last executing test programs:

11m56.501281863s ago: executing program 32 (id=81):
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000011c0)}]}}], 0x1, 0xc0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)}], 0x1, 0x0, 0x0, 0x2c}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x8, 0x7, 0x4000000000000e51, 0xfffffffffffffffe, 0x5479, 0x1035, 0x200000000006, 0x0, 0x5, 0xfffffffffffffffc, 0xffffffff, 0xbf4, 0xfff, 0x808000000000005, 0x800000068], 0x2000, 0x80cd4})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

11m51.451484691s ago: executing program 33 (id=15):
mbind(&(0x7f0000002000/0x3000)=nil, 0x3000, 0xa002, &(0x7f0000000140)=0x3ff, 0x61, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ff1000/0x2000)=nil, 0x2000})
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000340)={[{0x22a, 0x2, 0xfe, 0x0, 0x0, 0x88, 0x0, 0x0, 0x5, 0xff, 0x1f}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfd, 0x0, 0x4, 0x24, 0xfd, 0x1000000}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

11m43.194121351s ago: executing program 4 (id=132):
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_write(r0, 0x82, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)

11m40.764494622s ago: executing program 4 (id=140):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f0000000280)=r1}, 0x20)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r3=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3}, 0x14)
syz_emit_ethernet(0x46, &(0x7f0000000700)={@local, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x10, 0x2b, 0x0, @private2, @local, {[], {0x2100, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0x6, 0x100, @val=0x80}}}}}}}}, 0x0)

11m40.558975057s ago: executing program 4 (id=141):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f0000000000))

11m39.918655064s ago: executing program 4 (id=142):
syz_mount_image$ocfs2(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x8c0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x1, 0x442a, &(0x7f0000000300)="$eJzs3c9vVNUeAPBzb/seLQ94LY8FLzFxEkk0apqWlVoSSymUFioGhRg3w7QdoDrtkHZqXLCoOxJXJi6MC6KJu65IF27xT3DjEtckunBjQkKsmZk7be/tTDrWTivk80nonXt+z3znnjl3cTlxonJ7bik3t5QrLOTKMzeXTuc+KZeW54sh3icH3T/t6UScxP7gXDl34b3rp0P4Yfanx+vr6+uhqjs0NbTl9e+/3Z3ZemyIM3Wq7TZvba98GEI4sW1cVV0hhA++DyEKIZxN0kaTY28I4Vio512/+/mN3B6N5sGj4pn806l7a8OnJlfvr7V+71EIX5f+//qt+V9e6hr++dU96h4AAAAAAAAAAAAAAAAAgGfc+NUr194dHAoPo9C9Gm1/Xnc8ObZ6PnZ9z7zY1nifJKX/7vsGAAAAAAAAAAAAAAAAAACAf5LN5/9z0fEmz/+PJceRFvXX3+78GOmciXeujJ0fHEr2f4+25b+RJP16tiv0N9n3Pbv/+9lM/eb7v2/vZ7ca42v02xeieCB1HscDAyF8m2z8fjI6HJfKS5XXbpaXF2b3bBjPrHT867v3p6KTbOjfbvxHM+13fv///237NlXPb+zdV+y5lo5/V8ty330WtRX/c5l6+xF/di8d/+5aWu/WAiP1CaAa/y+6d47/WKb9TsX/WAghF1XHmkvNANU1TDW91XqFtHT8/1VLS02dyQfZ6vp/kon/+Uz7BzX/r2R/iGgqHf9/19J6UiU2r//+eOfr/0Km/YOIf3X8K37/25KO/6F6YneqSO2TbHf+H8+036n4X4uTcR6LUt+A1aie3ur/qyMtHf+ebfmb939xW+u/i5n6+3X/1+i3cf/XmP5fier3fzSXjn9vy3LtXv8TmXqdnv9Haus/disd/8O1tPTaua/2t934T2ba71T8a6uSnkb8N+eTPw7V07+x/mtLOv7/qSfGW0us1P7W1n/Rzuv/S5n2D2L9Vx3/StzZXp8X6fgfaVmuGv8f2/j9v5yp1/n4hzBorb9r6fgfbVmudv337Bz/qUy9Tsf/5U42DgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAMGE2OfSGKB1LncTwwEMK55PxkOBxNF2bz06XyzMdLIYwl6blwPLpVKk8XSvm5hfJsMV8olcozIZxP8k+EnmipVK7k5wt3Lmy01RvdLhYWK9PFQiWEMJ6kvxCONtqanqvMF+6EEC5u5P03Li/euV1YyM/OLb41ODg4GCY2xtAfFT+tFBcq9d7ruSFMbtTti7YMrpZ9aWMsR6KPysuLC4VSLf3yljql8kyhtKXOVJL3ZeiPKovLCzOFSjFfKt9q9HeQRpLj2MTV969eHtqWfyOqH0f3d1gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/EUPh9/8KoTQXT+LQwi5KHkRJf9SHjwqnsk/nbq3NnxqcvX+2uNmZQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiTHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzSP0oDQRQH4DdjoaXHsFp2O9sVRbRwRfAEegwPo0fxEt7BIkXaFCGQzELYP7BNUn1f82B+zLwH8wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACWe3zr3l/rJiLF1fYy4vfz7/84fy71+276/sUZZuR0nl66+4e6Kf+eRvltOVq1eZ9u1l8fMVF7P4M9Ge7TwbjP0Ny+zc3X972OlKuIaEt+k3KuqmVvAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOzYgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCwAAAAAI87eOom8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4FcAAAD//0OnJ0Q=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000004740)='./file1\x00', 0x6042, 0x106)
r1 = creat(&(0x7f0000004780)='./bus\x00', 0x0)
ftruncate(r1, 0x800)
r2 = open(&(0x7f00000047c0)='./bus\x00', 0x24000, 0x0)
sendfile(r1, r2, 0x0, 0xf800)
mount(&(0x7f0000004800)=@loop={'/dev/loop', 0x0}, &(0x7f0000004840)='./bus\x00', 0x0, 0x5000, 0x0)
r3 = open(&(0x7f0000004880)='./bus\x00', 0x0, 0x139)
ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f00000048c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]})
fsetxattr$security_capability(r0, &(0x7f00000049c0), 0x0, 0x0, 0x1)

11m36.776214754s ago: executing program 4 (id=155):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_clone(0x80000080, &(0x7f0000000180)="4f2f550b5f6c00a5744f86f89b7f03fd00acec28afa22a9d8e3e1b8ee90cc97d94", 0x21, 0x0, 0x0, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x180, 0x4, 0x14, 0xf1, 0x50, 0x12, 0x5, 0x0, 0x29, 0x0, 0x6, 0x0, 0xbda], 0x4, 0x43100})
memfd_create(0x0, 0x1)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000140)={0x1, 0x0, [{0x40000001, 0x7fff, 0x4, 0x31237648, 0x6, 0x2, 0x80}]})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0xa7c, 0x68ff, 0x5, 0x9, 0x3, 0x8], 0xeeee8000, 0x202})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

11m35.301836761s ago: executing program 4 (id=159):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0xff, 0x6}, 0x2}, 0x18)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmmsg(r0, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)="050000eb3a49a8d125", 0x9}], 0x1}}], 0xfffffffffffffd9e, 0x4000041)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r3=>0x0})
bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18)
setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmmsg(r2, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)="050000eb3a49a8d125", 0x9}], 0x1}}], 0x1, 0x4000041)

11m34.762085885s ago: executing program 34 (id=159):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0xff, 0x6}, 0x2}, 0x18)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmmsg(r0, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)="050000eb3a49a8d125", 0x9}], 0x1}}], 0xfffffffffffffd9e, 0x4000041)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r3=>0x0})
bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18)
setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmmsg(r2, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)="050000eb3a49a8d125", 0x9}], 0x1}}], 0x1, 0x4000041)

11m24.68904482s ago: executing program 5 (id=201):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x2)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00')
r1 = fanotify_init(0x40, 0x101000)
fanotify_mark(r1, 0x1, 0x8000039, r0, 0x0)
io_setup(0x9, &(0x7f00000000c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000100)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x7, 0x8, r0, 0x0}])

11m24.433949877s ago: executing program 5 (id=202):
r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x1, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.freeze\x00', 0x275a, 0x0)
ftruncate(r2, 0x8008976)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r2, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x334ecc4b, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)

11m22.386955189s ago: executing program 5 (id=208):
timer_create(0x7, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)=0x3)
syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x14b000)
syz_open_dev$sndpcmp(&(0x7f0000000440), 0x0, 0x0)
landlock_create_ruleset(0x0, 0x0, 0x0)

11m20.844380608s ago: executing program 5 (id=214):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8001, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x88000, 0x0)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0xa)

11m20.517006846s ago: executing program 5 (id=216):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000140)='./file1\x00')
r0 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x80040, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x401}}, './file1\x00'})
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0)

11m20.220318704s ago: executing program 5 (id=218):
r0 = getpid()
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
read(r1, &(0x7f0000000080)=""/1, 0x1)
write$cgroup_pid(r1, &(0x7f00000000c0)=r0, 0x12)
close(r1)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/cgroup.procs\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/devices.allow\x00', 0x1, 0x0)

11m4.98370752s ago: executing program 35 (id=218):
r0 = getpid()
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
read(r1, &(0x7f0000000080)=""/1, 0x1)
write$cgroup_pid(r1, &(0x7f00000000c0)=r0, 0x12)
close(r1)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/cgroup.procs\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/devices.allow\x00', 0x1, 0x0)

10m38.589528861s ago: executing program 7 (id=394):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000022c0)='dev_mnt\x00', 0x5d)
mount(0x0, &(0x7f00000001c0)='dev_mnt\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000440)='dev_mnt/zram0\x00', 0x2, 0x0)
syz_io_uring_submit$UBLK(0x0, 0x0, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x33, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x108, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0xa44, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x4}}}, &(0x7f0000000300)=<r1=>0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
syz_ublk_setup_queues(r3, r1, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x84080, 0x1, 0x29, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x20, 0x1, 0x13b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2350, 0x6449, 0x0, 0xfffffffd, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x40, 0x2, 0xfffeffff}}], 0x1, 0x0, 0x0)

10m37.181423836s ago: executing program 7 (id=399):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1001})
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0x7}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x1}, {}, {0x300, 0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xd, 0x5}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x810}, 0x0)
r4 = socket$inet(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000002c0)='syzkaller0\x00', 0xb)
sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x4e20, @loopback}, 0x10)

10m36.569370781s ago: executing program 7 (id=402):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x40)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x10, &(0x7f00000054c0)={[{@test_dummy_encryption}, {@noauto_da_alloc}, {@oldalloc}], [{@fsuuid={'fsuuid', 0x3d, {[0x37, 0x65, 0x35, 0x35, 0x30, 0x64, 0x31, 0x36], 0x2d, [0x63, 0x64, 0x39, 0x31], 0x2d, [0x62, 0x63, 0x34, 0x34], 0x2d, [0x63, 0x62, 0x32, 0x38], 0x2d, [0x38, 0x31, 0x36, 0x38, 0x31, 0x64, 0x36, 0x34]}}}, {@euid_eq}, {@smackfsfloor={'smackfsfloor', 0x3d, ',!\x00'}}]}, 0x1, 0x3f7, &(0x7f0000003080)="$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")
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000340)={&(0x7f0000000080), 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x2c, 0x453, 0x1, 0x70bd25, 0x25dfdbfb, "b7b125a1affbbc25a4cac57e0e51636f473c7374347185903501"}, 0x2c}}, 0x4001)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x300, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0x81, 0x8}, {0x1, 0x0, 0x1ff, 0x9}}}}, 0x15)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x4, 0x6, 0x7, 0x10043, 0x5, 0x2, 0x2004cb, 0x0, 0x7, 0xd2, 0x2, 0x4, 0x1, 0x0, 0x9], 0xeeee8000, 0x283a02})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10m35.473620669s ago: executing program 7 (id=409):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x181)
syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./bus\x00', 0x3820c50, 0x0, 0xff, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000240), 0x8, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
openat(0xffffffffffffff9c, 0x0, 0x103a42, 0x32)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./trace\x00', &(0x7f0000000340)='tracefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./dummy\x00', 0x42, 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./trace/uprobe_events\x00', 0x2, 0x0)
write(r0, &(0x7f0000000480)='p:mygrou-/myevent ./dummy:0', 0x1b)
unlinkat(0xffffffffffffff9c, 0x0, 0x200)

10m35.109332098s ago: executing program 7 (id=412):
socket$nl_route(0x10, 0x3, 0x0)
ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522)
socket$packet(0x11, 0x2, 0x300)
socket$inet(0x2, 0xa, 0xffffffff)
userfaultfd(0x80001)
r0 = syz_io_uring_setup(0x141f, &(0x7f0000000080)={0x0, 0xa63f, 0x400, 0x201, 0x14a}, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000180)=<r3=>0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0100000006"], 0x50)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
syz_io_uring_submit$UBLK(r1, r2, r3, &(0x7f00000003c0)=@ublk_get_features_sqe={0x2e, 0x69, 0x0, <r4=>0xffffffffffffffff, 0x80207513, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffbb1, 0x0, 0x0, '\x00', {0x0, 0xffff, 0x0, 0x0}})
io_uring_enter(r0, 0x20, 0x20, 0x1, 0x0, 0x0)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000200)={0x4d, r4, 0x10, {0xef, 0x1f}, 0x81}, 0x1)

10m34.789531227s ago: executing program 7 (id=415):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
r1 = socket(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'syzkaller0\x00', 0x1})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x8001}, {0xffff, 0xffff}, {0xb, 0x2}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newtfilter={0x38, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x8001}, {0x3, 0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}}, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r5, &(0x7f00000003c0)='\x00', 0x1, 0x0, &(0x7f0000000400)={0x11, 0x300, r4, 0x1, 0x0, 0x6, @local}, 0x14)

10m33.998115837s ago: executing program 36 (id=415):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
r1 = socket(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'syzkaller0\x00', 0x1})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x8001}, {0xffff, 0xffff}, {0xb, 0x2}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newtfilter={0x38, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x8001}, {0x3, 0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}}, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r5, &(0x7f00000003c0)='\x00', 0x1, 0x0, &(0x7f0000000400)={0x11, 0x300, r4, 0x1, 0x0, 0x6, @local}, 0x14)

6m8.068243346s ago: executing program 8 (id=1163):
r0 = socket$netlink(0x10, 0x3, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=@allocspi={0xf8, 0x16, 0x1, 0xfffffffd, 0x200000, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, {}, {}, {0x7}, 0x8000000, 0x0, 0x2}, 0xfffffffe}}, 0xf8}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$inet6(0xa, 0x2, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000940)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000900)={&(0x7f00000003c0)={0x1c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x28642, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, 0x0)
ioctl$TIOCMGET(r5, 0x5415, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0)

6m7.005285073s ago: executing program 8 (id=1168):
syz_open_procfs(0xffffffffffffffff, 0x0)
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$SYNC_IOC_FILE_INFO(0xffffffffffffffff, 0x40103e05, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = syz_open_dev$sg(&(0x7f0000000380), 0x0, 0x20402)
read(r4, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000001440)='./file0\x00', 0x80040, 0x54)
sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
fsetxattr$system_posix_acl(r5, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="36f83f020200000001000000000000", @ANYBLOB="040000000000000010000300"], 0x2c, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1)
fremovexattr(r6, &(0x7f0000000040)=@known='system.posix_acl_default\x00')
sendmmsg$inet_sctp(r0, &(0x7f00000064c0)=[{&(0x7f0000000000)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000040)="cd", 0x1}], 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000008400000000000000ac1414aa00000000"], 0x18}], 0x1, 0x0)

6m5.822117113s ago: executing program 8 (id=1170):
socket$kcm(0x29, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
io_uring_setup(0xa0, &(0x7f0000000080)={0x0, 0xb9d8, 0x2})
mkdir(&(0x7f00000004c0)='./file2\x00', 0x1ff)
mount(&(0x7f0000000500)=@filename='127.0.0.1:/\x00', &(0x7f0000000540)='./file2\x00', &(0x7f0000000580)='nfs\x00', 0x0, &(0x7f00000005c0)='addr=127.0.0.1,vers=3,proto=udp\x00')
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000003700)=@newchain={0x50, 0x64, 0x300, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x4, 0xc}, {0xc, 0x9}, {0x5, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x5, 0xb}}, @filter_kind_options=@f_u32={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x6, 0xb}}, @TCA_RATE={0x6, 0x5, {0x2, 0x7f}}, @TCA_RATE={0x6, 0x5, {0xd4, 0x7}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r3 = semget(0x3, 0x4, 0x69c)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={<r4=>0xffffffffffffffff})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0xe4}}, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x89fc, &(0x7f0000000340)={'bond0\x00', @random="00009e0c1100"})
semop(r3, &(0x7f0000000080)=[{0x3, 0x8001, 0x1000}, {0x1, 0x5b7a, 0x800}], 0x2)
semop(r3, &(0x7f0000000340)=[{0x2, 0x7f, 0x1800}, {0x1, 0xbbdb, 0x1000}, {0x1, 0x5}], 0x3)

6m3.521792791s ago: executing program 8 (id=1174):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0a00fe1100000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000000000006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd844a954b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b4090a79507df79f298129da487130d5f24b46001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad379e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4b9535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024a0041b1df65b3e1b9bf115646d14ce53d13d0ccacda1efc5f9094fa737c28b994a8512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4fdc4b4861004eefbc17f54f82a804d4a69bf9bc5fa77ee293fbd165a5a68488a010030166565a097b103b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f940b6f0e8c7db4bf23242a18159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c2d7962b0d22772c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac2bba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f407000000000000006d294d366501753a7ac7fedb8d34f5bc381604fcd46105c457e7dd13cab669ab377e4c2422a47e9ffe2d4a2d32f7528751313694bf57704400b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c9585638c2153a6eee01738b0c10671f4f559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670100be05e7de0940313c5870786554df26236ebced9390cb6940b8375d936a7d2120eca291963eb2d537d8ee4de5c183c160119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d30902208d300e4d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d0000002000000001c8000000000000003a48cea769470424d28804c024ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef40662d7836d252c566f5ee934c679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da2022f23daec61854f640f701db0276652f6c031578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada209bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6155e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2f085185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bcdb7c89739f5d81e750d50517a59a3ad09e8802e8f4f000000000facd5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f296115d4a31838eeb20c20bb82aa31771cd379ec83554cea5b473332f2011e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d3fcd116bce9c764c714c9402c21d181aae59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755367fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc05000000000000006c25b96174327d82761c26e329555f9290af4100000000000000749e1338636555009edf66be445d6975d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab0043ebf7c79a953e023f74afad591821610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c1960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000000000027c9a4619a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd5c17d5486b0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dff7aa46e820a74f9530bdcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fdca4e9eda0072f6df342f3e7071e28ef6806b90cc39c49b91c76b0d3958f7f05b47d3e519f1634e8fbd8d3133319e069f9648a2ff93060ff073b3a113e47e447c030931651dd315003b7a6a47c912853826c4c65433a2bb560ae99ec4b227eda2e63a1cb1a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7194d1eb3de6a5f99f301f89c2ee627e949cdd22000026a9960503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640000cd9e5f2e236ef5f1e3a94b108eb9750b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a2050000c375c705c798e0e208e4a5259d0bda526b462af45a6e9a84aebe025c8a7f65819f397574db7ab01bd2b3e3cd28c5aec90f8edfe39a00bafd688a7eea04efdeed96f67012bc3f795edb68b5dec80ad31a858eb756c815e7695d00000000000000000000000000000000000000000000000000007ccf0ce549d97510f7f8765408bb702f0000006d4754c68b7064cf31a681421994e1f307f0ab4ff2e33d3c88fea5d218a276b77adfee7c8fb145783ee1f8adbd2c2604eab3a62a28611da1dae5ce60003111ce5c96a1d6e45ee144ffa3dcca32a33f8f0ce2995b7b7aa0bce228cbf37412cbbdebae06edb51a134301d2627d4927287daf9dcae6720334862d3a18094f1edd9e350337cbb804004d1755cfe7d7fa01872fb99815dcfbbc8141f6e1bbb0901ae91357677fd9d2bb00d4f17fb441c2dfa2b424bf46ae299d68ac27792cdac2b63a6038ab5546ba1e5ad6a329f2c627100e0442f865fc6c179ad3edcb6b000000000000000b0000000000000000ac192d48d76e2a8cae83ae850f73fdfbaca81b6b7b1a0d7b517f41fbd46aa24b0f4b8e0202e3a580947f1925ba4de097e8dcb6bd7f686322b45d4a544ca1e83b592d4a6d46d0a0dc39634550bc77d4cabba01b283082e66778de7c61a1a36838d36c2f8e58cef603770ee3d6a9625be0bc21d2be2da69ac9e9c5e88278d39239501b465102ad16d651ea8bb8cee35527c1ad42ac6a565e449929ccb4469bdd6824b64e13579b7188566e735200000000000000000094e05bcda1e96e4c33ccf6d74046e45bafe9d512c43a3e485dedad9a38b34f7fcd00fafcc25dc36716f0e21e0632425b7a1c1a6bc15c3fc07d914c88103411d8d2b77b72a796fd3aaa7ea493c7bc43e63b2b0d05ad5682121682096b224933fa20255d58a680cc2ec200"/3002], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x39)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000800)="d2ffdd934517f3e145fa02e086dd", 0x0, 0x80, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000000}, 0x50)
write(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
move_pages(0x0, 0x55, 0xffffffffffffffff, 0x0, 0x0, 0x2)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@delqdisc={0x24, 0x26, 0x505, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x440c1}, 0x2400c800)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x103496, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x80)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00', <r4=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r2, r4, 0x25, 0x4, @val=@netfilter={0x7, 0x0, 0x9}}, 0x20)
syz_emit_ethernet(0x11, &(0x7f0000000400)={@remote, @empty, @void, {@x25={0x805, {0x1, 0x6, 0xf3}}}}, 0x0)
r5 = socket$inet6(0xa, 0x80002, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syz_tun\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x0, 0xfff2}, {0xfff3}}}, 0x24}}, 0x0)
unshare(0x22020400)
pipe2(&(0x7f0000000040), 0x0)

6m2.700186022s ago: executing program 8 (id=1178):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
r2 = gettid()
waitid(0x2, r2, 0x0, 0x2, 0x0)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, 0x0, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4342, 0x0)
r4 = dup(r3)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_clone(0x2808000, 0x0, 0x0, 0x0, 0x0, 0x0)
move_pages(r6, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r5, &(0x7f00000064c0), 0x0, 0x30100, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4000000)
mq_open(&(0x7f0000000000)='*\xfd#^^\x00', 0x40, 0xe, 0x0)
syz_usb_connect(0x3, 0x2d, 0x0, 0x0)
r7 = syz_open_dev$audion(&(0x7f0000000180), 0x3, 0x44101)
ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, &(0x7f00000002c0)=0x3)
ioctl$SNDCTL_DSP_STEREO(r7, 0xc0045003, 0x0)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd86)

6m1.757581916s ago: executing program 8 (id=1179):
syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x90, &(0x7f0000000180)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3", @ANYRESHEX], 0x1, 0xd99, &(0x7f0000000280)="$eJzs3UtvXNUdAPBzx544LxqHmMZN09glpbiP2CRYpbsaKV2gSqgSnwClgYYa+ghdgIKUsOi2kRAfoIh9F31mgRSxSsWmVb8AYtVNipBoG1UCI9vnjMf/zOjOOLbH4/n9pDtn7v2fe88587hz575OAkZWY+1xcXG6SuntW29dvDcz/r/VKTOtHLNrj+N5bCml1GzNl9JkWN7SxHr62SfXLrWnn+e0ShdSlarW9PTs3da8R1JK19Nsup0m03Mfn7z50gfPLL934saJi2/M3dmZ1gMAwGi596N3f/m3x3947fj/f39mKU20ppft86U8fjRv9y9V6+M5af0PqNrSqm28OBDyjeehEfKNdcjXXk4z5BvvUv6BsNxml3wTNeWPtU3r1G4YZhv/46vG/KbxRmN+fv0/+aoPxw5U869cWX7h6oAqCmy7T2fyLj6DwTByw8qxQa+BANbF44b3uR73LDyY1tLGeyv/7tONzvPDNtjtz7/yh6v8d29Y47B99uunqbSrfI+O5vF4HGE8zNfv978sLx6PaPZYz27HEYbl+EK3eo7tcj22qlv94+div/paTsvrcCbE278/8T0dlvcY6Oye/f8Gw8gOK4NeAQF7VjxvbiUr8XheX4xP1MQP1sQP1cQP18SP1MRhlP3h1d+mm9XG//z4n77f/WFlP9tDOf1Sn/WJ+yP7LT+e99uvBy0/nk8Me9rcf09/+uvbf4/n/38ezv8/m39LJ/MKouwvjPvVW+f+hwuDG13yPRyq81CH/GvPpzbnq6Y2lpPa1jP31WN683zHuuU7vTnfZMh3OG+LHAz1jdsnh8N8ZfujrFfL6zUe2tsM7TgQ6lHemeM5PRjac7xbu8KO7AMhXzMPJ0K7pkK7HgnzfTm0q5re3K64/7zU52SYHo+TlHzhbbvvdym+F/G6jEdz+mZO38np+zn9qEO5o6h8Hrud/18+n9OpWb1wZfnyE3m8fE7vjDUnVqef3+V6Aw+u1+t/ptPm63+OtqY3G+3rhWMb06v29cJkmH6hy/Qn83j5Pfvp2KG16fOXfr78k+1uPIy4q6+9/rPnl5cv/8oTTzzxpPVk0GsmYKctvPryLxauvvb6uSsvP//i5Rcvv3L+ie9/78mnnlpcWNuqX2jftgf2l40f/UHXBAAAAAAAAAAAAOhZdajz5JzW3d+2XE9erk+P18czHMr7Vj4N5T4G5frPbvd1KddvHt+FOrL9duNyokG3Eejs3+7/azCM7LCy4i7+wN4w6P7/yn0PS3r03D+Prw4l292nN68v4/0L4UHs9f7nlL+/+v9r9X/V8/ov9Jg1ubVy/3jv0D/aik2nei0/tr/cB3aqv/L/lMsvrXks9Vb+yu9C+fFGpT36cyj/cI/l39f+01sr/y+5/PKyzZ3ttfz1GleNzfWI+43LfQDjfuPir6H95d5+fbd/ix213crlwygbln4m+zUs/X92U5Zb1oN59dw6Tlfuvx37O+i3/uW+3+V34JGw/Krm903/n8Otrv/P8vlb0P8n7DsfOv5nMIzssLKyMtCuT0a135W9YtCv/6C3IQdd/qBf/zqx/8/4fyn2/xnjsf/PGI/9f8Z47F8rxmP/n/H1jP1/xvjJsNzYP+h0TfwrNfFTNfGv1sRP18Tj/7cYn62Jn6mJz9TEH66JP1oTP1sT/0ZN/LGa+OM18bma+H739ZyOavthlMV+I33/YXSU4z/dvv9TNXFgeMV+neP3+5s1cWB4lfM8fL9hBFWd79gR97eX/bhv5vSdnL6f0492rILshm/l9Ns5/U5Ov5vTczmdz+lCTvUNOdx+869TZ25WG+f5HQvxXs8njdcDxPvEnO+xPvH4XL/ns57ssZydKn+Ll4MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADI3G2uPi4nSV0tu33rr4n6kf/Hh1ykwrx+za43geW0opNVNKVR4fD8u7PrGefvbJtUud0ipdWHss4+nZu615j6zOn2bT7TSZnvv45M2XPnhm+b0TN05cfGPuzs60HgAAAEbDFwEAAP//ManlwQ==")
openat$tun(0xffffffffffffff9c, &(0x7f0000001040), 0x82000, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000001080)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10)
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0)
r1 = fsopen(&(0x7f0000001100)='ntfs3\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000001140)={0x9, 0x100}, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000001180)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f00000011c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000001240)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000012c0), 0x651, 0x0)
recvmmsg(r3, &(0x7f0000001300), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000001340)=0x6)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f00000013c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {0x0, [0x0]}}, 0x0, 0x1b, 0x0, 0x1}, 0x28)
close_range(r1, 0xffffffffffffffff, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000001400)={0x2, @win={{0x7f, 0x4, 0x56595559, 0x2}, 0x3, 0x81, 0x0, 0x7, 0x0, 0x10}})
r5 = fsopen(&(0x7f0000000140)='debugfs\x00', 0x1)
r6 = fsmount(r5, 0x0, 0xd)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mprotect(&(0x7f000080e000/0x2000)=nil, 0x2000, 0x4000002)
listxattr(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x0)
sendmsg$WG_CMD_GET_DEVICE(r6, 0x0, 0x20004040)

6m1.096671173s ago: executing program 37 (id=1179):
syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x90, &(0x7f0000000180)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3", @ANYRESHEX], 0x1, 0xd99, &(0x7f0000000280)="$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")
openat$tun(0xffffffffffffff9c, &(0x7f0000001040), 0x82000, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000001080)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10)
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0)
r1 = fsopen(&(0x7f0000001100)='ntfs3\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000001140)={0x9, 0x100}, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000001180)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f00000011c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000001240)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000012c0), 0x651, 0x0)
recvmmsg(r3, &(0x7f0000001300), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000001340)=0x6)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f00000013c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {0x0, [0x0]}}, 0x0, 0x1b, 0x0, 0x1}, 0x28)
close_range(r1, 0xffffffffffffffff, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000001400)={0x2, @win={{0x7f, 0x4, 0x56595559, 0x2}, 0x3, 0x81, 0x0, 0x7, 0x0, 0x10}})
r5 = fsopen(&(0x7f0000000140)='debugfs\x00', 0x1)
r6 = fsmount(r5, 0x0, 0xd)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mprotect(&(0x7f000080e000/0x2000)=nil, 0x2000, 0x4000002)
listxattr(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x0)
sendmsg$WG_CMD_GET_DEVICE(r6, 0x0, 0x20004040)

1m10.721123896s ago: executing program 2 (id=2668):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
flock(r1, 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x8)
flock(r2, 0x1)

1m9.527192324s ago: executing program 2 (id=2676):
syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x89901)
move_mount(r0, &(0x7f00000001c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x89901)
r1 = open_tree(0xffffffffffffff9c, &(0x7f000000fb80)='./file0\x00', 0x89901)
move_mount(r1, &(0x7f000000fbc0)='.\x00', 0xffffffffffffff9c, &(0x7f000000fc00)='./file0\x00', 0x0)
mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x80000, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000440)='mountinfo\x00')
sendfile(r2, r2, &(0x7f0000000480)=0x2eb4, 0x2000007ff)

1m9.210879902s ago: executing program 2 (id=2679):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'syzkaller1\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0xfff7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0)
writev(r0, &(0x7f0000000480)=[{&(0x7f0000000440)="2e9b5b00ace03dd65193dfb6c5619a3d86dd606706000014061200", 0x1b}, {&(0x7f0000000740)="37bcb39800000000f66b8157b45046eb15ff314c846dbc0f31fa4cc9f8296c", 0x1f}], 0x2)

1m8.667934055s ago: executing program 2 (id=2684):
pipe2$9p(&(0x7f0000000280)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000001bc0)='./file0\x00', 0x8052, &(0x7f0000001c00)={[{@errors_remount}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@barrier_val={'barrier', 0x3d, 0x5}}]}, 0x1, 0x4e1, &(0x7f0000001c80)="$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")
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000300)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000340)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x14000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}})
fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x17f)
r3 = syz_mount_image$fuse(&(0x7f0000000480), &(0x7f00000004c0)='./file0\x00', 0xa0, &(0x7f0000000500)=ANY=[], 0x1, 0x0, 0x0)
getdents(r3, 0x0, 0x0)

1m7.468001575s ago: executing program 2 (id=2694):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="a56bd7023383fd64cf4c4679e250f113cf70e212f0680cfadcc74d039368da79dcf3c5f2046c1e2f3e376b3378208ce3fd1bcdaefbea0d5025e3038f49d6b5c5b926a6152f7d2a489b1fe3b5d60134cb718ac3d91c7ba49409153ec58c9ac7642d798fe4fcfee41643c80c43631d041afe7df4b56fcafea0d1d67c0d"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
pipe(&(0x7f0000000300)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x129c81, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000380)=0x8)
unshare(0x22020600)
write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000400)={0x0, 0x5, 0x400007f, 0xff, 0x5, "42341f9b1000007e4f00"})
r2 = syz_open_pts(r1, 0x0)
dup3(r2, r1, 0x0)
splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x0)

1m6.165564696s ago: executing program 2 (id=2708):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0x0)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000000c0)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000100)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000180)={0x0, 0x1, 0x0, &(0x7f00000001c0)=""/43, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, &(0x7f0000000d00)=""/245, &(0x7f0000000e00)=""/87, &(0x7f0000000e80)=""/76, 0x10000})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000f00)={0x1, 0x0, [{0x0, 0x24, &(0x7f0000000f40)=""/36}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000f80)=0x1)
ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000280)={0x1, 0x3e8})

1m5.595476301s ago: executing program 38 (id=2708):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0x0)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000000c0)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000100)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000180)={0x0, 0x1, 0x0, &(0x7f00000001c0)=""/43, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, &(0x7f0000000d00)=""/245, &(0x7f0000000e00)=""/87, &(0x7f0000000e80)=""/76, 0x10000})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000f00)={0x1, 0x0, [{0x0, 0x24, &(0x7f0000000f40)=""/36}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000f80)=0x1)
ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000280)={0x1, 0x3e8})

18.937682578s ago: executing program 1 (id=2900):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0)
socket(0xa, 0x5, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58)
epoll_create1(0x0)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000003100), 0x80, 0x0)
ioctl$RTC_IRQP_SET(r2, 0x4008700c, 0x11cf)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="6507060082762422f9a30250a90def79e5ddb933b83b8f8f1a0daad170478560f60eb8dc258ded60aee45b04b15db386", 0x30)
keyctl$setperm(0x5, r0, 0x52b242d)
keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x3})
keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x3})

18.419205261s ago: executing program 1 (id=2903):
socket$nl_crypto(0x10, 0x3, 0x15)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
r0 = getpid()
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000380), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000003c0), 0x10106, 0x2, 0x0)
listen(0xffffffffffffffff, 0x5)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x10, 0x2, &(0x7f0000000600)=@raw=[@generic={0xb7, 0x0, 0x0, 0x0, 0x1}, @generic={0x95}], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000680)={@map, r3, 0x7, 0x0, 0x0, @void, @value=0x0}, 0x20)
sendto(0xffffffffffffffff, &(0x7f0000000780)='{', 0x1, 0x8000, 0x0, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f00000007c0)={0x0, 'veth1_to_batadv\x00', {0x4}, 0x26})
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000800), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)={0x34, r5, 0x1, 0x70bd2f, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}]}, 0x34}}, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

15.105104872s ago: executing program 9 (id=2913):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='wwnn=0x1000000044001122,wwpn=0x2000000044001122', 0x2f)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
write(r1, &(0x7f0000000580)='fc', 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0)
write(r2, &(0x7f0000000600)='fc', 0x2)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
symlinkat(&(0x7f0000000700)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000780)='./config/nvmet/ports/1/subsystems/testsubsys\x00')

14.981440405s ago: executing program 0 (id=2915):
io_setup(0x80000000, &(0x7f0000001140))
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x25, 0x55bf, &(0x7f0000006a80)="$eJzs3E2LG3UYAPBnsrt9ty7iwVsHirALTWi2L+jJqi2+YEvx5eBJs0ka0iaZZZOma089eBQPfhNR8OTRz+BBj3oTD4o3oZKZWe32RbtuNsu2vx/MPDP//PPMM0MIPDMhATy1FtM/fkvieByOiLmIOJZEvp2US8SdiAvF3Bci4kREVO5ZknL874EDEXEkIo5Pkhc5k/KlL06NT5779e3fv/3+4PzRL7/5YU9PHNhTL0ZEf63YvtUvYtYp4vVyvDHu5rF/dlzGtS05+lkxfqu9mme41dic18jjmU4xP1u7OZzEa71GcxI73Wv5+NqgOOBw3NnMM3lDer2xnu+32qt57A6zPHZuF8fduF18t90ejoo8rTLfJ3n6GI02YzHe3mgX57N2I4/NwagcL/JmrfbGJI7LWB4umlmvldex+j8v8j7wTndwcyMdt9eH3WyQnqvVX6rVz1fr61mrPWqfrTb6rfNn06VObzKtOmo3+hc6WdbptWvNrL+cLnWazWq9ni5dbK92G4O0Xq+dqZ2unlsut06lb1z5IO210qVJfK07uDnq9obptWw9Ld6xnK7Uzry8nJ6sp+9dvppefffSpctX3//o4odXXr381uvlpAfKSpdWTq+sVOunqyv15afo/D8ti97G+ScPH/7px51dNig84gP2aPO7UwfAPvJA/x/39/+h/wembif9f/9Gub87/X88Tv8f0+z/Jy2V/v+/+9/Ktvrf41PpfxdC/7+L5w87su3+P3dg6nUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADBzPy989Wa+sVjsHy3HnymHniv3k4ioRMTdh5iLA1tyzpV5Fh4xf+G+Gr5LIs8wOcbBcjkSERfK5c9nd/sqAAAAwJPr6zsnPi+69WK1uNcFMUvFTZvKsY+nlC+JiIXFX6aUrTJZPT+lZPnnez42ppQtv4F1aErJiltu89PK9ljmtoRD94SkCJWZlgMAAMzE1k5gtl0IAAAAs/TZv776yszqYMaS2HyUufksOP/l/T8PBA9PVnfv+3E/AAAAsJ8ke10AAAAAsOvy/t///wEAAMCTrfj/PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgL3bu50ZtIIoD8LPBQP4pKMo9reQGZaSEHHMMFJAmKIG0kAaogUg5pIQVrLBnkbwL0moZYy36Psn2znj18wxweWNpAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBLf6v1/PfPL78uzdntL5NnNgAAAMAp22o9r/+YNu13qf9D6vqU2kVElBFxqnYfxKiVOUg51Zn/rx6N4U9EnXDoH6fjbUR8Tcfdx64/BQAAALhdm+Vq1lTrzSktAfzrd1RcSbNoU77/limviIhq+j9TWnk4fc4UVv++h/EjU1q9gDXJFNYsuQ1P3xvlekjboHV5mMmi/hLrVtnNcwEAgD61K4EzVQgAAAA34HvfA+Aanpb2xfF0fM84bi7pheCbVgsAAAB4hYq+BwAAAAB0rq7/u9n/b/Ki/f8K+/8BAABAds3+fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHRpW63nm+Vqdu7+4pk5u/1l8s0IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHv25xiFYRgKouAmkZK4M7r/Yc2CXbp2MwOCx99KAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCd1/nyvuLT2JOMXhuz55Xk26nx69T4d25sMxnr6d8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABzsz0sKhEAQRMGc8b+Tvv9hJUHPIEIENDyqqEUDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF/0u1/+T0yNM8ncaWPpeCRZu2psXTX2HjSOHoy3fwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFzs289rHFUcAPA3O9lNU1uMUQJGpUoPerHptrb2KqIED/4JQkg3Nbq12uZgS7Dm4k1y7kX0IogISrzlf+i5gV7qrYccInjyEJlfyWyybX6QzKzN5wNv33ffTt6PmWXJd98sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAhbX3wquNPI6Th9EsLtoerC/MJPXqtjqxsvRwIilJHA0Xraff2OvYG/GhLGFQvVZ+cma8vokAAADwrDi96xFxkd+HEB41l6eSujGa5v/N4pgk5/8x7yrK27bn/avrCyfylyaK/P/PPx6/tDnQaJyOk3Q6O9ftnN85laEDL/N/7vldjxhKz3z63UucXpDGR4svrjXT8xl9f//+B600HK5itgDAQZwr6jwo/h9K6nadEwPg2BgqJd5F/h+P1jsnAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCqsLYbnijgKIUwMbcWJ1fWFmX71t0sPJ1bycvnevaVyn0kXzRDC7Fy3c75ntOEjX89gKs7mnc+nu93OzVu3qw7OhBD6vHR3b38e59N/4jGtEEJPy9mX+/TzyR7G2tbPjiB/e4Zqz+FIsr5dD456WqIdJ/z9jUwdb4BDDlpPukyN/PocxaAjlV/33qB47x1+z/v5LDmun6EAAOxHMy9JJvqouTyVtEVjIWz81Jv/v1mKQ0/ev3E3a8mer5Ty/8efXn5QHquc/7e3mk8d9RoH3eT89S8nb92+8/bc9elrnWudL9650H63ffHKpUtXJtPvSiZnQ2PbNyYAAACwH628lPP/kT77/ydLcXjK/n+2JZzl/1/90P6mPFbcP/8/9rY2/eqeCQAAwHHU2oxeeP2fv6M+R0StVvh6en7+Zjt73Hx+IXusdLoHNJyXcv4fj9U9KwAAAKAKa4tRz/7/1VIcnrL/X77//9Qvr/xW7jPO7i24EULonJu50b1a3XIGWu+Pfn+Oj+KHyulArbpXCgAAQF1G8lLe/2+OJfl/Y/OWh0YI4a2zIfyb/4Y/7DH/jz/87tfyWOX7/y9WusrB0xjPzkdaj4cwNF73jAAAAHiWnchLkuz/1Vye+uz3kx+33P8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAULX/AgAA//9KES1X")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='mounts\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x180)
mount$overlay(0x0, &(0x7f00000007c0)='./bus\x00', &(0x7f0000000800), 0x8, &(0x7f00000008c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './proc'}}]})
chdir(&(0x7f0000000900)='./bus\x00')
openat$dir(0xffffffffffffff9c, &(0x7f0000000940)='./file0/file1\x00', 0x40, 0x83)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./file0\x00', 0x4, 0x80)
getpid()
getdents64(r0, &(0x7f0000003400)=""/4096, 0xc00)

14.795891889s ago: executing program 9 (id=2916):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @private=0xa010101}]}}}]}, 0x38}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4)
socket$inet6_tcp(0xa, 0x1, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001400b59500000000fedbdf250a4031ff", @ANYRES32=r5, @ANYBLOB="1400020000000000000000000000fe"], 0x55}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01"], 0x3c}}, 0x0)

10.849602585s ago: executing program 9 (id=2920):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/target/core/rd_mcp_0\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/target/core/rd_mcp_0/ramdisk0/control\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='rd_pages=64\n', 0xc)
close(r0)
write(0xffffffffffffffff, &(0x7f00000002c0), 0x0)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/target/usb_gadget\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/target/usb_gadget/naa.6001405c935d7912\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
close(r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1/lun/lun_0\x00', 0x1ff)

10.578860452s ago: executing program 3 (id=2921):
mkdir(&(0x7f0000000000)='./trace\x00', 0x16c)
mount(0x0, &(0x7f00000005c0)='./trace\x00', &(0x7f0000000600)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffff9c, &(0x7f0000000640)='./trace/events/mac80211/enable\x00', 0x1, 0x0)
write(r0, &(0x7f0000000680), 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x64, r2, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x30, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x20000014)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r4=>0xffffffffffffffff})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000040)={0x3c, r6, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0)

10.578587592s ago: executing program 9 (id=2922):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f00000001c0)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r3, &(0x7f0000000640)=""/102392, 0x18ff8)
r4 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r4, 0x0, 0x0)
ioprio_get$pid(0x1, 0x0)

9.772901502s ago: executing program 9 (id=2923):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'syzkaller1\x00', 0xc201})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syzkaller1\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0xfff1, 0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000780)=@newtfilter={0xd4, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xffe0}, {0xfff1, 0xffff}, {0x300, 0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xa8, 0x2, [@TCA_U32_SEL={0xa4, 0x5, {0x8, 0x6, 0x9, 0xc000, 0x4c16, 0x8, 0x7ff, 0x5, [{0x1000, 0x9, 0x4}, {0x3ff, 0x0, 0xfffffff7, 0x81}, {0xffff, 0x9, 0xe6f, 0x5}, {0x8001, 0xfb86, 0xffffffff, 0x1ff}, {0x6, 0x9, 0x2, 0x9}, {0x400, 0x5, 0xe, 0x1}, {0x80000000, 0xfffffffc, 0x1, 0x7f}, {0x81, 0x5, 0x9, 0x4}, {0x6, 0x2, 0x8, 0x3}]}}]}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x24004800}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000880)={'syzkaller1\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=@newtfilter={0xd4, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}, {0x300, 0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xa8, 0x2, [@TCA_U32_SEL={0xa4, 0x5, {0x8, 0x6, 0x9, 0xc000, 0x4c16, 0x8, 0x7ff, 0x5, [{0x1000, 0x9, 0x4}, {0x3ff, 0x0, 0xfffffff7, 0x81}, {0xffff, 0x9, 0x401, 0x5}, {0x8001, 0xfb86, 0xffffffff, 0x1ff}, {0x6, 0x9, 0x2, 0x9}, {0x400, 0x5, 0xe, 0x1}, {0x80000000, 0xfffffffc, 0x1, 0x7f}, {0x81, 0x5, 0x9, 0x4}, {0x6, 0x2, 0x8, 0x3}]}}]}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x24004800}, 0x0)
r7 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000480)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000580)=ANY=[], 0xfdef)

9.44207984s ago: executing program 3 (id=2924):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
fallocate(r1, 0x0, 0xa20, 0x8000c65)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0xc142, 0x1a2)
sendfile(r2, r2, 0x0, 0x8000000f3aa6ea)

8.764070646s ago: executing program 1 (id=2925):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000300)={0x7f, 0x200004d, 0x6, 0x0, <r1=>0x0})
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000380)={0x200, 0x4f, 0x4, 0x0, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x1, 0x3, 0x9})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000180)={r3})
r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x8, 0x404d, 0x2ba9})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000100)={0x1, 0x3, 0x9})
r5 = syz_open_dev$dri(&(0x7f0000000180), 0xcaf8, 0x40000)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000180)={r1})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f00000000c0)={0x7, 0x52a1, 0x1e})
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x1, 0x4, 0xe608})
close_range(r6, 0xffffffffffffffff, 0x0)

8.323147107s ago: executing program 1 (id=2927):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000089}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x9)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180)={<r5=>0xffffffffffffffff}, 0x2, 0xa}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f0000000200)={0x13, 0x10, 0x8, {0x0, r5, 0x2}}, 0x18)

6.399206844s ago: executing program 1 (id=2929):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0)
ioctl$RTC_SET_TIME(r4, 0x4024700a, &(0x7f0000000040)={0x33, 0x37, 0x0, 0x2, 0x3, 0xaa, 0x5, 0x4, 0x1})

6.199623049s ago: executing program 6 (id=2930):
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300), 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000340)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0)
readv(r1, &(0x7f0000000380)=[{&(0x7f00000003c0)=""/244, 0xf4}], 0x1)
pipe2(0x0, 0x80)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000540)=@filename='127.0.0.1:/test\x00', &(0x7f0000000100)='./mnt\x00', &(0x7f0000000180)='nfs\x00', 0x0, &(0x7f00000001c0)='addr=127.0.0.1,port=2049,proto=tcp,vers=3,mountport=2049,mountproto=udp\x00')
mount(0x0, &(0x7f0000000240)='./rpc_pipefs\x00', &(0x7f0000000280)='rpc_pipefs\x00', 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xd7f924f4599c86bd, 0x0)
r3 = syz_open_dev$sndctrl(&(0x7f0000000300), 0x6e, 0x22)
ppoll(&(0x7f00000004c0)=[{r3, 0x4000}], 0x1, &(0x7f0000000500), 0x0, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
sendfile(r2, r4, &(0x7f0000000040)=0x7, 0x7fff)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000)
fchdir(0xffffffffffffffff)

6.060290672s ago: executing program 3 (id=2931):
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xc, 0x30, r0, 0xa84f6000)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000140)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000240), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x10106, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001380), 0x0, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000001400)=0x8001)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001440), 0x42003, 0x0)

5.897323806s ago: executing program 6 (id=2932):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000080)=0x33, 0x8)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f00000000c0)={0x28, 0x0, 0x2710}, 0x10)
r2 = accept4(r0, 0x0, 0x0, 0x0)
sendto(r2, &(0x7f0000000100), 0xfeb5, 0x0, 0x0, 0x0)
recvfrom(r1, &(0x7f0000000140)=""/62, 0xfeb5, 0x10120, 0x0, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89ff, 0x0)
bind$unix(0xffffffffffffffff, 0x0, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)

5.388264638s ago: executing program 0 (id=2933):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$netlink(0x10, 0x3, 0xc)
r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = socket$inet(0x2b, 0x801, 0x0)
listen(r2, 0xd0e)
syz_open_dev$sndctrl(0x0, 0x1, 0x2400)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0)
sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r4=>0x0})
setsockopt$inet6_group_source_req(r3, 0x29, 0x2f, &(0x7f0000000240)={0x4, {{0xa, 0x4e23, 0x4d4, @private2, 0x1}}, {{0xa, 0x4e22, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}}, 0x104)
clock_gettime(0x0, 0x0)
sendmsg$can_bcm(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x1d, r4}, 0x10, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c8b1)
ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0)
read$dsp(r1, &(0x7f0000001300)=""/4096, 0x1000)

5.065569096s ago: executing program 0 (id=2934):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1123102, 0x0)
r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b8, 0x10, 0x2, 0x158}, &(0x7f00000020c0)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, <r5=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r6=>0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = dup(r7)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000202, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r9 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_JOIN_FILTERS(r9, 0x65, 0x6, 0x0, 0x0)
syz_ublk_setup_queues(r8, r6, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6474, 0x200, 0x2, 0x15e, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x400, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x200, 0x3, 0x0, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb41f, 0x2000, 0x3, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, r5, '\x00', {0x4, 0x8004, 0x0, 0x0}}, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}})
pipe2(&(0x7f0000000000)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff}, 0x0)
write$P9_RGETLOCK(r11, &(0x7f0000000040)=ANY=[], 0xffffff6a)
splice(r10, 0x0, r0, 0x0, 0x40010003, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1b)

4.809424833s ago: executing program 6 (id=2935):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c)
listen(r1, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = accept(r1, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x2400c840}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x3f, 0x8001, 0x80000000, 0xfffffffffffffffd, 0x4, 0x0, 0x9c28}, 0x0, &(0x7f0000000200)={0x3ff, 0x4000000000002, 0x8000000000000, 0x9, 0x0, 0xfffffffffffffffe, 0x7, 0x20000000009}, 0x0, 0x0)

4.714072535s ago: executing program 9 (id=2936):
socket$nl_crypto(0x10, 0x3, 0x15)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
r0 = getpid()
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000380), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000003c0), 0x10106, 0x2, 0x0)
listen(0xffffffffffffffff, 0x5)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x10, 0x2, &(0x7f0000000600)=@raw=[@generic={0xb7, 0x0, 0x0, 0x0, 0x1}, @generic={0x95}], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000680)={@map, r3, 0x7, 0x0, 0x0, @void, @value=0x0}, 0x20)
sendto(0xffffffffffffffff, &(0x7f0000000780)='{', 0x1, 0x8000, 0x0, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f00000007c0)={0x0, 'veth1_to_batadv\x00', {0x4}, 0x26})
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000800), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)={0x34, r5, 0x1, 0x70bd2f, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}]}, 0x34}}, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

4.358413764s ago: executing program 3 (id=2937):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x2})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56d43, 0x1, 0x25d7dbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0xa, 0x4000000, 0x70000000}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
close(r3)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r4)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000340)={'syzkaller0\x00', @multicast})
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000002680)={0x0, 0x0, &(0x7f00000026c0)={&(0x7f0000002700)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xfff1, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0x1, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}}, 0x40)
ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002780)={'syzkaller0\x00', @random="2b0100004ec6"})

3.314467919s ago: executing program 1 (id=2938):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/target/core/rd_mcp_0\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/target/core/rd_mcp_0/ramdisk0/control\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='rd_pages=64\n', 0xc)
close(r0)
write(0xffffffffffffffff, &(0x7f00000002c0), 0x0)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/target/usb_gadget\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/target/usb_gadget/naa.6001405c935d7912\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
close(r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1/lun/lun_0\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1/enable\x00', 0x1, 0x0)

3.29860983s ago: executing program 6 (id=2939):
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$kcm(0x29, 0x2, 0x0)
r2 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0)
pwritev(r2, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0)
sendfile(r1, r2, 0x0, 0x8000fb00)

2.793057292s ago: executing program 3 (id=2940):
openat$ptp0(0xffffffffffffff9c, 0x0, 0x80042, 0x0)
r0 = syz_ublk_setup_io_uring(0x155a, &(0x7f0000000600)={0x0, 0x30b5, 0x800, 0x1, 0x158}, &(0x7f0000000280)=<r1=>0x0, &(0x7f0000000400)=<r2=>0x0, &(0x7f00000000c0)=<r3=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdir(&(0x7f0000000040)='./file2\x00', 0xc1)
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000000480)=<r5=>0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = dup(r6)
syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7fffde, 0x200, 0x3, 0x15e, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x400, 0x0, 0x142}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x2000, 0x20003, 0x0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2, 0x4, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfffa, 0x8004, 0x0, 0x0}}, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}})

2.685663244s ago: executing program 0 (id=2941):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc}, 0x1c}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x5}, 0x804)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x100, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f0000000240)=ANY=[@ANYBLOB="580000000102"], 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x8d0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x102280})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x440600, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x100, 0x5, 0x6, 0x4002, 0x9, 0x5, 0xefffffffffffffff, 0x0, 0xffffffffffffffff, 0x2000001, 0x0, 0x40000000001c, 0x1, 0xffffffffffffffff, 0x100], 0x0, 0x41801})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2.251203005s ago: executing program 0 (id=2942):
prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x80020100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000480)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000400)=0x6)
syz_emit_ethernet(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000440), 0x0, 0x0)
read$msr(r3, &(0x7f0000000900)=""/102392, 0x18ff8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/net/rxrpc/calls\x00', 0x0, 0x0)

1.452479064s ago: executing program 0 (id=2943):
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
r2 = socket$unix(0x1, 0x5, 0x0)
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x675f, 0x9, 0x3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40004}, 0x0)
r5 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r6=>0x0})
r7 = socket(0x400000000010, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0x34, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x8080)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xc, 0xc}, {}, {0x0, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x10004000}, 0x40410c0)

1.288044889s ago: executing program 3 (id=2944):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
getpid()
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
syz_open_dev$sndctrl(0x0, 0x0, 0x0)
socketpair(0x1, 0x1, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x1, 0xb0}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x80)
openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

467.516998ms ago: executing program 6 (id=2945):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$kvm(0x0, 0x0, 0x0, 0x0)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffd}}, 0x2e)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r3, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000500)=0x2)
ioctl$PPPIOCBRIDGECHAN(r4, 0x40047435, &(0x7f0000000200)=0x1)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]})
close_range(r5, 0xffffffffffffffff, 0x0)

0s ago: executing program 6 (id=2946):
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0, {0xa, 0x4e21, 0xca33, @remote}}}, 0x32)
sendto(0xffffffffffffffff, 0x0, 0x0, 0x8090, 0x0, 0x0)
r0 = socket$xdp(0x2c, 0x3, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x1fe)
memfd_create(0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000640)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRESOCT, @ANYRES8=0x0, @ANYRES32=0x0, @ANYRES64, @ANYRESDEC=0x0], 0x1, 0x304, &(0x7f0000000bc0)="$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")
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x0)
write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
fdatasync(r2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
ioctl$RTC_ALM_READ(r2, 0x80247008, 0x0)

kernel console output (not intermixed with test programs):

mber 4 using dummy_hcd
[  296.587871][ T1892] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  296.632446][ T1892] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  296.641524][ T1892] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  296.691261][ T4280] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201'
[  296.701334][ T4280] CPU: 0 PID: 4280 Comm: kworker/u5:3 Not tainted syzkaller #0
[  296.709080][ T4280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  296.719162][ T4280] Workqueue: hci5 hci_rx_work
[  296.723868][ T4280] Call Trace:
[  296.727155][ T4280]  <TASK>
[  296.730083][ T4280]  dump_stack_lvl+0x188/0x24e
[  296.730116][ T4280]  ? show_regs_print_info+0x12/0x12
[  296.730136][ T4280]  ? load_image+0x410/0x410
[  296.735180][ T4280]  sysfs_create_dir_ns+0x26a/0x290
[  296.735215][ T4280]  ? sysfs_warn_dup+0xa0/0xa0
[  296.735241][ T4280]  ? do_raw_spin_unlock+0x11d/0x230
[  296.735265][ T4280]  kobject_add_internal+0x617/0xca0
[  296.765163][ T4280]  kobject_add+0x160/0x230
[  296.769612][ T4280]  ? kobject_init+0x1c0/0x1c0
[  296.774317][ T4280]  ? __raw_spin_lock_init+0x41/0x100
[  296.779624][ T4280]  ? klist_children_get+0x50/0x50
[  296.784672][ T4280]  ? get_device_parent+0x121/0x3e0
[  296.789813][ T4280]  device_add+0x470/0x1050
[  296.794261][ T4280]  hci_conn_add_sysfs+0xd1/0x1e0
[  296.799223][ T4280]  le_conn_complete_evt+0xf93/0x15c0
[  296.804541][ T4280]  ? hci_le_big_info_adv_report_evt+0x300/0x300
[  296.810787][ T4280]  ? param_get_dyndbg_classes+0x160/0x160
[  296.810827][ T4280]  ? mutex_unlock+0x10/0x10
[  296.810854][ T4280]  hci_le_conn_complete_evt+0x183/0x440
[  296.810879][ T4280]  ? hci_remote_host_features_evt+0x230/0x230
[  296.816931][ T4280]  hci_event_packet+0x7b3/0x1290
[  296.816964][ T4280]  ? lock_chain_count+0x20/0x20
[  296.816989][ T4280]  ? bis_list+0x280/0x280
[  296.817017][ T4280]  ? lockdep_hardirqs_on+0x94/0x140
[  296.817047][ T4280]  ? hci_send_to_monitor+0x9c/0x4a0
[  296.847544][ T4280]  hci_rx_work+0x3eb/0xd40
[  296.847575][ T4280]  ? _raw_spin_unlock+0x40/0x40
[  296.867205][ T4280]  ? process_one_work+0x7b4/0x1160
[  296.867238][ T4280]  process_one_work+0x8ab/0x1160
[  296.877311][ T4280]  ? worker_detach_from_pool+0x240/0x240
[  296.882978][ T4280]  ? _raw_spin_lock_irq+0xb7/0xf0
[  296.888028][ T4280]  ? _raw_spin_lock_irqsave+0x100/0x100
[  296.893580][ T4280]  ? wq_worker_running+0x97/0x190
[  296.898603][ T4280]  worker_thread+0xaf5/0x12a0
[  296.903319][ T4280]  kthread+0x29d/0x330
[  296.903338][ T4280]  ? worker_clr_flags+0x1a0/0x1a0
[  296.903358][ T4280]  ? kthread_blkcg+0xd0/0xd0
[  296.903377][ T4280]  ret_from_fork+0x1f/0x30
[  296.903414][ T4280]  </TASK>
[  296.905687][ T4280] kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  296.922314][ T4280] Bluetooth: hci5: failed to register connection device
[  296.993479][ T1892] usb 9-1: config 0 descriptor??
[  297.087126][ T1892] pwc: Askey VC010 type 2 USB webcam detected.
[  297.437160][ T8440] overlayfs: failed to clone upperpath
[  297.478714][ T1892] pwc: recv_control_msg error -32 req 02 val 2b00
[  297.557581][ T1892] pwc: recv_control_msg error -32 req 02 val 2700
[  297.778443][ T1892] pwc: recv_control_msg error -32 req 02 val 2c00
[  298.033282][ T1892] pwc: recv_control_msg error -32 req 04 val 1000
[  298.040652][ T1892] pwc: recv_control_msg error -32 req 04 val 1300
[  298.063033][ T1892] pwc: recv_control_msg error -32 req 04 val 1400
[  298.126792][ T1892] pwc: recv_control_msg error -32 req 02 val 2000
[  298.158029][ T1892] pwc: recv_control_msg error -32 req 02 val 2100
[  298.178346][ T1892] pwc: recv_control_msg error -32 req 04 val 1500
[  298.209495][ T8406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  298.230569][ T1892] pwc: recv_control_msg error -32 req 02 val 2500
[  298.257373][ T8406] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  298.302626][ T1892] pwc: recv_control_msg error -32 req 02 val 2400
[  298.317282][ T1892] pwc: recv_control_msg error -32 req 02 val 2600
[  298.548204][ T1892] pwc: recv_control_msg error -71 req 02 val 2800
[  298.565776][ T1892] pwc: recv_control_msg error -71 req 04 val 1100
[  298.598587][ T1892] pwc: recv_control_msg error -71 req 04 val 1200
[  298.647996][ T1892] pwc: Registered as video103.
[  298.704586][ T1892] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input9
[  298.808072][ T1892] usb 9-1: USB disconnect, device number 4
[  300.152162][    C1] net_ratelimit: 20 callbacks suppressed
[  303.331592][ T8497] Can't find ip_set type hash:ne
[  303.752250][ T4274] Bluetooth: hci5: command 0x0406 tx timeout
[  305.512044][    C1] net_ratelimit: 20 callbacks suppressed
[  306.119824][ T4274] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  306.247636][ T8605] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[6414] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[8605]
[  310.302740][ T8638] futex_wake_op: syz.8.910 tries to shift op by 144; fix this program
[  310.319009][ T4274] Bluetooth: Wrong link type (-71)
[  310.552159][    C0] net_ratelimit: 24 callbacks suppressed
[  310.604157][ T8647] netlink: 44 bytes leftover after parsing attributes in process `syz.3.902'.
[  315.765894][ T8565] net_ratelimit: 17 callbacks suppressed
[  316.957238][ T1273] ieee802154 phy0 wpan0: encryption failed: -22
[  316.963839][ T1273] ieee802154 phy1 wpan1: encryption failed: -22
[  320.286186][ T8742] Cannot find add_set index 0 as target
[  320.792583][ T4861] net_ratelimit: 23 callbacks suppressed
[  326.025992][    C1] net_ratelimit: 18 callbacks suppressed
[  326.036243][ T8798] netlink: 'syz.6.945': attribute type 19 has an invalid length.
[  329.235316][ T8867] loop8: detected capacity change from 0 to 128
[  331.114004][ T8548] net_ratelimit: 26 callbacks suppressed
[  336.395231][ T8933] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  336.407632][ T8933] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  336.417861][ T8933] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready
[  336.425093][ T8933] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready
[  336.437046][ T8933] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready
[  336.444579][ T8933] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready
[  336.452095][ T8933] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready
[  336.459542][ T8933] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready
[  336.467025][ T8933] net_ratelimit: 20 callbacks suppressed
[  336.467036][ T8933] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check.
[  336.506590][ T8933] netlink: 64 bytes leftover after parsing attributes in process `syz.3.964'.
[  336.516141][ T8933] netlink: 64 bytes leftover after parsing attributes in process `syz.3.964'.
[  336.525133][ T8933] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22)
[  337.960206][ T8945] netlink: 12 bytes leftover after parsing attributes in process `syz.0.965'.
[  339.240580][ T8955] infiniband syz0: set active
[  339.245344][ T8955] infiniband syz0: added veth1_to_bridge
[  339.731305][ T8955] infiniband syz0: Couldn't open port 1
[  340.030436][ T8955] RDS/IB: syz0: added
[  340.034557][ T8955] smc: adding ib device syz0 with port count 1
[  340.040731][ T8955] smc:    ib device syz0 port 1 has pnetid 
[  340.425352][ T8967] x_tables: ip_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING
[  342.202916][ T7175] net_ratelimit: 29 callbacks suppressed
[  342.683735][ T8982] device wlan0 left promiscuous mode
[  343.560503][ T8982] netlink: 32 bytes leftover after parsing attributes in process `syz.6.974'.
[  343.709299][ T8991] jffs2: notice: (8991) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  347.596952][ T9040] x_tables: ip_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING
[  347.672703][    C1] net_ratelimit: 21 callbacks suppressed
[  349.581445][ T9048] loop8: detected capacity change from 0 to 32768
[  351.235590][ T9074] xt_l2tp: wrong L2TP version: 0
[  351.244629][ T9070] xt_TPROXY: Can be used only with -p tcp or -p udp
[  353.636677][    C1] net_ratelimit: 30 callbacks suppressed
[  354.225466][ T9093] netlink: 'syz.0.993': attribute type 19 has an invalid length.
[  355.411675][ T4280] Bluetooth: Wrong link type (-71)
[  355.473846][ T9106] x_tables: ip_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING
[  357.192036][ T4280] Bluetooth: hci0: command 0x040a tx timeout
[  358.294017][ T9123] overlayfs: failed to clone upperpath
[  358.950210][ T9130] netlink: 'syz.9.1005': attribute type 11 has an invalid length.
[  359.189296][ T9133] netlink: 'syz.3.1002': attribute type 4 has an invalid length.
[  359.217582][ T9133] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  359.592036][    C1] net_ratelimit: 19 callbacks suppressed
[  360.765119][ T9143] netlink: 4 bytes leftover after parsing attributes in process `syz.8.994'.
[  360.774062][ T9143] openvswitch: netlink: Flow key attr not present in new flow.
[  361.071143][ T9130] device wlan0 entered promiscuous mode
[  361.894964][ T9152] netlink: 'syz.3.1007': attribute type 19 has an invalid length.
[  363.679169][ T9160] binder: 9158:9160 ioctl c0306201 2000000005c0 returned -14
[  363.726824][ T9160] binder_alloc: 9158: pid 9158 spamming oneway? 2 buffers allocated for a total size of 5120
[  364.200125][ T9169] binder_alloc: 9158: pid 9158 spamming oneway? 3 buffers allocated for a total size of 5128
[  364.632043][    C1] net_ratelimit: 17 callbacks suppressed
[  365.961506][ T9187] tipc: Started in network mode
[  365.966498][ T9187] tipc: Node identity 4, cluster identity 4711
[  365.972728][ T9187] tipc: Node number set to 4
[  368.649686][ T9212] netlink: 'syz.9.1022': attribute type 19 has an invalid length.
[  370.072023][    C0] net_ratelimit: 13 callbacks suppressed
[  375.560948][ T8555] net_ratelimit: 14 callbacks suppressed
[  378.535822][ T1273] ieee802154 phy0 wpan0: encryption failed: -22
[  378.542332][ T1273] ieee802154 phy1 wpan1: encryption failed: -22
[  381.006390][ T8543] net_ratelimit: 13 callbacks suppressed
[  381.105500][ T9311] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1046'.
[  381.666550][ T9323] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[  381.666550][ T9323] 
[  381.710564][ T9323] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[  381.732460][ T9323] CIFS: Attempting to mount \\127.0.0.1\share
[  381.772921][ T9323] CIFS: VFS: Error connecting to socket. Aborting operation.
[  381.822366][ T9325] tmpfs: Unknown parameter 'quota'
[  381.840598][ T9323] CIFS: VFS: cifs_mount failed w/return code = -101
[  382.828930][ T9336] gadgetfs: bound to dummy_udc driver
[  384.941737][ T9369] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  384.956103][ T9369] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  384.978406][ T9369] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  385.015156][ T9369] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  385.028346][ T9369] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  385.040121][ T9369] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  385.052621][ T9369] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  386.059509][ T9375] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4277] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[9375]
[  386.232230][ T4361] net_ratelimit: 14 callbacks suppressed
[  391.473116][ T9418] gadgetfs: bound to dummy_udc driver
[  392.046746][ T8555] net_ratelimit: 16 callbacks suppressed
[  392.819422][ T9424] syz.9.1069 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  393.736607][ T9435] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1070'.
[  394.278773][ T9427] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1069'.
[  397.200604][ T9479] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1080'.
[  397.282767][ T9479] netlink: 'syz.6.1080': attribute type 1 has an invalid length.
[  397.593007][ T8548] net_ratelimit: 19 callbacks suppressed
[  397.663733][ T9479] 8021q: adding VLAN 0 to HW filter on device bond2
[  397.847911][ T9500] xt_CT: You must specify a L4 protocol and not use inversions on it
[  398.255931][ T9496] bond2: (slave gretap1): making interface the new active one
[  398.327909][ T9496] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  398.391448][ T8551] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready
[  398.531841][ T9496] syz.6.1080 (9496) used greatest stack depth: 18992 bytes left
[  401.817213][ T9542] Cannot find add_set index 0 as target
[  403.058334][ T5124] net_ratelimit: 14 callbacks suppressed
[  403.568829][ T9565] loop8: detected capacity change from 0 to 128
[  403.596698][ T9565] EXT4-fs (loop8): Test dummy encryption mode enabled
[  404.006195][ T9565] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  404.029810][ T9565] ext4 filesystem being mounted at /129/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  406.025738][ T5865] EXT4-fs (loop8): unmounting filesystem.
[  406.494650][ T9592] bond0: (slave dummy0): Releasing backup interface
[  406.549466][ T9592] batman_adv: batadv0: Adding interface: dummy0
[  406.584850][ T9592] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  406.738422][ T9592] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  408.472140][ T4361] net_ratelimit: 18 callbacks suppressed
[  409.321536][ T9629] xt_TCPMSS: Only works on TCP SYN packets
[  409.336830][ T9627] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  409.363025][ T9627] CIFS mount error: No usable UNC path provided in device string!
[  409.363025][ T9627] 
[  409.373428][ T9627] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  414.252919][ T5124] net_ratelimit: 14 callbacks suppressed
[  415.062941][ T4280] Bluetooth: hci0: command 0x0401 tx timeout
[  419.213925][ T9721] loop8: detected capacity change from 0 to 8192
[  419.876912][    C1] net_ratelimit: 17 callbacks suppressed
[  420.201127][ T9721] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  421.011124][ T9721] REISERFS (device loop8): found reiserfs format "3.6" with non-standard journal
[  421.026886][ T9721] REISERFS (device loop8): using journaled data mode
[  421.092863][ T9740] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  421.147228][ T9721] reiserfs: using flush barriers
[  421.281316][ T9721] REISERFS (device loop8): journal params: device loop8, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  422.128771][ T9721] REISERFS warning (device loop8): journal-2004 journal_init: Journal cnode memory allocation failed (73728 bytes). Journal is too large for available memory. Usually this is due to a journal that is too large.
[  422.255794][ T9721] REISERFS warning (device loop8): sh-2022 reiserfs_fill_super: unable to initialize journal space
[  424.695807][   T26] audit: type=1800 audit(2000000125.338:378): pid=9782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1146" name="syzkaller0" dev="sda1" ino=2059 res=0 errno=0
[  424.789032][ T9788] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[6414] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[9788]
[  425.152265][ T4368] net_ratelimit: 15 callbacks suppressed
[  426.978737][ T9803] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[9805] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[9803]
[  427.970354][ T9815] netlink: 76 bytes leftover after parsing attributes in process `syz.9.1153'.
[  430.569381][ T9835] netlink: 'syz.8.1157': attribute type 1 has an invalid length.
[  430.577441][ T9835] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1157'.
[  430.971594][ T4913] net_ratelimit: 18 callbacks suppressed
[  431.050788][ T9845] loop8: detected capacity change from 0 to 128
[  431.092286][ T9845] FAT-fs (loop8): bogus sectors per cluster 0
[  431.137580][ T9845] FAT-fs (loop8): Can't find a valid FAT filesystem
[  432.207019][ T9850] block device autoloading is deprecated and will be removed.
[  432.264589][ T9850] syz.6.1160: attempt to access beyond end of device
[  432.264589][ T9850] md32: rw=2048, sector=0, nr_sectors = 8 limit=0
[  436.043785][   T11] net_ratelimit: 15 callbacks suppressed
[  437.140539][ T9925] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1173'.
[  437.163421][ T9926] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1174'.
[  437.739017][ T5352] smpboot: CPU 1 is now offline
[  439.700366][ T9978] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1184'.
[  439.921186][ T1273] ieee802154 phy0 wpan0: encryption failed: -22
[  439.929305][ T1273] ieee802154 phy1 wpan1: encryption failed: -22
[  441.115845][ T4361] net_ratelimit: 12 callbacks suppressed
[  442.243259][ T5350] libceph: connect (1)127.0.0.1:6789 error -101
[  442.331392][ T5350] libceph: mon0 (1)127.0.0.1:6789 connect error
[  442.365754][ T4280] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  442.379304][ T4280] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  442.389264][ T4280] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  442.402238][ T4280] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  442.415617][ T4280] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  442.423160][ T4280] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  442.666317][ T9999] ceph: No mds server is up or the cluster is laggy
[  442.728864][T10005] rxe_eth0 speed is unknown, defaulting to 1000
[  445.092344][ T4280] Bluetooth: hci2: command 0x0409 tx timeout
[  446.139308][T10041] tmpfs: Bad value for 'huge'
[  446.333935][ T8555] net_ratelimit: 18 callbacks suppressed
[  446.930298][T10005] chnl_net:caif_netlink_parms(): no params data found
[  447.112692][ T4280] Bluetooth: hci2: command 0x041b tx timeout
[  447.573535][T10059] Cannot find set identified by id 0 to match
[  447.860824][T10005] bridge0: port 1(bridge_slave_0) entered blocking state
[  447.938116][T10005] bridge0: port 1(bridge_slave_0) entered disabled state
[  448.110581][T10005] device bridge_slave_0 entered promiscuous mode
[  449.516274][ T4280] Bluetooth: hci2: command 0x040f tx timeout
[  450.346714][T10005] bridge0: port 2(bridge_slave_1) entered blocking state
[  450.654302][T10005] bridge0: port 2(bridge_slave_1) entered disabled state
[  451.166660][T10005] device bridge_slave_1 entered promiscuous mode
[  451.352308][ T8568] net_ratelimit: 9 callbacks suppressed
[  451.625485][ T4280] Bluetooth: hci2: command 0x0419 tx timeout
[  453.339160][ T4368] rpcbind: server 127.0.0.1 not responding, timed out
[  453.603084][T10005] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  456.433211][ T4368] net_ratelimit: 12 callbacks suppressed
[  457.007742][ T8565] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  457.140396][T10005] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  458.993989][ T8565] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  459.743695][ T8565] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  462.246566][ T8551] net_ratelimit: 14 callbacks suppressed
[  462.333299][ T8565] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  462.501311][T10005] team0: Port device team_slave_0 added
[  462.647207][T10005] team0: Port device team_slave_1 added
[  463.054475][T10005] batman_adv: batadv0: Adding interface: batadv_slave_0
[  463.061780][T10005] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  463.374231][T10005] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  463.487695][T10005] batman_adv: batadv0: Adding interface: batadv_slave_1
[  463.552602][T10005] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  464.827227][T10005] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  465.104436][ T8565] tipc: Left network mode
[  465.191719][T10005] device hsr_slave_0 entered promiscuous mode
[  465.285624][T10005] device hsr_slave_1 entered promiscuous mode
[  465.337985][T10005] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  465.499077][T10228] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1230'.
[  465.721304][T10005] Cannot create hsr debugfs directory
[  465.769607][T10230] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1230'.
[  468.014809][ T5099] net_ratelimit: 17 callbacks suppressed
[  468.283583][T10255] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1238'.
[  468.970866][T10265] netlink: 'syz.0.1240': attribute type 1 has an invalid length.
[  469.051109][T10265] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1240'.
[  469.369935][T10272] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1241'.
[  469.908551][T10280] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1243'.
[  469.926489][T10281] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1243'.
[  470.429692][T10281] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1243'.
[  472.789690][T10281] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1243'.
[  472.998942][T10307] overlayfs: failed to clone lowerpath
[  473.112438][ T5124] net_ratelimit: 14 callbacks suppressed
[  473.150805][T10281] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1243'.
[  475.779499][T10329] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1253'.
[  478.595127][ T5124] net_ratelimit: 15 callbacks suppressed
[  481.429268][ T8565] device hsr_slave_0 left promiscuous mode
[  481.518461][ T8565] device hsr_slave_1 left promiscuous mode
[  481.568961][ T8565] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  482.359768][ T8565] batman_adv: batadv0: Removing interface: batadv_slave_0
[  482.426534][ T8565] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  482.497033][ T8565] batman_adv: batadv0: Removing interface: batadv_slave_1
[  482.554295][ T8565] device vlan2 left promiscuous mode
[  482.598596][ T8565] device bond0 left promiscuous mode
[  482.638395][ T8565] device bond_slave_0 left promiscuous mode
[  482.681772][ T8565] device bond_slave_1 left promiscuous mode
[  482.733749][ T8565] device macvlan2 left promiscuous mode
[  482.765861][ T8565] bridge0: port 3(vlan2) entered disabled state
[  482.829887][ T8565] device bridge_slave_1 left promiscuous mode
[  482.870238][ T8565] bridge0: port 2(bridge_slave_1) entered disabled state
[  482.933095][ T8565] device bridge_slave_0 left promiscuous mode
[  482.988193][ T8565] bridge0: port 1(bridge_slave_0) entered disabled state
[  483.197206][ T8565] device team0 left promiscuous mode
[  483.247326][ T8565] device team_slave_0 left promiscuous mode
[  483.294388][ T8565] device team_slave_1 left promiscuous mode
[  483.426201][ T8565] device veth1_macvtap left promiscuous mode
[  483.661804][ T8565] device veth0_macvtap left promiscuous mode
[  483.672472][ T5124] net_ratelimit: 16 callbacks suppressed
[  483.699108][ T8565] device veth1_vlan left promiscuous mode
[  483.727750][ T8565] device veth0_vlan left promiscuous mode
[  484.256503][ T8565] bond0 (unregistering): (slave macvlan2): Releasing backup interface
[  484.345907][   T26] audit: type=1326 audit(2000000184.985:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10403 comm="syz.0.1270" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f768839e559 code=0x7ffc0000
[  484.411766][T10407] No such timeout policy "syz1"
[  484.507024][   T26] audit: type=1326 audit(2000000185.015:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10403 comm="syz.0.1270" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f768839e559 code=0x7ffc0000
[  484.611059][   T26] audit: type=1326 audit(2000000185.015:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10403 comm="syz.0.1270" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f768839e559 code=0x7ffc0000
[  484.684472][   T26] audit: type=1326 audit(2000000185.015:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10403 comm="syz.0.1270" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f768839e559 code=0x7ffc0000
[  484.768691][   T26] audit: type=1326 audit(2000000185.015:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10403 comm="syz.0.1270" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f768839e559 code=0x7ffc0000
[  484.828096][   T26] audit: type=1326 audit(2000000185.015:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10403 comm="syz.0.1270" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f768839e559 code=0x7ffc0000
[  484.906482][   T26] audit: type=1326 audit(2000000185.015:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10403 comm="syz.0.1270" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f768839e559 code=0x7ffc0000
[  484.987444][   T26] audit: type=1326 audit(2000000185.015:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10403 comm="syz.0.1270" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f768839e559 code=0x7ffc0000
[  485.047631][   T26] audit: type=1326 audit(2000000185.015:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10403 comm="syz.0.1270" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f768839e559 code=0x7ffc0000
[  485.114767][   T26] audit: type=1326 audit(2000000185.015:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10403 comm="syz.0.1270" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f768839e559 code=0x7ffc0000
[  486.996423][ T8565] team0 (unregistering): Port device team_slave_1 removed
[  487.390938][ T8565] team0 (unregistering): Port device team_slave_0 removed
[  487.508721][ T8565] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  487.586234][ T8565] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  487.830162][T10423] overlayfs: conflicting options: userxattr,redirect_dir=off
[  487.869420][T10423] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1275'.
[  487.879030][T10423] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1275'.
[  487.896296][T10423] gadgetfs: bound to dummy_udc driver
[  488.496172][ T8565] bond0 (unregistering): Released all slaves
[  489.112863][    T9] net_ratelimit: 22 callbacks suppressed
[  489.419075][T10446] overlayfs: failed to clone lowerpath
[  489.510769][T10005] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  489.632743][T10005] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  489.654698][T10454] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  490.684417][T10005] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  490.899541][T10005] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  491.622077][T10468] "syz.9.1284" (10468) uses obsolete ecb(arc4) skcipher
[  492.537769][T10005] 8021q: adding VLAN 0 to HW filter on device bond0
[  492.606144][ T8565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  493.676739][T10484] futex_wake_op: syz.3.1289 tries to shift op by 144; fix this program
[  493.745435][ T8565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  493.831484][T10005] 8021q: adding VLAN 0 to HW filter on device team0
[  493.910458][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  494.941940][ T8561] net_ratelimit: 14 callbacks suppressed
[  495.868539][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  495.972739][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  495.979827][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  496.387262][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  496.444640][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  496.499388][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  496.558517][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  496.565636][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  496.656218][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  496.728794][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  496.799404][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  496.912121][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  497.009604][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  497.061340][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  497.214369][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  498.258220][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  498.300875][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  498.454374][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  498.518983][T10511] netlink: 72 bytes leftover after parsing attributes in process `syz.9.1294'.
[  498.538612][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  498.589749][T10005] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  499.643003][T10519] Unable to allocate crypto cipher with name [ecb(aes)]; rc = [-2]
[  499.872077][T10519] Error attempting to initialize key TFM cipher with name = [aes]; rc = [-2]
[  500.005002][T10519] Error attempting to initialize cipher with name = [aes] and key size = [16]; rc = [-2]
[  500.161706][T10519] Error parsing options; rc = [-22]
[  500.641245][ T8551] net_ratelimit: 10 callbacks suppressed
[  501.321317][ T1273] ieee802154 phy0 wpan0: encryption failed: -22
[  501.329266][ T1273] ieee802154 phy1 wpan1: encryption failed: -22
[  502.024478][ T4274] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  502.043459][ T4274] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  502.053622][ T4274] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  502.062286][ T4274] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  502.075730][ T4274] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  502.087659][ T4274] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  502.292081][ T4280] Bluetooth: Wrong link type (-22)
[  502.297510][ T4280] Bluetooth: hci0: link tx timeout
[  502.305953][ T4280] Bluetooth: hci0: killing stalled connection 10:aa:aa:aa:aa:aa
[  502.316658][ T4280] Bluetooth: hci0: link tx timeout
[  502.321845][ T4280] Bluetooth: hci0: killing stalled connection 00:00:00:00:00:00
[  502.332256][ T4280] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa
[  502.770118][T10565] rxe_eth0 speed is unknown, defaulting to 1000
[  504.152430][ T4280] Bluetooth: hci2: command 0x0409 tx timeout
[  504.355407][T10580] infiniband syz5: RDMA CMA: cma_listen_on_dev, error -98
[  504.392356][ T4280] Bluetooth: hci0: command 0x0406 tx timeout
[  505.784916][ T8561] net_ratelimit: 10 callbacks suppressed
[  506.038460][T10601] fuse: Bad value for 'fd'
[  506.232101][ T4280] Bluetooth: hci2: command 0x041b tx timeout
[  506.694830][ T4280] Bluetooth: hci0: command 0x0406 tx timeout
[  507.976146][T10616] overlayfs: failed to clone upperpath
[  508.466120][T10619] ipt_REJECT: TCP_RESET invalid for non-tcp
[  508.566717][ T4280] Bluetooth: hci2: command 0x040f tx timeout
[  508.769965][T10565] chnl_net:caif_netlink_parms(): no params data found
[  509.923737][T10626] sctp: [Deprecated]: syz.6.1314 (pid 10626) Use of struct sctp_assoc_value in delayed_ack socket option.
[  509.923737][T10626] Use struct sctp_sack_info instead
[  511.084748][ T4280] Bluetooth: hci2: command 0x0419 tx timeout
[  511.091901][ T8561] net_ratelimit: 5 callbacks suppressed
[  512.278574][T10644] xt_CT: You must specify a L4 protocol and not use inversions on it
[  513.468586][T10653] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  515.981231][T10689] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  516.067519][T10565] bridge0: port 1(bridge_slave_0) entered blocking state
[  516.108185][T10565] bridge0: port 1(bridge_slave_0) entered disabled state
[  516.247726][T10565] device bridge_slave_0 entered promiscuous mode
[  516.310823][T10697] overlayfs: conflicting options: userxattr,redirect_dir=off
[  516.386506][T10700] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1330'.
[  516.623248][T10565] bridge0: port 2(bridge_slave_1) entered blocking state
[  516.635908][ T5124] net_ratelimit: 13 callbacks suppressed
[  516.684796][T10565] bridge0: port 2(bridge_slave_1) entered disabled state
[  516.895280][T10565] device bridge_slave_1 entered promiscuous mode
[  517.129017][T10712] xt_CT: You must specify a L4 protocol and not use inversions on it
[  519.267431][T10565] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  519.467241][T10565] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  519.956742][T10565] team0: Port device team_slave_0 added
[  520.135805][T10565] team0: Port device team_slave_1 added
[  521.193371][T10565] batman_adv: batadv0: Adding interface: batadv_slave_0
[  521.388491][T10565] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  521.755031][ T8551] net_ratelimit: 10 callbacks suppressed
[  521.787994][T10565] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  521.874281][T10786] netlink: 'syz.0.1346': attribute type 4 has an invalid length.
[  521.998609][   T57] device hsr_slave_0 left promiscuous mode
[  522.040825][   T57] device hsr_slave_1 left promiscuous mode
[  522.117412][   T57] batman_adv: batadv0: Removing interface: batadv_slave_0
[  522.175873][   T57] batman_adv: batadv0: Removing interface: batadv_slave_1
[  522.235328][   T57] device bridge_slave_1 left promiscuous mode
[  522.297484][   T57] bridge0: port 2(bridge_slave_1) entered disabled state
[  523.155978][   T57] device bridge_slave_0 left promiscuous mode
[  523.208932][   T57] bridge0: port 1(bridge_slave_0) entered disabled state
[  526.978404][    T9] net_ratelimit: 6 callbacks suppressed
[  528.056253][   T57] team0 (unregistering): Port device team_slave_1 removed
[  528.778910][   T57] team0 (unregistering): Port device team_slave_0 removed
[  529.138007][   T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  529.464705][   T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  530.984445][T10863] fuse: blksize only supported for fuseblk
[  532.070103][ T8561] net_ratelimit: 9 callbacks suppressed
[  533.207761][T10873] sctp: [Deprecated]: syz.9.1372 (pid 10873) Use of struct sctp_assoc_value in delayed_ack socket option.
[  533.207761][T10873] Use struct sctp_sack_info instead
[  533.466705][   T57] bond0 (unregistering): Released all slaves
[  533.581525][T10565] batman_adv: batadv0: Adding interface: batadv_slave_1
[  533.597625][T10565] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  533.637702][T10565] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  534.104224][T10885] IPVS: stopping master sync thread 10887 ...
[  534.112693][T10887] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0
[  534.130403][T10565] device hsr_slave_0 entered promiscuous mode
[  534.275996][T10565] device hsr_slave_1 entered promiscuous mode
[  534.307506][T10565] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  534.341236][T10565] Cannot create hsr debugfs directory
[  534.366395][T10886] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1374'.
[  535.031585][T10904] SET target dimension over the limit!
[  535.447330][T10911] fuse: Bad value for 'fd'
[  536.713617][T10932] fuse: Unknown parameter 'fd0xffffffffffffffff'
[  537.117630][    T9] net_ratelimit: 14 callbacks suppressed
[  537.134650][T10940] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1387'.
[  537.909756][T10565] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  538.062754][T10565] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  538.161531][T10565] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  538.270607][T10565] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  538.976778][T10565] 8021q: adding VLAN 0 to HW filter on device bond0
[  538.997537][ T4280] Bluetooth: hci0: unexpected cc 0x080f length: 3 > 1
[  539.004982][ T4280] Bluetooth: hci0: unexpected event for opcode 0x080f
[  539.063001][ T5099] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  539.089135][ T5099] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  539.215916][T10565] 8021q: adding VLAN 0 to HW filter on device team0
[  539.271097][ T5099] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  539.310565][ T5099] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  539.340999][ T5099] bridge0: port 1(bridge_slave_0) entered blocking state
[  539.348119][ T5099] bridge0: port 1(bridge_slave_0) entered forwarding state
[  539.418169][ T5099] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  539.448162][ T5099] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  539.477459][ T5099] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  539.518185][ T5099] bridge0: port 2(bridge_slave_1) entered blocking state
[  539.525290][ T5099] bridge0: port 2(bridge_slave_1) entered forwarding state
[  539.607928][ T5099] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  539.660842][ T5099] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  539.729083][ T5099] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  539.835848][ T5099] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  539.912331][ T4280] Bluetooth: hci5: Invalid connection link type handle 0x00c8
[  539.938230][ T5099] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  539.966980][ T5099] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  539.997166][ T5099] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  540.026990][ T5099] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  540.045960][ T5099] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  540.074252][ T5099] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  540.120344][ T5099] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  540.143869][T10565] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  540.170489][T10987] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1401'.
[  540.282173][T10987] team0: Port device team_slave_0 removed
[  540.871279][ T5099] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  540.917231][ T5099] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  540.980292][T10565] 8021q: adding VLAN 0 to HW filter on device batadv0
[  541.088480][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  541.145786][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  541.276543][ T5099] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  541.314536][ T5099] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  541.364383][T10565] device veth0_vlan entered promiscuous mode
[  541.397212][ T5099] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  541.445497][ T5099] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  541.517909][T10565] device veth1_vlan entered promiscuous mode
[  541.678370][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  541.709305][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  541.763572][T10565] device veth0_macvtap entered promiscuous mode
[  541.804139][T10565] device veth1_macvtap entered promiscuous mode
[  541.945136][T10565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  541.979444][ T4280] Bluetooth: hci0: unexpected event for opcode 0x0401
[  542.007626][T10565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  542.037969][T10565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  542.056729][T10565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  542.067367][T10565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  542.081445][T10565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  542.110261][T10565] batman_adv: batadv0: Interface activated: batadv_slave_0
[  542.125090][ T5099] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  542.162796][ T5099] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  542.177918][ T5099] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  542.196903][ T5099] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  542.230163][T10565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  542.241841][ T8565] net_ratelimit: 10 callbacks suppressed
[  542.304707][T10565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  542.414011][T10565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  542.454941][T10565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  542.507340][T10565] batman_adv: batadv0: Interface activated: batadv_slave_1
[  542.551712][ T8565] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  542.598242][ T8565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  542.663144][T10565] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  542.704151][T10565] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  542.757313][T10565] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  542.786865][T10565] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  543.156692][ T4280] Bluetooth: Frame is too long (len 18, expected len 4)
[  543.178385][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  543.223813][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  543.318943][ T5099] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  543.358623][ T8551] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  543.404070][ T8551] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  543.461660][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  546.456666][T11133] 
@0Ù: renamed from virt_wifi0
[  547.527490][ T5124] net_ratelimit: 55 callbacks suppressed
[  548.198191][T11158] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1454'.
[  548.725759][T11175] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1461'.
[  551.932530][T11217] fuse: blksize only supported for fuseblk
[  552.952014][    C0] net_ratelimit: 37 callbacks suppressed
[  553.347065][T11258] jffs2: notice: (11258) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  553.596757][T11234] loop2: detected capacity change from 0 to 32768
[  553.675845][T11234] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.1483 (11234)
[  553.835992][T11234] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  553.912162][T11234] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[  554.007730][T11234] BTRFS info (device loop2): force zlib compression, level 3
[  554.071579][T11234] BTRFS info (device loop2): turning on flush-on-commit
[  554.123509][T11234] BTRFS info (device loop2): max_inline at 4096
[  554.165450][T11234] BTRFS info (device loop2): using free space tree
[  554.337520][T11234] BTRFS info (device loop2): enabling ssd optimizations
[  554.547389][T10565] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  556.053405][T11363] netlink: 'syz.9.1523': attribute type 3 has an invalid length.
[  556.417185][T11378] syz.2.1506: attempt to access beyond end of device
[  556.417185][T11378] nbd2: rw=0, sector=2, nr_sectors = 1 limit=0
[  556.524857][T11378] hfs: can't find a HFS filesystem on dev nbd2
[  557.844844][T11353] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  558.064885][T11353] usb 3-1: Using ep0 maxpacket: 8
[  558.094764][T11353] usb 3-1: config 7 has an invalid interface number: 184 but max is 0
[  558.156677][T11353] usb 3-1: config 7 has no interface number 0
[  558.195176][T11353] usb 3-1: config 7 interface 184 has no altsetting 0
[  558.232457][ T5124] net_ratelimit: 26 callbacks suppressed
[  558.294238][T11353] usb 3-1: New USB device found, idVendor=12d1, idProduct=2f7b, bcdDevice=de.da
[  558.348074][T11443] ip_tables: iptables: counters copy to user failed while replacing table
[  558.367068][T11353] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  558.409764][T11353] usb 3-1: Product: syz
[  558.434235][T11353] usb 3-1: Manufacturer: syz
[  558.458296][T11353] usb 3-1: SerialNumber: syz
[  558.724305][T11353] huawei_cdc_ncm 3-1:7.184: CDC Union missing and no IAD found
[  558.783573][T11353] huawei_cdc_ncm 3-1:7.184: bind() failure
[  558.846404][T11353] usb 3-1: USB disconnect, device number 3
[  560.409464][T11493] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1574'.
[  560.471184][T11493] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1574'.
[  560.492097][T11352] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  560.716993][T11352] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  560.781254][T11352] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  560.906447][T11352] usb 3-1: config 0 interface 0 has no altsetting 0
[  560.963244][T11352] usb 3-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00
[  561.047474][T11352] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  561.128915][T11352] usb 3-1: config 0 descriptor??
[  561.596904][T11352] cougar 0003:060B:700A.0003: unknown main item tag 0x5
[  561.660995][T11352] cougar 0003:060B:700A.0003: unknown main item tag 0x0
[  561.725289][T11352] cougar 0003:060B:700A.0003: No inputs registered, leaving
[  561.904002][T11352] cougar 0003:060B:700A.0003: hidraw0: USB HID v0.00 Keyboard [HID 060b:700a] on usb-dummy_hcd.2-1/input0
[  562.077175][T11352] usb 3-1: USB disconnect, device number 4
[  562.226908][T11532] fido_id[11532]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  562.528579][   T26] kauditd_printk_skb: 62 callbacks suppressed
[  562.528591][   T26] audit: type=1400 audit(2000000263.165:451): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=3A2F2F2604 pid=11548 comm="syz.2.1597"
[  562.722388][ T1273] ieee802154 phy0 wpan0: encryption failed: -22
[  562.728677][ T1273] ieee802154 phy1 wpan1: encryption failed: -22
[  562.757916][T11563] netlink: 'syz.3.1601': attribute type 3 has an invalid length.
[  562.919787][T11565] loop2: detected capacity change from 0 to 1024
[  563.900310][    C0] net_ratelimit: 23 callbacks suppressed
[  569.051628][ T8565] net_ratelimit: 29 callbacks suppressed
[  569.462356][T11353] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  569.674795][T11353] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  569.748502][T11353] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  569.848550][T11353] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  569.893904][T11353] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  569.947627][T11353] usb 3-1: config 0 descriptor??
[  570.383171][T11353] savu 0003:1E7D:2D5A.0004: unknown main item tag 0x2
[  570.406207][T11353] savu 0003:1E7D:2D5A.0004: unknown main item tag 0x7
[  570.555783][T11353] savu 0003:1E7D:2D5A.0004: unknown main item tag 0x1
[  571.578013][T11353] savu 0003:1E7D:2D5A.0004: unknown main item tag 0x4
[  571.608405][T11353] savu 0003:1E7D:2D5A.0004: item 0 2 0 11 parsing failed
[  571.718941][T11353] savu 0003:1E7D:2D5A.0004: parse failed
[  571.736293][T11353] savu: probe of 0003:1E7D:2D5A.0004 failed with error -22
[  571.813114][T11353] usb 3-1: USB disconnect, device number 5
[  572.039283][T11715] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1654'.
[  574.120695][T11760] jffs2: notice: (11760) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  574.233986][ T8561] net_ratelimit: 21 callbacks suppressed
[  574.858068][T11774] netlink: 'syz.2.1673': attribute type 10 has an invalid length.
[  575.973658][T11774] 8021q: adding VLAN 0 to HW filter on device batadv0
[  576.039591][T11774] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  576.409167][T11799] loop2: detected capacity change from 0 to 1024
[  576.475361][T11799] EXT4-fs: inline encryption not supported
[  576.617323][T11799] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #3: block 2: comm syz.2.1683: lblock 2 mapped to illegal pblock 2 (length 1)
[  576.748348][T11799] EXT4-fs (loop2): Remounting filesystem read-only
[  576.832093][T11799] Quota error (device loop2): qtree_write_dquot: dquota write failed
[  576.840235][T11799] EXT4-fs error (device loop2): __ext4_get_inode_loc:4520: comm syz.2.1683: Invalid inode table block 1 in block_group 0
[  578.158106][T11799] EXT4-fs (loop2): Remounting filesystem read-only
[  578.315462][T11799] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Corrupt filesystem
[  578.405448][T11799] EXT4-fs (loop2): Remounting filesystem read-only
[  578.436005][T11837] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1695'.
[  578.479368][T11799] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #3: comm syz.2.1683: mark_inode_dirty error
[  578.565573][T11799] EXT4-fs (loop2): Remounting filesystem read-only
[  578.611737][T11799] Quota error (device loop2): v2_write_file_info: Can't write info structure
[  578.701475][T11799] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.1683: Failed to acquire dquot type 0
[  578.789041][T11799] EXT4-fs (loop2): Remounting filesystem read-only
[  578.851732][T11799] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Corrupt filesystem
[  578.970115][T11799] EXT4-fs (loop2): Remounting filesystem read-only
[  578.999300][T11799] EXT4-fs error (device loop2): ext4_evict_inode:281: inode #11: comm syz.2.1683: mark_inode_dirty error
[  579.098323][T11799] EXT4-fs (loop2): Remounting filesystem read-only
[  579.140426][T11799] EXT4-fs warning (device loop2): ext4_evict_inode:284: couldn't mark inode dirty (err -117)
[  579.215239][T11799] EXT4-fs (loop2): 1 orphan inode deleted
[  579.230085][T11799] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  579.241302][    T9] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1)
[  579.287683][T11799] EXT4-fs error (device loop2): __ext4_get_inode_loc:4520: comm syz.2.1683: Invalid inode table block 1 in block_group 0
[  579.344926][    T9] EXT4-fs (loop2): Remounting filesystem read-only
[  579.351463][    T9] Quota error (device loop2): remove_tree: Can't read quota data block 1
[  579.360642][   T11] net_ratelimit: 21 callbacks suppressed
[  579.377339][T11799] EXT4-fs (loop2): Remounting filesystem read-only
[  579.422622][T11799] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Corrupt filesystem
[  579.458930][    T9] EXT4-fs error (device loop2): ext4_release_dquot:6877: comm kworker/u4:0: Failed to release dquot type 0
[  579.503395][T11799] EXT4-fs (loop2): Remounting filesystem read-only
[  579.579443][    T9] EXT4-fs (loop2): Remounting filesystem read-only
[  579.630870][T10565] EXT4-fs (loop2): unmounting filesystem.
[  579.682513][T10565] EXT4-fs error (device loop2): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0
[  579.855073][T11876] ip_tables: iptables: counters copy to user failed while replacing table
[  579.866612][T10565] EXT4-fs (loop2): Remounting filesystem read-only
[  579.919626][T10565] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Corrupt filesystem
[  580.028874][T10565] EXT4-fs (loop2): Remounting filesystem read-only
[  580.101648][T10565] EXT4-fs error (device loop2): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error
[  580.217734][T10565] EXT4-fs (loop2): Remounting filesystem read-only
[  580.538252][T11904] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1718'.
[  581.333350][T11352] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  581.627520][T11352] usb 3-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice= 0.00
[  581.679724][T11352] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  581.738446][T11352] usb 3-1: Product: syz
[  581.770785][T11352] usb 3-1: Manufacturer: syz
[  581.805007][T11352] usb 3-1: SerialNumber: syz
[  581.878661][T11352] ums_eneub6250 3-1:1.0: USB Mass Storage device detected
[  582.153517][ T4280] Bluetooth: hci2: unknown advertising packet type: 0x06
[  582.153541][ T4280] Bluetooth: hci2: Malformed LE Event: 0x02
[  582.181889][T11354] usb 3-1: USB disconnect, device number 6
[  583.201881][T11354] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  583.474240][T11354] usb 3-1: Using ep0 maxpacket: 8
[  583.501781][T11354] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[  583.612022][T11354] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  583.683698][T11354] usb 3-1: Product: syz
[  583.721488][T11354] usb 3-1: Manufacturer: syz
[  583.769149][T11354] usb 3-1: SerialNumber: syz
[  583.819735][T11354] usb 3-1: config 0 descriptor??
[  583.880135][T11354] gspca_main: sonixj-2.14.0 probing 0c45:613a
[  584.480774][    C0] net_ratelimit: 26 callbacks suppressed
[  584.492070][T11354] gspca_sonixj: reg_w1 err -71
[  584.496921][T11354] sonixj: probe of 3-1:0.0 failed with error -71
[  584.624888][T11354] usb 3-1: USB disconnect, device number 7
[  585.321734][T12055] loop2: detected capacity change from 0 to 256
[  586.277392][T11353] logitech-hidpp-device 0005:046D:B012.0005: Device not connected
[  586.596061][T12082] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1786'.
[  586.681787][T12083] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1786'.
[  586.744959][T12088] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1786'.
[  589.533920][T12137] bond0: (slave bridge0): Error: Slave device does not support XDP
[  589.674168][T12145] netlink: 'syz.9.1807': attribute type 12 has an invalid length.
[  589.764943][T12145] netlink: 'syz.9.1807': attribute type 2 has an invalid length.
[  589.835366][    C0] net_ratelimit: 25 callbacks suppressed
[  589.861681][T12145] netlink: 200 bytes leftover after parsing attributes in process `syz.9.1807'.
[  591.363308][T12144] loop2: detected capacity change from 0 to 40427
[  591.451222][T12144] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x3ffff
[  591.633645][T12144] F2FS-fs (loop2): invalid crc value
[  591.709068][T12144] F2FS-fs (loop2): Found nat_bits in checkpoint
[  593.165239][T12144] F2FS-fs (loop2): Start checkpoint disabled!
[  593.649368][T12212] netlink: 44 bytes leftover after parsing attributes in process `syz.9.1830'.
[  593.832729][T12212] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1830'.
[  593.843433][T12215] netlink: 44 bytes leftover after parsing attributes in process `syz.9.1830'.
[  594.847413][    C0] net_ratelimit: 25 callbacks suppressed
[  594.888554][T12215] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1830'.
[  597.495477][T11354] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  597.732246][T11354] usb 3-1: Using ep0 maxpacket: 8
[  597.759574][T11354] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  597.844647][T11354] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  597.955080][T11354] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  598.014767][T12284] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1853'.
[  598.049745][T11354] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  598.180474][T11354] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  598.290803][T11354] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  598.594718][T11354] usb 3-1: GET_CAPABILITIES returned 0
[  598.620567][T11354] usbtmc 3-1:16.0: can't read capabilities
[  598.819977][T12260] usb 3-1: usbtmc_ioctl_clear_in_halt returned -32
[  598.910428][T11354] usb 3-1: USB disconnect, device number 8
[  600.475869][    C0] net_ratelimit: 21 callbacks suppressed
[  602.724580][T12382] netem: incorrect gi model size
[  602.782031][T12382] netem: change failed
[  605.514209][   T57] net_ratelimit: 23 callbacks suppressed
[  606.220544][T12416] loop2: detected capacity change from 0 to 32768
[  607.480523][T12416] JBD2: Ignoring recovery information on journal
[  607.655079][T12464] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1907'.
[  607.739711][T12464] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1907'.
[  607.756803][T12416] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  608.181170][T10565] ocfs2: Unmounting device (7,2) on (node local)
[  608.449385][T12475] qfq: no options
[  608.741869][T12488] overlayfs: failed to clone upperpath
[  610.173350][T12499] loop2: detected capacity change from 0 to 64
[  610.635450][ T8561] net_ratelimit: 23 callbacks suppressed
[  612.973385][T12582] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1950'.
[  616.043034][    C0] net_ratelimit: 22 callbacks suppressed
[  620.200826][T12690] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1989'.
[  620.306366][T12690] device ip6gre1 entered promiscuous mode
[  620.408024][T11353] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  620.489124][T11353] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  620.565858][T11354] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  620.731315][T11354] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  620.855176][T11354] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  621.192063][    C0] net_ratelimit: 26 callbacks suppressed
[  622.198756][T12747] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:20004
[  622.693479][T12767] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2016'.
[  622.768523][T12767] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2016'.
[  622.869452][T12771] netlink: 'syz.3.2008': attribute type 1 has an invalid length.
[  622.931564][T12771] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  622.938864][T12771] IPv6: NLM_F_CREATE should be set when creating new route
[  622.946100][T12771] IPv6: NLM_F_CREATE should be set when creating new route
[  623.178755][T12777] loop2: detected capacity change from 0 to 32768
[  623.266883][T12777] 
[  623.266883][T12777]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  623.266883][T12777] 
[  623.320957][T12777] ERROR: (device loop2): diWrite: ixpxd invalid
[  623.320957][T12777] 
[  623.341022][T12777] ERROR: (device loop2): txCommit: 
[  623.341022][T12777] 
[  623.351343][T12774] netlink: 'syz.3.2008': attribute type 1 has an invalid length.
[  623.359210][T12774] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  623.494350][T12782] ERROR: (device loop2): diWrite: ixpxd invalid
[  623.494350][T12782] 
[  623.611026][T12782] ERROR: (device loop2): txCommit: 
[  623.611026][T12782] 
[  623.801160][T10565] 
[  623.801160][T10565]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  623.801160][T10565] 
[  623.932019][T10565] 
[  623.932019][T10565]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  623.932019][T10565] 
[  624.159177][ T1273] ieee802154 phy0 wpan0: encryption failed: -22
[  624.169229][ T1273] ieee802154 phy1 wpan1: encryption failed: -22
[  624.272844][T12800] delete_channel: no stack
[  624.654955][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  625.937749][T12812] loop2: detected capacity change from 0 to 40427
[  626.051905][T12812] F2FS-fs (loop2): invalid crc value
[  626.169457][T12812] F2FS-fs (loop2): Found nat_bits in checkpoint
[  626.246731][ T4280] Bluetooth: hci2: command 0x0406 tx timeout
[  626.408782][    C0] net_ratelimit: 24 callbacks suppressed
[  626.458770][T12812] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0
[  626.630686][T12812] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  627.009508][T10565] syz-executor: attempt to access beyond end of device
[  627.009508][T10565] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  629.177731][T12913] bridge0: port 3(vlan3) entered blocking state
[  629.280182][T12913] bridge0: port 3(vlan3) entered disabled state
[  629.371491][T12913] device vlan3 entered promiscuous mode
[  629.445543][T12913] device macsec0 entered promiscuous mode
[  629.830443][T12896] loop2: detected capacity change from 0 to 32768
[  629.957072][T12896] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.2052 (12896)
[  630.274959][T12896] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  631.442446][T12896] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  631.616420][T12896] BTRFS info (device loop2): using free space tree
[  631.988967][T12967] netlink: 79 bytes leftover after parsing attributes in process `syz.0.2065'.
[  632.251217][T12973] net_ratelimit: 24 callbacks suppressed
[  633.867427][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  634.252608][T12991] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2072'.
[  634.582671][T12896] BTRFS error (device loop2): open_ctree failed: -12
[  635.441783][T13019] loop2: detected capacity change from 0 to 128
[  635.551245][T13019] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  635.790585][T13026] netlink: 192852 bytes leftover after parsing attributes in process `syz.6.2086'.
[  636.539315][ T4280] Bluetooth: hci1: unexpected cc 0x041a length: 8 > 1
[  637.607201][   T11] net_ratelimit: 18 callbacks suppressed
[  637.791164][T13073] loop2: detected capacity change from 0 to 16
[  637.909650][T13073] erofs: (device loop2): mounted with root inode @ nid 36.
[  638.140506][ T4280] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[9000]
[  638.192276][T13086] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2108'.
[  638.222279][T13073] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096]
[  638.351186][   T26] audit: type=1800 audit(2000000338.985:452): pid=13073 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2103" name="file2" dev="loop2" ino=89 res=0 errno=0
[  638.762479][T13097] loop2: detected capacity change from 0 to 128
[  638.952045][T13097] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  639.123405][T13097] ext4 filesystem being mounted at /93/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  639.556132][T10565] EXT4-fs (loop2): unmounting filesystem.
[  641.019933][T13130] unloading
[  641.116628][T13134] FAULT_INJECTION: forcing a failure.
[  641.116628][T13134] name failslab, interval 1, probability 0, space 0, times 0
[  641.280758][T13134] CPU: 0 PID: 13134 Comm: syz.2.2121 Not tainted syzkaller #0
[  641.288252][T13134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  641.298291][T13134] Call Trace:
[  641.301556][T13134]  <TASK>
[  641.304472][T13134]  dump_stack_lvl+0x188/0x24e
[  641.309136][T13134]  ? show_regs_print_info+0x12/0x12
[  641.314315][T13134]  ? load_image+0x410/0x410
[  641.318799][T13134]  ? __might_sleep+0xd0/0xd0
[  641.323370][T13134]  ? __lock_acquire+0x7ea0/0x7ea0
[  641.328380][T13134]  should_fail_ex+0x390/0x4c0
[  641.333062][T13134]  should_failslab+0x5/0x20
[  641.337543][T13134]  slab_pre_alloc_hook+0x59/0x300
[  641.342546][T13134]  ? __kasan_kmalloc+0x8e/0xa0
[  641.347293][T13134]  ? ops_init+0x8a/0x5e0
[  641.351517][T13134]  kmem_cache_alloc+0x56/0x2f0
[  641.356259][T13134]  ? __proc_create+0x36f/0x8b0
[  641.361006][T13134]  __proc_create+0x36f/0x8b0
[  641.365580][T13134]  ? proc_symlink+0x210/0x210
[  641.370244][T13134]  proc_create_reg+0x87/0x100
[  641.374923][T13134]  proc_create_net_data+0x95/0x1a0
[  641.380018][T13134]  ? bpf_iter_fini_seq_net+0xc0/0xc0
[  641.385281][T13134]  ? nfnl_queue_pernet+0x23/0x230
[  641.390286][T13134]  ? __raw_spin_lock_init+0x41/0x100
[  641.395553][T13134]  nfnl_queue_net_init+0x90/0xb0
[  641.400474][T13134]  ops_init+0x360/0x5e0
[  641.404616][T13134]  setup_net+0x4f2/0xbd0
[  641.408844][T13134]  ? copy_net_ns+0x5b0/0x5b0
[  641.413432][T13134]  ? copy_net_ns+0x324/0x5b0
[  641.418009][T13134]  ? down_read_killable+0x1cc/0x340
[  641.423192][T13134]  copy_net_ns+0x33e/0x5b0
[  641.427595][T13134]  create_new_namespaces+0x3ce/0x700
[  641.432869][T13134]  unshare_nsproxy_namespaces+0x116/0x160
[  641.438568][T13134]  ksys_unshare+0x4f6/0x8e0
[  641.443059][T13134]  ? sighand_ctor+0x40/0x40
[  641.447545][T13134]  ? lock_chain_count+0x20/0x20
[  641.452403][T13134]  ? syscall_enter_from_user_mode+0x21/0x80
[  641.458287][T13134]  __x64_sys_unshare+0x34/0x40
[  641.463032][T13134]  do_syscall_64+0x4c/0xa0
[  641.467433][T13134]  ? clear_bhb_loop+0x60/0xb0
[  641.472091][T13134]  ? clear_bhb_loop+0x60/0xb0
[  641.476755][T13134]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  641.482631][T13134] RIP: 0033:0x7f0c8799e559
[  641.487042][T13134] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  641.506630][T13134] RSP: 002b:00007f0c88902028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  641.515022][T13134] RAX: ffffffffffffffda RBX: 00007f0c87c25fa0 RCX: 00007f0c8799e559
[  641.522975][T13134] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000
[  641.530925][T13134] RBP: 00007f0c87a358b0 R08: 0000000000000000 R09: 0000000000000000
[  641.538876][T13134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  641.546826][T13134] R13: 00007f0c87c26038 R14: 00007f0c87c25fa0 R15: 00007ffc5e8b1cd8
[  641.554790][T13134]  </TASK>
[  642.743104][ T5124] net_ratelimit: 23 callbacks suppressed
[  644.921753][T13196] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2141'.

syzkaller
syzkaller login: [  647.836600][    T9] net_ratelimit: 23 callbacks suppressed
[  648.210428][T13267] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  649.355830][T13302] 9pnet_fd: Insufficient options for proto=fd
[  649.887300][T13314] device lo entered promiscuous mode
[  649.920834][T13314] device tunl0 entered promiscuous mode
[  649.991524][   T26] audit: type=1804 audit(2000000350.625:453): pid=13319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.2181" name="/newroot/450/bus/file1" dev="overlay" ino=2445 res=1 errno=0
[  650.070654][T13314] device gre0 entered promiscuous mode
[  650.436737][T13314] device gretap0 entered promiscuous mode
[  650.535799][T13314] device erspan0 entered promiscuous mode
[  650.611011][T13314] device ip_vti0 entered promiscuous mode
[  650.688940][T13314] device ip6_vti0 entered promiscuous mode
[  650.773840][T13314] device sit0 entered promiscuous mode
[  650.901384][T13314] device ip6tnl0 entered promiscuous mode
[  650.969334][T13314] device ip6gre0 entered promiscuous mode
[  651.032146][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  651.046831][T13314] device syz_tun entered promiscuous mode
[  651.129818][T13314] device ip6gretap0 entered promiscuous mode
[  651.188889][T13314] device bridge0 entered promiscuous mode
[  651.260922][T13314] device vcan0 entered promiscuous mode
[  651.327708][T13314] device bond0 entered promiscuous mode
[  651.371668][T13314] device bond_slave_0 entered promiscuous mode
[  651.408876][T13314] device bond_slave_1 entered promiscuous mode
[  651.582728][T13314] device team0 entered promiscuous mode
[  651.603766][T13314] device team_slave_1 entered promiscuous mode
[  652.128461][T13350] loop2: detected capacity change from 0 to 131072
[  652.166134][T13314] device dummy0 entered promiscuous mode
[  652.253281][T13350] F2FS-fs (loop2): invalid crc value
[  652.305349][T13350] F2FS-fs (loop2): Found nat_bits in checkpoint
[  652.347047][T13350] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2
[  652.370460][T13350] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  652.386852][T13314] device nlmon0 entered promiscuous mode
[  652.436895][T13314] device caif0 entered promiscuous mode
[  652.566583][T13314] device batadv0 entered promiscuous mode
[  652.687112][T13314] device vxcan0 entered promiscuous mode
[  652.751739][T13314] device vxcan1 entered promiscuous mode
[  652.823902][T13314] device veth0 entered promiscuous mode
[  652.886305][    C0] net_ratelimit: 23 callbacks suppressed
[  652.940557][T13314] device veth1 entered promiscuous mode
[  653.063066][T13314] device wg0 entered promiscuous mode
[  653.182171][T13314] device wg1 entered promiscuous mode
[  653.250253][T13314] device wg2 entered promiscuous mode
[  653.362882][T13314] device veth0_to_bridge entered promiscuous mode
[  653.543043][T13314] device veth1_to_bridge entered promiscuous mode
[  653.690950][T13314] device veth0_to_bond entered promiscuous mode
[  653.862167][T13314] device veth1_to_bond entered promiscuous mode
[  653.971348][T13314] device veth1_to_team entered promiscuous mode
[  654.081900][T13314] device veth0_to_batadv entered promiscuous mode
[  654.141838][T13314] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  654.201683][T13314] device batadv_slave_0 entered promiscuous mode
[  654.335707][T13314] device xfrm0 entered promiscuous mode
[  654.429792][T13314] device veth0_to_hsr entered promiscuous mode
[  654.562674][T13314] device veth1_to_hsr entered promiscuous mode
[  654.668879][T13314] device hsr0 entered promiscuous mode
[  654.783769][T13314] device veth1_virt_wifi entered promiscuous mode
[  654.869017][T13314] device veth0_virt_wifi entered promiscuous mode
[  654.909180][T13314] device virt_wifi0 entered promiscuous mode
[  655.098191][T13314] device vlan0 entered promiscuous mode
[  655.192594][T13314] device macvlan0 entered promiscuous mode
[  655.300767][T13314] device macvlan1 entered promiscuous mode
[  655.348761][T13314] device ipvlan0 entered promiscuous mode
[  655.419239][T13314] device ipvlan1 entered promiscuous mode
[  655.608626][T13314] device macvtap0 entered promiscuous mode
[  655.682112][T13314] device macsec0 entered promiscuous mode
[  655.772092][T13314] device geneve0 entered promiscuous mode
[  655.882043][T13314] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  655.902771][T13314] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  655.965201][T13314] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  656.007615][T13314] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  656.062093][T13314] device geneve1 entered promiscuous mode
[  656.199371][T13314] device netdevsim1 entered promiscuous mode
[  656.247019][T13314] device netdevsim2 entered promiscuous mode
[  656.312406][T13314] device netdevsim3 entered promiscuous mode
[  656.349197][T13314] device wlan1 entered promiscuous mode
[  656.391872][T13314] device bond1 entered promiscuous mode
[  656.419173][T13314] device bridge1 entered promiscuous mode
[  656.472529][T13314] device vlan2 entered promiscuous mode
[  656.536874][T13314] device syzkaller0 entered promiscuous mode
[  656.567058][T13314] device gre1 entered promiscuous mode
[  656.626102][T13314] device erspan0.1 entered promiscuous mode
[  656.724310][T13314] device bridge2 entered promiscuous mode
[  656.763930][T13314] device syztnl2 entered promiscuous mode
[  657.003000][ T5351] bond0 speed is unknown, defaulting to 1000
[  658.088026][    T9] net_ratelimit: 29 callbacks suppressed
[  658.737863][ T5345] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  658.968815][ T5345] usb 3-1: Using ep0 maxpacket: 8
[  659.004007][ T5345] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  659.078244][ T5345] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  659.211559][T13471] overlayfs: failed to clone lowerpath
[  659.218478][ T5345] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  659.276034][ T5345] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  659.468883][ T5345] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  659.559628][ T5345] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  659.627544][ T5345] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  659.920182][T13451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  659.930769][ T5345] usb 3-1: usb_control_msg returned -32
[  659.960257][ T5345] usbtmc 3-1:16.0: can't read capabilities
[  659.989095][T13451] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  660.172883][ T5345] usb 3-1: USB disconnect, device number 9
[  660.621005][T13492] device bridge1 entered promiscuous mode
[  661.122425][T13510] fuse: Bad value for 'fd'
[  661.305001][ T5345] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  661.641450][ T5345] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  661.735759][ T5345] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  661.847419][ T5345] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  661.923306][ T5345] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  662.021530][ T5345] usb 3-1: config 0 descriptor??
[  662.506408][ T5345] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0
[  662.562216][ T5345] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0
[  662.652331][ T5345] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.0006/input/input12
[  662.902318][ T5345] cm6533_jd 0003:0D8C:0022.0006: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0
[  663.090963][ T5345] usb 3-1: USB disconnect, device number 10
[  663.103507][    C0] net_ratelimit: 17 callbacks suppressed
[  663.481652][T13555] fido_id[13555]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory
[  663.965687][T13578] overlayfs: failed to clone upperpath
[  663.981669][T13577] overlayfs: failed to clone upperpath
[  664.606722][T13588] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2264'.
[  664.845780][T13595] loop2: detected capacity change from 0 to 4096
[  664.901144][T13595] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512)
[  665.011772][T13588] bond0: (slave bond_slave_1): Releasing backup interface
[  665.030539][T13595] ntfs3: loop2: Inode r=19 is not in use!
[  665.062460][T13595] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  665.536647][T13598] syz.3.2269 (13598) used greatest stack depth: 17248 bytes left
[  665.544637][T13599] syz.3.2269 (13599) used greatest stack depth: 16784 bytes left
[  666.360777][T13621] process '/newroot/547/file0' started with executable stack
[  666.456359][T13626] fuse: Bad value for 'fd'
[  667.061208][ T8565] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  667.496549][ T8565] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  667.963539][ T8565] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  668.288738][ T8565] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  668.483664][    C0] net_ratelimit: 28 callbacks suppressed
[  669.041513][ T4274] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  669.055708][ T4274] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  669.065251][ T4284] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  669.074161][ T4284] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  669.082002][ T4274] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  669.093680][ T4274] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  669.423341][T13679] rxe_eth0 speed is unknown, defaulting to 1000
[  670.028669][T13699] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2298'.
[  670.089548][T13699] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2298'.
[  670.549286][T13707] netlink: 'syz.6.2301': attribute type 4 has an invalid length.
[  670.604085][T13707] netlink: 152 bytes leftover after parsing attributes in process `syz.6.2301'.
[  670.901126][T13679] bond0 speed is unknown, defaulting to 1000
[  671.122082][ T4274] Bluetooth: hci2: command 0x0409 tx timeout
[  671.522385][T13732] team0: No ports can be present during mode change
[  673.195372][ T4274] Bluetooth: hci2: command 0x041b tx timeout
[  673.751988][    C0] net_ratelimit: 20 callbacks suppressed
[  673.771518][T13679] chnl_net:caif_netlink_parms(): no params data found
[  674.631229][T13679] bridge0: port 1(bridge_slave_0) entered blocking state
[  674.682637][T13679] bridge0: port 1(bridge_slave_0) entered disabled state
[  674.790851][T13679] device bridge_slave_0 entered promiscuous mode
[  674.862962][T13679] bridge0: port 2(bridge_slave_1) entered blocking state
[  674.955614][T13679] bridge0: port 2(bridge_slave_1) entered disabled state
[  675.062361][T13679] device bridge_slave_1 entered promiscuous mode
[  675.272145][ T4274] Bluetooth: hci2: command 0x040f tx timeout
[  675.460229][ T8565] device hsr_slave_0 left promiscuous mode
[  675.567058][ T8565] device hsr_slave_1 left promiscuous mode
[  675.703373][ T8565] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  675.761540][ T8565] batman_adv: batadv0: Removing interface: batadv_slave_0
[  675.902627][ T8565] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  675.944509][ T8565] batman_adv: batadv0: Removing interface: batadv_slave_1
[  676.025385][ T8565] device bridge_slave_1 left promiscuous mode
[  676.072500][ T8565] bridge0: port 2(bridge_slave_1) entered disabled state
[  676.165338][ T8565] device bridge_slave_0 left promiscuous mode
[  676.222040][ T8565] bridge0: port 1(bridge_slave_0) entered disabled state
[  676.626379][ T8565] device veth1_macvtap left promiscuous mode
[  676.671075][ T8565] device veth0_macvtap left promiscuous mode
[  676.736867][ T8565] device veth1_vlan left promiscuous mode
[  676.820654][ T8565] device veth0_vlan left promiscuous mode
[  677.301371][T13848] fuse: Bad value for 'fd'
[  677.358881][ T4274] Bluetooth: hci2: command 0x0419 tx timeout
[  679.192604][ T8561] net_ratelimit: 21 callbacks suppressed
[  680.689828][ T8565] team0 (unregistering): Port device team_slave_1 removed
[  680.948030][ T8565] team0 (unregistering): Port device team_slave_0 removed
[  681.207250][ T8565] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  681.433872][ T8565] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  682.483275][ T8565] bond0 (unregistering): (slave batadv0): Releasing backup interface
[  682.863475][ T8565] bond0 (unregistering): Released all slaves
[  683.130628][T13679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  683.216184][T13679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  684.106297][T13679] team0: Port device team_slave_0 added
[  684.175209][T13679] team0: Port device team_slave_1 added
[  684.315442][ T4368] net_ratelimit: 2 callbacks suppressed
[  684.576215][T13679] batman_adv: batadv0: Adding interface: batadv_slave_0
[  684.660526][T13679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  684.864800][T13679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  684.944118][T13679] batman_adv: batadv0: Adding interface: batadv_slave_1
[  685.031268][T13679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  685.236849][T13679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  685.320295][T13909] IPVS: Error connecting to the multicast addr
[  685.662183][ T1273] ieee802154 phy0 wpan0: encryption failed: -22
[  685.668503][ T1273] ieee802154 phy1 wpan1: encryption failed: -22
[  685.765012][T13679] device hsr_slave_0 entered promiscuous mode
[  685.878633][T13679] device hsr_slave_1 entered promiscuous mode
[  685.978141][T13679] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  686.027962][T13679] Cannot create hsr debugfs directory
[  686.184256][T13934] sctp: [Deprecated]: syz.6.2362 (pid 13934) Use of int in max_burst socket option.
[  686.184256][T13934] Use struct sctp_assoc_value instead
[  687.784179][T13986] overlayfs: failed to clone upperpath
[  688.192639][T13998] overlayfs: failed to clone upperpath
[  688.819750][T14012] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2380'.
[  689.454584][   T57] net_ratelimit: 3 callbacks suppressed
[  689.995302][T13679] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  690.132922][T13679] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  690.292135][T13679] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  690.479128][T13679] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  691.249450][T13679] 8021q: adding VLAN 0 to HW filter on device bond0
[  691.405155][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  691.482732][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  691.535268][T13679] 8021q: adding VLAN 0 to HW filter on device team0
[  691.622367][ T5124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  691.690702][ T5124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  691.768705][ T5124] bridge0: port 1(bridge_slave_0) entered blocking state
[  691.775831][ T5124] bridge0: port 1(bridge_slave_0) entered forwarding state
[  691.940488][ T5124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  691.997795][ T5124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  692.087203][ T5124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  692.168017][ T5124] bridge0: port 2(bridge_slave_1) entered blocking state
[  692.175153][ T5124] bridge0: port 2(bridge_slave_1) entered forwarding state
[  692.301682][ T5124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  692.472393][ T5124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  692.512973][ T5124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  692.626676][ T5124] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  692.725574][ T5124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  692.828988][ T5124] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  692.911841][ T5124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  692.997175][ T5124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  693.071696][T13679] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  693.176645][T13679] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  693.233769][ T5124] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  693.290094][ T5124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  693.359300][ T5124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  693.435216][T14088] IPv6: ADDRCONF(NETDEV_CHANGE): gre2: link becomes ready
[  694.462351][T14117] overlayfs: failed to clone upperpath
[  694.559279][ T8565] net_ratelimit: 7 callbacks suppressed
[  694.643019][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  694.650462][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  694.757567][T13679] 8021q: adding VLAN 0 to HW filter on device batadv0
[  694.935065][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  695.012536][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  695.158205][ T8563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  695.225051][ T8563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  695.318592][T13679] device veth0_vlan entered promiscuous mode
[  695.370411][ T8563] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  695.415887][ T8563] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  695.496860][T13679] device veth1_vlan entered promiscuous mode
[  695.668182][ T8561] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  695.734430][ T8561] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  695.851439][T13679] device veth0_macvtap entered promiscuous mode
[  695.958478][ T8561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  696.015175][ T8561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  696.094846][T13679] device veth1_macvtap entered promiscuous mode
[  696.143039][ T8561] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  696.191524][ T8561] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  696.294975][T13679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  696.376319][T13679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  696.431237][T13679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  696.499129][T13679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  696.567460][T13679] batman_adv: batadv0: Interface activated: batadv_slave_0
[  696.613799][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  696.646158][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  696.686621][T13679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  696.727908][T13679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  696.786145][T13679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  696.855610][T13679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  696.916043][T13679] batman_adv: batadv0: Interface activated: batadv_slave_1
[  696.960304][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  697.002434][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  697.068693][T13679] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  697.135341][T13679] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  697.205537][T13679] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  697.278105][T13679] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  697.353788][T14205] device lo entered promiscuous mode
[  697.376183][T14205] device tunl0 entered promiscuous mode
[  697.441044][T14205] device gre0 entered promiscuous mode
[  697.672435][T14205] device gretap0 entered promiscuous mode
[  697.741753][T14205] device erspan0 entered promiscuous mode
[  697.817318][T14205] device ip_vti0 entered promiscuous mode
[  697.865443][T14205] device ip6_vti0 entered promiscuous mode
[  697.939740][T14205] device sit0 entered promiscuous mode
[  698.037377][T14205] device ip6tnl0 entered promiscuous mode
[  698.089404][T14205] device ip6gre0 entered promiscuous mode
[  698.156518][T14205] device ip6gretap0 entered promiscuous mode
[  698.216161][T14205] bridge0: port 2(bridge_slave_1) entered disabled state
[  698.226151][T14205] bridge0: port 1(bridge_slave_0) entered disabled state
[  698.288414][T14205] device bridge0 entered promiscuous mode
[  698.361776][T14205] device vcan0 entered promiscuous mode
[  698.391721][T14205] device bond_slave_0 left promiscuous mode
[  698.419129][T14205] device bond_slave_1 left promiscuous mode
[  698.446235][T14205] device bond0 entered promiscuous mode
[  698.468610][T14205] device bond_slave_0 entered promiscuous mode
[  698.495415][T14205] device bond_slave_1 entered promiscuous mode
[  698.531230][T14205] device team0 entered promiscuous mode
[  698.559866][T14205] device team_slave_0 entered promiscuous mode
[  698.586468][T14205] device team_slave_1 entered promiscuous mode
[  698.647830][T14205] device dummy0 entered promiscuous mode
[  698.703216][T14205] device nlmon0 entered promiscuous mode
[  698.735622][T14205] device caif0 entered promiscuous mode
[  698.781864][T14205] device batadv0 entered promiscuous mode
[  698.828090][T14205] device veth0 entered promiscuous mode
[  698.893034][T14205] device veth1 entered promiscuous mode
[  698.939081][T14205] device wg0 entered promiscuous mode
[  698.975029][T14205] device wg1 entered promiscuous mode
[  699.022989][T14205] device wg2 entered promiscuous mode
[  699.060467][T14205] device veth0_to_bridge entered promiscuous mode
[  699.162838][T14205] device veth1_to_bridge entered promiscuous mode
[  699.204883][T14205] infiniband syz0: set down
[  699.266811][T14205] device veth0_to_bond entered promiscuous mode
[  699.333174][T14205] device veth1_to_bond entered promiscuous mode
[  699.391915][T14205] device veth0_to_team entered promiscuous mode
[  699.448797][T14205] device veth1_to_team entered promiscuous mode
[  699.506941][T14205] device veth0_to_batadv entered promiscuous mode
[  699.529534][T14205] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  699.560379][T14205] device batadv_slave_0 entered promiscuous mode
[  699.609117][T14205] device veth1_to_batadv entered promiscuous mode
[  699.646685][T14205] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  699.667141][T14205] device batadv_slave_1 entered promiscuous mode
[  699.676633][ T8561] net_ratelimit: 4 callbacks suppressed
[  699.720625][T14205] device xfrm0 entered promiscuous mode
[  699.754538][T14205] device veth0_to_hsr entered promiscuous mode
[  699.815284][T14205] device veth1_to_hsr entered promiscuous mode
[  699.876163][T14205] device hsr0 entered promiscuous mode
[  699.915724][T14205] device veth1_virt_wifi entered promiscuous mode
[  699.953321][T14205] device veth0_virt_wifi entered promiscuous mode
[  699.990738][T14205] device 
c
@0Ù entered promiscuous mode
[  700.087559][T14205] device vlan0 entered promiscuous mode
[  700.117969][T14205] device vlan1 entered promiscuous mode
[  700.159656][T14205] device macvlan0 entered promiscuous mode
[  700.196680][T14205] device macvlan1 entered promiscuous mode
[  700.237305][T14205] device ipvlan0 entered promiscuous mode
[  700.260358][T14205] device ipvlan1 entered promiscuous mode
[  700.357195][T14205] device macvtap0 entered promiscuous mode
[  700.393265][T14205] device macsec0 entered promiscuous mode
[  700.436488][T14205] device geneve0 entered promiscuous mode
[  700.475176][T14205] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  700.495275][T14205] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  700.521982][T14205] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  700.550987][T14205] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  700.572569][T14205] device geneve1 entered promiscuous mode
[  700.605599][T14205] device netdevsim0 entered promiscuous mode
[  700.629702][T14205] device netdevsim1 entered promiscuous mode
[  700.666373][T14205] device netdevsim2 entered promiscuous mode
[  700.692847][T14205] device netdevsim3 entered promiscuous mode
[  700.722572][T14205] device wlan0 entered promiscuous mode
[  700.742746][T14205] device wlan1 entered promiscuous mode
[  700.775410][T14205] device erspan0.4 entered promiscuous mode
[  700.781439][T14205] device bond1 entered promiscuous mode
[  700.801988][T14205] device macvlan2 entered promiscuous mode
[  700.838127][T14205] device bond2 entered promiscuous mode
[  700.851977][T14205] device gretap1 entered promiscuous mode
[  700.884646][T14205] device vlan2 entered promiscuous mode
[  700.906196][T14205] device gre1 entered promiscuous mode
[  700.911737][T14205] device bridge1 entered promiscuous mode
[  700.932814][T14205] device erspan1 entered promiscuous mode
[  700.956592][T14205] device vlan4 entered promiscuous mode
[  700.982110][T14205] device ip6tnl1 entered promiscuous mode
[  701.002113][T14211] netlink: 'syz.0.2435': attribute type 10 has an invalid length.
[  701.380515][T14251] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2446'.
[  701.500131][ T4368] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  701.574143][ T4368] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  701.664577][   T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  701.692477][ T8565] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  701.721651][   T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  701.835172][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  702.258960][T14283] loop2: detected capacity change from 0 to 1024
[  702.327346][T14283] EXT4-fs: Ignoring removed nobh option
[  702.355691][T14287] netlink: 'syz.9.2457': attribute type 1 has an invalid length.
[  702.392984][T14283] EXT4-fs: Ignoring removed bh option
[  702.450909][T14283] EXT4-fs: Ignoring removed nobh option
[  702.548379][T14287] 8021q: adding VLAN 0 to HW filter on device bond2
[  702.584608][T14283] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  702.713206][T14283] EXT4-fs (loop2): shut down requested (2)
[  702.744331][T14289] bond2: (slave veth3): Enslaving as an active interface with a down link
[  702.828254][T14292] bond2: (slave veth0_virt_wifi): Enslaving as an active interface with a down link
[  702.870478][T13679] EXT4-fs (loop2): unmounting filesystem.
[  703.511154][T14318] FAULT_INJECTION: forcing a failure.
[  703.511154][T14318] name failslab, interval 1, probability 0, space 0, times 0
[  703.650024][T14318] CPU: 0 PID: 14318 Comm: syz.2.2464 Not tainted syzkaller #0
[  703.657505][T14318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  703.667544][T14318] Call Trace:
[  703.670808][T14318]  <TASK>
[  703.673726][T14318]  dump_stack_lvl+0x188/0x24e
[  703.678394][T14318]  ? show_regs_print_info+0x12/0x12
[  703.683574][T14318]  ? load_image+0x410/0x410
[  703.688066][T14318]  ? __might_sleep+0xd0/0xd0
[  703.692635][T14318]  ? __lock_acquire+0x7ea0/0x7ea0
[  703.697643][T14318]  should_fail_ex+0x390/0x4c0
[  703.702311][T14318]  should_failslab+0x5/0x20
[  703.706794][T14318]  slab_pre_alloc_hook+0x59/0x300
[  703.711812][T14318]  ? __kmem_cache_alloc_node+0x19d/0x270
[  703.717424][T14318]  ? create_filter_start+0x15c/0x2c0
[  703.722692][T14318]  __kmem_cache_alloc_node+0x4f/0x270
[  703.728046][T14318]  ? create_filter_start+0x15c/0x2c0
[  703.733318][T14318]  kmalloc_trace+0x26/0xe0
[  703.737717][T14318]  create_filter_start+0x15c/0x2c0
[  703.742810][T14318]  apply_subsystem_event_filter+0x1c2/0x16b0
[  703.748770][T14318]  ? __might_fault+0xa6/0x120
[  703.753438][T14318]  ? apply_event_filter+0x590/0x590
[  703.758614][T14318]  ? __might_fault+0xa6/0x120
[  703.763289][T14318]  ? _copy_from_user+0x10b/0x170
[  703.768210][T14318]  subsystem_filter_write+0x95/0xf0
[  703.773388][T14318]  ? subsystem_filter_read+0x1e0/0x1e0
[  703.778829][T14318]  vfs_write+0x2dc/0x9a0
[  703.783066][T14318]  ? file_end_write+0x250/0x250
[  703.787902][T14318]  ? __fget_files+0x28/0x460
[  703.792473][T14318]  ? __fget_files+0x3fc/0x460
[  703.797141][T14318]  ? __fdget_pos+0x2ae/0x360
[  703.801728][T14318]  ? ksys_write+0x70/0x260
[  703.806133][T14318]  ksys_write+0x14d/0x260
[  703.810455][T14318]  ? __ia32_sys_read+0x80/0x80
[  703.815202][T14318]  ? lockdep_hardirqs_on+0x94/0x140
[  703.820402][T14318]  do_syscall_64+0x4c/0xa0
[  703.824800][T14318]  ? clear_bhb_loop+0x60/0xb0
[  703.829460][T14318]  ? clear_bhb_loop+0x60/0xb0
[  703.834117][T14318]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  703.839993][T14318] RIP: 0033:0x7fe54c19e559
[  703.844398][T14318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  703.863982][T14318] RSP: 002b:00007fe54a3f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  703.872379][T14318] RAX: ffffffffffffffda RBX: 00007fe54c425fa0 RCX: 00007fe54c19e559
[  703.880329][T14318] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[  703.888278][T14318] RBP: 00007fe54c2358b0 R08: 0000000000000000 R09: 0000000000000000
[  703.896236][T14318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  703.904186][T14318] R13: 00007fe54c426038 R14: 00007fe54c425fa0 R15: 00007fff3d6dc5b8
[  703.912149][T14318]  </TASK>
[  704.795387][   T11] net_ratelimit: 34 callbacks suppressed
[  705.399855][T14373] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2484'.
[  705.451555][T14375] bridge0: port 1(bridge_slave_0) entered disabled state
[  705.521065][T14372] jffs2: notice: (14372) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  705.558760][T14375] team0: Port device bridge_slave_0 added
[  705.636919][T14380] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2486'.
[  705.842791][T14380] device bridge_slave_1 left promiscuous mode
[  705.884100][T14380] bridge0: port 2(bridge_slave_1) entered disabled state
[  706.520099][ T4274] Bluetooth: hci5: unexpected event 0x03 length: 1 < 11
[  706.743002][T14418] sctp: [Deprecated]: syz.9.2498 (pid 14418) Use of int in max_burst socket option deprecated.
[  706.743002][T14418] Use struct sctp_assoc_value instead
[  707.223548][T14430] FAULT_INJECTION: forcing a failure.
[  707.223548][T14430] name failslab, interval 1, probability 0, space 0, times 0
[  707.236943][T14430] CPU: 0 PID: 14430 Comm: syz.2.2501 Not tainted syzkaller #0
[  707.244423][T14430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  707.254470][T14430] Call Trace:
[  707.257742][T14430]  <TASK>
[  707.260668][T14430]  dump_stack_lvl+0x188/0x24e
[  707.265359][T14430]  ? show_regs_print_info+0x12/0x12
[  707.270546][T14430]  ? load_image+0x410/0x410
[  707.275033][T14430]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  707.281003][T14430]  should_fail_ex+0x390/0x4c0
[  707.285690][T14430]  should_failslab+0x5/0x20
[  707.290170][T14430]  slab_pre_alloc_hook+0x59/0x300
[  707.295177][T14430]  ? do_raw_spin_lock+0x128/0x2f0
[  707.300178][T14430]  ? reuseport_alloc+0x11b/0x430
[  707.305097][T14430]  __kmem_cache_alloc_node+0x4f/0x270
[  707.310448][T14430]  ? __local_bh_enable_ip+0x136/0x1c0
[  707.315816][T14430]  ? reuseport_alloc+0x11b/0x430
[  707.320737][T14430]  kmalloc_trace+0x26/0xe0
[  707.325134][T14430]  reuseport_alloc+0x11b/0x430
[  707.329880][T14430]  __inet_hash+0x6be/0xc30
[  707.334285][T14430]  inet_csk_listen_start+0x218/0x300
[  707.339558][T14430]  inet_listen+0x2cb/0x580
[  707.343959][T14430]  __sys_listen+0x19d/0x220
[  707.348444][T14430]  __x64_sys_listen+0x56/0x60
[  707.353116][T14430]  do_syscall_64+0x4c/0xa0
[  707.357513][T14430]  ? clear_bhb_loop+0x60/0xb0
[  707.362173][T14430]  ? clear_bhb_loop+0x60/0xb0
[  707.366835][T14430]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  707.372711][T14430] RIP: 0033:0x7fe54c19e559
[  707.377106][T14430] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  707.396696][T14430] RSP: 002b:00007fe54a3f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000032
[  707.405093][T14430] RAX: ffffffffffffffda RBX: 00007fe54c425fa0 RCX: 00007fe54c19e559
[  707.413057][T14430] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[  707.421009][T14430] RBP: 00007fe54c2358b0 R08: 0000000000000000 R09: 0000000000000000
[  707.428971][T14430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  707.436919][T14430] R13: 00007fe54c426038 R14: 00007fe54c425fa0 R15: 00007fff3d6dc5b8
[  707.444881][T14430]  </TASK>
[  710.501145][ T8565] net_ratelimit: 13 callbacks suppressed
[  715.593248][   T26] audit: type=1326 audit(2000000416.235:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14680 comm="syz.6.2570" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f901919e559 code=0x7ffc0000
[  715.832066][   T26] audit: type=1326 audit(2000000416.265:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14680 comm="syz.6.2570" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f901919e559 code=0x7ffc0000
[  715.959241][T14695] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2574'.
[  716.081848][   T26] audit: type=1326 audit(2000000416.265:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14680 comm="syz.6.2570" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f901919e559 code=0x7ffc0000
[  716.319074][ T8561] net_ratelimit: 15 callbacks suppressed
[  716.352700][   T26] audit: type=1326 audit(2000000416.275:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14680 comm="syz.6.2570" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f901919e559 code=0x7ffc0000
[  716.655627][   T26] audit: type=1326 audit(2000000416.275:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14680 comm="syz.6.2570" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f901919e559 code=0x7ffc0000
[  716.908245][   T26] audit: type=1326 audit(2000000416.275:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14680 comm="syz.6.2570" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f901919e559 code=0x7ffc0000
[  717.132071][   T26] audit: type=1326 audit(2000000416.275:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14680 comm="syz.6.2570" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f901919e559 code=0x7ffc0000
[  717.336769][   T26] audit: type=1326 audit(2000000416.275:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14680 comm="syz.6.2570" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f901919e559 code=0x7ffc0000
[  717.380261][T14699] loop2: detected capacity change from 0 to 32768
[  717.438506][T14699] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.2576 (14699)
[  717.532310][   T26] audit: type=1326 audit(2000000416.275:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14680 comm="syz.6.2570" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f901919e559 code=0x7ffc0000
[  717.585592][T14699] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  717.692031][T14699] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  717.767607][T14699] BTRFS info (device loop2): using free space tree
[  717.788668][   T26] audit: type=1326 audit(2000000416.275:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14680 comm="syz.6.2570" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f901919e559 code=0x7ffc0000
[  718.040647][T14699] BTRFS info (device loop2): enabling ssd optimizations
[  718.416686][T14772] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2595'.
[  718.483666][T13679] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  719.366691][T14784] netlink: 'syz.9.2599': attribute type 39 has an invalid length.
[  721.673872][    C0] net_ratelimit: 13 callbacks suppressed
[  721.691072][T14823] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2611'.
[  722.196520][T14833] loop2: detected capacity change from 0 to 256
[  722.305219][T14833] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[  723.344989][T14837] ceph: No mds server is up or the cluster is laggy
[  724.940481][T14886] fuse: Bad value for 'fd'
[  725.462836][T14879] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  725.596489][T14879] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  725.791631][T14913] fuse: Bad value for 'fd'
[  725.829503][T14879] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  725.941204][T14879] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  726.006880][T14879] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  726.087774][T14879] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  726.246328][T14879] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  726.352123][T14879] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  726.399466][T14879] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  726.701006][T14928] md: array md0 already has disks!
[  726.880868][ T4274] Bluetooth: hci1: command 0x0c1a tx timeout
[  726.958092][    C0] net_ratelimit: 31 callbacks suppressed
[  727.239884][T14928] md: could not open device unknown-block(0,0).
[  727.268072][T14928] md: error, md_import_device() returned -6
[  727.553047][T14933] md/raid0:md0: chunk size must be set.
[  727.609914][T14933] md: pers->run() failed ...
[  728.021676][ T4274] Bluetooth: hci5: command 0x0c1a tx timeout
[  728.162991][ T4274] Bluetooth: hci0: command 0x0c1a tx timeout
[  728.312757][ T4274] Bluetooth: hci2: command 0x0c1a tx timeout
[  728.352953][T14963] fuse: Bad value for 'fd'
[  728.976050][ T4274] Bluetooth: hci1: command 0x0406 tx timeout
[  729.027682][T14982] device syzkaller1 entered promiscuous mode
[  730.076457][ T4274] Bluetooth: hci5: command 0x0406 tx timeout
[  730.135286][T15014] overlayfs: failed to clone upperpath
[  730.398778][ T4274] Bluetooth: hci2: command 0x0406 tx timeout
[  731.057698][ T4274] Bluetooth: hci1: command 0x0406 tx timeout
[  731.719851][T15048] loop2: detected capacity change from 0 to 512
[  731.879601][T15048] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.2684: invalid indirect mapped block 4294967295 (level 1)
[  732.105966][T15048] EXT4-fs (loop2): Remounting filesystem read-only
[  732.163334][    C0] net_ratelimit: 24 callbacks suppressed
[  732.186647][T15048] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.2684: invalid indirect mapped block 4294967295 (level 1)
[  732.317912][T15048] EXT4-fs (loop2): Remounting filesystem read-only
[  732.397665][T15048] EXT4-fs (loop2): 2 truncates cleaned up
[  732.456219][T15048] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  732.472121][   T26] kauditd_printk_skb: 30 callbacks suppressed
[  732.472130][   T26] audit: type=1326 audit(2000000433.105:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15043 comm="syz.9.2683" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f236db9e559 code=0x7fc00000
[  732.509313][ T4274] Bluetooth: hci2: command 0x0406 tx timeout
[  732.776728][T13679] EXT4-fs error (device loop2): ext4_lookup:1860: inode #17: comm syz-executor: iget: bad extended attribute block 6904
[  732.930832][T13679] EXT4-fs (loop2): Remounting filesystem read-only
[  732.979170][T13679] EXT4-fs error (device loop2): ext4_lookup:1860: inode #17: comm syz-executor: iget: bad extended attribute block 6904
[  733.133555][T13679] EXT4-fs (loop2): Remounting filesystem read-only
[  733.753184][T15052] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[  733.770928][T15102] device syzkaller0 left promiscuous mode
[  733.944275][T15052] EXT4-fs (loop2): Remounting filesystem read-only
[  733.963389][T13679] EXT4-fs (loop2): unmounting filesystem.
[  734.327571][ T8561] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  734.727298][ T8561] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  735.165925][ T8561] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  735.545205][ T8561] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  736.956747][ T4280] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  736.972151][ T4284] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  736.981786][ T4280] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  736.994533][ T4280] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  737.005895][ T4284] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  737.014252][ T4280] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  737.337995][T15166] rxe_eth0 speed is unknown, defaulting to 1000
[  737.604542][    C0] net_ratelimit: 8 callbacks suppressed
[  738.728938][T15166] bond0 speed is unknown, defaulting to 1000
[  739.039765][T15199] rxe_eth0 speed is unknown, defaulting to 1000
[  739.059147][ T4280] Bluetooth: hci2: command 0x0409 tx timeout
[  740.468751][T15199] bond0 speed is unknown, defaulting to 1000
[  741.911419][ T4280] Bluetooth: hci2: command 0x041b tx timeout
[  742.754032][T15166] chnl_net:caif_netlink_parms(): no params data found
[  742.958035][    C0] net_ratelimit: 8 callbacks suppressed
[  743.012458][T15262] overlayfs: failed to clone upperpath
[  743.282508][   T26] audit: type=1326 audit(2000000443.925:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15267 comm="syz.9.2749" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f236db9e559 code=0x7ffc0000
[  743.577855][   T26] audit: type=1326 audit(2000000443.955:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15267 comm="syz.9.2749" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f236db9e559 code=0x7ffc0000
[  743.816501][T15166] bridge0: port 1(bridge_slave_0) entered blocking state
[  743.866725][T15166] bridge0: port 1(bridge_slave_0) entered disabled state
[  743.908090][   T26] audit: type=1326 audit(2000000443.955:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15267 comm="syz.9.2749" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f236db9e559 code=0x7ffc0000
[  743.984290][T15166] device bridge_slave_0 entered promiscuous mode
[  743.997781][ T4280] Bluetooth: hci2: command 0x040f tx timeout
[  744.202016][   T26] audit: type=1326 audit(2000000443.955:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15267 comm="syz.9.2749" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f236db9e559 code=0x7ffc0000
[  744.226315][ T8561] device hsr_slave_0 left promiscuous mode
[  744.322029][ T8561] device hsr_slave_1 left promiscuous mode
[  744.411473][ T8561] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  744.482017][ T8561] batman_adv: batadv0: Removing interface: batadv_slave_0
[  744.489245][   T26] audit: type=1326 audit(2000000443.955:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15267 comm="syz.9.2749" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f236db9e559 code=0x7ffc0000
[  744.579155][ T8561] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  744.635795][ T8561] batman_adv: batadv0: Removing interface: batadv_slave_1
[  744.721378][ T8561] device bridge_slave_1 left promiscuous mode
[  744.734654][   T26] audit: type=1326 audit(2000000443.955:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15267 comm="syz.9.2749" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f236db9e559 code=0x7ffc0000
[  744.811105][ T8561] bridge0: port 2(bridge_slave_1) entered disabled state
[  744.894272][ T8561] device bridge_slave_0 left promiscuous mode
[  744.931151][ T8561] bridge0: port 1(bridge_slave_0) entered disabled state
[  744.971831][   T26] audit: type=1326 audit(2000000443.955:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15267 comm="syz.9.2749" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f236db9e559 code=0x7ffc0000
[  745.158790][   T26] audit: type=1326 audit(2000000443.955:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15267 comm="syz.9.2749" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f236db9e559 code=0x7ffc0000
[  745.200612][ T8561] device veth1_macvtap left promiscuous mode
[  745.240106][ T8561] device veth0_macvtap left promiscuous mode
[  745.279302][ T8561] device veth1_vlan left promiscuous mode
[  745.315820][ T8561] device veth0_vlan left promiscuous mode
[  745.337966][   T26] audit: type=1326 audit(2000000443.955:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15267 comm="syz.9.2749" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f236db9e559 code=0x7ffc0000
[  745.490938][   T26] audit: type=1326 audit(2000000443.955:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15267 comm="syz.9.2749" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f236db9e559 code=0x7ffc0000
[  746.085157][ T4280] Bluetooth: hci2: command 0x0419 tx timeout
[  747.040501][ T1273] ieee802154 phy0 wpan0: encryption failed: -22
[  747.048840][ T1273] ieee802154 phy1 wpan1: encryption failed: -22
[  748.685805][ T8561] team0 (unregistering): Port device team_slave_1 removed
[  748.854238][ T8561] team0 (unregistering): Port device team_slave_0 removed
[  749.023037][ T8561] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  749.206944][ T8561] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  749.592216][ T8565] net_ratelimit: 6 callbacks suppressed
[  750.564062][ T8561] bond0 (unregistering): Released all slaves
[  750.715324][T15166] bridge0: port 2(bridge_slave_1) entered blocking state
[  750.742045][T15166] bridge0: port 2(bridge_slave_1) entered disabled state
[  750.772519][T15166] device bridge_slave_1 entered promiscuous mode
[  751.585323][T15166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  751.673682][T15166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  752.156640][T15166] team0: Port device team_slave_0 added
[  752.477183][T15166] team0: Port device team_slave_1 added
[  752.978910][T15166] batman_adv: batadv0: Adding interface: batadv_slave_0
[  753.050492][T15166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  753.311998][T15166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  753.425513][T15166] batman_adv: batadv0: Adding interface: batadv_slave_1
[  753.501617][T15166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  753.660641][T15166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  754.132178][T15166] device hsr_slave_0 entered promiscuous mode
[  754.250848][T15166] device hsr_slave_1 entered promiscuous mode
[  754.292972][T15166] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  754.372905][T15166] Cannot create hsr debugfs directory
[  758.967549][T15508] netlink: 'syz.3.2804': attribute type 1 has an invalid length.
[  759.036666][T15508] netlink: 'syz.3.2804': attribute type 4 has an invalid length.
[  759.097323][T15508] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.2804'.
[  759.165395][T15513] netlink: 'syz.3.2804': attribute type 1 has an invalid length.
[  759.192496][T15513] netlink: 'syz.3.2804': attribute type 4 has an invalid length.
[  759.229068][T15513] netlink: 9491 bytes leftover after parsing attributes in process `syz.3.2804'.
[  759.859644][T15166] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  760.003746][T15166] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  760.158573][T15548] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  760.253722][T15166] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  760.357908][T15166] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  761.136314][T15166] 8021q: adding VLAN 0 to HW filter on device bond0
[  761.261883][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  761.303117][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  761.365538][T15166] 8021q: adding VLAN 0 to HW filter on device team0
[  761.442583][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  761.510518][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  761.590809][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  761.597918][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  761.739085][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  761.785702][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  761.865172][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  761.960399][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  761.967534][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  762.103062][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  762.206970][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  762.291465][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  763.460665][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  763.525827][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  763.614582][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  763.697647][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  763.761382][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  763.834745][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  763.900321][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  763.961768][T15166] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  764.068146][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  764.305374][T15611] overlayfs: failed to clone lowerpath
[  765.179885][ T5124] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  765.220789][ T5124] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  765.289948][T15166] 8021q: adding VLAN 0 to HW filter on device batadv0
[  765.377198][T15638] device vlan1 entered promiscuous mode
[  765.515912][T15644] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2837'.
[  765.730333][T15648] device macvlan3 entered promiscuous mode
[  765.788947][T15648] device bond3 entered promiscuous mode
[  765.862443][T15648] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  765.928103][T15648] device bond3 left promiscuous mode
[  766.147607][ T5124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  766.158865][T15653] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  766.222931][ T5124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  766.309596][T15166] device veth0_vlan entered promiscuous mode
[  766.356864][ T5124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  766.402816][ T5124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  766.468485][T15665] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1514) !
[  766.598937][ T5124] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  766.647421][ T5124] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  766.719496][T15166] device veth1_vlan entered promiscuous mode
[  766.858925][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  766.891135][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  766.943853][T15166] device veth0_macvtap entered promiscuous mode
[  766.984486][T15166] device veth1_macvtap entered promiscuous mode
[  767.372537][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  767.399882][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  767.454092][T15166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  767.510262][T15166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  767.570802][T15166] batman_adv: batadv0: Interface activated: batadv_slave_0
[  767.630464][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  767.679825][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  767.738504][T15166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  767.818972][T15166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  767.975729][T15166] batman_adv: batadv0: Interface activated: batadv_slave_1
[  768.133220][ T5124] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  769.161859][ T5124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  769.243005][T15166] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  769.844780][T15166] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  770.454608][T15166] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  770.527997][T15166] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  771.179859][ T8551] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  771.248052][ T8551] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  771.423591][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  771.485928][ T8551] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  771.561627][ T8551] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  771.621978][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  771.994277][    C0] net_ratelimit: 31 callbacks suppressed
[  777.432256][    C0] net_ratelimit: 11 callbacks suppressed
[  780.973115][ T4280] Bluetooth: hci0: command 0x0409 tx timeout
[  780.979909][ T4280] Bluetooth: hci0: unexpected subevent 0x01 length: 19 > 18
[  781.089387][T15896] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2899'.
[  782.944490][    C0] net_ratelimit: 12 callbacks suppressed
[  785.899075][T15968] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2916'.
[  793.053626][    C0] net_ratelimit: 9 callbacks suppressed
[  796.084836][T16064] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  799.033935][    C0] net_ratelimit: 14 callbacks suppressed
[  800.375816][T16103] 
[  800.378168][T16103] ======================================================
[  800.385191][T16103] WARNING: possible circular locking dependency detected
[  800.392209][T16103] syzkaller #0 Not tainted
[  800.396598][T16103] ------------------------------------------------------
[  800.403588][T16103] syz.1.2938/16103 is trying to acquire lock:
[  800.409627][T16103] ffff888148cf5080 (&sb->s_type->i_mutex_key#38){++++}-{3:3}, at: configfs_depend_item_unlocked+0x14c/0x450
[  800.421089][T16103] 
[  800.421089][T16103] but task is already holding lock:
[  800.428426][T16103] ffffffff8e6067e8 (tpg_instances_lock){+.+.}-{3:3}, at: usbg_make_tpg+0xf5/0x550
[  800.437623][T16103] 
[  800.437623][T16103] which lock already depends on the new lock.
[  800.437623][T16103] 
[  800.448026][T16103] 
[  800.448026][T16103] the existing dependency chain (in reverse order) is:
[  800.457012][T16103] 
[  800.457012][T16103] -> #3 (tpg_instances_lock){+.+.}-{3:3}:
[  800.464900][T16103]        __mutex_lock+0x12d/0xae0
[  800.469911][T16103]        tcm_alloc_inst+0x61/0x190
[  800.475005][T16103]        usb_get_function_instance+0xd9/0x2e0
[  800.481050][T16103]        function_make+0x118/0x350
[  800.486146][T16103]        configfs_mkdir+0x511/0x9e0
[  800.491328][T16103]        vfs_mkdir+0x386/0x570
[  800.496069][T16103]        do_mkdirat+0x1d8/0x440
[  800.500895][T16103]        __x64_sys_mkdirat+0x85/0x90
[  800.506160][T16103]        do_syscall_64+0x4c/0xa0
[  800.511076][T16103]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  800.517471][T16103] 
[  800.517471][T16103] -> #2 (func_lock){+.+.}-{3:3}:
[  800.524570][T16103]        __mutex_lock+0x12d/0xae0
[  800.529575][T16103]        usb_get_function_instance+0x2a/0x2e0
[  800.535623][T16103]        function_make+0x118/0x350
[  800.540712][T16103]        configfs_mkdir+0x511/0x9e0
[  800.545894][T16103]        vfs_mkdir+0x386/0x570
[  800.550634][T16103]        do_mkdirat+0x1d8/0x440
[  800.555464][T16103]        __x64_sys_mkdirat+0x85/0x90
[  800.560725][T16103]        do_syscall_64+0x4c/0xa0
[  800.565657][T16103]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  800.572051][T16103] 
[  800.572051][T16103] -> #1 (gadget_subsys.su_mutex){+.+.}-{3:3}:
[  800.580273][T16103]        __mutex_lock+0x12d/0xae0
[  800.585279][T16103]        uvcg_streaming_header_allow_link+0x6d/0x4a0
[  800.591936][T16103]        configfs_symlink+0x5a4/0x13c0
[  800.597375][T16103]        vfs_symlink+0x245/0x3d0
[  800.602292][T16103]        do_symlinkat+0x1b6/0x400
[  800.607294][T16103]        __x64_sys_symlinkat+0x95/0xa0
[  800.612760][T16103]        do_syscall_64+0x4c/0xa0
[  800.617676][T16103]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  800.624068][T16103] 
[  800.624068][T16103] -> #0 (&sb->s_type->i_mutex_key#38){++++}-{3:3}:
[  800.632743][T16103]        __lock_acquire+0x3a03/0x7ea0
[  800.638106][T16103]        lock_acquire+0x1bc/0x4a0
[  800.643125][T16103]        down_write+0x36/0x60
[  800.647796][T16103]        configfs_depend_item_unlocked+0x14c/0x450
[  800.654290][T16103]        usbg_make_tpg+0x1dd/0x550
[  800.659389][T16103]        target_fabric_make_tpg+0xa0/0x6d0
[  800.665183][T16103]        configfs_mkdir+0x511/0x9e0
[  800.670359][T16103]        vfs_mkdir+0x386/0x570
[  800.675104][T16103]        do_mkdirat+0x1d8/0x440
[  800.679945][T16103]        __x64_sys_mkdirat+0x85/0x90
[  800.685228][T16103]        do_syscall_64+0x4c/0xa0
[  800.690151][T16103]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  800.696572][T16103] 
[  800.696572][T16103] other info that might help us debug this:
[  800.696572][T16103] 
[  800.706786][T16103] Chain exists of:
[  800.706786][T16103]   &sb->s_type->i_mutex_key#38 --> func_lock --> tpg_instances_lock
[  800.706786][T16103] 
[  800.720578][T16103]  Possible unsafe locking scenario:
[  800.720578][T16103] 
[  800.728001][T16103]        CPU0                    CPU1
[  800.733355][T16103]        ----                    ----
[  800.738694][T16103]   lock(tpg_instances_lock);
[  800.743350][T16103]                                lock(func_lock);
[  800.749737][T16103]                                lock(tpg_instances_lock);
[  800.756910][T16103]   lock(&sb->s_type->i_mutex_key#38);
[  800.762348][T16103] 
[  800.762348][T16103]  *** DEADLOCK ***
[  800.762348][T16103] 
[  800.770464][T16103] 4 locks held by syz.1.2938/16103:
[  800.775646][T16103]  #0: ffff888146af0460 (sb_writers#30){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90
[  800.784851][T16103]  #1: ffff8880723224c0 (&sb->s_type->i_mutex_key#7/1){+.+.}-{3:3}, at: filename_create+0x20b/0x450
[  800.795623][T16103]  #2: ffffffff8e2ea510 (&subsys->su_mutex){+.+.}-{3:3}, at: configfs_mkdir+0x4b5/0x9e0
[  800.805347][T16103]  #3: ffffffff8e6067e8 (tpg_instances_lock){+.+.}-{3:3}, at: usbg_make_tpg+0xf5/0x550
[  800.814987][T16103] 
[  800.814987][T16103] stack backtrace:
[  800.820852][T16103] CPU: 0 PID: 16103 Comm: syz.1.2938 Not tainted syzkaller #0
[  800.828304][T16103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  800.838337][T16103] Call Trace:
[  800.841599][T16103]  <TASK>
[  800.844515][T16103]  dump_stack_lvl+0x188/0x24e
[  800.849173][T16103]  ? load_image+0x410/0x410
[  800.853650][T16103]  ? show_regs_print_info+0x12/0x12
[  800.858856][T16103]  ? print_circular_bug+0x12b/0x1a0
[  800.864045][T16103]  check_noncircular+0x2f8/0x400
[  800.868971][T16103]  ? print_deadlock_bug+0x5d0/0x5d0
[  800.874153][T16103]  ? lockdep_lock+0xf1/0x1f0
[  800.878726][T16103]  ? _find_first_zero_bit+0xd2/0x100
[  800.883990][T16103]  __lock_acquire+0x3a03/0x7ea0
[  800.888831][T16103]  ? verify_lock_unused+0x140/0x140
[  800.894032][T16103]  ? __mutex_trylock_common+0x15c/0x260
[  800.899595][T16103]  lock_acquire+0x1bc/0x4a0
[  800.904105][T16103]  ? configfs_depend_item_unlocked+0x14c/0x450
[  800.910265][T16103]  ? __might_sleep+0xd0/0xd0
[  800.914844][T16103]  ? read_lock_is_recursive+0x10/0x10
[  800.920229][T16103]  ? __mutex_trylock_common+0x15c/0x260
[  800.925774][T16103]  ? usbg_make_tpg+0xf5/0x550
[  800.930442][T16103]  ? mutex_lock_nested+0x10/0x10
[  800.935363][T16103]  down_write+0x36/0x60
[  800.939502][T16103]  ? configfs_depend_item_unlocked+0x14c/0x450
[  800.945639][T16103]  configfs_depend_item_unlocked+0x14c/0x450
[  800.951602][T16103]  usbg_make_tpg+0x1dd/0x550
[  800.956174][T16103]  ? snprintf+0xe5/0x140
[  800.960401][T16103]  ? usbg_drop_tport+0x20/0x20
[  800.965145][T16103]  ? vscnprintf+0x80/0x80
[  800.969461][T16103]  ? __kmem_cache_alloc_node+0x19d/0x270
[  800.975071][T16103]  target_fabric_make_tpg+0xa0/0x6d0
[  800.980334][T16103]  ? target_fabric_release_wwn+0xa0/0xa0
[  800.985944][T16103]  configfs_mkdir+0x511/0x9e0
[  800.990606][T16103]  vfs_mkdir+0x386/0x570
[  800.994847][T16103]  do_mkdirat+0x1d8/0x440
[  800.999159][T16103]  ? vfs_mkdir+0x570/0x570
[  801.003558][T16103]  __x64_sys_mkdirat+0x85/0x90
[  801.008302][T16103]  do_syscall_64+0x4c/0xa0
[  801.012699][T16103]  ? clear_bhb_loop+0x60/0xb0
[  801.017354][T16103]  ? clear_bhb_loop+0x60/0xb0
[  801.022016][T16103]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  801.027909][T16103] RIP: 0033:0x7f89bf19e559
[  801.032305][T16103] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  801.051888][T16103] RSP: 002b:00007f89bd3f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  801.060279][T16103] RAX: ffffffffffffffda RBX: 00007f89bf425fa0 RCX: 00007f89bf19e559
[  801.068244][T16103] RDX: 00000000000001ff RSI: 0000200000000380 RDI: ffffffffffffff9c
[  801.076192][T16103] RBP: 00007f89bf2358b0 R08: 0000000000000000 R09: 0000000000000000
[  801.084140][T16103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  801.092087][T16103] R13: 00007f89bf426038 R14: 00007f89bf425fa0 R15: 00007ffe71042b18
[  801.100042][T16103]  </TASK>
[  801.103125][    C0] virtqueue callback for ffff8881426d3e00 (ffffffff858ab7a0)
[  801.110497][    C0] virtqueue callback for ffff88801ef28400 (ffffffff84767210)
[  801.117874][    C0] virtqueue interrupt with no work for ffff88801ef28200
[  801.124780][    C0] virtqueue interrupt with no work for ffff88801ef28000
[  801.132621][T11348] Added buffer head 0 to ffff88801ef28400
[  801.153589][T16056] kcov: kcov_task_exit: t = ffff88802400da00, kcov->t = ffff88802400da00
[  801.162352][T16107] kcov: kcov_start: t = ffff88807c71da00, size = 524288, area = ffffc9000fdfc000
[  801.171632][T16108] kcov: kcov_start: t = ffff88803d485a00, size = 524288, area = ffffc90019e1f000
[  801.182734][    C0] No more buffers in queue
[  801.187174][    C0] Receiving skb proto 0x0800 len 52 type 0
[  801.193010][    C0] Receiving skb proto 0x0800 len 52 type 0
[  801.198796][    C0] Receiving skb proto 0x0800 len 52 type 0
[  801.204589][    C0] No more buffers in queue
[  801.209048][    C0] tcp_conntracks: 
[  801.209057][    C0] syn=0 ack=1 fin=1 rst=0 old=3 new=4
[  801.218149][    C0] tcp_conntracks: 
[  801.218157][    C0] syn=0 ack=1 fin=1 rst=0 old=4 new=6
[  801.227284][    C0] tcp_conntracks: 
[  801.227292][    C0] syn=0 ack=1 fin=1 rst=0 old=6 new=6
[  801.236468][    C0] nf_conntrack: normal packet for ffff888077d6e600
[  801.242980][    C0] tcp_conntracks: 
[  801.242986][    C0] syn=0 ack=1 fin=0 rst=0 old=6 new=7
[  801.252084][    C0] No more buffers in queue
[  801.256478][    C0] eth0: xmit ffff88801aefddc0 42:01:0a:80:00:01
[  801.262717][    C0] Added buffer head 5 to ffff88802658a000
[  801.268466][    C0] virtqueue callback for ffff88802658a000 (ffffffff858ab890)
[  801.276325][    C0] nf_conntrack: normal packet for ffff888077d6e600
[  801.282858][    C0] tcp_conntracks: 
[  801.282866][    C0] syn=0 ack=1 fin=0 rst=0 old=7 new=7
[  801.291988][    C0] No more buffers in queue
[  801.296382][    C0] eth0: xmit ffff888061c98000 42:01:0a:80:00:01
[  801.302621][    C0] Added buffer head 1 to ffff88802718c800
[  801.308317][    C0] virtqueue callback for ffff88802718c800 (ffffffff858ab890)
[  801.316277][    C0] Sent skb ffff88801aefddc0
[  801.320791][    C0] No more buffers in queue
[  801.325219][    C0] Sent skb ffff888061c98000
[  801.329703][    C0] No more buffers in queue
[  801.335626][T11348] nf_conntrack: normal packet for ffff88804c171800
[  801.353917][T16109] kcov: kcov_start: t = ffff888025073c00, size = 524288, area = ffffc90011201000
[  801.363464][T16110] kcov: kcov_start: t = ffff8880759e1e00, size = 524288, area = ffffc9001ba23000
[  801.408942][T16113] kcov: kcov_start: t = ffff88807406da00, size = 524288, area = ffffc900126c1000
[  801.422579][T16114] kcov: kcov_start: t = ffff888079dc5a00, size = 524288, area = ffffc9001be24000
[  801.480340][T16106] kcov: kcov_task_exit: t = ffff88807c719e00, kcov->t = ffff88807c719e00
[  801.488853][T16108] kcov: kcov_task_exit: t = ffff88803d485a00, kcov->t = ffff88803d485a00
[  801.497341][T16110] kcov: kcov_task_exit: t = ffff8880759e1e00, kcov->t = ffff8880759e1e00
[  801.506154][T16114] kcov: kcov_task_exit: t = ffff888079dc5a00, kcov->t = ffff888079dc5a00
[  801.553623][T16107] kcov: kcov_task_exit: t = ffff88807c71da00, kcov->t = ffff88807c71da00
[  801.562153][T16109] kcov: kcov_task_exit: t = ffff888025073c00, kcov->t = ffff888025073c00
[  801.570598][T16113] kcov: kcov_task_exit: t = ffff88807406da00, kcov->t = ffff88807406da00
[  801.591931][T16116] kcov: kcov_start: t = ffff88802e380000, size = 524288, area = ffffc90005071000
[  801.633762][T16119] kcov: kcov_start: t = ffff88807cecbc00, size = 524288, area = ffffc9000f5fa000
[  801.671128][T16120] async_waiting @ 16120
[  801.683998][T16120] async_continuing @ 16120 after 0 usec
[  801.702172][T16094] kcov: kcov_task_exit: t = ffff88802b93bc00, kcov->t = ffff88802b93bc00
[  801.723170][T16124] async_waiting @ 16124
[  801.737084][T16124] async_continuing @ 16124 after 0 usec
[  801.778451][T16125] kcov: kcov_start: t = ffff888025070000, size = 524288, area = ffffc900109ff000
[  801.787850][T16126] async_waiting @ 16126
[  801.805020][T16126] async_continuing @ 16126 after 0 usec
[  801.829577][T16128] kcov: kcov_start: t = ffff88807aeabc00, size = 524288, area = ffffc90012205000
[  801.873791][T16130] async_waiting @ 16130
[  801.881320][T16131] async_waiting @ 16131
[  801.894152][T16130] async_continuing @ 16130 after 0 usec
[  801.901015][T16131] async_continuing @ 16131 after 0 usec
[  801.981750][T16133] async_waiting @ 16133
[  801.991516][T16133] async_continuing @ 16133 after 0 usec
[  802.072834][T11348] nf_conntrack: normal packet for ffff88804c170000
[  802.084516][T16116] kcov: kcov_task_exit: t = ffff88802e380000, kcov->t = ffff88802e380000
[  802.093054][T16119] kcov: kcov_task_exit: t = ffff88807cecbc00, kcov->t = ffff88807cecbc00
[  802.101505][T16128] kcov: kcov_task_exit: t = ffff88807aeabc00, kcov->t = ffff88807aeabc00
[  802.109947][    C0] virtqueue callback for ffff88801ef28400 (ffffffff84767210)
[  802.117328][    C0] virtqueue interrupt with no work for ffff88801ef28200
[  802.124234][    C0] virtqueue interrupt with no work for ffff88801ef28000
[  802.131522][ T3600] Added buffer head 0 to ffff88801ef28400
[  802.137326][T16125] kcov: kcov_task_exit: t = ffff888025070000, kcov->t = ffff888025070000
[  802.177557][ T3934] Deleting a9fe0000/16 dsfield=0x00 t=ffff88807e6676b0
[  802.252486][ T5099] bond2: (slave veth3): Send learning packet: mac 2a:78:b5:00:b4:3a vlan 0
[  802.278800][ T5099] bond2: (slave veth0_virt_wifi): Send learning packet: mac aa:aa:aa:aa:aa:2d vlan 0
[  803.108322][    C0] virtqueue callback for ffff88801ef28400 (ffffffff84767210)
[  803.115741][    C0] virtqueue interrupt with no work for ffff88801ef28200
[  803.122656][    C0] virtqueue interrupt with no work for ffff88801ef28000
[  803.129653][ T3600] Added buffer head 0 to ffff88801ef28400
[  803.412207][ T5099] bond2: (slave veth3): Send learning packet: mac 2a:78:b5:00:b4:3a vlan 0
[  803.441788][ T5099] bond2: (slave veth0_virt_wifi): Send learning packet: mac aa:aa:aa:aa:aa:2d vlan 0
[  803.694830][ T3934] Deleting a9fe0000/16 dsfield=0x00 t=ffff88807e6676b0
[  803.777779][T16103] TARGET_CORE[usb_gadget]: Allocated portal_group for endpoint: 6001405c935d7912, Proto: 6, Portal Tag: 1
[  803.820021][T16103] kcov: kcov_task_exit: t = ffff88802cd00000, kcov->t = ffff88802cd00000
[  804.108260][    C0] virtqueue callback for ffff88801ef28400 (ffffffff84767210)
[  804.115657][    C0] virtqueue interrupt with no work for ffff88801ef28200
[  804.122569][    C0] virtqueue interrupt with no work for ffff88801ef28000
[  804.129547][T11348] Added buffer head 0 to ffff88801ef28400
[  804.391977][    C0] net_ratelimit: 10 callbacks suppressed
[  804.391989][    C0] wireguard: wg0: Sending keepalive packet to peer 82 ([::1]:20003/0%0)
[  804.406389][T11348] nf_conntrack: normal packet for ffff88804c171800
[  804.428955][    C0] wireguard: wg2: Receiving keepalive packet from peer 85 ([::1]:20001/0%0)
[  804.472367][    C0] wireguard: wg0: Sending keepalive packet to peer 81 ([::1]:20002/0%0)
[  804.498806][    C0] wireguard: wg1: Receiving keepalive packet from peer 83 ([::1]:20001/0%0)
[  804.592393][ T5124] bond2: (slave veth3): Send learning packet: mac 2a:78:b5:00:b4:3a vlan 0
[  804.618002][ T5124] bond2: (slave veth0_virt_wifi): Send learning packet: mac aa:aa:aa:aa:aa:2d vlan 0
[  805.108197][    C0] virtqueue callback for ffff88801ef28400 (ffffffff84767210)
[  805.115594][    C0] virtqueue interrupt with no work for ffff88801ef28200
[  805.122531][    C0] virtqueue interrupt with no work for ffff88801ef28000
[  805.129509][ T3600] Added buffer head 0 to ffff88801ef28400
[  805.250740][ T3934] Deleting a9fe0000/16 dsfield=0x00 t=ffff88807e6676b0
[  805.272846][    C0] wireguard: wg1: Handshake for peer 15 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 9)
[  805.284472][    C0] wireguard: wg2: Handshake for peer 18 (127.0.0.1:20002) did not complete after 5 seconds, retrying (try 9)
[  805.296026][    C0] wireguard: wg0: Handshake for peer 13 ([::1]:20002/0%0) did not complete after 5 seconds, retrying (try 2)
[  805.307556][    C0] virtqueue callback for ffff8881426d3e00 (ffffffff858ab7a0)
[  805.314937][    C0] wireguard: wg1: Handshake for peer 16 (127.0.0.1:20003) did not complete after 20 attempts, giving up
[  805.326444][    C0] No more buffers in queue
[  805.330854][    C0] Receiving skb proto 0x0806 len 28 type 1
[  805.336657][    C0] No more buffers in queue
[  805.341116][    C0] No more buffers in queue
[  805.345544][    C0] eth0: xmit ffff88804bbd23c0 42:01:0a:80:00:01
[  805.351765][    C0] Added buffer head 5 to ffff88802658a000
[  805.357473][    C0] virtqueue callback for ffff88802658a000 (ffffffff858ab890)
[  805.364980][ T8561] wireguard: wg1: Sending handshake initiation to peer 15 ([::1]:20001/0%0)
[  805.374098][ T3602] sd 0:0:1:0: cmd ffff8880292ecf60 CDB: 0x2a
[  805.380146][ T5124] wireguard: wg2: Sending handshake initiation to peer 18 (127.0.0.1:20002)
[  805.389023][ T5099] wireguard: wg0: Sending handshake initiation to peer 13 ([::1]:20002/0%0)
[  805.402104][ T3602] Added buffer head 59 to ffff888141249800
[  805.411387][ T5099] nf_conntrack: new packet for ffff88805f5bb080
[  805.417663][ T5099] nf_nat: Already setup manip DST for ct ffff88805f5bb080 (status bits 0x188)
[  805.426502][ T5099] nf_nat: Already setup manip SRC for ct ffff88805f5bb080 (status bits 0x188)
[  805.435765][ T5124] wireguard: wg2: No route to 127.0.0.1:20002, error -101
[  805.443169][ T8561] nf_conntrack: new packet for ffff88805f5ba900
[  805.449407][ T8561] nf_nat: Already setup manip DST for ct ffff88805f5ba900 (status bits 0x188)
[  805.458262][ T8561] nf_nat: Already setup manip SRC for ct ffff88805f5ba900 (status bits 0x188)
[  805.471702][    C0] virtqueue callback for ffff888141249800 (ffffffff85445db0)
[  805.479076][    C0] sd 0:0:1:0: cmd ffff8880292ecf60 response 0 status 0x0 sense_len 0
[  805.487118][    C0] No more buffers in queue
[  805.533267][    C0] wireguard: wg0: Sending keepalive packet to peer 81 ([::1]:20002/0%0)
[  805.541751][    C0] Sent skb ffff88804bbd23c0
[  805.546274][    C0] No more buffers in queue
[  805.553297][ T1045] sd 0:0:1:0: cmd ffff8880273fd920 CDB: 0x35
[  805.559317][ T1045] Added buffer head 59 to ffff888141249800
[  805.568527][    C0] virtqueue callback for ffff888141249800 (ffffffff85445db0)
[  805.575895][    C0] sd 0:0:1:0: cmd ffff8880273fd920 response 0 status 0x0 sense_len 0
[  805.583948][    C0] No more buffers in queue
[  805.609009][ T1045] sd 0:0:1:0: cmd ffff8880292ed320 CDB: 0x2a
[  805.615090][ T1045] Added buffer head 59 to ffff888141249800
[  805.622203][    C0] wireguard: wg1: Receiving keepalive packet from peer 83 ([::1]:20001/0%0)
[  805.630879][    C0] virtqueue callback for ffff888141249800 (ffffffff85445db0)
[  805.630896][    C0] sd 0:0:1:0: cmd ffff8880292ed320 response 0 status 0x0 sense_len 0
[  805.630909][    C0] No more buffers in queue
[  805.651303][ T1045] sd 0:0:1:0: cmd ffff8880273fd920 CDB: 0x35
[  805.657308][ T1045] Added buffer head 59 to ffff888141249800
[  805.663483][    C0] virtqueue callback for ffff888141249800 (ffffffff85445db0)
[  805.670839][    C0] sd 0:0:1:0: cmd ffff8880273fd920 response 0 status 0x0 sense_len 0
[  805.678883][    C0] No more buffers in queue
[  805.911975][    C0] wireguard: wg0: Handshake for peer 14 ([::1]:20003/0%0) did not complete after 5 seconds, retrying (try 2)
[  805.924191][ T5099] nf_conntrack: new packet for ffff888079695200
[  805.930450][ T5099] nf_nat: Already setup manip DST for ct ffff888079695200 (status bits 0x188)
[  805.939313][ T5099] nf_nat: Already setup manip SRC for ct ffff888079695200 (status bits 0x188)
[  805.948619][ T5124] bond2: (slave veth3): Send learning packet: mac 2a:78:b5:00:b4:3a vlan 0
[  805.967438][ T5124] bond2: (slave veth0_virt_wifi): Send learning packet: mac aa:aa:aa:aa:aa:2d vlan 0
[  806.108134][    C0] virtqueue callback for ffff88801ef28400 (ffffffff84767210)
[  806.115534][    C0] virtqueue interrupt with no work for ffff88801ef28200
[  806.122446][    C0] virtqueue interrupt with no work for ffff88801ef28000
[  806.129429][ T3600] Added buffer head 0 to ffff88801ef28400
[  806.393320][ T5124] sd 0:0:1:0: cmd ffff8880292ed6e0 CDB: 0x2a
[  806.413074][ T5124] Added buffer head 59 to ffff888141249800
[  806.434754][ T5124] sd 0:0:1:0: cmd ffff8880292edaa0 CDB: 0x2a
[  806.456489][ T5124] Added buffer head 135 to ffff888141249800
[  806.478120][ T5124] sd 0:0:1:0: cmd ffff8880292ed320 CDB: 0x2a
[  806.499827][ T5124] Added buffer head 54 to ffff888141249800
[  806.527000][ T5124] sd 0:0:1:0: cmd ffff8880292ede60 CDB: 0x2a
[  806.547708][ T5124] Added buffer head 132 to ffff888141249800
[  806.572590][    C0] virtqueue callback for ffff888141249800 (ffffffff85445db0)
[  806.579980][    C0] sd 0:0:1:0: cmd ffff8880292edaa0 response 0 status 0x0 sense_len 0
[  806.588028][    C0] sd 0:0:1:0: cmd ffff8880292ed6e0 response 0 status 0x0 sense_len 0
[  806.596068][    C0] sd 0:0:1:0: cmd ffff8880292ed320 response 0 status 0x0 sense_len 0
[  806.604106][    C0] sd 0:0:1:0: cmd ffff8880292ede60 response 0 status 0x0 sense_len 0
[  806.612141][    C0] No more buffers in queue
[  807.050114][ T3934] Deleting a9fe0000/16 dsfield=0x00 t=ffff88807e6676b0
[  807.093298][   T57] bond2: (slave veth3): Send learning packet: mac 2a:78:b5:00:b4:3a vlan 0
[  807.108059][    C0] virtqueue callback for ffff88801ef28400 (ffffffff84767210)
[  807.115446][    C0] virtqueue interrupt with no work for ffff88801ef28200
[  807.122353][    C0] virtqueue interrupt with no work for ffff88801ef28000
[  807.129343][T11348] Added buffer head 0 to ffff88801ef28400
[  807.140574][   T57] bond2: (slave veth0_virt_wifi): Send learning packet: mac aa:aa:aa:aa:aa:2d vlan 0
[  807.432178][T11348] nf_conntrack: normal packet for ffff88804c171800
[  808.108005][    C0] virtqueue callback for ffff88801ef28400 (ffffffff84767210)
[  808.115402][    C0] virtqueue interrupt with no work for ffff88801ef28200
[  808.122318][    C0] virtqueue interrupt with no work for ffff88801ef28000
[  808.129323][ T3600] Added buffer head 0 to ffff88801ef28400
[  808.262461][ T5099] bond2: (slave veth3): Send learning packet: mac 2a:78:b5:00:b4:3a vlan 0
[  808.288173][ T5099] bond2: (slave veth0_virt_wifi): Send learning packet: mac aa:aa:aa:aa:aa:2d vlan 0
[  808.473828][ T3600] nf_conntrack: clean_from_lists(ffff88804c170300)
[  808.480355][ T3600] nf_conntrack: nf_ct_destroy(ffff88804c170300)
[  808.486839][ T1273] No more buffers in queue
[  808.491251][ T1273] eth0: xmit ffff888072cdb140 ff:ff:ff:ff:ff:ff
[  808.497492][ T1273] Added buffer head 5 to ffff88802658a000
[  808.503199][    C0] virtqueue callback for ffff88802658a000 (ffffffff858ab890)
[  808.510823][   T57] nf_conntrack: new packet for ffff88805f5ba180
[  808.517071][   T57] nf_nat: Already setup manip DST for ct ffff88805f5ba180 (status bits 0x188)
[  808.525912][   T57] nf_nat: Already setup manip SRC for ct ffff88805f5ba180 (status bits 0x188)
[  808.535575][ T1273] ieee802154 phy0 wpan0: encryption failed: -22
[  808.541859][ T1273] ieee802154 phy1 wpan1: encryption failed: -22
[  808.551009][    C0] Sent skb ffff888072cdb140
[  808.555548][    C0] No more buffers in queue
[  808.580084][ T3600] nf_conntrack: nf_ct_destroy: returning ct=ffff88804c170300 to slab
[  808.626997][ T3600] nf_conntrack: clean_from_lists(ffff88804c170480)
[  808.652327][ T3600] nf_conntrack: nf_ct_destroy(ffff88804c170480)
[  808.676952][ T3600] nf_conntrack: nf_ct_destroy: returning ct=ffff88804c170480 to slab
[  808.698754][ T3934] Deleting a9fe0000/16 dsfield=0x00 t=ffff88807e6676b0
[  808.715226][T11348] nf_conntrack: clean_from_lists(ffff888079694300)
[  808.721739][T11348] nf_conntrack: nf_ct_destroy(ffff888079694300)
[  808.757543][T11348] nf_conntrack: nf_ct_destroy: returning ct=ffff888079694300 to slab
[  808.790010][ T3600] nf_conntrack: clean_from_lists(ffff88804c170d80)
[  808.806104][ T3600] nf_conntrack: nf_ct_destroy(ffff88804c170d80)
[  808.829140][ T3600] nf_conntrack: nf_ct_destroy: returning ct=ffff88804c170d80 to slab
[  808.859176][T11348] nf_conntrack: clean_from_lists(ffff88804c171380)
[  808.878462][T11348] nf_conntrack: nf_ct_destroy(ffff88804c171380)
[  808.902147][T11348] nf_conntrack: nf_ct_destroy: returning ct=ffff88804c171380 to slab
[  808.935445][T11348] nf_conntrack: clean_from_lists(ffff888077d6e900)
[  808.964540][T11348] nf_conntrack: nf_ct_destroy(ffff888077d6e900)
[  808.986613][T11348] nf_conntrack: nf_ct_destroy: returning ct=ffff888077d6e900 to slab
[  809.034404][T11348] nf_conntrack: clean_from_lists(ffff88804c170a80)
[  809.062762][T11348] nf_conntrack: nf_ct_destroy(ffff88804c170a80)
[  809.084646][T11348] nf_conntrack: nf_ct_destroy: returning ct=ffff88804c170a80 to slab
[  809.107947][    C0] virtqueue callback for ffff88801ef28400 (ffffffff84767210)
[  809.115332][    C0] virtqueue interrupt with no work for ffff88801ef28200
[  809.122246][    C0] virtqueue interrupt with no work for ffff88801ef28000
[  809.137755][T11348] Added buffer head 0 to ffff88801ef28400
[  809.167490][T11348] nf_conntrack: clean_from_lists(ffff88807cb6f500)
[  809.196793][T11348] nf_conntrack: nf_ct_destroy(ffff88807cb6f500)
[  809.220687][T11348] nf_conntrack: nf_ct_destroy: returning ct=ffff88807cb6f500 to slab
[  809.254928][T11348] nf_conntrack: clean_from_lists(ffff888077d6ef00)
[  809.280005][T11348] nf_conntrack: nf_ct_destroy(ffff888077d6ef00)
[  809.303022][T11348] nf_conntrack: nf_ct_destroy: returning ct=ffff888077d6ef00 to slab
[  809.335121][T11348] nf_conntrack: clean_from_lists(ffff88804c171c80)
[  809.359318][T11348] nf_conntrack: nf_ct_destroy(ffff88804c171c80)
[  809.382780][T11348] nf_conntrack: nf_ct_destroy: returning ct=ffff88804c171c80 to slab
[  809.425161][T11348] nf_conntrack: clean_from_lists(ffff88804c171b00)
[  809.450171][T11348] nf_conntrack: nf_ct_destroy(ffff88804c171b00)
[  809.456760][   T57] bond2: (slave veth3): Send learning packet: mac 2a:78:b5:00:b4:3a vlan 0
[  809.485039][   T57] bond2: (slave veth0_virt_wifi): Send learning packet: mac aa:aa:aa:aa:aa:2d vlan 0
[  809.494737][T11348] nf_conntrack: nf_ct_destroy: returning ct=ffff88804c171b00 to slab
[  809.541067][T11348] nf_conntrack: clean_from_lists(ffff88807cb6fc80)
[  809.566652][T11348] nf_conntrack: nf_ct_destroy(ffff88807cb6fc80)
[  809.589072][T11348] nf_conntrack: nf_ct_destroy: returning ct=ffff88807cb6fc80 to slab
[  809.632254][T11348] nf_conntrack: clean_from_lists(ffff88802b47b200)
[  809.657248][T11348] nf_conntrack: nf_ct_destroy(ffff88802b47b200)
[  809.679231][T11348] nf_conntrack: nf_ct_destroy: returning ct=ffff88802b47b200 to slab
[  809.831989][    C0] net_ratelimit: 14 callbacks suppressed
[  809.832002][    C0] wireguard: wg0: Sending keepalive packet to peer 81 ([::1]:20002/0%0)
[  809.861587][    C0] wireguard: wg1: Receiving keepalive packet from peer 83 ([::1]:20001/0%0)
[  810.107889][    C0] virtqueue callback for ffff88801ef28400 (ffffffff84767210)
[  810.115288][    C0] virtqueue interrupt with no work for ffff88801ef28200
[  810.122216][    C0] virtqueue interrupt with no work for ffff88801ef28000
[  810.129267][ T3600] Added buffer head 0 to ffff88801ef28400