last executing test programs:

7m25.318204936s ago: executing program 2 (id=162):
socket(0x10, 0x3, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000001040)=ANY=[@ANYBLOB="9feb010018000000894963dcb53ec7b0d6000000000c0000000c00000002000000000000000000000b00000000"], 0x0, 0x26, 0x0, 0x1}, 0x28)
clock_gettime(0x17, 0x0)
ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000300)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}, 0x9, 'syzkaller0\x00'})
syz_emit_ethernet(0x16, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa0800000030008829"], 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xfec6, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1, 0x8, 0x0, 0x0}}, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001100)={'erspan0\x00'})
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$EBT_SO_GET_INIT_INFO(r4, 0x0, 0x82, &(0x7f0000000500)={'filter\x00', 0x0, 0x0, 0x0, [0x8, 0x5, 0x4, 0x1, 0x7fff, 0x100000005]}, &(0x7f0000000080)=0xd)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x40010}, 0x0)
r5 = socket(0x2, 0x80805, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001b80), r6)
sendmsg$IEEE802154_LIST_IFACE(r6, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x14, r7, 0x50be6fea6f3bdfbb, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000)
ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r0, 0x40109441, &(0x7f00000010c0)={0x8000000000000001, 0x4, 0x7})
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_NEW(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x2000000}, 0x40000)
socket$nl_generic(0x10, 0x3, 0x10)
connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x1, @empty, 'ip_vti0\x00'}}, 0x1e)
r9 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r9, &(0x7f0000000200)={0xa, 0x3, 0x400, @remote, 0x9}, 0x1c)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00'], 0x20}, 0x1, 0x0, 0x0, 0x4800}, 0x20000000)
getsockopt$bt_hci(r5, 0x84, 0x80, 0x0, &(0x7f0000001080))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001340)={0x6, 0x10, &(0x7f00000012c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xe}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc2a}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f00000007c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', r3}, 0x94)
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatasum}, {@compress_force}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@flushoncommit}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x30, 0x37, 0x65]}}, {@nodiscard}]}, 0xfb, 0x510a, &(0x7f000000d000)="$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")
stat(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240))

7m21.711818972s ago: executing program 2 (id=180):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x53345000)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
landlock_create_ruleset(&(0x7f0000000240)={0x0, 0x0, 0x3}, 0x18, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sendto$inet6(0xffffffffffffffff, 0x0, 0xff32, 0x8fc, &(0x7f0000000480)={0xa, 0x3a, 0x9, @loopback={0xff00000000000000}, 0x2}, 0x1c)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

7m19.483348128s ago: executing program 2 (id=194):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./gadget\x00', &(0x7f0000000000)='gadgetfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x802, 0x0)
write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f)
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, 0x0)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_DEL_RULE(r1, &(0x7f0000000f00)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000f40)={0x4a4, 0x3f4, 0x10, 0x70bd25, 0x25dfdbfb, {0x6, 0x0, 0x32, [0x1, 0x0, 0x0, 0x107, 0x8, 0x47, 0xfffffffe, 0xfffffff7, 0x10000, 0x4, 0x3740c000, 0x5, 0x9ceb, 0x2, 0xd, 0x2, 0x5, 0x2, 0x2, 0x9, 0x5, 0x80000001, 0x0, 0x7, 0xf, 0xffffff5c, 0x8, 0x4ef, 0xfffffff8, 0x3ff, 0x100, 0x4, 0x0, 0x2, 0x8, 0xb3, 0x8, 0x401, 0x3, 0x4, 0xcd4b, 0x80000000, 0xffffff96, 0xfffffbff, 0xe, 0x800, 0x8, 0x4ec, 0x6, 0x47, 0x7, 0x1, 0x6, 0xfffffff8, 0x1, 0x7fffffff, 0xb3, 0x9, 0x9, 0x0, 0x8b, 0x7, 0x0, 0x4], [0x6, 0x5, 0x1, 0x6, 0x0, 0x7d2e3264, 0x1ff, 0x2, 0x4, 0x81, 0xfffffd4a, 0x100, 0x6, 0x4, 0x4, 0x7ff, 0x7, 0xfff, 0x0, 0x9ada, 0x80000001, 0x4, 0x3, 0x1, 0x10, 0x3, 0x1, 0x100, 0x0, 0x4, 0x2, 0x400000, 0x1, 0x7, 0x7, 0xfffffffc, 0x5, 0x2, 0xffffa8b3, 0x0, 0xbec6, 0x8, 0x638280ba, 0x6, 0xd, 0xfffffae3, 0x80000000, 0x4, 0x3, 0x401, 0x6, 0x7f, 0x1, 0x2, 0xd9f5, 0x1000, 0x6, 0xffffffff, 0xac, 0x6, 0x5, 0x0, 0x5, 0x3], [0x80, 0x7, 0x6, 0xa13, 0x7, 0xb, 0x4, 0x1000, 0x7def34e0, 0xc, 0x0, 0x6, 0x7fff, 0x10000, 0x3ff, 0x1, 0x5, 0x5, 0x8, 0xb, 0x5, 0x9, 0x8, 0x1, 0x9, 0x5, 0xfff, 0x1, 0x9, 0x80000000, 0x101, 0x3, 0x8, 0x1, 0x553d, 0x1ff, 0xffffffff, 0x401, 0x3ff, 0x5, 0xd44, 0x40, 0x0, 0x55, 0x8, 0x1ff, 0x3824, 0x1, 0xaab, 0x5, 0x9, 0x1, 0x7, 0x8, 0x0, 0xe498, 0x6, 0x1, 0x401, 0xe4, 0x2, 0x2], [0x6fcd, 0x5c99, 0x8, 0x1ff, 0x6, 0x3, 0x5, 0x1, 0x7, 0x9, 0x7, 0x2, 0x40, 0x5, 0xf, 0x1ff, 0xbc4, 0xfffffa39, 0x8, 0x6, 0x84d, 0xf, 0x46, 0x80000001, 0x0, 0x49964eaa, 0x5, 0x5, 0xd, 0xe421, 0x400, 0x1000, 0x5, 0x6, 0x8, 0x8d8, 0x8, 0x3, 0x7f, 0x0, 0x2, 0x400, 0x5, 0x7, 0x3, 0x401, 0x5, 0x77e, 0x10, 0x9, 0xd45, 0x3, 0x8114, 0xfff, 0x7ff, 0x74ed, 0x7fffffff, 0xffffffff, 0x7fff, 0x4, 0x2, 0x8, 0x101, 0x4], 0x81, ['\x00', '\xaa\xaa\xaa\xaa\xaa', 'debugfs\x00', '\xf1.!p\x03H\'\xd6z\xa8\x8c\x89\x83y\x9b\xb9\x95]\x11b\x13R.\xd9\"A\xdaY\xd7^\xa0\x9a\x9eF\x83.\x0f$|ax\xbdk\x91\xdb\x11J\v\xdb\xa9\xe1\x8e\tuK\xf6\xe7.\xe6\xb5\xb7\xb0\xcev~\x9cA\xed\xef\x84F\x00\xa9+\x06baA}\x84\xc5\x1e\x7f$\x81\xa1f)\x14\xefe\xb8\x90\xc4\x8c\xfbb\fue\x1d2K\xce\xca\n\x86O\x89\xe8', '\xaa\xaa\xaa\xaa\xaa']}, ["", "", "", "", "", "", "", "", ""]}, 0x4a4}, 0x1, 0x0, 0x0, 0x20000010}, 0x41)
r2 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0, &(0x7f0000000300)=<r5=>0x0)
syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)=<r6=>0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = dup(r7)
syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x3e80, 0x800, 0x1, 0x32c, 0x0, r2}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x200015a, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x40, 0x10001, 0x2a5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa7bf, 0x80, 0x7, 0xffffffff, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xba}}], 0x1, &(0x7f0000000340)={0x2e, 0x50, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x4, 0x5c0, 0x0, 0x0}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94)

7m17.184249849s ago: executing program 2 (id=206):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x53345000)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
landlock_create_ruleset(&(0x7f0000000240)={0x0, 0x0, 0x3}, 0x18, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sendto$inet6(0xffffffffffffffff, 0x0, 0xff32, 0x8fc, &(0x7f0000000480)={0xa, 0x3a, 0x9, @loopback={0xff00000000000000}, 0x2}, 0x1c)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

7m16.279456016s ago: executing program 2 (id=212):
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x200041a, &(0x7f0000000300)=ANY=[@ANYBLOB="6465636f6d706f73652c6e6f626172726965722c6e6c733d69736f383835392d342c0000eb25ba11b788a23b6013ffe5be87fc27664d64fc0e4dd46a49567c77a44ad292e9ed9872dc027d083d66154fe9c6fa40cb8833ec287f8eb2ef9e4c9c6ae7b8da63b8266bd0f93bb7f4b826c2c59bdcfac9aa018a168337d4fddf10b9274d217f93c391ba0112113fee152a52ab91faf3e116456889a3b530bd345c1bed71f1f605c74ee209509d4275f16a8a4e18a5eca2dc8256559f25a39e59e97509fb488db249ecae8d5a2341f85ca194d28668ae031384066e9dc4190c4d9bdeeaeb6503303cac86f2c0b9f933ca805833"], 0x1, 0x5c8, &(0x7f00000006c0)="$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")
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xa5e438, &(0x7f00000004c0)=ANY=[@ANYRESDEC, @ANYRESHEX=0x0, @ANYRES64=0x0, @ANYRES8, @ANYRESHEX, @ANYRESDEC, @ANYRES16, @ANYBLOB="37b57cfa7d0121345c29b6064f49a0f95b88671b8e9149556e5ff3c7012f7856b6557be6b51d61efea623114a0b4b52f68387d2040dd08c5aa753b596ede3f3d637f96752310a389efcd8cf335ca9dbbbc10bda7a16342968c9ab4fd1ac65da604cd9b42d6d0dc0e895e0b2f42822f1b342f88a8d607008d20b22b776a70a07a2c53fc32be094c857279c58542b176bfbcc6c7e9808da687b44a8b21d23cc2f80050f8fd457f5a5595226d2008bcded226ab2e75d00ab5592daa23e809e04c2b370af460ae93b7efc32bf174830779058ad75290b9abb59be5f8859001e651c1d4", @ANYRES32, @ANYRESDEC, @ANYRESDEC, @ANYRESDEC, @ANYRES16, @ANYRESHEX=0x0], 0xb, 0x0, &(0x7f0000000000))
socket$kcm(0x2, 0xa, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000100)={0x0, 0xffff, 0x0, 0x0, <r0=>0xffffffffffffffff})
sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$pppl2tp(0x18, 0x1, 0x1)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/warn_count', 0x48000, 0x0)

7m15.692893213s ago: executing program 32 (id=212):
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x200041a, &(0x7f0000000300)=ANY=[@ANYBLOB="6465636f6d706f73652c6e6f626172726965722c6e6c733d69736f383835392d342c0000eb25ba11b788a23b6013ffe5be87fc27664d64fc0e4dd46a49567c77a44ad292e9ed9872dc027d083d66154fe9c6fa40cb8833ec287f8eb2ef9e4c9c6ae7b8da63b8266bd0f93bb7f4b826c2c59bdcfac9aa018a168337d4fddf10b9274d217f93c391ba0112113fee152a52ab91faf3e116456889a3b530bd345c1bed71f1f605c74ee209509d4275f16a8a4e18a5eca2dc8256559f25a39e59e97509fb488db249ecae8d5a2341f85ca194d28668ae031384066e9dc4190c4d9bdeeaeb6503303cac86f2c0b9f933ca805833"], 0x1, 0x5c8, &(0x7f00000006c0)="$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")
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xa5e438, &(0x7f00000004c0)=ANY=[@ANYRESDEC, @ANYRESHEX=0x0, @ANYRES64=0x0, @ANYRES8, @ANYRESHEX, @ANYRESDEC, @ANYRES16, @ANYBLOB="37b57cfa7d0121345c29b6064f49a0f95b88671b8e9149556e5ff3c7012f7856b6557be6b51d61efea623114a0b4b52f68387d2040dd08c5aa753b596ede3f3d637f96752310a389efcd8cf335ca9dbbbc10bda7a16342968c9ab4fd1ac65da604cd9b42d6d0dc0e895e0b2f42822f1b342f88a8d607008d20b22b776a70a07a2c53fc32be094c857279c58542b176bfbcc6c7e9808da687b44a8b21d23cc2f80050f8fd457f5a5595226d2008bcded226ab2e75d00ab5592daa23e809e04c2b370af460ae93b7efc32bf174830779058ad75290b9abb59be5f8859001e651c1d4", @ANYRES32, @ANYRESDEC, @ANYRESDEC, @ANYRESDEC, @ANYRES16, @ANYRESHEX=0x0], 0xb, 0x0, &(0x7f0000000000))
socket$kcm(0x2, 0xa, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000100)={0x0, 0xffff, 0x0, 0x0, <r0=>0xffffffffffffffff})
sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$pppl2tp(0x18, 0x1, 0x1)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/warn_count', 0x48000, 0x0)

6m6.477498002s ago: executing program 33 (id=582):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$loop(0x0, 0xffff, 0x14f600)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000000000000000000000400", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}})
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000240)={{0x3}, 'port0\x00', 0x80, 0x806, 0x6c, 0x6, 0x5, 0x7, 0x6, 0x0, 0x0, 0x4})
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6)
openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000500), 0x1, 0x0)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x40040)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r3, 0x2, &(0x7f0000000000)=0x80000000000003)
timer_settime(0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x83)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, [@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf}, {0x85, 0x0, 0x0, 0x72}}]}, &(0x7f0000000340)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

4m5.471894599s ago: executing program 34 (id=1039):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0x32, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x8}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x1, 0x2, 0x1, 0x100}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x10, 0xfff}, 0x94)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)}, 0xb}], 0x1, 0x40000162, 0x0)

3m18.438508852s ago: executing program 7 (id=1126):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, 0x0)
mq_notify(r1, &(0x7f0000000100)={0x0, 0x17, 0x0, @thr={&(0x7f0000001680), 0x0}})
mq_timedsend(r1, 0x0, 0x0, 0x5, 0x0)
execve(&(0x7f0000000040)='./trace/file0\x00', 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f000001b7c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, 0x0, 0x30}}], 0x1, 0x4008804)
syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"])
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002c40), 0xffffffffffffffff)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000010c0)=@ipv4_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0x2, 0x10, 0x0, 0x0, 0xfe, 0x2, 0xfe, 0x9, 0x500}, [@RTA_DST={0x8, 0x1, @remote}]}, 0x24}}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000002e80)={'wpan3\x00', <r5=>0x0})
sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000002f80)={&(0x7f0000002e40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002f40)={&(0x7f0000002ec0)={0x4c, r3, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc003}, 0x40000)
clock_gettime(0x0, &(0x7f0000002c80)={<r6=>0x0, <r7=>0x0})
recvmmsg(r4, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/151, 0x97}], 0x1, &(0x7f0000000100)=""/84, 0x54}, 0x3}, {{&(0x7f0000000180)=@generic, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/76, 0x4c}], 0x1, &(0x7f00000002c0)=""/55, 0x37}, 0x9}, {{&(0x7f0000000300)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000380)=""/220, 0xdc}, {&(0x7f0000000480)=""/222, 0xde}, {&(0x7f0000000580)=""/172, 0xac}], 0x3, &(0x7f0000000680)=""/247, 0xf7}, 0x6}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000780)=""/129, 0x81}, {&(0x7f0000000840)=""/86, 0x56}, {&(0x7f00000008c0)=""/64, 0x40}], 0x3, &(0x7f0000000940)=""/92, 0x5c}, 0x81}, {{&(0x7f00000009c0)=@hci, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000a40)=""/132, 0x84}, {&(0x7f0000000b00)=""/20, 0x14}, {&(0x7f0000000b40)=""/59, 0x3b}, {&(0x7f0000000b80)=""/18, 0x12}, {&(0x7f0000000bc0)=""/17, 0x11}, {&(0x7f0000000c00)=""/35, 0x23}, {&(0x7f0000000c40)=""/80, 0x50}], 0x7, &(0x7f0000000d40)=""/101, 0x65}, 0x8}, {{&(0x7f0000000dc0)=@nfc_llcp, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000e40)=""/42, 0x2a}], 0x1, &(0x7f0000000ec0)=""/143, 0x8f}, 0x46b}, {{&(0x7f0000000f80)=@xdp, 0x80, &(0x7f00000022c0)=[{&(0x7f0000001000)=""/124, 0x7c}, {&(0x7f0000001080)=""/188, 0xbc}, {&(0x7f0000001140)=""/252, 0xfc}, {&(0x7f0000001240)=""/4096, 0x1000}, {&(0x7f0000002240)=""/82, 0x52}], 0x5}, 0x95df}, {{&(0x7f0000002340)=@caif=@dgm, 0x80, &(0x7f00000024c0)=[{&(0x7f00000023c0)=""/183, 0xb7}, {&(0x7f0000002480)=""/35, 0x23}], 0x2, &(0x7f0000002500)=""/177, 0xb1}, 0x9}, {{&(0x7f00000025c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000002980)=[{&(0x7f0000002640)=""/6, 0x6}, {&(0x7f0000002680)=""/219, 0xdb}, {&(0x7f0000002780)}, {&(0x7f00000027c0)=""/114, 0x72}, {&(0x7f0000002840)=""/18, 0x12}, {&(0x7f0000002880)=""/218, 0xda}], 0x6}, 0x8}], 0x9, 0x20, &(0x7f0000002cc0)={r6, r7+60000000})
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002780), r0)
symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/functions/uvc.0/control/class/ss/h\x00')
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000002d40)={0x24, r3, 0x8, 0x70bd2c, 0x25dfdc03, {}, [@NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040010}, 0x0)

3m11.738885626s ago: executing program 7 (id=1144):
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00')
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x44000}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480))
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
inotify_init()
socket$inet6_tcp(0xa, 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x682, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={<r3=>0xffffffffffffffff}, 0x106, 0x3}}, 0x20)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r3, 0x10000}}, 0x10)
writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)

3m11.595607326s ago: executing program 7 (id=1145):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, 0x0, 0x4000000)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x20000010)

3m11.461592873s ago: executing program 7 (id=1146):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./gadget\x00', &(0x7f0000000000)='gadgetfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x802, 0x0)
write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, 0x0)
r2 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_DEL_RULE(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000f40)={0x4a4, 0x3f4, 0x10, 0x70bd25, 0x25dfdbfb, {0x6, 0x0, 0x32, [0x1, 0x0, 0x0, 0x107, 0x8, 0x47, 0xfffffffe, 0xfffffff7, 0x10000, 0x4, 0x3740c000, 0x5, 0x9ceb, 0x2, 0xd, 0x2, 0x5, 0x2, 0x2, 0x9, 0x5, 0x80000001, 0x0, 0x7, 0xf, 0xffffff5c, 0x8, 0x4ef, 0xfffffff8, 0x3ff, 0x100, 0x4, 0x0, 0x2, 0x8, 0xb3, 0x8, 0x401, 0x3, 0x4, 0xcd4b, 0x80000000, 0xffffff96, 0xfffffbff, 0xe, 0x800, 0x8, 0x4ec, 0x6, 0x47, 0x7, 0x1, 0x6, 0xfffffff8, 0x1, 0x7fffffff, 0xb3, 0x9, 0x9, 0x0, 0x8b, 0x7, 0x0, 0x4], [0x6, 0x5, 0x1, 0x6, 0x0, 0x7d2e3264, 0x1ff, 0x2, 0x4, 0x81, 0xfffffd4a, 0x100, 0x6, 0x4, 0x4, 0x7ff, 0x7, 0xfff, 0x0, 0x9ada, 0x80000001, 0x4, 0x3, 0x1, 0x10, 0x3, 0x1, 0x100, 0x0, 0x4, 0x2, 0x400000, 0x1, 0x7, 0x7, 0xfffffffc, 0x5, 0x2, 0xffffa8b3, 0x0, 0xbec6, 0x8, 0x638280ba, 0x6, 0xd, 0xfffffae3, 0x80000000, 0x4, 0x3, 0x401, 0x6, 0x7f, 0x1, 0x2, 0xd9f5, 0x1000, 0x6, 0xffffffff, 0xac, 0x6, 0x5, 0x0, 0x5, 0x3], [0x80, 0x7, 0x6, 0xa13, 0x7, 0xb, 0x4, 0x1000, 0x7def34e0, 0xc, 0x0, 0x6, 0x7fff, 0x10000, 0x3ff, 0x1, 0x5, 0x5, 0x8, 0xb, 0x5, 0x9, 0x8, 0x1, 0x9, 0x5, 0xfff, 0x1, 0x9, 0x80000000, 0x101, 0x3, 0x8, 0x1, 0x553d, 0x1ff, 0xffffffff, 0x401, 0x3ff, 0x5, 0xd44, 0x40, 0x0, 0x55, 0x8, 0x1ff, 0x3824, 0x1, 0xaab, 0x5, 0x9, 0x1, 0x7, 0x8, 0x0, 0xe498, 0x6, 0x1, 0x401, 0xe4, 0x2, 0x2], [0x6fcd, 0x5c99, 0x8, 0x1ff, 0x6, 0x3, 0x5, 0x1, 0x7, 0x9, 0x7, 0x2, 0x40, 0x5, 0xf, 0x1ff, 0xbc4, 0xfffffa39, 0x8, 0x6, 0x84d, 0xf, 0x46, 0x80000001, 0x0, 0x49964eaa, 0x5, 0x5, 0xd, 0xe421, 0x400, 0x1000, 0x5, 0x6, 0x8, 0x8d8, 0x8, 0x3, 0x7f, 0x0, 0x2, 0x400, 0x5, 0x7, 0x3, 0x401, 0x5, 0x77e, 0x10, 0x9, 0xd45, 0x3, 0x8114, 0xfff, 0x7ff, 0x74ed, 0x7fffffff, 0xffffffff, 0x7fff, 0x4, 0x2, 0x8, 0x101, 0x4], 0x81, ['\x00', '\xaa\xaa\xaa\xaa\xaa', 'debugfs\x00', '\xf1.!p\x03H\'\xd6z\xa8\x8c\x89\x83y\x9b\xb9\x95]\x11b\x13R.\xd9\"A\xdaY\xd7^\xa0\x9a\x9eF\x83.\x0f$|ax\xbdk\x91\xdb\x11J\v\xdb\xa9\xe1\x8e\tuK\xf6\xe7.\xe6\xb5\xb7\xb0\xcev~\x9cA\xed\xef\x84F\x00\xa9+\x06baA}\x84\xc5\x1e\x7f$\x81\xa1f)\x14\xefe\xb8\x90\xc4\x8c\xfbb\fue\x1d2K\xce\xca\n\x86O\x89\xe8', '\xaa\xaa\xaa\xaa\xaa']}, ["", "", "", "", "", "", "", "", ""]}, 0x4a4}, 0x1, 0x0, 0x0, 0x20000010}, 0x41)
r3 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0, &(0x7f0000000300)=<r6=>0x0)
syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)=<r7=>0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = dup(r8)
syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x3e80, 0x800, 0x1, 0x32c, 0x0, r3}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x200015a, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x40, 0x10001, 0x2a5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa7bf, 0x80, 0x7, 0xffffffff, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xba}}], 0x1, &(0x7f0000000340)={0x2e, 0x50, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x4, 0x5c0, 0x0, 0x0}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94)

3m10.579362492s ago: executing program 7 (id=1151):
r0 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
close(r1)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0)
ioctl$TCSETS(r2, 0x5402, &(0x7f0000000000)={0x7, 0xd, 0x0, 0xffdffffc, 0x6, "00001000"})
write$binfmt_aout(r2, &(0x7f0000000100)=ANY=[], 0xff2e)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x2, 0x0, 0x83, "00000000000000000000ffff00000000000002"})
ioctl$TCSETS(r2, 0x5402, &(0x7f0000000080)={0x0, 0xfffffffd, 0x0, 0x6, 0x12, "e315bc1cc24ff7b7cdb242e1ff0aa6905446b3"})
r3 = syz_open_pts(r2, 0x0)
r4 = dup3(r3, r2, 0x0)
read$FUSE(r4, &(0x7f0000003f80)={0x2020}, 0x2020)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)

3m10.025981247s ago: executing program 7 (id=1154):
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000240)={'sit0\x00', 0x0})
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x51a}}, './file0\x00'})
close(0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000002040)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002000)={&(0x7f0000000f40)=ANY=[@ANYBLOB="ac1000000300000428bd7000fedbdf251b000000910048800400088004007b8008003c00000000001400c000fe8000000000000000000000000000bb04003d80c524a865322d6f16cb2bd9336717bc0e4255461b319a51bd8636572d70bb919d65af524ca95cca1203c4692bfad5c5a6da33d72cd700eaa17a04ea9be09948e09fdd4462e69bb24d90531c1471c2c3ca3f9b156824ae4d14b0abc8dcffd1ad1ceb4c173ff70000000410e800265afddf14e1818d66f6c2b7ee156738ba5223c1931cba27bfe755ec4e7362748ea70c2402e126b27687a52b033a36899d3183c48151ed2d23092da3451cadb7aac3aedcb9f172fa58e940b8ce02f6b1ca6e3b9d37468f97eb9923cc10bc498ab05d8a8f07dbd3118e37a2a943dfe5db46c3a02e61677de3e9aa53211195c75f4cdf4fc662fbe2a4f2d6e2062004fc626f6358cdd1bde5acb3425911c709b166402ca45b6c3de1c302361b10c6a40fa5db71653e31bf11d6be0763c0ec2d6ced48890719070e3d06f91432386f8949781833d6e210127ad676250d556e69e05ea7a9d630501e13f60ea32df14bddbcdf2da99627faa5a5a4f1adc28170b0daa97d7f1de87dc07f5b50f1d0cff4733b6a09ad70eb757b8f071b6fc242a61942167b21efe599939cba827f934ff64e9b5ce40835329b59cbf923d4a4029b9bb2942a965c8f96eb98142074cef1911aa27d90c4dd33cdc7031d643ac69c2f021f5aa68a77f4298a3d821849a663c2f366ad772597f267e4a800538ed3ce86804773ef9f2ba5e67132744ff2509e646c69a78d1bc7d8ed84ee30be6dba0dbebb81d59c5cb8098d5b2196e2cd681685c9c0b1870f7875bf6fb8bcf229057300970928709635eebad69e4e1597e4bef8a93417a1569647870f827457dc8084e4f89f3998b70972319a4b5db9628bd27916cf128b17c0a25b29517b0ecab2704791f8ee7a7e661c5e51d2165f824a2731c2fd8405489221ace6eb79311697ab02cca0136af44febf05f176fa0634f621feb7c29b22e6e8038b6a70e7c4649d3ea0bb6bf0b321de5de6335cacad1f08f4fb2daaad67824adcbddd8059982b95a6886d2c8d78ea4f1154f556a1426f2b4b2973ad9adca4b0a10e3b2fc6a6e35f5d62467f454834a9ad38d961e88f8b9d608bd0ae5a47364adf6d49e557e7c9596ba1123136b3bf880c9607f4719ff258910b56d4b43d8faf04f1cf20c30069979d3ce53700e129e8051938047f494d24952e6734feb10c4975638b987f969b9f553c00980f7f11cf84369b3744b39e2a088e05b0f9df184db2f1647ff9f127453db2a7d103f30732ddf3ced54b129da78145737d360dfbd98dc6f28911ec24236559eb0450d0d619a30e9ede48e634e07344c44b84641d65ffd6a368d95adb8bdcb004924d3885ebf9f4cacb5b1aa3894b0a7eae368a159178a830826778c526140295c582af461a16d4a3928f66a52adcda4f0dc75477a1a6da45670d9d76899cef5aeb5fb9cb0e49ead9d357bfdbd2c4371814cfd8ab5e6f39f86baf22dfb5471bb51347c0003fb998fe8beca4c6e27b15c8eb4d8486fc548cd7ee382df9b548b300f14d6bbcd237b8d9f0b56d6695c6c397cca96a6040564f994d4d5c76259c99a5963ef17b6ab0888ac09794a071d62bd67969cbeca0a7d329a72e20647a05c0ab5f76b55fb113751ad29cc0828f91c9cdc041fb7a6339c97f9df7db79ddb101d7fa76a96cd776e7abd3e2903813ae089b6529ca355e8a9b25e45c10ee832ffd386dd6f50b308f949c7eff0208031d39b13d53b942ab9e8f1c7bb80631a7f26a9966462cfbeb7685d9a67a9c2b484233dad62a0bc150d8858c36a3e8e1554796eb75bd1c4326a7a8414f6d3293988844a1e60e3691de99a46bb1a7bc5d1a837fa318c7e1a6f934a2969518be3bc4b074c6628aca0aeced87195824183a6d7ad842566427d3a84149d38930974944debc609bcde21c6de072d89097a8ccc4080d32ed14de140d893fa181ccc8e9e6b16d380fed753c5ad7fa7dd2b860fe0c22f85d0d2d2943f936afc79b471078f5856c956f9d066464a2d295edd306681fbc76f0cea16bd37f7c61ddeed745000f0c1846d6bb82e2d24b02801b7a7e2f8d5fbe90aad44b99b99525c27aa7fa3af70135ae323cef42ce31e4048670164735c5c50ab5206afc10af6d54579e45adc2fd65d7cf64420679a2791eeb82aebf80922d482bb70015645f7763d51ce8d954aa0be26fe9ca72430d5b011a9a48ce70589ce6ef2e94229bc3547fc6cc5b359825022de992ed732fa175250e1dede44fd7564a4901c0d411c18129a8cec9331747b9d619aadbd97a7296a0e126a720d6343997c04598e06658ba562050737b810b102202c5b03c834771ab50b49c8e30f266808fcffda4e5e3d6865a777f536921fbd3aa91a415a8861e9dffb930d5c1b8865de2cb59d89c1d8cc35b5b499c2ed354339a3911bc39cf15af1b4b5d7a9ca8b1be75d836fd935ac5d317b01afff5a926280a66c0ec319cbecce09b0c6440b7bc9524e79ca056335cc6a15702a5d8ff83855cb0aace35da1efb4c3318236ec4d5505e68c1298d614e5cf17bcac26d993d8271f5ec5ea00f856bbfe60b7bf941e279b964e50b01e799da001ca25bebaa09ca4aa8614fb11adfd027ccfdf33802be6874169ed8f9b57b1b9f9a39262683a23c6454d321bca74dc7dd91a02e7aae233f8325fe027112b3d61e23ba4fa92ae61fa606e7678a1ab46bfdecad8e0f00be28f9e46cb97125de16b40ee0614ea5c8d90b49cada827d0d2eaa72b1ecce31744247d2655c66e26997ce970285b47e19222bc4e7c7b91ef62d6af4281da43c164148785d1f456960977be425342c09e0c1abfb0481c59dd8a88b88ae2722ee06335523baca22e1544a04010401f9ad5d1c222b4bf15338c94aa9b7cf12624ff05236b8842a3a97a80dc28133173f870bac1bd15ba3648fe169c76f9b48122c39d866bd8fa5e3d5c1f003aa20f28d3ef014a6a8b7b33cf5fc205a2663d821b0b4cefaa5a471ef1d9f277e7d7ac0f09dda8ddcb61d187b62c466ae4e59c9c853dbdde3646a4781340b22e4c66af4c8869093195da8411fdc13de7056e22a984611c54e3a29733aee9a8b28492245a3012ea7cbd7679c5af64adc3491f3304894f001dadc2dec9c13a6a5ed73a5c93488178dfd13abdfcefd934abe75b7d8c9ee15e977c4b54e106365267dde7fa918b46e290708b4d056c704c15c18626636928a6081999ffa759c14331ffadc17491ec1a0c509395340417f540344d6c5ca700b3fd78bf3e81ed00c2495e353edf5c6838a9b4874cde95046b3491ffbcfcff145818442defefe3a530919d26f90f13844344f37a9b1429292b28b101e61aa39c4150c43490de699bcad775ccc3cd7b546117fa573da5c0e09bb5a86a0d985c5fe38e69ddf9a79c9bfb5d27900c762f5d64dc3dfc31a47069fcb18e0326446ab004a080e58aa38b9a623eb12b2cdd4a2005c7daf79da9e0abec248264c5a48516992be5aa06141d611ea666dc829b3eac15456bdfdea93e9eb74479d92207767b7aab3fb261ce282c3a16e78b56103a00dbbe06f3c3f68d4df53032b5c7eb9c6ed580d73b235f624ddc8d03c79a11bff6b95ba5c64227772cabea5c1e7aa48cd6109732a55a045a9d94deb05da8b43e3a22704bf43bcf704fd6718bdf0f82a1c07dc02f867ba3759e7b2977e5427d9a0b2e17c88c4948cd6d2de91c7f9828f077b996809f1cca296eca6b39f22080ef745f63058349c46afd45655367f3e8cc8177cda03cfbe71f40bdc4c9dade06091720a1a4241442a6b2377257dc112e39cce4d0b4385b6e018f6a36539e2bf9336cfa6f2bfb1959024d9f04a5efad47e99610b02122168f90d323d4fb2f73cf822df4658db732bc4063cc028c037807d9fc8b4c8c1057f1e9f1cd04aa2826ab707fad0f85c3c35e90651340850a34da715754be609e2671e035ff7ac35710f7fd86ea92f75001d2c3101026ac37cb2460c014661d84900461e28b8325b9b1c22604b6e2d1f0a249dd8e497b392ee946969cd19ebca0d54105c2b7b35886719ac88350ed4b7d8ce814c2b43db09e48aba5411447b1c834a309109f2d96ddf42a150b83092a15d320e11eafffb8a64ec880a371d723430436c42d46a49a92474f50052a2c54ed1b90eb8b754fc485d7dd1a622f64ce9413f7e8d644d59851ec25b27d11d74a504c85982cb81c3839b8ce9674bcbea3bcd982f5cd2414d168bd299b4aae0a075fc7d6702b88cb3e09c7cf2e65bc5e43865ece583bc1f3939879a8643dd9c849beb4c75ae5a25b07d16d915b74202df510674ef9f3a4c56bb2e87efb761e2fb6fe47061dcc5982de89fc960e97b2d03dfd641f33e2b777022ed30ad076057f45fb2dcfa21927045c47c0273ea1b0f59433bfca7617a53106903e2446715ad7918097638efbf2e96920710d099d0428286fdcef35f04fb8054baf08a25f9cb90ef3f0abd0b5fafc4b1182800125a3b6af841a2dbe75fd5f5c615a8c02a313bdcb5e1374859b9ed284a915e810cdc65ab3d090912f67b5ed34070271e94979f7f118dce16515bf60543179dc9d6c139176671b76f46298f10e58baa842f5d8c142ed80447f3b32777cc4508aaa13174e470246e7172df052a61c10d1e64f07618257c9048190ad19cfa5c6b375480e8d01a42cb557c51cf6f932cba0fd56e44b290e69699b98f749b419f9d2150b264052cc8ed7d940a055b152587ec402fd3f876fbaa58300e4437a7b35ac065bc292909ded17c06f1dd12d83f330a7ebb036b95892502f8a582a3c3b6ab07b9b30bb76b7f277988e75b64179176f94f430fc792a41a0ff4616fbefd16f10c8b7c5ba3d9ff7518e5b381fb5fcd4a885b70875a751cdf77b08f1378d46a7f028d442cf5ea1a019363d4ef658f644dd6c61ba12d73fb8a453e3a4658b7db3a8b3fd912ac025bbe6f10543563d485c8ee820763da74987fc95a36151985c213b4cb4ccfc05472345f1c6e0cd0ac314a18fd4406c3b639232728c7db4d77dfa2a3316b4d5f5964fb1dbc565466abbcb7930862058de4d29c4e210e15430b2016115b915870802915f37c0adc8b17142951dc3162e9f1aa3fe03620cdf5e792287e4816140c6e63e12e044f377dbf4239ae9df240c50446547fc63cb25a39a144ea5c719a64620a78b43d34fc4dc24ba662699cbe7b9bdbe0f43f211543f3d10260746c56ef9dd497582b7be192ac2db4086ce360bb66a6e9a6bb55f95677524124935ad9da9661b430f6139f7c7cc6aee6283acd34ff5042f142926b816ca044e7b7189e381b42fee95a39ba9b13b8555074fb69f1db0d18b9beb018f68bfc95db48bd725c1c17746729202beb2f2e923de5f72985a18bca9e0109864771fac246e562ff33cccf5c199287ab2bbdaefe374ac0ea6edd277b4c79a25ba78e39868e5441796bff9c31d277a02efadeb5b4456ed7b58748947109a6a382a8d02fbeca934125e30e501ba2cf3b4b3fc6f4b09d7ebe2e3978feabfa28e5dc21ca1a798e3f76d25b07dfabd0d1959c5586e3b11a5891342b5b08a42243a1c03ddd6f7cf714dd91db447959750e447c3a798bcd42904864cddb382cc7567fa3894606ee29b4960c7a8a3812e0989878d185aa6cbfefa6b66f53bb64ace678c7533327ce58a933e228b426c9dbd8adf68322e3a9842ac6d020dc3552e34ab9e8a7a204b4e0ccd0af43f150260e6d30bb78c3c684e15bc017e778fb9334e64c9900459e312f8202fd039fb31f2e62f07f15bbcfd188529680633f57049a43e8e052f6e83a2e005d7cecca9b868b90af16203d47280895c81bee047f659c089cb9a4cce26a7f822ea809f98ceb9d67a3742eda2a38bc1eaa14ec1c2177447a9a88c30f69a7e1f8cc1d879e740c68508d5c77ee81ad71e03504c73da42ddcdee6d8a7859cf50cbba111b45460fc102d203ce75206c1493887b7937574698fa5dc3a63dc91fa1568a444c33"], 0x10ac}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000005)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000f00), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x80, r2, 0x1, 0x0, 0x0, {}, [{@pci={{0x8, 0x8e}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x80}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x4c0200, 0x0)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000600)={0x0, r3}, 0x8)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
preadv(r4, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/194, 0xc2}], 0x1, 0x5fae, 0x5)
r5 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00')
r6 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000240)={0x80000011})
r7 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0xfffff, r7)
keyctl$clear(0x7, r7)
epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r5, &(0x7f0000000c40))

3m8.775786263s ago: executing program 35 (id=1154):
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000240)={'sit0\x00', 0x0})
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x51a}}, './file0\x00'})
close(0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000002040)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002000)={&(0x7f0000000f40)=ANY=[@ANYBLOB="ac1000000300000428bd7000fedbdf251b000000910048800400088004007b8008003c00000000001400c000fe8000000000000000000000000000bb04003d80c524a865322d6f16cb2bd9336717bc0e4255461b319a51bd8636572d70bb919d65af524ca95cca1203c4692bfad5c5a6da33d72cd700eaa17a04ea9be09948e09fdd4462e69bb24d90531c1471c2c3ca3f9b156824ae4d14b0abc8dcffd1ad1ceb4c173ff70000000410e800265afddf14e1818d66f6c2b7ee156738ba5223c1931cba27bfe755ec4e7362748ea70c2402e126b27687a52b033a36899d3183c48151ed2d23092da3451cadb7aac3aedcb9f172fa58e940b8ce02f6b1ca6e3b9d37468f97eb9923cc10bc498ab05d8a8f07dbd3118e37a2a943dfe5db46c3a02e61677de3e9aa53211195c75f4cdf4fc662fbe2a4f2d6e2062004fc626f6358cdd1bde5acb3425911c709b166402ca45b6c3de1c302361b10c6a40fa5db71653e31bf11d6be0763c0ec2d6ced48890719070e3d06f91432386f8949781833d6e210127ad676250d556e69e05ea7a9d630501e13f60ea32df14bddbcdf2da99627faa5a5a4f1adc28170b0daa97d7f1de87dc07f5b50f1d0cff4733b6a09ad70eb757b8f071b6fc242a61942167b21efe599939cba827f934ff64e9b5ce40835329b59cbf923d4a4029b9bb2942a965c8f96eb98142074cef1911aa27d90c4dd33cdc7031d643ac69c2f021f5aa68a77f4298a3d821849a663c2f366ad772597f267e4a800538ed3ce86804773ef9f2ba5e67132744ff2509e646c69a78d1bc7d8ed84ee30be6dba0dbebb81d59c5cb8098d5b2196e2cd681685c9c0b1870f7875bf6fb8bcf229057300970928709635eebad69e4e1597e4bef8a93417a1569647870f827457dc8084e4f89f3998b70972319a4b5db9628bd27916cf128b17c0a25b29517b0ecab2704791f8ee7a7e661c5e51d2165f824a2731c2fd8405489221ace6eb79311697ab02cca0136af44febf05f176fa0634f621feb7c29b22e6e8038b6a70e7c4649d3ea0bb6bf0b321de5de6335cacad1f08f4fb2daaad67824adcbddd8059982b95a6886d2c8d78ea4f1154f556a1426f2b4b2973ad9adca4b0a10e3b2fc6a6e35f5d62467f454834a9ad38d961e88f8b9d608bd0ae5a47364adf6d49e557e7c9596ba1123136b3bf880c9607f4719ff258910b56d4b43d8faf04f1cf20c30069979d3ce53700e129e8051938047f494d24952e6734feb10c4975638b987f969b9f553c00980f7f11cf84369b3744b39e2a088e05b0f9df184db2f1647ff9f127453db2a7d103f30732ddf3ced54b129da78145737d360dfbd98dc6f28911ec24236559eb0450d0d619a30e9ede48e634e07344c44b84641d65ffd6a368d95adb8bdcb004924d3885ebf9f4cacb5b1aa3894b0a7eae368a159178a830826778c526140295c582af461a16d4a3928f66a52adcda4f0dc75477a1a6da45670d9d76899cef5aeb5fb9cb0e49ead9d357bfdbd2c4371814cfd8ab5e6f39f86baf22dfb5471bb51347c0003fb998fe8beca4c6e27b15c8eb4d8486fc548cd7ee382df9b548b300f14d6bbcd237b8d9f0b56d6695c6c397cca96a6040564f994d4d5c76259c99a5963ef17b6ab0888ac09794a071d62bd67969cbeca0a7d329a72e20647a05c0ab5f76b55fb113751ad29cc0828f91c9cdc041fb7a6339c97f9df7db79ddb101d7fa76a96cd776e7abd3e2903813ae089b6529ca355e8a9b25e45c10ee832ffd386dd6f50b308f949c7eff0208031d39b13d53b942ab9e8f1c7bb80631a7f26a9966462cfbeb7685d9a67a9c2b484233dad62a0bc150d8858c36a3e8e1554796eb75bd1c4326a7a8414f6d3293988844a1e60e3691de99a46bb1a7bc5d1a837fa318c7e1a6f934a2969518be3bc4b074c6628aca0aeced87195824183a6d7ad842566427d3a84149d38930974944debc609bcde21c6de072d89097a8ccc4080d32ed14de140d893fa181ccc8e9e6b16d380fed753c5ad7fa7dd2b860fe0c22f85d0d2d2943f936afc79b471078f5856c956f9d066464a2d295edd306681fbc76f0cea16bd37f7c61ddeed745000f0c1846d6bb82e2d24b02801b7a7e2f8d5fbe90aad44b99b99525c27aa7fa3af70135ae323cef42ce31e4048670164735c5c50ab5206afc10af6d54579e45adc2fd65d7cf64420679a2791eeb82aebf80922d482bb70015645f7763d51ce8d954aa0be26fe9ca72430d5b011a9a48ce70589ce6ef2e94229bc3547fc6cc5b359825022de992ed732fa175250e1dede44fd7564a4901c0d411c18129a8cec9331747b9d619aadbd97a7296a0e126a720d6343997c04598e06658ba562050737b810b102202c5b03c834771ab50b49c8e30f266808fcffda4e5e3d6865a777f536921fbd3aa91a415a8861e9dffb930d5c1b8865de2cb59d89c1d8cc35b5b499c2ed354339a3911bc39cf15af1b4b5d7a9ca8b1be75d836fd935ac5d317b01afff5a926280a66c0ec319cbecce09b0c6440b7bc9524e79ca056335cc6a15702a5d8ff83855cb0aace35da1efb4c3318236ec4d5505e68c1298d614e5cf17bcac26d993d8271f5ec5ea00f856bbfe60b7bf941e279b964e50b01e799da001ca25bebaa09ca4aa8614fb11adfd027ccfdf33802be6874169ed8f9b57b1b9f9a39262683a23c6454d321bca74dc7dd91a02e7aae233f8325fe027112b3d61e23ba4fa92ae61fa606e7678a1ab46bfdecad8e0f00be28f9e46cb97125de16b40ee0614ea5c8d90b49cada827d0d2eaa72b1ecce31744247d2655c66e26997ce970285b47e19222bc4e7c7b91ef62d6af4281da43c164148785d1f456960977be425342c09e0c1abfb0481c59dd8a88b88ae2722ee06335523baca22e1544a04010401f9ad5d1c222b4bf15338c94aa9b7cf12624ff05236b8842a3a97a80dc28133173f870bac1bd15ba3648fe169c76f9b48122c39d866bd8fa5e3d5c1f003aa20f28d3ef014a6a8b7b33cf5fc205a2663d821b0b4cefaa5a471ef1d9f277e7d7ac0f09dda8ddcb61d187b62c466ae4e59c9c853dbdde3646a4781340b22e4c66af4c8869093195da8411fdc13de7056e22a984611c54e3a29733aee9a8b28492245a3012ea7cbd7679c5af64adc3491f3304894f001dadc2dec9c13a6a5ed73a5c93488178dfd13abdfcefd934abe75b7d8c9ee15e977c4b54e106365267dde7fa918b46e290708b4d056c704c15c18626636928a6081999ffa759c14331ffadc17491ec1a0c509395340417f540344d6c5ca700b3fd78bf3e81ed00c2495e353edf5c6838a9b4874cde95046b3491ffbcfcff145818442defefe3a530919d26f90f13844344f37a9b1429292b28b101e61aa39c4150c43490de699bcad775ccc3cd7b546117fa573da5c0e09bb5a86a0d985c5fe38e69ddf9a79c9bfb5d27900c762f5d64dc3dfc31a47069fcb18e0326446ab004a080e58aa38b9a623eb12b2cdd4a2005c7daf79da9e0abec248264c5a48516992be5aa06141d611ea666dc829b3eac15456bdfdea93e9eb74479d92207767b7aab3fb261ce282c3a16e78b56103a00dbbe06f3c3f68d4df53032b5c7eb9c6ed580d73b235f624ddc8d03c79a11bff6b95ba5c64227772cabea5c1e7aa48cd6109732a55a045a9d94deb05da8b43e3a22704bf43bcf704fd6718bdf0f82a1c07dc02f867ba3759e7b2977e5427d9a0b2e17c88c4948cd6d2de91c7f9828f077b996809f1cca296eca6b39f22080ef745f63058349c46afd45655367f3e8cc8177cda03cfbe71f40bdc4c9dade06091720a1a4241442a6b2377257dc112e39cce4d0b4385b6e018f6a36539e2bf9336cfa6f2bfb1959024d9f04a5efad47e99610b02122168f90d323d4fb2f73cf822df4658db732bc4063cc028c037807d9fc8b4c8c1057f1e9f1cd04aa2826ab707fad0f85c3c35e90651340850a34da715754be609e2671e035ff7ac35710f7fd86ea92f75001d2c3101026ac37cb2460c014661d84900461e28b8325b9b1c22604b6e2d1f0a249dd8e497b392ee946969cd19ebca0d54105c2b7b35886719ac88350ed4b7d8ce814c2b43db09e48aba5411447b1c834a309109f2d96ddf42a150b83092a15d320e11eafffb8a64ec880a371d723430436c42d46a49a92474f50052a2c54ed1b90eb8b754fc485d7dd1a622f64ce9413f7e8d644d59851ec25b27d11d74a504c85982cb81c3839b8ce9674bcbea3bcd982f5cd2414d168bd299b4aae0a075fc7d6702b88cb3e09c7cf2e65bc5e43865ece583bc1f3939879a8643dd9c849beb4c75ae5a25b07d16d915b74202df510674ef9f3a4c56bb2e87efb761e2fb6fe47061dcc5982de89fc960e97b2d03dfd641f33e2b777022ed30ad076057f45fb2dcfa21927045c47c0273ea1b0f59433bfca7617a53106903e2446715ad7918097638efbf2e96920710d099d0428286fdcef35f04fb8054baf08a25f9cb90ef3f0abd0b5fafc4b1182800125a3b6af841a2dbe75fd5f5c615a8c02a313bdcb5e1374859b9ed284a915e810cdc65ab3d090912f67b5ed34070271e94979f7f118dce16515bf60543179dc9d6c139176671b76f46298f10e58baa842f5d8c142ed80447f3b32777cc4508aaa13174e470246e7172df052a61c10d1e64f07618257c9048190ad19cfa5c6b375480e8d01a42cb557c51cf6f932cba0fd56e44b290e69699b98f749b419f9d2150b264052cc8ed7d940a055b152587ec402fd3f876fbaa58300e4437a7b35ac065bc292909ded17c06f1dd12d83f330a7ebb036b95892502f8a582a3c3b6ab07b9b30bb76b7f277988e75b64179176f94f430fc792a41a0ff4616fbefd16f10c8b7c5ba3d9ff7518e5b381fb5fcd4a885b70875a751cdf77b08f1378d46a7f028d442cf5ea1a019363d4ef658f644dd6c61ba12d73fb8a453e3a4658b7db3a8b3fd912ac025bbe6f10543563d485c8ee820763da74987fc95a36151985c213b4cb4ccfc05472345f1c6e0cd0ac314a18fd4406c3b639232728c7db4d77dfa2a3316b4d5f5964fb1dbc565466abbcb7930862058de4d29c4e210e15430b2016115b915870802915f37c0adc8b17142951dc3162e9f1aa3fe03620cdf5e792287e4816140c6e63e12e044f377dbf4239ae9df240c50446547fc63cb25a39a144ea5c719a64620a78b43d34fc4dc24ba662699cbe7b9bdbe0f43f211543f3d10260746c56ef9dd497582b7be192ac2db4086ce360bb66a6e9a6bb55f95677524124935ad9da9661b430f6139f7c7cc6aee6283acd34ff5042f142926b816ca044e7b7189e381b42fee95a39ba9b13b8555074fb69f1db0d18b9beb018f68bfc95db48bd725c1c17746729202beb2f2e923de5f72985a18bca9e0109864771fac246e562ff33cccf5c199287ab2bbdaefe374ac0ea6edd277b4c79a25ba78e39868e5441796bff9c31d277a02efadeb5b4456ed7b58748947109a6a382a8d02fbeca934125e30e501ba2cf3b4b3fc6f4b09d7ebe2e3978feabfa28e5dc21ca1a798e3f76d25b07dfabd0d1959c5586e3b11a5891342b5b08a42243a1c03ddd6f7cf714dd91db447959750e447c3a798bcd42904864cddb382cc7567fa3894606ee29b4960c7a8a3812e0989878d185aa6cbfefa6b66f53bb64ace678c7533327ce58a933e228b426c9dbd8adf68322e3a9842ac6d020dc3552e34ab9e8a7a204b4e0ccd0af43f150260e6d30bb78c3c684e15bc017e778fb9334e64c9900459e312f8202fd039fb31f2e62f07f15bbcfd188529680633f57049a43e8e052f6e83a2e005d7cecca9b868b90af16203d47280895c81bee047f659c089cb9a4cce26a7f822ea809f98ceb9d67a3742eda2a38bc1eaa14ec1c2177447a9a88c30f69a7e1f8cc1d879e740c68508d5c77ee81ad71e03504c73da42ddcdee6d8a7859cf50cbba111b45460fc102d203ce75206c1493887b7937574698fa5dc3a63dc91fa1568a444c33"], 0x10ac}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000005)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000f00), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x80, r2, 0x1, 0x0, 0x0, {}, [{@pci={{0x8, 0x8e}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x80}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x4c0200, 0x0)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000600)={0x0, r3}, 0x8)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
preadv(r4, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/194, 0xc2}], 0x1, 0x5fae, 0x5)
r5 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00')
r6 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000240)={0x80000011})
r7 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119", 0xfffff, r7)
keyctl$clear(0x7, r7)
epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r5, &(0x7f0000000c40))

3m2.676948989s ago: executing program 8 (id=1174):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f00006dbffc), 0x4)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000d00)="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", 0x3d2}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}, {&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}], 0x3, 0x0, 0x0, 0x40088c5}, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40)

3m2.353719919s ago: executing program 8 (id=1175):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000080)=@filename='mtd0\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='jffs2\x00', 0x0, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000540)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x19}}, @in={0x2, 0x4e22, @loopback}], 0x20)

3m2.057922458s ago: executing program 8 (id=1176):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0ffc40bffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400210000000404000001000000b7050000220000006a0a00fe00000000850000000b000000b7000000592000009500000000000000a3028cb5af6c8f5d76781dcb7729f017"], &(0x7f0000000340)='syzkaller\x00'}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004080000000000000003000000000000000000000003000000000000000000000000000002000000000000000000000011"], 0x0, 0x56}, 0x20)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r1=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000580)=ANY=[], 0xfdef)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETLINK(r4, 0x400454cd, 0x10e)
recvmsg$unix(r2, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x1c0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a000000020000000200000004"], 0x2d)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r6, r7}, 0xc)
write$cgroup_subtree(r5, 0x0, 0x9a)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440), 0x4)

3m0.726008468s ago: executing program 8 (id=1182):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./gadget\x00', &(0x7f0000000000)='gadgetfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x802, 0x0)
write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, 0x0)
r2 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_DEL_RULE(r2, &(0x7f0000000f00)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x41)
r3 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0, &(0x7f0000000300)=<r6=>0x0)
syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)=<r7=>0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = dup(r8)
syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x3e80, 0x800, 0x1, 0x32c, 0x0, r3}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x200015a, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x40, 0x10001, 0x2a5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa7bf, 0x80, 0x7, 0xffffffff, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xba}}], 0x1, &(0x7f0000000340)={0x2e, 0x50, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x4, 0x5c0, 0x0, 0x0}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94)

2m59.173442481s ago: executing program 8 (id=1185):
socket$nl_netfilter(0x10, 0x3, 0xc)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00001, 0x3000007, 0x401d031, 0xffffffffffffffff, 0x0)
ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000440)={'dt2814\x00', [0x300, 0xc0000000, 0x2, 0x400, 0xe, 0x800005, 0x7, 0x6, 0x8, 0x56, 0xffffffff, 0x1, 0x1, 0xfffffffc, 0x10000b, 0x0, 0x5, 0x4007a, 0x3, 0x3, 0x89, 0x12, 0x7f, 0x0, 0x5, 0xe66, 0x1, 0x2000008, 0xa6b3, 0x0, 0x5]})
fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0)
mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x1, 0x3000000, 0x2010, 0xffffffffffffffff, 0x20000000)
syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001380)="e5d7916614f09c6f6683a4afc58a9a1cf87818ec085601b841124207d1565664185d37ddfb0b190688a094fd957cdb73")
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, &(0x7f0000000040)=0x78, 0x4)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000040)={'raw\x00', 0x0, [0x3, 0x41, 0x6, 0x4, 0x20008]}, &(0x7f00000000c0)=0x54)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000c40)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x9, @remote, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="24000000000000002900000032000000ff"], 0x28}}], 0x1, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
socket$inet6(0xa, 0x1, 0x0)
fsopen(&(0x7f0000000080)='hugetlbfs\x00', 0x1)
mmap(&(0x7f00000e1000/0x800000)=nil, 0x800000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x35ddf000)
r1 = syz_pidfd_open(0x0, 0x0)
ioctl$FS_IOC_GETVERSION(r1, 0xff02, 0x0)

2m58.105966588s ago: executing program 8 (id=1192):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f0000000180)={[{@nodioread_nolock}, {@errors_continue}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x4}}, {@noauto_da_alloc}], [{@fscontext={'fscontext', 0x3d, 'user_u'}}]}, 0x4, 0x630, &(0x7f0000000340)="$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")
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a30000000002c000000030a01040000000000000000020000000900010073797a30000000000900030073797a300000000090000000060a01240000000000000000020000000900010073797a30000000000900020073797a30000000006400048060"], 0x104}}, 0x0)

2m57.688083072s ago: executing program 36 (id=1192):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f0000000180)={[{@nodioread_nolock}, {@errors_continue}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x4}}, {@noauto_da_alloc}], [{@fscontext={'fscontext', 0x3d, 'user_u'}}]}, 0x4, 0x630, &(0x7f0000000340)="$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")
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a30000000002c000000030a01040000000000000000020000000900010073797a30000000000900030073797a300000000090000000060a01240000000000000000020000000900010073797a30000000000900020073797a30000000006400048060"], 0x104}}, 0x0)

2m36.457854305s ago: executing program 9 (id=1155):
fstat(0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r1 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f00000004c0)=""/102392, 0x18ff8)
sched_setaffinity(r1, 0x2, &(0x7f0000000000)=0x80000000000003)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
mount(0x0, &(0x7f0000000000)='./pipefs\x00', 0x0, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x25c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a5c000000060a010400000000000000000a0000040900010073797a31000000000900020073797a3200000000300004802c0001800a0001006d6174636800c9211c0002800800024000000002080003000000000008000100736574"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010)

2m34.679949177s ago: executing program 9 (id=1253):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48)
close(0x3)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x200002, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x141e00, 0x0)
close(r3)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240))
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast})
write$cgroup_devices(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="1e033c00008c71ef288563"], 0xffdd)

2m29.111090282s ago: executing program 2 (id=1193):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0ffc40bffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400210000000404000001000000b7050000220000006a0a00fe00000000850000000b000000b7000000592000009500000000000000a3028cb5af6c8f5d76781dcb7729f017"], &(0x7f0000000340)='syzkaller\x00'}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004080000000000000003000000000000000000000003000000000000000000000000000002000000000000000000000011"], 0x0, 0x56}, 0x20)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r1=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000580)=ANY=[], 0xfdef)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETLINK(r4, 0x400454cd, 0x10e)
recvmsg$unix(r2, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x1c0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a000000020000000200000004"], 0x2d)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r6, r7}, 0xc)
write$cgroup_subtree(r5, 0x0, 0x9a)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440), 0x4)

2m18.452073931s ago: executing program 37 (id=1253):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48)
close(0x3)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x200002, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x141e00, 0x0)
close(r3)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240))
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast})
write$cgroup_devices(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="1e033c00008c71ef288563"], 0xffdd)

2m13.963354067s ago: executing program 38 (id=1193):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0ffc40bffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400210000000404000001000000b7050000220000006a0a00fe00000000850000000b000000b7000000592000009500000000000000a3028cb5af6c8f5d76781dcb7729f017"], &(0x7f0000000340)='syzkaller\x00'}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004080000000000000003000000000000000000000003000000000000000000000000000002000000000000000000000011"], 0x0, 0x56}, 0x20)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r1=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000580)=ANY=[], 0xfdef)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETLINK(r4, 0x400454cd, 0x10e)
recvmsg$unix(r2, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x1c0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a000000020000000200000004"], 0x2d)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r6, r7}, 0xc)
write$cgroup_subtree(r5, 0x0, 0x9a)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440), 0x4)

19.620164353s ago: executing program 0 (id=1588):
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa08, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil)
add_key(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000240), 0x75f, 0xa8182)
r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5\x00'/557, 0x1)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='P', 0x1}], 0x1, 0x800000, 0x0)
sendfile(r0, r0, 0x0, 0x24002de8)

18.757481073s ago: executing program 0 (id=1591):
fstat(0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r1 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r2, &(0x7f00000004c0)=""/102392, 0x18ff8)
sched_setaffinity(r1, 0x2, &(0x7f0000000000)=0x80000000000003)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
mount(0x0, 0x0, &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x25c}}, 0x0)

17.38220718s ago: executing program 0 (id=1593):
socket(0x10, 0x3, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000001040)=ANY=[@ANYBLOB="9feb010018000000894963dcb53ec7b0d6000000000c0000000c00000002000000000000000000000b00000000"], 0x0, 0x26, 0x0, 0x1}, 0x28)
clock_gettime(0x17, 0x0)
ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000300)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}, 0x9, 'syzkaller0\x00'})
syz_emit_ethernet(0x16, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa0800000030008829"], 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xfec6, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1, 0x8, 0x0, 0x0}}, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001100)={'erspan0\x00'})
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$EBT_SO_GET_INIT_INFO(r4, 0x0, 0x82, &(0x7f0000000500)={'filter\x00', 0x0, 0x0, 0x0, [0x8, 0x5, 0x4, 0x1, 0x7fff, 0x100000005]}, &(0x7f0000000080)=0xd)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x40010}, 0x0)
r5 = socket(0x2, 0x80805, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001b80), r6)
sendmsg$IEEE802154_LIST_IFACE(r6, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x14, r7, 0x50be6fea6f3bdfbb, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000)
ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r0, 0x40109441, &(0x7f00000010c0)={0x8000000000000001, 0x4, 0x7})
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_NEW(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="34000000000703000000000000000000010000010c0006400000"], 0x34}, 0x1, 0x0, 0x0, 0x2000000}, 0x40000)
socket$nl_generic(0x10, 0x3, 0x10)
connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x1, @empty, 'ip_vti0\x00'}}, 0x1e)
r9 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r9, &(0x7f0000000200)={0xa, 0x3, 0x400, @remote, 0x9}, 0x1c)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00'], 0x20}, 0x1, 0x0, 0x0, 0x4800}, 0x20000000)
getsockopt$bt_hci(r5, 0x84, 0x80, 0x0, &(0x7f0000001080))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001340)={0x6, 0x10, &(0x7f00000012c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xe}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc2a}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f00000007c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', r3}, 0x94)
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatasum}, {@compress_force}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@flushoncommit}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x30, 0x37, 0x65]}}, {@nodiscard}]}, 0xfb, 0x510a, &(0x7f000000d000)="$eJzs3U+IVWUfB/Dnzp1x5lVw7isEtsoikGrh4CYioqtMUFF0y8VgBE4tgnThJEi0EMQW/Vt4S4paSK6kFsksjKA2LqQwArehYS7cKAaSi3Yac8957pz7HO+5d0ZtTD8fmTnnOb/zPOe5l7O43+uccwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACEEF74/bNDVfVT16bPnJtp7jywZebyvul1p0OodbbX8vqOrc++8ua2HS9OxA6zL2fLRqPfkFnX81ljVc/GhX69P6+HEMaSAer58pk1pVGLq3vKA1a6fnH30U17mxuPH27Xr146e7L80lkwsdITWCn5eXVh8Vxqdn6PJHt024VTr9Zzimb90xPuX3kRAMCSTLU6i+7H0fwjbre9P60n7WbSbift+AmhXWwsRzbuqn7z3JDWV2iezSwqjPedZ1LP3/9uu5X2T9pJ1FjCPHt3zSPNRL95ziX1lZonAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ3kkbdHH6qqn7o2febcTHPngS0zl/dNrzsdQqOzvZaVa6vfP9z869utxw78uPmr4xeef6ye94vL0cLO4be48sRkCG8UKhfisBfXhtDqLXSa4cty4a3OynOxAAAAwN3k/s7vkW47i4NjPe1aJ03WOv+iLCxev7j76Ka9zY3HD7frVy+dPbn88Vp9xmvecLxuu7H4UysE4xh/0/EW63HXPaVxqqUjpnn+8fNTf1f1L+X/RnX+j++c/A8AAMDNkP/TcaoNyv/fvfbHJ1X9S/l/Q88hS/k/zjjm/5GwvPwPAAAAd7Lbnf+bpXGqDcr/4y+NfV3Vv5T/p4bL/6PFaceNv8YJ75oMYWrQ1AEAAIA+4v+7L361EPN69s1BmtefevTguarxSvm/OVz+H7ulrwoAAAC4GUe+2P5wVb2U/1vD5f/x2zprAAAAYCne+XDig6p6Kf/PDpf/V+fL/MqHrNNP8a8QDk2GMLGwMpcVfg7tp7sFAAAA4BaJOf3PT3f+ULVfKf/PVd//P97pIF7/33P/v9L1/4VCdte/J90YAAAAgHtR+Xr+eHv87MkF/Z6/P+z1/w/87+CrVccv5f/9w+X/enF5K5//BwAAAMvwX3v+3/bSONUG3f//vo/e/aWqfyn/t4fL/3G5pvjyTtRq2fvz3mQI6xdW8rsJfhMPtyspzI8VCh2tpMe22CMvzI8XCh1zSY/NkyE8uLCyPyn8PxbaSeHK2rxwJCmcjoX8fOgWjiWFE/FM+3xtPt208H0s5BdYzMcrKNZ0L4lIelzt12OhcMMeZ7sHBwAAuKfE8Jxn2bHeZkij7Hxt0A6rB+0wMmiH+qAdRpMd0h37bQ+zvYW4vX1m49Ke/39kuPwf34pV2aLf9f8hXv+fP9ewe/3/bCw0ksJ8LLTSOwa04jGysPtxPEajlfe4sr5bAAAAgLta/F6gvsLzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5h795j5Lrqw4Gf2dd4H97dBH4i5IfAQB3jgtdrOzzUpmKdpioKpaxLSlQhio29Dos32NhOwREgxwalKIKmJRL80SiOEKrzR1KLBAWaRHEjYRQ1D5SqEUmUiLROEFFoGkChEIlUs/ee2Tvn7jw23nW84fORvHNmvud55+E59945FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfjcc/9Jn/rZV/N7fXvToE5dOfPLQ5kuf/fxFZz8YwuTs45UsXBm4+vqJn9984S2H7th4w20nL357X14uj4fB2p+u/M4XY60nV4ZweyWEnjSwbigL9Ob3h2J9bxgK4awwF6iXmBrISqQNh+/3h3AkzAXqVX2vP4ShQuCSh+65+yu1xHX9IawOIVTTNh6vZm30p4Hz+rLAQBrY3ZMFfvVSph74blcWgFMW3wz1F/2xycYMo/OXa/L66120jr2y0uF1x8Ro83w/27zEnSroSx+YPKWnrVQdS6L09jju3bYM3m2l7Xytp634RSr/hvLSXKgaunZM7dx2xcz++EhXGBvrblbTEj3Pjzz/ue0LSS+b12HswOiivA6/+sDqm7vXfuD+29atfvroOw4/c6rd/FFhkxbTS60a8tfcsnkeowmfJ8vg7Vf6lrTKl64Qws5P/N4HW8VL8//R1vP/+HKOt10NuWOtLw5nc/P4yFBMPDeczc1b6VnoGAEAAGDxdRVSZ/5e091jd72nUHykmtRXmv+v6uz4f9wK+WQ+G+3xECZmE4dHQjhn9vEscFNs7uMjIbx5NjXZGNicBI6H8PrZxNp6VUmJFbHEqiTwk+E8MJEETsTAZBL4VgxcmwS+GAPHksD2GDieBC6MgTDdOI7fH87H0XGgPwa2ZhvxWDwL4RfDsbVkWz1WrwoAAGCR5LPD3sa7hXMdTjVDnF4e62+XIZ6B3TRDNakhncHWp1VNa+hpV0NXuxrq4z7Yevilmivtai6dhlFpzHD9L//mQ6GF0vx/vPX8vzpPRyql4/8hbJn9G3N35ZGZenzrZEMGAAAA4BQM/u+T32wVL83/Jzo7/z/uE+kuZA73xd0Qu0ZCGG8MZNX+YTmQHfUezAMAAACwHNSPx9ePhU/nt9kp2ul8upx/coH544H/iXnz9x2/c2ur/pbm/5Odnf8/0HibdeJE7MXXRkJYUQj8IPayFpi1KgZ+/N7GQD7+E3EDXBOryk9MqFd1TSyxNQbGk8CRZiV+WC9xTmMgf7LqjR+uj2M6L1EIAAAAwGkXdwfE4/Lx/P+3/GbjZ1qVK83/ty7s/P/ZeXDp9P6ZwRDW94TQnf4w4L6BbGHAGBiq5Im7BrK6utOqrhoI4YLawNKqnszX/+9J1xh8qD+rKgbOecvR58+rJb7ZH8L6YuDhj9z4zlpifxKoN/6X/SG8qTbatPHvrMga700b//qKEN5YCNSr+viKEGqN9aVV3VPNr2OQVvXP1RBeUwjUq3pXNYQDAYBlKv5XuqP44L4DV+7aNjMztXcJE3Effn/YOT0zNbZ998yOapM+7Uj63LCM0VXlMXV65ZvH8iWKPnzrlqFO0vXfCY4X28r345dOHMzvx+9CvbPj3NjbcHdTOuS3vbXcRGhY72n+IXct8ZAHipXMPYml+mP+vjAYVlyxb2rv2Ge37d+/d0P2t9PsG7O/8TBTtq02pNtqYL6+dfDyaLpaVuLlbqs1xUrW7798z/p9B65cN335tsumLpv61IZ3bRw/f3zT+LvPX18b1Xj2t81Q18xXdTLUl27scFyLONRzi8tkn45PDQkJieWW2D24puX/yaX5/57W8//4qRM/+fP1GZod/x+Nh/mzx+cO82+NgSOdHv8fbXY0v35iwKokcDAGDjrMDwAAwKtDnOTHvZlxr/RP137n6VblSvP/g539/n+R1v+vL11/cbNl/tfGEuPN1v9Pl/mvr/9/sNn6/+ky//X1/4+8Auv/X1EPJJvkF9b/BwAAXg1O3/r/bZf3Ty8QUMrQdnn/9AIBpQxtl/Hv9AIBC17///H//Kv/Di2U5v/Xdjb/t3A/AAAAnDm+8Gef+X+t4qX5/5HO5v+nf/2/0Oz8/1XNApPNFga0/h8AAADLVLP1/0avHvhYq3Kl+f+xzub/8bSLrobcsdYXh7M17UK6pt1zw/WfDAAAAMDy0BXGxno7zNuwMurml9/mI/lSoK3SRU/+ycmFnf9/vLP5f8PvMr76wOqbu9d+4P4Xb1u3+umj7zj8zNzxfwAAAGDpdLpfAgAAAAAAAAAAAAAAeOU9+R+HNrWKl37/H7bMPt7s9//xun/x9wWvbcgda22//l9+/5L333JgdsnC+4ZDeGsxsOvQrrNCfm3+NcXA3R9d+7pa4lBa4s4nLnyqlvhYGnjfurNfqCUuSAJb4yKJr08D8aqKL6xMAnF5xX9PA3F7HEsDfXngyyuzcVTSbfXToWxbVdJt9ehQCCOFQH1b3T6UtVFJB3hdEqgP8NNpIA7wz/NAV9qrWwazXsXAUCx6w2DWKwAAzljxW2Bv2Dk9MzUev8LH23N7Gm+jhiXLripXW+mw+cfypck+fOuWoU7S3el30blrjfeGam0IG0pfV4tZKrOjXJxa2my61zYZcrvV3rqalEstdNP1NR9Rfzaise27Z3b0th34pvZZNva0zbKhNNkpZuma3aQd1NJBXzoYUYfbpoMux/tdYWysO8n1BzE4Ghq0e0V0+nv94jp/zV4FxTyfOnn4V63qK83/Rzub/1eL43ohvxjAwXhlvb8bscw/AAAALK0vb/71N+K/D11978Ot8pbm/6s6m//HPVj5oeBsb8fxeP3/wyMhzF5afzQL3BSb+/hICG+eTU3GEtkF9S+OJcazwE1xh8naWGLrZGNVK2LgWBL4yXAeOJ4ETsRAvpfiaMh35fz9cAjvnE1taSyxJ5YYTQIfjIFVSWAsBsaTwMoYmEgCz67MA5NJ4N9iIEw3bqtbV+bbCgAAYCHyeVZv492QzvOO9bTLUGmXYaBdhq52GartMjQbRbz/7ZihNzl5pVLI1JvW2p/UUsoQL4a/4H6VMoQfNuZMC5aajucf1M83qDRmuOM9PdXQQmn+P97Z/H+g8TZr/USc/89d/y8L/CB272vx1PFVMfDj9zYG8h0DJ+Jk95p6VZN5iXzSfk0sMREDq5LAnhiYSAJbt+SBI69rDOQz7Xrjh+uNT+clCgEAAAA47eIOgribJs7/b9j3pcFW5Urz/4nO5v+xvcFiY1+MtZ5cGcLtlbne1APrhrJA3I8xFH8e/4ahEM4q7OCol5gayEr0JQ2H7/dnv1DvS6v6Xn/244N4/5KH7rn7K7XEdf0hrC7sfam38Xg1a6M/DZzXlwUG0sDuniwQ9/zUA9/tygJwyup7BeMLKj/VpW50/nJNXn+vlmuCpsMr7QOdJ998v7laKqUdrvk+1bqFPW0t99+yaEpvj+Pebcvx3Tbq3Vb8IpV/Q3lpLlQNXTumdm67YmZ/fKT4S9aSJXqei79S7SS9CK/Dgy+/t+1V0w6MJx8f4/OXm/91WInVffWB1Td3r/3A/betW/300XccfqbjbjQRfyh8z+f/dehHhc271Kohf80tu8+TSZ8ny+K/gYOFTs2dmV33u/m0bXn269e0ipfm/5Odzf97kttZv44bc99ICG8rbNz74ub/45Hsc7AQyD4lX1MOZIfc/2u46ScnAAAALLb6noX6/oLp/DY7ITydJ5fzTy4wf9xfMTFv/k77PfDXH13dKl6a/29tPf9fkXTT8X/H/1kijv/P60zfFb0ifeDgKe2KLlXHknD8f15n+rvN8f95Of7v+P98HP9vw/H/eZ3pT1vpW9IeX7pCCE//0V2PtoqX5v97Opv/W/9v/kX76uv/bW22/t+eZuv/HbT+HwAAsKSaLDSXzvNKq/eVMqSr95UytF0gsO0Sg9b/W/D6f0+d+/hvQgul+f/Bzub/8eUwWGx9uaz/t2pLk6qujYE9FgYEAADgTNRsBwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACvrDv+4X92tIrf+9uLHn3i0olPHtp86bOfv+jsB0OYnn28koUrA1dfP/Hzmy+85dAdG2+47eTFb6/m5Xrz2//fkDvW+uJwCEcKjwzFxHPDtTtzgUvef8uBnlrivuEQ3loM7Dq066xa4lvDIawpBu7+6NrX1RKH0hJ3PnHhU7XEx9LA+9ad/UItcUEeqKTd/ceVWXcraXe/sjKEkUKg3t1Prmysqt7Gn+aBrrSNfxrK2oiBoVj0G0NZGzEwE0tMrwhhfU8I3WlV91azqrrTqv6lmlXVnVb1hWoIF4QQetKqnujLqupJR/5gX1ZVDJzzlqPPn1dLHOkLYX0x8PBHbnxnLfHpJFBv/C/6QnhT7SWTNv7t3qzx3rTx63pDeGMIoS8t8cuerERfWuLJnhBeUwjUG/9ETwgHAq8K8cOn4RNt34Erd22bmZnau4SJvryt/rBzemZqbPvumR3VpE/NVArpl656+WN/7PnPba/dfvjWLUOdpHvycr2zXd7Y23B305ne+9ivgWIlc89Hqf6Yvy8MhhVX7JvaO/bZbfv3792Q/e00+8bsb3cezbbVhuWyrdYUK1m///I96/cduHLd9OXbLpu6bOpTG961cfz88U3j7z5/fW1U49nfxRjqjad/qOf2FCo5HR8AEhISyy3R1fDpNn6mf5CXvujPdbQ3VGc/oAvTir5SlsrsKBdj0JtP36BLU5LCiPoa+zbvdqlkX2/KWa5qzLKpNJmYq6U/yzL7va40OSw21jW7SeP9rjA21t1sO4w23i1u3p+dwuZ9JN90naYBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP6PHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhB44FAAAAAIT5W4fRswEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXAoAAP//PTUiXg==")
stat(0x0, &(0x7f0000000240))

15.423353577s ago: executing program 1 (id=1602):
syz_open_dev$evdev(0x0, 0x2, 0x822b01)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
accept(0xffffffffffffffff, &(0x7f0000000000)=@l2tp={0x2, 0x0, @dev}, &(0x7f0000000080)=0x80)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x20)
r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0)
readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/9, 0x9}], 0x1)
timer_create(0x0, 0x0, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)

14.574209829s ago: executing program 6 (id=1603):
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x200041a, &(0x7f0000000300)=ANY=[@ANYBLOB="6465636f6d706f73652c6e6f626172726965722c6e6c733d69736f383835392d342c0000eb25ba11b788a23b6013ffe5be87fc27664d64fc0e4dd46a49567c77a44ad292e9ed9872dc027d083d66154fe9c6fa40cb8833ec287f8eb2ef9e4c9c6ae7b8da63b8266bd0f93bb7f4b826c2c59bdcfac9aa018a168337d4fddf10b9274d217f93c391ba0112113fee152a52ab91faf3e116456889a3b530bd345c1bed71f1f605c74ee209509d4275f16a8a4e18a5eca2dc8256559f25a39e59e97509fb488db249ecae8d5a2341f85ca194d28668ae031384066e9dc4190c4d9bdeeaeb6503303cac86f2c0b9f933ca805833"], 0x1, 0x5c8, &(0x7f00000006c0)="$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")
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xa5e438, &(0x7f00000004c0)=ANY=[@ANYRESDEC, @ANYRESHEX=0x0, @ANYRES64=0x0, @ANYRES8, @ANYRESHEX, @ANYRESDEC, @ANYRES16, @ANYBLOB="37b57cfa7d0121345c29b6064f49a0f95b88671b8e9149556e5ff3c7012f7856b6557be6b51d61efea623114a0b4b52f68387d2040dd08c5aa753b596ede3f3d637f96752310a389efcd8cf335ca9dbbbc10bda7a16342968c9ab4fd1ac65da604cd9b42d6d0dc0e895e0b2f42822f1b342f88a8d607008d20b22b776a70a07a2c53fc32be094c857279c58542b176bfbcc6c7e9808da687b44a8b21d23cc2f80050f8fd457f5a5595226d2008bcded226ab2e75d00ab5592daa23e809e04c2b370af460ae93b7efc32bf174830779058ad75290b9abb59be5f8859001e651c1d4", @ANYRES32, @ANYRESDEC, @ANYRESDEC, @ANYRESDEC, @ANYRES16, @ANYRESHEX=0x0], 0xb, 0x0, &(0x7f0000000000))
socket$kcm(0x2, 0xa, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$pppl2tp(0x18, 0x1, 0x1)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/warn_count', 0x48000, 0x0)
read$watch_queue(r1, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
lsm_get_self_attr(0x67, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)

14.32976376s ago: executing program 3 (id=1605):
fstat(0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r1 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r2, &(0x7f00000004c0)=""/102392, 0x18ff8)
sched_setaffinity(r1, 0x2, &(0x7f0000000000)=0x80000000000003)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
mount(0x0, 0x0, &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x25c}}, 0x0)

12.835757733s ago: executing program 3 (id=1607):
r0 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0, &(0x7f0000000300)=<r3=>0x0)
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)=<r4=>0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup(r5)
syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x3e80, 0x800, 0x1, 0x32c, 0x0, r0}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x200015a, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x40, 0x10001, 0x2a5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa7bf, 0x80, 0x7, 0xffffffff, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xba}}], 0x1, 0x0, 0x0)

11.966191162s ago: executing program 4 (id=1608):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x53345000)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
landlock_create_ruleset(&(0x7f0000000240)={0x0, 0x0, 0x3}, 0x18, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sendto$inet6(0xffffffffffffffff, 0x0, 0xff32, 0x8fc, &(0x7f0000000480)={0xa, 0x3a, 0x9, @loopback={0xff00000000000000}, 0x2}, 0x1c)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

11.960147642s ago: executing program 1 (id=1609):
socket$nl_netfilter(0x10, 0x3, 0xc)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00001, 0x3000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x2, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000440)={'dt2814\x00', [0x300, 0xc0000000, 0x2, 0x400, 0xe, 0x800005, 0x7, 0x6, 0x8, 0x56, 0xffffffff, 0x1, 0x1, 0xfffffffc, 0x10000b, 0x0, 0x5, 0x4007a, 0x3, 0x3, 0x89, 0x12, 0x7f, 0x0, 0x5, 0xe66, 0x1, 0x2000008, 0xa6b3, 0x0, 0x5]})
fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0)
mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x1, 0x3000000, 0x2010, 0xffffffffffffffff, 0x20000000)
syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, 0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000c40), 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
socket$inet6(0xa, 0x1, 0x0)
fsopen(&(0x7f0000000080)='hugetlbfs\x00', 0x1)
mmap(&(0x7f00000e1000/0x800000)=nil, 0x800000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x35ddf000)
r2 = syz_pidfd_open(0x0, 0x0)
ioctl$FS_IOC_GETVERSION(r2, 0xff02, 0x0)

11.698932368s ago: executing program 6 (id=1610):
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000a0000000800000000000004040000000800000002000004f7ffffff0400000001000000000000000300000001000000000000000030615f5f5f2e2e5f"], 0x0, 0x52, 0x0, 0x9, 0x6}, 0x28)
accept(0xffffffffffffffff, &(0x7f0000000000)=@l2tp={0x2, 0x0, @dev}, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@fallback=r1, 0xffffffffffffffff, 0x2f, 0x2018, 0x4}, 0x20)
ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000001100)=""/103)

10.985679715s ago: executing program 5 (id=1611):
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000240)={'sit0\x00', 0x0})
close(0xffffffffffffffff)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000002040)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4000005)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102400, 0x19000)
syz_genetlink_get_family_id$devlink(&(0x7f0000000f00), 0xffffffffffffffff)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)

10.499246469s ago: executing program 5 (id=1612):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x53345000)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
landlock_create_ruleset(&(0x7f0000000240)={0x0, 0x0, 0x3}, 0x18, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sendto$inet6(0xffffffffffffffff, 0x0, 0xff32, 0x8fc, &(0x7f0000000480)={0xa, 0x3a, 0x9, @loopback={0xff00000000000000}, 0x2}, 0x1c)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

10.497866581s ago: executing program 4 (id=1613):
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = userfaultfd(0x801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, 0x0)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
r2 = userfaultfd(0x801)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x2c})
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000240)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000, 0x1})
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil)
add_key(0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000240), 0x75f, 0xa8182)
r4 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5\x00'/557, 0x1)
pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)='P', 0x1}], 0x1, 0x800000, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
sendfile(r3, r3, 0x0, 0x24002de8)

9.358077413s ago: executing program 5 (id=1614):
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = userfaultfd(0x801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
r2 = userfaultfd(0x801)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x2c})
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000240)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000, 0x1})
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil)
add_key(0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000240), 0x75f, 0xa8182)
r4 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5\x00'/557, 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)

9.269774749s ago: executing program 4 (id=1615):
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa08, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil)
add_key(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000240), 0x75f, 0xa8182)
r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5\x00'/557, 0x1)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='P', 0x1}], 0x1, 0x800000, 0x0)
sendfile(r0, r0, 0x0, 0x24002de8)

8.973762777s ago: executing program 5 (id=1616):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./gadget\x00', &(0x7f0000000000)='gadgetfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x802, 0x0)
write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, 0x0)
r2 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_DEL_RULE(r2, &(0x7f0000000f00)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000f40)={0x4a0, 0x3f4, 0x10, 0x70bd25, 0x25dfdbfb, {0x6, 0x0, 0x32, [0x1, 0x0, 0x0, 0x107, 0x8, 0x47, 0xfffffffe, 0xfffffff7, 0x10000, 0x4, 0x3740c000, 0x5, 0x9ceb, 0x2, 0xd, 0x2, 0x5, 0x2, 0x2, 0x9, 0x5, 0x80000001, 0x0, 0x7, 0xf, 0xffffff5c, 0x8, 0x4ef, 0xfffffff8, 0x3ff, 0x100, 0x4, 0x0, 0x2, 0x8, 0xb3, 0x8, 0x401, 0x3, 0x4, 0xcd4b, 0x80000000, 0xffffff96, 0xfffffbff, 0xe, 0x800, 0x8, 0x4ec, 0x6, 0x47, 0x7, 0x1, 0x6, 0xfffffff8, 0x1, 0x7fffffff, 0xb3, 0x9, 0x9, 0x0, 0x8b, 0x7, 0x0, 0x4], [0x6, 0x5, 0x1, 0x6, 0x0, 0x7d2e3264, 0x1ff, 0x2, 0x4, 0x81, 0xfffffd4a, 0x100, 0x6, 0x4, 0x4, 0x7ff, 0x7, 0xfff, 0x0, 0x9ada, 0x80000001, 0x4, 0x3, 0x1, 0x10, 0x3, 0x1, 0x100, 0x0, 0x4, 0x2, 0x400000, 0x1, 0x7, 0x7, 0xfffffffc, 0x5, 0x2, 0xffffa8b3, 0x0, 0xbec6, 0x8, 0x638280ba, 0x6, 0xd, 0xfffffae3, 0x80000000, 0x4, 0x3, 0x401, 0x6, 0x7f, 0x1, 0x2, 0xd9f5, 0x1000, 0x6, 0xffffffff, 0xac, 0x6, 0x5, 0x0, 0x5, 0x3], [0x80, 0x7, 0x6, 0xa13, 0x7, 0xb, 0x4, 0x1000, 0x7def34e0, 0xc, 0x0, 0x6, 0x7fff, 0x10000, 0x3ff, 0x1, 0x5, 0x5, 0x8, 0xb, 0x5, 0x9, 0x8, 0x1, 0x9, 0x5, 0xfff, 0x1, 0x9, 0x80000000, 0x101, 0x3, 0x8, 0x1, 0x553d, 0x1ff, 0xffffffff, 0x401, 0x3ff, 0x5, 0xd44, 0x40, 0x0, 0x55, 0x8, 0x1ff, 0x3824, 0x1, 0xaab, 0x5, 0x9, 0x1, 0x7, 0x8, 0x0, 0xe498, 0x6, 0x1, 0x401, 0xe4, 0x2, 0x2], [0x6fcd, 0x5c99, 0x8, 0x1ff, 0x6, 0x3, 0x5, 0x1, 0x7, 0x9, 0x7, 0x2, 0x40, 0x5, 0xf, 0x1ff, 0xbc4, 0xfffffa39, 0x8, 0x6, 0x84d, 0xf, 0x46, 0x80000001, 0x0, 0x49964eaa, 0x5, 0x5, 0xd, 0xe421, 0x400, 0x1000, 0x5, 0x6, 0x8, 0x8d8, 0x8, 0x3, 0x7f, 0x0, 0x2, 0x400, 0x5, 0x7, 0x3, 0x401, 0x5, 0x77e, 0x10, 0x9, 0xd45, 0x3, 0x8114, 0xfff, 0x7ff, 0x74ed, 0x7fffffff, 0xffffffff, 0x7fff, 0x4, 0x2, 0x8, 0x101, 0x4], 0x80, ['\xaa\xaa\xaa\xaa\xaa', 'debugfs\x00', '\xf1.!p\x03H\'\xd6z\xa8\x8c\x89\x83y\x9b\xb9\x95]\x11b\x13R.\xd9\"A\xdaY\xd7^\xa0\x9a\x9eF\x83.\x0f$|ax\xbdk\x91\xdb\x11J\v\xdb\xa9\xe1\x8e\tuK\xf6\xe7.\xe6\xb5\xb7\xb0\xcev~\x9cA\xed\xef\x84F\x00\xa9+\x06baA}\x84\xc5\x1e\x7f$\x81\xa1f)\x14\xefe\xb8\x90\xc4\x8c\xfbb\fue\x1d2K\xce\xca\n\x86O\x89\xe8', '\xaa\xaa\xaa\xaa\xaa']}, ["", "", "", "", "", "", "", "", ""]}, 0x4a0}, 0x1, 0x0, 0x0, 0x20000010}, 0x41)
r3 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0, &(0x7f0000000300)=<r6=>0x0)
syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)=<r7=>0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = dup(r8)
syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x3e80, 0x800, 0x1, 0x32c, 0x0, r3}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x200015a, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x40, 0x10001, 0x2a5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa7bf, 0x80, 0x7, 0xffffffff, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xba}}], 0x1, &(0x7f0000000340)={0x2e, 0x50, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x4, 0x5c0, 0x0, 0x0}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94)

8.77511731s ago: executing program 1 (id=1617):
prctl$PR_SCHED_CORE(0x3e, 0x4000000001, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
setpriority(0x1, 0xffffffffffffffff, 0x3)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = creat(&(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x113)
r2 = socket$inet6(0xa, 0x3, 0xf94)
setsockopt$inet6_int(r2, 0x29, 0x4b, 0x0, 0x0)
syz_open_dev$vim2m(&(0x7f0000000100), 0x80000000000000, 0x2)
openat(0xffffffffffffffff, &(0x7f0000000880)='./file0\x00', 0x408201, 0xe0)
syz_genetlink_get_family_id$ethtool(0x0, r1)
r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2})
r4 = socket$inet(0x2, 0x3, 0x8d)
fcntl$lock(r4, 0x24, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r4, 0x8982, 0x0)
select(0x40, &(0x7f0000000080)={0x8, 0x62dc, 0x5, 0x0, 0x800, 0x8000000000000000, 0x6, 0x1ff}, 0x0, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x890)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
socket$kcm(0x2, 0x200000000000001, 0x0)
close(r5)
socket$kcm(0xa, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"})
ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"})

8.628488935s ago: executing program 6 (id=1618):
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x800)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_ADD(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x268}, 0x1, 0x0, 0x0, 0x24004081}, 0x4004040)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x15, 0x5, 0x0)
syz_mount_image$ocfs2(&(0x7f0000000000), &(0x7f00000048c0)='./file0\x00', 0x41, &(0x7f0000000380)={[{@barrier={'barrier', 0x3d, 0x6}}, {@intr}, {@acl}, {@heartbeat_none}, {@localalloc={'localalloc', 0x3d, 0x6}}]}, 0xff, 0x489a, &(0x7f0000004900)="$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")
pselect6(0x40, &(0x7f0000000240)={0x0, 0xfffffffffffffffc, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000009, 0x400}, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x8)
setgroups(0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r4, <r5=>0xffffffffffffffff}, 0x4)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x16, 0x10, &(0x7f0000000c80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x23ffd, 0x0, 0x0, 0x0, 0x9}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x0, 0xe, 0x0, &(0x7f00000000c0)="00000000000000ce94327fc1a80c", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x20, 0x3, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @tcp}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x20}, 0x1, 0x0, 0x0, 0x85}, 0x0)
ioctl$SNDCTL_SEQ_CTRLRATE(r1, 0xc0045103, &(0x7f0000000000)=0x200)
getgroups(0x1, &(0x7f0000000080)=[<r7=>0xee00])
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
getgroups(0x1, &(0x7f0000000140)=[r7])
setgroups(0x0, &(0x7f0000000180))

8.61851596s ago: executing program 4 (id=1619):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0ffc40bffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400210000000404000001000000b7050000220000006a0a00fe00000000850000000b000000b7000000592000009500000000000000a3028cb5af6c8f5d76781dcb7729f017"], &(0x7f0000000340)='syzkaller\x00'}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r1=>0xffffffffffffffff})
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004080000000000000003000000000000000000000003000000000000000000000000000002000000000000000000000011"], 0x0, 0x56}, 0x20)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000580)=ANY=[], 0xfdef)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r5)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETLINK(r7, 0x400454cd, 0x10e)
recvmsg$unix(r4, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r8=>0xffffffffffffffff]}}], 0x18}, 0x1c0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94)
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a000000020000000200000004"], 0x2d)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r10, r11}, 0xc)
write$cgroup_subtree(r8, 0x0, 0x9a)
r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440), 0x4)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000100), 0x4)
r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0x33, &(0x7f0000000a00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r11}}, {}, [@map_val={0x18, 0x5, 0x2, 0x0, r11, 0x0, 0x0, 0x0, 0x31}, @tail_call={{0x18, 0x2, 0x1, 0x0, r9}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x60}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r11}}, @tail_call, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xff}}, @map_val={0x18, 0x0, 0x2, 0x0, r10, 0x0, 0x0, 0x0, 0x6}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000bc0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000c40)={0x4, 0x6, 0x9, 0x8c}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000c80)=[{0x1, 0x3, 0x3, 0x8}, {0x5, 0x4, 0x9, 0x7}, {0x3, 0x5, 0xa, 0x8}, {0x4, 0x2, 0x6, 0xb}]}, 0x94)
r14 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_procfs$namespace(r14, 0x0)
r15 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000dc0)=@o_path={&(0x7f0000000d80)='./file0\x00', 0x0, 0x18, r1}, 0x18)
sendmsg$unix(r3, &(0x7f0000000ec0)={&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f00000009c0)=[{&(0x7f0000000800)="ac9b3d68b1fb3eceedd6ebe82056e3085a7570056b6d512ef48492c7979e47dce16d79661c9d8355163fe957dabb29f6860fa3d3a7352a4311c59c89cdf1089a7e08cb0d82b0127e0af050d6c7d19ba7dec462112822e5040a496ebd38585402c301a994ff4be344faa41b0837a898956470a188a6f0b5a3f19dfe14344f714e7b3a60e96eeb34c43f12ab7d9f193b1800c8689e74dc5ad929fc3b0e7dcedb78f0a54801d9a05ea72cd535e5d993242eada0453f7f277b7e1bf1cfdb52e6caa7bd6c", 0xc2}, {&(0x7f0000000900)="4c867af922fc3ef3d3c41f1b736cb0cbe4853714cf7b6bbccec60187c1287b2083053807c7538dd1e12f3291528c2cbd1e8b201260cd4c5cbc9562c72eeb88f2dd727f6c4b540fdbaddfbccea9583feaf055448a0379fce7f75c6c3ab41113fc15e55f02e21904ec1f3a08f6e3b45e119c8705ac3ee330192ee55d4f0a0cea04d6fce34d8992159f2ec2e014bde55603bd600412b7eccd6701116a80b28039917d8b669571fd3b855257be284757589134b4ac77d73f53d2b8e3", 0xba}], 0x2, &(0x7f0000000e00)=[@rights={{0x30, 0x1, 0x1, [r3, 0xffffffffffffffff, r12, r8, r3, r2, r13, r9]}}, @cred={{0x1c, 0x1, 0x2, {r14, 0xee00}}}, @rights={{0x1c, 0x1, 0x1, [r15, r2, r6]}}], 0x70, 0x1}, 0x400c811)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{}, &(0x7f0000000500), &(0x7f0000000540)='%pK    \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={0x1}, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0xa002a0, 0x10, 0x18, &(0x7f0000000000)="5ae02efc441a80536af0d1d905c723fa", &(0x7f0000000040)=""/24, 0x6414}, 0x28)

6.072878067s ago: executing program 5 (id=1620):
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = creat(&(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x113)
r2 = socket$inet6(0xa, 0x3, 0xf94)
setsockopt$inet6_int(r2, 0x29, 0x4b, 0x0, 0x0)
syz_open_dev$vim2m(&(0x7f0000000100), 0x80000000000000, 0x2)
syz_genetlink_get_family_id$ethtool(0x0, r1)
r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2})
select(0x40, &(0x7f0000000080)={0x8, 0x62dc, 0x5, 0x0, 0x800, 0x8000000000000000, 0x6, 0x1ff}, 0x0, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x890)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
close(r4)
socket$kcm(0xa, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"})

5.137800479s ago: executing program 1 (id=1621):
syz_open_dev$evdev(0x0, 0x2, 0x822b01)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
accept(0xffffffffffffffff, &(0x7f0000000000)=@l2tp={0x2, 0x0, @dev}, &(0x7f0000000080)=0x80)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x20)
r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0)
readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/9, 0x9}], 0x1)
timer_create(0x0, 0x0, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)

5.079528517s ago: executing program 3 (id=1622):
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = userfaultfd(0x801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, 0x0)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
r2 = userfaultfd(0x801)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x2c})
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000240)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000, 0x1})
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil)
add_key(0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000240), 0x75f, 0xa8182)
r4 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5\x00'/557, 0x1)
pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)='P', 0x1}], 0x1, 0x800000, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
sendfile(r3, r3, 0x0, 0x24002de8)

4.799093269s ago: executing program 6 (id=1623):
prctl$PR_SCHED_CORE(0x3e, 0x4000000001, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
setpriority(0x1, 0xffffffffffffffff, 0x3)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = creat(&(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x113)
r2 = socket$inet6(0xa, 0x3, 0xf94)
setsockopt$inet6_int(r2, 0x29, 0x4b, 0x0, 0x0)
syz_open_dev$vim2m(&(0x7f0000000100), 0x80000000000000, 0x2)
openat(0xffffffffffffffff, &(0x7f0000000880)='./file0\x00', 0x408201, 0xe0)
syz_genetlink_get_family_id$ethtool(0x0, r1)
r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2})
r4 = socket$inet(0x2, 0x3, 0x8d)
fcntl$lock(r4, 0x24, &(0x7f0000000040)={0x1, 0x4, 0x10001, 0x5})
ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r4, 0x8982, 0x0)
select(0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x890)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
socket$kcm(0x2, 0x200000000000001, 0x0)
close(r5)
socket$kcm(0xa, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"})
ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"})

4.620069366s ago: executing program 0 (id=1624):
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000240)={'sit0\x00', 0x0})
close(0xffffffffffffffff)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000002040)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4000005)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102400, 0x19000)
syz_genetlink_get_family_id$devlink(&(0x7f0000000f00), 0xffffffffffffffff)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)

4.475570188s ago: executing program 3 (id=1625):
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x200041a, &(0x7f0000000300)=ANY=[@ANYBLOB="6465636f6d706f73652c6e6f626172726965722c6e6c733d69736f383835392d342c0000eb25ba11b788a23b6013ffe5be87fc27664d64fc0e4dd46a49567c77a44ad292e9ed9872dc027d083d66154fe9c6fa40cb8833ec287f8eb2ef9e4c9c6ae7b8da63b8266bd0f93bb7f4b826c2c59bdcfac9aa018a168337d4fddf10b9274d217f93c391ba0112113fee152a52ab91faf3e116456889a3b530bd345c1bed71f1f605c74ee209509d4275f16a8a4e18a5eca2dc8256559f25a39e59e97509fb488db249ecae8d5a2341f85ca194d28668ae031384066e9dc4190c4d9bdeeaeb6503303cac86f2c0b9f933ca805833"], 0x1, 0x5c8, &(0x7f00000006c0)="$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")
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xa5e438, &(0x7f00000004c0)=ANY=[@ANYRESDEC, @ANYRESHEX=0x0, @ANYRES64=0x0, @ANYRES8, @ANYRESHEX, @ANYRESDEC, @ANYRES16, @ANYBLOB="37b57cfa7d0121345c29b6064f49a0f95b88671b8e9149556e5ff3c7012f7856b6557be6b51d61efea623114a0b4b52f68387d2040dd08c5aa753b596ede3f3d637f96752310a389efcd8cf335ca9dbbbc10bda7a16342968c9ab4fd1ac65da604cd9b42d6d0dc0e895e0b2f42822f1b342f88a8d607008d20b22b776a70a07a2c53fc32be094c857279c58542b176bfbcc6c7e9808da687b44a8b21d23cc2f80050f8fd457f5a5595226d2008bcded226ab2e75d00ab5592daa23e809e04c2b370af460ae93b7efc32bf174830779058ad75290b9abb59be5f8859001e651c1d4", @ANYRES32, @ANYRESDEC, @ANYRESDEC, @ANYRESDEC, @ANYRES16, @ANYRESHEX=0x0], 0xb, 0x0, &(0x7f0000000000))
socket$kcm(0x2, 0xa, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000100)={0x0, 0xffff, 0x0, 0x0, <r0=>0xffffffffffffffff})
sched_setaffinity(r0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/warn_count', 0x48000, 0x0)
read$watch_queue(r2, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
lsm_get_self_attr(0x67, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)

4.386848385s ago: executing program 4 (id=1626):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x53345000)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
landlock_create_ruleset(&(0x7f0000000240)={0x0, 0x0, 0x3}, 0x18, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sendto$inet6(0xffffffffffffffff, 0x0, 0xff32, 0x8fc, &(0x7f0000000480)={0xa, 0x3a, 0x9, @loopback={0xff00000000000000}, 0x2}, 0x1c)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

4.20189119s ago: executing program 5 (id=1627):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x53345000)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
landlock_create_ruleset(&(0x7f0000000240)={0x0, 0x0, 0x3}, 0x18, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sendto$inet6(0xffffffffffffffff, 0x0, 0xff32, 0x8fc, &(0x7f0000000480)={0xa, 0x3a, 0x9, @loopback={0xff00000000000000}, 0x2}, 0x1c)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

4.085804158s ago: executing program 0 (id=1628):
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = userfaultfd(0x801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
r2 = userfaultfd(0x801)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x2c})
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000240)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000, 0x1})
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil)
add_key(0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000240), 0x75f, 0xa8182)
r4 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5\x00'/557, 0x1)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)

2.504867608s ago: executing program 39 (id=1627):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x53345000)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
landlock_create_ruleset(&(0x7f0000000240)={0x0, 0x0, 0x3}, 0x18, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sendto$inet6(0xffffffffffffffff, 0x0, 0xff32, 0x8fc, &(0x7f0000000480)={0xa, 0x3a, 0x9, @loopback={0xff00000000000000}, 0x2}, 0x1c)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

2.484829247s ago: executing program 0 (id=1630):
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000a0000000800000000000004040000000800000002000004f7ffffff0400000001000000000000000300000001000000000000000030615f5f5f2e2e5f"], 0x0, 0x52, 0x0, 0x9, 0x6}, 0x28)
accept(0xffffffffffffffff, &(0x7f0000000000)=@l2tp={0x2, 0x0, @dev}, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@fallback=r1, 0xffffffffffffffff, 0x2f, 0x2018, 0x4}, 0x20)
ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000001100)=""/103)

2.48452384s ago: executing program 1 (id=1631):
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa08, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil)
add_key(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000240), 0x75f, 0xa8182)
r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5\x00'/557, 0x1)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='P', 0x1}], 0x1, 0x800000, 0x0)
sendfile(r0, r0, 0x0, 0x24002de8)

2.478312909s ago: executing program 6 (id=1632):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./gadget\x00', &(0x7f0000000000)='gadgetfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x802, 0x0)
write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, 0x0)
r2 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_DEL_RULE(r2, &(0x7f0000000f00)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000f40)={0x4a4, 0x3f4, 0x10, 0x70bd25, 0x25dfdbfb, {0x6, 0x0, 0x32, [0x1, 0x0, 0x0, 0x107, 0x8, 0x47, 0xfffffffe, 0xfffffff7, 0x10000, 0x4, 0x3740c000, 0x5, 0x9ceb, 0x2, 0xd, 0x2, 0x5, 0x2, 0x2, 0x9, 0x5, 0x80000001, 0x0, 0x7, 0xf, 0xffffff5c, 0x8, 0x4ef, 0xfffffff8, 0x3ff, 0x100, 0x4, 0x0, 0x2, 0x8, 0xb3, 0x8, 0x401, 0x3, 0x4, 0xcd4b, 0x80000000, 0xffffff96, 0xfffffbff, 0xe, 0x800, 0x8, 0x4ec, 0x6, 0x47, 0x7, 0x1, 0x6, 0xfffffff8, 0x1, 0x7fffffff, 0xb3, 0x9, 0x9, 0x0, 0x8b, 0x7, 0x0, 0x4], [0x6, 0x5, 0x1, 0x6, 0x0, 0x7d2e3264, 0x1ff, 0x2, 0x4, 0x81, 0xfffffd4a, 0x100, 0x6, 0x4, 0x4, 0x7ff, 0x7, 0xfff, 0x0, 0x9ada, 0x80000001, 0x4, 0x3, 0x1, 0x10, 0x3, 0x1, 0x100, 0x0, 0x4, 0x2, 0x400000, 0x1, 0x7, 0x7, 0xfffffffc, 0x5, 0x2, 0xffffa8b3, 0x0, 0xbec6, 0x8, 0x638280ba, 0x6, 0xd, 0xfffffae3, 0x80000000, 0x4, 0x3, 0x401, 0x6, 0x7f, 0x1, 0x2, 0xd9f5, 0x1000, 0x6, 0xffffffff, 0xac, 0x6, 0x5, 0x0, 0x5, 0x3], [0x80, 0x7, 0x6, 0xa13, 0x7, 0xb, 0x4, 0x1000, 0x7def34e0, 0xc, 0x0, 0x6, 0x7fff, 0x10000, 0x3ff, 0x1, 0x5, 0x5, 0x8, 0xb, 0x5, 0x9, 0x8, 0x1, 0x9, 0x5, 0xfff, 0x1, 0x9, 0x80000000, 0x101, 0x3, 0x8, 0x1, 0x553d, 0x1ff, 0xffffffff, 0x401, 0x3ff, 0x5, 0xd44, 0x40, 0x0, 0x55, 0x8, 0x1ff, 0x3824, 0x1, 0xaab, 0x5, 0x9, 0x1, 0x7, 0x8, 0x0, 0xe498, 0x6, 0x1, 0x401, 0xe4, 0x2, 0x2], [0x6fcd, 0x5c99, 0x8, 0x1ff, 0x6, 0x3, 0x5, 0x1, 0x7, 0x9, 0x7, 0x2, 0x40, 0x5, 0xf, 0x1ff, 0xbc4, 0xfffffa39, 0x8, 0x6, 0x84d, 0xf, 0x46, 0x80000001, 0x0, 0x49964eaa, 0x5, 0x5, 0xd, 0xe421, 0x400, 0x1000, 0x5, 0x6, 0x8, 0x8d8, 0x8, 0x3, 0x7f, 0x0, 0x2, 0x400, 0x5, 0x7, 0x3, 0x401, 0x5, 0x77e, 0x10, 0x9, 0xd45, 0x3, 0x8114, 0xfff, 0x7ff, 0x74ed, 0x7fffffff, 0xffffffff, 0x7fff, 0x4, 0x2, 0x8, 0x101, 0x4], 0x81, ['\x00', '\xaa\xaa\xaa\xaa\xaa', 'debugfs\x00', '\xf1.!p\x03H\'\xd6z\xa8\x8c\x89\x83y\x9b\xb9\x95]\x11b\x13R.\xd9\"A\xdaY\xd7^\xa0\x9a\x9eF\x83.\x0f$|ax\xbdk\x91\xdb\x11J\v\xdb\xa9\xe1\x8e\tuK\xf6\xe7.\xe6\xb5\xb7\xb0\xcev~\x9cA\xed\xef\x84F\x00\xa9+\x06baA}\x84\xc5\x1e\x7f$\x81\xa1f)\x14\xefe\xb8\x90\xc4\x8c\xfbb\fue\x1d2K\xce\xca\n\x86O\x89\xe8', '\xaa\xaa\xaa\xaa\xaa']}}, 0x4a4}, 0x1, 0x0, 0x0, 0x20000010}, 0x41)
r3 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0, &(0x7f0000000300)=<r6=>0x0)
syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)=<r7=>0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = dup(r8)
syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x3e80, 0x800, 0x1, 0x32c, 0x0, r3}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x200015a, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x40, 0x10001, 0x2a5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa7bf, 0x80, 0x7, 0xffffffff, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xba}}], 0x1, &(0x7f0000000340)={0x2e, 0x50, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x4, 0x5c0, 0x0, 0x0}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94)

2.476960642s ago: executing program 3 (id=1633):
fstat(0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r1 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f00000004c0)=""/102392, 0x18ff8)
sched_setaffinity(r1, 0x2, &(0x7f0000000000)=0x80000000000003)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[], 0x25c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a5c000000060a010400000000000000000a0000040900010073797a31000000000900020073797a3200000000300004802c0001800a0001006d6174636800c9211c0002800800024000000002080003000000000008000100736574"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010)

2.476716868s ago: executing program 4 (id=1634):
prctl$PR_SCHED_CORE(0x3e, 0x4000000001, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
setpriority(0x1, 0xffffffffffffffff, 0x3)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = creat(&(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x113)
r2 = socket$inet6(0xa, 0x3, 0xf94)
setsockopt$inet6_int(r2, 0x29, 0x4b, 0x0, 0x0)
syz_open_dev$vim2m(&(0x7f0000000100), 0x80000000000000, 0x2)
openat(0xffffffffffffffff, &(0x7f0000000880)='./file0\x00', 0x408201, 0xe0)
syz_genetlink_get_family_id$ethtool(0x0, r1)
r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2})
r4 = socket$inet(0x2, 0x3, 0x8d)
fcntl$lock(r4, 0x24, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r4, 0x8982, 0x0)
select(0x40, &(0x7f0000000080)={0x8, 0x62dc, 0x5, 0x0, 0x800, 0x8000000000000000, 0x6, 0x1ff}, 0x0, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x890)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
socket$kcm(0x2, 0x200000000000001, 0x0)
close(r5)
socket$kcm(0xa, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"})
ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"})

637.923447ms ago: executing program 3 (id=1635):
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x200041a, &(0x7f0000000300)=ANY=[@ANYBLOB="6465636f6d706f73652c6e6f626172726965722c6e6c733d69736f383835392d342c0000eb25ba11b788a23b6013ffe5be87fc27664d64fc0e4dd46a49567c77a44ad292e9ed9872dc027d083d66154fe9c6fa40cb8833ec287f8eb2ef9e4c9c6ae7b8da63b8266bd0f93bb7f4b826c2c59bdcfac9aa018a168337d4fddf10b9274d217f93c391ba0112113fee152a52ab91faf3e116456889a3b530bd345c1bed71f1f605c74ee209509d4275f16a8a4e18a5eca2dc8256559f25a39e59e97509fb488db249ecae8d5a2341f85ca194d28668ae031384066e9dc4190c4d9bdeeaeb6503303cac86f2c0b9f933ca805833"], 0x1, 0x5c8, &(0x7f00000006c0)="$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")
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xa5e438, &(0x7f00000004c0)=ANY=[@ANYRESDEC, @ANYRESHEX=0x0, @ANYRES64=0x0, @ANYRES8, @ANYRESHEX, @ANYRESDEC, @ANYRES16, @ANYBLOB="37b57cfa7d0121345c29b6064f49a0f95b88671b8e9149556e5ff3c7012f7856b6557be6b51d61efea623114a0b4b52f68387d2040dd08c5aa753b596ede3f3d637f96752310a389efcd8cf335ca9dbbbc10bda7a16342968c9ab4fd1ac65da604cd9b42d6d0dc0e895e0b2f42822f1b342f88a8d607008d20b22b776a70a07a2c53fc32be094c857279c58542b176bfbcc6c7e9808da687b44a8b21d23cc2f80050f8fd457f5a5595226d2008bcded226ab2e75d00ab5592daa23e809e04c2b370af460ae93b7efc32bf174830779058ad75290b9abb59be5f8859001e651c1d4", @ANYRES32, @ANYRESDEC, @ANYRESDEC, @ANYRESDEC, @ANYRES16, @ANYRESHEX=0x0], 0xb, 0x0, &(0x7f0000000000))
socket$kcm(0x2, 0xa, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000100)={0x0, 0xffff, 0x0, 0x0, <r0=>0xffffffffffffffff})
sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/warn_count', 0x48000, 0x0)
read$watch_queue(r2, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
pipe2(&(0x7f00000000c0), 0x0)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x2, 0x0, 0x10001, 0x5})

462.2495ms ago: executing program 1 (id=1636):
socket(0x10, 0x3, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000001040)=ANY=[@ANYBLOB="9feb010018000000894963dcb53ec7b0d6000000000c0000000c00000002000000000000000000000b00000000"], 0x0, 0x26, 0x0, 0x1}, 0x28)
clock_gettime(0x17, 0x0)
ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000300)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}, 0x9, 'syzkaller0\x00'})
syz_emit_ethernet(0x16, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa0800000030008829"], 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xfec6, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1, 0x8, 0x0, 0x0}}, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001100)={'erspan0\x00'})
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$EBT_SO_GET_INIT_INFO(r4, 0x0, 0x82, &(0x7f0000000500)={'filter\x00', 0x0, 0x0, 0x0, [0x8, 0x5, 0x4, 0x1, 0x7fff, 0x100000005]}, &(0x7f0000000080)=0xd)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x40010}, 0x0)
r5 = socket(0x2, 0x80805, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001b80), r6)
sendmsg$IEEE802154_LIST_IFACE(r6, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x14, r7, 0x50be6fea6f3bdfbb, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000)
ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r0, 0x40109441, &(0x7f00000010c0)={0x8000000000000001, 0x4, 0x7})
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_NEW(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="34000000000703000000000000000000010000010c0006400000"], 0x34}, 0x1, 0x0, 0x0, 0x2000000}, 0x40000)
socket$nl_generic(0x10, 0x3, 0x10)
connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x1, @empty, 'ip_vti0\x00'}}, 0x1e)
r9 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r9, &(0x7f0000000200)={0xa, 0x3, 0x400, @remote, 0x9}, 0x1c)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00'], 0x20}, 0x1, 0x0, 0x0, 0x4800}, 0x20000000)
getsockopt$bt_hci(r5, 0x84, 0x80, 0x0, &(0x7f0000001080))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001340)={0x6, 0x10, &(0x7f00000012c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xe}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc2a}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f00000007c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', r3}, 0x94)
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatasum}, {@compress_force}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@flushoncommit}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x30, 0x37, 0x65]}}, {@nodiscard}]}, 0xfb, 0x510a, &(0x7f000000d000)="$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")
stat(&(0x7f0000000200)='./file1\x00', 0x0)

0s ago: executing program 6 (id=1637):
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = userfaultfd(0x801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, 0x0)
ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
r2 = userfaultfd(0x801)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x2c})
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000240)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000, 0x1})
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil)
add_key(0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000240), 0x75f, 0xa8182)
r4 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5\x00'/557, 0x1)
pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)='P', 0x1}], 0x1, 0x800000, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
sendfile(r3, r3, 0x0, 0x24002de8)

kernel console output (not intermixed with test programs):

 (fatal)
[  184.901852][  T187] usb 1-1: new full-speed USB device number 5 using dummy_hcd
[  184.909547][    C0] gadgetfs: connected
[  184.909784][  T187] gadgetfs: disconnected
[  185.062436][    C0] gadgetfs: connected
[  185.067950][  T187] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00
[  185.083253][  T187] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  185.093458][  T187] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  185.118974][    C0] gadgetfs: configuration #1
[  185.475617][ T7512] gadgetfs: suspended from state 3
[  185.475738][ T7512] gadgetfs: disconnected
[  185.479232][   T30] usb 1-1: USB disconnect, device number 5
[  186.662986][ T7536] comedi comedi1: reset error (fatal)
[  187.798585][ T7587] netlink: 108 bytes leftover after parsing attributes in process `syz.0.532'.
[  187.961814][ T7561] comedi comedi1: reset error (fatal)
[  188.061791][ T5774] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  188.174556][   T12] IPVS: starting estimator thread 0...
[  188.231793][ T5774] usb 1-1: Using ep0 maxpacket: 8
[  188.237515][ T5774] usb 1-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac
[  188.249826][ T5774] usb 1-1: config 0 has an invalid interface number: 6 but max is 2
[  188.258751][ T5774] usb 1-1: config 0 has an invalid interface number: 176 but max is 2
[  188.258782][ T5774] usb 1-1: config 0 has no interface number 1
[  188.258802][ T5774] usb 1-1: config 0 has no interface number 2
[  188.258880][ T5774] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  188.274134][ T7592] IPVS: using max 25 ests per chain, 60000 per kthread
[  188.306366][ T5774] usb 1-1: config 0 descriptor??
[  188.532540][ T7587] netlink: 12 bytes leftover after parsing attributes in process `syz.0.532'.
[  188.604087][ T5774] usb 1-1: Could not set interface, error -71
[  188.647733][ T5774] usb 1-1: USB disconnect, device number 6
[  189.893209][ T7612] comedi comedi1: reset error (fatal)
[  190.743650][   T30] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  191.271863][ T7633] comedi comedi1: reset error (fatal)
[  191.342632][   T30] usb 6-1: Using ep0 maxpacket: 16
[  191.343683][   T30] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  191.346106][   T30] usb 6-1: config index 0 descriptor too short (expected 51443, got 18)
[  191.367975][   T30] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  191.368027][   T30] usb 6-1: Product: syz
[  191.368065][   T30] usb 6-1: Manufacturer: syz
[  191.368090][   T30] usb 6-1: SerialNumber: syz
[  191.411017][   T30] r8152-cfgselector 6-1: Unknown version 0x0000
[  191.411058][   T30] r8152-cfgselector 6-1: config 0 descriptor??
[  191.743714][   T30] r8152-cfgselector 6-1: Unknown version 0x0000
[  191.751424][   T30] r8152-cfgselector 6-1: No union descriptors
[  191.790532][   T30] r8152-cfgselector 6-1: USB disconnect, device number 2
[  192.005848][ T7666] loop3: detected capacity change from 0 to 1024
[  193.615662][ T1307] ieee802154 phy0 wpan0: encryption failed: -22
[  193.615751][ T1307] ieee802154 phy1 wpan1: encryption failed: -22
[  193.795445][ T7688] gadgetfs: bound to dummy_udc driver
[  194.012510][ T7676] comedi comedi1: reset error (fatal)
[  194.053460][   T10] usb 1-1: new full-speed USB device number 7 using dummy_hcd
[  194.061133][    C0] gadgetfs: connected
[  194.061347][   T10] gadgetfs: disconnected
[  194.201973][    C0] gadgetfs: connected
[  194.207134][   T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00
[  194.218286][   T10] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  194.218332][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  194.261413][    C0] gadgetfs: configuration #1
[  196.285023][   T10] gadgetfs: suspended from state 3
[  196.285116][   T10] gadgetfs: disconnected
[  196.339256][ T5774] usb 1-1: USB disconnect, device number 7
[  196.969929][ T1003] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.194289][ T7706] comedi comedi1: reset error (fatal)
[  197.338315][ T1003] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.589247][ T1003] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.745119][ T1003] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.305711][ T5621] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  198.315709][ T5621] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  198.324309][ T5621] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  198.325555][ T5621] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  198.326586][ T5621] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  198.367142][ T1003] bridge_slave_1: left allmulticast mode
[  198.373497][ T1003] bridge_slave_1: left promiscuous mode
[  198.379405][ T1003] bridge0: port 2(bridge_slave_1) entered disabled state
[  198.419184][ T1003] bridge_slave_0: left allmulticast mode
[  198.426917][ T1003] bridge_slave_0: left promiscuous mode
[  198.434739][ T1003] bridge0: port 1(bridge_slave_0) entered disabled state
[  198.760976][ T1003] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  198.804715][ T1003] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  198.811787][ T7732] comedi comedi1: reset error (fatal)
[  198.833654][ T1003] bond0 (unregistering): Released all slaves
[  199.237280][ T7763] loop1: detected capacity change from 0 to 256
[  199.752372][ T1003] hsr_slave_0: left promiscuous mode
[  199.770901][ T1003] hsr_slave_1: left promiscuous mode
[  199.773301][ T1003] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  199.773324][ T1003] batman_adv: batadv0: Removing interface: batadv_slave_0
[  199.801406][ T1003] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  199.801453][ T1003] batman_adv: batadv0: Removing interface: batadv_slave_1
[  199.856939][ T1003] veth1_macvtap: left promiscuous mode
[  199.857108][ T1003] veth0_macvtap: left promiscuous mode
[  199.857220][ T1003] veth1_vlan: left promiscuous mode
[  199.857293][ T1003] veth0_vlan: left promiscuous mode
[  200.418358][   T52] Bluetooth: hci3: command tx timeout
[  200.755202][ T7780] comedi comedi1: reset error (fatal)
[  201.573715][ T1003] team0 (unregistering): Port device team_slave_1 removed
[  201.646544][ T1003] team0 (unregistering): Port device team_slave_0 removed
[  202.491995][   T52] Bluetooth: hci3: command tx timeout
[  202.696805][ T5272] 8021q: adding VLAN 0 to HW filter on device eth5
[  202.881395][ T7828] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  203.631145][ T7817] comedi comedi1: reset error (fatal)
[  203.909940][ T7837] loop1: detected capacity change from 0 to 1024
[  204.573272][   T52] Bluetooth: hci3: command tx timeout
[  204.919051][ T7838] comedi comedi1: reset error (fatal)
[  205.644555][ T7865] gadgetfs: bound to dummy_udc driver
[  207.801868][    T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!!
[  208.198158][ T7742] bridge0: port 1(bridge_slave_0) entered blocking state
[  208.198351][ T7742] bridge0: port 1(bridge_slave_0) entered disabled state
[  208.198497][ T7742] bridge_slave_0: entered allmulticast mode
[  208.200533][ T7742] bridge_slave_0: entered promiscuous mode
[  208.203474][ T7742] bridge0: port 2(bridge_slave_1) entered blocking state
[  208.203647][ T7742] bridge0: port 2(bridge_slave_1) entered disabled state
[  208.203778][ T7742] bridge_slave_1: entered allmulticast mode
[  208.205719][ T7742] bridge_slave_1: entered promiscuous mode
[  208.239348][   T52] Bluetooth: hci3: command tx timeout
[  208.337137][ T7742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  208.378828][ T7742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  208.598421][ T7742] team0: Port device team_slave_0 added
[  208.607061][ T5272] 8021q: adding VLAN 0 to HW filter on device eth6
[  208.633499][ T7742] team0: Port device team_slave_1 added
[  208.818819][    C1] I/O error, dev loop7, sector 10752 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2
[  208.819160][    C1] I/O error, dev loop7, sector 10752 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  208.819286][    C1] Buffer I/O error on dev loop7, logical block 1344, async page read
[  208.829313][ T7895] loop7: detected capacity change from 16384 to 0
[  208.862784][ T7742] batman_adv: batadv0: Adding interface: batadv_slave_0
[  208.862822][ T7742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  208.862854][ T7742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  208.874778][ T7742] batman_adv: batadv0: Adding interface: batadv_slave_1
[  208.874794][ T7742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  208.874824][ T7742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  209.659930][ T7742] hsr_slave_0: entered promiscuous mode
[  209.664414][ T7742] hsr_slave_1: entered promiscuous mode
[  209.665181][ T7742] debugfs: 'hsr0' already exists in 'hsr'
[  209.665202][ T7742] Cannot create hsr debugfs directory
[  210.001793][ T7902] comedi comedi1: reset error (fatal)
[  210.806016][ T7742] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  210.840591][ T7742] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  210.841523][ T7742] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  210.885705][ T7742] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  210.898845][ T7742] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  210.929829][ T7742] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  210.940677][ T7742] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  210.972615][ T7742] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  211.058073][ T4927] Bluetooth: hci2: command 0x0406 tx timeout
[  211.058485][ T4927] Bluetooth: hci1: command 0x0406 tx timeout
[  211.058545][ T4927] Bluetooth: hci5: command 0x0406 tx timeout
[  211.058584][ T4927] Bluetooth: hci4: command 0x0406 tx timeout
[  211.543860][ T7742] 8021q: adding VLAN 0 to HW filter on device bond0
[  211.627345][ T7742] 8021q: adding VLAN 0 to HW filter on device team0
[  211.681258][   T41] bridge0: port 1(bridge_slave_0) entered blocking state
[  211.681390][   T41] bridge0: port 1(bridge_slave_0) entered forwarding state
[  211.718709][ T1003] bridge0: port 2(bridge_slave_1) entered blocking state
[  211.718843][ T1003] bridge0: port 2(bridge_slave_1) entered forwarding state
[  212.065050][ T7961] loop4: detected capacity change from 0 to 1024
[  212.888869][ T5272] 8021q: adding VLAN 0 to HW filter on device eth7
[  214.089720][ T7973] comedi comedi1: reset error (fatal)
[  214.156687][ T8001] syzkaller0: entered promiscuous mode
[  214.162513][ T8001] syzkaller0: entered allmulticast mode
[  215.115880][ T8027] loop6: detected capacity change from 0 to 1024
[  216.001516][ T8039] loop5: detected capacity change from 0 to 1024
[  216.028314][ T5272] 8021q: adding VLAN 0 to HW filter on device eth8
[  216.537250][ T7742] 8021q: adding VLAN 0 to HW filter on device batadv0
[  217.244552][ T5758] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  217.415428][ T5758] usb 7-1: Using ep0 maxpacket: 16
[  217.427223][ T5758] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  217.438007][ T5758] usb 7-1: config index 0 descriptor too short (expected 51443, got 18)
[  217.457076][ T5758] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  217.457124][ T5758] usb 7-1: Product: syz
[  217.457164][ T5758] usb 7-1: Manufacturer: syz
[  217.457190][ T5758] usb 7-1: SerialNumber: syz
[  217.494543][ T5758] r8152-cfgselector 7-1: Unknown version 0x0000
[  217.501010][ T5758] r8152-cfgselector 7-1: config 0 descriptor??
[  217.748926][ T5758] r8152-cfgselector 7-1: Unknown version 0x0000
[  217.749262][ T5758] r8152-cfgselector 7-1: No union descriptors
[  217.811579][ T5758] r8152-cfgselector 7-1: USB disconnect, device number 2
[  218.043101][ T7742] veth0_vlan: entered promiscuous mode
[  218.052196][ T8084] loop5: detected capacity change from 0 to 1024
[  218.115378][ T7742] veth1_vlan: entered promiscuous mode
[  218.476856][ T7742] veth0_macvtap: entered promiscuous mode
[  218.574775][ T8071] comedi comedi1: reset error (fatal)
[  218.806824][ T7742] veth1_macvtap: entered promiscuous mode
[  218.905448][ T7742] batman_adv: batadv0: Interface activated: batadv_slave_0
[  218.934604][ T8096] loop6: detected capacity change from 0 to 1024
[  218.937934][ T7742] batman_adv: batadv0: Interface activated: batadv_slave_1
[  219.071731][ T1156] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  219.072272][ T1156] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  219.072356][ T1156] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  219.072441][ T1156] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  220.042573][ T1003] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  220.042622][ T1003] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  220.286709][   T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  220.286779][   T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  220.355580][ T8116] loop6: detected capacity change from 0 to 1024
[  221.038339][ T8125] loop0: detected capacity change from 0 to 1024
[  222.774989][ T8128] comedi comedi1: reset error (fatal)
[  223.307745][ T8161] loop6: detected capacity change from 0 to 1024
[  225.270810][ T8209] loop0: detected capacity change from 0 to 1024
[  225.313459][ T8186] comedi comedi1: reset error (fatal)
[  226.383209][ T8228] loop7: detected capacity change from 0 to 512
[  226.398720][ T8228] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  226.406518][ T8230] loop6: detected capacity change from 0 to 512
[  226.421243][ T8230] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  226.436643][ T8228] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ec01c, mo2=0003]
[  226.436812][ T8228] System zones: 1-2, 4-12, 8-8
[  226.446471][ T8230] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ec01c, mo2=0003]
[  226.446575][ T8230] System zones: 1-2, 4-12, 8-8
[  226.481974][ T8228] EXT4-fs error (device loop7): ext4_orphan_get:1403: inode #15: comm syz.7.728: iget: bad i_size value: 38620345925642
[  226.482117][ T8228] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  226.482977][ T8230] EXT4-fs error (device loop6): ext4_orphan_get:1403: inode #15: comm syz.6.729: iget: bad i_size value: 38620345925642
[  226.483009][ T8230] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  226.483674][ T8230] EXT4-fs error (device loop6): ext4_orphan_get:1408: comm syz.6.729: couldn't read orphan inode 15 (err -117)
[  226.483754][ T8230] loop6: lost filesystem error report for type 5 error -117
[  226.495190][    C1] EXT4-fs (loop7): error count since last fsck: 1
[  226.495212][    C1] EXT4-fs (loop7): initial error at time 1788692660: ext4_orphan_get:1403: inode 15
[  226.495248][    C1] EXT4-fs (loop7): last error at time 1788692660: ext4_orphan_get:1403: inode 15
[  226.505682][ T8230] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  226.527071][ T8228] EXT4-fs error (device loop7): ext4_orphan_get:1408: comm syz.7.728: couldn't read orphan inode 15 (err -117)
[  226.527106][ T8228] loop7: lost filesystem error report for type 5 error -117
[  226.562103][ T8228] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  226.665083][ T7742] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  226.719959][ T6475] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  229.011043][ T8265] loop6: detected capacity change from 0 to 1024
[  229.751760][ T8255] comedi comedi1: reset error (fatal)
[  230.096853][ T8285] gadgetfs: bound to dummy_udc driver
[  230.174377][ T8289] loop4: detected capacity change from 0 to 512
[  230.187862][ T8289] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  230.221190][ T8289] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ec01c, mo2=0003]
[  230.221325][ T8289] System zones: 1-2, 4-12, 8-8
[  230.241061][ T8289] EXT4-fs error (device loop4): ext4_orphan_get:1403: inode #15: comm syz.4.745: iget: bad i_size value: 38620345925642
[  230.241124][ T8289] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  230.243071][ T8289] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.745: couldn't read orphan inode 15 (err -117)
[  230.243104][ T8289] loop4: lost filesystem error report for type 5 error -117
[  231.877301][ T5766] usb 1-1: new full-speed USB device number 8 using dummy_hcd
[  231.877706][    C0] gadgetfs: connected
[  231.877856][ T5766] gadgetfs: disconnected
[  231.915253][ T8289] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  232.043599][    C0] gadgetfs: connected
[  232.048474][ T5766] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00
[  232.052759][ T5766] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  232.052802][ T5766] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  232.080907][    C0] gadgetfs: configuration #1
[  232.136094][ T5627] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  232.314084][ T8285] gadgetfs: suspended from state 3
[  232.315969][ T8285] gadgetfs: disconnected
[  232.324074][ T5766] usb 1-1: USB disconnect, device number 8
[  232.634567][ T8319] loop1: detected capacity change from 0 to 1024
[  233.834027][ T8325] comedi comedi1: reset error (fatal)
[  236.160950][ T8368] loop4: detected capacity change from 0 to 1024
[  238.453882][ T8398] comedi comedi1: reset error (fatal)
[  239.951421][ T8401] comedi comedi1: reset error (fatal)
[  240.638434][ T8439] loop1: detected capacity change from 0 to 3
[  240.641334][ T8439] squashfs: Unknown parameter '°fXšôÕY˜]ê´'
[  241.841271][ T8448] loop1: detected capacity change from 0 to 1024
[  242.739412][ T8462] loop7: detected capacity change from 0 to 16384
[  244.537803][ T8470] comedi comedi1: reset error (fatal)
[  245.992608][ T8486] comedi comedi1: reset error (fatal)
[  246.033058][ T8506] gadgetfs: bound to dummy_udc driver
[  246.282804][ T5766] usb 1-1: new full-speed USB device number 9 using dummy_hcd
[  246.283054][    C0] gadgetfs: connected
[  246.284189][ T5766] gadgetfs: disconnected
[  246.443900][    C0] gadgetfs: connected
[  246.447594][ T5766] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00
[  246.449709][ T5766] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  246.449751][ T5766] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  246.462786][    C0] gadgetfs: configuration #1
[  246.746818][ T8506] gadgetfs: suspended from state 3
[  246.754560][ T8506] gadgetfs: disconnected
[  246.768234][ T5758] usb 1-1: USB disconnect, device number 9
[  246.798980][ T8515] loop4: detected capacity change from 0 to 1024
[  246.811200][ T8515] =======================================================
[  246.811200][ T8515] WARNING: The mand mount option has been deprecated and
[  246.811200][ T8515]          and is ignored by this kernel. Remove the mand
[  246.811200][ T8515]          option from the mount to silence this warning.
[  246.811200][ T8515] =======================================================
[  246.811476][ T8515] ext4: Unknown parameter 'fscontext'
[  246.929301][ T8515] netlink: 92 bytes leftover after parsing attributes in process `syz.4.800'.
[  247.069130][ T8521] loop6: detected capacity change from 0 to 1024
[  249.672464][   T10] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  249.822252][   T10] usb 1-1: Using ep0 maxpacket: 32
[  249.826141][   T10] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  249.828339][   T10] usb 1-1: config 0 has an invalid interface number: 51 but max is 0
[  249.828366][   T10] usb 1-1: config 0 has no interface number 0
[  249.838045][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  249.838074][   T10] usb 1-1: Product: syz
[  249.838091][   T10] usb 1-1: Manufacturer: syz
[  249.838108][   T10] usb 1-1: SerialNumber: syz
[  249.870731][   T10] usb 1-1: config 0 descriptor??
[  249.912591][   T10] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  250.159956][   T10] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  250.216085][   T10] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  250.233176][ T8555] loop6: detected capacity change from 0 to 256
[  250.975041][ T8552] comedi comedi1: reset error (fatal)
[  251.011679][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[  252.015128][ T5619] Bluetooth: hci0: command 0x0406 tx timeout
[  252.761707][    T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!!
[  252.895644][    C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71
[  252.905720][ T5766] usb 1-1: USB disconnect, device number 10
[  252.940637][ T5766] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  252.985307][ T5766] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  252.997429][ T5766] quatech2 1-1:0.51: device disconnected
[  255.094714][ T1307] ieee802154 phy0 wpan0: encryption failed: -22
[  255.094806][ T1307] ieee802154 phy1 wpan1: encryption failed: -22
[  255.389911][ T8585] loop1: detected capacity change from 0 to 1024
[  256.141942][ T8587] netlink: 20 bytes leftover after parsing attributes in process `syz.0.825'.
[  256.805578][ T8603] loop7: detected capacity change from 0 to 16384
[  257.103863][ T8605] tipc: Started in network mode
[  257.109979][ T8605] tipc: Node identity babff73d6039, cluster identity 4711
[  257.118540][ T8605] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  257.126433][ T8591] comedi comedi1: reset error (fatal)
[  257.141921][ T8587] loop0: detected capacity change from 0 to 32768
[  257.149396][ T8587] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.825 (8587)
[  257.174399][ T8587] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  257.174452][ T8587] BTRFS info (device loop0): using crc32c checksum algorithm
[  257.279859][ T8604] tipc: Disabling bearer <eth:syzkaller0>
[  257.316557][ T8587] BTRFS info (device loop0): enabling ssd optimizations
[  257.316609][ T8587] BTRFS info (device loop0): turning on flush-on-commit
[  257.316948][ T8587] BTRFS info (device loop0): enabling free space tree
[  257.316970][ T8587] BTRFS info (device loop0): enabling auto defrag
[  257.316991][ T8587] BTRFS info (device loop0): use lzo compression, level 1
[  257.317014][ T8587] BTRFS info (device loop0): max_inline set to 4096
[  258.011367][ T5617] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  260.241802][ T5736] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  260.392960][ T5736] usb 5-1: Using ep0 maxpacket: 32
[  260.419120][ T5736] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  260.424257][ T5736] usb 5-1: config 0 has an invalid interface number: 51 but max is 0
[  260.424286][ T5736] usb 5-1: config 0 has no interface number 0
[  260.452744][ T5736] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  260.452796][ T5736] usb 5-1: Product: syz
[  260.452832][ T5736] usb 5-1: Manufacturer: syz
[  260.452856][ T5736] usb 5-1: SerialNumber: syz
[  260.483690][ T5736] usb 5-1: config 0 descriptor??
[  260.505729][ T5736] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  261.296669][ T5736] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  261.306562][ T5736] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  261.523073][ T8653] syzkaller0: entered promiscuous mode
[  261.528825][ T8653] syzkaller0: entered allmulticast mode
[  261.905546][ T8669] netlink: 20 bytes leftover after parsing attributes in process `syz.1.844'.
[  262.701673][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  263.501680][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  263.621677][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  263.691680][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[  263.841676][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  264.346209][ T8658] comedi comedi1: reset error (fatal)
[  264.498057][    C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71
[  264.501422][  T187] usb 5-1: USB disconnect, device number 3
[  264.570466][  T187] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  264.591002][  T187] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  264.592204][  T187] quatech2 5-1:0.51: device disconnected
[  267.681607][ T8702] loop7: detected capacity change from 0 to 16384
[  270.139482][ T8710] netlink: 20 bytes leftover after parsing attributes in process `syz.4.858'.
[  272.069515][ T8715] comedi comedi1: reset error (fatal)
[  272.483108][ T8730] loop7: detected capacity change from 0 to 16384
[  272.604450][ T8733] netlink: 20 bytes leftover after parsing attributes in process `syz.7.866'.
[  272.901874][ T8732] loop7: detected capacity change from 16384 to 0
[  272.903616][    C0] I/O error, dev loop7, sector 13824 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2
[  273.592146][ T8745] ip_tables: iptables: counters copy to user failed while replacing table
[  273.884055][ T8756] netlink: 36 bytes leftover after parsing attributes in process `syz.6.873'.
[  273.935958][ T8759] loop1: detected capacity change from 0 to 1024
[  274.471954][   T10] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  274.639244][   T10] usb 7-1: Using ep0 maxpacket: 8
[  274.642518][   T10] usb 7-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac
[  274.647999][   T10] usb 7-1: config 0 has an invalid interface number: 6 but max is 2
[  274.648025][   T10] usb 7-1: config 0 has an invalid interface number: 176 but max is 2
[  274.648049][   T10] usb 7-1: config 0 has no interface number 1
[  274.648068][   T10] usb 7-1: config 0 has no interface number 2
[  274.648135][   T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  274.675868][   T10] usb 7-1: config 0 descriptor??
[  274.745329][ T8765] netlink: 20 bytes leftover after parsing attributes in process `syz.7.875'.
[  274.946111][ T8756] netlink: 12 bytes leftover after parsing attributes in process `syz.6.873'.
[  275.643339][   T10] usb 7-1: Could not set interface, error -71
[  275.665884][   T10] usb 7-1: USB disconnect, device number 3
[  277.990362][ T8778] loop4: detected capacity change from 0 to 32768
[  278.424148][ T8778] (syz.4.879,8778,1):ocfs2_check_set_options:1264 ERROR: ACL support requested but extended attributes feature is not enabled
[  278.478508][ T8778] (syz.4.879,8778,1):ocfs2_fill_super:1177 ERROR: status = -22
[  280.154099][ T8810] netlink: 36 bytes leftover after parsing attributes in process `syz.7.887'.
[  280.156653][ T8809] loop6: detected capacity change from 0 to 1024
[  280.592050][ T5736] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  280.826631][ T5736] usb 8-1: Using ep0 maxpacket: 8
[  280.882621][ T5736] usb 8-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac
[  280.924760][ T5736] usb 8-1: config 0 has an invalid interface number: 6 but max is 2
[  280.928009][ T5736] usb 8-1: config 0 has an invalid interface number: 176 but max is 2
[  280.928036][ T5736] usb 8-1: config 0 has no interface number 1
[  280.928055][ T5736] usb 8-1: config 0 has no interface number 2
[  280.928126][ T5736] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  280.955668][ T5736] usb 8-1: config 0 descriptor??
[  281.074029][ T5758] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  281.208914][ T8810] netlink: 12 bytes leftover after parsing attributes in process `syz.7.887'.
[  281.221738][ T5758] usb 5-1: Using ep0 maxpacket: 32
[  281.224062][ T5758] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  281.230777][ T5758] usb 5-1: config 0 has an invalid interface number: 51 but max is 0
[  281.230830][ T5758] usb 5-1: config 0 has no interface number 0
[  281.242369][ T5758] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  281.242396][ T5758] usb 5-1: Product: syz
[  281.242449][ T5758] usb 5-1: Manufacturer: syz
[  281.242466][ T5758] usb 5-1: SerialNumber: syz
[  281.290381][ T5758] usb 5-1: config 0 descriptor??
[  281.312409][ T5758] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  281.333762][ T5736] usb 8-1: Could not set interface, error -71
[  281.400751][ T5736] usb 8-1: USB disconnect, device number 2
[  281.573405][ T5758] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  281.609838][ T5758] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  281.924941][    C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71
[  281.925481][  T187] usb 5-1: USB disconnect, device number 4
[  281.983871][  T187] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  282.040350][  T187] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  282.055859][  T187] quatech2 5-1:0.51: device disconnected
[  284.204830][ T8870] loop5: detected capacity change from 0 to 3
[  284.214238][ T8870] squashfs: Unknown parameter '°fXšôÕY˜]ê´'
[  284.341768][ T5736] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  284.439364][ T8874] netlink: 36 bytes leftover after parsing attributes in process `syz.0.913'.
[  284.462196][  T936] usb 2-1: new full-speed USB device number 2 using dummy_hcd
[  284.491988][ T5736] usb 8-1: Using ep0 maxpacket: 16
[  284.492741][ T5736] usb 8-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  284.493818][ T5736] usb 8-1: config index 0 descriptor too short (expected 51443, got 18)
[  284.502420][ T5736] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  284.502447][ T5736] usb 8-1: Product: syz
[  284.502465][ T5736] usb 8-1: Manufacturer: syz
[  284.502482][ T5736] usb 8-1: SerialNumber: syz
[  284.516912][ T5736] r8152-cfgselector 8-1: Unknown version 0x0000
[  284.516936][ T5736] r8152-cfgselector 8-1: config 0 descriptor??
[  284.701767][  T187] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  284.954548][ T5736] r8152-cfgselector 8-1: Unknown version 0x0000
[  284.955087][ T5736] r8152-cfgselector 8-1: No union descriptors
[  284.969808][ T5736] r8152-cfgselector 8-1: USB disconnect, device number 3
[  285.102673][  T187] usb 1-1: Using ep0 maxpacket: 8
[  285.108388][  T187] usb 1-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac
[  285.122793][  T187] usb 1-1: config 0 has an invalid interface number: 6 but max is 2
[  285.122838][  T187] usb 1-1: config 0 has an invalid interface number: 176 but max is 2
[  285.122882][  T187] usb 1-1: config 0 has no interface number 1
[  285.122907][  T187] usb 1-1: config 0 has no interface number 2
[  285.122977][  T187] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  285.181149][  T187] usb 1-1: config 0 descriptor??
[  286.181858][ T8874] netlink: 12 bytes leftover after parsing attributes in process `syz.0.913'.
[  286.297838][  T187] usb 1-1: Could not set interface, error -71
[  286.357263][  T187] usb 1-1: USB disconnect, device number 11
[  286.595610][ T8897] loop7: detected capacity change from 0 to 256
[  286.842175][  T187] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  287.012790][  T187] usb 6-1: Using ep0 maxpacket: 32
[  287.018755][  T187] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  287.030220][  T187] usb 6-1: config 0 has an invalid interface number: 51 but max is 0
[  287.030266][  T187] usb 6-1: config 0 has no interface number 0
[  287.491101][  T187] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  287.491152][  T187] usb 6-1: Product: syz
[  287.491177][  T187] usb 6-1: Manufacturer: syz
[  287.491201][  T187] usb 6-1: SerialNumber: syz
[  287.540079][  T187] usb 6-1: config 0 descriptor??
[  287.554207][  T187] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  287.889435][  T187] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  287.904875][  T187] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  288.313574][    C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71
[  288.314254][  T187] usb 6-1: USB disconnect, device number 3
[  288.338432][  T187] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  288.365111][  T187] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  288.366304][  T187] quatech2 6-1:0.51: device disconnected
[  289.247486][ T8923] comedi comedi1: reset error (fatal)
[  289.348997][ T8943] loop0: detected capacity change from 0 to 1024
[  289.356999][ T8943] ext4: Unknown parameter 'fscontext'
[  289.368228][ T8943] netlink: 100 bytes leftover after parsing attributes in process `syz.0.937'.
[  289.473116][  T187] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  289.631895][  T187] usb 6-1: Using ep0 maxpacket: 16
[  289.632804][  T187] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  289.637115][  T187] usb 6-1: config index 0 descriptor too short (expected 51443, got 18)
[  289.644033][  T187] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  289.644059][  T187] usb 6-1: Product: syz
[  289.644076][  T187] usb 6-1: Manufacturer: syz
[  289.644094][  T187] usb 6-1: SerialNumber: syz
[  289.664726][  T187] r8152-cfgselector 6-1: Unknown version 0x0000
[  289.664750][  T187] r8152-cfgselector 6-1: config 0 descriptor??
[  289.693760][  T936] usb 2-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40
[  289.703682][  T936] usb 2-1: unable to read config index 0 descriptor/start: -32
[  289.703836][  T936] usb 2-1: chopping to 0 config(s)
[  289.703874][  T936] usb 2-1: can't read configurations, error -32
[  289.860327][  T936] usb 2-1: new full-speed USB device number 3 using dummy_hcd
[  289.896542][  T187] r8152-cfgselector 6-1: Unknown version 0x0000
[  289.896986][  T187] r8152-cfgselector 6-1: No union descriptors
[  289.919250][  T187] r8152-cfgselector 6-1: USB disconnect, device number 4
[  289.991921][  T936] usb 2-1: device descriptor read/64, error -32
[  290.116228][  T936] usb usb2-port1: attempt power cycle
[  290.801726][  T936] usb 2-1: new full-speed USB device number 4 using dummy_hcd
[  290.824647][  T936] usb 2-1: device descriptor read/8, error -32
[  291.121262][  T936] usb 2-1: new full-speed USB device number 5 using dummy_hcd
[  291.142296][  T936] usb 2-1: device descriptor read/8, error -32
[  291.251977][  T936] usb usb2-port1: unable to enumerate USB device
[  293.983729][ T8975] loop7: detected capacity change from 0 to 32768
[  294.029975][ T8978] comedi comedi1: reset error (fatal)
[  294.134469][ T8975] (syz.7.948,8975,1):ocfs2_check_set_options:1264 ERROR: ACL support requested but extended attributes feature is not enabled
[  294.158922][ T8975] (syz.7.948,8975,1):ocfs2_fill_super:1177 ERROR: status = -22
[  297.027494][ T9024] loop0: detected capacity change from 0 to 64
[  297.078321][ T9022] syzkaller0: entered promiscuous mode
[  297.078368][ T9022] syzkaller0: entered allmulticast mode
[  300.482848][ T9063] loop0: detected capacity change from 0 to 256
[  300.832350][   T30] usb 2-1: new full-speed USB device number 6 using dummy_hcd
[  303.281724][ T5736] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  303.443192][ T5736] usb 1-1: Using ep0 maxpacket: 32
[  303.450154][ T5736] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  303.466581][ T5736] usb 1-1: config 0 has an invalid interface number: 51 but max is 0
[  303.466655][ T5736] usb 1-1: config 0 has no interface number 0
[  303.489772][ T5736] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  303.489844][ T5736] usb 1-1: Product: syz
[  303.489882][ T5736] usb 1-1: Manufacturer: syz
[  303.489906][ T5736] usb 1-1: SerialNumber: syz
[  303.522121][ T5736] usb 1-1: config 0 descriptor??
[  303.537887][ T5736] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  303.590830][ T9100] loop6: detected capacity change from 0 to 1024
[  303.595329][ T9100] ext4: Unknown parameter 'fscontext'
[  303.758345][ T5736] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  303.779136][ T5736] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  303.805196][ T9090] comedi comedi1: reset error (fatal)
[  304.072616][ T5774] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  304.138237][ T9109] ip_tables: iptables: counters copy to user failed while replacing table
[  304.147723][    C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71
[  304.156971][ T5736] usb 1-1: USB disconnect, device number 12
[  304.182040][ T5736] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  304.204718][ T5736] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  304.228374][ T5736] quatech2 1-1:0.51: device disconnected
[  304.239426][ T5774] usb 5-1: Using ep0 maxpacket: 32
[  304.268983][ T5774] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  304.273932][ T5774] usb 5-1: config 0 has an invalid interface number: 51 but max is 0
[  304.273960][ T5774] usb 5-1: config 0 has no interface number 0
[  304.280693][ T5774] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  304.280722][ T5774] usb 5-1: Product: syz
[  304.280740][ T5774] usb 5-1: Manufacturer: syz
[  304.280756][ T5774] usb 5-1: SerialNumber: syz
[  304.288630][ T5774] usb 5-1: config 0 descriptor??
[  304.319521][ T5774] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  304.523538][ T5774] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  304.580939][ T5774] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  307.275806][    C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71
[  307.278677][ T5774] usb 5-1: USB disconnect, device number 5
[  307.363421][ T5774] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  307.413572][ T5774] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  307.423642][ T5774] quatech2 5-1:0.51: device disconnected
[  307.612806][   T30] usb 2-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40
[  307.629668][   T30] usb 2-1: unable to read config index 0 descriptor/start: -32
[  307.629727][   T30] usb 2-1: chopping to 0 config(s)
[  307.629763][   T30] usb 2-1: can't read configurations, error -32
[  307.772320][   T30] usb 2-1: new full-speed USB device number 7 using dummy_hcd
[  307.901990][   T30] usb 2-1: device descriptor read/64, error -32
[  308.014050][   T30] usb usb2-port1: attempt power cycle
[  308.351710][   T30] usb 2-1: new full-speed USB device number 8 using dummy_hcd
[  308.372089][   T30] usb 2-1: device descriptor read/8, error -32
[  308.612557][   T30] usb 2-1: new full-speed USB device number 9 using dummy_hcd
[  308.632867][   T30] usb 2-1: device descriptor read/8, error -32
[  308.742697][   T30] usb usb2-port1: unable to enumerate USB device
[  309.002967][ T9136] comedi comedi1: reset error (fatal)
[  309.415296][ T9152] gadgetfs: bound to dummy_udc driver
[  309.476252][ T9156] loop0: detected capacity change from 0 to 1024
[  310.104503][   T30] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  310.263829][   T30] usb 5-1: Using ep0 maxpacket: 32
[  310.271877][   T30] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  310.300821][   T30] usb 5-1: config 0 has an invalid interface number: 51 but max is 0
[  310.300877][   T30] usb 5-1: config 0 has no interface number 0
[  310.331530][   T30] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  310.331584][   T30] usb 5-1: Product: syz
[  310.331967][   T30] usb 5-1: Manufacturer: syz
[  310.332006][   T30] usb 5-1: SerialNumber: syz
[  311.828083][ T9150] comedi comedi1: reset error (fatal)
[  311.871153][   T30] usb 5-1: config 0 descriptor??
[  312.008012][   T30] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  312.141304][   T30] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  312.194204][   T30] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  312.309043][ T9186] gadgetfs: bound to dummy_udc driver
[  312.464531][ T9190] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1021'.
[  312.465016][ T9190] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  312.510945][    C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71
[  312.519124][  T187] usb 5-1: USB disconnect, device number 6
[  312.564283][   T30] usb 1-1: new full-speed USB device number 13 using dummy_hcd
[  312.564541][    C1] gadgetfs: connected
[  312.566203][   T30] gadgetfs: disconnected
[  312.633180][  T187] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  312.712222][    C1] gadgetfs: connected
[  312.713368][   T30] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00
[  312.715217][   T30] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  312.715258][   T30] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  313.200494][  T187] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  313.218941][    C1] gadgetfs: configuration #1
[  313.234205][  T187] quatech2 5-1:0.51: device disconnected
[  313.692240][   T30] gadgetfs: suspended from state 3
[  313.692348][   T30] gadgetfs: disconnected
[  313.734529][   T30] usb 1-1: USB disconnect, device number 13
[  314.292375][ T9199] comedi comedi1: reset error (fatal)
[  316.270114][   T41] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  316.498382][ T1307] ieee802154 phy0 wpan0: encryption failed: -22
[  316.500004][ T1307] ieee802154 phy1 wpan1: encryption failed: -22
[  316.526128][   T41] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  316.648183][ T9231] loop6: detected capacity change from 0 to 1024
[  316.827023][   T41] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  316.996615][   T41] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  317.113572][ T9224] comedi comedi1: reset error (fatal)
[  317.381884][  T936] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  317.543613][  T936] usb 8-1: Using ep0 maxpacket: 32
[  317.548074][  T936] usb 8-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  317.554678][  T936] usb 8-1: config 0 has an invalid interface number: 51 but max is 0
[  317.554708][  T936] usb 8-1: config 0 has no interface number 0
[  318.067182][  T936] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  318.067239][  T936] usb 8-1: Product: syz
[  318.067256][  T936] usb 8-1: Manufacturer: syz
[  318.067274][  T936] usb 8-1: SerialNumber: syz
[  318.114959][  T936] usb 8-1: config 0 descriptor??
[  318.195652][  T936] quatech2 8-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  318.222391][   T41] bridge_slave_1: left allmulticast mode
[  318.222504][   T41] bridge_slave_1: left promiscuous mode
[  318.223907][   T41] bridge0: port 2(bridge_slave_1) entered disabled state
[  318.249279][   T41] bridge_slave_0: left allmulticast mode
[  318.249342][   T41] bridge_slave_0: left promiscuous mode
[  318.249644][   T41] bridge0: port 1(bridge_slave_0) entered disabled state
[  318.418203][  T936] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  318.442884][  T936] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  319.195761][ T5619] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  319.207292][ T5619] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  319.217237][ T5619] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  319.218964][ T5619] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  319.221750][ T5619] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  321.318483][ T5619] Bluetooth: hci2: command tx timeout
[  321.626557][    C1] usb 8-1: qt2_read_bulk_callback - non-zero urb status: -71
[  321.634701][ T5774] usb 8-1: USB disconnect, device number 4
[  321.683165][ T5774] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  321.728270][ T5774] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  321.754510][ T5774] quatech2 8-1:0.51: device disconnected
[  322.544145][   T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  322.600750][   T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  322.601875][ T9272] comedi comedi1: reset error (fatal)
[  322.630611][   T41] bond0 (unregistering): Released all slaves
[  322.960346][   T41] tipc: Left network mode
[  323.371745][ T5619] Bluetooth: hci2: command tx timeout
[  323.694949][ T5619] Bluetooth: hci3: command 0x0406 tx timeout
[  325.026031][ T9300] loop0: detected capacity change from 0 to 32768
[  325.254546][ T9300] (syz.0.1047,9300,0):ocfs2_check_set_options:1264 ERROR: ACL support requested but extended attributes feature is not enabled
[  325.293635][ T9300] (syz.0.1047,9300,0):ocfs2_fill_super:1177 ERROR: status = -22
[  325.451764][ T5621] Bluetooth: hci2: command tx timeout
[  325.777841][ T9304] comedi comedi1: reset error (fatal)
[  325.962951][ T5272] 8021q: adding VLAN 0 to HW filter on device eth9
[  326.369739][ T9321] gadgetfs: bound to dummy_udc driver
[  326.591222][ T9329] loop0: detected capacity change from 0 to 3
[  326.594162][ T9329] squashfs: Unknown parameter '°fXšôÕY˜]ê´'
[  327.531929][ T5621] Bluetooth: hci2: command tx timeout
[  327.582489][ T9346] gadgetfs: bound to dummy_udc driver
[  327.720589][ T5736] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  327.769044][ T9329] loop0: detected capacity change from 0 to 131072
[  327.769939][ T9329] f2fs: Unknown parameter ''
[  329.304835][   T25] usb 1-1: new full-speed USB device number 14 using dummy_hcd
[  329.305082][    C1] gadgetfs: connected
[  329.305442][   T25] gadgetfs: disconnected
[  329.472432][ T5736] usb 7-1: Using ep0 maxpacket: 32
[  329.476317][   T41] hsr_slave_0: left promiscuous mode
[  329.481873][ T5736] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  329.483090][ T5736] usb 7-1: config 0 has an invalid interface number: 51 but max is 0
[  329.483134][ T5736] usb 7-1: config 0 has no interface number 0
[  329.499438][ T5736] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  329.499470][ T5736] usb 7-1: Product: syz
[  329.499487][ T5736] usb 7-1: Manufacturer: syz
[  329.499505][ T5736] usb 7-1: SerialNumber: syz
[  329.531985][    C1] gadgetfs: connected
[  329.536835][   T25] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00
[  329.538690][   T41] hsr_slave_1: left promiscuous mode
[  329.539743][   T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  329.539765][   T41] batman_adv: batadv0: Removing interface: batadv_slave_0
[  329.540072][   T25] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  329.540121][   T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  329.550318][ T5736] usb 7-1: config 0 descriptor??
[  329.594257][    C1] gadgetfs: configuration #1
[  329.596463][   T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  329.596485][   T41] batman_adv: batadv0: Removing interface: batadv_slave_1
[  329.616899][ T5736] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  329.767809][ T9355] netlink: 'syz.0.1053': attribute type 1 has an invalid length.
[  329.770195][   T41] veth1_macvtap: left promiscuous mode
[  329.770234][   T41] veth0_macvtap: left promiscuous mode
[  329.770375][   T41] veth1_vlan: left promiscuous mode
[  329.770494][   T41] veth0_vlan: left promiscuous mode
[  329.817403][ T9346] gadgetfs: suspended from state 3
[  329.817625][ T9346] gadgetfs: disconnected
[  329.857272][   T25] usb 1-1: USB disconnect, device number 14
[  329.910604][ T5736] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  330.028995][ T5736] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  330.320367][ T9362] loop5: detected capacity change from 0 to 1024
[  332.599493][    C1] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71
[  332.608709][   T10] usb 7-1: USB disconnect, device number 4
[  332.660411][   T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  332.696065][   T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  332.709337][   T10] quatech2 7-1:0.51: device disconnected
[  333.533805][   T41] team0 (unregistering): Port device team_slave_1 removed
[  333.581517][   T41] team0 (unregistering): Port device team_slave_0 removed
[  333.689976][ T9380] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1064'.
[  334.240145][ T5272] 8021q: adding VLAN 0 to HW filter on device eth10
[  334.915409][ T9382] comedi comedi1: reset error (fatal)
[  338.148321][   T25] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  338.295531][   T25] usb 1-1: device descriptor read/64, error -71
[  338.534105][   T25] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  338.874731][    T9] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  339.125457][ T9433] loop0: detected capacity change from 0 to 64
[  339.162094][    T9] usb 8-1: Using ep0 maxpacket: 32
[  339.166152][    T9] usb 8-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  339.169735][    T9] usb 8-1: config 0 has an invalid interface number: 51 but max is 0
[  339.169761][    T9] usb 8-1: config 0 has no interface number 0
[  339.190346][    T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  339.190374][    T9] usb 8-1: Product: syz
[  339.190392][    T9] usb 8-1: Manufacturer: syz
[  339.190409][    T9] usb 8-1: SerialNumber: syz
[  339.205875][    T9] usb 8-1: config 0 descriptor??
[  339.211111][    T9] quatech2 8-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  339.882516][    T9] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  339.926518][    T9] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  340.472612][ T9257] bridge0: port 1(bridge_slave_0) entered blocking state
[  340.475108][ T9257] bridge0: port 1(bridge_slave_0) entered disabled state
[  340.475279][ T9257] bridge_slave_0: entered allmulticast mode
[  340.480630][ T9257] bridge_slave_0: entered promiscuous mode
[  340.504176][ T9257] bridge0: port 2(bridge_slave_1) entered blocking state
[  340.504335][ T9257] bridge0: port 2(bridge_slave_1) entered disabled state
[  340.504497][ T9257] bridge_slave_1: entered allmulticast mode
[  340.518647][ T9257] bridge_slave_1: entered promiscuous mode
[  340.538617][ T5272] 8021q: adding VLAN 0 to HW filter on device eth11
[  340.764269][ T9257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  340.789149][ T9257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  340.962366][ T9451] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1077'.
[  341.021291][ T9257] team0: Port device team_slave_0 added
[  341.047753][ T9257] team0: Port device team_slave_1 added
[  341.274302][ T9257] batman_adv: batadv0: Adding interface: batadv_slave_0
[  341.274343][ T9257] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  341.274374][ T9257] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  341.306555][ T9257] batman_adv: batadv0: Adding interface: batadv_slave_1
[  341.306577][ T9257] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  341.306608][ T9257] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  341.736495][ T9257] hsr_slave_0: entered promiscuous mode
[  341.745419][ T9257] hsr_slave_1: entered promiscuous mode
[  341.750034][ T9257] debugfs: 'hsr0' already exists in 'hsr'
[  341.750143][ T9257] Cannot create hsr debugfs directory
[  341.814402][    C0] usb 8-1: qt2_read_bulk_callback - non-zero urb status: -71
[  341.818056][   T10] usb 8-1: USB disconnect, device number 5
[  341.984791][   T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  342.037456][   T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  342.057348][   T10] quatech2 8-1:0.51: device disconnected
[  343.924447][ T9462] comedi comedi1: reset error (fatal)
[  345.557509][ T9499] loop7: detected capacity change from 0 to 16384
[  345.582392][ T9501] loop4: detected capacity change from 0 to 1024
[  345.592622][ T9501] ext4: Unknown parameter 'fscontext'
[  345.804457][ T9504] loop7: detected capacity change from 16384 to 0
[  345.811479][    C1] I/O error, dev loop7, sector 15392 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2
[  345.825711][    C0] I/O error, dev loop7, sector 3072 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 2
[  345.910623][ T9511] loop6: detected capacity change from 0 to 1024
[  346.122977][ T5758] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  346.139771][ T9257] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  346.184277][ T9257] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  346.192480][ T9257] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  346.211778][ T9257] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  346.216507][ T9257] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  346.301740][ T5758] usb 5-1: Using ep0 maxpacket: 32
[  346.308195][ T5758] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  346.317205][ T9515] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  346.553682][ T9257] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  346.562091][ T5758] usb 5-1: config 0 has an invalid interface number: 51 but max is 0
[  346.562143][ T5758] usb 5-1: config 0 has no interface number 0
[  346.574871][ T5272] 8021q: adding VLAN 0 to HW filter on device eth12
[  346.585827][ T5758] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  346.585879][ T5758] usb 5-1: Product: syz
[  346.585916][ T5758] usb 5-1: Manufacturer: syz
[  346.585941][ T5758] usb 5-1: SerialNumber: syz
[  346.934748][ T9257] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  346.952769][ T5758] usb 5-1: config 0 descriptor??
[  346.972331][ T9257] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  346.983154][ T5758] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  346.993375][ T9517] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1091'.
[  347.315502][ T5758] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  347.386682][ T5758] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  347.446705][ T9257] 8021q: adding VLAN 0 to HW filter on device bond0
[  347.616588][ T9257] 8021q: adding VLAN 0 to HW filter on device team0
[  347.657722][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  347.657851][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  347.728883][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  347.729038][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  347.903034][    T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  348.064934][    T9] usb 6-1: Using ep0 maxpacket: 32
[  348.069105][    T9] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  348.079436][    T9] usb 6-1: config 0 has an invalid interface number: 51 but max is 0
[  348.079466][    T9] usb 6-1: config 0 has no interface number 0
[  348.086338][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  348.086367][    T9] usb 6-1: Product: syz
[  348.086385][    T9] usb 6-1: Manufacturer: syz
[  348.086402][    T9] usb 6-1: SerialNumber: syz
[  348.115231][    T9] usb 6-1: config 0 descriptor??
[  348.145358][    T9] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  348.366479][    T9] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB2
[  348.412514][    T9] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB3
[  348.528006][    C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71
[  348.537869][  T936] usb 5-1: USB disconnect, device number 7
[  348.576204][  T936] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  348.614639][  T936] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  348.629209][  T936] quatech2 5-1:0.51: device disconnected
[  351.495540][    C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71
[  351.507558][ T5758] usb 6-1: USB disconnect, device number 5
[  351.540234][ T5758] quatech-serial ttyUSB2: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB2
[  351.575608][ T5758] quatech-serial ttyUSB3: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB3
[  351.614946][ T5758] quatech2 6-1:0.51: device disconnected
[  352.421685][ T9565] comedi comedi1: reset error (fatal)
[  352.690455][ T9257] 8021q: adding VLAN 0 to HW filter on device batadv0
[  354.596354][ T9590] loop5: detected capacity change from 0 to 1024
[  354.599167][ T9590] ext4: Unknown parameter 'fscontext'
[  359.406945][ T9257] veth0_vlan: entered promiscuous mode
[  359.438650][ T9257] veth1_vlan: entered promiscuous mode
[  359.444705][ T5758] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  359.460910][ T9626] loop5: detected capacity change from 0 to 1024
[  359.597167][ T9257] veth0_macvtap: entered promiscuous mode
[  359.603266][ T5758] usb 7-1: Using ep0 maxpacket: 32
[  359.609131][ T5758] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  359.619950][ T5758] usb 7-1: config 0 has an invalid interface number: 51 but max is 0
[  359.619996][ T5758] usb 7-1: config 0 has no interface number 0
[  359.620845][ T9257] veth1_macvtap: entered promiscuous mode
[  359.645796][ T5758] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  359.645849][ T5758] usb 7-1: Product: syz
[  359.645892][ T5758] usb 7-1: Manufacturer: syz
[  359.645917][ T5758] usb 7-1: SerialNumber: syz
[  359.679858][ T5758] usb 7-1: config 0 descriptor??
[  359.709022][ T5758] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  359.737873][ T9257] batman_adv: batadv0: Interface activated: batadv_slave_0
[  359.799998][ T9257] batman_adv: batadv0: Interface activated: batadv_slave_1
[  359.843731][ T1003] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  359.844751][ T1093] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  359.845079][ T1093] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  359.847767][ T1093] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  359.917681][ T5758] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  359.962995][ T5758] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  360.922571][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  360.922621][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  361.167252][   T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  361.167298][   T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  361.353670][ T9643] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1104'.
[  362.027042][    C1] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71
[  362.037364][  T936] usb 7-1: USB disconnect, device number 5
[  362.061800][  T936] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  362.086565][  T936] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  362.099924][  T936] quatech2 7-1:0.51: device disconnected
[  363.423047][ T9646] comedi comedi1: reset error (fatal)
[  365.118305][ T9664] comedi comedi1: reset error (fatal)
[  365.234954][ T9685] gadgetfs: bound to dummy_udc driver
[  365.521776][   T10] usb 1-1: new full-speed USB device number 17 using dummy_hcd
[  365.529630][    C0] gadgetfs: connected
[  365.529877][   T10] gadgetfs: disconnected
[  365.688589][    C0] gadgetfs: connected
[  365.697411][   T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00
[  365.708894][   T10] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  365.708977][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  365.744201][    C0] gadgetfs: configuration #1
[  367.571814][ T9703] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1124'.
[  367.737510][ T9716] loop8: detected capacity change from 0 to 1024
[  367.755755][ T9716] ext4: Unknown parameter 'fscontext'
[  367.775249][ T9685] gadgetfs: suspended from state 3
[  367.781016][   T10] usb 1-1: USB disconnect, device number 17
[  367.792962][ T9685] gadgetfs: disconnected
[  367.903164][    T9] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  367.980965][ T9721] gadgetfs: bound to dummy_udc driver
[  368.073084][    T9] usb 8-1: Using ep0 maxpacket: 32
[  368.080394][    T9] usb 8-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  368.097497][    T9] usb 8-1: config 0 has an invalid interface number: 51 but max is 0
[  368.097572][    T9] usb 8-1: config 0 has no interface number 0
[  368.121236][    T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  368.121288][    T9] usb 8-1: Product: syz
[  368.121331][    T9] usb 8-1: Manufacturer: syz
[  368.121356][    T9] usb 8-1: SerialNumber: syz
[  368.157570][    T9] usb 8-1: config 0 descriptor??
[  368.193979][    T9] quatech2 8-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  368.251862][   T10] usb 1-1: new full-speed USB device number 18 using dummy_hcd
[  368.259612][    C0] gadgetfs: connected
[  368.259846][   T10] gadgetfs: disconnected
[  368.390880][    T9] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  368.408937][    T9] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  368.418906][    C0] gadgetfs: connected
[  368.424625][   T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00
[  368.434233][   T10] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  368.443449][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  368.459526][    C0] gadgetfs: configuration #1
[  368.771339][ T9721] gadgetfs: suspended from state 3
[  368.778770][    T9] usb 1-1: USB disconnect, device number 18
[  368.786837][ T9721] gadgetfs: disconnected
[  369.124736][ T9746] loop8: detected capacity change from 0 to 128
[  369.144669][ T9746] ext4: Unknown parameter 'measure'
[  369.152196][ T9726] comedi comedi1: reset error (fatal)
[  372.337182][    C0] usb 8-1: qt2_read_bulk_callback - non-zero urb status: -71
[  372.346808][   T10] usb 8-1: USB disconnect, device number 6
[  372.384716][   T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  372.432879][   T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  372.451957][   T10] quatech2 8-1:0.51: device disconnected
[  372.618014][ T9774] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1141'.
[  372.860954][ T9786] gadgetfs: bound to dummy_udc driver
[  373.104038][   T10] usb 1-1: new full-speed USB device number 19 using dummy_hcd
[  373.111954][    C0] gadgetfs: connected
[  373.118013][   T10] gadgetfs: disconnected
[  373.282797][    C0] gadgetfs: connected
[  373.290881][   T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00
[  373.300521][   T10] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  373.300571][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  373.339971][    C0] gadgetfs: configuration #1
[  373.591973][  T936] gadgetfs: suspended from state 3
[  373.592082][  T936] gadgetfs: disconnected
[  373.601380][  T936] usb 1-1: USB disconnect, device number 19
[  374.361363][ T9817] loop6: detected capacity change from 0 to 2048
[  374.382997][  T756] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  374.450338][ T9817] Alternate GPT is invalid, using primary GPT.
[  374.457921][ T9817]  loop6: p2 p3 p7
[  374.515368][ T9803] comedi comedi1: reset error (fatal)
[  374.773506][  T756] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  374.821537][ T5936] udevd[5936]: inotify_add_watch(7, /dev/loop6p7, 10) failed: No such file or directory
[  374.850239][ T5643] udevd[5643]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory
[  374.856643][ T5948] udevd[5948]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[  375.042765][  T756] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  375.254098][  T756] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  375.529644][ T9844] loop6: detected capacity change from 0 to 64
[  376.731772][ T5736] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  376.794998][ T9857] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1160'.
[  376.890180][ T5736] usb 1-1: Using ep0 maxpacket: 32
[  376.901914][ T5736] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  376.906752][ T5736] usb 1-1: config 0 has an invalid interface number: 51 but max is 0
[  376.906780][ T5736] usb 1-1: config 0 has no interface number 0
[  376.916975][ T5736] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  376.917004][ T5736] usb 1-1: Product: syz
[  376.917065][ T5736] usb 1-1: Manufacturer: syz
[  376.917082][ T5736] usb 1-1: SerialNumber: syz
[  376.932529][ T5736] usb 1-1: config 0 descriptor??
[  376.948269][ T5736] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  376.991431][  T756] bridge_slave_1: left allmulticast mode
[  376.991514][  T756] bridge_slave_1: left promiscuous mode
[  376.992373][  T756] bridge0: port 2(bridge_slave_1) entered disabled state
[  377.054606][  T756] bridge_slave_0: left allmulticast mode
[  377.054646][  T756] bridge_slave_0: left promiscuous mode
[  377.054930][  T756] bridge0: port 1(bridge_slave_0) entered disabled state
[  377.067413][ T5619] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  377.082603][ T5619] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  377.091029][ T5619] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  377.094360][ T5619] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  377.095211][ T5619] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  377.183093][ T5736] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  377.222593][ T5736] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  377.505806][ T9869] gadgetfs: bound to dummy_udc driver
[  377.762853][    T9] usb 2-1: new full-speed USB device number 10 using dummy_hcd
[  377.770790][    C0] gadgetfs: connected
[  377.771008][    T9] gadgetfs: disconnected
[  377.911984][    C0] gadgetfs: connected
[  377.919441][    T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00
[  377.930151][    T9] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  377.930220][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  377.939581][ T1307] ieee802154 phy0 wpan0: encryption failed: -22
[  377.939957][ T1307] ieee802154 phy1 wpan1: encryption failed: -22
[  377.973215][    C0] gadgetfs: configuration #1
[  378.032655][  T756] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  378.060782][  T756] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  378.078453][  T756] bond0 (unregistering): Released all slaves
[  378.710511][ T9869] gadgetfs: suspended from state 3
[  378.712219][  T936] usb 2-1: USB disconnect, device number 10
[  378.716436][ T9869] gadgetfs: disconnected
[  378.977039][ T9896] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  379.308174][ T5619] Bluetooth: hci3: command tx timeout
[  379.860887][    C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71
[  379.871154][  T936] usb 1-1: USB disconnect, device number 20
[  379.883027][  T936] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  379.901167][  T936] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  379.913149][  T936] quatech2 1-1:0.51: device disconnected
[  379.928153][  T756] hsr_slave_0: left promiscuous mode
[  379.961976][  T756] hsr_slave_1: left promiscuous mode
[  379.963019][  T756] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  379.963043][  T756] batman_adv: batadv0: Removing interface: batadv_slave_0
[  379.993957][  T756] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  379.994015][  T756] batman_adv: batadv0: Removing interface: batadv_slave_1
[  380.038595][  T756] veth1_macvtap: left promiscuous mode
[  380.046032][  T756] veth0_macvtap: left promiscuous mode
[  380.051744][  T756] veth1_vlan: left promiscuous mode
[  380.057120][  T756] veth0_vlan: left promiscuous mode
[  380.325063][  T936] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  380.494106][  T936] usb 1-1: Using ep0 maxpacket: 32
[  380.500800][  T936] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  380.515825][  T936] usb 1-1: config 0 has an invalid interface number: 51 but max is 0
[  380.515882][  T936] usb 1-1: config 0 has no interface number 0
[  380.553028][  T936] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  380.553103][  T936] usb 1-1: Product: syz
[  380.553145][  T936] usb 1-1: Manufacturer: syz
[  380.553170][  T936] usb 1-1: SerialNumber: syz
[  380.605120][  T936] usb 1-1: config 0 descriptor??
[  380.619748][  T936] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  380.834745][ T9929] loop5: detected capacity change from 0 to 1024
[  380.845887][  T936] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  380.879309][  T936] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  381.606811][  T756] team0 (unregistering): Port device team_slave_1 removed
[  381.655832][  T756] team0 (unregistering): Port device team_slave_0 removed
[  381.851913][ T5619] Bluetooth: hci3: command tx timeout
[  381.938423][ T9942] jffs2: notice: (9942) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  382.242185][ T5272] 8021q: adding VLAN 0 to HW filter on device eth13
[  383.177683][    C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71
[  383.187803][   T25] usb 1-1: USB disconnect, device number 21
[  383.228466][   T25] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  383.294241][   T25] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  383.322010][   T25] quatech2 1-1:0.51: device disconnected
[  383.915776][ T9969] gadgetfs: bound to dummy_udc driver
[  383.932832][ T5619] Bluetooth: hci3: command tx timeout
[  384.426102][   T25] usb 1-1: new full-speed USB device number 22 using dummy_hcd
[  384.433927][    C1] gadgetfs: connected
[  384.438421][   T25] gadgetfs: disconnected
[  384.592778][    C1] gadgetfs: connected
[  384.602044][   T25] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00
[  384.611548][   T25] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  384.611654][   T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  384.670547][    C1] gadgetfs: configuration #1
[  385.075236][ T5774] gadgetfs: suspended from state 3
[  385.075785][ T5774] gadgetfs: disconnected
[  385.179537][ T5774] usb 1-1: USB disconnect, device number 22
[  385.740539][T10015] loop7: detected capacity change from 0 to 16384
[  385.864365][ T9859] bridge0: port 1(bridge_slave_0) entered blocking state
[  385.864504][ T9859] bridge0: port 1(bridge_slave_0) entered disabled state
[  385.864707][ T9859] bridge_slave_0: entered allmulticast mode
[  385.870935][ T9859] bridge_slave_0: entered promiscuous mode
[  385.878613][ T9859] bridge0: port 2(bridge_slave_1) entered blocking state
[  385.879664][ T9859] bridge0: port 2(bridge_slave_1) entered disabled state
[  385.879799][ T9859] bridge_slave_1: entered allmulticast mode
[  385.885806][ T9859] bridge_slave_1: entered promiscuous mode
[  385.929487][ T5272] 8021q: adding VLAN 0 to HW filter on device eth15
[  385.982122][T10017] loop7: detected capacity change from 16384 to 0
[  385.983006][    C0] I/O error, dev loop7, sector 64 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2
[  385.999554][    C0] I/O error, dev loop7, sector 5632 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 2
[  386.011719][ T5619] Bluetooth: hci3: command tx timeout
[  386.222572][ T9859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  386.324314][ T9561] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  386.374443][ T9859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  386.422906][ T9859] team0: Port device team_slave_0 added
[  386.459026][ T9561] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  386.525031][ T9859] team0: Port device team_slave_1 added
[  386.577020][T10028] gadgetfs: bound to dummy_udc driver
[  386.720768][ T9859] batman_adv: batadv0: Adding interface: batadv_slave_0
[  386.720808][ T9859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  386.720842][ T9859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  386.873153][ T9859] batman_adv: batadv0: Adding interface: batadv_slave_1
[  386.873202][ T9859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  386.873258][ T9859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  387.033913][ T9561] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  387.241283][ T5621] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  387.251289][ T5621] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  387.260700][ T5621] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  387.272350][ T5621] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  387.282669][ T5621] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  387.415696][ T9561] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  387.546785][T10047] loop0: detected capacity change from 0 to 1024
[  387.704248][ T9859] hsr_slave_0: entered promiscuous mode
[  387.889021][ T9859] hsr_slave_1: entered promiscuous mode
[  387.995389][ T9859] debugfs: 'hsr0' already exists in 'hsr'
[  388.016316][ T9859] Cannot create hsr debugfs directory
[  389.741767][ T5619] Bluetooth: hci2: command tx timeout
[  390.026410][ T9561] bridge_slave_1: left allmulticast mode
[  390.026477][ T9561] bridge_slave_1: left promiscuous mode
[  390.027081][ T9561] bridge0: port 2(bridge_slave_1) entered disabled state
[  390.064602][ T9561] bridge_slave_0: left allmulticast mode
[  390.064664][ T9561] bridge_slave_0: left promiscuous mode
[  390.068549][ T9561] bridge0: port 1(bridge_slave_0) entered disabled state
[  390.745172][ T9561] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  390.749296][ T9561] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  390.755850][ T9561] bond0 (unregistering): Released all slaves
[  391.128939][ T5272] 8021q: adding VLAN 0 to HW filter on device eth14
[  391.771860][ T5619] Bluetooth: hci2: command tx timeout
[  391.836432][ T9561] hsr_slave_0: left promiscuous mode
[  391.842981][ T9561] hsr_slave_1: left promiscuous mode
[  391.844012][ T9561] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  391.844034][ T9561] batman_adv: batadv0: Removing interface: batadv_slave_0
[  391.849920][ T9561] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  391.849944][ T9561] batman_adv: batadv0: Removing interface: batadv_slave_1
[  391.898425][ T9561] veth1_macvtap: left promiscuous mode
[  391.898496][ T9561] veth0_macvtap: left promiscuous mode
[  391.898608][ T9561] veth1_vlan: left promiscuous mode
[  391.898683][ T9561] veth0_vlan: left promiscuous mode
[  391.972065][ T5774] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  392.021080][T10120] loop6: detected capacity change from 0 to 1024
[  392.165258][ T5774] usb 5-1: Using ep0 maxpacket: 16
[  392.198099][ T5774] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  392.205689][ T5774] usb 5-1: config index 0 descriptor too short (expected 51443, got 18)
[  392.393177][ T5774] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  392.394683][ T5774] usb 5-1: Product: syz
[  392.394702][ T5774] usb 5-1: Manufacturer: syz
[  392.394719][ T5774] usb 5-1: SerialNumber: syz
[  392.585077][ T5774] r8152-cfgselector 5-1: Unknown version 0x0000
[  392.585127][ T5774] r8152-cfgselector 5-1: config 0 descriptor??
[  392.796916][ T5774] r8152-cfgselector 5-1: Unknown version 0x0000
[  392.797387][ T5774] r8152-cfgselector 5-1: No union descriptors
[  392.803927][ T5774] r8152-cfgselector 5-1: USB disconnect, device number 8
[  393.485617][ T9561] team0 (unregistering): Port device team_slave_1 removed
[  393.594686][ T9561] team0 (unregistering): Port device team_slave_0 removed
[  393.851730][ T5619] Bluetooth: hci2: command tx timeout
[  394.101864][T10134] comedi comedi1: reset error (fatal)
[  394.218883][ T5272] 8021q: adding VLAN 0 to HW filter on device eth16
[  394.306934][ T9859] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  394.326889][ T9859] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  394.332790][ T9859] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  394.360516][ T9859] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  394.473709][ T9859] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  394.495590][ T9859] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  394.501498][ T9859] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  394.530845][ T9859] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  395.931669][ T5619] Bluetooth: hci2: command tx timeout
[  396.023176][ T9859] 8021q: adding VLAN 0 to HW filter on device bond0
[  396.118818][ T9859] 8021q: adding VLAN 0 to HW filter on device team0
[  396.184937][  T756] bridge0: port 1(bridge_slave_0) entered blocking state
[  396.185079][  T756] bridge0: port 1(bridge_slave_0) entered forwarding state
[  396.214499][  T756] bridge0: port 2(bridge_slave_1) entered blocking state
[  396.214580][  T756] bridge0: port 2(bridge_slave_1) entered forwarding state
[  397.298250][T10040] bridge0: port 1(bridge_slave_0) entered blocking state
[  397.298378][T10040] bridge0: port 1(bridge_slave_0) entered disabled state
[  397.298549][T10040] bridge_slave_0: entered allmulticast mode
[  397.301233][T10040] bridge_slave_0: entered promiscuous mode
[  397.357317][T10040] bridge0: port 2(bridge_slave_1) entered blocking state
[  397.357403][T10040] bridge0: port 2(bridge_slave_1) entered disabled state
[  397.357523][T10040] bridge_slave_1: entered allmulticast mode
[  397.364694][T10040] bridge_slave_1: entered promiscuous mode
[  397.709379][T10040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  397.748519][T10040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  397.987019][T10040] team0: Port device team_slave_0 added
[  398.024137][T10040] team0: Port device team_slave_1 added
[  398.264134][T10196] jffs2: notice: (10196) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  398.301143][T10040] batman_adv: batadv0: Adding interface: batadv_slave_0
[  398.301182][T10040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  398.301220][T10040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  398.319310][T10040] batman_adv: batadv0: Adding interface: batadv_slave_1
[  398.319328][T10040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  398.319361][T10040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  398.726067][T10040] hsr_slave_0: entered promiscuous mode
[  398.735324][T10040] hsr_slave_1: entered promiscuous mode
[  398.746988][T10040] debugfs: 'hsr0' already exists in 'hsr'
[  398.747030][T10040] Cannot create hsr debugfs directory
[  399.029939][T10206] jffs2: notice: (10206) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  399.431156][ T5272] 8021q: adding VLAN 0 to HW filter on device eth17
[  401.075307][T10213] comedi comedi1: reset error (fatal)
[  401.815140][T10238] loop0: detected capacity change from 0 to 1024
[  402.550304][ T9859] 8021q: adding VLAN 0 to HW filter on device batadv0
[  403.625959][T10040] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  403.653915][T10040] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  403.664708][T10040] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  403.687929][T10040] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  403.698659][T10040] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  403.713191][T10040] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  403.723067][T10040] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  403.754777][T10040] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  403.952338][T10280] loop6: detected capacity change from 0 to 256
[  404.003646][ T5272] 8021q: adding VLAN 0 to HW filter on device eth18
[  404.114734][T10258] comedi comedi1: reset error (fatal)
[  404.180579][ T9859] veth0_vlan: entered promiscuous mode
[  404.238341][ T9859] veth1_vlan: entered promiscuous mode
[  404.293472][T10040] 8021q: adding VLAN 0 to HW filter on device bond0
[  404.427360][T10040] 8021q: adding VLAN 0 to HW filter on device team0
[  404.470970][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[  404.471117][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[  404.509129][ T9859] veth0_macvtap: entered promiscuous mode
[  404.560432][   T41] bridge0: port 2(bridge_slave_1) entered blocking state
[  404.560576][   T41] bridge0: port 2(bridge_slave_1) entered forwarding state
[  404.586639][ T9859] veth1_macvtap: entered promiscuous mode
[  404.800338][ T9859] batman_adv: batadv0: Interface activated: batadv_slave_0
[  404.862625][ T9859] batman_adv: batadv0: Interface activated: batadv_slave_1
[  404.925453][   T59] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  404.952719][  T756] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  405.031871][  T756] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  405.034304][  T756] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  405.364050][T10289] comedi comedi1: reset error (fatal)
[  405.669779][   T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  405.669828][   T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  405.877864][ T5272] 8021q: adding VLAN 0 to HW filter on device eth19
[  407.314218][   T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  407.325350][   T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  407.743481][T10329] loop4: detected capacity change from 0 to 1024
[  411.018281][T10040] 8021q: adding VLAN 0 to HW filter on device batadv0
[  411.220689][T10363] loop5: detected capacity change from 0 to 1024
[  411.234029][T10363] ext4: Unknown parameter 'fscontext'
[  411.284834][T10040] veth0_vlan: entered promiscuous mode
[  411.375888][T10040] veth1_vlan: entered promiscuous mode
[  411.578127][T10040] veth0_macvtap: entered promiscuous mode
[  411.608662][T10040] veth1_macvtap: entered promiscuous mode
[  411.661553][T10349] comedi comedi1: reset error (fatal)
[  411.725360][T10040] batman_adv: batadv0: Interface activated: batadv_slave_0
[  411.796914][T10040] batman_adv: batadv0: Interface activated: batadv_slave_1
[  411.980196][ T5272] 8021q: adding VLAN 0 to HW filter on device eth20
[  411.990179][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  412.032215][   T81] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  412.034154][ T1093] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  412.034596][ T1093] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  412.318035][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  412.318085][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  412.381161][T10385] jffs2: notice: (10385) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  412.752062][T10371] comedi comedi1: reset error (fatal)
[  412.782250][T10382] syzkaller0: entered promiscuous mode
[  412.782319][T10382] syzkaller0: entered allmulticast mode
[  412.822192][   T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  412.822252][   T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  412.901983][  T936] usb 5-1: new full-speed USB device number 9 using dummy_hcd
[  415.117506][  T936] usb 5-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40
[  415.130861][  T936] usb 5-1: unable to read config index 0 descriptor/start: -71
[  415.130919][  T936] usb 5-1: can't read configurations, error -71
[  417.239749][T10420] loop6: detected capacity change from 0 to 1024
[  418.086028][T10428] jffs2: notice: (10428) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  420.480743][T10442] comedi comedi1: reset error (fatal)
[  421.061310][T10471] loop4: detected capacity change from 0 to 1024
[  423.551904][T10477] comedi comedi1: reset error (fatal)
[  426.022984][T10502] loop0: detected capacity change from 0 to 32768
[  426.148550][T10502] (syz.0.1279,10502,1):ocfs2_check_set_options:1264 ERROR: ACL support requested but extended attributes feature is not enabled
[  426.188321][T10502] (syz.0.1279,10502,1):ocfs2_fill_super:1177 ERROR: status = -22
[  427.150851][ T5621] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  427.158924][ T5621] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  427.166173][ T5621] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  427.175277][ T5621] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  427.182897][ T5621] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  428.719360][ T5736] usb 1-1: new full-speed USB device number 23 using dummy_hcd
[  429.212138][ T5621] Bluetooth: hci6: command tx timeout
[  429.818265][T10523] comedi comedi1: reset error (fatal)
[  432.229499][ T5621] Bluetooth: hci6: command tx timeout
[  432.680815][T10057] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  432.909808][ T5619] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  432.921470][ T5619] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  432.929071][ T5619] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  432.949279][ T5619] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  432.958092][ T5619] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  433.075708][T10057] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  433.399889][T10057] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  433.757888][T10552] comedi comedi1: reset error (fatal)
[  433.932663][ T5736] usb 1-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40
[  433.944359][ T5736] usb 1-1: unable to read config index 0 descriptor/start: -32
[  433.944409][ T5736] usb 1-1: chopping to 0 config(s)
[  433.944446][ T5736] usb 1-1: can't read configurations, error -32
[  434.069808][T10057] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  434.080983][ T5736] usb 1-1: new full-speed USB device number 24 using dummy_hcd
[  434.215781][ T5736] usb 1-1: device descriptor read/64, error -32
[  434.254441][ T5619] Bluetooth: hci6: command tx timeout
[  434.324621][ T5736] usb usb1-port1: attempt power cycle
[  434.536534][T10587] loop6: detected capacity change from 0 to 256
[  434.684535][ T5736] usb 1-1: new full-speed USB device number 25 using dummy_hcd
[  434.712271][ T5736] usb 1-1: device descriptor read/8, error -32
[  434.961667][ T5736] usb 1-1: new full-speed USB device number 26 using dummy_hcd
[  434.972245][ T5621] Bluetooth: hci3: command tx timeout
[  434.982627][ T5736] usb 1-1: device descriptor read/8, error -32
[  435.073770][T10057] bridge_slave_1: left allmulticast mode
[  435.073837][T10057] bridge_slave_1: left promiscuous mode
[  435.074105][T10057] bridge0: port 2(bridge_slave_1) entered disabled state
[  435.092944][ T5736] usb usb1-port1: unable to enumerate USB device
[  435.143570][T10057] bridge_slave_0: left allmulticast mode
[  435.143642][T10057] bridge_slave_0: left promiscuous mode
[  435.143899][T10057] bridge0: port 1(bridge_slave_0) entered disabled state
[  435.424280][T10597] loop6: detected capacity change from 0 to 4096
[  436.002955][T10593] comedi comedi1: reset error (fatal)
[  436.158906][T10057] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  437.706910][ T5619] Bluetooth: hci3: command tx timeout
[  437.712553][ T5621] Bluetooth: hci6: command tx timeout
[  437.895595][T10057] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  437.910510][T10057] bond0 (unregistering): Released all slaves
[  438.004714][T10606] loop4: detected capacity change from 0 to 4096
[  438.943616][T10057] hsr_slave_0: left promiscuous mode
[  438.955821][T10057] hsr_slave_1: left promiscuous mode
[  438.958065][T10057] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  438.958088][T10057] batman_adv: batadv0: Removing interface: batadv_slave_0
[  438.978959][T10057] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  438.979012][T10057] batman_adv: batadv0: Removing interface: batadv_slave_1
[  439.049947][T10057] veth1_macvtap: left promiscuous mode
[  439.050032][T10057] veth0_macvtap: left promiscuous mode
[  439.050168][T10057] veth1_vlan: left promiscuous mode
[  439.050333][T10057] veth0_vlan: left promiscuous mode
[  439.382623][ T1307] ieee802154 phy0 wpan0: encryption failed: -22
[  439.382717][ T1307] ieee802154 phy1 wpan1: encryption failed: -22
[  439.772042][ T5621] Bluetooth: hci3: command tx timeout
[  440.162317][T10662] loop6: detected capacity change from 0 to 1024
[  440.372768][T10645] comedi comedi1: reset error (fatal)
[  440.446655][T10057] team0 (unregistering): Port device team_slave_1 removed
[  440.509435][T10057] team0 (unregistering): Port device team_slave_0 removed
[  442.536708][ T5621] Bluetooth: hci3: command tx timeout
[  442.581811][T10673] comedi comedi1: reset error (fatal)
[  443.774506][T10508] bridge0: port 1(bridge_slave_0) entered blocking state
[  443.774720][T10508] bridge0: port 1(bridge_slave_0) entered disabled state
[  443.774854][T10508] bridge_slave_0: entered allmulticast mode
[  443.776921][T10508] bridge_slave_0: entered promiscuous mode
[  443.780287][T10508] bridge0: port 2(bridge_slave_1) entered blocking state
[  443.780397][T10508] bridge0: port 2(bridge_slave_1) entered disabled state
[  443.780533][T10508] bridge_slave_1: entered allmulticast mode
[  443.784288][T10508] bridge_slave_1: entered promiscuous mode
[  443.820013][T10508] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  443.832715][T10508] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  445.649656][T10508] team0: Port device team_slave_0 added
[  445.826746][T10057] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  445.910178][T10508] team0: Port device team_slave_1 added
[  446.081316][T10508] batman_adv: batadv0: Adding interface: batadv_slave_0
[  446.091283][T10508] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  446.118313][T10508] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  446.199775][T10057] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  446.228169][T10508] batman_adv: batadv0: Adding interface: batadv_slave_1
[  446.239019][T10508] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  446.265745][T10508] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  446.507117][T10057] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  446.860417][T10508] hsr_slave_0: entered promiscuous mode
[  446.872110][T10508] hsr_slave_1: entered promiscuous mode
[  446.879430][T10508] debugfs: 'hsr0' already exists in 'hsr'
[  446.887034][T10508] Cannot create hsr debugfs directory
[  447.034636][T10057] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  447.802132][T10727] comedi comedi1: reset error (fatal)
[  448.123343][T10745] loop4: detected capacity change from 0 to 4096
[  448.353029][T10559] bridge0: port 1(bridge_slave_0) entered blocking state
[  448.353169][T10559] bridge0: port 1(bridge_slave_0) entered disabled state
[  448.353350][T10559] bridge_slave_0: entered allmulticast mode
[  448.389529][T10559] bridge_slave_0: entered promiscuous mode
[  448.419421][T10559] bridge0: port 2(bridge_slave_1) entered blocking state
[  448.419567][T10559] bridge0: port 2(bridge_slave_1) entered disabled state
[  448.419778][T10559] bridge_slave_1: entered allmulticast mode
[  448.428053][T10559] bridge_slave_1: entered promiscuous mode
[  448.628014][T10758] loop6: detected capacity change from 0 to 1024
[  448.877949][T10761] jffs2: notice: (10761) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  449.196460][T10559] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  449.224818][T10057] bridge_slave_1: left allmulticast mode
[  449.234989][T10057] bridge_slave_1: left promiscuous mode
[  449.235276][T10057] bridge0: port 2(bridge_slave_1) entered disabled state
[  449.298074][T10057] bridge_slave_0: left allmulticast mode
[  449.298133][T10057] bridge_slave_0: left promiscuous mode
[  449.298358][T10057] bridge0: port 1(bridge_slave_0) entered disabled state
[  450.785859][T10777] loop6: detected capacity change from 0 to 1024
[  452.270247][T10057] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  452.302924][T10057] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  452.319201][T10057] bond0 (unregistering): Released all slaves
[  452.526830][T10559] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  452.853268][T10559] team0: Port device team_slave_0 added
[  452.875705][T10559] team0: Port device team_slave_1 added
[  453.431601][T10791] comedi comedi1: reset error (fatal)
[  453.676067][T10559] batman_adv: batadv0: Adding interface: batadv_slave_0
[  453.676111][T10559] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  453.676171][T10559] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  453.702857][T10559] batman_adv: batadv0: Adding interface: batadv_slave_1
[  453.702880][T10559] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  453.702913][T10559] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  454.295332][T10057] hsr_slave_0: left promiscuous mode
[  454.310312][T10057] hsr_slave_1: left promiscuous mode
[  454.311374][T10057] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  454.311398][T10057] batman_adv: batadv0: Removing interface: batadv_slave_0
[  454.348867][T10057] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  454.349110][T10057] batman_adv: batadv0: Removing interface: batadv_slave_1
[  454.411156][T10057] veth1_macvtap: left promiscuous mode
[  454.411238][T10057] veth0_macvtap: left promiscuous mode
[  454.411371][T10057] veth1_vlan: left promiscuous mode
[  454.411447][T10057] veth0_vlan: left promiscuous mode
[  454.457760][T10825] loop4: detected capacity change from 0 to 1024
[  454.969095][T10834] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1338'.
[  455.530015][T10057] team0 (unregistering): Port device team_slave_1 removed
[  455.581416][T10057] team0 (unregistering): Port device team_slave_0 removed
[  455.582141][T10834] loop4: detected capacity change from 0 to 32768
[  455.591762][T10834] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1338 (10834)
[  455.680941][T10834] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  455.681023][T10834] BTRFS info (device loop4): using crc32c checksum algorithm
[  455.897365][T10834] BTRFS info (device loop4): enabling ssd optimizations
[  455.908320][T10834] BTRFS info (device loop4): turning on flush-on-commit
[  455.921078][T10834] BTRFS info (device loop4): enabling free space tree
[  455.921127][T10834] BTRFS info (device loop4): enabling auto defrag
[  455.921159][T10834] BTRFS info (device loop4): use lzo compression, level 1
[  455.921190][T10834] BTRFS info (device loop4): max_inline set to 4096
[  456.690969][T10559] hsr_slave_0: entered promiscuous mode
[  456.692327][T10559] hsr_slave_1: entered promiscuous mode
[  456.696915][T10559] debugfs: 'hsr0' already exists in 'hsr'
[  456.696937][T10559] Cannot create hsr debugfs directory
[  456.777383][ T5627] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  458.417565][T10909] loop5: detected capacity change from 0 to 1024
[  458.521843][  T187] usb 7-1: new full-speed USB device number 6 using dummy_hcd
[  458.540799][T10508] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  458.561210][T10508] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  458.572623][T10508] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  458.594817][T10508] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  458.677588][T10508] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  458.691852][  T187] usb 7-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40
[  458.703599][  T187] usb 7-1: unable to read config index 0 descriptor/start: -71
[  458.712210][  T187] usb 7-1: can't read configurations, error -71
[  458.717900][T10508] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  459.164516][T10508] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  459.184394][T10508] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  459.631636][  T936] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  459.793996][  T936] usb 1-1: Using ep0 maxpacket: 32
[  459.799693][  T936] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  459.811187][  T936] usb 1-1: config 0 has an invalid interface number: 51 but max is 0
[  459.811234][  T936] usb 1-1: config 0 has no interface number 0
[  459.829140][  T936] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  459.829202][  T936] usb 1-1: Product: syz
[  459.829240][  T936] usb 1-1: Manufacturer: syz
[  459.829264][  T936] usb 1-1: SerialNumber: syz
[  459.871497][  T936] usb 1-1: config 0 descriptor??
[  459.906583][  T936] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  460.174705][  T936] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  460.213341][  T936] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  460.254529][T10508] 8021q: adding VLAN 0 to HW filter on device bond0
[  460.356041][T10508] 8021q: adding VLAN 0 to HW filter on device team0
[  460.447322][ T1003] bridge0: port 1(bridge_slave_0) entered blocking state
[  460.447468][ T1003] bridge0: port 1(bridge_slave_0) entered forwarding state
[  460.657525][T10946] jffs2: notice: (10946) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  460.689799][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[  460.689947][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[  461.004461][T10559] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  461.020013][T10559] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  461.021028][T10559] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  461.038777][T10559] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  461.041513][T10559] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  461.044853][T10953] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1355'.
[  461.089831][T10559] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  461.116667][T10559] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  461.143449][T10559] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  461.766611][T10559] 8021q: adding VLAN 0 to HW filter on device bond0
[  461.845962][T10559] 8021q: adding VLAN 0 to HW filter on device team0
[  461.887825][T10057] bridge0: port 1(bridge_slave_0) entered blocking state
[  461.888013][T10057] bridge0: port 1(bridge_slave_0) entered forwarding state
[  461.989411][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  461.989626][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  462.222641][T10974] loop6: detected capacity change from 0 to 128
[  462.235517][T10974] ext4: Unknown parameter 'measure'
[  463.382662][    C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71
[  463.419919][   T25] usb 1-1: USB disconnect, device number 27
[  463.505846][   T25] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  463.544961][   T25] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  463.545788][   T25] quatech2 1-1:0.51: device disconnected
[  463.552264][T10953] loop4: detected capacity change from 0 to 32768
[  463.590863][T10953] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1355 (10953)
[  463.641020][T10953] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  463.641087][T10953] BTRFS info (device loop4): using crc32c checksum algorithm
[  463.835915][T10953] BTRFS info (device loop4): enabling ssd optimizations
[  463.835972][T10953] BTRFS info (device loop4): turning on flush-on-commit
[  463.836014][T10953] BTRFS info (device loop4): enabling free space tree
[  463.836041][T10953] BTRFS info (device loop4): enabling auto defrag
[  463.836075][T10953] BTRFS info (device loop4): use lzo compression, level 1
[  463.836106][T10953] BTRFS info (device loop4): max_inline set to 4096
[  463.960623][T10985] loop0: detected capacity change from 0 to 4096
[  464.182644][ T5627] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  464.936802][T10508] 8021q: adding VLAN 0 to HW filter on device batadv0
[  465.259157][T10508] veth0_vlan: entered promiscuous mode
[  465.310190][T10508] veth1_vlan: entered promiscuous mode
[  465.517321][T10508] veth0_macvtap: entered promiscuous mode
[  465.585904][T10508] veth1_macvtap: entered promiscuous mode
[  465.622204][T10508] batman_adv: batadv0: Interface activated: batadv_slave_0
[  465.643133][T10508] batman_adv: batadv0: Interface activated: batadv_slave_1
[  465.728262][T10559] 8021q: adding VLAN 0 to HW filter on device batadv0
[  465.733130][ T1003] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  465.733185][ T1003] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  465.733229][ T1003] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  465.733271][ T1003] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  468.427960][T11050] loop6: detected capacity change from 0 to 32768
[  468.501145][T11050] (syz.6.1366,11050,1):ocfs2_check_set_options:1264 ERROR: ACL support requested but extended attributes feature is not enabled
[  468.502371][T11050] (syz.6.1366,11050,1):ocfs2_fill_super:1177 ERROR: status = -22
[  468.728838][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  468.728885][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  468.756931][T10559] veth0_vlan: entered promiscuous mode
[  468.870277][T10559] veth1_vlan: entered promiscuous mode
[  469.057727][   T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  469.067067][   T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  469.230361][T10559] veth0_macvtap: entered promiscuous mode
[  469.264023][T11061] loop0: detected capacity change from 0 to 4096
[  469.318479][T10559] veth1_macvtap: entered promiscuous mode
[  469.461134][T10559] batman_adv: batadv0: Interface activated: batadv_slave_0
[  469.515016][T10559] batman_adv: batadv0: Interface activated: batadv_slave_1
[  469.582693][   T50] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  469.582777][   T50] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  469.582844][   T50] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  469.582895][   T50] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  470.186289][T10057] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  470.201797][T10057] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  470.313776][T11086] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1376'.
[  470.454749][ T1003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  470.469147][ T1003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  471.691928][T11086] loop4: detected capacity change from 0 to 32768
[  471.706516][T11086] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1376 (11086)
[  471.772787][T11086] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  471.772851][T11086] BTRFS info (device loop4): using crc32c checksum algorithm
[  471.872390][ T5272] 8021q: adding VLAN 0 to HW filter on device eth1
[  471.975135][T11086] BTRFS info (device loop4): enabling ssd optimizations
[  471.975194][T11086] BTRFS info (device loop4): turning on flush-on-commit
[  471.975236][T11086] BTRFS info (device loop4): enabling free space tree
[  471.975254][T11086] BTRFS info (device loop4): enabling auto defrag
[  471.975273][T11086] BTRFS info (device loop4): use lzo compression, level 1
[  471.975295][T11086] BTRFS info (device loop4): max_inline set to 4096
[  472.152521][ T5627] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  474.819740][T11167] loop4: detected capacity change from 0 to 1024
[  477.537536][T11181] comedi comedi1: reset error (fatal)
[  477.689483][T11184] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1402'.
[  478.176081][ T5272] 8021q: adding VLAN 0 to HW filter on device eth2
[  481.268113][T11227] loop0: detected capacity change from 0 to 1024
[  483.683511][ T5272] 8021q: adding VLAN 0 to HW filter on device eth3
[  483.707170][T11243] loop1: detected capacity change from 0 to 4096
[  486.078633][T11252] comedi comedi1: reset error (fatal)
[  486.520477][T11274] loop4: detected capacity change from 0 to 1024
[  488.375031][ T5272] 8021q: adding VLAN 0 to HW filter on device eth4
[  491.023278][T11330] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1422'.
[  491.233510][T11315] comedi comedi1: reset error (fatal)
[  491.620844][T11339] loop4: detected capacity change from 0 to 1024
[  493.492373][T11330] loop1: detected capacity change from 0 to 32768
[  493.611155][T11330] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1422 (11330)
[  493.674973][T11330] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  493.675029][T11330] BTRFS info (device loop1): using crc32c checksum algorithm
[  493.679452][ T5272] 8021q: adding VLAN 0 to HW filter on device eth21
[  495.251751][T11330] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR
[  495.252659][T11330] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR
[  495.280992][T11330] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR
[  495.281380][T11330] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR
[  495.281778][T11330] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR
[  495.409263][T11330] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR
[  495.409582][T11330] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR
[  495.434014][T11330] BTRFS error (device loop1): open_ctree failed: -ENOMEM
[  496.821826][T11389] comedi comedi1: reset error (fatal)
[  498.649980][T11423] loop5: detected capacity change from 0 to 1024
[  499.317562][T11426] loop0: detected capacity change from 0 to 1024
[  499.711002][ T5272] 8021q: adding VLAN 0 to HW filter on device eth22
[  499.772467][T11436] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1463'.
[  500.815291][ T1307] ieee802154 phy0 wpan0: encryption failed: -22
[  500.815386][ T1307] ieee802154 phy1 wpan1: encryption failed: -22
[  501.200238][T11436] loop1: detected capacity change from 0 to 32768
[  501.210716][T11436] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1463 (11436)
[  501.254368][T11436] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  501.254431][T11436] BTRFS info (device loop1): using crc32c checksum algorithm
[  501.509187][T11436] BTRFS info (device loop1): enabling ssd optimizations
[  501.509241][T11436] BTRFS info (device loop1): turning on flush-on-commit
[  501.509262][T11436] BTRFS info (device loop1): enabling free space tree
[  501.509282][T11436] BTRFS info (device loop1): enabling auto defrag
[  501.509303][T11436] BTRFS info (device loop1): use lzo compression, level 1
[  501.509326][T11436] BTRFS info (device loop1): max_inline set to 4096
[  501.801266][T10559] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  501.908537][T11449] comedi comedi1: reset error (fatal)
[  502.078122][T11485] loop3: detected capacity change from 0 to 1024
[  505.084719][T11500] jffs2: notice: (11500) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  509.016927][T11527] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1484'.
[  510.176614][T11527] loop3: detected capacity change from 0 to 32768
[  510.196918][T11527] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1484 (11527)
[  510.220252][T11554] loop0: detected capacity change from 0 to 1024
[  510.248692][T11527] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  510.248750][T11527] BTRFS info (device loop3): using crc32c checksum algorithm
[  510.842201][T11527] BTRFS info (device loop3): enabling ssd optimizations
[  510.842251][T11527] BTRFS info (device loop3): turning on flush-on-commit
[  510.842292][T11527] BTRFS info (device loop3): enabling free space tree
[  510.842311][T11527] BTRFS info (device loop3): enabling auto defrag
[  510.842331][T11527] BTRFS info (device loop3): use lzo compression, level 1
[  510.842354][T11527] BTRFS info (device loop3): max_inline set to 4096
[  512.834777][T10508] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  515.944508][T11612] gadgetfs: bound to dummy_udc driver
[  516.049517][T11613] loop5: detected capacity change from 0 to 1024
[  516.184014][ T5736] usb 1-1: new full-speed USB device number 28 using dummy_hcd
[  516.184773][    C1] gadgetfs: connected
[  516.193266][ T5736] gadgetfs: disconnected
[  516.343491][    C1] gadgetfs: connected
[  516.347665][ T5736] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00
[  516.348997][ T5736] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  516.349033][ T5736] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  516.386174][    C1] gadgetfs: configuration #1
[  516.902807][T11612] gadgetfs: suspended from state 3
[  516.909134][   T10] usb 1-1: USB disconnect, device number 28
[  516.919071][T11612] gadgetfs: disconnected
[  518.926322][T11632] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1505'.
[  519.308207][T11648] loop0: detected capacity change from 0 to 1024
[  519.317056][T11649] loop6: detected capacity change from 0 to 1024
[  520.164252][T11643] comedi comedi1: reset error (fatal)
[  522.007738][T11679] gadgetfs: bound to dummy_udc driver
[  522.241742][ T5736] usb 1-1: new full-speed USB device number 29 using dummy_hcd
[  522.241995][    C1] gadgetfs: connected
[  522.243266][ T5736] gadgetfs: disconnected
[  522.406063][    C1] gadgetfs: connected
[  522.415455][ T5736] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00
[  522.417324][ T5736] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  522.417368][ T5736] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  522.427034][    C1] gadgetfs: configuration #1
[  522.710684][T11699] loop0: detected capacity change from 0 to 1024
[  523.388583][T11679] gadgetfs: suspended from state 3
[  523.388682][T11679] gadgetfs: disconnected
[  523.406002][ T5736] usb 1-1: USB disconnect, device number 29
[  524.995737][T11711] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1523'.
[  525.028164][T11713] loop3: detected capacity change from 0 to 1024
[  526.935955][T11711] loop6: detected capacity change from 0 to 32768
[  526.949231][T11711] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1523 (11711)
[  527.024751][T11711] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  527.024814][T11711] BTRFS info (device loop6): using crc32c checksum algorithm
[  527.185147][T11711] BTRFS info (device loop6): enabling ssd optimizations
[  527.194766][T11711] BTRFS info (device loop6): turning on flush-on-commit
[  527.201501][T11711] BTRFS info (device loop6): enabling free space tree
[  527.201634][T11711] BTRFS info (device loop6): enabling auto defrag
[  527.201657][T11711] BTRFS info (device loop6): use lzo compression, level 1
[  527.201708][T11711] BTRFS info (device loop6): max_inline set to 4096
[  527.281625][T11728] comedi comedi1: reset error (fatal)
[  527.491402][ T6475] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  527.926701][T11769] gadgetfs: bound to dummy_udc driver
[  527.996036][T11773] loop0: detected capacity change from 0 to 1024
[  528.281826][ T5736] usb 1-1: new full-speed USB device number 30 using dummy_hcd
[  528.282809][    C1] gadgetfs: connected
[  528.282993][ T5736] gadgetfs: disconnected
[  528.283364][T11777] loop4: detected capacity change from 0 to 1024
[  528.722664][T11768] gadgetfs: suspended from state 2
[  529.283116][ T5736] usb 1-1: device not accepting address 30, error -71
[  531.494614][T11798] comedi comedi1: reset error (fatal)
[  532.184942][T11821] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1547'.
[  532.993056][T11830] gadgetfs: bound to dummy_udc driver
[  533.062687][T11817] comedi comedi1: reset error (fatal)
[  533.647937][T11842] gadgetfs: bound to dummy_udc driver
[  533.708262][T11821] loop3: detected capacity change from 0 to 32768
[  533.733769][T11821] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1547 (11821)
[  533.769871][T11821] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  533.769929][T11821] BTRFS info (device loop3): using crc32c checksum algorithm
[  533.876095][T11821] BTRFS info (device loop3): enabling ssd optimizations
[  533.884801][T11821] BTRFS info (device loop3): turning on flush-on-commit
[  533.892242][T11821] BTRFS info (device loop3): enabling free space tree
[  533.892271][T11821] BTRFS info (device loop3): enabling auto defrag
[  533.892295][T11821] BTRFS info (device loop3): use lzo compression, level 1
[  533.892323][T11821] BTRFS info (device loop3): max_inline set to 4096
[  533.907213][    T9] usb 1-1: new full-speed USB device number 32 using dummy_hcd
[  533.914642][    C0] gadgetfs: connected
[  533.921950][    T9] gadgetfs: disconnected
[  534.060321][T10508] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  534.107282][    C0] gadgetfs: connected
[  534.114178][    T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00
[  534.125510][    T9] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  534.138907][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  534.157862][    C0] gadgetfs: configuration #1
[  535.158165][T11842] gadgetfs: suspended from state 3
[  535.168891][ T5757] usb 1-1: USB disconnect, device number 32
[  535.171894][T11842] gadgetfs: disconnected
[  538.123202][T11911] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1567'.
[  539.184223][T11914] comedi comedi1: reset error (fatal)
[  539.530349][T11934] loop6: detected capacity change from 0 to 1024
[  540.094138][T11911] loop0: detected capacity change from 0 to 32768
[  540.107755][T11911] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1567 (11911)
[  540.390678][T11911] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  540.390740][T11911] BTRFS info (device loop0): using crc32c checksum algorithm
[  542.182682][T11911] BTRFS error (device loop0): open_ctree failed: -EINTR
[  543.579177][T11992] loop5: detected capacity change from 0 to 1024
[  545.261952][T11996] comedi comedi1: reset error (fatal)
[  548.189162][T12035] gadgetfs: bound to dummy_udc driver
[  548.472303][    T9] usb 1-1: new full-speed USB device number 33 using dummy_hcd
[  548.480094][    C0] gadgetfs: connected
[  548.480311][    T9] gadgetfs: disconnected
[  548.622160][    C0] gadgetfs: connected
[  548.627307][    T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00
[  548.638586][    T9] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  548.638657][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  548.669014][    C0] gadgetfs: configuration #1
[  549.677224][T12035] gadgetfs: suspended from state 3
[  549.677317][T12035] gadgetfs: disconnected
[  549.691452][ T5774] usb 1-1: USB disconnect, device number 33
[  549.989555][T12058] loop6: detected capacity change from 0 to 1024
[  553.641644][T12083] comedi comedi1: reset error (fatal)
[  554.091613][T12073] Bluetooth: hci6: command 0x0406 tx timeout
[  554.438039][T12101] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1593'.
[  555.407448][T12116] gadgetfs: bound to dummy_udc driver
[  556.035977][ T5736] usb 1-1: new full-speed USB device number 34 using dummy_hcd
[  556.036250][    C1] gadgetfs: connected
[  556.089349][ T5736] gadgetfs: disconnected
[  556.423269][    C1] gadgetfs: connected
[  557.049746][ T5736] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00
[  557.111567][ T5736] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  557.111643][ T5736] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  557.889825][T12125] loop6: detected capacity change from 0 to 32768
[  557.944180][    C1] gadgetfs: configuration #1
[  558.070226][T12125] (syz.6.1618,12125,0):ocfs2_check_set_options:1264 ERROR: ACL support requested but extended attributes feature is not enabled
[  558.093617][T12125] (syz.6.1618,12125,0):ocfs2_fill_super:1177 ERROR: status = -22
[  558.624810][   T10] gadgetfs: suspended from state 3
[  558.624939][   T10] gadgetfs: disconnected
[  558.683779][ T5774] usb 1-1: USB disconnect, device number 34
[  559.217727][ T5621] Bluetooth: hci3: command 0x0406 tx timeout
[  560.051308][T12160] loop3: detected capacity change from 0 to 1024
[  560.294897][ T1093] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  561.110133][ T1093] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  561.485570][ T1093] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  561.745358][ T1093] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  563.341057][ T1307] ieee802154 phy0 wpan0: encryption failed: -22
[  563.341146][ T1307] ieee802154 phy1 wpan1: encryption failed: -22
[  563.509694][T12182] gadgetfs: bound to dummy_udc driver
[  563.762780][   T30] usb 1-1: new full-speed USB device number 35 using dummy_hcd
[  563.763058][    C1] gadgetfs: connected
[  563.765144][   T30] gadgetfs: disconnected
[  563.908675][ T5621] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  563.919037][ T5621] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  563.922777][    C1] gadgetfs: connected
[  563.924725][   T30] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00
[  563.926476][   T30] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  563.926521][   T30] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  563.953722][    C1] gadgetfs: configuration #1
[  563.961945][ T5621] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  563.962977][ T5621] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  563.963674][ T5621] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  564.061057][T12200] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1636'.
[  564.152430][    T9] gadgetfs: suspended from state 3
[  564.161403][    T9] gadgetfs: disconnected
[  564.179856][ T6475] ==================================================================
[  564.179878][ T6475] BUG: KASAN: slab-use-after-free in __mutex_lock+0x154/0x1550
[  564.179904][ T6475] Read of size 8 at addr ffff88803438d858 by task syz-executor/6475
[  564.179922][ T6475] 
[  564.179932][ T6475] CPU: 1 UID: 0 PID: 6475 Comm: syz-executo
** replaying previous printk message **
[  564.179932][ T6475] CPU: 1 UID: 0 PID: 6475 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  564.179955][ T6475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  564.179968][ T6475] Call Trace:
[  564.179976][ T6475]  <TASK>
[  564.179985][ T6475]  dump_stack_lvl+0xe8/0x150
[  564.180017][ T6475]  print_address_description+0x55/0x1e0
[  564.180045][ T6475]  ? __mutex_lock+0x154/0x1550
[  564.180064][ T6475]  print_report+0x58/0x70
[  564.180089][ T6475]  kasan_report+0x117/0x150
[  564.180115][ T6475]  ? __mutex_lock+0x154/0x1550
[  564.180139][ T6475]  __mutex_lock+0x154/0x1550
[  564.180163][ T6475]  ? srso_alias_return_thunk+0x5/0xfbef5
[  564.180188][ T6475]  ? lockdep_hardirqs_on+0x7b/0x110
[  564.180220][ T6475]  ? ep_open+0x4e/0x270
[  564.180242][ T6475]  ? __pfx___mutex_lock+0x10/0x10
[  564.180260][ T6475]  ? apparmor_file_open+0x523/0x6c0
[  564.180296][ T6475]  ? __pfx_apparmor_file_open+0x10/0x10
[  564.180326][ T6475]  ? srso_alias_return_thunk+0x5/0xfbef5
[  564.180353][ T6475]  ep_open+0x4e/0x270
[  564.180372][ T6475]  ? do_dentry_open+0x807/0x1380
[  564.180396][ T6475]  ? __pfx_ep_open+0x10/0x10
[  564.180416][ T6475]  do_dentry_open+0x816/0x1380
[  564.180445][ T6475]  vfs_open+0x3b/0x340
[  564.180467][ T6475]  ? path_openat+0x1428/0x1d60
[  564.180501][ T6475]  path_openat+0x1443/0x1d60
[  564.180543][ T6475]  do_file_open+0x23e/0x4a0
[  564.180578][ T6475]  ? __pfx_do_file_open+0x10/0x10
[  564.180621][ T6475]  ? srso_alias_return_thunk+0x5/0xfbef5
[  564.180646][ T6475]  ? _raw_spin_unlock+0x28/0x50
[  564.180683][ T6475]  ? srso_alias_return_thunk+0x5/0xfbef5
[  564.180708][ T6475]  ? alloc_fd+0x651/0x6c0
[  564.180742][ T6475]  do_sys_openat2+0x115/0x200
[  564.180768][ T6475]  ? __pfx_do_sys_openat2+0x10/0x10
[  564.180793][ T6475]  ? srso_alias_return_thunk+0x5/0xfbef5
[  564.180820][ T6475]  ? srso_alias_return_thunk+0x5/0xfbef5
[  564.180849][ T6475]  ? kmem_cache_free+0x182/0x650
[  564.180872][ T6475]  __x64_sys_openat+0x138/0x170
[  564.180901][ T6475]  do_syscall_64+0x166/0x520
[  564.180921][ T6475]  ? trace_irq_disable+0x3b/0x140
[  564.180942][ T6475]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  564.180967][ T6475]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  564.180989][ T6475] RIP: 0033:0x7f67ec15e98e
[  564.181008][ T6475] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  564.181027][ T6475] RSP: 002b:00007ffe61a04fa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  564.181050][ T6475] RAX: ffffffffffffffda RBX: 0000555567094500 RCX: 00007f67ec15e98e
[  564.181065][ T6475] RDX: 0000000000000000 RSI: 00007ffe61a05110 RDI: ffffffffffffff9c
[  564.181079][ T6475] RBP: 00007ffe61a05110 R08: 0000000000000000 R09: 0000000000000000
[  564.181093][ T6475] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe61a06200
[  564.181107][ T6475] R13: 00007f67ec234474 R14: 00005555670944e8 R15: 0000000000000006
[  564.181134][ T6475]  </TASK>
[  564.181143][ T6475] 
[  564.181149][ T6475] Allocated by task 12182:
[  564.181161][ T6475]  kasan_save_track+0x3e/0x80
[  564.181183][ T6475]  __kasan_kmalloc+0x93/0xb0
[  564.181203][ T6475]  __kmalloc_cache_noprof+0x321/0x600
[  564.181235][ T6475]  gadgetfs_bind+0x277/0xad0
[  564.181254][ T6475]  gadget_bind_driver+0x2ca/0x9e0
[  564.181283][ T6475]  really_probe+0x254/0xae0
[  564.181305][ T6475]  __driver_probe_device+0x1e8/0x360
[  564.181325][ T6475]  driver_probe_device+0x4f/0x240
[  564.181346][ T6475]  __driver_attach+0x339/0x600
[  564.181365][ T6475]  bus_for_each_dev+0x23b/0x2c0
[  564.181390][ T6475]  bus_add_driver+0x345/0x670
[  564.181417][ T6475]  driver_register+0x23a/0x320
[  564.181440][ T6475]  usb_gadget_register_driver_owner+0xf9/0x270
[  564.181470][ T6475]  dev_config+0xe3c/0x12a0
[  564.181500][ T6475]  vfs_write+0x296/0xba0
[  564.181528][ T6475]  ksys_write+0x150/0x270
[  564.181557][ T6475]  do_syscall_64+0x166/0x520
[  564.181576][ T6475]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  564.181597][ T6475] 
[  564.181604][ T6475] Freed by task 9:
[  564.181613][ T6475]  kasan_save_track+0x3e/0x80
[  564.181631][ T6475]  kasan_save_free_info+0x40/0x50
[  564.181666][ T6475]  __kasan_slab_free+0x5c/0x80
[  564.181685][ T6475]  kfree+0x1c5/0x650
[  564.181712][ T6475]  destroy_ep_files+0x29f/0x330
[  564.181731][ T6475]  gadgetfs_unbind+0x109/0x2b0
[  564.181749][ T6475]  gadget_unbind_driver+0x1cb/0x410
[  564.181782][ T6475]  device_release_driver_internal+0x48b/0x880
[  564.181806][ T6475]  driver_detach+0x1f3/0x2d0
[  564.181829][ T6475]  bus_remove_driver+0x226/0x320
[  564.181860][ T6475]  usb_gadget_unregister_driver+0x4e/0x70
[  564.181891][ T6475]  dev_release+0x83/0x200
[  564.181923][ T6475]  __fput+0x418/0xa50
[  564.181950][ T6475]  delayed_fput+0x63/0xa0
[  564.181976][ T6475]  process_scheduled_works+0xc3d/0x1630
[  564.182006][ T6475]  worker_thread+0xa47/0xfb0
[  564.182036][ T6475]  kthread+0x38b/0x480
[  564.182057][ T6475]  ret_from_fork+0x514/0xb70
[  564.182078][ T6475]  ret_from_fork_asm+0x1a/0x30
[  564.182115][ T6475] 
[  564.182122][ T6475] The buggy address belongs to the object at ffff88803438d800
[  564.182122][ T6475]  which belongs to the cache kmalloc-512 of size 512
[  564.182143][ T6475] The buggy address is located 88 bytes inside of
[  564.182143][ T6475]  freed 512-byte region [ffff88803438d800, ffff88803438da00)
[  564.182169][ T6475] 
[  564.182176][ T6475] The buggy address belongs to the physical page:
[  564.182188][ T6475] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3438c
[  564.182208][ T6475] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  564.182229][ T6475] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  564.182251][ T6475] page_type: f5(slab)
[  564.182274][ T6475] raw: 00fff00000000040 ffff88801b041c80 dead000000000100 dead000000000122
[  564.182296][ T6475] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  564.182320][ T6475] head: 00fff00000000040 ffff88801b041c80 dead000000000100 dead000000000122
[  564.182342][ T6475] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  564.182365][ T6475] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff
[  564.182387][ T6475] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  564.182401][ T6475] page dumped because: kasan: bad access detected
[  564.182414][ T6475] page_owner tracks the page as allocated
[  564.182423][ T6475] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5618, tgid 5618 (syz-executor), ts 86855041359
[  564.182464][ T6475]  post_alloc_hook+0x1f9/0x250
[  564.182498][ T6475]  get_page_from_freelist+0x2209/0x2280
[  564.182522][ T6475]  __alloc_frozen_pages_noprof+0x217/0x5a0
[  564.182546][ T6475]  allocate_slab+0x7d/0x620
[  564.182574][ T6475]  refill_objects+0x2d5/0x350
[  564.182604][ T6475]  __pcs_replace_empty_main+0x2c8/0x6c0
[  564.182633][ T6475]  __kmalloc_cache_noprof+0x39b/0x600
[  564.182677][ T6475]  __ipv6_dev_mc_inc+0x447/0xaf0
[  564.182711][ T6475]  ipv6_add_dev+0xe45/0x13a0
[  564.182744][ T6475]  addrconf_notify+0x771/0x1050
[  564.182768][ T6475]  notifier_call_chain+0x1a5/0x3d0
[  564.182804][ T6475]  register_netdevice+0x18a4/0x1eb0
[  564.182833][ T6475]  team_newlink+0x120/0x170
[  564.182861][ T6475]  rtnl_newlink_create+0x305/0x7b0
[  564.182888][ T6475]  rtnl_newlink+0x166d/0x1c30
[  564.182911][ T6475]  rtnetlink_rcv_msg+0x802/0xc00
[  564.182933][ T6475] page last free pid 4986 tgid 4986 ts 28956165361 stack trace:
[  564.182951][ T6475]  __free_frozen_pages+0xc93/0xd90
[  564.182986][ T6475]  __slab_free+0x274/0x2c0
[  564.183007][ T6475]  qlist_free_all+0x99/0x100
[  564.183027][ T6475]  kasan_quarantine_reduce+0x148/0x160
[  564.183065][ T6475]  __kasan_slab_alloc+0x22/0x80
[  564.183089][ T6475]  kmem_cache_alloc_noprof+0x2b9/0x600
[  564.183123][ T6475]  do_getname+0x2e/0x250
[  564.183155][ T6475]  vfs_fstatat+0x45/0x170
[  564.183180][ T6475]  __x64_sys_newfstatat+0x151/0x200
[  564.183208][ T6475]  do_syscall_64+0x166/0x520
[  564.183229][ T6475]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  564.183254][ T6475] 
[  564.183261][ T6475] Memory state around the buggy address:
[  564.183274][ T6475]  ffff88803438d700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  564.183292][ T6475]  ffff88803438d780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  564.183309][ T6475] >ffff88803438d800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  564.183323][ T6475]                                                     ^
[  564.183337][ T6475]  ffff88803438d880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  564.183354][ T6475]  ffff88803438d900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  564.183367][ T6475] ==================================================================
[  564.217248][ T6475] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  565.057279][ T6475] CPU: 1 UID: 0 PID: 6475 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  565.066730][ T6475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  565.076782][ T6475] Call Trace:
[  565.080046][ T6475]  <TASK>
[  565.082966][ T6475]  vpanic+0x56d/0xa60
[  565.086970][ T6475]  ? __pfx_vpanic+0x10/0x10
[  565.091478][ T6475]  ? srso_alias_return_thunk+0x5/0xfbef5
[  565.097121][ T6475]  panic+0xc5/0xd0
[  565.100857][ T6475]  ? __pfx_panic+0x10/0x10
[  565.105305][ T6475]  ? preempt_schedule_thunk+0x16/0x40
[  565.110678][ T6475]  ? srso_alias_return_thunk+0x5/0xfbef5
[  565.116301][ T6475]  ? preempt_schedule_thunk+0x16/0x40
[  565.121677][ T6475]  ? __mutex_lock+0x154/0x1550
[  565.126465][ T6475]  check_panic_on_warn+0x89/0xb0
[  565.131398][ T6475]  ? __mutex_lock+0x154/0x1550
[  565.136144][ T6475]  end_report+0x73/0x170
[  565.140402][ T6475]  ? __mutex_lock+0x154/0x1550
[  565.145149][ T6475]  kasan_report+0x128/0x150
[  565.149641][ T6475]  ? __mutex_lock+0x154/0x1550
[  565.154397][ T6475]  __mutex_lock+0x154/0x1550
[  565.158978][ T6475]  ? srso_alias_return_thunk+0x5/0xfbef5
[  565.164603][ T6475]  ? lockdep_hardirqs_on+0x7b/0x110
[  565.169804][ T6475]  ? ep_open+0x4e/0x270
[  565.173949][ T6475]  ? __pfx___mutex_lock+0x10/0x10
[  565.178963][ T6475]  ? apparmor_file_open+0x523/0x6c0
[  565.184162][ T6475]  ? __pfx_apparmor_file_open+0x10/0x10
[  565.189720][ T6475]  ? srso_alias_return_thunk+0x5/0xfbef5
[  565.195354][ T6475]  ep_open+0x4e/0x270
[  565.199329][ T6475]  ? do_dentry_open+0x807/0x1380
[  565.204258][ T6475]  ? __pfx_ep_open+0x10/0x10
[  565.208832][ T6475]  do_dentry_open+0x816/0x1380
[  565.213597][ T6475]  vfs_open+0x3b/0x340
[  565.217649][ T6475]  ? path_openat+0x1428/0x1d60
[  565.222422][ T6475]  path_openat+0x1443/0x1d60
[  565.227038][ T6475]  do_file_open+0x23e/0x4a0
[  565.231595][ T6475]  ? __pfx_do_file_open+0x10/0x10
[  565.236628][ T6475]  ? srso_alias_return_thunk+0x5/0xfbef5
[  565.242251][ T6475]  ? _raw_spin_unlock+0x28/0x50
[  565.247109][ T6475]  ? srso_alias_return_thunk+0x5/0xfbef5
[  565.252735][ T6475]  ? alloc_fd+0x651/0x6c0
[  565.257065][ T6475]  do_sys_openat2+0x115/0x200
[  565.261735][ T6475]  ? __pfx_do_sys_openat2+0x10/0x10
[  565.266925][ T6475]  ? srso_alias_return_thunk+0x5/0xfbef5
[  565.272552][ T6475]  ? srso_alias_return_thunk+0x5/0xfbef5
[  565.278258][ T6475]  ? kmem_cache_free+0x182/0x650
[  565.283185][ T6475]  __x64_sys_openat+0x138/0x170
[  565.288028][ T6475]  do_syscall_64+0x166/0x520
[  565.292602][ T6475]  ? trace_irq_disable+0x3b/0x140
[  565.297737][ T6475]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  565.303845][ T6475]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  565.309732][ T6475] RIP: 0033:0x7f67ec15e98e
[  565.314141][ T6475] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  565.333742][ T6475] RSP: 002b:00007ffe61a04fa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  565.342186][ T6475] RAX: ffffffffffffffda RBX: 0000555567094500 RCX: 00007f67ec15e98e
[  565.350147][ T6475] RDX: 0000000000000000 RSI: 00007ffe61a05110 RDI: ffffffffffffff9c
[  565.358111][ T6475] RBP: 00007ffe61a05110 R08: 0000000000000000 R09: 0000000000000000
[  565.366074][ T6475] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe61a06200
[  565.374037][ T6475] R13: 00007f67ec234474 R14: 00005555670944e8 R15: 0000000000000006
[  565.382018][ T6475]  </TASK>
[  565.385265][ T6475] Kernel Offset: disabled
[  565.389577][ T6475] Rebooting in 86400 seconds..