscuous mode
[ 1448.381474][T17042] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1448.471714][T17042] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1448.480330][T17042] device bridge_slave_1 entered promiscuous mode
[ 1448.639409][T17042] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1448.734483][T17042] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1448.781485][T17091] loop3: detected capacity change from 0 to 128
[ 1448.849871][T16235] EXT4-fs (loop0): unmounting filesystem.
[ 1448.905167][T17042] team0: Port device team_slave_0 added
[ 1448.964570][T17042] team0: Port device team_slave_1 added
[ 1449.131930][T17042] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1449.138989][T17042] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1449.230848][T17042] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1449.303038][T17042] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1449.323445][T17042] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1449.474420][T17042] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1449.726120][T17042] device hsr_slave_0 entered promiscuous mode
[ 1449.753012][T17106] loop3: detected capacity change from 0 to 512
[ 1449.839701][T17042] device hsr_slave_1 entered promiscuous mode
[ 1449.911774][T17042] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1449.919412][T17042] Cannot create hsr debugfs directory
[ 1450.039422][T17112] netlink: 'syz.0.3029': attribute type 9 has an invalid length.
[ 1450.111341][T17106] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[ 1450.125196][T17112] netlink: 399 bytes leftover after parsing attributes in process `syz.0.3029'.
[ 1450.143332][T17106] ext4 filesystem being mounted at /106/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1450.290809][T14073] Bluetooth: hci6: command 0x041b tx timeout
[ 1450.349792][T15621] EXT4-fs (loop3): unmounting filesystem.
[ 1450.965320][T17122] loop0: detected capacity change from 0 to 512
[ 1451.312127][T17122] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[ 1451.321186][T17122] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1451.541070][T16235] EXT4-fs (loop0): unmounting filesystem.
[ 1451.668484][T17131] loop3: detected capacity change from 0 to 128
[ 1452.167709][T17140] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3036'.
[ 1452.379217][ T4284] Bluetooth: hci6: command 0x040f tx timeout
[ 1452.451748][    C1] net_ratelimit: 8685 callbacks suppressed
[ 1452.451769][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1452.470004][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1452.482392][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1452.493614][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:63:da:15:30:59, vlan:0)
[ 1452.495160][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1452.508919][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:63:da:15:30:59, vlan:0)
[ 1452.519125][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1452.532776][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:63:da:15:30:59, vlan:0)
[ 1452.543069][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1452.556790][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:63:da:15:30:59, vlan:0)
[ 1452.614056][T17149] loop3: detected capacity change from 0 to 512
[ 1452.770668][T17152] netlink: 'syz.0.3040': attribute type 9 has an invalid length.
[ 1452.786601][T17152] netlink: 399 bytes leftover after parsing attributes in process `syz.0.3040'.
[ 1453.201513][T17149] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[ 1453.221968][T17149] ext4 filesystem being mounted at /111/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1453.369277][T17163] loop0: detected capacity change from 0 to 512
[ 1453.479945][T15621] EXT4-fs (loop3): unmounting filesystem.
[ 1453.769878][T17163] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[ 1453.789754][T17163] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1454.042038][T16235] EXT4-fs (loop0): unmounting filesystem.
[ 1454.344141][T17177] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3047'.
[ 1454.520134][ T4284] Bluetooth: hci6: command 0x0419 tx timeout
[ 1454.638032][T17187] netlink: 'syz.0.3051': attribute type 9 has an invalid length.
[ 1454.671629][T17187] netlink: 399 bytes leftover after parsing attributes in process `syz.0.3051'.
[ 1454.928641][T17195] loop0: detected capacity change from 0 to 512
[ 1454.937859][T17194] loop9: detected capacity change from 0 to 128
[ 1455.223615][T17195] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[ 1455.247759][T17195] ext4 filesystem being mounted at /26/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1455.458803][T16235] EXT4-fs (loop0): unmounting filesystem.
[ 1455.706150][T17206] netlink: 'syz.0.3055': attribute type 39 has an invalid length.
[ 1456.179873][T17212] netlink: 72 bytes leftover after parsing attributes in process `syz.9.3057'.
[ 1457.461842][    C0] net_ratelimit: 10756 callbacks suppressed
[ 1457.461864][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:63:da:15:30:59, vlan:0)
[ 1457.480781][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:63:da:15:30:59, vlan:0)
[ 1457.481086][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1457.495083][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:63:da:15:30:59, vlan:0)
[ 1457.505623][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1457.519043][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:63:da:15:30:59, vlan:0)
[ 1457.529818][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1457.543181][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:63:da:15:30:59, vlan:0)
[ 1457.553616][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1457.567158][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:63:da:15:30:59, vlan:0)
[ 1459.668804][T17247] netlink: 68 bytes leftover after parsing attributes in process `syz.9.3060'.
[ 1459.927121][T17253] device syzkaller0 entered promiscuous mode
[ 1459.948735][T17253] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3061'.
[ 1460.014937][T17255] loop3: detected capacity change from 0 to 128
[ 1460.022767][T17253] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3061'.
[ 1460.209731][T17255] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[ 1460.262025][T17255] ext4 filesystem being mounted at /117/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[ 1460.544224][T15621] EXT4-fs (loop3): unmounting filesystem.
[ 1461.383852][T17272] netlink: 'syz.3.3066': attribute type 9 has an invalid length.
[ 1461.410586][T17272] netlink: 399 bytes leftover after parsing attributes in process `syz.3.3066'.
[ 1461.668292][   T27] kauditd_printk_skb: 2 callbacks suppressed
[ 1461.668308][   T27] audit: type=1326 audit(1770580951.187:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17275 comm="syz.3.3067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b3c59aeb9 code=0x7ffc0000
[ 1461.781653][   T27] audit: type=1326 audit(1770580951.217:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17275 comm="syz.3.3067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b3c59aeb9 code=0x7ffc0000
[ 1461.856278][   T27] audit: type=1326 audit(1770580951.217:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17275 comm="syz.3.3067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7f9b3c59aeb9 code=0x7ffc0000
[ 1461.961637][   T27] audit: type=1326 audit(1770580951.217:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17275 comm="syz.3.3067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b3c59aeb9 code=0x7ffc0000
[ 1462.031654][   T27] audit: type=1326 audit(1770580951.217:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17275 comm="syz.3.3067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b3c59aeb9 code=0x7ffc0000
[ 1462.257263][T17285] loop3: detected capacity change from 0 to 512
[ 1462.471898][    C1] net_ratelimit: 13197 callbacks suppressed
[ 1462.471918][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1462.472794][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:63:da:15:30:59, vlan:0)
[ 1462.478594][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1462.492305][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:63:da:15:30:59, vlan:0)
[ 1462.502901][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1462.516321][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:63:da:15:30:59, vlan:0)
[ 1462.526872][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1462.540308][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:63:da:15:30:59, vlan:0)
[ 1462.551182][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1462.566484][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:63:da:15:30:59, vlan:0)
[ 1462.631962][T17285] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[ 1462.680799][T17285] ext4 filesystem being mounted at /124/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1462.874100][   T27] audit: type=1800 audit(1770580952.387:35): pid=17285 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3069" name="bus" dev="loop3" ino=18 res=0 errno=0
[ 1463.053497][T15621] EXT4-fs (loop3): unmounting filesystem.
[ 1463.336858][T17296] loop3: detected capacity change from 0 to 2048
[ 1463.630390][T17296] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[ 1463.952465][T17295] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[ 1464.053746][T17295] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 224 with error 28
[ 1464.131630][T17295] EXT4-fs (loop3): This should not happen!! Data will be lost
[ 1464.131630][T17295] 
[ 1464.141356][T17295] EXT4-fs (loop3): Total free blocks count 0
[ 1464.201222][T17295] EXT4-fs (loop3): Free/Dirty block details
[ 1464.207295][T17295] EXT4-fs (loop3): free_blocks=2415919504
[ 1464.260278][T17295] EXT4-fs (loop3): dirty_blocks=704
[ 1464.268250][T17295] EXT4-fs (loop3): Block reservation details
[ 1464.302057][T17295] EXT4-fs (loop3): i_reserved_data_blocks=46
[ 1464.659826][T17296] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28
[ 1465.202207][T17316] loop3: detected capacity change from 0 to 128
[ 1465.472527][T17316] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[ 1465.540921][T17316] ext4 filesystem being mounted at /126/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[ 1465.801417][T15621] EXT4-fs (loop3): unmounting filesystem.
[ 1466.026611][T17331] netlink: 'syz.3.3076': attribute type 9 has an invalid length.
[ 1466.061638][T17331] netlink: 399 bytes leftover after parsing attributes in process `syz.3.3076'.
[ 1466.272766][T17335] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3079'.
[ 1467.481933][    C0] net_ratelimit: 11490 callbacks suppressed
[ 1467.481960][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:63:da:15:30:59, vlan:0)
[ 1467.490529][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1467.512313][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1467.524833][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1467.529445][T17357] loop0: detected capacity change from 0 to 512
[ 1467.537740][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1467.553499][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:63:da:15:30:59, vlan:0)
[ 1467.556086][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1467.569544][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:63:da:15:30:59, vlan:0)
[ 1467.579815][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1467.593648][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:63:da:15:30:59, vlan:0)
[ 1468.061722][T17357] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[ 1468.284197][T17374] netlink: 'syz.3.3088': attribute type 9 has an invalid length.
[ 1468.331659][T17374] netlink: 399 bytes leftover after parsing attributes in process `syz.3.3088'.
[ 1468.482500][T16235] EXT4-fs (loop0): unmounting filesystem.
[ 1469.155821][T17391] netlink: 'syz.3.3092': attribute type 39 has an invalid length.
[ 1470.110185][T17404] netlink: 68 bytes leftover after parsing attributes in process `syz.9.3097'.
[ 1470.491863][T17411] loop9: detected capacity change from 0 to 512
[ 1470.731472][T17417] device netdevsim0 entered promiscuous mode
[ 1470.787986][T17417] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3100'.
[ 1470.982806][T17411] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[ 1471.547498][T15491] EXT4-fs (loop9): unmounting filesystem.
[ 1471.579578][T17433] netlink: 'syz.3.3102': attribute type 39 has an invalid length.
[ 1472.109450][T17438] loop3: detected capacity change from 0 to 128
[ 1472.363409][T17438] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[ 1472.442161][T17438] ext4 filesystem being mounted at /146/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[ 1472.496666][T17444] loop9: detected capacity change from 0 to 1024
[ 1472.506482][    C1] net_ratelimit: 9028 callbacks suppressed
[ 1472.506502][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1472.521198][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:63:da:15:30:59, vlan:0)
[ 1472.525085][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1472.538756][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:63:da:15:30:59, vlan:0)
[ 1472.549166][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1472.562650][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:63:da:15:30:59, vlan:0)
[ 1472.573002][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1472.586644][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:63:da:15:30:59, vlan:0)
[ 1472.597177][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1472.610601][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:63:da:15:30:59, vlan:0)
[ 1472.732745][ T4391] device hsr_slave_0 left promiscuous mode
[ 1472.765739][ T4391] device hsr_slave_1 left promiscuous mode
[ 1472.783107][ T4391] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1472.816709][ T4391] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1472.825047][ T4391] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1472.842345][T15621] EXT4-fs (loop3): unmounting filesystem.
[ 1472.867146][ T4391] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1472.875876][ T4391] device bridge_slave_1 left promiscuous mode
[ 1472.929742][ T4391] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1472.997822][ T4391] device bridge_slave_0 left promiscuous mode
[ 1473.012049][ T4391] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1473.077557][T17444] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[ 1473.111697][ T4391] device hsr_slave_0 left promiscuous mode
[ 1473.140945][ T4391] device hsr_slave_1 left promiscuous mode
[ 1473.158070][ T4391] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1473.169385][ T4391] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1473.198018][T17444] ==================================================================
[ 1473.206163][T17444] BUG: KASAN: slab-out-of-bounds in ext4_xattr_set_entry+0x17c1/0x1e90
[ 1473.214593][T17444] Read of size 12404 at addr ffff88802f86a400 by task syz.9.3106/17444
[ 1473.222876][T17444] 
[ 1473.225280][T17444] CPU: 1 PID: 17444 Comm: syz.9.3106 Not tainted syzkaller #0
[ 1473.232782][T17444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 1473.242895][T17444] Call Trace:
[ 1473.246222][T17444]  <TASK>
[ 1473.249210][T17444]  dump_stack_lvl+0x188/0x24e
[ 1473.253977][T17444]  ? __lock_acquire+0x7d10/0x7d10
[ 1473.259165][T17444]  ? show_regs_print_info+0x12/0x12
[ 1473.264417][T17444]  ? load_image+0x400/0x400
[ 1473.268992][T17444]  ? _raw_spin_lock_irqsave+0xbc/0x100
[ 1473.274571][T17444]  ? __virt_addr_valid+0x188/0x540
[ 1473.279808][T17444]  ? __virt_addr_valid+0x465/0x540
[ 1473.284975][T17444]  ? ext4_xattr_set_entry+0x17c1/0x1e90
[ 1473.290582][T17444]  print_report+0xa8/0x210
[ 1473.295087][T17444]  kasan_report+0x10b/0x140
[ 1473.299734][T17444]  ? ext4_xattr_set_entry+0x17c1/0x1e90
[ 1473.305338][T17444]  kasan_check_range+0x235/0x290
[ 1473.310416][T17444]  ? ext4_xattr_set_entry+0x17c1/0x1e90
[ 1473.316015][T17444]  memmove+0x25/0x60
[ 1473.319952][T17444]  ext4_xattr_set_entry+0x17c1/0x1e90
[ 1473.325428][T17444]  ext4_xattr_block_set+0xae4/0x32b0
[ 1473.330762][T17444]  ? ext4_destroy_inode+0x200/0x200
[ 1473.336015][T17444]  ? proc_nr_inodes+0x2f0/0x2f0
[ 1473.341078][T17444]  ? _raw_spin_unlock+0x24/0x40
[ 1473.345972][T17444]  ? iput+0x768/0x980
[ 1473.350000][T17444]  ? ext4_xattr_block_find+0x2b0/0x2b0
[ 1473.355516][T17444]  ? ext4_xattr_ibody_set+0x509/0x690
[ 1473.360963][T17444]  ext4_xattr_set_handle+0xe3b/0x1570
[ 1473.366397][T17444]  ? ext4_xattr_inode_free_quota+0x1b0/0x1b0
[ 1473.372481][T17444]  ext4_xattr_set+0x242/0x320
[ 1473.377202][T17444]  ? ext4_xattr_set_credits+0x290/0x290
[ 1473.382782][T17444]  ? posix_xattr_acl+0x8f/0xb0
[ 1473.387652][T17444]  ? evm_protect_xattr+0x333/0x9d0
[ 1473.392803][T17444]  ? ext4_xattr_trusted_get+0x40/0x40
[ 1473.398207][T17444]  __vfs_setxattr+0x3e0/0x420
[ 1473.402984][T17444]  __vfs_setxattr_noperm+0x129/0x5e0
[ 1473.408300][T17444]  vfs_setxattr+0x167/0x2e0
[ 1473.412833][T17444]  ? xattr_permission+0x500/0x500
[ 1473.417884][T17444]  ? _copy_from_user+0x10b/0x170
[ 1473.422915][T17444]  ? setxattr+0x2ce/0x360
[ 1473.427305][T17444]  setxattr+0x346/0x360
[ 1473.431516][T17444]  ? path_setxattr+0x290/0x290
[ 1473.436330][T17444]  ? __mnt_want_write+0x21f/0x2a0
[ 1473.441396][T17444]  path_setxattr+0x147/0x290
[ 1473.446026][T17444]  ? simple_xattr_list_add+0xf0/0xf0
[ 1473.451341][T17444]  ? lock_chain_count+0x20/0x20
[ 1473.456222][T17444]  __x64_sys_lsetxattr+0xb4/0xd0
[ 1473.461192][T17444]  do_syscall_64+0x4c/0xa0
[ 1473.465641][T17444]  ? clear_bhb_loop+0x60/0xb0
[ 1473.470347][T17444]  ? clear_bhb_loop+0x60/0xb0
[ 1473.475046][T17444]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1473.480966][T17444] RIP: 0033:0x7fcb87b9aeb9
[ 1473.485420][T17444] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1473.505061][T17444] RSP: 002b:00007fcb85df6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd
[ 1473.513520][T17444] RAX: ffffffffffffffda RBX: 00007fcb87e15fa0 RCX: 00007fcb87b9aeb9
[ 1473.521524][T17444] RDX: 0000200000000000 RSI: 00002000000000c0 RDI: 0000200000000100
[ 1473.529530][T17444] RBP: 00007fcb87c08c1f R08: 0000000000000000 R09: 0000000000000000
[ 1473.537573][T17444] R10: 000000000000fe37 R11: 0000000000000246 R12: 0000000000000000
[ 1473.545589][T17444] R13: 00007fcb87e16038 R14: 00007fcb87e15fa0 R15: 00007ffd7b40af38
[ 1473.553595][T17444]  </TASK>
[ 1473.556636][T17444] 
[ 1473.558992][T17444] Allocated by task 17444:
[ 1473.563440][T17444]  kasan_set_track+0x4b/0x70
[ 1473.568074][T17444]  __kasan_kmalloc+0x8e/0xa0
[ 1473.572697][T17444]  __kmalloc_node_track_caller+0xae/0x230
[ 1473.578525][T17444]  kmemdup+0x27/0x60
[ 1473.582572][T17444]  ext4_xattr_block_set+0x9e6/0x32b0
[ 1473.587898][T17444]  ext4_xattr_set_handle+0xe3b/0x1570
[ 1473.593310][T17444]  ext4_xattr_set+0x242/0x320
[ 1473.598016][T17444]  __vfs_setxattr+0x3e0/0x420
[ 1473.602730][T17444]  __vfs_setxattr_noperm+0x129/0x5e0
[ 1473.608043][T17444]  vfs_setxattr+0x167/0x2e0
[ 1473.612588][T17444]  setxattr+0x346/0x360
[ 1473.616776][T17444]  path_setxattr+0x147/0x290
[ 1473.621396][T17444]  __x64_sys_lsetxattr+0xb4/0xd0
[ 1473.626361][T17444]  do_syscall_64+0x4c/0xa0
[ 1473.630812][T17444]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1473.637083][T17444] 
[ 1473.639442][T17444] The buggy address belongs to the object at ffff88802f86a000
[ 1473.639442][T17444]  which belongs to the cache kmalloc-1k of size 1024
[ 1473.653523][T17444] The buggy address is located 0 bytes to the right of
[ 1473.653523][T17444]  1024-byte region [ffff88802f86a000, ffff88802f86a400)
[ 1473.667256][T17444] 
[ 1473.669599][T17444] The buggy address belongs to the physical page:
[ 1473.676031][T17444] page:ffffea0000be1a00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2f868
[ 1473.686203][T17444] head:ffffea0000be1a00 order:3 compound_mapcount:0 compound_pincount:0
[ 1473.694556][T17444] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[ 1473.702572][T17444] raw: 00fff00000010200 ffffea0001783000 dead000000000002 ffff888017441dc0
[ 1473.711186][T17444] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000
[ 1473.719785][T17444] page dumped because: kasan: bad access detected
[ 1473.726278][T17444] page_owner tracks the page as allocated
[ 1473.732031][T17444] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x152a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 4492, tgid 4492 (kworker/u4:16), ts 1328310645803, free_ts 1328273680241
[ 1473.753254][T17444]  post_alloc_hook+0x173/0x1a0
[ 1473.758126][T17444]  get_page_from_freelist+0x1a1e/0x1ab0
[ 1473.763706][T17444]  __alloc_pages+0x1ec/0x4f0
[ 1473.768326][T17444]  alloc_slab_page+0x5d/0x160
[ 1473.773033][T17444]  new_slab+0x87/0x2c0
[ 1473.777152][T17444]  ___slab_alloc+0xbc6/0x1240
[ 1473.781873][T17444]  __kmem_cache_alloc_node+0x1a0/0x260
[ 1473.787396][T17444]  __kmalloc+0xa0/0x240
[ 1473.791623][T17444]  ieee802_11_parse_elems_full+0xb5/0x1220
[ 1473.797572][T17444]  ieee80211_bss_info_update+0x82a/0xc80
[ 1473.803308][T17444]  ieee80211_ibss_rx_queued_mgmt+0x189d/0x2cd0
[ 1473.809534][T17444]  ieee80211_iface_work+0x726/0xc80
[ 1473.814764][T17444]  cfg80211_wiphy_work+0x221/0x260
[ 1473.819969][T17444]  process_one_work+0x8a2/0x1160
[ 1473.824990][T17444]  worker_thread+0xaa2/0x1270
[ 1473.829710][T17444]  kthread+0x29d/0x330
[ 1473.833804][T17444] page last free stack trace:
[ 1473.838581][T17444]  free_unref_page_prepare+0x8b4/0x9a0
[ 1473.844070][T17444]  free_unref_page+0x2e/0x3f0
[ 1473.848779][T17444]  __unfreeze_partials+0x1a5/0x200
[ 1473.853919][T17444]  put_cpu_partial+0x17c/0x250
[ 1473.858705][T17444]  qlist_free_all+0x76/0xe0
[ 1473.863240][T17444]  kasan_quarantine_reduce+0x144/0x160
[ 1473.868770][T17444]  __kasan_slab_alloc+0x1e/0x80
[ 1473.873651][T17444]  slab_post_alloc_hook+0x4b/0x480
[ 1473.878788][T17444]  __kmem_cache_alloc_node+0x140/0x260
[ 1473.884276][T17444]  __kmalloc+0xa0/0x240
[ 1473.888468][T17444]  ethnl_default_notify+0xbe/0x5f0
[ 1473.893698][T17444]  ethnl_netdev_event+0x54/0x70
[ 1473.898579][T17444]  raw_notifier_call_chain+0xcb/0x160
[ 1473.904020][T17444]  netdev_change_features+0x92/0xd0
[ 1473.909284][T17444]  bond_compute_features+0x5cd/0x630
[ 1473.914748][T17444]  bond_enslave+0x219a/0x3af0
[ 1473.919541][T17444] 
[ 1473.921979][T17444] Memory state around the buggy address:
[ 1473.927626][T17444]  ffff88802f86a300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1473.935715][T17444]  ffff88802f86a380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1473.943794][T17444] >ffff88802f86a400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 1473.951873][T17444]                    ^
[ 1473.955958][T17444]  ffff88802f86a480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 1473.964039][T17444]  ffff88802f86a500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 1473.972121][T17444] ==================================================================
[ 1473.993089][ T4391] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1474.000661][ T4391] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1474.127477][ T4391] device bridge_slave_1 left promiscuous mode
[ 1474.134030][ T4391] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1474.167179][ T4391] device bridge_slave_0 left promiscuous mode
[ 1474.193352][ T4391] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1474.296906][ T4391] device team0 left promiscuous mode
[ 1474.302321][ T4391] device team_slave_0 left promiscuous mode
[ 1474.308393][ T4391] device team_slave_1 left promiscuous mode
[ 1474.336027][T17444] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 1474.343390][T17444] CPU: 0 PID: 17444 Comm: syz.9.3106 Not tainted syzkaller #0
[ 1474.350896][T17444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 1474.360999][T17444] Call Trace:
[ 1474.364378][T17444]  <TASK>
[ 1474.367364][T17444]  dump_stack_lvl+0x188/0x24e
[ 1474.372116][T17444]  ? memcpy+0x3c/0x60
[ 1474.376168][T17444]  ? show_regs_print_info+0x12/0x12
[ 1474.381482][T17444]  ? load_image+0x400/0x400
[ 1474.386159][T17444]  panic+0x2e5/0x730
[ 1474.390104][T17444]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1474.396625][T17444]  ? bpf_jit_dump+0xd0/0xd0
[ 1474.401176][T17444]  ? _raw_spin_unlock_irqrestore+0x10d/0x120
[ 1474.407292][T17444]  ? _raw_spin_unlock+0x40/0x40
[ 1474.412194][T17444]  check_panic_on_warn+0x80/0xa0
[ 1474.417257][T17444]  ? ext4_xattr_set_entry+0x17c1/0x1e90
[ 1474.422943][T17444]  end_report+0x66/0x110
[ 1474.427242][T17444]  kasan_report+0x118/0x140
[ 1474.431796][T17444]  ? ext4_xattr_set_entry+0x17c1/0x1e90
[ 1474.437390][T17444]  kasan_check_range+0x235/0x290
[ 1474.442388][T17444]  ? ext4_xattr_set_entry+0x17c1/0x1e90
[ 1474.447992][T17444]  memmove+0x25/0x60
[ 1474.451929][T17444]  ext4_xattr_set_entry+0x17c1/0x1e90
[ 1474.457361][T17444]  ext4_xattr_block_set+0xae4/0x32b0
[ 1474.462707][T17444]  ? ext4_destroy_inode+0x200/0x200
[ 1474.467979][T17444]  ? proc_nr_inodes+0x2f0/0x2f0
[ 1474.472892][T17444]  ? _raw_spin_unlock+0x24/0x40
[ 1474.477784][T17444]  ? iput+0x768/0x980
[ 1474.481851][T17444]  ? ext4_xattr_block_find+0x2b0/0x2b0
[ 1474.487367][T17444]  ? ext4_xattr_ibody_set+0x509/0x690
[ 1474.492794][T17444]  ext4_xattr_set_handle+0xe3b/0x1570
[ 1474.498241][T17444]  ? ext4_xattr_inode_free_quota+0x1b0/0x1b0
[ 1474.504315][T17444]  ext4_xattr_set+0x242/0x320
[ 1474.509045][T17444]  ? ext4_xattr_set_credits+0x290/0x290
[ 1474.514636][T17444]  ? posix_xattr_acl+0x8f/0xb0
[ 1474.519535][T17444]  ? evm_protect_xattr+0x333/0x9d0
[ 1474.524710][T17444]  ? ext4_xattr_trusted_get+0x40/0x40
[ 1474.530131][T17444]  __vfs_setxattr+0x3e0/0x420
[ 1474.534877][T17444]  __vfs_setxattr_noperm+0x129/0x5e0
[ 1474.540228][T17444]  vfs_setxattr+0x167/0x2e0
[ 1474.544784][T17444]  ? xattr_permission+0x500/0x500
[ 1474.549948][T17444]  ? _copy_from_user+0x10b/0x170
[ 1474.554933][T17444]  ? setxattr+0x2ce/0x360
[ 1474.559435][T17444]  setxattr+0x346/0x360
[ 1474.563677][T17444]  ? path_setxattr+0x290/0x290
[ 1474.568605][T17444]  ? __mnt_want_write+0x21f/0x2a0
[ 1474.573732][T17444]  path_setxattr+0x147/0x290
[ 1474.578384][T17444]  ? simple_xattr_list_add+0xf0/0xf0
[ 1474.583732][T17444]  ? lock_chain_count+0x20/0x20
[ 1474.588644][T17444]  __x64_sys_lsetxattr+0xb4/0xd0
[ 1474.593634][T17444]  do_syscall_64+0x4c/0xa0
[ 1474.598100][T17444]  ? clear_bhb_loop+0x60/0xb0
[ 1474.602828][T17444]  ? clear_bhb_loop+0x60/0xb0
[ 1474.607556][T17444]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1474.613500][T17444] RIP: 0033:0x7fcb87b9aeb9
[ 1474.617957][T17444] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1474.637616][T17444] RSP: 002b:00007fcb85df6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd
[ 1474.646111][T17444] RAX: ffffffffffffffda RBX: 00007fcb87e15fa0 RCX: 00007fcb87b9aeb9
[ 1474.654125][T17444] RDX: 0000200000000000 RSI: 00002000000000c0 RDI: 0000200000000100
[ 1474.662144][T17444] RBP: 00007fcb87c08c1f R08: 0000000000000000 R09: 0000000000000000
[ 1474.670213][T17444] R10: 000000000000fe37 R11: 0000000000000246 R12: 0000000000000000
[ 1474.678226][T17444] R13: 00007fcb87e16038 R14: 00007fcb87e15fa0 R15: 00007ffd7b40af38
[ 1474.686254][T17444]  </TASK>
[ 1474.689892][T17444] Kernel Offset: disabled
[ 1474.694237][T17444] Rebooting in 86400 seconds..